{"report_id":"93f16b47-0b80-47dc-be39-30ea9fbc0eda","version":0,"status":"done","tags":[],"date":"2026-07-31T00:11:04Z","url":{"schema":"http","addr":"y32b.top","fqdn":"y32b.top","domain":"y32b.top","tld":"top"},"ip":{"addr":"103.244.148.113","port":0,"asn":135357,"as":"HONG KONG KOWLOON TELECOMMUNICATIONS CO.,LIMITED","country":"Hong Kong","country_code":"HK"},"final":{"url":{"schema":"https","addr":"y42t.top/home","fqdn":"y42t.top","domain":"y42t.top","tld":"top"},"title":"welcome-BET365","dom":{"size":465662,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (49929)","md5":"7e763ba300cd63a2edb2e6891d3346b2","sha1":"1c0ead51d567c0a2ac6783b14b2e963d394d874d","sha256":"51db29dfce07dcadac192f22159e6df8798f7e220789d952a7309fc9009580a2","sha512":"bfadd76bbf28476cb4cfd5628085ab4c2a84b3afe45ebc8da5a610ec04add5cccd6eedfd136b299e8abe935b5a90a4d2027e73388665ff420dce91a6843ee6f6","ssdeep":"1536:e0PfVulmHEwe3EoydxJPhfbO1lJ1ThU7MVOodb7nSakNIdlBBHywc8SiVqUiVqvX:7PNuEHENUXTO1l/TMIlPXS1V4","tlshash":"09a409f4424c02b6e54b878dfc726e6636e2319bffc60608f3ed4691abe2dc6d419851","dom_hash":"domhashf814c530a9cca1f26acdb31d028aa651","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"y32b.top","fqdn":"y32b.top","domain":"y32b.top","tld":"top"},"ip":{"addr":"103.244.148.113","port":0,"asn":135357,"as":"HONG KONG KOWLOON TELECOMMUNICATIONS CO.,LIMITED","country":"Hong Kong","country_code":"HK"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-09-04T00:11:04Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":5}},"detection":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-31","alert":"Phishing Block","trigger":"y42t.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-31","alert":"Sinkholed","trigger":"y42t.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-31","alert":"Sinkholed","trigger":"y32b.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-31","alert":"Sinkholed","trigger":"y32b.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-31","alert":"Sinkholed","trigger":"ssl.hw301.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"y42t.top","ip":{"addr":"154.39.104.138","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"domain_registered":"2026-07-17","domain_rank":0,"first_seen":"2026-07-26T23:48:28.714981Z","last_seen":"2026-07-26T23:48:28.714981Z","alert_count":276,"request_count":138,"received_data":11038461,"sent_data":78659,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"photo.365live88.com","ip":{"addr":"154.41.93.240","port":443,"asn":174,"as":"COGENT-174","country":"United States","country_code":"US"},"domain_registered":"2022-08-16","domain_rank":0,"first_seen":"2025-11-02T03:06:46.95373Z","last_seen":"2026-07-28T13:17:52.564279Z","alert_count":0,"request_count":106,"received_data":4283063,"sent_data":61692,"comment":"","tags":null,"fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"y32b.top","ip":{"addr":"103.244.148.114","port":80,"asn":135357,"as":"HONG KONG KOWLOON TELECOMMUNICATIONS CO.,LIMITED","country":"Hong Kong","country_code":"HK"},"domain_registered":"2026-06-09","domain_rank":0,"first_seen":"2026-07-31T00:11:13.678014Z","last_seen":"2026-07-31T00:11:13.678014Z","alert_count":4,"request_count":2,"received_data":129,"sent_data":870,"comment":"","tags":null,"fingerprints":null},{"fqdn":"ssl.hw301.xyz","ip":{"addr":"23.224.132.157","port":8900,"asn":40065,"as":"CNSERVERS","country":"United States","country_code":"US"},"domain_registered":"2026-04-19","domain_rank":0,"first_seen":"2026-04-22T11:08:02.807624Z","last_seen":"2026-07-25T01:31:15.225707Z","alert_count":1,"request_count":1,"received_data":252,"sent_data":543,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"y42t.top/home","fqdn":"y42t.top","domain":"y42t.top","tld":"top"},"ip":{"addr":"154.39.104.138","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"introduction_type":"Function","is_inline":false,"md5":"572cb94037fffc2a0a53b465972e15f1","sha1":"0d679b041a7c1ca45cc99e2d229fc2b86762838d","sha256":"6487e4bdd0f51bbfd9105810a41755847fdae2c274e2fc325cd22356d7707e35","sha512":"f7c4db7986d362b58ff4b4646cdeb71992c0ce28949773c4471915f2cc8828329445777e228ef248f508f721a33dfea3d5694bc7ec18dc6c00134ee23155ff32","ssdeep":"","tlshash":"e3800455714110004f57115050171c444030007155407cc011c0d4710d51030110545c","size":34,"data":"","first_seen":"2023-04-11T21:16:40Z","last_seen":"2026-07-31T20:08:49.94788Z","times_seen":90798,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"y42t.top/js/chunk-init-1656f0b4.1781011881923.32336986.js","fqdn":"y42t.top","domain":"y42t.top","tld":"top"},"ip":{"addr":"154.39.104.138","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"149a9a32eef525724cd200e4dce7a032","sha1":"29b091925cae6d90319391653e40685f6e6c5735","sha256":"10fcb7c4e44a141964cb31c527462c6e56f78d95c956fb02c50c61fc576cefd2","sha512":"62d80403786c13019e86e1c6b991d73cf52ff5bd25d4eeaec34ca12125d677604a269fc6c56ef301f074c42798f8e7935df623d6a0a62559d70749e53082085f","ssdeep":"1536:z2twqIPBoVbzfsO9ZuqpiXXIOU6Qgpp6KkB2EnBDsAxdrkm4SgiqvHynjM5TCif9:z2twqhOIK2nCLdyACifMur06/D","tlshash":"6dd3ec54b7d0b4b442cf13e6711b2475e3a61ca22058e8f0e31dee647f35689d26faac","size":136038,"data":"","first_seen":"2026-06-12T19:29:57.333908Z","last_seen":"2026-07-31T12:41:47.038017Z","times_seen":972,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"y42t.top/js/13575.1781011881923.cda1d494.js","fqdn":"y42t.top","domain":"y42t.top","tld":"top"},"ip":{"addr":"154.39.104.138","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"65e5fffbcacf52710ad963a4aeede3be","sha1":"f9c16a3c86649aeacf18e736faacff0cf78192e7","sha256":"36f42498ee253b0d1d5e7ec8bdf406f05c4c91e72f64169b1ff67435d2069099","sha512":"96e8263c115ca75ff63f6ce70ba8ad5af370662f86c2f95a8960a5aa5a30ce4134fa01d7fbd1694ce37f111b69e3e418f0542a7ab1bae4cec570c8c3d8d08986","ssdeep":"1536:917BBHFeKRKp+3ELSPtj6x2DgJoG7PIDmj9VA+s69JAFdE6WIzl+Ik1+eXMa7a4H:7jHoKRKphCnDgJoec+IDWIzls+7Xr0X7","tlshash":"23141a84764170b8c396a165322f601ae22f789650dd9c24f3789ba47f7470df26fabc","size":194916,"data":"","first_seen":"2026-06-12T19:29:57.266361Z","last_seen":"2026-07-31T12:41:47.042675Z","times_seen":967,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"y42t.top/","fqdn":"y42t.top","domain":"y42t.top","tld":"top"},"ip":{"addr":"154.39.104.138","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":true,"md5":"2bbd69200a3d758f89e8076a123ed982","sha1":"dfe2d66f2d85ddc2008401ed15dcba3515392f37","sha256":"b79cd0c532adb639e6139c9394527b217982efdbff4969494986edacd943e2b7","sha512":"ffb7e75ea86b911ed842f7525c08ad5cd4ef5085736e757c47f3b4e09b3c9497dad089fae69953dd819f57b3ac1cb3a54ba037f9a8ad3fa37d7aeac9ac36bcb3","ssdeep":"","tlshash":"07c0c0770f2c7f14110310230174f3ac5431c028fc15b302331f40018b50b0d0c30e40","size":178,"data":"","first_seen":"2026-05-25T23:43:55.293244Z","last_seen":"2026-07-31T12:41:47.186317Z","times_seen":1101,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"y42t.top/","fqdn":"y42t.top","domain":"y42t.top","tld":"top"},"ip":{"addr":"154.39.104.138","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":true,"md5":"da7d6cf21ba9b37cce394593785671f7","sha1":"aabeaf8e874da29cee7e1645707577446b8de63b","sha256":"6912a38811267077bd6dd2630bccd25ba04b653b4967a636d75a6ec97c5bd2fd","sha512":"9739d97867822d248e0083a78d8657485d85e70bbb7a75e0fccd283c2bdb980ded0ea78b1a4fb0540c529e602ba88286021df0553bb23e45fc91281f64a4db49","ssdeep":"","tlshash":"de31ce286eb29531a413612a1f6ff2843235d62f3148ef003f0cc7651f24d6ba6356d5","size":1686,"data":"","first_seen":"2026-06-12T10:00:06.928319Z","last_seen":"2026-07-31T12:41:47.187425Z","times_seen":1035,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"y42t.top/","fqdn":"y42t.top","domain":"y42t.top","tld":"top"},"ip":{"addr":"154.39.104.138","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":true,"md5":"a15b4803f5b926cf35dd50ad665005e3","sha1":"0dd0dd998736dc9db4ab3c7ee8f7cabc8e1e341b","sha256":"201c5550359d1e530619f58a4f77bfbe382200e2b0c85d4136df96523aee625b","sha512":"e21d282a7abbc3b8aba31153d7969b54c647e3c2bc2f1c786a6f3894ee0322540fc37d99351e5d8998991198a98b26c470c16fef19e5627cff75e0a6157f6e2d","ssdeep":"","tlshash":"b7700000be08a0a80000a0202828080c280238a0803b03080802c8023aa8c80288a802","size":24,"data":"","first_seen":"2026-05-25T23:43:55.294961Z","last_seen":"2026-07-31T12:41:47.188526Z","times_seen":1101,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"y42t.top/","fqdn":"y42t.top","domain":"y42t.top","tld":"top"},"ip":{"addr":"154.39.104.138","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":true,"md5":"8f54a6c689ae3fb37bcded37e79fea08","sha1":"0861325faf70167325da7dfd6b4059a6991136aa","sha256":"c9a960988ba6d8cfea2c7e709385252a139280898d9b4010703981ce03184a1c","sha512":"08111d473c9567e7da677c4a5e61e232f670b58e2bac4f1a1d96005b83214368e6bdcf36efa1b99aa4708beb8a11bb3378270d70d1a8faa3b2fbea3abb10b4e6","ssdeep":"","tlshash":"82700008ec0088ab0000a00028000cc8380a00208a3b838f8a00008a2ea28b0000ac00","size":24,"data":"","first_seen":"2026-05-25T23:43:55.29586Z","last_seen":"2026-07-31T12:41:47.189626Z","times_seen":1101,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"y42t.top/","fqdn":"y42t.top","domain":"y42t.top","tld":"top"},"ip":{"addr":"154.39.104.138","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":true,"md5":"c45b02b1f350ecba8716f39faa1d6dd9","sha1":"323d186c69f92adfbf21ac33010643886a3ada59","sha256":"81d9bb79dfb8f66568da929cceb338198f5fb8ef0d422c9bc19a97944981d729","sha512":"6cb26d6b01335a5779cf876ebce242b675745c80857fe191e0f42b927c5b8c40ff0896f64e6c28640c9bc1d9380344c6282790f6a7341d5ab74eba28fe93f4d2","ssdeep":"","tlshash":"eb017d9e483788107b2225bd537f5089f1a2516f8e8bcc103c1e5b00eff48ab25a2bd9","size":738,"data":"","first_seen":"2026-05-25T23:43:55.296647Z","last_seen":"2026-07-31T12:41:47.190663Z","times_seen":1101,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"y42t.top/","fqdn":"y42t.top","domain":"y42t.top","tld":"top"},"ip":{"addr":"154.39.104.138","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":true,"md5":"077d4be9ad272f7d475481152daff715","sha1":"2f46a2943ac225687c445e0416015d1f97b7f0a1","sha256":"8d289c243d18cc7608ad59bd1b5d4c5edc5a26521213972903495b5ce1f78ff7","sha512":"310f88318435a5cee999868c4f24f906af4f7ba99540a2a5bf79b68f1cc1dc5fcd84b3c45051e8bc2e8ad3e36873f746fbd95aa84b6b92a27a76c5c84fec37d3","ssdeep":"","tlshash":"ac41027d826245a51973346a1f9e730836f340b31149e9113e5c8a802fa9a5f82b7bfa","size":2321,"data":"","first_seen":"2026-05-25T23:43:55.297422Z","last_seen":"2026-07-31T12:41:47.191826Z","times_seen":1098,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"y42t.top/","fqdn":"y42t.top","domain":"y42t.top","tld":"top"},"ip":{"addr":"154.39.104.138","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":true,"md5":"e2d3475f1cf5b92ebde88c18cfb52625","sha1":"b178b44e61169b2fc5f25b0120206d3812b19cc1","sha256":"3a448e6329733e72eb2a1d80d1897a5ddf20226acbafb032eecdf71d83fe307a","sha512":"802939763c96de22534a93d89f00066ef7cd4cf58814954ebaa18ad6e77aaf19e99745c8a677625be818d3f378e5fe285ec537561be58e12504a1f3eaa23f363","ssdeep":"","tlshash":"00f0a00e0ee548131963706a4c0f9201203b2513414eea08bffe9bb24f92a6886174cc","size":538,"data":"","first_seen":"2026-05-25T23:43:55.298337Z","last_seen":"2026-07-31T12:41:47.192891Z","times_seen":1101,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"y42t.top/","fqdn":"y42t.top","domain":"y42t.top","tld":"top"},"ip":{"addr":"154.39.104.138","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":true,"md5":"196e0f8d81dba38fb58a2eef3490451c","sha1":"4c70fb540d5f49bd92603d0cccd3005fea9b4c4f","sha256":"eabeb94d65d8704477ca411952b078a4fde998d61c9b3cb12b6940389dadfd90","sha512":"17596a9ca2ed22c2f13f6ec692ae8c32bc6aa1a1a4c7a888639c8ea5f2596a16efb37dcbd14bbc8b514c8bce98bc3f7ace246f5fdfe4070417cd670834883566","ssdeep":"192:q2wqx5Cvtib5XOQRzlaECoXZTAoV51nsPhwzvBa/id3+36a/E/97g6I52MdobsIS:q2VwiYwJvSoVXsp+pa/iZcVk97g6nMuQ","tlshash":"78322b69a5b71bba25673036277f301889b080630319fd947c0ff61e4fa54366297be7","size":11902,"data":"","first_seen":"2026-05-25T23:43:55.299247Z","last_seen":"2026-07-31T12:41:47.194012Z","times_seen":1044,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"y42t.top/","fqdn":"y42t.top","domain":"y42t.top","tld":"top"},"ip":{"addr":"154.39.104.138","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":true,"md5":"4429af1150d1fa3b53d1df1756276b64","sha1":"1921726e78a10af853be137ddf92f3d86deda32a","sha256":"2f7789347336fe8f5baaeba0f2285060e84c161bd59ee0aa3c7d8c47cf27d580","sha512":"416f1e1d8ee3a03067609ca187a88c5e3a77cb751e8769f902a12c6115e6394121254e4d60e469c50ade2b044dff176c0f7ef93912c563c510279de31d61823e","ssdeep":"","tlshash":"0c11cc5a99e28132aa5b303735bd43887728a023d184df413dcc99456fa8da5cabf6c4","size":930,"data":"","first_seen":"2026-05-25T23:43:55.300055Z","last_seen":"2026-07-31T12:41:47.195162Z","times_seen":1044,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"y42t.top/","fqdn":"y42t.top","domain":"y42t.top","tld":"top"},"ip":{"addr":"154.39.104.138","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"introduction_type":"Function","is_inline":false,"md5":"29d0c84b9d1d8da446a6062c6a840ad9","sha1":"6d6b3a6065667c7c50d92f3889c85ed65a9ad784","sha256":"3c3cbdb71d0d2c22f504f4d63d8a6ffe8d250cde7e58300619be35b6bbab26a1","sha512":"52cfcbf2f7c3521c5a6c6120099ee6822d16e04ffbc04720da925a11242c8c2050f9cfc8d864a6d39a0036ac599f701080195a29a7c5e8d3e9308b91f9f0390f","ssdeep":"","tlshash":"428004d533c350004753117c04571cc4d034447014444d405040d4531c570315115c7c","size":37,"data":"","first_seen":"2023-04-11T21:31:25Z","last_seen":"2026-07-31T20:29:04.429672Z","times_seen":736106,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"y42t.top/js/chunk-common.1781011881923.b470d60e.js","fqdn":"y42t.top","domain":"y42t.top","tld":"top"},"ip":{"addr":"154.39.104.138","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"08afa88982cffd7b96a2190cdafe1c42","sha1":"abb87563ff4cd658f4436118c54f3f39c08f74a4","sha256":"8673d3fc3524eb9d8b4020b3da3109aa5ab5e569ed8d0074f2b72b8643f813ae","sha512":"70c9df3dd7b3e3d41a607627c6a2750f43673649dbd55c7a56606a7d3e67382cb2991f146f7ad2359cc5ff1615f9db484b54642917150351017d0fa4385c3d2f","ssdeep":"1536:jBY8bgGcdWUa2UTY6eryXHuLmbErF/G7D1dMI59H64likx/vocGAClVbGD3tFk7u:jBYCRTY6wjFetH64liC/vocGAcgD3t","tlshash":"65f3e8c5b3a0f07e9a1ed53779331499b12f758274c87c60f1a1ade6bf1a704a436ca8","size":161286,"data":"","first_seen":"2026-06-12T19:29:57.317434Z","last_seen":"2026-07-31T12:41:47.016535Z","times_seen":970,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"y42t.top/configPage.js?v=6/9/2026,%2021:37:10","fqdn":"y42t.top","domain":"y42t.top","tld":"top"},"ip":{"addr":"154.39.104.138","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"e6aa74bb352ef198ba3e1c9a4b01b014","sha1":"2ea8bd6b5045475a36432f7665a129728e822d9e","sha256":"73828e873c0b6e847b37d78941ca436247471dfc90a12f743964f869f75abd5c","sha512":"2faaf24fdf1e4da637af8e9f82d1778bf061b00752dfca0c8f73432ba236a7b69410a7ad2a73727bc83e6cd631fd6555c3cc0d9d3a5d8a7f81818dd66566011f","ssdeep":"","tlshash":"be117aaf57444dffcf1d7e00a08b0a5ea8bc61d261889d4da8e9cf29e1c99002378978","size":949,"data":"","first_seen":"2025-09-04T00:49:32.949926Z","last_seen":"2026-07-31T12:41:46.996715Z","times_seen":2753,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"y42t.top/","fqdn":"y42t.top","domain":"y42t.top","tld":"top"},"ip":{"addr":"154.39.104.138","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"introduction_type":"Function","is_inline":false,"md5":"aa049e2749b8531cb8f233c2f64fc2b2","sha1":"b611a5a62c1813ae5b4763378b3a4a565556530a","sha256":"e52e51d5897d7a179089ddcf8f5de7aeb3ef4f27b054b63e937cf308b685c9e2","sha512":"fa951f3911de780608d6235a597758320388dff58cf18dd584a6941ac88cc36cac7d52caa72b678ee6f4dff47ee23955ab282714d03e713ae2bed4cb73a3c14e","ssdeep":"","tlshash":"71a0128471d6e4004b7320e40437448490396c60348c848051048c721c651108236c1c","size":79,"data":"","first_seen":"2023-04-11T21:38:58Z","last_seen":"2026-07-31T19:46:40.956526Z","times_seen":236646,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"y42t.top/js/index-399e2569.1781011881923.9d909473.js","fqdn":"y42t.top","domain":"y42t.top","tld":"top"},"ip":{"addr":"154.39.104.138","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"a89a32dae8cc80557b581a69e02f0d02","sha1":"00f9cfeca127af0a139c0670ed8d2e2e7ccf673b","sha256":"6f97c8ce9605a8e9e80a699696c70ec26a4b9bce20badaa6947bf4e5ac52e9d2","sha512":"2ca5bc054575932085e6cd6529613a94f145aa9a3b7731fb85b97b27286a882043110ab45b7eb4673228185ce1560b47968d3aa7b77492f17abf82e778076a9b","ssdeep":"384:pZTANHmDGIaVPkrTBTcK8K+Ehn6A3zgJ9Ks/fT5qZsxbt85F3oWf0Af/nwtU8Zci:znDGIYPkPVf8K5hn33UnKofy5FYxAfPY","tlshash":"e2b2b6e63392bdb8c24f9676f23a58ecc43f9141c30fc4f8d265bd947d98644aa92784","size":23775,"data":"","first_seen":"2026-06-12T19:29:57.227313Z","last_seen":"2026-07-31T12:41:47.058944Z","times_seen":945,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"y42t.top/js/21954.1781011881923.57c97863.js","fqdn":"y42t.top","domain":"y42t.top","tld":"top"},"ip":{"addr":"154.39.104.138","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"35aef3c03c45b75cc6c2851265c30f23","sha1":"54874afc1d2d6391142418c6c17d7639247b6c9b","sha256":"c7a0283f3d2fde40ce97fe3bb5e79621f9939000c50c3c781a4597c3242ebae2","sha512":"f74356629d65ff26f6928ad3183ba8e6e01848921202f9c14c5aef758ef72acdcabf523209e892df42d230d9c87cb47cda7bd106105ed8447718fc502b2d71db","ssdeep":"768:U/aSfmzKrMdvf0eMQ/96loumY1PI1yBK9LudEz+yUy51y9y0yk6Dio+ILqpTeY:z81R6Ipyk6o","tlshash":"33132088fac2b06dd3eb7330857f505ae66a1dc0668c5434e260d6917e7198dc1fb9f8","size":41946,"data":"","first_seen":"2026-05-29T16:01:53.086335Z","last_seen":"2026-07-31T12:41:46.98483Z","times_seen":943,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"y42t.top/js/home.1781011881923.a94e73ca.js","fqdn":"y42t.top","domain":"y42t.top","tld":"top"},"ip":{"addr":"154.39.104.138","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"7ad9af47a2c0c93f65e42ff84b45dad7","sha1":"eed3b4bd1191c75416f457ee41317595880f8635","sha256":"c9d64aef33c7a35945a5963b08b2bc3157f403dc91a5c9c9463c82a0d4075af6","sha512":"757a63f9b96bc8a36491424f8e0ae9fd6813983817ab2da87bb3455e18b5cb5f71d5e682919941194e4a588bea925c790888e4d27f8531ee03c777c1e2c92678","ssdeep":"3072:T5daS9tSIMcewi8uJBuoMfqFf2GMkvVJuhxffj7TEOiGRlc:T5ES9tSIMcewiLQqFRmzffjAGHc","tlshash":"93141880b5f0e275575fc2a7d7371025b2271786d0ccac60e1f66b187e2879ab236db8","size":203243,"data":"","first_seen":"2026-06-12T19:29:57.277471Z","last_seen":"2026-07-31T12:41:47.120711Z","times_seen":915,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"y42t.top/js/45540.1781011881923.25dfba7d.js","fqdn":"y42t.top","domain":"y42t.top","tld":"top"},"ip":{"addr":"154.39.104.138","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"7983a109fba451279f84fe7b75724983","sha1":"9487dc955240c6083cf3497e806dff89bec2061f","sha256":"80bb5c781336a9095ee3e8ae99d724f58a409c7f3c159bf0f320a9c948afe030","sha512":"ddf49f5cfb4721100ef951228391607209e248a8733d48229ff5196fd8a32fc3e759d90c1040dd591b1c0bd97ab83a1c8baaffa70fa96bbe2d556af2379478b0","ssdeep":"6144:1YD4wFsYiSGfKnCKPP6Xm9sm3MCln1OSgpozfEe5a:1YD4wFsYiSAKNH3TY5","tlshash":"e724f894f294f1be075fc1f1d23b501af35b5e6120cc9ca0d296e6942e20b49da77eac","size":229366,"data":"","first_seen":"2026-06-12T19:29:57.328205Z","last_seen":"2026-07-31T12:41:47.102379Z","times_seen":968,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"y42t.top/","fqdn":"y42t.top","domain":"y42t.top","tld":"top"},"ip":{"addr":"154.39.104.138","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"introduction_type":"Function","is_inline":false,"md5":"572cb94037fffc2a0a53b465972e15f1","sha1":"0d679b041a7c1ca45cc99e2d229fc2b86762838d","sha256":"6487e4bdd0f51bbfd9105810a41755847fdae2c274e2fc325cd22356d7707e35","sha512":"f7c4db7986d362b58ff4b4646cdeb71992c0ce28949773c4471915f2cc8828329445777e228ef248f508f721a33dfea3d5694bc7ec18dc6c00134ee23155ff32","ssdeep":"","tlshash":"e3800455714110004f57115050171c444030007155407cc011c0d4710d51030110545c","size":34,"data":"","first_seen":"2023-04-11T21:16:40Z","last_seen":"2026-07-31T20:08:49.94788Z","times_seen":90798,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"y42t.top/home","fqdn":"y42t.top","domain":"y42t.top","tld":"top"},"ip":{"addr":"154.39.104.138","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"introduction_type":"Function","is_inline":false,"md5":"aa049e2749b8531cb8f233c2f64fc2b2","sha1":"b611a5a62c1813ae5b4763378b3a4a565556530a","sha256":"e52e51d5897d7a179089ddcf8f5de7aeb3ef4f27b054b63e937cf308b685c9e2","sha512":"fa951f3911de780608d6235a597758320388dff58cf18dd584a6941ac88cc36cac7d52caa72b678ee6f4dff47ee23955ab282714d03e713ae2bed4cb73a3c14e","ssdeep":"","tlshash":"71a0128471d6e4004b7320e40437448490396c60348c848051048c721c651108236c1c","size":79,"data":"","first_seen":"2023-04-11T21:38:58Z","last_seen":"2026-07-31T19:46:40.956526Z","times_seen":236646,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"y42t.top/theme.config.ef94991b.js","fqdn":"y42t.top","domain":"y42t.top","tld":"top"},"ip":{"addr":"154.39.104.138","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"90d279a2980268d2835cec593c23d286","sha1":"4374bf6da5cbdf8f025434137487bda68077cddf","sha256":"1679f19badc24dea0edab376edfb8583714645e18f705fb849037af6cf0b3ff8","sha512":"362ec1b73cebe1ad224a5b745c9ceebf2b86301deab27e35d6517d499499328b34c24d76a72e5b348d623e64a4d17bfa0ab08d2aa012f02af23c6a72df51817f","ssdeep":"1536:D2JREobVmtlIRM4Sb2mcTa2mnzyJog9CcHWHA:qEtlGu1Jnz45HT","tlshash":"c0b3bb7ae20c963a6177a8bfb46ce111d12f9c0c9b1d5fdef03e60a25710669c831de9","size":108079,"data":"","first_seen":"2026-06-12T19:29:57.324936Z","last_seen":"2026-07-31T12:41:47.024068Z","times_seen":979,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"y42t.top/config/gd.js","fqdn":"y42t.top","domain":"y42t.top","tld":"top"},"ip":{"addr":"154.39.104.138","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"368318100a3c0f64373230a250953d5a","sha1":"6e0d91639cafd23f1b22aecee332da83c70b93ea","sha256":"dffc9b203a19b9e70363f75f737b7afe2164d6b8c045800d4dd7931d9093aff4","sha512":"91077ca792821795a816a0ee1a9cef242bf2915c02402706c7bd5c027c62f4bc52517b6a5e3db9f4b873e5a3c9d652758cc277c1f5ba07dc12e0d69b4f6e9eeb","ssdeep":"384:bJA61XVpi5LH4NmeJPXwXkQdcAwR0Nw3zzbSGwYg1C:bJA6BZX+oJjzzgY","tlshash":"80721f4d68f7905345a3b03c8bafa114b5388643181cde457e9ce394af6843d97babdc","size":17440,"data":"","first_seen":"2026-05-19T02:14:56.346288Z","last_seen":"2026-07-31T12:41:46.997243Z","times_seen":1106,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"y32b.top/","fqdn":"y32b.top","domain":"y32b.top","tld":"top"},"ip":{"addr":"103.244.148.114","port":80,"asn":135357,"as":"HONG KONG KOWLOON TELECOMMUNICATIONS CO.,LIMITED","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":true,"md5":"1d3ec7d431842a5877ddc9120b8ad46d","sha1":"05bf985bd9c94468b2110c72b41b101377a016db","sha256":"deb79955073837d77b1d27a48d9aec263460a93dcd462ce67eb3a728db9b62b4","sha512":"e3da773034c6c6945abb9022918e08036412a9eb6e76fb6118ea57a8d9294aa56d6af8b14ba85de3eb9a15115c4b3d4e0dccc33bb9dee2df5e5a4ae3be9c3ac2","ssdeep":"","tlshash":"75e086f324418a7066fa225bab57b7553d2250c72e52700540185c51a12cf8ec63df99","size":320,"data":"","first_seen":"2026-04-22T11:08:21.052825Z","last_seen":"2026-07-31T12:36:18.811498Z","times_seen":2039,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"y42t.top/home","fqdn":"y42t.top","domain":"y42t.top","tld":"top"},"ip":{"addr":"154.39.104.138","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"introduction_type":"Function","is_inline":false,"md5":"29d0c84b9d1d8da446a6062c6a840ad9","sha1":"6d6b3a6065667c7c50d92f3889c85ed65a9ad784","sha256":"3c3cbdb71d0d2c22f504f4d63d8a6ffe8d250cde7e58300619be35b6bbab26a1","sha512":"52cfcbf2f7c3521c5a6c6120099ee6822d16e04ffbc04720da925a11242c8c2050f9cfc8d864a6d39a0036ac599f701080195a29a7c5e8d3e9308b91f9f0390f","ssdeep":"","tlshash":"428004d533c350004753117c04571cc4d034447014444d405040d4531c570315115c7c","size":37,"data":"","first_seen":"2023-04-11T21:31:25Z","last_seen":"2026-07-31T20:29:04.429672Z","times_seen":736106,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"y42t.top/js/31098.1781011881923.4108b3dd.js","fqdn":"y42t.top","domain":"y42t.top","tld":"top"},"ip":{"addr":"154.39.104.138","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"3c55e2f7f495cd530603e700dd3bf229","sha1":"fdcabc58e872fde99b7d704711a75bc32cc2b8c8","sha256":"1c38b781ee4a302e955baab7d3306365881227cafc2814e1085f93f4ab0342d8","sha512":"94954c49e71bd95a7543f652e03bf68b5dd26d00b33c91eda9003ef81e37aa5735e846bc9322d52181550f0d010d125479a73d83dec0fe51fa0c4f2489108326","ssdeep":"1536:Z+0YvC9jlTKAUSseG1SY46DCdlBBo3AgXOG9AsqCfCXsvCfCXsLCfCXsyCfCXsfX:sKK5sY4brG7O3SnLJNpL","tlshash":"6174b6f4c248c6fdea04ce0a7e7d6f2d50723783f2ec56c446aaf8865e92857245c4da","size":352738,"data":"","first_seen":"2026-05-19T02:14:56.370466Z","last_seen":"2026-07-31T12:41:47.157793Z","times_seen":931,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"y42t.top/config/initGeetest4.js","fqdn":"y42t.top","domain":"y42t.top","tld":"top"},"ip":{"addr":"154.39.104.138","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"87855e19802d75b55afa7bcf3af515c1","sha1":"4af373375728a98d623f2299a68a91e150f2672e","sha256":"9ec8a5ef8c8ffe369dd1a5c4730dce6570c0d90955798c0be4ac04ef1c8f4baa","sha512":"3baa6d9e916abfb3d38b7ebb9372c5987e8f10534bb978383751c0094f8f5a3e764f9b8e44a73d9d4871cbaeca7e1939f0ffaf9499af5c4a71f64c3588167d85","ssdeep":"192:23aP8Ha0D+Nu5dq+EvNiqc4K25MB5VYaiQwSL4SScQVy8QRHIsGiz0iX9rES6Myy:2fe61w1iXKb2sMGUI+KQTwwHlB","tlshash":"00621d0d68f764534553b4388b9fb014b5388a53042cde41be9ce354afa843d9bbabdc","size":14975,"data":"","first_seen":"2026-02-16T20:32:40.162764Z","last_seen":"2026-07-31T12:41:47.14071Z","times_seen":1903,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"y42t.top/js/index-a3dad144.1781011881923.1093b11d.js","fqdn":"y42t.top","domain":"y42t.top","tld":"top"},"ip":{"addr":"154.39.104.138","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"0fc0f4a0379e369b442d93ffb72561fd","sha1":"497d95fced30bab2efe9ad3a561c35cd40ad5e9c","sha256":"da926a537d946d3158d41a8531082a740aec7a6a4e3b98599d35546182f20806","sha512":"ef5664991d7fb472281b2696b3b25a322bf51f9bcbccf2043f77fdb67ca9a84d90b893029e93bedea935724bbc4b58a77154b35ac40b15f8e691b539cc3102e3","ssdeep":"6144:LrbhFOufhu/LHEY/T8CPis7lVV4YlRlNsmq9D7:3zBw/LHEY/TBas7lVVhsp9X","tlshash":"ed742b90f76ce1bd875e55ff7a329094902c1b41b0c89e58d29e2944fe6b385eeb04bc","size":356584,"data":"","first_seen":"2026-06-12T19:29:57.253128Z","last_seen":"2026-07-31T12:41:47.026075Z","times_seen":927,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"y42t.top/js/65246.1781011881923.03480a32.js","fqdn":"y42t.top","domain":"y42t.top","tld":"top"},"ip":{"addr":"154.39.104.138","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"b98dafd31fe547add2f96acf9bea9922","sha1":"e63706f4b83ed72ce8a0ffee74c7d606968bd280","sha256":"92014e9ab9f7e62a6651d0a69b63f69a84ed58e15ee5dd8e287d46b28fe610cc","sha512":"a676475f44bd6ec6ab9e7421deb8c29430404be3852f96d012418d03e9135d3ec450ee58b4871a4f8ed2a053656c9a9a6523853d6238d701144d9b72c6df8ab8","ssdeep":"1536:f2+iDvYvNjx4Uyao0L8oDNzAuMMsTAQ0mqt2pXYzA4dANVO:e+iDYvPo0L8oZzAuMMsTA7mqt9zA4dAO","tlshash":"a673a501f78272385fa7e290220f2026e16e191505ac5ed8f179ffb93ef0954aa7d7b4","size":73415,"data":"","first_seen":"2026-06-12T19:29:57.345997Z","last_seen":"2026-07-31T12:41:47.033973Z","times_seen":899,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"y42t.top/js/22872.1781011881923.153832d9.js","fqdn":"y42t.top","domain":"y42t.top","tld":"top"},"ip":{"addr":"154.39.104.138","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"f9ee602f8eeb24db94a45e276eb229fd","sha1":"add3d7dea3c94842531e4e52db7b334a705c5e6b","sha256":"3d79813c4166473dcbe19eb56d456a226f183993f5aa4108a4fccae156001245","sha512":"8ad5674af4bbf338d1188a8108d0984786a4c94afddefbd592dbc428928dae301e40d4a936d73d0e29ba68989ccd13abee0988a8a6938495736115c80a53eae7","ssdeep":"3072:XHW7tB4Vgj5tNlxyU5YegxYffj7TEOiGzZl+DJVkzEcx1nKs:XHW7tBwgttXxyUtffjAGzT+DJVkzEcxF","tlshash":"21f31bd4f2c071f6475f45f2a22b0075b26f4d92318c98b0e15ba6597f21a48c7abeec","size":157599,"data":"","first_seen":"2026-06-12T19:29:57.267326Z","last_seen":"2026-07-31T12:41:47.103795Z","times_seen":942,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"y42t.top/js/35142.1781011881923.1d227afa.js","fqdn":"y42t.top","domain":"y42t.top","tld":"top"},"ip":{"addr":"154.39.104.138","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"8325235b613820a57b71043f360e5b36","sha1":"925ff977edf9892e868d43915f93d29e6feeb113","sha256":"0c505f39a463b09ece16c213b7ead75186dcdc26d25ee02dcba5a62cc0dff7c6","sha512":"efd16c9b7ff0f806890ae77542e8c0d4e954f8c797ff21b8dcde3f240e4940ca3c6d0fe75ee2fda35bf53ff5d0eb691fa7e38cfdfa82c0f231b0cd57458fbcf2","ssdeep":"6144:N0hEyLkbJDb7w/1FOAmBm7cene7Ancbt8sbyAkKJwoSlt5MMjmlHGwwzHUY9SroE:N0hEyLkFDb7w/1FOAmBm7cenaAncbt84","tlshash":"8a742b94b290b17883af86fb731a91a1d24d0e9460ccace4f27e6e407f15746b8775ec","size":340163,"data":"","first_seen":"2026-06-12T19:29:57.248751Z","last_seen":"2026-07-31T12:41:47.015383Z","times_seen":915,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"y42t.top/js/chunk-init-c0d76f48.1781011881923.0f397bb1.js","fqdn":"y42t.top","domain":"y42t.top","tld":"top"},"ip":{"addr":"154.39.104.138","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"815f2acbd0918250f25d4f71409219b0","sha1":"d5778078df7eada22b3175f9182b8b22e828c433","sha256":"12a61f287da39190db34dff1de7188c3d8b76ffbd1c11290962db88fd5e2ab46","sha512":"5ba4adaf4b36b4a402c30c3aaa5be5f02e292391d79400d353a5ca6c61405cb40e5179858abddb1af6dad243899e420111e49004d01d339ce9de23d8f522c379","ssdeep":"1536:zG5qxPvO2lSV822bv0bcbpM/igw/aIwC23QOoKILbjxo4wc0tvB6xVS/J+pKY3Ns:iQz/Dp5/92xoKa/x5wc0dB5/J+UU0","tlshash":"5ef31b987392b1b847dba6e152371075b57e1dd73088e8f0c169a6803f31a9cd52afec","size":161226,"data":"","first_seen":"2026-05-11T06:12:53.502908Z","last_seen":"2026-07-31T12:41:47.148618Z","times_seen":973,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"y42t.top/js/83876.1781011881923.7ce40e6b.js","fqdn":"y42t.top","domain":"y42t.top","tld":"top"},"ip":{"addr":"154.39.104.138","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"abf84df30621edc23a82d05ff0b8a83a","sha1":"e727ad94ce5d5f5b8fabec0e0b5a966fb6e6594f","sha256":"c3b02d056ac034939c3ff75a10a2da23f5f05f96a36ca1e5cea2157ce0fe12be","sha512":"db2a2a00f51cc6f75cfcbb6d988df74403fae93255982a054710e5f87a2d8407f4f8f02fef8ef1a0e5edb289736296b2d11a3b77cad6c6d9089bb831cda45be5","ssdeep":"6144:0/rOTU2/xB0Jjytg7DiQPkcsz1aL3p2YO+WidjHrrL:0iUjytgPJPT3p2YpHrrL","tlshash":"2f442c44b291f0b8879b42f7922b4056a17f48a1308cacb4f265f990be7555c927fbfc","size":262269,"data":"","first_seen":"2026-06-12T19:29:57.272405Z","last_seen":"2026-07-31T12:41:47.143763Z","times_seen":960,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"y42t.top/js/chunk-svg.1781011881923.7ca9cdc1.js","fqdn":"y42t.top","domain":"y42t.top","tld":"top"},"ip":{"addr":"154.39.104.138","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"2e885a50d7dc711be337a96fe33f0c2e","sha1":"8c767dd1bdcbf35f2577bd215ff6fe495cbd0f43","sha256":"603d14d58a247671742688b96c517d62e9c636443b960bc421af5352df4c01f7","sha512":"09289e06b0db84915693f0b78ab40149972b29693d0d6b1e66e4fbe9bddf00380f5f4e8e78961512d91a132226494572994ceade62d3d8a878126fdcdeb8fd95","ssdeep":"3072:/8nz2uaLZSZvx6Q/sIPrekK+mB6Ua94sRZI7gbpF/:/8nz2uasNxpXPrekK+mB6UHsE4pF/","tlshash":"c0a4fcb4c190f4edf704ce196e7c9e1c50321688e0a9e9e52da9fe0d9e85d6b241cdec","size":470763,"data":"","first_seen":"2026-06-12T19:29:57.244213Z","last_seen":"2026-07-31T12:41:47.03691Z","times_seen":974,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"y42t.top/js/60024.1781011881923.e9a203dc.js","fqdn":"y42t.top","domain":"y42t.top","tld":"top"},"ip":{"addr":"154.39.104.138","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"ac04ba4305a374571b2d241fe1f50dc2","sha1":"e559b9a0a338e35fb6605942f7d14e96c031ae71","sha256":"788282499d13bd0bb6207ed41a15a3d0b2058ca97003d1e1a872e81401f02aa7","sha512":"6edc613a3f8585bf6cfb8c034199265c1c1daf368d0d3a6e2c41bf441a334a7f93139c0b0fb4147b98264567be9b135fab3cbe923e8fe040ec553e9fec04c8ae","ssdeep":"96:UR4NFRSZqe65bD7RM/Rsxkw9usN6tKex9sX2NaenPdqUDDEz:UR4NFRSZqesbD6Rgks0RxeX2NbnPdqUE","tlshash":"3491cbd876d2f071426f9678862f285fe27bead074ccb415d1c1e690aef062d8933d68","size":4601,"data":"","first_seen":"2026-06-12T19:29:57.341024Z","last_seen":"2026-07-31T12:41:47.105093Z","times_seen":901,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"y42t.top/js/83749.1781011881923.02b71cf6.js","fqdn":"y42t.top","domain":"y42t.top","tld":"top"},"ip":{"addr":"154.39.104.138","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"c1d2645de169d30e7a814fdbd1c1a47d","sha1":"41959bb5171f196d813c4b3c27bb3135d993ff43","sha256":"a400126839acc7fff4ce08e50633afc5560f3eb3e8aae7ec697fff30423bd26a","sha512":"21e02eeba3e71baf0938766c7abf83b68a4f54b149ea679f43c221c429729dacd395ed0e54233ff22be739636dcaf0104cd58083c50df9b6c521fcb2c3e27419","ssdeep":"1536:lcK/KnqHB3vmxuHXvKe+Gruc7iSxTcgOX8JwTl0sI5pQiVFFsdt+H+Xk:rB3vywXSex7HYgOXawTl0sgQi2tkwk","tlshash":"3693e7c4b5f4f5f8279ec5a2973644b8b02527c5b1c8ace0d2e96e147f19b62b0718bc","size":91749,"data":"","first_seen":"2026-06-12T19:29:57.252198Z","last_seen":"2026-07-31T12:41:47.049863Z","times_seen":899,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"y42t.top/config/telegram.js?t=1785456638055","fqdn":"y42t.top","domain":"y42t.top","tld":"top"},"ip":{"addr":"154.39.104.138","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"4ef2154bcfb8399f256c2da15a4cb409","sha1":"e0f8f5578b2e0773ec1d79bb1cec54e1f5d6373d","sha256":"73fa4926373755b52fecfdf3145a0c9953c08af374ea69dda46fe2b3b9ddb022","sha512":"8b64643161386bdefbb7eab04416e78e5e183c50acba7b25b146aa6e733744a326566a01eb7eabb1a0a3f5b87ac8461a7ab3b9ad1c44de37ecea25af09e3eb41","ssdeep":"1536:WK4KZK+Klt3LbbdS4V+vO14KtA9phXTQ+fcZl8LDh7j8d3K+V4WMrnf/NunqxF00:Wj+dgdLbbdSA+1XTQRZ1jSBl","tlshash":"14b31c4c5cf3216285a7b1be8b9f925072759893304def203c4d9ba45f98d3c53eaad8","size":116886,"data":"","first_seen":"2025-05-31T08:16:48.368096Z","last_seen":"2026-07-31T12:41:47.137816Z","times_seen":2339,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":[{"level":"log","text":"[Telegram.WebView] \u003e postEventweb_app_set_header_colormap[actor:server1.conn0.watcher17.process8//obj38 class:Object extensible:true frozen:false isError:false ownPropertyLength:1 preview:map[kind:Object ownProperties:map[color_key:map[configurable:true enumerable:true value:bg_color writable:true]] ownPropertiesLength:1] sealed:false type:object]","filename":"https://y42t.top/config/telegram.js?t=1785456638055","line_number":139,"column_number":13},{"level":"log","text":"[Telegram.WebView] \u003e postEventweb_app_set_bottom_bar_colormap[actor:server1.conn0.watcher17.process8//obj39 class:Object extensible:true frozen:false isError:false ownPropertyLength:1 preview:map[kind:Object ownProperties:map[color:map[configurable:true enumerable:true value:#ffffff writable:true]] ownPropertiesLength:1] sealed:false type:object]","filename":"https://y42t.top/config/telegram.js?t=1785456638055","line_number":139,"column_number":13},{"level":"log","text":"[Telegram.WebView] \u003e postEventweb_app_request_theme","filename":"https://y42t.top/config/telegram.js?t=1785456638055","line_number":139,"column_number":13},{"level":"log","text":"[Telegram.WebView] \u003e postEventweb_app_request_viewport","filename":"https://y42t.top/config/telegram.js?t=1785456638055","line_number":139,"column_number":13},{"level":"log","text":"[Telegram.WebView] \u003e postEventweb_app_request_safe_area","filename":"https://y42t.top/config/telegram.js?t=1785456638055","line_number":139,"column_number":13},{"level":"log","text":"[Telegram.WebView] \u003e postEventweb_app_request_content_safe_area","filename":"https://y42t.top/config/telegram.js?t=1785456638055","line_number":139,"column_number":13}]},"http":[{"url":{"schema":"https","addr":"y42t.top/jumpto/img/https://rcf-img-hk.gasdg646fs224cn.com/202508/_webp_size1298x1156_df036cfa-66a5-49f7-b863-3c22d1a3d180.png","fqdn":"y42t.top","domain":"y42t.top","tld":"top"},"ip":{"addr":"154.39.104.138","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://y42t.top/","date":"2026-07-31T00:10:42.868Z","timestamp":1785456642868,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"p40f.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 10:44:09 GMT","end":"Tue, 20 Oct 2026 10:44:08 GMT"},"fingerprint":{"sha1":"41:09:2C:3F:FC:9C:25:A9:DB:51:15:BB:D1:5A:D8:01:DC:38:AD:F8","sha256":"49:3B:29:C7:5B:B6:12:CF:84:14:5B:09:42:7D:EF:AA:61:29:EC:A1:D5:40:B5:64:5C:F1:33:AB:9B:E1:13:4D"}}},"request":{"raw":"GET /jumpto/img/https://rcf-img-hk.gasdg646fs224cn.com/202508/_webp_size1298x1156_df036cfa-66a5-49f7-b863-3c22d1a3d180.png HTTP/1.1\r\nHost: y42t.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://y42t.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 31 Jul 2026 00:10:47 GMT\r\nContent-Type: image/webp\r\nContent-Length: 120978\r\nConnection: keep-alive\r\netag: \"1af718e662844a31716cc9bf3248f8e4\"\r\nLast-Modified: Wed, 10 Dec 2025 11:52:31 GMT\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nAge: 499203\r\ncf-cache-status: HIT\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XSEKyQYAtstf%2BVfja1Aq%2FI4DmEg1JxLSOa1W2%2B7HygUkgpy6Pl2yLWLkl%2BRS2sjX19m1QOBDxOvYpavMaVr0b%2F2vSuIxodPYvjqXxf43bD8CLgpyG5CK%2Fhs51FVasvA%2FZsbXk7VNN%2BCKiaE5%2BBQgjkk%3D\"}]}\r\nCF-RAY: a208c63f0dd904ab-HKG\r\nalt-svc: h3=\":443\"; ma=86400\r\nCache-Control: public, max-age=2592000, immutable, public, max-age=2592000, immutable\r\nAccess-Control-Allow-Origin: *\r\nX-Custom-Check: true\r\nServer: Nginx\r\nL-Safe: 1785456647=pwbyu29rM0HEK42bpjFMXQZZ8s1IzzkT40daNMbcT90Ub0zpvrQ+kBR7N9vkAvLpdcGVCAkYTtjHzFt3rikpG2u0ViQwOg9Y/d8oh3QnzrskfHJpkQ3k6DdsyXdsoVGvpU7l+6O6Z96TYcnIdvgBPUL8UMfWMnVf++Fvg3TWLhL2ZP4it9BY8MKVve4d74hd\r\nL-VIA: l1=TqoDVanjjr6wMExF\r\nL-VERSION: 1784720560\r\nL-Request-Id: 3ec119fb5825c42c2d2\r\nX-Cache-Status: HIT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":120978,"size_decoded":122144,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"1af718e662844a31716cc9bf3248f8e4","sha1":"e54b87093f05f4d0c5d96fbc689f0ed37ffcbcaa","sha256":"670ccce96c9f21fc7364791b4870e1915788e14fb105a16cae131cae271279b4","sha512":"93a7b9e3a5b4438343a8f1abe967cf1b3d21a347b42526dd8604da5f9c953c14ad2dc83bcd7e3f340a9b3b90b9a4c98f90ec88c689875b8e2b0536f0b9ca7975","ssdeep":"3072:nO0/MDrjGP/ngyzlMkxT730AhwPBv78vHWJ8AxCsDozmmeYj:JgrA/nnKBrpvovHWLxCqImE","tlshash":"a0c312ee7ec309b8e112676d12dd07968e16e06f482b0d959e2f40392b02716ef7dc5d","first_seen":"2026-04-24T23:10:16.785822Z","last_seen":"2026-07-31T12:36:18.684856Z","times_seen":913,"resource_available":false,"data":null}},"time_used":4555,"timings":{"blocked":4201,"dns":0,"connect":0,"send":0,"wait":311,"receive":43,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-31","alert":"Phishing Block","trigger":"y42t.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-31","alert":"Sinkholed","trigger":"y42t.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"y42t.top/js/83876.1781011881923.7ce40e6b.js","fqdn":"y42t.top","domain":"y42t.top","tld":"top"},"ip":{"addr":"154.39.104.138","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://y42t.top/","date":"2026-07-31T00:10:38.094Z","timestamp":1785456638094,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"p40f.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 10:44:09 GMT","end":"Tue, 20 Oct 2026 10:44:08 GMT"},"fingerprint":{"sha1":"41:09:2C:3F:FC:9C:25:A9:DB:51:15:BB:D1:5A:D8:01:DC:38:AD:F8","sha256":"49:3B:29:C7:5B:B6:12:CF:84:14:5B:09:42:7D:EF:AA:61:29:EC:A1:D5:40:B5:64:5C:F1:33:AB:9B:E1:13:4D"}}},"request":{"raw":"GET /js/83876.1781011881923.7ce40e6b.js HTTP/1.1\r\nHost: y42t.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://y42t.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 31 Jul 2026 00:10:39 GMT\r\nContent-Type: application/javascript\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Tue, 09 Jun 2026 13:37:11 GMT\r\nVary: Accept-Encoding\r\nETag: W/\"6a281707-4007d\"\r\nCache-Control: public, max-age=31536000, immutable\r\nAccess-Control-Allow-Origin: *\r\nX-Custom-Check: true\r\nContent-Encoding: gzip\r\nServer: Nginx\r\nL-Safe: 1785456639=ZQ2Zoq/cRP01EUwFViLw2I2TTD7YXn3fOcUs+xcjh4jH3sEo30QmYTa3wyU19juAAswcF1zK33qXVdu/2wEQssIQmAwdFBkC9e1CbV9WPKEBdbscbAAIXVFwwInqwSqPfxbfTB5XlXMMnezbEIdI/APkRTYkPOXTT5T1KnbKAZgGBnmhack9avnR9rigFkDp\r\nL-VIA: l1=TqoDVanjjr6wMExF\r\nL-VERSION: 1784720560\r\nL-Request-Id: 3ec819fb5823f1dc0ee\r\nX-Cache-Status: BYPASS\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":262269,"size_decoded":77907,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"abf84df30621edc23a82d05ff0b8a83a","sha1":"e727ad94ce5d5f5b8fabec0e0b5a966fb6e6594f","sha256":"c3b02d056ac034939c3ff75a10a2da23f5f05f96a36ca1e5cea2157ce0fe12be","sha512":"db2a2a00f51cc6f75cfcbb6d988df74403fae93255982a054710e5f87a2d8407f4f8f02fef8ef1a0e5edb289736296b2d11a3b77cad6c6d9089bb831cda45be5","ssdeep":"6144:0/rOTU2/xB0Jjytg7DiQPkcsz1aL3p2YO+WidjHrrL:0iUjytgPJPT3p2YpHrrL","tlshash":"2f442c44b291f0b8879b42f7922b4056a17f48a1308cacb4f265f990be7555c927fbfc","first_seen":"2026-06-12T19:29:57.272405Z","last_seen":"2026-07-31T12:41:47.143763Z","times_seen":960,"resource_available":true,"data":null}},"time_used":2186,"timings":{"blocked":1525,"dns":0,"connect":0,"send":0,"wait":349,"receive":312,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-31","alert":"Sinkholed","trigger":"y42t.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-31","alert":"Phishing Block","trigger":"y42t.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"y42t.top/undefined","fqdn":"y42t.top","domain":"y42t.top","tld":"top"},"ip":{"addr":"154.39.104.138","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://y42t.top/","date":"2026-07-31T00:10:41.053Z","timestamp":1785456641053,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"p40f.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 10:44:09 GMT","end":"Tue, 20 Oct 2026 10:44:08 GMT"},"fingerprint":{"sha1":"41:09:2C:3F:FC:9C:25:A9:DB:51:15:BB:D1:5A:D8:01:DC:38:AD:F8","sha256":"49:3B:29:C7:5B:B6:12:CF:84:14:5B:09:42:7D:EF:AA:61:29:EC:A1:D5:40:B5:64:5C:F1:33:AB:9B:E1:13:4D"}}},"request":{"raw":"GET /undefined HTTP/1.1\r\nHost: y42t.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://y42t.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 31 Jul 2026 00:10:41 GMT\r\nContent-Type: text/html\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nCache-Control: public, s-maxage=600, max-age=0\r\nAccess-Control-Allow-Origin: *\r\nX-Custom-Check: true\r\nContent-Encoding: gzip\r\nServer: Nginx\r\nL-Safe: 1785456641=gE780zdPNeqfjPR58ntui758h0rpjLBJh/P/VwEb9QgBdmX5XoCvf3XKS4ubqYQ4aAZoEOOBDBlTTobn+2eZbZ0U5rmjaj2YBZiCmX90g8Si+D3mrq6vSJjZwkQXhlFZx6UYXbz//HB3stXeGCYUIUvqR8AbEmVqeF09wWmA11wJgMs9cyGCHyv3ab/jWW+R\r\nL-VIA: l1=TqoDVanjjr6wMExF\r\nL-VERSION: 1784720560\r\nL-Request-Id: 3ec919fb5824524c089\r\nX-Cache-Status: BYPASS\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":24594,"size_decoded":11457,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (5777)","md5":"e79ba8d5268f3090203c26b2ec87119f","sha1":"67ec737a939ce7eb32f6c9ab0f6cb36a5d0c5045","sha256":"f03b70608a46781f56d44226537411cfd4da69014f8c6540319977c45398149b","sha512":"378079455a3539b8fa003afc4351f6acd844d704e0f41250b71dda29b445cb99821596e562eed3afea6a7d0b6de1ff61e22754a4c3d9384952d09b90f4dc3e55","ssdeep":"384:21ERlxqNBPJu2VwiYwJvSoVXsp+pa/iZcVk97g6nMusplIiz:1RXqrJuiNYiKop/E6wkpcu2llz","tlshash":"05b2195a9df3497a2423303a1f7fb20869b0d0134309ed803e4de7594f95aaa56f3bd6","first_seen":"2026-06-12T19:29:57.247756Z","last_seen":"2026-07-31T12:41:47.004786Z","times_seen":977,"resource_available":true,"data":null}},"time_used":516,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":516,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-31","alert":"Phishing Block","trigger":"y42t.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-31","alert":"Sinkholed","trigger":"y42t.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"y42t.top/img/left.34013cd8.png","fqdn":"y42t.top","domain":"y42t.top","tld":"top"},"ip":{"addr":"154.39.104.138","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://y42t.top/","date":"2026-07-31T00:10:41.071Z","timestamp":1785456641071,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"p40f.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 10:44:09 GMT","end":"Tue, 20 Oct 2026 10:44:08 GMT"},"fingerprint":{"sha1":"41:09:2C:3F:FC:9C:25:A9:DB:51:15:BB:D1:5A:D8:01:DC:38:AD:F8","sha256":"49:3B:29:C7:5B:B6:12:CF:84:14:5B:09:42:7D:EF:AA:61:29:EC:A1:D5:40:B5:64:5C:F1:33:AB:9B:E1:13:4D"}}},"request":{"raw":"GET /img/left.34013cd8.png HTTP/1.1\r\nHost: y42t.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://y42t.top/css/home.1781011881923.38488e2a.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 31 Jul 2026 00:10:41 GMT\r\nContent-Type: image/png\r\nContent-Length: 237\r\nConnection: keep-alive\r\nLast-Modified: Tue, 09 Jun 2026 13:37:11 GMT\r\nETag: \"6a281707-ed\"\r\nCache-Control: public, max-age=2592000, immutable\r\nAccess-Control-Allow-Origin: *\r\nX-Custom-Check: true\r\nServer: Nginx\r\nL-Safe: 1785456641=gE780zdPNeqfjPR58ntui758h0rpjLBJh/P/VwEb9QgBdmX5XoCvf3XKS4ubqYQ4aAZoEOOBDBlTTobn+2eZbZ0U5rmjaj2YBZiCmX90g8Si+D3mrq6vSJjZwkQXhlFZx6UYXbz//HB3stXeGCYUIUvqR8AbEmVqeF09wWmA11wJgMs9cyGCHyv3ab/jWW+R\r\nAge: 499205\r\nL-VIA: l1=TqoDVanjjr6wMExF\r\nL-VERSION: 1784720560\r\nL-Request-Id: 3ec219fb58247baba20\r\nX-Cache-Status: HIT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":237,"size_decoded":905,"mime_type":"image/png","magic":"PNG image data, 14 x 44, 8-bit colormap, non-interlaced","md5":"5ecca260da6fc5e2843405c20ac69817","sha1":"3918cfad7493b6860ded9e259ba90bc6a853f1b1","sha256":"078a4aac39c49a33cbabf23cda7579fa7b76e875e6b6d24d16cfcbf9f8b250df","sha512":"b76a870a79a87a450e5d30a218d75093b57415c563e64a8ffd6839a31b36379dbc08398698b9c1368ecda671d65045d5cfebe3363b98d746d89dcaad15bcd8ce","ssdeep":"","tlshash":"6dd0a99be2076faed1c70bb3732e0ca18a8124e892944b088042c622ca663a1dd82042","first_seen":"2025-08-29T11:05:53.221032Z","last_seen":"2026-07-31T12:41:46.992216Z","times_seen":2511,"resource_available":false,"data":null}},"time_used":1045,"timings":{"blocked":758,"dns":0,"connect":0,"send":0,"wait":287,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-31","alert":"Sinkholed","trigger":"y42t.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-31","alert":"Phishing Block","trigger":"y42t.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"photo.365live88.com/img/fb/team/0c5c069aaea04982aace2b1dff78a343?win007=sell","fqdn":"photo.365live88.com","domain":"365live88.com","tld":"com"},"ip":{"addr":"154.41.93.240","port":443,"asn":174,"as":"COGENT-174","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://y42t.top/","date":"2026-07-31T00:10:42.537Z","timestamp":1785456642537,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"photo.365live88.com","organization":""},"issuer":{"commonName":"Encryption Everywhere DV TLS CA - G2","organization":"DigiCert Inc"},"validity":{"start":"Sat, 01 Nov 2025 00:00:00 GMT","end":"Sat, 31 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"45:76:43:9C:31:C5:89:A6:99:FD:9B:D8:6C:A9:3A:E6:2F:D6:E9:80","sha256":"73:27:CF:D8:8D:AC:95:46:00:5D:67:05:1E:70:22:3E:17:F0:94:78:CD:6F:A6:9C:C8:5F:B5:3B:75:60:3D:C8"}}},"request":{"raw":"GET /img/fb/team/0c5c069aaea04982aace2b1dff78a343?win007=sell HTTP/1.1\r\nHost: photo.365live88.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://y42t.top/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: openresty\r\nDate: Fri, 31 Jul 2026 00:10:48 GMT\r\nContent-Type: image/gif\r\nContent-Length: 6680\r\nConnection: keep-alive\r\nAccept-Ranges: bytes\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Expose-Headers: X-Log, X-Reqid\r\nAccess-Control-Max-Age: 2592000\r\nAge: 25818\r\nCache-Control: public, max-age=31536000\r\nContent-Disposition: inline; filename=\"0c5c069aaea04982aace2b1dff78a343\"; filename*=utf-8''0c5c069aaea04982aace2b1dff78a343\r\nContent-Md5: CXYAEkliBHIQlIdEZLbrJw==\r\nContent-Transfer-Encoding: binary\r\nEtag: \"FuHBXHhecUAvBK8mqT14tyXGso9q\"\r\nLast-Modified: Sat, 25 Jul 2026 19:15:48 GMT\r\nX-Log: X-Log\r\nX-M-Log: QNM:wldsg121;QNM3\r\nX-M-Reqid: FfKIoZdsc\r\nX-Qiniu-Zone: as0\r\nX-Qnm-Cache: Hit\r\nX-Reqid: hZUAAAB4QYzhH8cY\r\nX-Svr: IO\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6680,"size_decoded":7435,"mime_type":"image/gif","magic":"GIF image data, version 89a, 105 x 106","md5":"09760012496204721094874464b6eb27","sha1":"e1c15c785e71402f04af26a93d78b725c6b28f6a","sha256":"51aa5434eb944376df4e8aa816330aae6b2c7cace8787ac1ee59bd07ddae4bca","sha512":"746c605e6e165a01a296e65ba32a9588562ba6c0347e1ed7bb28ee049a428439ee5d6d61366c0e196a06de2b319e8d348b5a461d71a206594f4f42316d526d7f","ssdeep":"192:MOUh4XNWtJdMWYUnW+fcMrNk1pz13dH9YOK:N/9W1MWYJ+fT+1p53HYP","tlshash":"59d1bf6aa800ab0902d8de5359f1f2884a021e1f3192ed60cde1ab1a214445ec6fbe1e","first_seen":"2025-03-31T13:06:08.116668Z","last_seen":"2026-07-31T12:41:15.209318Z","times_seen":61,"resource_available":false,"data":null}},"time_used":6437,"timings":{"blocked":6196,"dns":0,"connect":0,"send":0,"wait":241,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"photo.365live88.com/img/fb/team/a6e6e34c343446fea86bf8d1cada5b44?win007=sell","fqdn":"photo.365live88.com","domain":"365live88.com","tld":"com"},"ip":{"addr":"154.41.93.240","port":443,"asn":174,"as":"COGENT-174","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://y42t.top/","date":"2026-07-31T00:10:42.541Z","timestamp":1785456642541,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"photo.365live88.com","organization":""},"issuer":{"commonName":"Encryption Everywhere DV TLS CA - G2","organization":"DigiCert Inc"},"validity":{"start":"Sat, 01 Nov 2025 00:00:00 GMT","end":"Sat, 31 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"45:76:43:9C:31:C5:89:A6:99:FD:9B:D8:6C:A9:3A:E6:2F:D6:E9:80","sha256":"73:27:CF:D8:8D:AC:95:46:00:5D:67:05:1E:70:22:3E:17:F0:94:78:CD:6F:A6:9C:C8:5F:B5:3B:75:60:3D:C8"}}},"request":{"raw":"GET /img/fb/team/a6e6e34c343446fea86bf8d1cada5b44?win007=sell HTTP/1.1\r\nHost: photo.365live88.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://y42t.top/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: openresty\r\nDate: Fri, 31 Jul 2026 00:10:49 GMT\r\nContent-Type: image/png\r\nContent-Length: 24873\r\nConnection: keep-alive\r\nAccept-Ranges: bytes\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Expose-Headers: X-Log, X-Reqid\r\nAccess-Control-Max-Age: 2592000\r\nAge: 24046\r\nCache-Control: public, max-age=31536000\r\nContent-Disposition: inline; filename=\"a6e6e34c343446fea86bf8d1cada5b44\"; filename*=utf-8''a6e6e34c343446fea86bf8d1cada5b44\r\nContent-Md5: NDK1I75Bcyn0X5abrOT8+Q==\r\nContent-Transfer-Encoding: binary\r\nEtag: \"FlZ4xdEQBDGfJC1G4ADDCHUqXj_0\"\r\nLast-Modified: Sat, 25 Jul 2026 19:16:58 GMT\r\nX-Log: X-Log\r\nX-M-Log: QNM:wldsg119;QNM3\r\nX-M-Reqid: DCgOIFPYG\r\nX-Qiniu-Zone: as0\r\nX-Qnm-Cache: Hit\r\nX-Reqid: BgoAAAApNDh-IccY\r\nX-Svr: IO\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":24873,"size_decoded":25629,"mime_type":"image/png","magic":"PNG image data, 500 x 500, 8-bit/color RGBA, non-interlaced","md5":"3432b523be417329f45f969bace4fcf9","sha1":"5678c5d11004319f242d46e000c308752a5e3ff4","sha256":"8cc767cde9c093d3d7def1325d1fbd35eaca8cbbe77a1077602b2f9566ae6b55","sha512":"c5d64d4c41d366fd0dfb0b3207f3357ea0e104f6c5e9384b1bdd7b568c60bf6d46cd0668989a88b48418b412800a2fe3930eb3209a68f0f15a4157af037746ad","ssdeep":"768:W+BplLspuF/Y+F7giVXxozo6dvWFtEO7yRSjVyhS8:Prqp2QKFnKo6dyEO94h/","tlshash":"53b2aecd11f536ec15b9fe9d0193b50f25228f8aed0078b2fb61e5eb2506fe02a15287","first_seen":"2023-08-24T20:41:52Z","last_seen":"2026-07-31T12:41:15.248619Z","times_seen":18,"resource_available":false,"data":null}},"time_used":6780,"timings":{"blocked":6503,"dns":0,"connect":0,"send":0,"wait":264,"receive":13,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"photo.365live88.com/img/fb/team/c7ec3c8b738d4b8c8aca226e008408a3?win007=sell","fqdn":"photo.365live88.com","domain":"365live88.com","tld":"com"},"ip":{"addr":"154.41.93.240","port":443,"asn":174,"as":"COGENT-174","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://y42t.top/","date":"2026-07-31T00:10:42.561Z","timestamp":1785456642561,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"photo.365live88.com","organization":""},"issuer":{"commonName":"Encryption Everywhere DV TLS CA - G2","organization":"DigiCert Inc"},"validity":{"start":"Sat, 01 Nov 2025 00:00:00 GMT","end":"Sat, 31 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"45:76:43:9C:31:C5:89:A6:99:FD:9B:D8:6C:A9:3A:E6:2F:D6:E9:80","sha256":"73:27:CF:D8:8D:AC:95:46:00:5D:67:05:1E:70:22:3E:17:F0:94:78:CD:6F:A6:9C:C8:5F:B5:3B:75:60:3D:C8"}}},"request":{"raw":"GET /img/fb/team/c7ec3c8b738d4b8c8aca226e008408a3?win007=sell HTTP/1.1\r\nHost: photo.365live88.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://y42t.top/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: openresty\r\nDate: Fri, 31 Jul 2026 00:10:50 GMT\r\nContent-Type: image/png\r\nContent-Length: 186842\r\nConnection: keep-alive\r\nAccept-Ranges: bytes\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Expose-Headers: X-Log, X-Reqid\r\nAccess-Control-Max-Age: 2592000\r\nAge: 19536\r\nCache-Control: public, max-age=31536000\r\nContent-Disposition: inline; filename=\"c7ec3c8b738d4b8c8aca226e008408a3\"; filename*=utf-8''c7ec3c8b738d4b8c8aca226e008408a3\r\nContent-Md5: o1K0bp8Y8XOhshrbEQ21PQ==\r\nContent-Transfer-Encoding: binary\r\nEtag: \"Fn5TBUQOW8937_GVbUCkQi-I-sCI\"\r\nLast-Modified: Sat, 25 Jul 2026 19:17:53 GMT\r\nX-Log: X-Log\r\nX-M-Log: QNM:wldsg119;QNM3\r\nX-M-Reqid: 65kZIQ1Ng\r\nX-Qiniu-Zone: as0\r\nX-Qnm-Cache: Hit\r\nX-Reqid: xL4AAAC2jYyYJccY\r\nX-Svr: IO\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":186842,"size_decoded":187599,"mime_type":"image/png","magic":"PNG image data, 1200 x 1200, 8-bit/color RGBA, non-interlaced","md5":"a352b46e9f18f173a1b21adb110db53d","sha1":"7e5305440e5bcf77eff1956d40a4422f88fac088","sha256":"3b11d9c7ff5d07197ff3f9eea669afb5988a0c8cc449fbe9d4bafc64f7f82022","sha512":"09e6edc1c9da991feb46914e49b664a0001ed8e7d7f96ab5a2f9612732ec768fe5cd3b8ac4d9234c1433fbd1d0cd9f26ca82d4a83e147da1c298e0361287e2d6","ssdeep":"3072:ey3Mq4we3KRI3z6/wpFfwCRJ77IAmNQGHLxW1SjqT7wAiteHY5ygo3WyFq/q8:n8r3Gk0QfHRhLmNhrxW1S1AGDM3W1q8","tlshash":"7b0412994d1bea32f242fd3c4c481c43ed674f44b3ee8abe775d525708a01caa1abd42","first_seen":"2025-09-27T19:21:32.885496Z","last_seen":"2026-07-31T12:41:47.125416Z","times_seen":44,"resource_available":false,"data":null}},"time_used":8665,"timings":{"blocked":8102,"dns":0,"connect":0,"send":0,"wait":265,"receive":298,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"y42t.top/js/35142.1781011881923.1d227afa.js","fqdn":"y42t.top","domain":"y42t.top","tld":"top"},"ip":{"addr":"154.39.104.138","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://y42t.top/","date":"2026-07-31T00:10:40.851Z","timestamp":1785456640851,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"p40f.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 10:44:09 GMT","end":"Tue, 20 Oct 2026 10:44:08 GMT"},"fingerprint":{"sha1":"41:09:2C:3F:FC:9C:25:A9:DB:51:15:BB:D1:5A:D8:01:DC:38:AD:F8","sha256":"49:3B:29:C7:5B:B6:12:CF:84:14:5B:09:42:7D:EF:AA:61:29:EC:A1:D5:40:B5:64:5C:F1:33:AB:9B:E1:13:4D"}}},"request":{"raw":"GET /js/35142.1781011881923.1d227afa.js HTTP/1.1\r\nHost: y42t.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://y42t.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 31 Jul 2026 00:10:41 GMT\r\nContent-Type: application/javascript\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Tue, 09 Jun 2026 13:37:11 GMT\r\nVary: Accept-Encoding\r\nETag: W/\"6a281707-530c3\"\r\nCache-Control: public, max-age=31536000, immutable\r\nAccess-Control-Allow-Origin: *\r\nX-Custom-Check: true\r\nContent-Encoding: gzip\r\nServer: Nginx\r\nL-Safe: 1785456641=gE780zdPNeqfjPR58ntui758h0rpjLBJh/P/VwEb9QgBdmX5XoCvf3XKS4ubqYQ4aAZoEOOBDBlTTobn+2eZbZ0U5rmjaj2YBZiCmX90g8Si+D3mrq6vSJjZwkQXhlFZx6UYXbz//HB3stXeGCYUIUvqR8AbEmVqeF09wWmA11wJgMs9cyGCHyv3ab/jWW+R\r\nL-VIA: l1=TqoDVanjjr6wMExF\r\nL-VERSION: 1784720560\r\nL-Request-Id: 3ec819fb5824454c0f1\r\nX-Cache-Status: BYPASS\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":340163,"size_decoded":94183,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (64894), with no line terminators","md5":"8325235b613820a57b71043f360e5b36","sha1":"925ff977edf9892e868d43915f93d29e6feeb113","sha256":"0c505f39a463b09ece16c213b7ead75186dcdc26d25ee02dcba5a62cc0dff7c6","sha512":"efd16c9b7ff0f806890ae77542e8c0d4e954f8c797ff21b8dcde3f240e4940ca3c6d0fe75ee2fda35bf53ff5d0eb691fa7e38cfdfa82c0f231b0cd57458fbcf2","ssdeep":"6144:N0hEyLkbJDb7w/1FOAmBm7cene7Ancbt8sbyAkKJwoSlt5MMjmlHGwwzHUY9SroE:N0hEyLkFDb7w/1FOAmBm7cenaAncbt84","tlshash":"8a742b94b290b17883af86fb731a91a1d24d0e9460ccace4f27e6e407f15746b8775ec","first_seen":"2026-06-12T19:29:57.248751Z","last_seen":"2026-07-31T12:41:47.015383Z","times_seen":915,"resource_available":true,"data":null}},"time_used":689,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":549,"receive":140,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-31","alert":"Phishing Block","trigger":"y42t.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-31","alert":"Sinkholed","trigger":"y42t.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"y42t.top/jumpto/img/https://rcf-img-hk.gasdg646fs224cn.com/202508/_webp_size1884x434_8953c3b5-a3a1-4b97-a677-4b5efb3fb94a.jpg","fqdn":"y42t.top","domain":"y42t.top","tld":"top"},"ip":{"addr":"154.39.104.138","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://y42t.top/","date":"2026-07-31T00:10:42.391Z","timestamp":1785456642391,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"p40f.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 10:44:09 GMT","end":"Tue, 20 Oct 2026 10:44:08 GMT"},"fingerprint":{"sha1":"41:09:2C:3F:FC:9C:25:A9:DB:51:15:BB:D1:5A:D8:01:DC:38:AD:F8","sha256":"49:3B:29:C7:5B:B6:12:CF:84:14:5B:09:42:7D:EF:AA:61:29:EC:A1:D5:40:B5:64:5C:F1:33:AB:9B:E1:13:4D"}}},"request":{"raw":"GET /jumpto/img/https://rcf-img-hk.gasdg646fs224cn.com/202508/_webp_size1884x434_8953c3b5-a3a1-4b97-a677-4b5efb3fb94a.jpg HTTP/1.1\r\nHost: y42t.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://y42t.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 31 Jul 2026 00:10:42 GMT\r\nContent-Type: image/webp\r\nContent-Length: 37528\r\nConnection: keep-alive\r\netag: \"906ab41cba21ba54bbb80ed3dacbb04b\"\r\nLast-Modified: Wed, 10 Dec 2025 10:48:21 GMT\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=X0uyXnJ1CxyCLok3zQBt1fEP%2BXJfzYWHyxsEEZAUjxoxYTQeOzA%2B0ZTV4Bwd3a5pOYFZabywAhVhrenudES1aS%2FyVj8ld1SzyClHr8kqG0VIGJAHJt%2FF2VfYRMcThwENClcu1M4vxp8InWASce4BzSQ%3D\"}]}\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nAge: 499185\r\ncf-cache-status: HIT\r\nCF-RAY: a208c6903b6909e8-HKG\r\nalt-svc: h3=\":443\"; ma=86400\r\nCache-Control: public, max-age=2592000, immutable, public, max-age=2592000, immutable\r\nAccess-Control-Allow-Origin: *\r\nX-Custom-Check: true\r\nServer: Nginx\r\nL-Safe: 1785456642=csqYCqnSrfqstQvye8K/cOFcRTOv1c0xbYhymJAs0/02+uXPG5GVyZ0p6izerPHm8MGf7A/o5MmlVb25OTDKDKeQU0rR3SBVQb7DhxtPpD3sSzxoSDG3GUN9oldUbp9/49xVY7UWBgnWGNvQm3pHmukuHRLxIzXXppUlpGs5PUC8OL5ESDjYobwSrUxT4jKY\r\nL-VIA: l1=TqoDVanjjr6wMExF\r\nL-VERSION: 1784720560\r\nL-Request-Id: 3ec919fb58249e9c08e\r\nX-Cache-Status: HIT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":37528,"size_decoded":38683,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1884x434, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"906ab41cba21ba54bbb80ed3dacbb04b","sha1":"e08f7dbbfa8dbd35da5d1dcd0f053655549ab960","sha256":"a1ab44f6e154a62ec1ef0e0298fd9b4844f915511f4f611b7c0249fe0c18cf96","sha512":"e2f606f28782502ed4817ea9526830bb828b6519748e5ffb9877151958d0e4b971f028c39fe42c321df89af615265f25fce12495edfc0a668b07032b17b38f1e","ssdeep":"768:FlLwXc9bK7xo/wY1n6usZ+BDB6rZgXCEMyLjPzfQ/rbRe:XLwc9e7xoR5BDCgPMQfU3I","tlshash":"56f2f12f58773be86d763b7184e94068b008659b7f4b0c56087f338b866f73617e11a6","first_seen":"2026-04-24T23:10:16.777817Z","last_seen":"2026-07-31T12:41:47.086354Z","times_seen":1155,"resource_available":false,"data":null}},"time_used":650,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":430,"receive":220,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-31","alert":"Phishing Block","trigger":"y42t.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-31","alert":"Sinkholed","trigger":"y42t.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"photo.365live88.com/img/fb/team/8a82fba2100249619a58a86eb901a931?win007=sell","fqdn":"photo.365live88.com","domain":"365live88.com","tld":"com"},"ip":{"addr":"154.41.93.240","port":443,"asn":174,"as":"COGENT-174","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://y42t.top/","date":"2026-07-31T00:10:42.522Z","timestamp":1785456642522,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"photo.365live88.com","organization":""},"issuer":{"commonName":"Encryption Everywhere DV TLS CA - G2","organization":"DigiCert Inc"},"validity":{"start":"Sat, 01 Nov 2025 00:00:00 GMT","end":"Sat, 31 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"45:76:43:9C:31:C5:89:A6:99:FD:9B:D8:6C:A9:3A:E6:2F:D6:E9:80","sha256":"73:27:CF:D8:8D:AC:95:46:00:5D:67:05:1E:70:22:3E:17:F0:94:78:CD:6F:A6:9C:C8:5F:B5:3B:75:60:3D:C8"}}},"request":{"raw":"GET /img/fb/team/8a82fba2100249619a58a86eb901a931?win007=sell HTTP/1.1\r\nHost: photo.365live88.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://y42t.top/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: openresty\r\nDate: Fri, 31 Jul 2026 00:10:47 GMT\r\nContent-Type: image/png\r\nContent-Length: 12744\r\nConnection: keep-alive\r\nAccept-Ranges: bytes\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Expose-Headers: X-Log, X-Reqid\r\nAccess-Control-Max-Age: 2592000\r\nAge: 33044\r\nCache-Control: public, max-age=31536000\r\nContent-Disposition: inline; filename=\"8a82fba2100249619a58a86eb901a931\"; filename*=utf-8''8a82fba2100249619a58a86eb901a931\r\nContent-Md5: USdQspVdjNlZ9IY37fcZ9w==\r\nContent-Transfer-Encoding: binary\r\nEtag: \"Fsm1g4gIP9grTUbZb3eiCVwkeQNR\"\r\nLast-Modified: Fri, 24 Jul 2026 19:50:34 GMT\r\nX-Log: X-Log\r\nX-M-Log: QNM:wldsg121;QNM3\r\nX-M-Reqid: Jw9Plx5Cl\r\nX-Qiniu-Zone: as0\r\nX-Qnm-Cache: Hit\r\nX-Reqid: ct8AAAD1JrxOGccY\r\nX-Svr: IO\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":12744,"size_decoded":13500,"mime_type":"image/png","magic":"PNG image data, 150 x 150, 8-bit/color RGBA, non-interlaced","md5":"512750b2955d8cd959f48637edf719f7","sha1":"c9b58388083fd82b4d46d96f77a2095c24790351","sha256":"a5a3ecd388694842ef1e0a543d8b38045ba9cb664bde11284d6dc1e2b4115b66","sha512":"7f61023c1d31afdad2e36144018f174631f2ce670464ee5c5b6ebbfc1d2272abaa3ba4fb8674c8f5005245c411ce3d50acfdf7dbc102e1ce7ea19b3bca2c882d","ssdeep":"384:jlwWQOHIijjaYgJTADXmEVPre4Xzr2KbosY0vPCg5:jlwWQOo0jjAT01VPXXzr/hPv5","tlshash":"df42d18c8ca59acd378938312ed70b056981d934bf4cf35cb145ed28626e00a57a7eab","first_seen":"2023-08-24T20:41:52Z","last_seen":"2026-07-31T12:41:15.177217Z","times_seen":24,"resource_available":false,"data":null}},"time_used":5215,"timings":{"blocked":4970,"dns":0,"connect":0,"send":0,"wait":245,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"photo.365live88.com/img/fb/team/148a435df3ae4af3b211460e9ab64b56?win007=sell","fqdn":"photo.365live88.com","domain":"365live88.com","tld":"com"},"ip":{"addr":"154.41.93.240","port":443,"asn":174,"as":"COGENT-174","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://y42t.top/","date":"2026-07-31T00:10:42.529Z","timestamp":1785456642529,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"photo.365live88.com","organization":""},"issuer":{"commonName":"Encryption Everywhere DV TLS CA - G2","organization":"DigiCert Inc"},"validity":{"start":"Sat, 01 Nov 2025 00:00:00 GMT","end":"Sat, 31 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"45:76:43:9C:31:C5:89:A6:99:FD:9B:D8:6C:A9:3A:E6:2F:D6:E9:80","sha256":"73:27:CF:D8:8D:AC:95:46:00:5D:67:05:1E:70:22:3E:17:F0:94:78:CD:6F:A6:9C:C8:5F:B5:3B:75:60:3D:C8"}}},"request":{"raw":"GET /img/fb/team/148a435df3ae4af3b211460e9ab64b56?win007=sell HTTP/1.1\r\nHost: photo.365live88.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://y42t.top/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: openresty\r\nDate: Fri, 31 Jul 2026 00:10:48 GMT\r\nContent-Type: image/gif\r\nContent-Length: 6454\r\nConnection: keep-alive\r\nAccept-Ranges: bytes\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Expose-Headers: X-Log, X-Reqid\r\nAccess-Control-Max-Age: 2592000\r\nAge: 29320\r\nCache-Control: public, max-age=31536000\r\nContent-Disposition: inline; filename=\"148a435df3ae4af3b211460e9ab64b56\"; filename*=utf-8''148a435df3ae4af3b211460e9ab64b56\r\nContent-Md5: MS+kRegSswqUU+2FIcxfYA==\r\nContent-Transfer-Encoding: binary\r\nEtag: \"FotxhaQeisfq7YSbFrI6Dsz7eDSI\"\r\nLast-Modified: Sat, 25 Jul 2026 19:15:17 GMT\r\nX-Log: X-Log\r\nX-M-Log: QNM:wldsg121;QNM3\r\nX-M-Reqid: gPxBG3Vhr\r\nX-Qiniu-Zone: as0\r\nX-Qnm-Cache: Hit\r\nX-Reqid: 0FUAAACQOxWyHMcY\r\nX-Svr: IO\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":6454,"size_decoded":7209,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 150x150, components 3","md5":"312fa445e812b30a9453ed8521cc5f60","sha1":"8b7185a41e8ac7eaed849b16b23a0eccfb783488","sha256":"d36f3b2e4251c865521468d4aa476fae0957b3c2084171e77eea5081c7ea43e4","sha512":"7d0ac45aad96c343a4fdc9e234f611f08810f63f5d8ed5aa761e9f87b7de5e122e900ead7d3ff3e7b4eadbecb573758f245784c6825ad2eeb911058b82533976","ssdeep":"96:ghsDZ5Ua/PLpJm7suOeOzxCHBYdQ6XIyU1VoWaTfOo443d6ZMHJY7X01vCXC+tEV:msD4OPL6suk1ChNOMLarJ448KY6vBKEV","tlshash":"a5d19e526a17e14adf6880ba88cfbe0c2a954699c1530174fa3db42ddc30e772c5f2e8","first_seen":"2025-12-06T18:06:27.14768Z","last_seen":"2026-07-31T12:41:15.207867Z","times_seen":18,"resource_available":false,"data":null}},"time_used":5706,"timings":{"blocked":5464,"dns":0,"connect":0,"send":0,"wait":242,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"y42t.top/jumpto/img/https://rcf-img-hk.gasdg646fs224cn.com/202503/_webp_size649x578_6ba5f6e7-0a03-42b1-aae6-3de33d838c71.png","fqdn":"y42t.top","domain":"y42t.top","tld":"top"},"ip":{"addr":"154.39.104.138","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://y42t.top/","date":"2026-07-31T00:10:42.864Z","timestamp":1785456642864,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"p40f.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 10:44:09 GMT","end":"Tue, 20 Oct 2026 10:44:08 GMT"},"fingerprint":{"sha1":"41:09:2C:3F:FC:9C:25:A9:DB:51:15:BB:D1:5A:D8:01:DC:38:AD:F8","sha256":"49:3B:29:C7:5B:B6:12:CF:84:14:5B:09:42:7D:EF:AA:61:29:EC:A1:D5:40:B5:64:5C:F1:33:AB:9B:E1:13:4D"}}},"request":{"raw":"GET /jumpto/img/https://rcf-img-hk.gasdg646fs224cn.com/202503/_webp_size649x578_6ba5f6e7-0a03-42b1-aae6-3de33d838c71.png HTTP/1.1\r\nHost: y42t.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://y42t.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 31 Jul 2026 00:10:47 GMT\r\nContent-Type: image/webp\r\nContent-Length: 72698\r\nConnection: keep-alive\r\netag: \"8173a97e42cbe83253f569868015813a\"\r\nLast-Modified: Sat, 06 Dec 2025 06:22:44 GMT\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=r4U35o6aQWH9%2FsI71fS5nZRO1yGPVcHPYrBZg6uNQsljfhHm9y2l9%2Fm54pFcWpwiLcNW0EbqH4K7WJ1%2BfncaKwG3I5u8lH0mAh6RDEHkEi1zvkj6d4NOyYvzCHxu6hVm%2FY1R%2FDWeakaLp4DBK4rVdDk%3D\"}]}\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nAge: 499204\r\ncf-cache-status: HIT\r\nCF-RAY: a208c6367bc5859d-HKG\r\nalt-svc: h3=\":443\"; ma=86400\r\nCache-Control: public, max-age=2592000, immutable, public, max-age=2592000, immutable\r\nAccess-Control-Allow-Origin: *\r\nX-Custom-Check: true\r\nServer: Nginx\r\nL-Safe: 1785456647=pwbyu29rM0HEK42bpjFMXQZZ8s1IzzkT40daNMbcT90Ub0zpvrQ+kBR7N9vkAvLpdcGVCAkYTtjHzFt3rikpG2u0ViQwOg9Y/d8oh3QnzrskfHJpkQ3k6DdsyXdsoVGvpU7l+6O6Z96TYcnIdvgBPUL8UMfWMnVf++Fvg3TWLhL2ZP4it9BY8MKVve4d74hd\r\nL-VIA: l1=TqoDVanjjr6wMExF\r\nL-VERSION: 1784720560\r\nL-Request-Id: 3ec919fb5825b9bc0a2\r\nX-Cache-Status: HIT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":72698,"size_decoded":73855,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"8173a97e42cbe83253f569868015813a","sha1":"42ea560648d24b5b2f7a2707de2db0bdebc8f41e","sha256":"b6bf9777cb024d6afd79cdfab403bf54676a54ea6065abf0e8d02344a42bf8fd","sha512":"619c7b0a75af0e07e0929b087fda0183eae617910500da47727ff8b6d29e6dc98846c2e19a1fbe6d042c648c32aa24db9e0cd047a55f7256ca565e66376edaa8","ssdeep":"1536:ZYxIgPfY+3lbLKrfSQK0ds+ePjygtx4Ifql:Z0vfY+3lKrq4ds+QJtx2l","tlshash":"3663020b5a1dc95a0ae20441673a5bdeecc72324e27535c5a075fcbffad3f75414281a","first_seen":"2026-04-24T23:10:16.700652Z","last_seen":"2026-07-31T12:36:18.800928Z","times_seen":894,"resource_available":false,"data":null}},"time_used":4405,"timings":{"blocked":4035,"dns":0,"connect":0,"send":0,"wait":314,"receive":56,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-31","alert":"Phishing Block","trigger":"y42t.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-31","alert":"Sinkholed","trigger":"y42t.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"photo.365live88.com/img/fb/team/dc801264b47248fea68e4a8860e632aa?win007=sell","fqdn":"photo.365live88.com","domain":"365live88.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://y42t.top/","date":"2026-07-31T00:10:42.435Z","timestamp":1785456642435,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /img/fb/team/dc801264b47248fea68e4a8860e632aa?win007=sell HTTP/1.1\r\nHost: photo.365live88.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://y42t.top/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-31T20:32:35.777412Z","times_seen":17640239,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"photo.365live88.com/img/fb/team/e1ccc12fb98d4244976fd3489db4ee4b?win007=sell","fqdn":"photo.365live88.com","domain":"365live88.com","tld":"com"},"ip":{"addr":"154.41.93.240","port":443,"asn":174,"as":"COGENT-174","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://y42t.top/","date":"2026-07-31T00:10:42.559Z","timestamp":1785456642559,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"photo.365live88.com","organization":""},"issuer":{"commonName":"Encryption Everywhere DV TLS CA - G2","organization":"DigiCert Inc"},"validity":{"start":"Sat, 01 Nov 2025 00:00:00 GMT","end":"Sat, 31 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"45:76:43:9C:31:C5:89:A6:99:FD:9B:D8:6C:A9:3A:E6:2F:D6:E9:80","sha256":"73:27:CF:D8:8D:AC:95:46:00:5D:67:05:1E:70:22:3E:17:F0:94:78:CD:6F:A6:9C:C8:5F:B5:3B:75:60:3D:C8"}}},"request":{"raw":"GET /img/fb/team/e1ccc12fb98d4244976fd3489db4ee4b?win007=sell HTTP/1.1\r\nHost: photo.365live88.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://y42t.top/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: openresty\r\nDate: Fri, 31 Jul 2026 00:10:50 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 2024\r\nConnection: keep-alive\r\nAccept-Ranges: bytes\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Expose-Headers: X-Log, X-Reqid\r\nAccess-Control-Max-Age: 2592000\r\nAge: 19537\r\nCache-Control: public, max-age=31536000\r\nContent-Disposition: inline; filename=\"e1ccc12fb98d4244976fd3489db4ee4b\"; filename*=utf-8''e1ccc12fb98d4244976fd3489db4ee4b\r\nContent-Md5: zLLxb1DfF5PYDANPeUxK8g==\r\nContent-Transfer-Encoding: binary\r\nEtag: \"Fig2qH6qJe1Gm75kxtU52IGXLpOR\"\r\nLast-Modified: Sat, 25 Jul 2026 19:18:00 GMT\r\nX-Log: X-Log\r\nX-M-Log: QNM:wldsg121;QNM3\r\nX-M-Reqid: uKyNuDCpp\r\nX-Qiniu-Zone: as0\r\nX-Qnm-Cache: Hit\r\nX-Reqid: OhsAAAASynCYJccY\r\nX-Svr: IO\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2024,"size_decoded":2780,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 80x80, components 3","md5":"ccb2f16f50df1793d80c034f794c4af2","sha1":"2836a87eaa25ed469bbe64c6d539d881972e9391","sha256":"7bbd97f361674ff281f5658b439daa47195d694d32ffdda38f0b82ffb8426e3c","sha512":"739d288be3a4a3c0c9f3382ee50bb9c8e48cc0042bbd1f176790cd4919193a7465cf9775384289b62c68a6a9cd9cdfaaf44a910bfbd96be493bfe70623b42b27","ssdeep":"","tlshash":"5941e8930510a64bf9133cf508c33b40369b0f22ca3d9f9624c9d432566755a2b0a296","first_seen":"2026-07-31T00:11:28.005235Z","last_seen":"2026-07-31T12:41:47.087493Z","times_seen":10,"resource_available":false,"data":null}},"time_used":8165,"timings":{"blocked":7915,"dns":0,"connect":0,"send":0,"wait":250,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"y42t.top/jumpto/img/https://rcf-img-hk.gasdg646fs224cn.com/202603/_webp_size1080x1196_b15d1708-bfce-458e-bd99-5bc1134b7122.png","fqdn":"y42t.top","domain":"y42t.top","tld":"top"},"ip":{"addr":"154.39.104.138","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://y42t.top/","date":"2026-07-31T00:10:42.647Z","timestamp":1785456642647,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"p40f.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 10:44:09 GMT","end":"Tue, 20 Oct 2026 10:44:08 GMT"},"fingerprint":{"sha1":"41:09:2C:3F:FC:9C:25:A9:DB:51:15:BB:D1:5A:D8:01:DC:38:AD:F8","sha256":"49:3B:29:C7:5B:B6:12:CF:84:14:5B:09:42:7D:EF:AA:61:29:EC:A1:D5:40:B5:64:5C:F1:33:AB:9B:E1:13:4D"}}},"request":{"raw":"GET /jumpto/img/https://rcf-img-hk.gasdg646fs224cn.com/202603/_webp_size1080x1196_b15d1708-bfce-458e-bd99-5bc1134b7122.png HTTP/1.1\r\nHost: y42t.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://y42t.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 31 Jul 2026 00:10:42 GMT\r\nContent-Type: image/webp\r\nContent-Length: 48628\r\nConnection: keep-alive\r\netag: \"170614bf75e281d0f05503cdeab75a59\"\r\nLast-Modified: Thu, 19 Mar 2026 14:50:59 GMT\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ukqV24UNaloIb1iKx075VeZer3jHVNX2ERCWJ3N%2Bs8%2FwP9vqB9a9m78WXup0CdGzRIoBmniVrAYxbV7w%2BQ25ToRZfVli8F4HJtavfu83do8H%2FXuDwYaXvMw7MnHPNUd%2BwxQdHtkbBMdv1z64zmau468%3D\"}]}\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nAge: 500478\r\ncf-cache-status: HIT\r\nCF-RAY: a208a6fbdd99983b-HKG\r\nalt-svc: h3=\":443\"; ma=86400\r\nCache-Control: public, max-age=2592000, immutable, public, max-age=2592000, immutable\r\nAccess-Control-Allow-Origin: *\r\nX-Custom-Check: true\r\nServer: Nginx\r\nL-Safe: 1785456642=csqYCqnSrfqstQvye8K/cOFcRTOv1c0xbYhymJAs0/02+uXPG5GVyZ0p6izerPHm8MGf7A/o5MmlVb25OTDKDKeQU0rR3SBVQb7DhxtPpD3sSzxoSDG3GUN9oldUbp9/49xVY7UWBgnWGNvQm3pHmukuHRLxIzXXppUlpGs5PUC8OL5ESDjYobwSrUxT4jKY\r\nL-VIA: l1=TqoDVanjjr6wMExF\r\nL-VERSION: 1784720560\r\nL-Request-Id: 3ec919fb5824ae9c08f\r\nX-Cache-Status: HIT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":48628,"size_decoded":49785,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1080x1196, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"170614bf75e281d0f05503cdeab75a59","sha1":"32025008b56adf94f2a64724f1b00f55939db943","sha256":"010f104d5782b172955179537b5945b89f7a5ac32185a63d67ea5405d5c13733","sha512":"e11fa01405248d40ad8f95f335734207193356f418418955cafc6ebdfa04f5a08d8e304d23c34b211fd9dc7cdab36710694ccd0585c79778a156bf214750346a","ssdeep":"768:tk9BmrgO1s4wjUc8pqYtHwHGvhSgV1iCdmcmxWSqZA16T2rrKhv0cQ6ZQOc4vS9P:tkbmrgO1srjUtkEn5LTdmcmxnqC0aKhm","tlshash":"4223f124d4de0cda1978e776f637574cdb8b325fabc4601f82c9499f800ab04c6628ee","first_seen":"2026-03-20T12:57:26.684793Z","last_seen":"2026-07-31T12:36:18.76262Z","times_seen":1031,"resource_available":false,"data":null}},"time_used":302,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":293,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-31","alert":"Sinkholed","trigger":"y42t.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-31","alert":"Phishing Block","trigger":"y42t.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"y42t.top/jumpto/img/https://rcf-img-hk.gasdg646fs224cn.com/202503/_webp_size649x578_95e34ac6-aa0b-4d3f-9ae0-451b7e2983d6.png","fqdn":"y42t.top","domain":"y42t.top","tld":"top"},"ip":{"addr":"154.39.104.138","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://y42t.top/","date":"2026-07-31T00:10:42.842Z","timestamp":1785456642842,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"p40f.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 10:44:09 GMT","end":"Tue, 20 Oct 2026 10:44:08 GMT"},"fingerprint":{"sha1":"41:09:2C:3F:FC:9C:25:A9:DB:51:15:BB:D1:5A:D8:01:DC:38:AD:F8","sha256":"49:3B:29:C7:5B:B6:12:CF:84:14:5B:09:42:7D:EF:AA:61:29:EC:A1:D5:40:B5:64:5C:F1:33:AB:9B:E1:13:4D"}}},"request":{"raw":"GET /jumpto/img/https://rcf-img-hk.gasdg646fs224cn.com/202503/_webp_size649x578_95e34ac6-aa0b-4d3f-9ae0-451b7e2983d6.png HTTP/1.1\r\nHost: y42t.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://y42t.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 31 Jul 2026 00:10:45 GMT\r\nContent-Type: image/webp\r\nContent-Length: 72760\r\nConnection: keep-alive\r\netag: \"f3567ecc873ade2418801f0f5a4a755f\"\r\nLast-Modified: Sat, 06 Dec 2025 06:17:08 GMT\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Vzw7LOTjfhIsvd3t3TmDKk0LEZl6vf5A7DVoxbwgZmJH7HdYjux7pyGSE9CH3G1r1SOGNwKnRDh7xF77nby7V8%2Fm5SQb2dwER63j7aeBgTuk6D8zYrqxsrF7%2Bys%2FX3%2FyXgyNg4V9lRg8xIu2Qo%2F5%2BIM%3D\"}]}\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nAge: 499204\r\ncf-cache-status: HIT\r\nCF-RAY: a208c62bea8cdd62-HKG\r\nalt-svc: h3=\":443\"; ma=86400\r\nCache-Control: public, max-age=2592000, immutable, public, max-age=2592000, immutable\r\nAccess-Control-Allow-Origin: *\r\nX-Custom-Check: true\r\nServer: Nginx\r\nL-Safe: 1785456645=3m/UQghxNGW3gPChBH0qwAw5jhMnk/bL7ljEsAqUNfL2w1i0HQREe2rEb4k+hpOpl+mNkeotUTn7rI4RELPi496PFmfq0fH/qKdAcrqsvLVi0CluaNffWUzPkudCch2/uigQXMAy3JVAvXsWZA3UDGCysooGP/loOgkjhRbwnpUqbTZcGQok3Gq63qCfb31c\r\nL-VIA: l1=TqoDVanjjr6wMExF\r\nL-VERSION: 1784720560\r\nL-Request-Id: 3ec519fb5825750c07a\r\nX-Cache-Status: HIT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":72760,"size_decoded":73919,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"f3567ecc873ade2418801f0f5a4a755f","sha1":"e8fc02b34bd284bdffb53faea4cf595658b0313c","sha256":"4b1a175ed7a2578bee0892a9483844a11bd86070caf612d6714d961747b38420","sha512":"857339772b7cd720df654fc85ac26d103e6cb1ef75e2e1b3dd377b6403b34112dd44a07521fdcd476bdb0b657c3525cb25796ad3ae24a8820ef947c6718d9c44","ssdeep":"1536:GqiacLi4hDdd3WrRvp1BtjWbzMEws521D5kBTVhe3w/PKgXJcuSOe:G71L7hgrhXBtjgzMEF5A+VkEPhNe","tlshash":"0b6302ccd2cc9aa0c4a46cd7f4057b38a962b589664f997303e2e387cac4bd917171bd","first_seen":"2026-04-24T23:10:16.730515Z","last_seen":"2026-07-31T12:36:18.778969Z","times_seen":922,"resource_available":false,"data":null}},"time_used":3281,"timings":{"blocked":2957,"dns":0,"connect":0,"send":0,"wait":305,"receive":19,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-31","alert":"Phishing Block","trigger":"y42t.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-31","alert":"Sinkholed","trigger":"y42t.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"y42t.top/jumpto/img/https://rcf-img-hk.gasdg646fs224cn.com/202503/_webp_size649x578_d4d2b521-861c-48d3-89a5-438931453851.png","fqdn":"y42t.top","domain":"y42t.top","tld":"top"},"ip":{"addr":"154.39.104.138","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://y42t.top/","date":"2026-07-31T00:10:42.882Z","timestamp":1785456642882,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"p40f.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 10:44:09 GMT","end":"Tue, 20 Oct 2026 10:44:08 GMT"},"fingerprint":{"sha1":"41:09:2C:3F:FC:9C:25:A9:DB:51:15:BB:D1:5A:D8:01:DC:38:AD:F8","sha256":"49:3B:29:C7:5B:B6:12:CF:84:14:5B:09:42:7D:EF:AA:61:29:EC:A1:D5:40:B5:64:5C:F1:33:AB:9B:E1:13:4D"}}},"request":{"raw":"GET /jumpto/img/https://rcf-img-hk.gasdg646fs224cn.com/202503/_webp_size649x578_d4d2b521-861c-48d3-89a5-438931453851.png HTTP/1.1\r\nHost: y42t.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://y42t.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 31 Jul 2026 00:10:48 GMT\r\nContent-Type: image/webp\r\nContent-Length: 52456\r\nConnection: keep-alive\r\netag: \"c545c93beaefd4bd61fc5c1b18fc1cae\"\r\nLast-Modified: Sat, 06 Dec 2025 06:30:18 GMT\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6six98g0O1Sv6WrFjmUU7BVGIWSGQHL3FB4yFijfa91dMQZ%2Bm1or77vRjANvCI8V7n02wROWfw0vkvKecGsTf%2F2orXNR%2FTbvjr9QJvs60D70UcWxbwXKoR35ArEHv0ZtiXcbxpQtxLCqfi0TSKHkdOE%3D\"}]}\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nAge: 499200\r\ncf-cache-status: HIT\r\nCF-RAY: a208c653499425e5-HKG\r\nalt-svc: h3=\":443\"; ma=86400\r\nCache-Control: public, max-age=2592000, immutable, public, max-age=2592000, immutable\r\nAccess-Control-Allow-Origin: *\r\nX-Custom-Check: true\r\nServer: Nginx\r\nL-Safe: 1785456648=Z7fxofmZ9hv3/XQ5t4frSKj942TDDEVXgFNewEpAWWZeSSGmfBEq5p68Wd3/3y67+UP5RiFuBM1NHhhqN9RGX44j5RrNYq5QVDzdwAN37T4mRc2TwqScY+zJAmvwDFiSdBQZRKjiyZLBbVL6KisnflY7oB9woowAE/HfHmrE5yoCQfCsCgc03AQt5IVZ52aB\r\nL-VIA: l1=TqoDVanjjr6wMExF\r\nL-VERSION: 1784720560\r\nL-Request-Id: 3ec819fb5825fccc111\r\nX-Cache-Status: HIT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":52456,"size_decoded":53609,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"c545c93beaefd4bd61fc5c1b18fc1cae","sha1":"19a7126947210454bd434f5642d579bf87bb0e99","sha256":"c3a29377aa06329a7068664cec9166fbcf02f0724f8938eac5106b1c3a6b4644","sha512":"bff91a20b5bcb7b7eab35453005dffaa98033341f7eeaaec88a0c4b414d0d06511b4c05ebb0c3723aaaf654bc9f0c372ad3b5b288030b1d899736b27b84f0208","ssdeep":"768:n4M8fxEbpGtvfqj0Bs8GkjOhpAh9bzillpUed5V/7hz9WJVI7X1BPFLN7CLrJneU:nifKNsXI0ex7lgVMPZN7ErJnnZ","tlshash":"333302a0d69cc510dbf8d6bf0a5130fc5e88fa501ea53bab4b804cdd889e5e4e51f60b","first_seen":"2026-04-24T23:10:16.825501Z","last_seen":"2026-07-31T12:41:47.003992Z","times_seen":1030,"resource_available":false,"data":null}},"time_used":5415,"timings":{"blocked":5075,"dns":0,"connect":0,"send":0,"wait":324,"receive":16,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-31","alert":"Sinkholed","trigger":"y42t.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-31","alert":"Phishing Block","trigger":"y42t.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"y42t.top/js/31098.1781011881923.4108b3dd.js","fqdn":"y42t.top","domain":"y42t.top","tld":"top"},"ip":{"addr":"154.39.104.138","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://y42t.top/","date":"2026-07-31T00:10:41.603Z","timestamp":1785456641603,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"p40f.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 10:44:09 GMT","end":"Tue, 20 Oct 2026 10:44:08 GMT"},"fingerprint":{"sha1":"41:09:2C:3F:FC:9C:25:A9:DB:51:15:BB:D1:5A:D8:01:DC:38:AD:F8","sha256":"49:3B:29:C7:5B:B6:12:CF:84:14:5B:09:42:7D:EF:AA:61:29:EC:A1:D5:40:B5:64:5C:F1:33:AB:9B:E1:13:4D"}}},"request":{"raw":"GET /js/31098.1781011881923.4108b3dd.js HTTP/1.1\r\nHost: y42t.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://y42t.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 31 Jul 2026 00:10:41 GMT\r\nContent-Type: application/javascript\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Tue, 09 Jun 2026 13:37:11 GMT\r\nVary: Accept-Encoding\r\nETag: W/\"6a281707-561e2\"\r\nCache-Control: public, max-age=31536000, immutable\r\nAccess-Control-Allow-Origin: *\r\nX-Custom-Check: true\r\nContent-Encoding: gzip\r\nServer: Nginx\r\nL-Safe: 1785456641=gE780zdPNeqfjPR58ntui758h0rpjLBJh/P/VwEb9QgBdmX5XoCvf3XKS4ubqYQ4aAZoEOOBDBlTTobn+2eZbZ0U5rmjaj2YBZiCmX90g8Si+D3mrq6vSJjZwkQXhlFZx6UYXbz//HB3stXeGCYUIUvqR8AbEmVqeF09wWmA11wJgMs9cyGCHyv3ab/jWW+R\r\nL-VIA: l1=TqoDVanjjr6wMExF\r\nL-VERSION: 1784720560\r\nL-Request-Id: 3ec119fb58246d7c2b7\r\nX-Cache-Status: BYPASS\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":352738,"size_decoded":65643,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65338), with no line terminators","md5":"3c55e2f7f495cd530603e700dd3bf229","sha1":"fdcabc58e872fde99b7d704711a75bc32cc2b8c8","sha256":"1c38b781ee4a302e955baab7d3306365881227cafc2814e1085f93f4ab0342d8","sha512":"94954c49e71bd95a7543f652e03bf68b5dd26d00b33c91eda9003ef81e37aa5735e846bc9322d52181550f0d010d125479a73d83dec0fe51fa0c4f2489108326","ssdeep":"1536:Z+0YvC9jlTKAUSseG1SY46DCdlBBo3AgXOG9AsqCfCXsvCfCXsLCfCXsyCfCXsfX:sKK5sY4brG7O3SnLJNpL","tlshash":"6174b6f4c248c6fdea04ce0a7e7d6f2d50723783f2ec56c446aaf8865e92857245c4da","first_seen":"2026-05-19T02:14:56.370466Z","last_seen":"2026-07-31T12:41:47.157793Z","times_seen":931,"resource_available":true,"data":null}},"time_used":588,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":389,"receive":199,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-31","alert":"Sinkholed","trigger":"y42t.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-31","alert":"Phishing Block","trigger":"y42t.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"photo.365live88.com/img/fb/team/2dde01b6a0cc4c0f8eb2b1a59e52b2c3?win007=sell","fqdn":"photo.365live88.com","domain":"365live88.com","tld":"com"},"ip":{"addr":"154.41.93.240","port":443,"asn":174,"as":"COGENT-174","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://y42t.top/","date":"2026-07-31T00:10:42.557Z","timestamp":1785456642557,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"photo.365live88.com","organization":""},"issuer":{"commonName":"Encryption Everywhere DV TLS CA - G2","organization":"DigiCert Inc"},"validity":{"start":"Sat, 01 Nov 2025 00:00:00 GMT","end":"Sat, 31 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"45:76:43:9C:31:C5:89:A6:99:FD:9B:D8:6C:A9:3A:E6:2F:D6:E9:80","sha256":"73:27:CF:D8:8D:AC:95:46:00:5D:67:05:1E:70:22:3E:17:F0:94:78:CD:6F:A6:9C:C8:5F:B5:3B:75:60:3D:C8"}}},"request":{"raw":"GET /img/fb/team/2dde01b6a0cc4c0f8eb2b1a59e52b2c3?win007=sell HTTP/1.1\r\nHost: photo.365live88.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://y42t.top/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: openresty\r\nDate: Fri, 31 Jul 2026 00:10:50 GMT\r\nContent-Type: image/png\r\nContent-Length: 6280\r\nConnection: keep-alive\r\nAccept-Ranges: bytes\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Expose-Headers: X-Log, X-Reqid\r\nAccess-Control-Max-Age: 2592000\r\nAge: 19537\r\nCache-Control: public, max-age=31536000\r\nContent-Disposition: inline; filename=\"2dde01b6a0cc4c0f8eb2b1a59e52b2c3\"; filename*=utf-8''2dde01b6a0cc4c0f8eb2b1a59e52b2c3\r\nContent-Md5: XHOH5zstFf77UWBJsFVo0g==\r\nContent-Transfer-Encoding: binary\r\nEtag: \"FmXyq7Mxe_UqxwJah1C5hXSDu7ax\"\r\nLast-Modified: Sat, 25 Jul 2026 19:18:01 GMT\r\nX-Log: X-Log\r\nX-M-Log: QNM:wldsg119;QNM3\r\nX-M-Reqid: AuhLUWxOQ\r\nX-Qiniu-Zone: as0\r\nX-Qnm-Cache: Hit\r\nX-Reqid: HF0AAABRY1iYJccY\r\nX-Svr: IO\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6280,"size_decoded":7035,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 160x160, components 3","md5":"5c7387e73b2d15fefb516049b05568d2","sha1":"65f2abb3317bf52ac7025a8750b9857483bbb6b1","sha256":"2b7c00cc3977d8d4b34c2c4dd7ba800edae1125d64eef3f3c623a4e768538ed8","sha512":"e8db48d9f89ca97d768a8ebd65317a8b4520f2d15ad90ef977cfba0490fc683e3c5faaadc3ec88b3b59873b731b88cbb7ed2dbe07fcbe08fe354eb8d52e4fc1c","ssdeep":"192:sHsOguq5EwlrbIdBZQ/Amx/N38MpZtmuU:oguq5jlrbIvZQ4W/F3pbmv","tlshash":"6fd1af335a41c810af570a73277f4fd00aa47a2fa4847deb42913166a9f00ce679ff94","first_seen":"2026-07-31T00:11:28.012093Z","last_seen":"2026-07-31T12:41:47.114577Z","times_seen":10,"resource_available":false,"data":null}},"time_used":7945,"timings":{"blocked":7679,"dns":0,"connect":0,"send":0,"wait":266,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"photo.365live88.com/img/fb/team/c26bf2b671eb41bfa2abe598264c90c2?win007=sell","fqdn":"photo.365live88.com","domain":"365live88.com","tld":"com"},"ip":{"addr":"154.41.93.240","port":443,"asn":174,"as":"COGENT-174","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://y42t.top/","date":"2026-07-31T00:10:42.569Z","timestamp":1785456642569,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"photo.365live88.com","organization":""},"issuer":{"commonName":"Encryption Everywhere DV TLS CA - G2","organization":"DigiCert Inc"},"validity":{"start":"Sat, 01 Nov 2025 00:00:00 GMT","end":"Sat, 31 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"45:76:43:9C:31:C5:89:A6:99:FD:9B:D8:6C:A9:3A:E6:2F:D6:E9:80","sha256":"73:27:CF:D8:8D:AC:95:46:00:5D:67:05:1E:70:22:3E:17:F0:94:78:CD:6F:A6:9C:C8:5F:B5:3B:75:60:3D:C8"}}},"request":{"raw":"GET /img/fb/team/c26bf2b671eb41bfa2abe598264c90c2?win007=sell HTTP/1.1\r\nHost: photo.365live88.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://y42t.top/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: openresty\r\nDate: Fri, 31 Jul 2026 00:10:51 GMT\r\nContent-Type: image/png\r\nContent-Length: 16927\r\nConnection: keep-alive\r\nAccept-Ranges: bytes\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Expose-Headers: X-Log, X-Reqid\r\nAccess-Control-Max-Age: 2592000\r\nAge: 7837\r\nCache-Control: public, max-age=31536000\r\nContent-Disposition: inline; filename=\"c26bf2b671eb41bfa2abe598264c90c2\"; filename*=utf-8''c26bf2b671eb41bfa2abe598264c90c2\r\nContent-Md5: s6BRrV+ACDsc/KCazfw0kQ==\r\nContent-Transfer-Encoding: binary\r\nEtag: \"FvkfQt2BEFCvC0u-WlBBMOUhzdFF\"\r\nLast-Modified: Tue, 21 Jul 2026 20:10:43 GMT\r\nX-Log: X-Log\r\nX-M-Log: QNM:wldsg121;QNM3\r\nX-M-Reqid: Q8hCojn3k\r\nX-Qiniu-Zone: as0\r\nX-Qnm-Cache: Hit\r\nX-Reqid: WAsAAABJJpw8MMcY\r\nX-Svr: IO\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":16927,"size_decoded":17682,"mime_type":"image/png","magic":"PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced","md5":"b3a051ad5f80083b1cfca09acdfc3491","sha1":"f91f42dd811050af0b4bbe5a504130e521cdd145","sha256":"eee76ec6b57546c35897e8acf63579f060de01f080195ab01fb81487ae66b8cd","sha512":"cff3091a28aa989698ffb97083d85aa17f4da6dc2fd32642f69bb1d1704524b0aee5e6ac330df1940cc3ca6d1a4d5a5b759f2d14fdf25bae7b123094375929e3","ssdeep":"384:B8LRpKapIYVC9H22MLNHpuTjh4PmTGqI2PCP8YpBJCZH:BYRAapI8aeL3Yh1TDPMpBC","tlshash":"bb72d1d59a4b73be207f69d9e259c23952b958c061db8ecf08c0bdde09d4e41af21604","first_seen":"2025-10-03T22:14:52.350325Z","last_seen":"2026-07-31T12:41:47.106615Z","times_seen":91,"resource_available":false,"data":null}},"time_used":9074,"timings":{"blocked":8786,"dns":0,"connect":0,"send":0,"wait":284,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"y42t.top/jumpto/img/https://rcf-img-hk.gasdg646fs224cn.com/gpmaster/_webp_size328x442_0fa85f10-2205-44f2-82c2-66bd141c7d57.png","fqdn":"y42t.top","domain":"y42t.top","tld":"top"},"ip":{"addr":"154.39.104.138","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://y42t.top/","date":"2026-07-31T00:10:42.878Z","timestamp":1785456642878,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"p40f.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 10:44:09 GMT","end":"Tue, 20 Oct 2026 10:44:08 GMT"},"fingerprint":{"sha1":"41:09:2C:3F:FC:9C:25:A9:DB:51:15:BB:D1:5A:D8:01:DC:38:AD:F8","sha256":"49:3B:29:C7:5B:B6:12:CF:84:14:5B:09:42:7D:EF:AA:61:29:EC:A1:D5:40:B5:64:5C:F1:33:AB:9B:E1:13:4D"}}},"request":{"raw":"GET /jumpto/img/https://rcf-img-hk.gasdg646fs224cn.com/gpmaster/_webp_size328x442_0fa85f10-2205-44f2-82c2-66bd141c7d57.png HTTP/1.1\r\nHost: y42t.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://y42t.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 31 Jul 2026 00:10:47 GMT\r\nContent-Type: image/webp\r\nContent-Length: 10174\r\nConnection: keep-alive\r\netag: \"7ac42d17bfd5a06e8fc6a329b7018939\"\r\nLast-Modified: Tue, 02 Dec 2025 15:07:04 GMT\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=V%2BhGKF2u%2BiAwIFpMbuErl09nEGfPdQuu1FSQcXGSVv1A%2B2IEFCNtxmAj2jCLou4QlBcsK5qsztalibemfGIqXZ4aveGEGPIiv6jr3jum5N9vkSO8kB2bhZsi6LbpUxZo0aSepWbHLrpU9A8YSo00yAM%3D\"}]}\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nAge: 499200\r\ncf-cache-status: HIT\r\nCF-RAY: a208c65048c971a8-HKG\r\nalt-svc: h3=\":443\"; ma=86400\r\nCache-Control: public, max-age=2592000, immutable, public, max-age=2592000, immutable\r\nAccess-Control-Allow-Origin: *\r\nX-Custom-Check: true\r\nServer: Nginx\r\nL-Safe: 1785456647=pwbyu29rM0HEK42bpjFMXQZZ8s1IzzkT40daNMbcT90Ub0zpvrQ+kBR7N9vkAvLpdcGVCAkYTtjHzFt3rikpG2u0ViQwOg9Y/d8oh3QnzrskfHJpkQ3k6DdsyXdsoVGvpU7l+6O6Z96TYcnIdvgBPUL8UMfWMnVf++Fvg3TWLhL2ZP4it9BY8MKVve4d74hd\r\nL-VIA: l1=TqoDVanjjr6wMExF\r\nL-VERSION: 1784720560\r\nL-Request-Id: 3ec519fb5825ed3c082\r\nX-Cache-Status: HIT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":10174,"size_decoded":11327,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"7ac42d17bfd5a06e8fc6a329b7018939","sha1":"37f26ed9d40765d2f0a2436038a6c772d654e316","sha256":"23d5a3a14c318b6982e98a0e9f7ae7eb6f3658fe842beef7f26850121f84279c","sha512":"8c49c05d03fb49bc2980047e98e2d1759192aedc89ff040050b1c8e007b16007f71bff0f17eaa3584bef6c0b0db5a52b68009463bd3dd2aa43cacd757ad7367b","ssdeep":"192:O5IkarrboesyPUh4c/gp+sIR6RxWiH21vZgiClgKV16Lq1eM9h0K+B5pZrgVWPWb:5k8rboesiUec4p+sIAYkgK7eQ09B5pZz","tlshash":"3c22bfd259d648a4e1d3d63229678a89d3bf3d0f0309b6d4acec74cf9846dbdd4d0a41","first_seen":"2026-04-24T23:10:16.755505Z","last_seen":"2026-07-31T12:41:46.996201Z","times_seen":989,"resource_available":false,"data":null}},"time_used":5162,"timings":{"blocked":4858,"dns":0,"connect":0,"send":0,"wait":304,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-31","alert":"Sinkholed","trigger":"y42t.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-31","alert":"Phishing Block","trigger":"y42t.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"photo.365live88.com/img/fb/team/49f21e360a8e443e8edf5e568395ce45?win007=sell","fqdn":"photo.365live88.com","domain":"365live88.com","tld":"com"},"ip":{"addr":"154.41.93.240","port":443,"asn":174,"as":"COGENT-174","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://y42t.top/","date":"2026-07-31T00:10:42.521Z","timestamp":1785456642521,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"photo.365live88.com","organization":""},"issuer":{"commonName":"Encryption Everywhere DV TLS CA - G2","organization":"DigiCert Inc"},"validity":{"start":"Sat, 01 Nov 2025 00:00:00 GMT","end":"Sat, 31 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"45:76:43:9C:31:C5:89:A6:99:FD:9B:D8:6C:A9:3A:E6:2F:D6:E9:80","sha256":"73:27:CF:D8:8D:AC:95:46:00:5D:67:05:1E:70:22:3E:17:F0:94:78:CD:6F:A6:9C:C8:5F:B5:3B:75:60:3D:C8"}}},"request":{"raw":"GET /img/fb/team/49f21e360a8e443e8edf5e568395ce45?win007=sell HTTP/1.1\r\nHost: photo.365live88.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://y42t.top/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: openresty\r\nDate: Fri, 31 Jul 2026 00:10:47 GMT\r\nContent-Type: image/png\r\nContent-Length: 123401\r\nConnection: keep-alive\r\nAccept-Ranges: bytes\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Expose-Headers: X-Log, X-Reqid\r\nAccess-Control-Max-Age: 2592000\r\nAge: 36619\r\nCache-Control: public, max-age=31536000\r\nContent-Disposition: inline; filename=\"49f21e360a8e443e8edf5e568395ce45\"; filename*=utf-8''49f21e360a8e443e8edf5e568395ce45\r\nContent-Md5: HZaME871loYK6auHVwb7AQ==\r\nContent-Transfer-Encoding: binary\r\nEtag: \"Fu9Y4IcBF8n_E4Jy-tVWp8FKK8ic\"\r\nLast-Modified: Thu, 23 Jul 2026 20:13:31 GMT\r\nX-Log: X-Log\r\nX-M-Log: QNM:wldsg121;QNM3\r\nX-M-Reqid: X3IZSZR6A\r\nX-Qiniu-Zone: as0\r\nX-Qnm-Cache: Hit\r\nX-Reqid: 8qsAAACumYAOFscY\r\nX-Svr: IO\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":123401,"size_decoded":124158,"mime_type":"image/png","magic":"PNG image data, 225 x 225, 8-bit/color RGBA, non-interlaced","md5":"1d968c13cef596860ae9ab875706fb01","sha1":"ef58e0870117c9ff138272fad556a7c14a2bc89c","sha256":"98b714e2a5fc09d8548132185393ed3bc46db872887e474ef984d50edf81b8aa","sha512":"8e5ffe03beb9b9ec9055fce8d77da3d1194637567b0b26e8ea7e1d0409b592c8f2897c63df61160c99370f836064716696a00d3d5cb8cd2322d678f9bbb1f76e","ssdeep":"3072:wHPdzNSbGatj3rrlrW4e65kQ3IGHS5mg/rqoId8+Wdx:wHPdL4DlVesIGHO0dix","tlshash":"52c31269cc82da4274b48a1389d8f36f48f86f16fe5b3be590d82f1e6152d843536cc6","first_seen":"2024-08-19T15:01:26.136076Z","last_seen":"2026-07-31T12:41:15.179696Z","times_seen":71,"resource_available":false,"data":null}},"time_used":5414,"timings":{"blocked":4958,"dns":0,"connect":0,"send":0,"wait":281,"receive":175,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"y42t.top/api/sport/match/player/match","fqdn":"y42t.top","domain":"y42t.top","tld":"top"},"ip":{"addr":"154.39.104.138","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://y42t.top/","date":"2026-07-31T00:10:42.586Z","timestamp":1785456642586,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"p40f.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 10:44:09 GMT","end":"Tue, 20 Oct 2026 10:44:08 GMT"},"fingerprint":{"sha1":"41:09:2C:3F:FC:9C:25:A9:DB:51:15:BB:D1:5A:D8:01:DC:38:AD:F8","sha256":"49:3B:29:C7:5B:B6:12:CF:84:14:5B:09:42:7D:EF:AA:61:29:EC:A1:D5:40:B5:64:5C:F1:33:AB:9B:E1:13:4D"}}},"request":{"raw":"GET /api/sport/match/player/match HTTP/1.1\r\nHost: y42t.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://y42t.top/\r\nx-request-source: https://y42t.top\r\nXign: Rh1LZxM4Q5hUgfkjeULQMb11c73GR/9rZB13F0H2qrDp9un2UKDMn5HFTN5lNN6sP+lSfYGOReIbBgmNR7dN2molzHoVg+BCdf/xBlRakh3o/obvjs2+jQixK+t+aa6tlwSyifrzPtqwngRSdv0DLN6EK8XV6pnFJlNrr1vU6yM=\r\ntimestamp: 1785456642488\r\nsign: 496q345rj4oj2m39\r\nversion: 5.6.12.0\r\nclient-type: web\r\ndevice-id: h7Ebc4YSNiCSchfp8FT2WyTT845kFyYC\r\nlang: zh-CN\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 31 Jul 2026 00:10:42 GMT\r\nContent-Type: application/json\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nCache-Control: no-cache, no-store, max-age=0\r\ncontent-encoding: gzip\r\nAccess-Control-Allow-Origin: *\r\nX-Custom-Check: true\r\nServer: Nginx\r\nL-Safe: 1785456642=csqYCqnSrfqstQvye8K/cOFcRTOv1c0xbYhymJAs0/02+uXPG5GVyZ0p6izerPHm8MGf7A/o5MmlVb25OTDKDKeQU0rR3SBVQb7DhxtPpD3sSzxoSDG3GUN9oldUbp9/49xVY7UWBgnWGNvQm3pHmukuHRLxIzXXppUlpGs5PUC8OL5ESDjYobwSrUxT4jKY\r\nL-VIA: l1=TqoDVanjjr6wMExF\r\nL-VERSION: 1784720560\r\nL-Request-Id: 3ec519fb5824aaec071\r\nX-Cache-Status: BYPASS\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":60,"size_decoded":688,"mime_type":"application/json","magic":"JSON text data","md5":"ad1b5cbc37e087c212a41eca07a863ae","sha1":"f990fb40077ca4c90bbde8ffb87c73e1c06fd931","sha256":"0fca88eefe8bb5f59242b88e2b8b179148a088b4cde3499e1c56fef8c84c309a","sha512":"fe056eef22791a958cc37f63c1cc4b3f35bd990c34d1d321f34504b7b99769b571fe46cf18ede31f7ca0e564baf63aaca9d4f3601395bd7a3ce424e50a2aaf87","ssdeep":"","tlshash":"56a002473a282ea49bc31066b50e7a5500a421749a55f469cc8e623dc755453b546531","first_seen":"2024-05-26T00:49:06Z","last_seen":"2026-07-31T12:41:47.14276Z","times_seen":2569,"resource_available":false,"data":null}},"time_used":308,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":308,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-31","alert":"Sinkholed","trigger":"y42t.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-31","alert":"Phishing Block","trigger":"y42t.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"y42t.top/jumpto/img/https://rcf-img-hk.gasdg646fs224cn.com/gpmaster/_webp_size328x442_4d4d0270-e129-42d7-8f6f-0802c910d540.png","fqdn":"y42t.top","domain":"y42t.top","tld":"top"},"ip":{"addr":"154.39.104.138","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://y42t.top/","date":"2026-07-31T00:10:42.847Z","timestamp":1785456642847,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"p40f.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 10:44:09 GMT","end":"Tue, 20 Oct 2026 10:44:08 GMT"},"fingerprint":{"sha1":"41:09:2C:3F:FC:9C:25:A9:DB:51:15:BB:D1:5A:D8:01:DC:38:AD:F8","sha256":"49:3B:29:C7:5B:B6:12:CF:84:14:5B:09:42:7D:EF:AA:61:29:EC:A1:D5:40:B5:64:5C:F1:33:AB:9B:E1:13:4D"}}},"request":{"raw":"GET /jumpto/img/https://rcf-img-hk.gasdg646fs224cn.com/gpmaster/_webp_size328x442_4d4d0270-e129-42d7-8f6f-0802c910d540.png HTTP/1.1\r\nHost: y42t.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://y42t.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 31 Jul 2026 00:10:42 GMT\r\nContent-Type: image/webp\r\nContent-Length: 11920\r\nConnection: keep-alive\r\netag: \"013c35e9baa4c707701c1a2cf8534d3d\"\r\nLast-Modified: Tue, 02 Dec 2025 14:08:51 GMT\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ebDcy%2FuQuVVoH3NZL5%2FsYRnexAX10OAi7yPHJASsC0II4hNjEbXQ0A4infeadE5toPvRnoch5ERQz5sfP5iZ92yx2Bi3sD5c9diXMuNBHkscmQH1OVDIz2JVQqhQTI9PCM7mp06dic1fGRDRBY7pJzI%3D\"}]}\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nAge: 499203\r\ncf-cache-status: HIT\r\nCF-RAY: a208c61fdd500ef4-HKG\r\nalt-svc: h3=\":443\"; ma=86400\r\nCache-Control: public, max-age=2592000, immutable, public, max-age=2592000, immutable\r\nAccess-Control-Allow-Origin: *\r\nX-Custom-Check: true\r\nServer: Nginx\r\nL-Safe: 1785456642=csqYCqnSrfqstQvye8K/cOFcRTOv1c0xbYhymJAs0/02+uXPG5GVyZ0p6izerPHm8MGf7A/o5MmlVb25OTDKDKeQU0rR3SBVQb7DhxtPpD3sSzxoSDG3GUN9oldUbp9/49xVY7UWBgnWGNvQm3pHmukuHRLxIzXXppUlpGs5PUC8OL5ESDjYobwSrUxT4jKY\r\nL-VIA: l1=TqoDVanjjr6wMExF\r\nL-VERSION: 1784720560\r\nL-Request-Id: 3ec219fb5824bb3ba22\r\nX-Cache-Status: HIT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":11920,"size_decoded":13071,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"013c35e9baa4c707701c1a2cf8534d3d","sha1":"2139b155d847e1eb2d17fc298760cb039598f89b","sha256":"f1d2851323d84d5dde72bf02ab6ed8f8f55eddc2a9607799e1ff211e0ede29fd","sha512":"e80a60ee340f8de57181fe71da391673d3bb834b91b622b5032c3674e8b85ee3c1610574b1b1d883b42e94d94a45823a63657a90cfa2062674776ebe9637c8cf","ssdeep":"192:H0RkcJGKX9YQtzAe5IIq83lxzCfVJGpYWrJUcm1aTfRbuArP+UcJaYrR5Vc:UXGjQtzAxILj2tJGrJRmETflDzcoGR5V","tlshash":"ec32b065c3da9c54c4027bfdab0239f95c5e7b45783bc7de68893d150288f90be218b1","first_seen":"2026-04-24T23:10:16.764405Z","last_seen":"2026-07-31T12:36:18.689434Z","times_seen":907,"resource_available":false,"data":null}},"time_used":309,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":309,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-31","alert":"Phishing Block","trigger":"y42t.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-31","alert":"Sinkholed","trigger":"y42t.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"y42t.top/jumpto/img/https://rcf-img-hk.gasdg646fs224cn.com/gpmaster/_webp_size328x442_50b16c20-cbfb-4c4c-ba8a-249055c85af3.png","fqdn":"y42t.top","domain":"y42t.top","tld":"top"},"ip":{"addr":"154.39.104.138","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://y42t.top/","date":"2026-07-31T00:10:42.849Z","timestamp":1785456642849,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"p40f.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 10:44:09 GMT","end":"Tue, 20 Oct 2026 10:44:08 GMT"},"fingerprint":{"sha1":"41:09:2C:3F:FC:9C:25:A9:DB:51:15:BB:D1:5A:D8:01:DC:38:AD:F8","sha256":"49:3B:29:C7:5B:B6:12:CF:84:14:5B:09:42:7D:EF:AA:61:29:EC:A1:D5:40:B5:64:5C:F1:33:AB:9B:E1:13:4D"}}},"request":{"raw":"GET /jumpto/img/https://rcf-img-hk.gasdg646fs224cn.com/gpmaster/_webp_size328x442_50b16c20-cbfb-4c4c-ba8a-249055c85af3.png HTTP/1.1\r\nHost: y42t.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://y42t.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 31 Jul 2026 00:10:46 GMT\r\nContent-Type: image/webp\r\nContent-Length: 18518\r\nConnection: keep-alive\r\netag: \"aa3d869158cd9f4a691ab5256b366ce1\"\r\nLast-Modified: Tue, 02 Dec 2025 14:07:39 GMT\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nAge: 499208\r\ncf-cache-status: HIT\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VvKbUJV3lJjYVm2C4Qn3jEMF2QDpknW6u9Li6kEIRMoHumoLqbtMDD%2F%2FvtUNKAMXCZfWv11dcYCLN8BXWN7ZQ65e%2FxpwRioSdqQzdANxcq2pPKPY%2BwyFU0THlMrmeI8C7rpwRVi6AqCOytq8UfVmALA%3D\"}]}\r\nCF-RAY: a208c619ae1cb9c5-HKG\r\nalt-svc: h3=\":443\"; ma=86400\r\nCache-Control: public, max-age=2592000, immutable, public, max-age=2592000, immutable\r\nAccess-Control-Allow-Origin: *\r\nX-Custom-Check: true\r\nServer: Nginx\r\nL-Safe: 1785456646=EMBgc894QAdP6slbLJsiNGYFcXUmrvQIWKh5BYYK6Qj4fqRyTGb/Xbwkd279GHpNIUNxmrA5BLARmTn3BBDanv5J4PcdpRxfVwUjHlMDvqiZAET3U1COvNHjyZWcIPWzQSTxYljkuIh13EY2sibpSpVrTubzP7vT5r508KhivSQ1oVznby71Ayyz5cTYVqWG\r\nL-VIA: l1=TqoDVanjjr6wMExF\r\nL-VERSION: 1784720560\r\nL-Request-Id: 3ec119fb582588dc2c8\r\nX-Cache-Status: HIT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":18518,"size_decoded":19673,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"aa3d869158cd9f4a691ab5256b366ce1","sha1":"46a9a87daa6c88e7055d5286cbc30e5a30bf34d2","sha256":"cacdf3b3bb35cc05bcdbadac055a705917d7ef2e422198f081e2482ba755eb5b","sha512":"d791059c03544004a3eb112223fdc6f44828e2ac740fc99c53aec39007ab4af73c6bdc3af541c57cc2805993d9f938bc1aaa46b1252c28c55d68fd135ac89ead","ssdeep":"384:+/SrnnTDDsTm3Dgi6CrYqpWrWrM5LW7A1zNb+EIItGXfeXCq:+/SrnzsS3zJiK81hS4","tlshash":"fc82d07a08094e73b16953616be5e8648b174f58100da7bf3d0166c9e32de6f74b80bc","first_seen":"2026-04-24T23:10:16.832516Z","last_seen":"2026-07-31T12:36:18.786301Z","times_seen":897,"resource_available":false,"data":null}},"time_used":3577,"timings":{"blocked":3265,"dns":0,"connect":0,"send":0,"wait":310,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-31","alert":"Phishing Block","trigger":"y42t.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-31","alert":"Sinkholed","trigger":"y42t.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"y42t.top/jumpto/img/https://rcf-img-hk.gasdg646fs224cn.com/gpmaster/_webp_size328x442_ce6f5a12-ce60-4931-b7a7-3cfa94c956bf.png","fqdn":"y42t.top","domain":"y42t.top","tld":"top"},"ip":{"addr":"154.39.104.138","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://y42t.top/","date":"2026-07-31T00:10:42.858Z","timestamp":1785456642858,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"p40f.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 10:44:09 GMT","end":"Tue, 20 Oct 2026 10:44:08 GMT"},"fingerprint":{"sha1":"41:09:2C:3F:FC:9C:25:A9:DB:51:15:BB:D1:5A:D8:01:DC:38:AD:F8","sha256":"49:3B:29:C7:5B:B6:12:CF:84:14:5B:09:42:7D:EF:AA:61:29:EC:A1:D5:40:B5:64:5C:F1:33:AB:9B:E1:13:4D"}}},"request":{"raw":"GET /jumpto/img/https://rcf-img-hk.gasdg646fs224cn.com/gpmaster/_webp_size328x442_ce6f5a12-ce60-4931-b7a7-3cfa94c956bf.png HTTP/1.1\r\nHost: y42t.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://y42t.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 31 Jul 2026 00:10:46 GMT\r\nContent-Type: image/webp\r\nContent-Length: 11070\r\nConnection: keep-alive\r\netag: \"9d6366dada143310062f824e5f7dd46e\"\r\nLast-Modified: Tue, 02 Dec 2025 14:08:23 GMT\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZUEeR58gtRQ2WHv%2BM1JytPvIp%2FYEHECrEsE5BzSQ3l6eREMO8xDiDjiriGJaJqTTqevF6bV1UJZbXY8nelIGmJpBSbpOShiMsjY2I%2B7v1tK2LLNOpQ5FYH%2BOubgeapJEN2SN2kbYumdGCExFnfD%2Fu44%3D\"}]}\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nAge: 499190\r\ncf-cache-status: HIT\r\nCF-RAY: a208c6849fd109f4-HKG\r\nalt-svc: h3=\":443\"; ma=86400\r\nCache-Control: public, max-age=2592000, immutable, public, max-age=2592000, immutable\r\nAccess-Control-Allow-Origin: *\r\nX-Custom-Check: true\r\nServer: Nginx\r\nL-Safe: 1785456646=EMBgc894QAdP6slbLJsiNGYFcXUmrvQIWKh5BYYK6Qj4fqRyTGb/Xbwkd279GHpNIUNxmrA5BLARmTn3BBDanv5J4PcdpRxfVwUjHlMDvqiZAET3U1COvNHjyZWcIPWzQSTxYljkuIh13EY2sibpSpVrTubzP7vT5r508KhivSQ1oVznby71Ayyz5cTYVqWG\r\nL-VIA: l1=TqoDVanjjr6wMExF\r\nL-VERSION: 1784720560\r\nL-Request-Id: 3ec919fb5825a66c0a0\r\nX-Cache-Status: HIT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":11070,"size_decoded":12227,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"9d6366dada143310062f824e5f7dd46e","sha1":"def0e81d351b0b1c8cec0603c0dfe6955438d059","sha256":"10b2cb9f1220e8ece8b47ee11eae49d1c947eec915c13165c241a59f1c8105e6","sha512":"afc9daaa38494954719bc7ef5f87c1bf6020e2d098b690a55d7f6ebcb26d463f6cd890941446e0c4cfc64771e8e7f74035e362c347f17818b1ec2801a2639f14","ssdeep":"192:6HWhsuhcANwPA6DmRamGZOxPCHE775EhPDR4oETR57jX:kWZhsDG8Olz75u7RsTXj","tlshash":"fa32b07de235930096a34cbecb5be3304bba629233b0b58cdc459df12597cb42e70926","first_seen":"2026-04-24T23:10:16.712242Z","last_seen":"2026-07-31T12:36:18.754247Z","times_seen":893,"resource_available":false,"data":null}},"time_used":4035,"timings":{"blocked":3726,"dns":0,"connect":0,"send":0,"wait":309,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-31","alert":"Sinkholed","trigger":"y42t.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-31","alert":"Phishing Block","trigger":"y42t.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"y42t.top/jumpto/img/https://rcf-img-hk.gasdg646fs224cn.com/gpmaster/_webp_size704x442_73525908-fb7b-43df-ab6b-ee9a1274a74c.png","fqdn":"y42t.top","domain":"y42t.top","tld":"top"},"ip":{"addr":"154.39.104.138","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://y42t.top/","date":"2026-07-31T00:10:42.883Z","timestamp":1785456642883,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"p40f.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 10:44:09 GMT","end":"Tue, 20 Oct 2026 10:44:08 GMT"},"fingerprint":{"sha1":"41:09:2C:3F:FC:9C:25:A9:DB:51:15:BB:D1:5A:D8:01:DC:38:AD:F8","sha256":"49:3B:29:C7:5B:B6:12:CF:84:14:5B:09:42:7D:EF:AA:61:29:EC:A1:D5:40:B5:64:5C:F1:33:AB:9B:E1:13:4D"}}},"request":{"raw":"GET /jumpto/img/https://rcf-img-hk.gasdg646fs224cn.com/gpmaster/_webp_size704x442_73525908-fb7b-43df-ab6b-ee9a1274a74c.png HTTP/1.1\r\nHost: y42t.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://y42t.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 31 Jul 2026 00:10:43 GMT\r\nContent-Type: image/webp\r\nContent-Length: 26068\r\nConnection: keep-alive\r\netag: \"da33ad9a009a89e0bc0c508e6f690949\"\r\nLast-Modified: Sun, 09 Nov 2025 14:20:32 GMT\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VNcPcEEy4rHLUkM%2F3lMc4a17fpRakyrTZH6l0aBgSU1EMF6RBYMYjCagy1rRf4ii3CA1fyrcvThBT6TMQ%2F6V365Zmc9%2Bljg17%2Bu1Ya2Yk%2BRIeULgRuZOAgwz%2BnG62xEztIGa8BlVR2h65qdfAt13mms%3D\"}]}\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nAge: 499194\r\ncf-cache-status: HIT\r\nCF-RAY: a208c6591cdc0cd6-HKG\r\nalt-svc: h3=\":443\"; ma=86400\r\nCache-Control: public, max-age=2592000, immutable, public, max-age=2592000, immutable\r\nAccess-Control-Allow-Origin: *\r\nX-Custom-Check: true\r\nServer: Nginx\r\nL-Safe: 1785456643=L21MjTcjPMoacLR4vpNVcs71ZpTSCD9pAjEcK72XJz4geELYb/dM7FIgfcGewCPiEiHBLTyE0/8OE0+Ussy/+H0+QJ0ieZl66nXxiX7hlrgta/bqlKy5K3ZjLS3f1v4h/F2vuy6GEAoffe4Wt8WE6NAsU33QhqR65Iggn1IfkuSp/Pz9elabEun/YDFlVnt3\r\nL-VIA: l1=TqoDVanjjr6wMExF\r\nL-VERSION: 1784720560\r\nL-Request-Id: 3ec119fb5824bd6c2bc\r\nX-Cache-Status: HIT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":26068,"size_decoded":27227,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"da33ad9a009a89e0bc0c508e6f690949","sha1":"52521f6667f933538fd61fac097ba79db283c0cf","sha256":"12889485842cb12ca8c77f0a9c71ac3098cf3c9898b3cdc299145280170962d6","sha512":"a254ca97846b0d3216994f8db6adfee226b9b2c6120a33c1ec1f0a635f658f99e6b2c2407dffcbe79d5dc65aca0869aff746d751347eaf9780083b0e25103fe0","ssdeep":"384:+w9CBmVKxqlIavZBdogyHrWz/1ope325wQBJKn5QahMi7HjOMdOdjawQJoYh:+yYmV5Vv7WZLWhop42525Q0M+HujawQ","tlshash":"e9c2e1c2bd2de50a9b37c27e24a6c30f01c497808faa2c677736129d4d365abb56900e","first_seen":"2026-04-24T23:10:16.863494Z","last_seen":"2026-07-31T12:41:47.055734Z","times_seen":1030,"resource_available":false,"data":null}},"time_used":364,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":336,"receive":28,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-31","alert":"Sinkholed","trigger":"y42t.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-31","alert":"Phishing Block","trigger":"y42t.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"y42t.top/api/sport/match/list?sportId=1\u0026client=web","fqdn":"y42t.top","domain":"y42t.top","tld":"top"},"ip":{"addr":"154.39.104.138","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://y42t.top/","date":"2026-07-31T00:10:52.723Z","timestamp":1785456652723,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"p40f.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 10:44:09 GMT","end":"Tue, 20 Oct 2026 10:44:08 GMT"},"fingerprint":{"sha1":"41:09:2C:3F:FC:9C:25:A9:DB:51:15:BB:D1:5A:D8:01:DC:38:AD:F8","sha256":"49:3B:29:C7:5B:B6:12:CF:84:14:5B:09:42:7D:EF:AA:61:29:EC:A1:D5:40:B5:64:5C:F1:33:AB:9B:E1:13:4D"}}},"request":{"raw":"GET /api/sport/match/list?sportId=1\u0026client=web HTTP/1.1\r\nHost: y42t.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://y42t.top/\r\nx-request-source: https://y42t.top\r\nXign: l0Hm/LC91v+fcoBpIxMDXdLhLcy1uMN3dXzwL0Nf16w6P0I9kMQeqsHe9fE80T4+Qg86S25831zwtl6un/yRt5D5nS6yTrwncPkwsdXzuMdGrHlT01Xw+xOQsI2o+aI/4Rp5mad4XNTHOHl7Ki863ROen0qh9g+2KltrjUYvwjY=\r\ntimestamp: 1785456652719\r\nsign: 77434165c64796hf\r\nversion: 5.6.12.0\r\nclient-type: web\r\ndevice-id: h7Ebc4YSNiCSchfp8FT2WyTT845kFyYC\r\nlang: zh-CN\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 31 Jul 2026 00:10:52 GMT\r\nContent-Type: application/json\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nCache-Control: no-cache, no-store, max-age=0\r\ncontent-encoding: gzip\r\nAccess-Control-Allow-Origin: *\r\nX-Custom-Check: true\r\nServer: Nginx\r\nL-Safe: 1785456652=1yHpBxgmAtoUXB3BW/YcZi1EsLzMJCrduW4RhydMHSj3Jra5I145sUyaqF8z4cg2U6khpTEeYUS7APR5REe3EIp4yTzF/8XII5M6FJL+DhtvpmOGh58d5eBn4pTb16bK9ULNCj7tJ/M5ob1zt7lxcWsap27IjwVkpR2LTQ2GHECvldBgFo3Maw0otjW1S46V\r\nL-VIA: l1=TqoDVanjjr6wMExF\r\nL-VERSION: 1784720560\r\nL-Request-Id: 3ec919fb5827246c0b0\r\nX-Cache-Status: BYPASS\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":29835,"size_decoded":6171,"mime_type":"application/json","magic":"Unicode text, UTF-8 text, with very long lines (28507), with no line terminators","md5":"26eeb59235e7e0bd39e862b1570bdd7b","sha1":"2d6093f8163d0acbde241885608d0f2db5e5be9b","sha256":"4806ebb147f9e91a9f860fe56d75c5ea3bebfe2ed10a8e0142dbb878aafc4df5","sha512":"93c723c963ca4d91f3f2e35ddeb727d8fe64bd81795b6f247fe745024fa88137b3d2987c8559fd96f2eb26e700e6e9d79d26fd5c69e7c18db89b456fffc7bc3e","ssdeep":"768:eorWJk2CaAqoCK7pCzVpB3Lq3p8JN8QrYuZZoK6ZVbzZtZBZFwN69HRmFmTCHW5R:eorp2spGpQpkZOjZFZZZt0mGshz0dDHg","tlshash":"b6d2db5681de18992b9c61d59d5e3f4d847ef94b0a9eb5c6ee0ecf1c21b43fb8200d21","first_seen":"2026-07-31T00:11:28.022481Z","last_seen":"2026-07-31T00:12:52.461407Z","times_seen":3,"resource_available":false,"data":null}},"time_used":297,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":297,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-31","alert":"Phishing Block","trigger":"y42t.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-31","alert":"Sinkholed","trigger":"y42t.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"y42t.top/assets/logo/favicon.ico","fqdn":"y42t.top","domain":"y42t.top","tld":"top"},"ip":{"addr":"154.39.104.138","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://y42t.top/","date":"2026-07-31T00:10:40.818Z","timestamp":1785456640818,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"p40f.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 10:44:09 GMT","end":"Tue, 20 Oct 2026 10:44:08 GMT"},"fingerprint":{"sha1":"41:09:2C:3F:FC:9C:25:A9:DB:51:15:BB:D1:5A:D8:01:DC:38:AD:F8","sha256":"49:3B:29:C7:5B:B6:12:CF:84:14:5B:09:42:7D:EF:AA:61:29:EC:A1:D5:40:B5:64:5C:F1:33:AB:9B:E1:13:4D"}}},"request":{"raw":"GET /assets/logo/favicon.ico HTTP/1.1\r\nHost: y42t.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://y42t.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 31 Jul 2026 00:10:40 GMT\r\nContent-Type: image/x-icon\r\nContent-Length: 585615\r\nConnection: keep-alive\r\nLast-Modified: Wed, 01 Apr 2026 05:40:09 GMT\r\nETag: \"69ccafb9-8ef8f\"\r\nCache-Control: public, max-age=2592000, immutable\r\nAccess-Control-Allow-Origin: *\r\nX-Custom-Check: true\r\nServer: Nginx\r\nL-Safe: 1785456640=J17DXMEKXneKJsmf5PklOuZGVEbIRHZaaYUSHzFG19eRab1KmINu7b4QGpzoq2sF3cVtRbxKbhHDWucmkECQYVOT+r0RQLbYm93Pi9MruE4IbJTcWk38kbzXbpB01LsT5BD5K4g3/y6LaDWmYtWF9GJZSB/4ORv/PkgK01jvDx4dXhxfQiC6c5+CxYbaqcYc\r\nL-VIA: l1=TqoDVanjjr6wMExF\r\nL-VERSION: 1784720560\r\nL-Request-Id: 3ec919fb58243c5c088\r\nX-Cache-Status: BYPASS\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":585615,"size_decoded":586282,"mime_type":"image/x-icon","magic":"PNG image data, 1024 x 1024, 8-bit/color RGBA, non-interlaced","md5":"abd1eb812e495d993fb310ca906ea605","sha1":"77a61cd2ad4a89c22f4a979571d3c259870732f5","sha256":"ccd41d39ff7fbed7a9200f685d9b0198736d1a2f737e9d32f83ddaeef39a4180","sha512":"e8221a9acda08a0a0bc5410cd14bc72d30e6fa66cc6e7a4bc07b53f5c94b5ec670f19571246ab2f55ec2924f679543780e9f55e0ecf8a169ce3b91e38da07d25","ssdeep":"12288:zObp4IC0/qFNYge/0z5g2c+UTxVi1+4g+/F5:ibpa2qFNNe8zy+si1+4V/F5","tlshash":"e8c4230df5a39834d5dc996741db54e0c790e4183db25e323ba3448ea3d05b8ea267f7","first_seen":"2026-03-20T12:57:26.707036Z","last_seen":"2026-07-31T12:41:47.123442Z","times_seen":1380,"resource_available":false,"data":null}},"time_used":965,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":304,"receive":661,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-31","alert":"Phishing Block","trigger":"y42t.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-31","alert":"Sinkholed","trigger":"y42t.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"y42t.top/jumpto/img/https://rcf-img-hk.gasdg646fs224cn.com/gpmaster/_webp_size328x442_fc0e1468-bc71-4d42-9849-b6735b50978a.png","fqdn":"y42t.top","domain":"y42t.top","tld":"top"},"ip":{"addr":"154.39.104.138","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://y42t.top/","date":"2026-07-31T00:10:42.875Z","timestamp":1785456642875,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"p40f.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 10:44:09 GMT","end":"Tue, 20 Oct 2026 10:44:08 GMT"},"fingerprint":{"sha1":"41:09:2C:3F:FC:9C:25:A9:DB:51:15:BB:D1:5A:D8:01:DC:38:AD:F8","sha256":"49:3B:29:C7:5B:B6:12:CF:84:14:5B:09:42:7D:EF:AA:61:29:EC:A1:D5:40:B5:64:5C:F1:33:AB:9B:E1:13:4D"}}},"request":{"raw":"GET /jumpto/img/https://rcf-img-hk.gasdg646fs224cn.com/gpmaster/_webp_size328x442_fc0e1468-bc71-4d42-9849-b6735b50978a.png HTTP/1.1\r\nHost: y42t.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://y42t.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 31 Jul 2026 00:10:47 GMT\r\nContent-Type: image/webp\r\nContent-Length: 11120\r\nConnection: keep-alive\r\netag: \"c2103cd78445d5d98b8a8a38dee95854\"\r\nLast-Modified: Tue, 02 Dec 2025 14:12:18 GMT\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DlOS6YUBBk5VkgNVvWwef2pJ1YE5V%2B73AfkzGLrCZ%2BgoJuE3cAlfDwCmngQBzvrueCbJsoDkyahAAgxrty0bDH%2FLEO3mnJVNZe2vyuLjrbYsjoPk06opwvI7byVTtUzTG3SEPZKJjj4b%2FD8OMlGxpxs%3D\"}]}\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nAge: 499200\r\ncf-cache-status: HIT\r\nCF-RAY: a208c64bc887882e-HKG\r\nalt-svc: h3=\":443\"; ma=86400\r\nCache-Control: public, max-age=2592000, immutable, public, max-age=2592000, immutable\r\nAccess-Control-Allow-Origin: *\r\nX-Custom-Check: true\r\nServer: Nginx\r\nL-Safe: 1785456647=pwbyu29rM0HEK42bpjFMXQZZ8s1IzzkT40daNMbcT90Ub0zpvrQ+kBR7N9vkAvLpdcGVCAkYTtjHzFt3rikpG2u0ViQwOg9Y/d8oh3QnzrskfHJpkQ3k6DdsyXdsoVGvpU7l+6O6Z96TYcnIdvgBPUL8UMfWMnVf++Fvg3TWLhL2ZP4it9BY8MKVve4d74hd\r\nL-VIA: l1=TqoDVanjjr6wMExF\r\nL-VERSION: 1784720560\r\nL-Request-Id: 3ec119fb5825e12c2d6\r\nX-Cache-Status: HIT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":11120,"size_decoded":12275,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"c2103cd78445d5d98b8a8a38dee95854","sha1":"77e8b55343bf4092e6a298d564b828b7167d73a7","sha256":"23f7d437c49f455c0bbe3d040982bd6cf8d25411106c3eaa156cc3e4760c3c1b","sha512":"c1f7b1f8f0187dd22795297f21febc867932be6f47b9d033e4df6dbe5f456cf4f7b97d88fff1320945d581b13e4e23cd66330b4432f6f506e504b9dcc01776fa","ssdeep":"192:UFGWMz7rqmua13y84zY36YC0JwSCH2XOc1wK3/RZ/dHGKFdVr5suOWQgcSQBO4mZ:Qmus3ytKC236rKJr53IW4mZ","tlshash":"1f32afcec9dc3b159c35837d36252988ea4909130b3762d2752a64c646eee8a3196bb3","first_seen":"2026-04-24T23:10:16.81812Z","last_seen":"2026-07-31T12:41:46.99362Z","times_seen":970,"resource_available":false,"data":null}},"time_used":4974,"timings":{"blocked":4665,"dns":0,"connect":0,"send":0,"wait":309,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-31","alert":"Phishing Block","trigger":"y42t.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-31","alert":"Sinkholed","trigger":"y42t.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"y42t.top/css/index-399e2569.1781011881923.a7b0b4f4.css","fqdn":"y42t.top","domain":"y42t.top","tld":"top"},"ip":{"addr":"154.39.104.138","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://y42t.top/","date":"2026-07-31T00:10:38.078Z","timestamp":1785456638078,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"p40f.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 10:44:09 GMT","end":"Tue, 20 Oct 2026 10:44:08 GMT"},"fingerprint":{"sha1":"41:09:2C:3F:FC:9C:25:A9:DB:51:15:BB:D1:5A:D8:01:DC:38:AD:F8","sha256":"49:3B:29:C7:5B:B6:12:CF:84:14:5B:09:42:7D:EF:AA:61:29:EC:A1:D5:40:B5:64:5C:F1:33:AB:9B:E1:13:4D"}}},"request":{"raw":"GET /css/index-399e2569.1781011881923.a7b0b4f4.css HTTP/1.1\r\nHost: y42t.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://y42t.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 31 Jul 2026 00:10:38 GMT\r\nContent-Type: text/css\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Tue, 09 Jun 2026 13:37:11 GMT\r\nVary: Accept-Encoding\r\nETag: W/\"6a281707-faee\"\r\nCache-Control: public, max-age=31536000, immutable\r\nAccess-Control-Allow-Origin: *\r\nX-Custom-Check: true\r\nContent-Encoding: gzip\r\nServer: Nginx\r\nL-Safe: 1785456638=spfqpn6fY4y3fZtY0H6j2NTv25wzT5EQ1wj7koQgMzA0vWwFcicuKIMZGIdtkkNSeWsrScNU4RjxFciulIcuwtx/yeqqcUPJs5itgwA/VIspYspfgKoNZCVd5ReH5RnmI+JuS7nmr+CJ2mFhP15XL5m4D8uR3ysrOzNOMy1CJ0v2fRXCOc9HkLd5F/w10c5w\r\nL-VIA: l1=TqoDVanjjr6wMExF\r\nL-VERSION: 1784720560\r\nL-Request-Id: 3ec219fb5823b58ba1b\r\nX-Cache-Status: BYPASS\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":64238,"size_decoded":34291,"mime_type":"text/css","magic":"ASCII text, with very long lines (64238), with no line terminators","md5":"1f30d2cd291b70a1848607e3460d9278","sha1":"e91e48518ec94fcaacf418789927f34d7527dc99","sha256":"8ce1851c7bd6e7db80ee5ee8da7a0c808f29756dda3c941bb3811dc3bd3e5afd","sha512":"3cf09b1afc740c4a219a45a233489d76587ec8bd80a57c52ab133f33fdffa8a3fe35a0a27e386270ebeaa9e86d156897e44733b8eb83ee6935fe67749c30cd0f","ssdeep":"768:E0ouVbMisnf7X8vtr9UL5srs7hAqpLe20TCKiNkZICSA2ohGyHukQ9aaV+TJtU+G:HoGws9isrQAqVe6KekWRlkQ9hf+Pe","tlshash":"c6538d3123e0286ee27b6b16ec51e659352b8602f127625af703362fc1d72f5c67b742","first_seen":"2026-03-20T12:57:26.768432Z","last_seen":"2026-07-31T12:41:47.035955Z","times_seen":1509,"resource_available":false,"data":null}},"time_used":1281,"timings":{"blocked":-1,"dns":0,"connect":287,"send":0,"wait":415,"receive":283,"ssl":296},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-31","alert":"Sinkholed","trigger":"y42t.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-31","alert":"Phishing Block","trigger":"y42t.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"photo.365live88.com/img/fb/team/773c6f6c1d4b40a88e8d956b0a34b1a6?win007=sell","fqdn":"photo.365live88.com","domain":"365live88.com","tld":"com"},"ip":{"addr":"154.41.93.240","port":443,"asn":174,"as":"COGENT-174","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://y42t.top/","date":"2026-07-31T00:10:42.484Z","timestamp":1785456642484,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"photo.365live88.com","organization":""},"issuer":{"commonName":"Encryption Everywhere DV TLS CA - G2","organization":"DigiCert Inc"},"validity":{"start":"Sat, 01 Nov 2025 00:00:00 GMT","end":"Sat, 31 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"45:76:43:9C:31:C5:89:A6:99:FD:9B:D8:6C:A9:3A:E6:2F:D6:E9:80","sha256":"73:27:CF:D8:8D:AC:95:46:00:5D:67:05:1E:70:22:3E:17:F0:94:78:CD:6F:A6:9C:C8:5F:B5:3B:75:60:3D:C8"}}},"request":{"raw":"GET /img/fb/team/773c6f6c1d4b40a88e8d956b0a34b1a6?win007=sell HTTP/1.1\r\nHost: photo.365live88.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://y42t.top/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: openresty\r\nDate: Fri, 31 Jul 2026 00:10:45 GMT\r\nContent-Type: image/png\r\nContent-Length: 14187\r\nConnection: keep-alive\r\nAccept-Ranges: bytes\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Expose-Headers: X-Log, X-Reqid\r\nAccess-Control-Max-Age: 2592000\r\nAge: 226312\r\nCache-Control: public, max-age=31536000\r\nContent-Disposition: inline; filename=\"773c6f6c1d4b40a88e8d956b0a34b1a6\"; filename*=utf-8''773c6f6c1d4b40a88e8d956b0a34b1a6\r\nContent-Md5: sO29Ew2Q/UiLL61BNEBiKw==\r\nContent-Transfer-Encoding: binary\r\nEtag: \"FiEbS9yJtkR3WwWNVAgy_AfJrq8k\"\r\nLast-Modified: Mon, 27 Jul 2026 13:16:44 GMT\r\nX-Log: X-Log\r\nX-M-Log: QNM:wldsg119;QNM3\r\nX-M-Reqid: FixV90qa3\r\nX-Qiniu-Zone: as0\r\nX-Qnm-Cache: Hit\r\nX-Reqid: u7MAAAByrayHacYY\r\nX-Svr: IO\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":14187,"size_decoded":14944,"mime_type":"image/png","magic":"PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced","md5":"b0edbd130d90fd488b2fad413440622b","sha1":"211b4bdc89b644775b058d540832fc07c9aeaf24","sha256":"c03bc44b74db2282ce0dffd4b9346bdbf973adf7d076698bbc97b367a15485b6","sha512":"ec6a91230fb8a4998dcd13b40b844767d0df749d4fb3f6c4582f5c88a3e976e7dd230d8c66130897ff2c5522bb7427d2779dd08585404565c7ba816cf0f552cb","ssdeep":"384:HY2Ujn5YOozGYsSF7aDeQCGlPSZFQ9clJuayu:HYFj5YeYl5aaXk6uayu","tlshash":"4952cfcd2fa70b7847402eb336caa46134e0975e7096f92cb93acb388bd2a1d5077464","first_seen":"2025-06-30T02:18:01.384921Z","last_seen":"2026-07-31T03:12:02.801866Z","times_seen":10,"resource_available":false,"data":null}},"time_used":3440,"timings":{"blocked":3139,"dns":0,"connect":0,"send":0,"wait":301,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"photo.365live88.com/img/fb/team/a5037ae598ff4c848dc39e31edda490c?win007=sell","fqdn":"photo.365live88.com","domain":"365live88.com","tld":"com"},"ip":{"addr":"154.41.93.240","port":443,"asn":174,"as":"COGENT-174","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://y42t.top/","date":"2026-07-31T00:10:42.515Z","timestamp":1785456642515,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"photo.365live88.com","organization":""},"issuer":{"commonName":"Encryption Everywhere DV TLS CA - G2","organization":"DigiCert Inc"},"validity":{"start":"Sat, 01 Nov 2025 00:00:00 GMT","end":"Sat, 31 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"45:76:43:9C:31:C5:89:A6:99:FD:9B:D8:6C:A9:3A:E6:2F:D6:E9:80","sha256":"73:27:CF:D8:8D:AC:95:46:00:5D:67:05:1E:70:22:3E:17:F0:94:78:CD:6F:A6:9C:C8:5F:B5:3B:75:60:3D:C8"}}},"request":{"raw":"GET /img/fb/team/a5037ae598ff4c848dc39e31edda490c?win007=sell HTTP/1.1\r\nHost: photo.365live88.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://y42t.top/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: openresty\r\nDate: Fri, 31 Jul 2026 00:10:46 GMT\r\nContent-Type: image/png\r\nContent-Length: 10210\r\nConnection: keep-alive\r\nAccept-Ranges: bytes\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Expose-Headers: X-Log, X-Reqid\r\nAccess-Control-Max-Age: 2592000\r\nAge: 43826\r\nCache-Control: public, max-age=31536000\r\nContent-Disposition: inline; filename=\"a5037ae598ff4c848dc39e31edda490c\"; filename*=utf-8''a5037ae598ff4c848dc39e31edda490c\r\nContent-Md5: bPp0qJ6p3DmTbvy+0Wo8kg==\r\nContent-Transfer-Encoding: binary\r\nEtag: \"Fk_xwZSF7GHueoXSC4b5Ndj1uAei\"\r\nLast-Modified: Thu, 23 Jul 2026 20:13:34 GMT\r\nX-Log: X-Log\r\nX-M-Log: QNM:wldsg121;QNM3\r\nX-M-Reqid: XyDn0YNYK\r\nX-Qiniu-Zone: as0\r\nX-Qnm-Cache: Hit\r\nX-Reqid: YDoAAABosTuAD8cY\r\nX-Svr: IO\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":10210,"size_decoded":10966,"mime_type":"image/png","magic":"PNG image data, 99 x 99, 8-bit/color RGBA, non-interlaced","md5":"6cfa74a89ea9dc39936efcbed16a3c92","sha1":"4ff1c19485ec61ee7a85d20b86f935d8f5b807a2","sha256":"59ed9cfe8b020e1a79b5d76b38cdfd105f618361a793d0e3c76e8e840b08d5e8","sha512":"fc39583167c2f226845d6b1fd3ffb4407af9f1612ab538e8102d43205c5dffda6cdc4da385efb97067b0e9e15c792bd3a55c1f9c1a45c3ddaa29552029ba45fc","ssdeep":"192:jZ67H864Um75+g60MMwk1VVZANkr1GUt9XVIKqB3Fv4wxM:jE7H8575+DfM4ybCp4x","tlshash":"3222cfedfb7e9e94ecaa0e32d0e5705dc01cd81905416ad721601cee9fc49c8fb42a09","first_seen":"2026-04-08T10:11:49.486321Z","last_seen":"2026-07-31T12:41:47.034644Z","times_seen":103,"resource_available":false,"data":null}},"time_used":4586,"timings":{"blocked":4308,"dns":0,"connect":0,"send":0,"wait":278,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"y42t.top/jumpto/img/https://rcf-img-hk.gasdg646fs224cn.com/bucketimg/cc0812c4-2802-41c7-8bd9-a4c28c15eb86.gif","fqdn":"y42t.top","domain":"y42t.top","tld":"top"},"ip":{"addr":"154.39.104.138","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://y42t.top/","date":"2026-07-31T00:10:42.673Z","timestamp":1785456642673,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"p40f.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 10:44:09 GMT","end":"Tue, 20 Oct 2026 10:44:08 GMT"},"fingerprint":{"sha1":"41:09:2C:3F:FC:9C:25:A9:DB:51:15:BB:D1:5A:D8:01:DC:38:AD:F8","sha256":"49:3B:29:C7:5B:B6:12:CF:84:14:5B:09:42:7D:EF:AA:61:29:EC:A1:D5:40:B5:64:5C:F1:33:AB:9B:E1:13:4D"}}},"request":{"raw":"GET /jumpto/img/https://rcf-img-hk.gasdg646fs224cn.com/bucketimg/cc0812c4-2802-41c7-8bd9-a4c28c15eb86.gif HTTP/1.1\r\nHost: y42t.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://y42t.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 31 Jul 2026 00:10:43 GMT\r\nContent-Type: image/gif\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\netag: W/\"b7ad12fe390d68c88df2db78219cab9c\"\r\nLast-Modified: Wed, 28 Aug 2024 20:04:41 GMT\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2lrtqTvSKTfjyfBrihH8nuqweJlGwUG8ErNBTGJb6Tc8cS5SoVb5rgz3uD%2FksyuhX4nAxJkJibOsv2%2Fo3t4te3os54TRjHh4FcBJIM%2Fe866nIhOWePlobcbIrOSbDnJnXRDZPemgLUnU9b0fO1oof1Q%3D\"}]}\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nAge: 499193\r\ncf-cache-status: HIT\r\nCF-RAY: a208c663da3a4f91-HKG\r\nalt-svc: h3=\":443\"; ma=86400\r\nCache-Control: public, max-age=2592000, immutable, public, max-age=2592000, immutable\r\nAccess-Control-Allow-Origin: *\r\nX-Custom-Check: true\r\nContent-Encoding: gzip\r\nServer: Nginx\r\nL-Safe: 1785456643=L21MjTcjPMoacLR4vpNVcs71ZpTSCD9pAjEcK72XJz4geELYb/dM7FIgfcGewCPiEiHBLTyE0/8OE0+Ussy/+H0+QJ0ieZl66nXxiX7hlrgta/bqlKy5K3ZjLS3f1v4h/F2vuy6GEAoffe4Wt8WE6NAsU33QhqR65Iggn1IfkuSp/Pz9elabEun/YDFlVnt3\r\nL-VIA: l1=TqoDVanjjr6wMExF\r\nL-VERSION: 1784720560\r\nL-Request-Id: 3ec119fb5824f4dc2be\r\nX-Cache-Status: HIT\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":302697,"size_decoded":301143,"mime_type":"image/gif","magic":"GIF image data, version 89a, 200 x 200","md5":"b7ad12fe390d68c88df2db78219cab9c","sha1":"078960add6b85bc7199d3cc2de4714ff0e3a24ef","sha256":"a596d3cbec189f8c534cd58299ed7a13e56e515d14be3129984b219461d83612","sha512":"b15aee2efafb21410b7b89c4269f59cb86bafcff8b1f2238ed24c61b0f13959a15355005ff7eb645d8d182f02afe48c8867bf6e22d5d5a401a36dfbf86f7e162","ssdeep":"6144:fBOLj+QpSwjHvIJFo5AWMAUoGwhw2gWcXFyZNDyfIJmFvF:fQLj1pPjHv1nlwIhcXw/8IJ+","tlshash":"66542397426ccc571c4da579e80e3f1ea706556cfd119e3b50c5c4c23928a6dbcb0aeb","first_seen":"2025-07-30T05:00:30.953127Z","last_seen":"2026-07-31T12:41:15.223565Z","times_seen":772,"resource_available":false,"data":null}},"time_used":2040,"timings":{"blocked":1098,"dns":0,"connect":0,"send":0,"wait":336,"receive":606,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-31","alert":"Phishing Block","trigger":"y42t.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-31","alert":"Sinkholed","trigger":"y42t.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"y42t.top/jumpto/img/https://rcf-img-hk.gasdg646fs224cn.com/202607/_webp_size656x884_9dd88971-fbe2-4c59-b6ed-834b4a01d4ac.png","fqdn":"y42t.top","domain":"y42t.top","tld":"top"},"ip":{"addr":"154.39.104.138","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://y42t.top/","date":"2026-07-31T00:10:42.859Z","timestamp":1785456642859,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"p40f.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 10:44:09 GMT","end":"Tue, 20 Oct 2026 10:44:08 GMT"},"fingerprint":{"sha1":"41:09:2C:3F:FC:9C:25:A9:DB:51:15:BB:D1:5A:D8:01:DC:38:AD:F8","sha256":"49:3B:29:C7:5B:B6:12:CF:84:14:5B:09:42:7D:EF:AA:61:29:EC:A1:D5:40:B5:64:5C:F1:33:AB:9B:E1:13:4D"}}},"request":{"raw":"GET /jumpto/img/https://rcf-img-hk.gasdg646fs224cn.com/202607/_webp_size656x884_9dd88971-fbe2-4c59-b6ed-834b4a01d4ac.png HTTP/1.1\r\nHost: y42t.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://y42t.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 31 Jul 2026 00:10:46 GMT\r\nContent-Type: image/webp\r\nContent-Length: 43480\r\nConnection: keep-alive\r\netag: \"d4c1684204e7688eb1e597c220210eab\"\r\nLast-Modified: Mon, 06 Jul 2026 12:02:36 GMT\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nAge: 499190\r\ncf-cache-status: HIT\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1yECmEtTbAVStui6gtjNJ66ZUjc3SVmL%2BsPPCy9%2Fo%2B1yNmmSL1s6xPVvLD7cgOEBtiVRwXb7nL%2F2nLknjcDp2Cz6rK%2B3IztMkJF7NrkUgAgpssH11XtC64VA4vVJNb1pwSB%2BS55gF3%2BBEEcVy2Ynwfg%3D\"}]}\r\nCF-RAY: a208c6858ab2098c-HKG\r\nalt-svc: h3=\":443\"; ma=86400\r\nCache-Control: public, max-age=2592000, immutable, public, max-age=2592000, immutable\r\nAccess-Control-Allow-Origin: *\r\nX-Custom-Check: true\r\nServer: Nginx\r\nL-Safe: 1785456646=EMBgc894QAdP6slbLJsiNGYFcXUmrvQIWKh5BYYK6Qj4fqRyTGb/Xbwkd279GHpNIUNxmrA5BLARmTn3BBDanv5J4PcdpRxfVwUjHlMDvqiZAET3U1COvNHjyZWcIPWzQSTxYljkuIh13EY2sibpSpVrTubzP7vT5r508KhivSQ1oVznby71Ayyz5cTYVqWG\r\nL-VIA: l1=TqoDVanjjr6wMExF\r\nL-VERSION: 1784720560\r\nL-Request-Id: 3ec819fb5825a6fc10a\r\nX-Cache-Status: HIT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":43480,"size_decoded":44641,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"d4c1684204e7688eb1e597c220210eab","sha1":"740bdfd6b8755abb7e48a0e1ad00cb564b6166bc","sha256":"a7adbec5ee5a7cecca8489c103edddd0ab12a5dd4fe44a55c1d3c7727e6c50af","sha512":"c430a7c8147db2a2232bb2b1fc1488c172c7fad20802427d0e99cc983f3e45c625dec5c1b9996a672cfca13bc146f1de99adb5ff2cb4b03ff142ae26923ec465","ssdeep":"768:WDe9O0nm9HMggyXN0devNsUd8uWfvlDIXojlYRSHM2btoc06i:1I0n8LN08vNsJ1fv+ElfHMU06i","tlshash":"cf1302674c8731b1f24667fc6a82333ce88159877c97a41c721c8922174af576f1f675","first_seen":"2026-07-06T14:57:55.472099Z","last_seen":"2026-07-31T12:36:18.72404Z","times_seen":394,"resource_available":false,"data":null}},"time_used":4039,"timings":{"blocked":3734,"dns":0,"connect":0,"send":0,"wait":293,"receive":12,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-31","alert":"Sinkholed","trigger":"y42t.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-31","alert":"Phishing Block","trigger":"y42t.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"y42t.top/jumpto/img/https://rcf-img-hk.gasdg646fs224cn.com/202508/_webp_size1884x434_8fe89870-1081-42db-97b7-f8272ac29ae0.jpg","fqdn":"y42t.top","domain":"y42t.top","tld":"top"},"ip":{"addr":"154.39.104.138","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://y42t.top/","date":"2026-07-31T00:10:42.390Z","timestamp":1785456642390,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"p40f.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 10:44:09 GMT","end":"Tue, 20 Oct 2026 10:44:08 GMT"},"fingerprint":{"sha1":"41:09:2C:3F:FC:9C:25:A9:DB:51:15:BB:D1:5A:D8:01:DC:38:AD:F8","sha256":"49:3B:29:C7:5B:B6:12:CF:84:14:5B:09:42:7D:EF:AA:61:29:EC:A1:D5:40:B5:64:5C:F1:33:AB:9B:E1:13:4D"}}},"request":{"raw":"GET /jumpto/img/https://rcf-img-hk.gasdg646fs224cn.com/202508/_webp_size1884x434_8fe89870-1081-42db-97b7-f8272ac29ae0.jpg HTTP/1.1\r\nHost: y42t.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://y42t.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 31 Jul 2026 00:10:42 GMT\r\nContent-Type: image/webp\r\nContent-Length: 35652\r\nConnection: keep-alive\r\netag: \"460db28ebf94215162fde2f45aa09227\"\r\nLast-Modified: Wed, 10 Dec 2025 10:48:14 GMT\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=D6thJDC1RInuwQ4TTo3HNpgbI%2FtVnd0zVcvSNVULLyJHd6v36UcL7SCw7oG5zBBbpEMnu6o4i06PI%2BOpl9yowft20e4mYZIrw3tPlhN2ikPFtT0Xpyf5hSqSKJrba9XYQbXfqd5gQ%2B1sU7hMb7WyaEs%3D\"}]}\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nAge: 499186\r\ncf-cache-status: HIT\r\nCF-RAY: a208c6888a0bddcb-HKG\r\nalt-svc: h3=\":443\"; ma=86400\r\nCache-Control: public, max-age=2592000, immutable, public, max-age=2592000, immutable\r\nAccess-Control-Allow-Origin: *\r\nX-Custom-Check: true\r\nServer: Nginx\r\nL-Safe: 1785456642=csqYCqnSrfqstQvye8K/cOFcRTOv1c0xbYhymJAs0/02+uXPG5GVyZ0p6izerPHm8MGf7A/o5MmlVb25OTDKDKeQU0rR3SBVQb7DhxtPpD3sSzxoSDG3GUN9oldUbp9/49xVY7UWBgnWGNvQm3pHmukuHRLxIzXXppUlpGs5PUC8OL5ESDjYobwSrUxT4jKY\r\nL-VIA: l1=TqoDVanjjr6wMExF\r\nL-VERSION: 1784720560\r\nL-Request-Id: 3eba19fb58249e8c836\r\nX-Cache-Status: HIT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":35652,"size_decoded":36805,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1884x434, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"460db28ebf94215162fde2f45aa09227","sha1":"0225f7e91dc41547efad18932766b6c015ad8067","sha256":"6f2bb6b02eec8a75b36f50f9a85e80a7153785bb31d41c7204bfd276c6407fcc","sha512":"e95968ce697aedd21f9c2bca132aeb5704265c25d540eda3e4d08832b3d0d0e71e454d137ed5de531807499279ab56121b0a5975f340670b2ece902d60fbcc0d","ssdeep":"768:tNbBFG8Mzu+7ftXGrZ98VqOhCHza3+conChKku0aOwq9J9r7Z1I:bDG8MZh2rZQqYNUkWOR9J5jI","tlshash":"44f2e18ec1c932eee97bc29101be2be0ff89966bf15857662dd2c0c98e51311848fc5d","first_seen":"2026-04-24T23:10:16.885462Z","last_seen":"2026-07-31T12:41:47.092561Z","times_seen":1164,"resource_available":false,"data":null}},"time_used":440,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":349,"receive":91,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-31","alert":"Phishing Block","trigger":"y42t.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-31","alert":"Sinkholed","trigger":"y42t.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"photo.365live88.com/img/fb/team/8d7ca3de145a410995ddc53c5681f1ec?win007=sell","fqdn":"photo.365live88.com","domain":"365live88.com","tld":"com"},"ip":{"addr":"154.41.93.240","port":443,"asn":174,"as":"COGENT-174","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://y42t.top/","date":"2026-07-31T00:10:42.473Z","timestamp":1785456642473,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"photo.365live88.com","organization":""},"issuer":{"commonName":"Encryption Everywhere DV TLS CA - G2","organization":"DigiCert Inc"},"validity":{"start":"Sat, 01 Nov 2025 00:00:00 GMT","end":"Sat, 31 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"45:76:43:9C:31:C5:89:A6:99:FD:9B:D8:6C:A9:3A:E6:2F:D6:E9:80","sha256":"73:27:CF:D8:8D:AC:95:46:00:5D:67:05:1E:70:22:3E:17:F0:94:78:CD:6F:A6:9C:C8:5F:B5:3B:75:60:3D:C8"}}},"request":{"raw":"GET /img/fb/team/8d7ca3de145a410995ddc53c5681f1ec?win007=sell HTTP/1.1\r\nHost: photo.365live88.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://y42t.top/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: openresty\r\nDate: Fri, 31 Jul 2026 00:10:45 GMT\r\nContent-Type: image/png\r\nContent-Length: 60398\r\nConnection: keep-alive\r\nAccept-Ranges: bytes\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Expose-Headers: X-Log, X-Reqid\r\nAccess-Control-Max-Age: 2592000\r\nAge: 83431\r\nCache-Control: public, max-age=31536000\r\nContent-Disposition: inline; filename=\"8d7ca3de145a410995ddc53c5681f1ec\"; filename*=utf-8''8d7ca3de145a410995ddc53c5681f1ec\r\nContent-Md5: f9ZSgKjFkh6K8ld8GwLrZA==\r\nContent-Transfer-Encoding: binary\r\nEtag: \"Fs86Y-49TubJ3kf4t3euucIAKV8C\"\r\nLast-Modified: Fri, 24 Jul 2026 19:49:46 GMT\r\nX-Log: X-Log\r\nX-M-Log: QNM:wldsg121;QNM3\r\nX-M-Reqid: jt6uDcJck\r\nX-Qiniu-Zone: as0\r\nX-Qnm-Cache: Hit\r\nX-Reqid: OsMAAABmd6x668YY\r\nX-Svr: IO\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":60398,"size_decoded":61154,"mime_type":"image/png","magic":"PNG image data, 316 x 316, 8-bit/color RGBA, non-interlaced","md5":"7fd65280a8c5921e8af2577c1b02eb64","sha1":"cf3a63ee3d4ee6c9de47f8b777aeb9c200295f02","sha256":"25dce0bbaa57c94464e793cb781fe28d5798f6acb57b32953d5f59175e751f78","sha512":"94daef35f010bebc5901e13dd930b5bfaa6b53c8d09589f3f1756daeef94d657d89462161fb520688fe0f408a2ce7e0c58e003e8b4c72951f2e8bc851dd75f36","ssdeep":"1536:sC0q6nwg3v/toez+cvpSPQyD4899NdzonGgqGwprft4mvsW:sbq6j1XQP74iNdzoGgdwpzqmvh","tlshash":"4a4302b1b59eddaf8874667010b060ad891b90f3be64b43eba49977e817fcc11335352","first_seen":"2025-03-30T02:59:21.13735Z","last_seen":"2026-07-31T00:12:30.713206Z","times_seen":141,"resource_available":false,"data":null}},"time_used":3131,"timings":{"blocked":2761,"dns":0,"connect":0,"send":0,"wait":275,"receive":95,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"y42t.top/jumpto/img/https://rcf-img-hk.gasdg646fs224cn.com/202508/_webp_size1884x434_f0f83841-a720-4f18-8acd-c726f4c1e685.jpg","fqdn":"y42t.top","domain":"y42t.top","tld":"top"},"ip":{"addr":"154.39.104.138","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://y42t.top/","date":"2026-07-31T00:10:42.392Z","timestamp":1785456642392,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"p40f.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 10:44:09 GMT","end":"Tue, 20 Oct 2026 10:44:08 GMT"},"fingerprint":{"sha1":"41:09:2C:3F:FC:9C:25:A9:DB:51:15:BB:D1:5A:D8:01:DC:38:AD:F8","sha256":"49:3B:29:C7:5B:B6:12:CF:84:14:5B:09:42:7D:EF:AA:61:29:EC:A1:D5:40:B5:64:5C:F1:33:AB:9B:E1:13:4D"}}},"request":{"raw":"GET /jumpto/img/https://rcf-img-hk.gasdg646fs224cn.com/202508/_webp_size1884x434_f0f83841-a720-4f18-8acd-c726f4c1e685.jpg HTTP/1.1\r\nHost: y42t.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://y42t.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 31 Jul 2026 00:10:42 GMT\r\nContent-Type: image/webp\r\nContent-Length: 36728\r\nConnection: keep-alive\r\netag: \"52398a59ef91dae075d096fc4ff3afd5\"\r\nLast-Modified: Wed, 10 Dec 2025 10:48:28 GMT\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mWA1xGvKRd8zvrxTHa5Uo%2ByGADu%2BzN7UpCZ%2BA2c4%2FkNlZ%2BtPaobhuJ%2FLpJ5uyIjaho2wVOyaYgfYRKLtLeNiKFiOnDT5domV0WljzMW1YcjsrPKncKUYtBJmWhMMwRV6iKKQdGQ8lqup8Jym736JHn4%3D\"}]}\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nAge: 499184\r\ncf-cache-status: HIT\r\nCF-RAY: a208c690a8197d6c-HKG\r\nalt-svc: h3=\":443\"; ma=86400\r\nCache-Control: public, max-age=2592000, immutable, public, max-age=2592000, immutable\r\nAccess-Control-Allow-Origin: *\r\nX-Custom-Check: true\r\nServer: Nginx\r\nL-Safe: 1785456642=csqYCqnSrfqstQvye8K/cOFcRTOv1c0xbYhymJAs0/02+uXPG5GVyZ0p6izerPHm8MGf7A/o5MmlVb25OTDKDKeQU0rR3SBVQb7DhxtPpD3sSzxoSDG3GUN9oldUbp9/49xVY7UWBgnWGNvQm3pHmukuHRLxIzXXppUlpGs5PUC8OL5ESDjYobwSrUxT4jKY\r\nL-VIA: l1=TqoDVanjjr6wMExF\r\nL-VERSION: 1784720560\r\nL-Request-Id: 3ec619fb58249eabcf1\r\nX-Cache-Status: HIT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":36728,"size_decoded":37887,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1884x434, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"52398a59ef91dae075d096fc4ff3afd5","sha1":"715ca96c95f7b75bd6343de6602afcc7e7ccf18f","sha256":"2e8e6e9cbe50fbf5f51840e5623faf0f36db820671ff2be4b6b081cb1291e12e","sha512":"c07a7de6ef0d1d3354bcadee066770459b970a5055407f504cfdabf079769658313aa63c703e8368197fd058aa17ef6dcb3370f91b189afa43ca1d9fdb4d348e","ssdeep":"768:sBvs73CSqIdqVjockR0g1C89hQMFd0gAgojNSB5uZE259v14vG:sBvs7vDacRR0g1C89hV0gA9SBgn59NSG","tlshash":"7cf2f173d312052e65293ba2aa1c6b7b2cff7e34c77d82d150a278570d01adb07ac764","first_seen":"2026-04-24T23:10:16.817294Z","last_seen":"2026-07-31T12:41:47.040115Z","times_seen":1145,"resource_available":false,"data":null}},"time_used":671,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":420,"receive":251,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-31","alert":"Sinkholed","trigger":"y42t.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-31","alert":"Phishing Block","trigger":"y42t.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"photo.365live88.com/img/fb/team/e7c18596e241479bac749c766ba2824d?win007=sell","fqdn":"photo.365live88.com","domain":"365live88.com","tld":"com"},"ip":{"addr":"154.41.93.240","port":443,"asn":174,"as":"COGENT-174","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://y42t.top/","date":"2026-07-31T00:10:42.514Z","timestamp":1785456642514,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"photo.365live88.com","organization":""},"issuer":{"commonName":"Encryption Everywhere DV TLS CA - G2","organization":"DigiCert Inc"},"validity":{"start":"Sat, 01 Nov 2025 00:00:00 GMT","end":"Sat, 31 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"45:76:43:9C:31:C5:89:A6:99:FD:9B:D8:6C:A9:3A:E6:2F:D6:E9:80","sha256":"73:27:CF:D8:8D:AC:95:46:00:5D:67:05:1E:70:22:3E:17:F0:94:78:CD:6F:A6:9C:C8:5F:B5:3B:75:60:3D:C8"}}},"request":{"raw":"GET /img/fb/team/e7c18596e241479bac749c766ba2824d?win007=sell HTTP/1.1\r\nHost: photo.365live88.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://y42t.top/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: openresty\r\nDate: Fri, 31 Jul 2026 00:10:46 GMT\r\nContent-Type: image/png\r\nContent-Length: 202446\r\nConnection: keep-alive\r\nAccept-Ranges: bytes\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Expose-Headers: X-Log, X-Reqid\r\nAccess-Control-Max-Age: 2592000\r\nAge: 43826\r\nCache-Control: public, max-age=31536000\r\nContent-Disposition: inline; filename=\"e7c18596e241479bac749c766ba2824d\"; filename*=utf-8''e7c18596e241479bac749c766ba2824d\r\nContent-Md5: RwSDXRPXwgA/hGtQ7530bg==\r\nContent-Transfer-Encoding: binary\r\nEtag: \"Fv_Shig8Ut_bOZ0zN_QauhU-SViR\"\r\nLast-Modified: Thu, 23 Jul 2026 20:13:34 GMT\r\nX-Log: X-Log\r\nX-M-Log: QNM:wldsg121;QNM3\r\nX-M-Reqid: kyphKUxaV\r\nX-Qiniu-Zone: as0\r\nX-Qnm-Cache: Hit\r\nX-Reqid: FIsAAAC7oDuAD8cY\r\nX-Svr: IO\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":202446,"size_decoded":203203,"mime_type":"image/png","magic":"PNG image data, 1200 x 1863, 8-bit/color RGBA, non-interlaced","md5":"4704835d13d7c2003f846b50ef9df46e","sha1":"ffd286283c52dfdb399d3337f41aba153e495891","sha256":"368a68c2f0ceb3f36219920e63d59a3f02db9e55c8f342261f42bf40060109d1","sha512":"c42d73c21b214a235e05f13a1a21fb4751ae41e59133604a833706712d3a9164e75115bbfd068d04d0dde05bf76bce64695ece6d4c7d5f636ee7fee385ab68ba","ssdeep":"6144:JS649zcTyW9XKB8g0eIb56V/w1RslLj9mKNr:JtKqDX8pgMhm2r","tlshash":"52141201ec3b09d0cb111bf87c9a5ee5b6b34865cff605e66a7847b2af86521b483cd4","first_seen":"2025-07-11T02:44:25.384267Z","last_seen":"2026-07-31T12:41:46.982024Z","times_seen":122,"resource_available":false,"data":null}},"time_used":4726,"timings":{"blocked":4145,"dns":0,"connect":0,"send":0,"wait":258,"receive":323,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"y42t.top/jumpto/img/https://rcf-img-hk.gasdg646fs224cn.com/202503/_webp_size649x578_ad0ed5ff-8fa0-4231-a619-ce0616ad2a8d.png","fqdn":"y42t.top","domain":"y42t.top","tld":"top"},"ip":{"addr":"154.39.104.138","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://y42t.top/","date":"2026-07-31T00:10:42.861Z","timestamp":1785456642861,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"p40f.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 10:44:09 GMT","end":"Tue, 20 Oct 2026 10:44:08 GMT"},"fingerprint":{"sha1":"41:09:2C:3F:FC:9C:25:A9:DB:51:15:BB:D1:5A:D8:01:DC:38:AD:F8","sha256":"49:3B:29:C7:5B:B6:12:CF:84:14:5B:09:42:7D:EF:AA:61:29:EC:A1:D5:40:B5:64:5C:F1:33:AB:9B:E1:13:4D"}}},"request":{"raw":"GET /jumpto/img/https://rcf-img-hk.gasdg646fs224cn.com/202503/_webp_size649x578_ad0ed5ff-8fa0-4231-a619-ce0616ad2a8d.png HTTP/1.1\r\nHost: y42t.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://y42t.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 31 Jul 2026 00:10:46 GMT\r\nContent-Type: image/webp\r\nContent-Length: 43980\r\nConnection: keep-alive\r\netag: \"fe9109b6cf4f5478cc8e8fa2df5009fe\"\r\nLast-Modified: Sat, 06 Dec 2025 06:22:15 GMT\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=y%2FL1aaSu7mG7SUiSANfuodTyMIHspQtfJP0%2F9SM1IaBYV8FYQ19S6tDSFPzrShmSA7H4ho0KYjMvauuBSeeKQdE%2F8y76oVXRHfdBUttECV4oI0OCfZbHc4878ne5Q7I9sl5JylbJ57ogfWHpBYKW%2Bu0%3D\"}]}\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nAge: 499204\r\ncf-cache-status: HIT\r\nCF-RAY: a208c62fc8abd13f-HKG\r\nalt-svc: h3=\":443\"; ma=86400\r\nCache-Control: public, max-age=2592000, immutable, public, max-age=2592000, immutable\r\nAccess-Control-Allow-Origin: *\r\nX-Custom-Check: true\r\nServer: Nginx\r\nL-Safe: 1785456646=EMBgc894QAdP6slbLJsiNGYFcXUmrvQIWKh5BYYK6Qj4fqRyTGb/Xbwkd279GHpNIUNxmrA5BLARmTn3BBDanv5J4PcdpRxfVwUjHlMDvqiZAET3U1COvNHjyZWcIPWzQSTxYljkuIh13EY2sibpSpVrTubzP7vT5r508KhivSQ1oVznby71Ayyz5cTYVqWG\r\nL-VIA: l1=TqoDVanjjr6wMExF\r\nL-VERSION: 1784720560\r\nL-Request-Id: 3ec119fb5825ab5c2cc\r\nX-Cache-Status: HIT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":43980,"size_decoded":45135,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"fe9109b6cf4f5478cc8e8fa2df5009fe","sha1":"c379459affae382d1bb8ebcc637a880c0ccc284f","sha256":"8a0f41c270d457f16992ae4d9cfdacaf31bc2e03526f377b557111ceb90bc056","sha512":"4d95fa57a6e2175f2e11a07e15ef45187a3d5e44ad567ec4634bdf5e35c37e1c88026663fdd6a583cf0e1d665f0fe8d12cbaa535af6189cb88977228ffd3c5ab","ssdeep":"768:mD/LEFkjJ0uG775vp9Y25iMxn46PWKhqrJ0bAbhtI0iSRXbs6nuxV8fnxO:mDD9jJ0p9J5iKnQKEriAbhtgcbspx","tlshash":"4c13f180b6ebb93680296123673378eef9c47a6fff44872aff82464699133743119d15","first_seen":"2026-04-24T23:10:16.768892Z","last_seen":"2026-07-31T12:36:18.714293Z","times_seen":900,"resource_available":false,"data":null}},"time_used":4135,"timings":{"blocked":3804,"dns":0,"connect":0,"send":0,"wait":311,"receive":20,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-31","alert":"Sinkholed","trigger":"y42t.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-31","alert":"Phishing Block","trigger":"y42t.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"y42t.top/css/chunk-common.1781011881923.90261a1c.css","fqdn":"y42t.top","domain":"y42t.top","tld":"top"},"ip":{"addr":"154.39.104.138","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://y42t.top/","date":"2026-07-31T00:10:38.074Z","timestamp":1785456638074,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"p40f.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 10:44:09 GMT","end":"Tue, 20 Oct 2026 10:44:08 GMT"},"fingerprint":{"sha1":"41:09:2C:3F:FC:9C:25:A9:DB:51:15:BB:D1:5A:D8:01:DC:38:AD:F8","sha256":"49:3B:29:C7:5B:B6:12:CF:84:14:5B:09:42:7D:EF:AA:61:29:EC:A1:D5:40:B5:64:5C:F1:33:AB:9B:E1:13:4D"}}},"request":{"raw":"GET /css/chunk-common.1781011881923.90261a1c.css HTTP/1.1\r\nHost: y42t.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://y42t.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 31 Jul 2026 00:10:38 GMT\r\nContent-Type: text/css\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Tue, 09 Jun 2026 13:37:11 GMT\r\nVary: Accept-Encoding\r\nETag: W/\"6a281707-34c8\"\r\nCache-Control: public, max-age=31536000, immutable\r\nAccess-Control-Allow-Origin: *\r\nX-Custom-Check: true\r\nContent-Encoding: gzip\r\nServer: Nginx\r\nL-Safe: 1785456638=spfqpn6fY4y3fZtY0H6j2NTv25wzT5EQ1wj7koQgMzA0vWwFcicuKIMZGIdtkkNSeWsrScNU4RjxFciulIcuwtx/yeqqcUPJs5itgwA/VIspYspfgKoNZCVd5ReH5RnmI+JuS7nmr+CJ2mFhP15XL5m4D8uR3ysrOzNOMy1CJ0v2fRXCOc9HkLd5F/w10c5w\r\nL-VIA: l1=TqoDVanjjr6wMExF\r\nL-VERSION: 1784720560\r\nL-Request-Id: 3ec819fb5823b50c0eb\r\nX-Cache-Status: BYPASS\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":13512,"size_decoded":4720,"mime_type":"text/css","magic":"ASCII text, with very long lines (13512), with no line terminators","md5":"18db28ed82e6a8aa84b4ca311e8effc9","sha1":"19d1c3f13ce483b564653631f2bd6a340017a84b","sha256":"8d0fd3816e0960390ac6c9757e98a97c96597871468e74a8dcb81f170ad98303","sha512":"dbee6bb335fe964df137f44bbd9752844d5baeeec889ffb5c21c9979a8ce51018f81dadd4a66b2016a30874962c6e4fd2243325fa60958d45d06f34bdee72b87","ssdeep":"192:4dQK/X4cBY4mZGX1lsUTLA7gYER7/i//LN4hHSQZA2VxM2XwKjv0:M8oTGER7/i//LihHBrxP0","tlshash":"c952a631d634b53ce57be226f9d09adc6024d417e2730baeea643b3ac5ca4d215332c8","first_seen":"2026-06-12T19:29:57.231975Z","last_seen":"2026-07-31T12:41:47.074846Z","times_seen":974,"resource_available":false,"data":null}},"time_used":888,"timings":{"blocked":-1,"dns":0,"connect":285,"send":0,"wait":308,"receive":0,"ssl":296},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-31","alert":"Sinkholed","trigger":"y42t.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-31","alert":"Phishing Block","trigger":"y42t.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"y42t.top/img/LIVE.88ccbf98.png","fqdn":"y42t.top","domain":"y42t.top","tld":"top"},"ip":{"addr":"154.39.104.138","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://y42t.top/","date":"2026-07-31T00:10:42.764Z","timestamp":1785456642764,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"p40f.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 10:44:09 GMT","end":"Tue, 20 Oct 2026 10:44:08 GMT"},"fingerprint":{"sha1":"41:09:2C:3F:FC:9C:25:A9:DB:51:15:BB:D1:5A:D8:01:DC:38:AD:F8","sha256":"49:3B:29:C7:5B:B6:12:CF:84:14:5B:09:42:7D:EF:AA:61:29:EC:A1:D5:40:B5:64:5C:F1:33:AB:9B:E1:13:4D"}}},"request":{"raw":"GET /img/LIVE.88ccbf98.png HTTP/1.1\r\nHost: y42t.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://y42t.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 31 Jul 2026 00:10:45 GMT\r\nContent-Type: image/png\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Tue, 09 Jun 2026 13:37:11 GMT\r\nVary: Accept-Encoding\r\nETag: W/\"6a281707-f0e1\"\r\nCache-Control: public, max-age=2592000, immutable\r\nAccess-Control-Allow-Origin: *\r\nX-Custom-Check: true\r\nContent-Encoding: gzip\r\nServer: Nginx\r\nL-Safe: 1785456645=3m/UQghxNGW3gPChBH0qwAw5jhMnk/bL7ljEsAqUNfL2w1i0HQREe2rEb4k+hpOpl+mNkeotUTn7rI4RELPi496PFmfq0fH/qKdAcrqsvLVi0CluaNffWUzPkudCch2/uigQXMAy3JVAvXsWZA3UDGCysooGP/loOgkjhRbwnpUqbTZcGQok3Gq63qCfb31c\r\nAge: 499192\r\nL-VIA: l1=TqoDVanjjr6wMExF\r\nL-VERSION: 1784720560\r\nL-Request-Id: 3ec219fb58253daba27\r\nX-Cache-Status: HIT\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":61665,"size_decoded":62398,"mime_type":"image/png","magic":"PNG image data, 582 x 307, 8-bit colormap, non-interlaced","md5":"372d01a2bda7ccdca1e7966af39c2327","sha1":"d438c1947b711d032c5621a6b4b08bbbca2c338d","sha256":"4eac7be4c06fa607ef5e95789e3ead43806bfeff97872ed6567e3810f2f661bc","sha512":"9f04160df8696cf984cd77604dddaea73969479e4f1c5050e53351df7f11e85d8ecccb14ecb87dcd58bea0ba04d9ba5ea3f99c69a179ba88ad38d5416b7a94d3","ssdeep":"1536:jTjrlfQBxhFWiXt2lnJE9mARbSK0k2C8ve1HfarCtt:jH1QjwWUC9mA10jC8WZfaQt","tlshash":"dd53124a2ecc3a1f7bf21e5e06f286814d36a186d0f9ba5bc6e70ef1218521de0e4535","first_seen":"2023-11-10T19:12:00Z","last_seen":"2026-07-31T12:41:15.263304Z","times_seen":2308,"resource_available":false,"data":null}},"time_used":2567,"timings":{"blocked":2170,"dns":0,"connect":0,"send":0,"wait":312,"receive":85,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-31","alert":"Sinkholed","trigger":"y42t.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-31","alert":"Phishing Block","trigger":"y42t.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"photo.365live88.com/img/fb/team/ef42f44f6854408baf15cf2567c6dc28?win007=sell","fqdn":"photo.365live88.com","domain":"365live88.com","tld":"com"},"ip":{"addr":"154.41.93.240","port":443,"asn":174,"as":"COGENT-174","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://y42t.top/","date":"2026-07-31T00:10:42.530Z","timestamp":1785456642530,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"photo.365live88.com","organization":""},"issuer":{"commonName":"Encryption Everywhere DV TLS CA - G2","organization":"DigiCert Inc"},"validity":{"start":"Sat, 01 Nov 2025 00:00:00 GMT","end":"Sat, 31 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"45:76:43:9C:31:C5:89:A6:99:FD:9B:D8:6C:A9:3A:E6:2F:D6:E9:80","sha256":"73:27:CF:D8:8D:AC:95:46:00:5D:67:05:1E:70:22:3E:17:F0:94:78:CD:6F:A6:9C:C8:5F:B5:3B:75:60:3D:C8"}}},"request":{"raw":"GET /img/fb/team/ef42f44f6854408baf15cf2567c6dc28?win007=sell HTTP/1.1\r\nHost: photo.365live88.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://y42t.top/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: openresty\r\nDate: Fri, 31 Jul 2026 00:10:48 GMT\r\nContent-Type: image/gif\r\nContent-Length: 7076\r\nConnection: keep-alive\r\nAccept-Ranges: bytes\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Expose-Headers: X-Log, X-Reqid\r\nAccess-Control-Max-Age: 2592000\r\nAge: 29320\r\nCache-Control: public, max-age=31536000\r\nContent-Disposition: inline; filename=\"ef42f44f6854408baf15cf2567c6dc28\"; filename*=utf-8''ef42f44f6854408baf15cf2567c6dc28\r\nContent-Md5: kAZulCFxzzV9e/2+mF+wUw==\r\nContent-Transfer-Encoding: binary\r\nEtag: \"FoZrgOLneG3k9bl9u9QON0G9W9FI\"\r\nLast-Modified: Sat, 25 Jul 2026 19:15:09 GMT\r\nX-Log: X-Log\r\nX-M-Log: QNM:wldsg121;QNM3\r\nX-M-Reqid: qx0rlqnbn\r\nX-Qiniu-Zone: as0\r\nX-Qnm-Cache: Hit\r\nX-Reqid: zUgAAAByNBiyHMcY\r\nX-Svr: IO\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":7076,"size_decoded":7831,"mime_type":"image/gif","magic":"GIF image data, version 89a, 150 x 125","md5":"90066e942171cf357d7bfdbe985fb053","sha1":"866b80e2e7786de4f5b97dbbd40e3741bd5bd148","sha256":"ccdcfd5b8de754a6107cf9d91156b779c15211a532862cf5633e7540f8c8d31b","sha512":"98f73a648b86bd203a1036e2091b0b123e1b70097765d27e19c196c05f73f55eaac2f5eb6dbeffb902baac9e81a7f7f1f20f26add2626f76e3dd522697445d8f","ssdeep":"192:e/dKEANDWfjs85UhOq4pd2oH1vBt62mHGND3F+ZkLw+:eK+ehyj1nEmNDV+ZkLv","tlshash":"28e1b0067c6791f089924095c753a25b60f7953423f0a2fa7233449383e7b9e1f060ba","first_seen":"2025-10-11T14:06:01.347934Z","last_seen":"2026-07-31T12:41:15.2565Z","times_seen":30,"resource_available":false,"data":null}},"time_used":5806,"timings":{"blocked":5551,"dns":0,"connect":0,"send":0,"wait":255,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"y42t.top/img/home-bg.1e09954b.png","fqdn":"y42t.top","domain":"y42t.top","tld":"top"},"ip":{"addr":"154.39.104.138","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://y42t.top/","date":"2026-07-31T00:10:42.579Z","timestamp":1785456642579,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"p40f.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 10:44:09 GMT","end":"Tue, 20 Oct 2026 10:44:08 GMT"},"fingerprint":{"sha1":"41:09:2C:3F:FC:9C:25:A9:DB:51:15:BB:D1:5A:D8:01:DC:38:AD:F8","sha256":"49:3B:29:C7:5B:B6:12:CF:84:14:5B:09:42:7D:EF:AA:61:29:EC:A1:D5:40:B5:64:5C:F1:33:AB:9B:E1:13:4D"}}},"request":{"raw":"GET /img/home-bg.1e09954b.png HTTP/1.1\r\nHost: y42t.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://y42t.top/css/home.1781011881923.38488e2a.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 31 Jul 2026 00:10:43 GMT\r\nContent-Type: image/png\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Tue, 09 Jun 2026 13:37:10 GMT\r\nVary: Accept-Encoding\r\nETag: W/\"6a281706-fae\"\r\nCache-Control: public, max-age=2592000, immutable\r\nAccess-Control-Allow-Origin: *\r\nX-Custom-Check: true\r\nContent-Encoding: gzip\r\nServer: Nginx\r\nL-Safe: 1785456643=L21MjTcjPMoacLR4vpNVcs71ZpTSCD9pAjEcK72XJz4geELYb/dM7FIgfcGewCPiEiHBLTyE0/8OE0+Ussy/+H0+QJ0ieZl66nXxiX7hlrgta/bqlKy5K3ZjLS3f1v4h/F2vuy6GEAoffe4Wt8WE6NAsU33QhqR65Iggn1IfkuSp/Pz9elabEun/YDFlVnt3\r\nAge: 499193\r\nL-VIA: l1=TqoDVanjjr6wMExF\r\nL-VERSION: 1784720560\r\nL-Request-Id: 3ec919fb5824f1cc090\r\nX-Cache-Status: HIT\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4014,"size_decoded":4740,"mime_type":"image/png","magic":"PNG image data, 278 x 80, 8-bit colormap, non-interlaced","md5":"ed0eb6c81f949885511fbbe4d666a2f0","sha1":"d74fb98c3b01727753bb182eb5ee5d6eedf3da4a","sha256":"7fecf4ed61ab1535aafe2800474ac643b49264b83f54fc1da596d7334868ae75","sha512":"dd2f749e24e6b35f80fa77856c9c8b1cb1e0cacb9250b947403283e152d8bb9e7bf539df00ca6743d4162aeac014e47ce82191b62847fabe6cbb5693b4cd7fec","ssdeep":"","tlshash":"1a816c7eb31a4997296ff194138b387d74b0709d0b546934388a9c31a4791fcf39e526","first_seen":"2025-08-29T11:05:53.155399Z","last_seen":"2026-07-31T12:41:15.198581Z","times_seen":2315,"resource_available":false,"data":null}},"time_used":1421,"timings":{"blocked":1131,"dns":0,"connect":0,"send":0,"wait":290,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-31","alert":"Sinkholed","trigger":"y42t.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-31","alert":"Phishing Block","trigger":"y42t.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"y42t.top/jumpto/img/https://rcf-img-hk.gasdg646fs224cn.com/gpmaster/_webp_size328x442_c0a34e2a-97fa-40dc-8123-594806696886.png","fqdn":"y42t.top","domain":"y42t.top","tld":"top"},"ip":{"addr":"154.39.104.138","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://y42t.top/","date":"2026-07-31T00:10:42.851Z","timestamp":1785456642851,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"p40f.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 10:44:09 GMT","end":"Tue, 20 Oct 2026 10:44:08 GMT"},"fingerprint":{"sha1":"41:09:2C:3F:FC:9C:25:A9:DB:51:15:BB:D1:5A:D8:01:DC:38:AD:F8","sha256":"49:3B:29:C7:5B:B6:12:CF:84:14:5B:09:42:7D:EF:AA:61:29:EC:A1:D5:40:B5:64:5C:F1:33:AB:9B:E1:13:4D"}}},"request":{"raw":"GET /jumpto/img/https://rcf-img-hk.gasdg646fs224cn.com/gpmaster/_webp_size328x442_c0a34e2a-97fa-40dc-8123-594806696886.png HTTP/1.1\r\nHost: y42t.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://y42t.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 31 Jul 2026 00:10:46 GMT\r\nContent-Type: image/webp\r\nContent-Length: 13338\r\nConnection: keep-alive\r\netag: \"c9888ec9eb68e23af8c466de36aa1374\"\r\nLast-Modified: Tue, 02 Dec 2025 14:08:14 GMT\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Qsmff0UUHhQ0fu0Q%2B6h1MFoXPH%2FG0iP20QKsDufwFe0%2FD5J9wyiV8Yz6DSprrZXO6n%2F7OEzs6faaU%2B%2FxFIhgFmidXDTxyJZYk0VY1kQpgmw%2FyhAO65is6LY78fun6%2FMcov%2F3dcNsgmrjxO1W%2FFq67Gw%3D\"}]}\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nAge: 499207\r\ncf-cache-status: HIT\r\nCF-RAY: a208c61cdf9d04d3-HKG\r\nalt-svc: h3=\":443\"; ma=86400\r\nCache-Control: public, max-age=2592000, immutable, public, max-age=2592000, immutable\r\nAccess-Control-Allow-Origin: *\r\nX-Custom-Check: true\r\nServer: Nginx\r\nL-Safe: 1785456646=EMBgc894QAdP6slbLJsiNGYFcXUmrvQIWKh5BYYK6Qj4fqRyTGb/Xbwkd279GHpNIUNxmrA5BLARmTn3BBDanv5J4PcdpRxfVwUjHlMDvqiZAET3U1COvNHjyZWcIPWzQSTxYljkuIh13EY2sibpSpVrTubzP7vT5r508KhivSQ1oVznby71Ayyz5cTYVqWG\r\nL-VIA: l1=TqoDVanjjr6wMExF\r\nL-VERSION: 1784720560\r\nL-Request-Id: 3ec519fb5825895c07b\r\nX-Cache-Status: HIT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":13338,"size_decoded":14505,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"c9888ec9eb68e23af8c466de36aa1374","sha1":"9f390e12dc110576b1f87b5705379cce7c8d821c","sha256":"8ff81de4e5b37505789b23808f901d64ab7d3dd91a813438ff0c762971c445c2","sha512":"6234782d00cacdac98ef61238100e1e4b6d3a44b462264cddf34237f74cc589576644b8b1a8e1e309c0acf400d17b899dad9717654f487f86a28224d4e2744e6","ssdeep":"384:sfQdwsWMYKGas1GU33KVwYl/0VPxDNUrIJeYcsFAl33l8Ta0V+t:vdTqGU3aJB0VPx0IJ4sFApWT5q","tlshash":"f052ae4ef297816890419138d0d51cb6583550ee8ffb29ad2e78e7c9630173ee4abb3d","first_seen":"2026-04-24T23:10:16.827229Z","last_seen":"2026-07-31T12:36:18.579946Z","times_seen":897,"resource_available":false,"data":null}},"time_used":3574,"timings":{"blocked":3269,"dns":0,"connect":0,"send":0,"wait":305,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-31","alert":"Sinkholed","trigger":"y42t.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-31","alert":"Phishing Block","trigger":"y42t.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"y42t.top/","fqdn":"y42t.top","domain":"y42t.top","tld":"top"},"ip":{"addr":"154.39.104.138","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-07-31T00:10:35.581Z","timestamp":1785456635581,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"p40f.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 10:44:09 GMT","end":"Tue, 20 Oct 2026 10:44:08 GMT"},"fingerprint":{"sha1":"41:09:2C:3F:FC:9C:25:A9:DB:51:15:BB:D1:5A:D8:01:DC:38:AD:F8","sha256":"49:3B:29:C7:5B:B6:12:CF:84:14:5B:09:42:7D:EF:AA:61:29:EC:A1:D5:40:B5:64:5C:F1:33:AB:9B:E1:13:4D"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: y42t.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 31 Jul 2026 00:10:37 GMT\r\nContent-Type: text/html\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nCache-Control: public, s-maxage=600, max-age=0\r\nAccess-Control-Allow-Origin: *\r\nX-Custom-Check: true\r\nContent-Encoding: gzip\r\nServer: Nginx\r\nL-Safe: 1785456637=6yB0voGGJ6r4U3rENzpuXKEIDINtPscW3EvTbl1EJ6hSYI5KJqp4yxc0/Hm5qJ1PKWHdJGMVErieiXJUk8F7+IXd4R2p/Gyl6g9kU9Hb7yd389fHB20SA0bAO0gjeWmTWZPTj/+jg8F77pbgdpMsi4BzUmpPW40peitsC8tzoZ0c09ZLUolDvs4Gu0y+MdOY\r\nL-VIA: l1=TqoDVanjjr6wMExF\r\nL-VERSION: 1784720560\r\nL-Request-Id: 3ec119fb5823696c2ab\r\nX-Cache-Status: BYPASS\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":24594,"size_decoded":11457,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (5777)","md5":"e79ba8d5268f3090203c26b2ec87119f","sha1":"67ec737a939ce7eb32f6c9ab0f6cb36a5d0c5045","sha256":"f03b70608a46781f56d44226537411cfd4da69014f8c6540319977c45398149b","sha512":"378079455a3539b8fa003afc4351f6acd844d704e0f41250b71dda29b445cb99821596e562eed3afea6a7d0b6de1ff61e22754a4c3d9384952d09b90f4dc3e55","ssdeep":"384:21ERlxqNBPJu2VwiYwJvSoVXsp+pa/iZcVk97g6nMusplIiz:1RXqrJuiNYiKop/E6wkpcu2llz","tlshash":"05b2195a9df3497a2423303a1f7fb20869b0d0134309ed803e4de7594f95aaa56f3bd6","first_seen":"2026-06-12T19:29:57.247756Z","last_seen":"2026-07-31T12:41:47.004786Z","times_seen":977,"resource_available":true,"data":null}},"time_used":2250,"timings":{"blocked":0,"dns":943,"connect":304,"send":0,"wait":388,"receive":0,"ssl":615},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-31","alert":"Sinkholed","trigger":"y42t.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-31","alert":"Phishing Block","trigger":"y42t.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"y42t.top/js/chunk-common.1781011881923.b470d60e.js","fqdn":"y42t.top","domain":"y42t.top","tld":"top"},"ip":{"addr":"154.39.104.138","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://y42t.top/","date":"2026-07-31T00:10:38.088Z","timestamp":1785456638088,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"p40f.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 10:44:09 GMT","end":"Tue, 20 Oct 2026 10:44:08 GMT"},"fingerprint":{"sha1":"41:09:2C:3F:FC:9C:25:A9:DB:51:15:BB:D1:5A:D8:01:DC:38:AD:F8","sha256":"49:3B:29:C7:5B:B6:12:CF:84:14:5B:09:42:7D:EF:AA:61:29:EC:A1:D5:40:B5:64:5C:F1:33:AB:9B:E1:13:4D"}}},"request":{"raw":"GET /js/chunk-common.1781011881923.b470d60e.js HTTP/1.1\r\nHost: y42t.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://y42t.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 31 Jul 2026 00:10:39 GMT\r\nContent-Type: application/javascript\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Tue, 09 Jun 2026 13:37:11 GMT\r\nVary: Accept-Encoding\r\nETag: W/\"6a281707-27606\"\r\nCache-Control: public, max-age=31536000, immutable\r\nAccess-Control-Allow-Origin: *\r\nX-Custom-Check: true\r\nContent-Encoding: gzip\r\nServer: Nginx\r\nL-Safe: 1785456639=ZQ2Zoq/cRP01EUwFViLw2I2TTD7YXn3fOcUs+xcjh4jH3sEo30QmYTa3wyU19juAAswcF1zK33qXVdu/2wEQssIQmAwdFBkC9e1CbV9WPKEBdbscbAAIXVFwwInqwSqPfxbfTB5XlXMMnezbEIdI/APkRTYkPOXTT5T1KnbKAZgGBnmhack9avnR9rigFkDp\r\nL-VIA: l1=TqoDVanjjr6wMExF\r\nL-VERSION: 1784720560\r\nL-Request-Id: 3ec119fb5823cd1c2b0\r\nX-Cache-Status: BYPASS\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":161286,"size_decoded":36940,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"08afa88982cffd7b96a2190cdafe1c42","sha1":"abb87563ff4cd658f4436118c54f3f39c08f74a4","sha256":"8673d3fc3524eb9d8b4020b3da3109aa5ab5e569ed8d0074f2b72b8643f813ae","sha512":"70c9df3dd7b3e3d41a607627c6a2750f43673649dbd55c7a56606a7d3e67382cb2991f146f7ad2359cc5ff1615f9db484b54642917150351017d0fa4385c3d2f","ssdeep":"1536:jBY8bgGcdWUa2UTY6eryXHuLmbErF/G7D1dMI59H64likx/vocGAClVbGD3tFk7u:jBYCRTY6wjFetH64liC/vocGAcgD3t","tlshash":"65f3e8c5b3a0f07e9a1ed53779331499b12f758274c87c60f1a1ade6bf1a704a436ca8","first_seen":"2026-06-12T19:29:57.317434Z","last_seen":"2026-07-31T12:41:47.016535Z","times_seen":970,"resource_available":true,"data":null}},"time_used":1633,"timings":{"blocked":938,"dns":0,"connect":0,"send":0,"wait":443,"receive":252,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-31","alert":"Phishing Block","trigger":"y42t.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-31","alert":"Sinkholed","trigger":"y42t.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"photo.365live88.com/img/fb/team/f3e7cc833cd7499d892f0ff0bd95ce74?win007=sell","fqdn":"photo.365live88.com","domain":"365live88.com","tld":"com"},"ip":{"addr":"154.41.93.240","port":443,"asn":174,"as":"COGENT-174","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://y42t.top/","date":"2026-07-31T00:10:42.464Z","timestamp":1785456642464,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"photo.365live88.com","organization":""},"issuer":{"commonName":"Encryption Everywhere DV TLS CA - G2","organization":"DigiCert Inc"},"validity":{"start":"Sat, 01 Nov 2025 00:00:00 GMT","end":"Sat, 31 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"45:76:43:9C:31:C5:89:A6:99:FD:9B:D8:6C:A9:3A:E6:2F:D6:E9:80","sha256":"73:27:CF:D8:8D:AC:95:46:00:5D:67:05:1E:70:22:3E:17:F0:94:78:CD:6F:A6:9C:C8:5F:B5:3B:75:60:3D:C8"}}},"request":{"raw":"GET /img/fb/team/f3e7cc833cd7499d892f0ff0bd95ce74?win007=sell HTTP/1.1\r\nHost: photo.365live88.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://y42t.top/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: openresty\r\nDate: Fri, 31 Jul 2026 00:10:44 GMT\r\nContent-Type: image/png\r\nContent-Length: 8921\r\nConnection: keep-alive\r\nAccept-Ranges: bytes\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Expose-Headers: X-Log, X-Reqid\r\nAccess-Control-Max-Age: 2592000\r\nAge: 86137\r\nCache-Control: public, max-age=31536000\r\nContent-Disposition: inline; filename=\"f3e7cc833cd7499d892f0ff0bd95ce74\"; filename*=utf-8''f3e7cc833cd7499d892f0ff0bd95ce74\r\nContent-Md5: 0dU+Y9PPjZLr6TaYbjjfSg==\r\nContent-Transfer-Encoding: binary\r\nEtag: \"Fiwh8W3GElUDLLfUWkJnMC1yq_5h\"\r\nLast-Modified: Fri, 24 Jul 2026 19:49:39 GMT\r\nX-Log: X-Log\r\nX-M-Log: QNM:wldsg119;QNM3\r\nX-M-Reqid: vCgVVQTzH\r\nX-Qiniu-Zone: as0\r\nX-Qnm-Cache: Hit\r\nX-Reqid: 9NoAAADur1AE6cYY\r\nX-Svr: IO\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":8921,"size_decoded":9676,"mime_type":"image/png","magic":"PNG image data, 180 x 180, 8-bit/color RGBA, non-interlaced","md5":"d1d53e63d3cf8d92ebe936986e38df4a","sha1":"2c21f16dc61255032cb7d45a4267302d72abfe61","sha256":"f9834e0ffa12dc3644b54264ec797c9d16dc9af563ac3b444a4a071b0f2b26c3","sha512":"34af5ef96d6b4c85db5d0d27f2300dae945dc97d2d0e16e8ab14571f7f46c2ca316cd6ce9a1dba604e90dbe412c54df1124ef77c2294dff9c5bcc8aff238ac18","ssdeep":"192:OBifNZfHfBgA5DVudP1e3gkg7BaGg9tj0vVpeKhAZQ56WqUjneu:OBi7pXDVuP1ewH4Gg9p0vbThU86cjneu","tlshash":"66029eda6869c809872f2e0d14c3bc9ac1e05a008738d1d6b37cf1fb6ff565606699b4","first_seen":"2025-02-24T02:30:01.445508Z","last_seen":"2026-07-31T00:12:52.470003Z","times_seen":128,"resource_available":false,"data":null}},"time_used":2329,"timings":{"blocked":2060,"dns":0,"connect":0,"send":0,"wait":269,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"y42t.top/jumpto/img/https://rcf-img-hk.gasdg646fs224cn.com/202508/_webp_size1298x1156_1d28b817-0c00-4339-b666-213943a7b1d3.png","fqdn":"y42t.top","domain":"y42t.top","tld":"top"},"ip":{"addr":"154.39.104.138","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://y42t.top/","date":"2026-07-31T00:10:42.867Z","timestamp":1785456642867,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"p40f.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 10:44:09 GMT","end":"Tue, 20 Oct 2026 10:44:08 GMT"},"fingerprint":{"sha1":"41:09:2C:3F:FC:9C:25:A9:DB:51:15:BB:D1:5A:D8:01:DC:38:AD:F8","sha256":"49:3B:29:C7:5B:B6:12:CF:84:14:5B:09:42:7D:EF:AA:61:29:EC:A1:D5:40:B5:64:5C:F1:33:AB:9B:E1:13:4D"}}},"request":{"raw":"GET /jumpto/img/https://rcf-img-hk.gasdg646fs224cn.com/202508/_webp_size1298x1156_1d28b817-0c00-4339-b666-213943a7b1d3.png HTTP/1.1\r\nHost: y42t.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://y42t.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 31 Jul 2026 00:10:47 GMT\r\nContent-Type: image/webp\r\nContent-Length: 91938\r\nConnection: keep-alive\r\netag: \"d4f654e067ee701e55c386cad6b53574\"\r\nLast-Modified: Wed, 10 Dec 2025 11:50:44 GMT\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nAge: 499203\r\ncf-cache-status: HIT\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XYJf%2BFh4qTV68vV1o%2B1j2t9UNTWPUbKfx3Mv8e%2Fa79ciaYWozgK5qM7EbyHTn9mSrp%2F0DqWt7Y6dbOj3btsq0EgveFzr9ou21bLts8JF6zhdSIgDCPEFDJo7bDrqov94fH7JcAuKF4QI81Fi%2BIOgYRg%3D\"}]}\r\nCF-RAY: a208c63b7df00397-HKG\r\nalt-svc: h3=\":443\"; ma=86400\r\nCache-Control: public, max-age=2592000, immutable, public, max-age=2592000, immutable\r\nAccess-Control-Allow-Origin: *\r\nX-Custom-Check: true\r\nServer: Nginx\r\nL-Safe: 1785456647=pwbyu29rM0HEK42bpjFMXQZZ8s1IzzkT40daNMbcT90Ub0zpvrQ+kBR7N9vkAvLpdcGVCAkYTtjHzFt3rikpG2u0ViQwOg9Y/d8oh3QnzrskfHJpkQ3k6DdsyXdsoVGvpU7l+6O6Z96TYcnIdvgBPUL8UMfWMnVf++Fvg3TWLhL2ZP4it9BY8MKVve4d74hd\r\nL-VIA: l1=TqoDVanjjr6wMExF\r\nL-VERSION: 1784720560\r\nL-Request-Id: 3ec119fb5825c00c2d1\r\nX-Cache-Status: HIT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":91938,"size_decoded":93095,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"d4f654e067ee701e55c386cad6b53574","sha1":"a0f6315ed37b1a5d5da601adfbcb44cad2d9f5cb","sha256":"cd9f33e85a633a73214e9e94255ec27a3d272cadf2389345b6d240d4e36c53ab","sha512":"701a8be639fbb3dbc5670d9789cf01c3175d632a7902e3cfbb769e80fff9f420c10befecfa030adcced409dd26c2ae2afa1fcf617c7371bc6984b378685d184a","ssdeep":"1536:XsUxLKKnLpw8UtfepacmJUm70Cweits6VTpJz39R9s8dBmdEbi/pS4l8KjVIVAMo:PBLpw8UtfqyJUeueitTVbFs8dpbQSvK5","tlshash":"df930205f84d4f1dd86a31e6e142309c9472e0a83213cefb25b3f53997935d52ea6f48","first_seen":"2026-04-24T23:10:16.740253Z","last_seen":"2026-07-31T12:36:18.739098Z","times_seen":910,"resource_available":false,"data":null}},"time_used":4496,"timings":{"blocked":4135,"dns":0,"connect":0,"send":0,"wait":311,"receive":50,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-31","alert":"Phishing Block","trigger":"y42t.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-31","alert":"Sinkholed","trigger":"y42t.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"y42t.top/jumpto/img/https://rcf-img-hk.gasdg646fs224cn.com/gpmaster/_webp_size328x442_0b2c7f25-c17b-4d07-adb1-68f1823633a2.png","fqdn":"y42t.top","domain":"y42t.top","tld":"top"},"ip":{"addr":"154.39.104.138","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://y42t.top/","date":"2026-07-31T00:10:42.878Z","timestamp":1785456642878,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"p40f.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 10:44:09 GMT","end":"Tue, 20 Oct 2026 10:44:08 GMT"},"fingerprint":{"sha1":"41:09:2C:3F:FC:9C:25:A9:DB:51:15:BB:D1:5A:D8:01:DC:38:AD:F8","sha256":"49:3B:29:C7:5B:B6:12:CF:84:14:5B:09:42:7D:EF:AA:61:29:EC:A1:D5:40:B5:64:5C:F1:33:AB:9B:E1:13:4D"}}},"request":{"raw":"GET /jumpto/img/https://rcf-img-hk.gasdg646fs224cn.com/gpmaster/_webp_size328x442_0b2c7f25-c17b-4d07-adb1-68f1823633a2.png HTTP/1.1\r\nHost: y42t.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://y42t.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 31 Jul 2026 00:10:47 GMT\r\nContent-Type: image/webp\r\nContent-Length: 10536\r\nConnection: keep-alive\r\netag: \"83c227836fb01b2cef7c240c8d45f098\"\r\nLast-Modified: Tue, 02 Dec 2025 14:12:09 GMT\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nAge: 499200\r\ncf-cache-status: HIT\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AY786m%2BZEJFp%2F%2BEqrGzezE6mzjxODf588hTwk6EqmHtfZiL5uOKBQN7OyLOGMF49Mq1VvO9XlCEaaY9dvHRaW%2Fw2enq%2Fz7k%2BnYfi3KWIE4m15L92Z%2Br6QKEDYnOyXKPpvYkEsys%2Bqz8SFBtoUqcaohY%3D\"}]}\r\nCF-RAY: a208c64f2bf985e0-HKG\r\nalt-svc: h3=\":443\"; ma=86400\r\nCache-Control: public, max-age=2592000, immutable, public, max-age=2592000, immutable\r\nAccess-Control-Allow-Origin: *\r\nX-Custom-Check: true\r\nServer: Nginx\r\nL-Safe: 1785456647=pwbyu29rM0HEK42bpjFMXQZZ8s1IzzkT40daNMbcT90Ub0zpvrQ+kBR7N9vkAvLpdcGVCAkYTtjHzFt3rikpG2u0ViQwOg9Y/d8oh3QnzrskfHJpkQ3k6DdsyXdsoVGvpU7l+6O6Z96TYcnIdvgBPUL8UMfWMnVf++Fvg3TWLhL2ZP4it9BY8MKVve4d74hd\r\nL-VIA: l1=TqoDVanjjr6wMExF\r\nL-VERSION: 1784720560\r\nL-Request-Id: 3ec919fb5825eafc0a7\r\nX-Cache-Status: HIT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":10536,"size_decoded":11699,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"83c227836fb01b2cef7c240c8d45f098","sha1":"fb1e1f8ef0fa166415a743fe004d926e7b040aba","sha256":"54544e3d3311ced9fef367585eb60a15e3bf7d8490ccb2098d7e76d59fbc1fea","sha512":"d41d274ecb2373e9f9eaafe28710226a6bdf54d4c0c8a24c9b04fdd18a6d7fb71611dc0111f54fdd6750929bf002dfbe4a2822fd77f455f850d3406671b6d499","ssdeep":"192:6Xrxa2Dv2+2JgMsTWhgDPkmw0OwIK1AmEIDvWrxaiXFr0NN2uCd16Abhu:aa2Dv2vJmTcgD8mw0ODBmilaiR0P2xJ4","tlshash":"d922b0aad71a5b23ca0056163f7f3476c1567c371b2eeca529eebd0112309e469f9313","first_seen":"2026-04-24T23:10:16.72265Z","last_seen":"2026-07-31T12:41:47.020227Z","times_seen":993,"resource_available":false,"data":null}},"time_used":5130,"timings":{"blocked":4822,"dns":0,"connect":0,"send":0,"wait":308,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-31","alert":"Sinkholed","trigger":"y42t.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-31","alert":"Phishing Block","trigger":"y42t.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"photo.365live88.com/img/fb/team/68c5420468894c2aa4b6f50591751208?win007=sell","fqdn":"photo.365live88.com","domain":"365live88.com","tld":"com"},"ip":{"addr":"154.41.93.240","port":443,"asn":174,"as":"COGENT-174","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://y42t.top/","date":"2026-07-31T00:10:42.494Z","timestamp":1785456642494,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"photo.365live88.com","organization":""},"issuer":{"commonName":"Encryption Everywhere DV TLS CA - G2","organization":"DigiCert Inc"},"validity":{"start":"Sat, 01 Nov 2025 00:00:00 GMT","end":"Sat, 31 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"45:76:43:9C:31:C5:89:A6:99:FD:9B:D8:6C:A9:3A:E6:2F:D6:E9:80","sha256":"73:27:CF:D8:8D:AC:95:46:00:5D:67:05:1E:70:22:3E:17:F0:94:78:CD:6F:A6:9C:C8:5F:B5:3B:75:60:3D:C8"}}},"request":{"raw":"GET /img/fb/team/68c5420468894c2aa4b6f50591751208?win007=sell HTTP/1.1\r\nHost: photo.365live88.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://y42t.top/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: openresty\r\nDate: Fri, 31 Jul 2026 00:10:46 GMT\r\nContent-Type: image/png\r\nContent-Length: 67013\r\nConnection: keep-alive\r\nAccept-Ranges: bytes\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Expose-Headers: X-Log, X-Reqid\r\nAccess-Control-Max-Age: 2592000\r\nAge: 52837\r\nCache-Control: public, max-age=31536000\r\nContent-Disposition: inline; filename=\"68c5420468894c2aa4b6f50591751208\"; filename*=utf-8''68c5420468894c2aa4b6f50591751208\r\nContent-Md5: CoyZxMPDCY6kiHXc2JD+iA==\r\nContent-Transfer-Encoding: binary\r\nEtag: \"FuEJCZCbhq754F00x-leH07k4hwE\"\r\nLast-Modified: Fri, 24 Jul 2026 19:49:52 GMT\r\nX-Log: X-Log\r\nX-M-Log: QNM:wldsg119;QNM3\r\nX-M-Reqid: 8m09tRN2T\r\nX-Qiniu-Zone: as0\r\nX-Qnm-Cache: Hit\r\nX-Reqid: R7YAAACPuC5OB8cY\r\nX-Svr: IO\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":67013,"size_decoded":67769,"mime_type":"image/png","magic":"PNG image data, 180 x 180, 8-bit/color RGBA, non-interlaced","md5":"0a8c99c4c3c3098ea48875dcd890fe88","sha1":"e10909909b86aef9e05d34c7e95e1f4ee4e21c04","sha256":"cf314725a4499eb6e3e714ae73548c62eb21f6959055f9265c8044fd3a71e99c","sha512":"9fa8f830313cb375fbea56a77e610ff46fcbbb911bd7e659dfdabe4a9f1cf9f551278958746d2ab43bc57175a4cfc37fe3a37b3963da380f5d78f6d172c1b718","ssdeep":"1536:CZ8cyIrT7jBluEpgsndY9pwxZ/skuxT7kj7Rx8CFpTiy8iaF:UPyCrnuEbndY9pUZKS3znpaF","tlshash":"e963f2dfc1983d6b57ad30e97177337b2c01072982bc67a3e35da975c042a4ca486eb6","first_seen":"2025-06-20T01:32:32.038982Z","last_seen":"2026-07-31T05:07:38.924046Z","times_seen":78,"resource_available":false,"data":null}},"time_used":3773,"timings":{"blocked":3389,"dns":0,"connect":0,"send":0,"wait":275,"receive":109,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"y42t.top/img/EGAME.d289cd48.png","fqdn":"y42t.top","domain":"y42t.top","tld":"top"},"ip":{"addr":"154.39.104.138","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://y42t.top/","date":"2026-07-31T00:10:42.769Z","timestamp":1785456642769,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"p40f.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 10:44:09 GMT","end":"Tue, 20 Oct 2026 10:44:08 GMT"},"fingerprint":{"sha1":"41:09:2C:3F:FC:9C:25:A9:DB:51:15:BB:D1:5A:D8:01:DC:38:AD:F8","sha256":"49:3B:29:C7:5B:B6:12:CF:84:14:5B:09:42:7D:EF:AA:61:29:EC:A1:D5:40:B5:64:5C:F1:33:AB:9B:E1:13:4D"}}},"request":{"raw":"GET /img/EGAME.d289cd48.png HTTP/1.1\r\nHost: y42t.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://y42t.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 31 Jul 2026 00:10:45 GMT\r\nContent-Type: image/png\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Tue, 09 Jun 2026 13:37:11 GMT\r\nVary: Accept-Encoding\r\nETag: W/\"6a281707-e89a\"\r\nCache-Control: public, max-age=2592000, immutable\r\nAccess-Control-Allow-Origin: *\r\nX-Custom-Check: true\r\nContent-Encoding: gzip\r\nServer: Nginx\r\nL-Safe: 1785456645=3m/UQghxNGW3gPChBH0qwAw5jhMnk/bL7ljEsAqUNfL2w1i0HQREe2rEb4k+hpOpl+mNkeotUTn7rI4RELPi496PFmfq0fH/qKdAcrqsvLVi0CluaNffWUzPkudCch2/uigQXMAy3JVAvXsWZA3UDGCysooGP/loOgkjhRbwnpUqbTZcGQok3Gq63qCfb31c\r\nAge: 499190\r\nL-VIA: l1=TqoDVanjjr6wMExF\r\nL-VERSION: 1784720560\r\nL-Request-Id: 3ec819fb58254c5c100\r\nX-Cache-Status: HIT\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":59546,"size_decoded":60288,"mime_type":"image/png","magic":"PNG image data, 582 x 307, 8-bit colormap, non-interlaced","md5":"eb8991eb9e0db175522c914343f0a10a","sha1":"ce2d41b154df64421d46bceaeb9878da455592dd","sha256":"b837b4e9fc693e5c65eb049c56547caefe1cf73ea31ae59f95ae46d052fd36b2","sha512":"7d2a886e3ac412f6ea1b1ba290064373e1d07a0751bdd7f546af3116ad057d1f17bbe4847179cdf87297a967c0290280ec0c51ab9bfdeb1da0b881e366eb19a8","ssdeep":"1536:hvA9R/SReJczzaRBd6s3DhCDnQcvyFVWGDnmhKYNa67:hIPVczevUIhCDnQc21C7Na67","tlshash":"dd430276882a8fcd499304944bf9afe164eaf19097b3cf91f24c5fe0423d184d881b6b","first_seen":"2023-11-10T19:12:00Z","last_seen":"2026-07-31T12:41:15.268852Z","times_seen":2281,"resource_available":false,"data":null}},"time_used":2713,"timings":{"blocked":2402,"dns":0,"connect":0,"send":0,"wait":292,"receive":19,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-31","alert":"Phishing Block","trigger":"y42t.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-31","alert":"Sinkholed","trigger":"y42t.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"y42t.top/kc523-1/sponsor/sponsor_nav_web_1.png?1781011825626","fqdn":"y42t.top","domain":"y42t.top","tld":"top"},"ip":{"addr":"154.39.104.138","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://y42t.top/","date":"2026-07-31T00:10:41.061Z","timestamp":1785456641061,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"p40f.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 10:44:09 GMT","end":"Tue, 20 Oct 2026 10:44:08 GMT"},"fingerprint":{"sha1":"41:09:2C:3F:FC:9C:25:A9:DB:51:15:BB:D1:5A:D8:01:DC:38:AD:F8","sha256":"49:3B:29:C7:5B:B6:12:CF:84:14:5B:09:42:7D:EF:AA:61:29:EC:A1:D5:40:B5:64:5C:F1:33:AB:9B:E1:13:4D"}}},"request":{"raw":"GET /kc523-1/sponsor/sponsor_nav_web_1.png?1781011825626 HTTP/1.1\r\nHost: y42t.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://y42t.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 31 Jul 2026 00:10:44 GMT\r\nContent-Type: image/png\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Tue, 30 Sep 2025 12:19:27 GMT\r\nVary: Accept-Encoding\r\nETag: W/\"68dbcacf-1e8d\"\r\nCache-Control: public, max-age=2592000, immutable\r\nAccess-Control-Allow-Origin: *\r\nX-Custom-Check: true\r\nContent-Encoding: gzip\r\nServer: Nginx\r\nL-Safe: 1785456644=ImVO6mGITWMACggqrQcdldqw9lowxQ1+VpRDuAKFwfMb9d30WLVBONutXSRguHOv4S8A2fwwrG4hosTExvfehVfTlImNbeMdeEGGOKfPxTnrTTeg4Ne14CSZz0II/fQW6e3NIBDsQDv0uQ0mehoMPQ1XrPiYIzMRuPb5r05527aZ2mNjo0YBVDxdIUBsWRdM\r\nAge: 499211\r\nL-VIA: l1=TqoDVanjjr6wMExF\r\nL-VERSION: 1784720560\r\nL-Request-Id: 3ec119fb58252fbc2c2\r\nX-Cache-Status: HIT\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":7821,"size_decoded":8530,"mime_type":"image/png","magic":"PNG image data, 206 x 332, 8-bit colormap, non-interlaced","md5":"0eb441aa3c30cc3c92da984283938f90","sha1":"74a769808afa9b87ea483a82d47958bf05ab9b87","sha256":"146f45de163728bb850c9a8e6c1693dd4c82caf7b6e1f58728395003b84f286c","sha512":"d1c9c8824c4f42f71db8ce2b62955647aa55bb590305765cd931000d0fc6023f7d57cd3daf6992094365ca6ecb42f02f93d606d79f6643a2f89d52f71200461e","ssdeep":"192:AnUYZGCj89cpWsWKE+hAqF7k4Pk7KJw7OjF57HUNuvs7alaUd:AFEijWKE+hHF7kt7857HU/eRd","tlshash":"20f19f3eececd52cd1a745f68caf47a6142c5031ee9d7929b82fdc728649a409d403c5","first_seen":"2023-11-10T19:12:00Z","last_seen":"2026-07-31T12:36:18.709618Z","times_seen":2205,"resource_available":false,"data":null}},"time_used":3956,"timings":{"blocked":3650,"dns":0,"connect":0,"send":0,"wait":306,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-31","alert":"Sinkholed","trigger":"y42t.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-31","alert":"Phishing Block","trigger":"y42t.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"photo.365live88.com/img/fb/team/e31ea013c39b4949885e00d4ec12563d?win007=sell","fqdn":"photo.365live88.com","domain":"365live88.com","tld":"com"},"ip":{"addr":"154.41.93.240","port":443,"asn":174,"as":"COGENT-174","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://y42t.top/","date":"2026-07-31T00:10:42.459Z","timestamp":1785456642459,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"photo.365live88.com","organization":""},"issuer":{"commonName":"Encryption Everywhere DV TLS CA - G2","organization":"DigiCert Inc"},"validity":{"start":"Sat, 01 Nov 2025 00:00:00 GMT","end":"Sat, 31 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"45:76:43:9C:31:C5:89:A6:99:FD:9B:D8:6C:A9:3A:E6:2F:D6:E9:80","sha256":"73:27:CF:D8:8D:AC:95:46:00:5D:67:05:1E:70:22:3E:17:F0:94:78:CD:6F:A6:9C:C8:5F:B5:3B:75:60:3D:C8"}}},"request":{"raw":"GET /img/fb/team/e31ea013c39b4949885e00d4ec12563d?win007=sell HTTP/1.1\r\nHost: photo.365live88.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://y42t.top/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: openresty\r\nDate: Fri, 31 Jul 2026 00:10:44 GMT\r\nContent-Type: image/png\r\nContent-Length: 3251\r\nConnection: keep-alive\r\nAccept-Ranges: bytes\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Expose-Headers: X-Log, X-Reqid\r\nAccess-Control-Max-Age: 2592000\r\nAge: 86138\r\nCache-Control: public, max-age=31536000\r\nContent-Disposition: inline; filename=\"e31ea013c39b4949885e00d4ec12563d\"; filename*=utf-8''e31ea013c39b4949885e00d4ec12563d\r\nContent-Md5: VNu1QPPbnLdMOhTi0jV1Mw==\r\nContent-Transfer-Encoding: binary\r\nEtag: \"FvBSk1zom7xgdO7kiYuX9B11MQY7\"\r\nLast-Modified: Fri, 24 Jul 2026 19:49:37 GMT\r\nX-Log: X-Log\r\nX-M-Log: QNM:wldsg121;QNM3\r\nX-M-Reqid: zpabXGrfB\r\nX-Qiniu-Zone: as0\r\nX-Qnm-Cache: Hit\r\nX-Reqid: rdwAAADGRjYE6cYY\r\nX-Svr: IO\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3251,"size_decoded":4006,"mime_type":"image/png","magic":"PNG image data, 110 x 110, 8-bit gray+alpha, non-interlaced","md5":"54dbb540f3db9cb74c3a14e2d2357533","sha1":"f052935ce89bbc6074eee4898b97f41d7531063b","sha256":"3cf98ecb957b894e5f79688a0f428fc682dc67726f6751476a594756dbd4838c","sha512":"c5e3265a9756f366435bb58198192fae733f312d594c849fd62e7fdff8a22f233a0f764892322e4deb5aa396d96a35d6012b24d6471a68470bb9cdff3c717c8f","ssdeep":"","tlshash":"66615d71d3c7b9220cba7177b3d602f9de829f3d5c4950a296b671c6d4f619187c2405","first_seen":"2024-08-19T15:20:18.571455Z","last_seen":"2026-07-31T00:12:52.459366Z","times_seen":122,"resource_available":false,"data":null}},"time_used":2065,"timings":{"blocked":1820,"dns":0,"connect":0,"send":0,"wait":245,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"photo.365live88.com/img/fb/team/12e2f3667be94dcf8814fb049b47287a?win007=sell","fqdn":"photo.365live88.com","domain":"365live88.com","tld":"com"},"ip":{"addr":"154.41.93.240","port":443,"asn":174,"as":"COGENT-174","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://y42t.top/","date":"2026-07-31T00:10:42.568Z","timestamp":1785456642568,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"photo.365live88.com","organization":""},"issuer":{"commonName":"Encryption Everywhere DV TLS CA - G2","organization":"DigiCert Inc"},"validity":{"start":"Sat, 01 Nov 2025 00:00:00 GMT","end":"Sat, 31 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"45:76:43:9C:31:C5:89:A6:99:FD:9B:D8:6C:A9:3A:E6:2F:D6:E9:80","sha256":"73:27:CF:D8:8D:AC:95:46:00:5D:67:05:1E:70:22:3E:17:F0:94:78:CD:6F:A6:9C:C8:5F:B5:3B:75:60:3D:C8"}}},"request":{"raw":"GET /img/fb/team/12e2f3667be94dcf8814fb049b47287a?win007=sell HTTP/1.1\r\nHost: photo.365live88.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://y42t.top/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: openresty\r\nDate: Fri, 31 Jul 2026 00:10:51 GMT\r\nContent-Type: image/png\r\nContent-Length: 82040\r\nConnection: keep-alive\r\nAccept-Ranges: bytes\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Expose-Headers: X-Log, X-Reqid\r\nAccess-Control-Max-Age: 2592000\r\nAge: 15028\r\nCache-Control: public, max-age=31536000\r\nContent-Disposition: inline; filename=\"12e2f3667be94dcf8814fb049b47287a\"; filename*=utf-8''12e2f3667be94dcf8814fb049b47287a\r\nContent-Md5: 4lJ1sTVCvDAZQi0lL9ht0w==\r\nContent-Transfer-Encoding: binary\r\nEtag: \"FhKF2sTVPAVIDDiZuiK6K5Ok-nXA\"\r\nLast-Modified: Sat, 25 Jul 2026 19:18:16 GMT\r\nX-Log: X-Log\r\nX-M-Log: QNM:wldsg121;QNM3\r\nX-M-Reqid: T4LS8MQan\r\nX-Qiniu-Zone: as0\r\nX-Qnm-Cache: Hit\r\nX-Reqid: _vUAAAAphU-yKccY\r\nX-Svr: IO\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":82040,"size_decoded":82796,"mime_type":"image/png","magic":"PNG image data, 225 x 225, 8-bit/color RGBA, non-interlaced","md5":"e25275b13542bc3019422d252fd86dd3","sha1":"1285dac4d53c05480c3899ba22ba2b93a4fa75c0","sha256":"0788d123136d79a3dcfbae905af69f5ec2ae41250b62032a54c7006e4ed20909","sha512":"c0d87f773b70077576413311c9d54518b6418282d2d7f2d8a4eccf52e3776be6a6af676279dcd66225ed77b5ca2b71eb578903de7cef6a8c67b640e5161ca32a","ssdeep":"1536:6XbYG/K5VZbsLB42+owvZ+Ze2gwGxPH/Dh1fjjjhqSCStD/5:60gIVZbUBvwYjg3LhNjjhqSCU5","tlshash":"358302fdd812951b843eb819109c5f89505bba68356e74ba0634c3e3c8e23ef63b591b","first_seen":"2025-07-04T22:03:39.433515Z","last_seen":"2026-07-31T12:41:47.175131Z","times_seen":67,"resource_available":false,"data":null}},"time_used":8972,"timings":{"blocked":8664,"dns":0,"connect":0,"send":0,"wait":264,"receive":44,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"y42t.top/jumpto/img/https://rcf-img-hk.gasdg646fs224cn.com/202505/_webp_size656x844_f676ec47-4b6f-4d37-b476-fd69f2381a1a.png","fqdn":"y42t.top","domain":"y42t.top","tld":"top"},"ip":{"addr":"154.39.104.138","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://y42t.top/","date":"2026-07-31T00:10:42.876Z","timestamp":1785456642876,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"p40f.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 10:44:09 GMT","end":"Tue, 20 Oct 2026 10:44:08 GMT"},"fingerprint":{"sha1":"41:09:2C:3F:FC:9C:25:A9:DB:51:15:BB:D1:5A:D8:01:DC:38:AD:F8","sha256":"49:3B:29:C7:5B:B6:12:CF:84:14:5B:09:42:7D:EF:AA:61:29:EC:A1:D5:40:B5:64:5C:F1:33:AB:9B:E1:13:4D"}}},"request":{"raw":"GET /jumpto/img/https://rcf-img-hk.gasdg646fs224cn.com/202505/_webp_size656x844_f676ec47-4b6f-4d37-b476-fd69f2381a1a.png HTTP/1.1\r\nHost: y42t.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://y42t.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 31 Jul 2026 00:10:47 GMT\r\nContent-Type: image/webp\r\nContent-Length: 31452\r\nConnection: keep-alive\r\netag: \"2c3c63fd994d8d3c68a43ab204dc29af\"\r\nLast-Modified: Fri, 24 Oct 2025 10:14:42 GMT\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nAge: 499200\r\ncf-cache-status: HIT\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=B%2FbidyrxsEC4PYePXHdM1wS2Dn203dRiXJ9PBeifbfc5iW02ix3%2FhHLHIYk2g5Gd0dYc%2FEyFpLyE36o4JW4osONZkY7hkMCyt%2BFG4LA7C0SYn53nuU9j6QYAVqlu%2FhLvA7nrZcMYjfeoB7VjydzMvUE%3D\"}]}\r\nCF-RAY: a208c64c0cabb4b4-HKG\r\nalt-svc: h3=\":443\"; ma=86400\r\nCache-Control: public, max-age=2592000, immutable, public, max-age=2592000, immutable\r\nAccess-Control-Allow-Origin: *\r\nX-Custom-Check: true\r\nServer: Nginx\r\nL-Safe: 1785456647=pwbyu29rM0HEK42bpjFMXQZZ8s1IzzkT40daNMbcT90Ub0zpvrQ+kBR7N9vkAvLpdcGVCAkYTtjHzFt3rikpG2u0ViQwOg9Y/d8oh3QnzrskfHJpkQ3k6DdsyXdsoVGvpU7l+6O6Z96TYcnIdvgBPUL8UMfWMnVf++Fvg3TWLhL2ZP4it9BY8MKVve4d74hd\r\nL-VIA: l1=TqoDVanjjr6wMExF\r\nL-VERSION: 1784720560\r\nL-Request-Id: 3ec919fb5825e27c0a6\r\nX-Cache-Status: HIT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":31452,"size_decoded":32609,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"2c3c63fd994d8d3c68a43ab204dc29af","sha1":"f5da9ac11b57d67e7b0a21bdf3d2d5134eae1e2b","sha256":"b38e08c497bfb9faec2e112ff1a093f8938984e5c098484f7eca99900d1e1c72","sha512":"e83fd01696f5a79d5b2ef7ad13a442455c94977c810bceb5a6a656e08927f8a160a5b6be8e8e04bf10c0b2b721254319cb5fe15982a7ae0f7272a25a61f56127","ssdeep":"768:JXiQbj17p1iaPPQUz4ATG+Qkx5UL1ot3u3QO3xOBiw9urQ8:VdJp1iuPXECXUJ6e3QOBRwYQ8","tlshash":"74e2f1f968c3c9342ca43ed546ff15d58dd8b3d475e60863eb222d049137822e9c9e2d","first_seen":"2026-04-24T23:10:16.870222Z","last_seen":"2026-07-31T12:41:47.119783Z","times_seen":973,"resource_available":false,"data":null}},"time_used":4984,"timings":{"blocked":4686,"dns":0,"connect":0,"send":0,"wait":293,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-31","alert":"Sinkholed","trigger":"y42t.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-31","alert":"Phishing Block","trigger":"y42t.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"y42t.top/js/chunk-init-1656f0b4.1781011881923.32336986.js","fqdn":"y42t.top","domain":"y42t.top","tld":"top"},"ip":{"addr":"154.39.104.138","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://y42t.top/","date":"2026-07-31T00:10:38.086Z","timestamp":1785456638086,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"p40f.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 10:44:09 GMT","end":"Tue, 20 Oct 2026 10:44:08 GMT"},"fingerprint":{"sha1":"41:09:2C:3F:FC:9C:25:A9:DB:51:15:BB:D1:5A:D8:01:DC:38:AD:F8","sha256":"49:3B:29:C7:5B:B6:12:CF:84:14:5B:09:42:7D:EF:AA:61:29:EC:A1:D5:40:B5:64:5C:F1:33:AB:9B:E1:13:4D"}}},"request":{"raw":"GET /js/chunk-init-1656f0b4.1781011881923.32336986.js HTTP/1.1\r\nHost: y42t.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://y42t.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 31 Jul 2026 00:10:39 GMT\r\nContent-Type: application/javascript\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Tue, 09 Jun 2026 13:37:11 GMT\r\nVary: Accept-Encoding\r\nETag: W/\"6a281707-21366\"\r\nCache-Control: public, max-age=31536000, immutable\r\nAccess-Control-Allow-Origin: *\r\nX-Custom-Check: true\r\nContent-Encoding: gzip\r\nServer: Nginx\r\nL-Safe: 1785456639=ZQ2Zoq/cRP01EUwFViLw2I2TTD7YXn3fOcUs+xcjh4jH3sEo30QmYTa3wyU19juAAswcF1zK33qXVdu/2wEQssIQmAwdFBkC9e1CbV9WPKEBdbscbAAIXVFwwInqwSqPfxbfTB5XlXMMnezbEIdI/APkRTYkPOXTT5T1KnbKAZgGBnmhack9avnR9rigFkDp\r\nL-VIA: l1=TqoDVanjjr6wMExF\r\nL-VERSION: 1784720560\r\nL-Request-Id: 3ec819fb5823c85c0ed\r\nX-Cache-Status: BYPASS\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":136038,"size_decoded":38262,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (44088)","md5":"149a9a32eef525724cd200e4dce7a032","sha1":"29b091925cae6d90319391653e40685f6e6c5735","sha256":"10fcb7c4e44a141964cb31c527462c6e56f78d95c956fb02c50c61fc576cefd2","sha512":"62d80403786c13019e86e1c6b991d73cf52ff5bd25d4eeaec34ca12125d677604a269fc6c56ef301f074c42798f8e7935df623d6a0a62559d70749e53082085f","ssdeep":"1536:z2twqIPBoVbzfsO9ZuqpiXXIOU6Qgpp6KkB2EnBDsAxdrkm4SgiqvHynjM5TCif9:z2twqhOIK2nCLdyACifMur06/D","tlshash":"6dd3ec54b7d0b4b442cf13e6711b2475e3a61ca22058e8f0e31dee647f35689d26faac","first_seen":"2026-06-12T19:29:57.333908Z","last_seen":"2026-07-31T12:41:47.038017Z","times_seen":972,"resource_available":true,"data":null}},"time_used":1526,"timings":{"blocked":862,"dns":0,"connect":0,"send":0,"wait":419,"receive":245,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-31","alert":"Phishing Block","trigger":"y42t.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-31","alert":"Sinkholed","trigger":"y42t.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"y42t.top/js/index-a3dad144.1781011881923.1093b11d.js","fqdn":"y42t.top","domain":"y42t.top","tld":"top"},"ip":{"addr":"154.39.104.138","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://y42t.top/","date":"2026-07-31T00:10:38.096Z","timestamp":1785456638096,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"p40f.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 10:44:09 GMT","end":"Tue, 20 Oct 2026 10:44:08 GMT"},"fingerprint":{"sha1":"41:09:2C:3F:FC:9C:25:A9:DB:51:15:BB:D1:5A:D8:01:DC:38:AD:F8","sha256":"49:3B:29:C7:5B:B6:12:CF:84:14:5B:09:42:7D:EF:AA:61:29:EC:A1:D5:40:B5:64:5C:F1:33:AB:9B:E1:13:4D"}}},"request":{"raw":"GET /js/index-a3dad144.1781011881923.1093b11d.js HTTP/1.1\r\nHost: y42t.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://y42t.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 31 Jul 2026 00:10:39 GMT\r\nContent-Type: application/javascript\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Tue, 09 Jun 2026 13:37:11 GMT\r\nVary: Accept-Encoding\r\nETag: W/\"6a281707-570e8\"\r\nCache-Control: public, max-age=31536000, immutable\r\nAccess-Control-Allow-Origin: *\r\nX-Custom-Check: true\r\nContent-Encoding: gzip\r\nServer: Nginx\r\nL-Safe: 1785456639=ZQ2Zoq/cRP01EUwFViLw2I2TTD7YXn3fOcUs+xcjh4jH3sEo30QmYTa3wyU19juAAswcF1zK33qXVdu/2wEQssIQmAwdFBkC9e1CbV9WPKEBdbscbAAIXVFwwInqwSqPfxbfTB5XlXMMnezbEIdI/APkRTYkPOXTT5T1KnbKAZgGBnmhack9avnR9rigFkDp\r\nL-VIA: l1=TqoDVanjjr6wMExF\r\nL-VERSION: 1784720560\r\nL-Request-Id: 3ec919fb5823f67c086\r\nX-Cache-Status: BYPASS\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":356584,"size_decoded":117591,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (64562), with no line terminators","md5":"0fc0f4a0379e369b442d93ffb72561fd","sha1":"497d95fced30bab2efe9ad3a561c35cd40ad5e9c","sha256":"da926a537d946d3158d41a8531082a740aec7a6a4e3b98599d35546182f20806","sha512":"ef5664991d7fb472281b2696b3b25a322bf51f9bcbccf2043f77fdb67ca9a84d90b893029e93bedea935724bbc4b58a77154b35ac40b15f8e691b539cc3102e3","ssdeep":"6144:LrbhFOufhu/LHEY/T8CPis7lVV4YlRlNsmq9D7:3zBw/LHEY/TBas7lVVhsp9X","tlshash":"ed742b90f76ce1bd875e55ff7a329094902c1b41b0c89e58d29e2944fe6b385eeb04bc","first_seen":"2026-06-12T19:29:57.253128Z","last_seen":"2026-07-31T12:41:47.026075Z","times_seen":927,"resource_available":true,"data":null}},"time_used":2204,"timings":{"blocked":1599,"dns":0,"connect":0,"send":0,"wait":327,"receive":278,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-31","alert":"Phishing Block","trigger":"y42t.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-31","alert":"Sinkholed","trigger":"y42t.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"y42t.top/img/partner.dca3fc6e.png","fqdn":"y42t.top","domain":"y42t.top","tld":"top"},"ip":{"addr":"154.39.104.138","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://y42t.top/","date":"2026-07-31T00:10:41.081Z","timestamp":1785456641081,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"p40f.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 10:44:09 GMT","end":"Tue, 20 Oct 2026 10:44:08 GMT"},"fingerprint":{"sha1":"41:09:2C:3F:FC:9C:25:A9:DB:51:15:BB:D1:5A:D8:01:DC:38:AD:F8","sha256":"49:3B:29:C7:5B:B6:12:CF:84:14:5B:09:42:7D:EF:AA:61:29:EC:A1:D5:40:B5:64:5C:F1:33:AB:9B:E1:13:4D"}}},"request":{"raw":"GET /img/partner.dca3fc6e.png HTTP/1.1\r\nHost: y42t.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://y42t.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 31 Jul 2026 00:10:44 GMT\r\nContent-Type: image/png\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Tue, 09 Jun 2026 13:37:11 GMT\r\nVary: Accept-Encoding\r\nETag: W/\"6a281707-7129\"\r\nCache-Control: public, max-age=2592000, immutable\r\nAccess-Control-Allow-Origin: *\r\nX-Custom-Check: true\r\nContent-Encoding: gzip\r\nServer: Nginx\r\nL-Safe: 1785456644=ImVO6mGITWMACggqrQcdldqw9lowxQ1+VpRDuAKFwfMb9d30WLVBONutXSRguHOv4S8A2fwwrG4hosTExvfehVfTlImNbeMdeEGGOKfPxTnrTTeg4Ne14CSZz0II/fQW6e3NIBDsQDv0uQ0mehoMPQ1XrPiYIzMRuPb5r05527aZ2mNjo0YBVDxdIUBsWRdM\r\nAge: 499193\r\nL-VIA: l1=TqoDVanjjr6wMExF\r\nL-VERSION: 1784720560\r\nL-Request-Id: 3ec819fb5825056c0fc\r\nX-Cache-Status: HIT\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":28969,"size_decoded":29329,"mime_type":"image/png","magic":"PNG image data, 480 x 151, 8-bit/color RGBA, non-interlaced","md5":"7374b72d05130af2d77119eb0eb4ba10","sha1":"5b3e5e621329685de250121b2fd9c798f46f7d65","sha256":"059a622a7f1f0f1f239d624f19b0f5531c0f0aedadb8ccd40d2570a76dd56752","sha512":"c2d0f744838a882c8ac15de6bb0bfbeb3dd2f31550cc7a259b9890ea38eddf835902171c1346ed7e1d2005ba18b929d598002d60b7355df72073d955521b18b0","ssdeep":"768:tAAoY1X4ITISUWhiqmMiuCaUENwHoacq8zqWx6:abaX4SIYIdMMow8zqi6","tlshash":"a2d2e0ecdc3058f1f533894dc979813a6f3886ba05e359817a36f92bddc3e8506491e6","first_seen":"2025-08-29T11:05:53.287538Z","last_seen":"2026-07-31T12:41:47.050658Z","times_seen":2361,"resource_available":false,"data":null}},"time_used":3250,"timings":{"blocked":2952,"dns":0,"connect":0,"send":0,"wait":293,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-31","alert":"Phishing Block","trigger":"y42t.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-31","alert":"Sinkholed","trigger":"y42t.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"photo.365live88.com/img/fb/team/5b4c8f9190954fd18d98aa8671ce00f9?win007=sell","fqdn":"photo.365live88.com","domain":"365live88.com","tld":"com"},"ip":{"addr":"154.41.93.240","port":443,"asn":174,"as":"COGENT-174","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://y42t.top/","date":"2026-07-31T00:10:42.549Z","timestamp":1785456642549,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"photo.365live88.com","organization":""},"issuer":{"commonName":"Encryption Everywhere DV TLS CA - G2","organization":"DigiCert Inc"},"validity":{"start":"Sat, 01 Nov 2025 00:00:00 GMT","end":"Sat, 31 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"45:76:43:9C:31:C5:89:A6:99:FD:9B:D8:6C:A9:3A:E6:2F:D6:E9:80","sha256":"73:27:CF:D8:8D:AC:95:46:00:5D:67:05:1E:70:22:3E:17:F0:94:78:CD:6F:A6:9C:C8:5F:B5:3B:75:60:3D:C8"}}},"request":{"raw":"GET /img/fb/team/5b4c8f9190954fd18d98aa8671ce00f9?win007=sell HTTP/1.1\r\nHost: photo.365live88.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://y42t.top/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: openresty\r\nDate: Fri, 31 Jul 2026 00:10:49 GMT\r\nContent-Type: image/png\r\nContent-Length: 76327\r\nConnection: keep-alive\r\nAccept-Ranges: bytes\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Expose-Headers: X-Log, X-Reqid\r\nAccess-Control-Max-Age: 2592000\r\nAge: 21341\r\nCache-Control: public, max-age=31536000\r\nContent-Disposition: inline; filename=\"5b4c8f9190954fd18d98aa8671ce00f9\"; filename*=utf-8''5b4c8f9190954fd18d98aa8671ce00f9\r\nContent-Md5: XUSVgEayM1X+O71jnyUYPg==\r\nContent-Transfer-Encoding: binary\r\nEtag: \"Fr3Ux8jsTBdCppnxTg07swi0_j1S\"\r\nLast-Modified: Sat, 25 Jul 2026 19:17:43 GMT\r\nX-Log: X-Log\r\nX-M-Log: QNM:wldsg119;QNM3\r\nX-M-Reqid: b5VDysm27\r\nX-Qiniu-Zone: as0\r\nX-Qnm-Cache: Hit\r\nX-Reqid: iZYAAADuHiP0I8cY\r\nX-Svr: IO\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":76327,"size_decoded":77083,"mime_type":"image/png","magic":"PNG image data, 300 x 300, 8-bit/color RGBA, non-interlaced","md5":"5d44958046b23355fe3bbd639f25183e","sha1":"bdd4c7c8ec4c1742a699f14e0d3bb308b4fe3d52","sha256":"b6e662845c38a53bdfa02bb288ce8bc4552d903a85522c727eac21466fe540b4","sha512":"41583305b3f11d8b3b7de70b8750d219effb47199b767475689bb9beaf03762893e7362488623f48ab7e322e6902dbab97d825eb680fd6ebb39285e8269f8b9d","ssdeep":"1536:9K3xJYUrD8OkGApmHHvLKvlPb8fXHUgj80F8uQgW+jHTWmmYCUl4GR4cYV:9KhlrgOkG2mHHwlPwfd80FPtjHymmYzQ","tlshash":"4d73025d53adb6a6fe8927e0df48b3ccc8f47d4dc322065da51fa618f9068d84861307","first_seen":"2025-04-01T11:41:17.892426Z","last_seen":"2026-07-31T12:41:15.196279Z","times_seen":49,"resource_available":false,"data":null}},"time_used":7418,"timings":{"blocked":7146,"dns":0,"connect":0,"send":0,"wait":244,"receive":28,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"y42t.top/js/21954.1781011881923.57c97863.js","fqdn":"y42t.top","domain":"y42t.top","tld":"top"},"ip":{"addr":"154.39.104.138","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://y42t.top/","date":"2026-07-31T00:10:40.396Z","timestamp":1785456640396,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"p40f.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 10:44:09 GMT","end":"Tue, 20 Oct 2026 10:44:08 GMT"},"fingerprint":{"sha1":"41:09:2C:3F:FC:9C:25:A9:DB:51:15:BB:D1:5A:D8:01:DC:38:AD:F8","sha256":"49:3B:29:C7:5B:B6:12:CF:84:14:5B:09:42:7D:EF:AA:61:29:EC:A1:D5:40:B5:64:5C:F1:33:AB:9B:E1:13:4D"}}},"request":{"raw":"GET /js/21954.1781011881923.57c97863.js HTTP/1.1\r\nHost: y42t.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://y42t.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 31 Jul 2026 00:10:40 GMT\r\nContent-Type: application/javascript\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Tue, 09 Jun 2026 13:37:11 GMT\r\nVary: Accept-Encoding\r\nETag: W/\"6a281707-a3da\"\r\nCache-Control: public, max-age=31536000, immutable\r\nAccess-Control-Allow-Origin: *\r\nX-Custom-Check: true\r\nContent-Encoding: gzip\r\nServer: Nginx\r\nL-Safe: 1785456640=J17DXMEKXneKJsmf5PklOuZGVEbIRHZaaYUSHzFG19eRab1KmINu7b4QGpzoq2sF3cVtRbxKbhHDWucmkECQYVOT+r0RQLbYm93Pi9MruE4IbJTcWk38kbzXbpB01LsT5BD5K4g3/y6LaDWmYtWF9GJZSB/4ORv/PkgK01jvDx4dXhxfQiC6c5+CxYbaqcYc\r\nL-VIA: l1=TqoDVanjjr6wMExF\r\nL-VERSION: 1784720560\r\nL-Request-Id: 3ec919fb582421fc087\r\nX-Cache-Status: BYPASS\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":41946,"size_decoded":9458,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (41946), with no line terminators","md5":"35aef3c03c45b75cc6c2851265c30f23","sha1":"54874afc1d2d6391142418c6c17d7639247b6c9b","sha256":"c7a0283f3d2fde40ce97fe3bb5e79621f9939000c50c3c781a4597c3242ebae2","sha512":"f74356629d65ff26f6928ad3183ba8e6e01848921202f9c14c5aef758ef72acdcabf523209e892df42d230d9c87cb47cda7bd106105ed8447718fc502b2d71db","ssdeep":"768:U/aSfmzKrMdvf0eMQ/96loumY1PI1yBK9LudEz+yUy51y9y0yk6Dio+ILqpTeY:z81R6Ipyk6o","tlshash":"33132088fac2b06dd3eb7330857f505ae66a1dc0668c5434e260d6917e7198dc1fb9f8","first_seen":"2026-05-29T16:01:53.086335Z","last_seen":"2026-07-31T12:41:46.98483Z","times_seen":943,"resource_available":true,"data":null}},"time_used":298,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":298,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-31","alert":"Phishing Block","trigger":"y42t.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-31","alert":"Sinkholed","trigger":"y42t.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"photo.365live88.com/img/fb/team/c3069889514f4001af541efe3f3536e5?win007=sell","fqdn":"photo.365live88.com","domain":"365live88.com","tld":"com"},"ip":{"addr":"154.41.93.240","port":443,"asn":174,"as":"COGENT-174","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://y42t.top/","date":"2026-07-31T00:10:42.577Z","timestamp":1785456642577,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"photo.365live88.com","organization":""},"issuer":{"commonName":"Encryption Everywhere DV TLS CA - G2","organization":"DigiCert Inc"},"validity":{"start":"Sat, 01 Nov 2025 00:00:00 GMT","end":"Sat, 31 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"45:76:43:9C:31:C5:89:A6:99:FD:9B:D8:6C:A9:3A:E6:2F:D6:E9:80","sha256":"73:27:CF:D8:8D:AC:95:46:00:5D:67:05:1E:70:22:3E:17:F0:94:78:CD:6F:A6:9C:C8:5F:B5:3B:75:60:3D:C8"}}},"request":{"raw":"GET /img/fb/team/c3069889514f4001af541efe3f3536e5?win007=sell HTTP/1.1\r\nHost: photo.365live88.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://y42t.top/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: openresty\r\nDate: Fri, 31 Jul 2026 00:10:52 GMT\r\nContent-Type: image/png\r\nContent-Length: 20582\r\nConnection: keep-alive\r\nAccept-Ranges: bytes\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Expose-Headers: X-Log, X-Reqid\r\nAccess-Control-Max-Age: 2592000\r\nAge: 648\r\nCache-Control: public, max-age=31536000\r\nContent-Disposition: inline; filename=\"c3069889514f4001af541efe3f3536e5\"; filename*=utf-8''c3069889514f4001af541efe3f3536e5\r\nContent-Md5: q/LFWCLLSg+J0b0F6/X3OA==\r\nContent-Transfer-Encoding: binary\r\nEtag: \"FmZt2Pmb0rRRJXmyItxAtzRO2IcX\"\r\nLast-Modified: Sat, 25 Jul 2026 19:18:37 GMT\r\nX-Log: X-Log\r\nX-M-Log: QNM:wldsg121;QNM3\r\nX-M-Reqid: h3ZdtmIzy\r\nX-Qiniu-Zone: as0\r\nX-Qnm-Cache: Hit\r\nX-Reqid: VEIAAAAYu6zGNscY\r\nX-Svr: IO\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":20582,"size_decoded":21336,"mime_type":"image/png","magic":"PNG image data, 150 x 150, 8-bit/color RGBA, non-interlaced","md5":"abf2c55822cb4a0f89d1bd05ebf5f738","sha1":"666dd8f99bd2b4512579b222dc40b7344ed88717","sha256":"7b7896eb70b527f739b69cf7d96bd958a595091813bf587b4f89dc70cc250246","sha512":"f738dc4f481bf13c44005297c2af011fb93a947001502ff54f2bd0c7811911a83503a7293058d1d050e20d05c4d1a273c7b682dfe2e5063777a39287a838637d","ssdeep":"384:D3ygFb4che5aCBPWYOvPfpLObpy1OHwNSRtbkIR4:D3ygFbpe5aiuYcBLO1y1AAq9a","tlshash":"9e92d12a6c062f801823fc6615814ee367ebf1553cfc1baac998587dc933cb119eb485","first_seen":"2025-10-05T21:01:05.74928Z","last_seen":"2026-07-31T12:41:47.041312Z","times_seen":39,"resource_available":false,"data":null}},"time_used":9644,"timings":{"blocked":9354,"dns":0,"connect":0,"send":0,"wait":283,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"y42t.top/jumpto/img/https://rcf-img-hk.gasdg646fs224cn.com/gpmaster/_webp_size328x442_465faf5d-2f6d-44ba-896b-8d6bffead8bd.png","fqdn":"y42t.top","domain":"y42t.top","tld":"top"},"ip":{"addr":"154.39.104.138","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://y42t.top/","date":"2026-07-31T00:10:42.854Z","timestamp":1785456642854,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"p40f.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 10:44:09 GMT","end":"Tue, 20 Oct 2026 10:44:08 GMT"},"fingerprint":{"sha1":"41:09:2C:3F:FC:9C:25:A9:DB:51:15:BB:D1:5A:D8:01:DC:38:AD:F8","sha256":"49:3B:29:C7:5B:B6:12:CF:84:14:5B:09:42:7D:EF:AA:61:29:EC:A1:D5:40:B5:64:5C:F1:33:AB:9B:E1:13:4D"}}},"request":{"raw":"GET /jumpto/img/https://rcf-img-hk.gasdg646fs224cn.com/gpmaster/_webp_size328x442_465faf5d-2f6d-44ba-896b-8d6bffead8bd.png HTTP/1.1\r\nHost: y42t.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://y42t.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 31 Jul 2026 00:10:46 GMT\r\nContent-Type: image/webp\r\nContent-Length: 10758\r\nConnection: keep-alive\r\netag: \"1be21ba94f35a4ac4384d8d158cc42f6\"\r\nLast-Modified: Tue, 02 Dec 2025 14:08:05 GMT\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zTPfFzPMM%2B0GGBAMHIDfPI9%2FM0jEcjzyc86wK%2B5glaR2AW0rrarf4OPkUlApUDTSMIkqIlSjS3%2B5lnVdVX%2BuKqIsruN3kLnSaCpy0jHOJO2EXSim6Y5hKHS2aCf06VOmguHeZkQagi%2BWVPoeCOEqqTw%3D\"}]}\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nAge: 499206\r\ncf-cache-status: HIT\r\nCF-RAY: a208c623490bb6a3-HKG\r\nalt-svc: h3=\":443\"; ma=86400\r\nCache-Control: public, max-age=2592000, immutable, public, max-age=2592000, immutable\r\nAccess-Control-Allow-Origin: *\r\nX-Custom-Check: true\r\nServer: Nginx\r\nL-Safe: 1785456646=EMBgc894QAdP6slbLJsiNGYFcXUmrvQIWKh5BYYK6Qj4fqRyTGb/Xbwkd279GHpNIUNxmrA5BLARmTn3BBDanv5J4PcdpRxfVwUjHlMDvqiZAET3U1COvNHjyZWcIPWzQSTxYljkuIh13EY2sibpSpVrTubzP7vT5r508KhivSQ1oVznby71Ayyz5cTYVqWG\r\nL-VIA: l1=TqoDVanjjr6wMExF\r\nL-VERSION: 1784720560\r\nL-Request-Id: 3ec919fb5825965c09e\r\nX-Cache-Status: HIT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10758,"size_decoded":11917,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"1be21ba94f35a4ac4384d8d158cc42f6","sha1":"3dc86d6c7bd530771ada51859a6c47c39258402b","sha256":"e2322e5c3f299528f388653e9dee3d3ca69e9f0006d1d0530cad7062dc2c3cbb","sha512":"40ce1b1f21df22b5ff6df16248f358d1cf0eb862f764bccf75cec2bb7cebae008ed8452e6fba25c2e091fe61c36fd30d25e6d3b46fd107985140debd9dacb09f","ssdeep":"192:jQnnxvnAz9rf9dKD/x0vFIcyKAY7MLUnEpeiqd6ufnQD4rVdg9NpEDy2lc:4A9r76/xEycyUkLuID6Hg9zey2l","tlshash":"dc22c09b145b3135fc1664bdbd5e5b0250ad8cc102b886290cbe44ba808f9caadbfb05","first_seen":"2026-04-24T23:10:16.865837Z","last_seen":"2026-07-31T12:36:18.791037Z","times_seen":896,"resource_available":false,"data":null}},"time_used":3762,"timings":{"blocked":3470,"dns":0,"connect":0,"send":0,"wait":292,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-31","alert":"Sinkholed","trigger":"y42t.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-31","alert":"Phishing Block","trigger":"y42t.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"y42t.top/js/chunk-svg.1781011881923.7ca9cdc1.js","fqdn":"y42t.top","domain":"y42t.top","tld":"top"},"ip":{"addr":"154.39.104.138","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://y42t.top/","date":"2026-07-31T00:10:38.082Z","timestamp":1785456638082,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"p40f.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 10:44:09 GMT","end":"Tue, 20 Oct 2026 10:44:08 GMT"},"fingerprint":{"sha1":"41:09:2C:3F:FC:9C:25:A9:DB:51:15:BB:D1:5A:D8:01:DC:38:AD:F8","sha256":"49:3B:29:C7:5B:B6:12:CF:84:14:5B:09:42:7D:EF:AA:61:29:EC:A1:D5:40:B5:64:5C:F1:33:AB:9B:E1:13:4D"}}},"request":{"raw":"GET /js/chunk-svg.1781011881923.7ca9cdc1.js HTTP/1.1\r\nHost: y42t.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://y42t.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 31 Jul 2026 00:10:38 GMT\r\nContent-Type: application/javascript\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Tue, 09 Jun 2026 13:37:11 GMT\r\nVary: Accept-Encoding\r\nETag: W/\"6a281707-72eeb\"\r\nCache-Control: public, max-age=31536000, immutable\r\nAccess-Control-Allow-Origin: *\r\nX-Custom-Check: true\r\nContent-Encoding: gzip\r\nServer: Nginx\r\nL-Safe: 1785456638=spfqpn6fY4y3fZtY0H6j2NTv25wzT5EQ1wj7koQgMzA0vWwFcicuKIMZGIdtkkNSeWsrScNU4RjxFciulIcuwtx/yeqqcUPJs5itgwA/VIspYspfgKoNZCVd5ReH5RnmI+JuS7nmr+CJ2mFhP15XL5m4D8uR3ysrOzNOMy1CJ0v2fRXCOc9HkLd5F/w10c5w\r\nL-VIA: l1=TqoDVanjjr6wMExF\r\nL-VERSION: 1784720560\r\nL-Request-Id: 3ec519fb5823a52c069\r\nX-Cache-Status: BYPASS\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":470763,"size_decoded":90048,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65532), with no line terminators","md5":"2e885a50d7dc711be337a96fe33f0c2e","sha1":"8c767dd1bdcbf35f2577bd215ff6fe495cbd0f43","sha256":"603d14d58a247671742688b96c517d62e9c636443b960bc421af5352df4c01f7","sha512":"09289e06b0db84915693f0b78ab40149972b29693d0d6b1e66e4fbe9bddf00380f5f4e8e78961512d91a132226494572994ceade62d3d8a878126fdcdeb8fd95","ssdeep":"3072:/8nz2uaLZSZvx6Q/sIPrekK+mB6Ua94sRZI7gbpF/:/8nz2uasNxpXPrekK+mB6UHsE4pF/","tlshash":"c0a4fcb4c190f4edf704ce196e7c9e1c50321688e0a9e9e52da9fe0d9e85d6b241cdec","first_seen":"2026-06-12T19:29:57.244213Z","last_seen":"2026-07-31T12:41:47.03691Z","times_seen":974,"resource_available":true,"data":null}},"time_used":1371,"timings":{"blocked":299,"dns":0,"connect":0,"send":0,"wait":460,"receive":612,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-31","alert":"Phishing Block","trigger":"y42t.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-31","alert":"Sinkholed","trigger":"y42t.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"y42t.top/js/chunk-init-c0d76f48.1781011881923.0f397bb1.js","fqdn":"y42t.top","domain":"y42t.top","tld":"top"},"ip":{"addr":"154.39.104.138","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://y42t.top/","date":"2026-07-31T00:10:38.084Z","timestamp":1785456638084,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"p40f.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 10:44:09 GMT","end":"Tue, 20 Oct 2026 10:44:08 GMT"},"fingerprint":{"sha1":"41:09:2C:3F:FC:9C:25:A9:DB:51:15:BB:D1:5A:D8:01:DC:38:AD:F8","sha256":"49:3B:29:C7:5B:B6:12:CF:84:14:5B:09:42:7D:EF:AA:61:29:EC:A1:D5:40:B5:64:5C:F1:33:AB:9B:E1:13:4D"}}},"request":{"raw":"GET /js/chunk-init-c0d76f48.1781011881923.0f397bb1.js HTTP/1.1\r\nHost: y42t.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://y42t.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 31 Jul 2026 00:10:39 GMT\r\nContent-Type: application/javascript\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Tue, 09 Jun 2026 13:37:11 GMT\r\nVary: Accept-Encoding\r\nETag: W/\"6a281707-275ca\"\r\nCache-Control: public, max-age=31536000, immutable\r\nAccess-Control-Allow-Origin: *\r\nX-Custom-Check: true\r\nContent-Encoding: gzip\r\nServer: Nginx\r\nL-Safe: 1785456639=ZQ2Zoq/cRP01EUwFViLw2I2TTD7YXn3fOcUs+xcjh4jH3sEo30QmYTa3wyU19juAAswcF1zK33qXVdu/2wEQssIQmAwdFBkC9e1CbV9WPKEBdbscbAAIXVFwwInqwSqPfxbfTB5XlXMMnezbEIdI/APkRTYkPOXTT5T1KnbKAZgGBnmhack9avnR9rigFkDp\r\nL-VIA: l1=TqoDVanjjr6wMExF\r\nL-VERSION: 1784720560\r\nL-Request-Id: 3ec119fb5823c6cc2af\r\nX-Cache-Status: BYPASS\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":161226,"size_decoded":53264,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65535), with no line terminators","md5":"815f2acbd0918250f25d4f71409219b0","sha1":"d5778078df7eada22b3175f9182b8b22e828c433","sha256":"12a61f287da39190db34dff1de7188c3d8b76ffbd1c11290962db88fd5e2ab46","sha512":"5ba4adaf4b36b4a402c30c3aaa5be5f02e292391d79400d353a5ca6c61405cb40e5179858abddb1af6dad243899e420111e49004d01d339ce9de23d8f522c379","ssdeep":"1536:zG5qxPvO2lSV822bv0bcbpM/igw/aIwC23QOoKILbjxo4wc0tvB6xVS/J+pKY3Ns:iQz/Dp5/92xoKa/x5wc0dB5/J+UU0","tlshash":"5ef31b987392b1b847dba6e152371075b57e1dd73088e8f0c169a6803f31a9cd52afec","first_seen":"2026-05-11T06:12:53.502908Z","last_seen":"2026-07-31T12:41:47.148618Z","times_seen":973,"resource_available":true,"data":null}},"time_used":1540,"timings":{"blocked":836,"dns":0,"connect":0,"send":0,"wait":422,"receive":282,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-31","alert":"Sinkholed","trigger":"y42t.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-31","alert":"Phishing Block","trigger":"y42t.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"y42t.top/configPage.js?v=6/9/2026,%2021:37:10","fqdn":"y42t.top","domain":"y42t.top","tld":"top"},"ip":{"addr":"154.39.104.138","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://y42t.top/","date":"2026-07-31T00:10:38.068Z","timestamp":1785456638068,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"p40f.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 10:44:09 GMT","end":"Tue, 20 Oct 2026 10:44:08 GMT"},"fingerprint":{"sha1":"41:09:2C:3F:FC:9C:25:A9:DB:51:15:BB:D1:5A:D8:01:DC:38:AD:F8","sha256":"49:3B:29:C7:5B:B6:12:CF:84:14:5B:09:42:7D:EF:AA:61:29:EC:A1:D5:40:B5:64:5C:F1:33:AB:9B:E1:13:4D"}}},"request":{"raw":"GET /configPage.js?v=6/9/2026,%2021:37:10 HTTP/1.1\r\nHost: y42t.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://y42t.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 31 Jul 2026 00:10:38 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 949\r\nConnection: keep-alive\r\nLast-Modified: Tue, 09 Jun 2026 13:37:20 GMT\r\nETag: \"6a281710-3b5\"\r\nCache-Control: public, max-age=31536000, immutable\r\nAccess-Control-Allow-Origin: *\r\nX-Custom-Check: true\r\nServer: Nginx\r\nL-Safe: 1785456638=spfqpn6fY4y3fZtY0H6j2NTv25wzT5EQ1wj7koQgMzA0vWwFcicuKIMZGIdtkkNSeWsrScNU4RjxFciulIcuwtx/yeqqcUPJs5itgwA/VIspYspfgKoNZCVd5ReH5RnmI+JuS7nmr+CJ2mFhP15XL5m4D8uR3ysrOzNOMy1CJ0v2fRXCOc9HkLd5F/w10c5w\r\nL-VIA: l1=TqoDVanjjr6wMExF\r\nL-VERSION: 1784720560\r\nL-Request-Id: 3ec119fb5823907c2ac\r\nX-Cache-Status: BYPASS\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":949,"size_decoded":1622,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text, with very long lines (917), with no line terminators","md5":"e6aa74bb352ef198ba3e1c9a4b01b014","sha1":"2ea8bd6b5045475a36432f7665a129728e822d9e","sha256":"73828e873c0b6e847b37d78941ca436247471dfc90a12f743964f869f75abd5c","sha512":"2faaf24fdf1e4da637af8e9f82d1778bf061b00752dfca0c8f73432ba236a7b69410a7ad2a73727bc83e6cd631fd6555c3cc0d9d3a5d8a7f81818dd66566011f","ssdeep":"","tlshash":"be117aaf57444dffcf1d7e00a08b0a5ea8bc61d261889d4da8e9cf29e1c99002378978","first_seen":"2025-09-04T00:49:32.949926Z","last_seen":"2026-07-31T12:41:46.996715Z","times_seen":2753,"resource_available":true,"data":null}},"time_used":311,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":311,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-31","alert":"Sinkholed","trigger":"y42t.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-31","alert":"Phishing Block","trigger":"y42t.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"y42t.top/js/65246.1781011881923.03480a32.js","fqdn":"y42t.top","domain":"y42t.top","tld":"top"},"ip":{"addr":"154.39.104.138","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://y42t.top/","date":"2026-07-31T00:10:41.055Z","timestamp":1785456641055,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"p40f.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 10:44:09 GMT","end":"Tue, 20 Oct 2026 10:44:08 GMT"},"fingerprint":{"sha1":"41:09:2C:3F:FC:9C:25:A9:DB:51:15:BB:D1:5A:D8:01:DC:38:AD:F8","sha256":"49:3B:29:C7:5B:B6:12:CF:84:14:5B:09:42:7D:EF:AA:61:29:EC:A1:D5:40:B5:64:5C:F1:33:AB:9B:E1:13:4D"}}},"request":{"raw":"GET /js/65246.1781011881923.03480a32.js HTTP/1.1\r\nHost: y42t.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://y42t.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 31 Jul 2026 00:10:41 GMT\r\nContent-Type: application/javascript\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Tue, 09 Jun 2026 13:37:11 GMT\r\nVary: Accept-Encoding\r\nETag: W/\"6a281707-11ec7\"\r\nCache-Control: public, max-age=31536000, immutable\r\nAccess-Control-Allow-Origin: *\r\nX-Custom-Check: true\r\nContent-Encoding: gzip\r\nServer: Nginx\r\nL-Safe: 1785456641=gE780zdPNeqfjPR58ntui758h0rpjLBJh/P/VwEb9QgBdmX5XoCvf3XKS4ubqYQ4aAZoEOOBDBlTTobn+2eZbZ0U5rmjaj2YBZiCmX90g8Si+D3mrq6vSJjZwkQXhlFZx6UYXbz//HB3stXeGCYUIUvqR8AbEmVqeF09wWmA11wJgMs9cyGCHyv3ab/jWW+R\r\nL-VIA: l1=TqoDVanjjr6wMExF\r\nL-VERSION: 1784720560\r\nL-Request-Id: 3ec219fb5824678ba1f\r\nX-Cache-Status: BYPASS\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":73415,"size_decoded":19758,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (48666)","md5":"b98dafd31fe547add2f96acf9bea9922","sha1":"e63706f4b83ed72ce8a0ffee74c7d606968bd280","sha256":"92014e9ab9f7e62a6651d0a69b63f69a84ed58e15ee5dd8e287d46b28fe610cc","sha512":"a676475f44bd6ec6ab9e7421deb8c29430404be3852f96d012418d03e9135d3ec450ee58b4871a4f8ed2a053656c9a9a6523853d6238d701144d9b72c6df8ab8","ssdeep":"1536:f2+iDvYvNjx4Uyao0L8oDNzAuMMsTAQ0mqt2pXYzA4dANVO:e+iDYvPo0L8oZzAuMMsTA7mqt9zA4dAO","tlshash":"a673a501f78272385fa7e290220f2026e16e191505ac5ed8f179ffb93ef0954aa7d7b4","first_seen":"2026-06-12T19:29:57.345997Z","last_seen":"2026-07-31T12:41:47.033973Z","times_seen":899,"resource_available":true,"data":null}},"time_used":777,"timings":{"blocked":455,"dns":0,"connect":0,"send":0,"wait":318,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-31","alert":"Phishing Block","trigger":"y42t.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-31","alert":"Sinkholed","trigger":"y42t.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"photo.365live88.com/img/fb/team/fe8a11a30b194e4badbc35bf737117aa?win007=sell","fqdn":"photo.365live88.com","domain":"365live88.com","tld":"com"},"ip":{"addr":"154.41.93.240","port":443,"asn":174,"as":"COGENT-174","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://y42t.top/","date":"2026-07-31T00:10:42.536Z","timestamp":1785456642536,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"photo.365live88.com","organization":""},"issuer":{"commonName":"Encryption Everywhere DV TLS CA - G2","organization":"DigiCert Inc"},"validity":{"start":"Sat, 01 Nov 2025 00:00:00 GMT","end":"Sat, 31 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"45:76:43:9C:31:C5:89:A6:99:FD:9B:D8:6C:A9:3A:E6:2F:D6:E9:80","sha256":"73:27:CF:D8:8D:AC:95:46:00:5D:67:05:1E:70:22:3E:17:F0:94:78:CD:6F:A6:9C:C8:5F:B5:3B:75:60:3D:C8"}}},"request":{"raw":"GET /img/fb/team/fe8a11a30b194e4badbc35bf737117aa?win007=sell HTTP/1.1\r\nHost: photo.365live88.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://y42t.top/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: openresty\r\nDate: Fri, 31 Jul 2026 00:10:48 GMT\r\nContent-Type: image/png\r\nContent-Length: 119889\r\nConnection: keep-alive\r\nAccept-Ranges: bytes\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Expose-Headers: X-Log, X-Reqid\r\nAccess-Control-Max-Age: 2592000\r\nAge: 25818\r\nCache-Control: public, max-age=31536000\r\nContent-Disposition: inline; filename=\"fe8a11a30b194e4badbc35bf737117aa\"; filename*=utf-8''fe8a11a30b194e4badbc35bf737117aa\r\nContent-Md5: Z7GJeITT7neCmWuw45wQfw==\r\nContent-Transfer-Encoding: binary\r\nEtag: \"FrLBFi-t37ejq4LRZQ-B8Vid81HE\"\r\nLast-Modified: Sat, 25 Jul 2026 19:16:00 GMT\r\nX-Log: X-Log\r\nX-M-Log: QNM:wldsg121;QNM3\r\nX-M-Reqid: HVeQRd7qt\r\nX-Qiniu-Zone: as0\r\nX-Qnm-Cache: Hit\r\nX-Reqid: fzkAAAC3p3_hH8cY\r\nX-Svr: IO\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":119889,"size_decoded":120646,"mime_type":"image/png","magic":"PNG image data, 300 x 300, 8-bit/color RGBA, non-interlaced","md5":"67b1897884d3ee7782996bb0e39c107f","sha1":"b2c1162faddfb7a3ab82d1650f81f1589df351c4","sha256":"7ff07fcff1b25a172af50882b1f0ce3b6ed14e61c7fd17fdd3033f9208837fd7","sha512":"1237895ba011a925b79b068c13d54648ee9f956beb3d0c4cf9c0ad42c34faa631bafe9ff54fef003310a13d80ae04a27abb5ebc7cf90cbb921578f657c3d5ba8","ssdeep":"3072:RgVc+RHmu5f03n/v8yTjW8KsQCqf+v4nTXOQaaQ0phlt:RgVzRHmu5cVWgQFf+v4nCQaEphlt","tlshash":"82c302c8d68d460d8c3742e3da7a1521f3b4b13437d98de67a2fa76a8145cd248bbd0b","first_seen":"2025-12-06T15:48:15.673594Z","last_seen":"2026-07-31T12:41:15.204337Z","times_seen":12,"resource_available":false,"data":null}},"time_used":6504,"timings":{"blocked":6083,"dns":0,"connect":0,"send":0,"wait":268,"receive":153,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"y42t.top/img/bj3.a7dbd558.png","fqdn":"y42t.top","domain":"y42t.top","tld":"top"},"ip":{"addr":"154.39.104.138","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://y42t.top/","date":"2026-07-31T00:10:41.074Z","timestamp":1785456641074,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"p40f.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 10:44:09 GMT","end":"Tue, 20 Oct 2026 10:44:08 GMT"},"fingerprint":{"sha1":"41:09:2C:3F:FC:9C:25:A9:DB:51:15:BB:D1:5A:D8:01:DC:38:AD:F8","sha256":"49:3B:29:C7:5B:B6:12:CF:84:14:5B:09:42:7D:EF:AA:61:29:EC:A1:D5:40:B5:64:5C:F1:33:AB:9B:E1:13:4D"}}},"request":{"raw":"GET /img/bj3.a7dbd558.png HTTP/1.1\r\nHost: y42t.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://y42t.top/css/home.1781011881923.38488e2a.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 31 Jul 2026 00:10:42 GMT\r\nContent-Type: image/png\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Tue, 09 Jun 2026 13:37:11 GMT\r\nVary: Accept-Encoding\r\nETag: W/\"6a281707-16cb\"\r\nCache-Control: public, max-age=2592000, immutable\r\nAccess-Control-Allow-Origin: *\r\nX-Custom-Check: true\r\nContent-Encoding: gzip\r\nServer: Nginx\r\nL-Safe: 1785456642=csqYCqnSrfqstQvye8K/cOFcRTOv1c0xbYhymJAs0/02+uXPG5GVyZ0p6izerPHm8MGf7A/o5MmlVb25OTDKDKeQU0rR3SBVQb7DhxtPpD3sSzxoSDG3GUN9oldUbp9/49xVY7UWBgnWGNvQm3pHmukuHRLxIzXXppUlpGs5PUC8OL5ESDjYobwSrUxT4jKY\r\nAge: 499206\r\nL-VIA: l1=TqoDVanjjr6wMExF\r\nL-VERSION: 1784720560\r\nL-Request-Id: 3ec119fb58249e1c2b9\r\nX-Cache-Status: HIT\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5835,"size_decoded":6417,"mime_type":"image/png","magic":"PNG image data, 1003 x 171, 8-bit/color RGBA, non-interlaced","md5":"b79234bcd23ce7e063481b3605bcdd45","sha1":"eace4c48cc352cfb10fb6fcffed50748f18aa78d","sha256":"2dbca2ee9a515b178cb6a5ce670a5dafa30941ad8c753fa3e94642f8dacca13d","sha512":"40fa685181391f1ca805440f53683045d1fbd5c0f36cf471f53641c6f289481f42fefc4d1f2b2fdfe8a20d7488ef0537f10352492e46af76770b49fe8876def7","ssdeep":"96:brOIaX7VK+RUSrZ3rnZ1L++y+hsVoK4CBVVikox3n0muoE7Nqh7zwGto:K7VK+RBZ3l1i+y+3peikr3oEJqh7MCo","tlshash":"91c18f03f313ed339b875f190abe4dc3498b2f9a4725a7d6285b5aa89654819c062e82","first_seen":"2025-08-29T11:05:53.328141Z","last_seen":"2026-07-31T12:41:46.985364Z","times_seen":2492,"resource_available":false,"data":null}},"time_used":1617,"timings":{"blocked":1305,"dns":0,"connect":0,"send":0,"wait":312,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-31","alert":"Sinkholed","trigger":"y42t.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-31","alert":"Phishing Block","trigger":"y42t.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"y42t.top/ecb/8f8306425eba6e0167bcdb25a31b67ec8f","fqdn":"y42t.top","domain":"y42t.top","tld":"top"},"ip":{"addr":"154.39.104.138","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://y42t.top/","date":"2026-07-31T00:10:42.018Z","timestamp":1785456642018,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"p40f.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 10:44:09 GMT","end":"Tue, 20 Oct 2026 10:44:08 GMT"},"fingerprint":{"sha1":"41:09:2C:3F:FC:9C:25:A9:DB:51:15:BB:D1:5A:D8:01:DC:38:AD:F8","sha256":"49:3B:29:C7:5B:B6:12:CF:84:14:5B:09:42:7D:EF:AA:61:29:EC:A1:D5:40:B5:64:5C:F1:33:AB:9B:E1:13:4D"}}},"request":{"raw":"GET /ecb/8f8306425eba6e0167bcdb25a31b67ec8f HTTP/1.1\r\nHost: y42t.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://y42t.top/\r\nContent-Type: application/x-www-form-urlencoded\r\nx-request-source: https://y42t.top\r\nXign: fOasxnjF6joJtgQbudxE2fzKLkVZ7oXHHL1VBMtdkM2bCf65UDkYWTL+rvyNPBWGJEqWO9G2vKfzPNRb4Fkm1XELm51SnSXth7vQvxcnCIKOcF/sieL6N7vzc51QyvjeJ8miy5/PpaOnjTQzVl4NjG4j4F4TWUTZ2b3VgYhaS4Q=\r\ntimestamp: 1785456641870\r\nsign: 60426nc7b02a2t6v\r\nversion: 5.6.12.0\r\nclient-type: web\r\ndevice-id: h7Ebc4YSNiCSchfp8FT2WyTT845kFyYC\r\nlang: zh-CN\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 31 Jul 2026 00:10:42 GMT\r\nContent-Type: application/json\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding, Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nExpires: Fri, 31 Jul 2026 00:13:42 GMT\r\nCache-Control: public, max-age=180, s-maxage=180, must-revalidate, stale-while-revalidate=30\r\nX-XSS-Protection: 1; mode=block\r\nX-Request-ID: dfcc606bad0e496399354af10416931f\r\nPragma: public\r\nX-Content-Type-Options: nosniff\r\nStrict-Transport-Security: max-age=63072000; includeSubdomains; preload\r\nAccess-Control-Allow-Origin: *\r\nX-Custom-Check: true, true\r\nContent-Encoding: gzip\r\nServer: Nginx\r\nL-Safe: 1785456642=csqYCqnSrfqstQvye8K/cOFcRTOv1c0xbYhymJAs0/02+uXPG5GVyZ0p6izerPHm8MGf7A/o5MmlVb25OTDKDKeQU0rR3SBVQb7DhxtPpD3sSzxoSDG3GUN9oldUbp9/49xVY7UWBgnWGNvQm3pHmukuHRLxIzXXppUlpGs5PUC8OL5ESDjYobwSrUxT4jKY\r\nL-VIA: l1=TqoDVanjjr6wMExF\r\nL-VERSION: 1784720560\r\nL-Request-Id: 3eba19fb5824874c835\r\nX-Cache-Status: BYPASS\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4073,"size_decoded":5106,"mime_type":"application/json","magic":"data","md5":"0467cd162b200b49cf98a63d0574b9f4","sha1":"677712c0c585e99b7aece8ec82bd8426bc59531d","sha256":"0d5676db4553ddf37a797b3b0cb75e57bc3c0052fb6de79ca1568da875691753","sha512":"4e3049a396e7c7b82a3575ec89c43fbe9818b8f4ade41ba257a6095fe294ddec163bba609fc94aa257d0c47f07b2e7527ab0e85f6a7c336b3ac49b54f4557bc9","ssdeep":"96:eOGS7hTEAzTzef7EcsXxUCQA7Gx4jJ1onRw6THKH8DMuGmJINFfHtBD/Rj/FcpZu:VP7Sa+fgcUDQqGqjJIjIBmJIxHXNbFD","tlshash":"c2d19ea91241b324a13663fa585c4ec54d8513eaf8f7ea11c20574bbbdb218ff69fc12","first_seen":"2026-07-31T00:11:28.056708Z","last_seen":"2026-07-31T12:41:47.026672Z","times_seen":11,"resource_available":false,"data":null}},"time_used":309,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":309,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-31","alert":"Phishing Block","trigger":"y42t.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-31","alert":"Sinkholed","trigger":"y42t.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"y42t.top/api/sport/match/list?sportId=1\u0026client=web","fqdn":"y42t.top","domain":"y42t.top","tld":"top"},"ip":{"addr":"154.39.104.138","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://y42t.top/","date":"2026-07-31T00:10:42.023Z","timestamp":1785456642023,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"p40f.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 10:44:09 GMT","end":"Tue, 20 Oct 2026 10:44:08 GMT"},"fingerprint":{"sha1":"41:09:2C:3F:FC:9C:25:A9:DB:51:15:BB:D1:5A:D8:01:DC:38:AD:F8","sha256":"49:3B:29:C7:5B:B6:12:CF:84:14:5B:09:42:7D:EF:AA:61:29:EC:A1:D5:40:B5:64:5C:F1:33:AB:9B:E1:13:4D"}}},"request":{"raw":"GET /api/sport/match/list?sportId=1\u0026client=web HTTP/1.1\r\nHost: y42t.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://y42t.top/\r\nx-request-source: https://y42t.top\r\nXign: EC//TvzMfIh9dD6X/bMlVjKDKxq/Oup81lfCL0aGkASvLPFXwlPxj6sJHsuNOg/ApgfKkI2wcx0dZkUAVpz4OxVgDASPM8U3Kw96/NPxkZvAmMR6HQMzQx4gHogNDfSdmA1ebDyT4Gg7bvHY0/24osqMtD2t8jrmfuxnkerROyo=\r\ntimestamp: 1785456641869\r\nsign: 18304o2h475u7j79\r\nversion: 5.6.12.0\r\nclient-type: web\r\ndevice-id: h7Ebc4YSNiCSchfp8FT2WyTT845kFyYC\r\nlang: zh-CN\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 31 Jul 2026 00:10:42 GMT\r\nContent-Type: application/json\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nCache-Control: no-cache, no-store, max-age=0\r\ncontent-encoding: gzip\r\nAccess-Control-Allow-Origin: *\r\nX-Custom-Check: true\r\nServer: Nginx\r\nL-Safe: 1785456642=csqYCqnSrfqstQvye8K/cOFcRTOv1c0xbYhymJAs0/02+uXPG5GVyZ0p6izerPHm8MGf7A/o5MmlVb25OTDKDKeQU0rR3SBVQb7DhxtPpD3sSzxoSDG3GUN9oldUbp9/49xVY7UWBgnWGNvQm3pHmukuHRLxIzXXppUlpGs5PUC8OL5ESDjYobwSrUxT4jKY\r\nL-VIA: l1=TqoDVanjjr6wMExF\r\nL-VERSION: 1784720560\r\nL-Request-Id: 3ec619fb5824879bcf0\r\nX-Cache-Status: BYPASS\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":29835,"size_decoded":6130,"mime_type":"application/json","magic":"Unicode text, UTF-8 text, with very long lines (28507), with no line terminators","md5":"26eeb59235e7e0bd39e862b1570bdd7b","sha1":"2d6093f8163d0acbde241885608d0f2db5e5be9b","sha256":"4806ebb147f9e91a9f860fe56d75c5ea3bebfe2ed10a8e0142dbb878aafc4df5","sha512":"93c723c963ca4d91f3f2e35ddeb727d8fe64bd81795b6f247fe745024fa88137b3d2987c8559fd96f2eb26e700e6e9d79d26fd5c69e7c18db89b456fffc7bc3e","ssdeep":"768:eorWJk2CaAqoCK7pCzVpB3Lq3p8JN8QrYuZZoK6ZVbzZtZBZFwN69HRmFmTCHW5R:eorp2spGpQpkZOjZFZZZt0mGshz0dDHg","tlshash":"b6d2db5681de18992b9c61d59d5e3f4d847ef94b0a9eb5c6ee0ecf1c21b43fb8200d21","first_seen":"2026-07-31T00:11:28.022481Z","last_seen":"2026-07-31T00:12:52.461407Z","times_seen":3,"resource_available":false,"data":null}},"time_used":337,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":337,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-31","alert":"Sinkholed","trigger":"y42t.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-31","alert":"Phishing Block","trigger":"y42t.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"y42t.top/jumpto/img/https://rcf-img-hk.gasdg646fs224cn.com/202508/_webp_size1884x434_f0600e57-43d6-4af4-8f1c-08ad10ecab8d.jpg","fqdn":"y42t.top","domain":"y42t.top","tld":"top"},"ip":{"addr":"154.39.104.138","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://y42t.top/","date":"2026-07-31T00:10:42.389Z","timestamp":1785456642389,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"p40f.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 10:44:09 GMT","end":"Tue, 20 Oct 2026 10:44:08 GMT"},"fingerprint":{"sha1":"41:09:2C:3F:FC:9C:25:A9:DB:51:15:BB:D1:5A:D8:01:DC:38:AD:F8","sha256":"49:3B:29:C7:5B:B6:12:CF:84:14:5B:09:42:7D:EF:AA:61:29:EC:A1:D5:40:B5:64:5C:F1:33:AB:9B:E1:13:4D"}}},"request":{"raw":"GET /jumpto/img/https://rcf-img-hk.gasdg646fs224cn.com/202508/_webp_size1884x434_f0600e57-43d6-4af4-8f1c-08ad10ecab8d.jpg HTTP/1.1\r\nHost: y42t.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://y42t.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 31 Jul 2026 00:10:42 GMT\r\nContent-Type: image/webp\r\nContent-Length: 35520\r\nConnection: keep-alive\r\netag: \"cd3987864cb3f095323f43e0248e2180\"\r\nLast-Modified: Wed, 10 Dec 2025 10:48:07 GMT\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oEmoUawdYCt1DZUit29CoBNtxnYKfe4eY5XOmrrydijXUvy5HRgkEBR4fkLfL3BCj8czpj3gR1v%2Fim9gGnVOkhGWQdeiEYSpMY8JiXTrYba9wsMwI%2FNYiS%2F08i3a0XuZz7MpRfDcosvcjiXk5kQO0sw%3D\"}]}\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nAge: 499192\r\ncf-cache-status: HIT\r\nCF-RAY: a208c6647bb25de4-HKG\r\nalt-svc: h3=\":443\"; ma=86400\r\nCache-Control: public, max-age=2592000, immutable, public, max-age=2592000, immutable\r\nAccess-Control-Allow-Origin: *\r\nX-Custom-Check: true\r\nServer: Nginx\r\nL-Safe: 1785456642=csqYCqnSrfqstQvye8K/cOFcRTOv1c0xbYhymJAs0/02+uXPG5GVyZ0p6izerPHm8MGf7A/o5MmlVb25OTDKDKeQU0rR3SBVQb7DhxtPpD3sSzxoSDG3GUN9oldUbp9/49xVY7UWBgnWGNvQm3pHmukuHRLxIzXXppUlpGs5PUC8OL5ESDjYobwSrUxT4jKY\r\nL-VIA: l1=TqoDVanjjr6wMExF\r\nL-VERSION: 1784720560\r\nL-Request-Id: 3ec119fb58249e7c2ba\r\nX-Cache-Status: HIT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":35520,"size_decoded":36673,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1884x434, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"cd3987864cb3f095323f43e0248e2180","sha1":"57b2593c8fb12efd02723c4297cc32c426e77017","sha256":"f86c999282c8cc66a7a94042d0d117be0e025906c4bd5647298e312a2c309ca9","sha512":"ba70094c63b1d4360f2ade43b4a26c9b412fe366e805223c019a6b1418e656067f54a94daf0eed2e9fac0fce3623ef9c0dac9cf092d6503388d9400146a25f25","ssdeep":"768:S4wSvosDYmjc1AHEBOLMSkdFqvZa6Hfj/9q3uTOdbXjzZBniHc9QjK:SytDYAkByMZPqvg6Hfj/9FTSXjfiH0Qe","tlshash":"bcf2f20a3c565b1f01ff3414b7028a68004b264c603face2cd99b8ce5dbf94d859e556","first_seen":"2026-04-24T23:10:16.816486Z","last_seen":"2026-07-31T12:41:47.133035Z","times_seen":1167,"resource_available":false,"data":null}},"time_used":392,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":336,"receive":56,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-31","alert":"Phishing Block","trigger":"y42t.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-31","alert":"Sinkholed","trigger":"y42t.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"y42t.top/img/license.ea57c78d.png","fqdn":"y42t.top","domain":"y42t.top","tld":"top"},"ip":{"addr":"154.39.104.138","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://y42t.top/","date":"2026-07-31T00:10:41.080Z","timestamp":1785456641080,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"p40f.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 10:44:09 GMT","end":"Tue, 20 Oct 2026 10:44:08 GMT"},"fingerprint":{"sha1":"41:09:2C:3F:FC:9C:25:A9:DB:51:15:BB:D1:5A:D8:01:DC:38:AD:F8","sha256":"49:3B:29:C7:5B:B6:12:CF:84:14:5B:09:42:7D:EF:AA:61:29:EC:A1:D5:40:B5:64:5C:F1:33:AB:9B:E1:13:4D"}}},"request":{"raw":"GET /img/license.ea57c78d.png HTTP/1.1\r\nHost: y42t.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://y42t.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 31 Jul 2026 00:10:44 GMT\r\nContent-Type: image/png\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Tue, 09 Jun 2026 13:37:11 GMT\r\nVary: Accept-Encoding\r\nETag: W/\"6a281707-7b8\"\r\nCache-Control: public, max-age=2592000, immutable\r\nAccess-Control-Allow-Origin: *\r\nX-Custom-Check: true\r\nContent-Encoding: gzip\r\nServer: Nginx\r\nL-Safe: 1785456644=ImVO6mGITWMACggqrQcdldqw9lowxQ1+VpRDuAKFwfMb9d30WLVBONutXSRguHOv4S8A2fwwrG4hosTExvfehVfTlImNbeMdeEGGOKfPxTnrTTeg4Ne14CSZz0II/fQW6e3NIBDsQDv0uQ0mehoMPQ1XrPiYIzMRuPb5r05527aZ2mNjo0YBVDxdIUBsWRdM\r\nAge: 499193\r\nL-VIA: l1=TqoDVanjjr6wMExF\r\nL-VERSION: 1784720560\r\nL-Request-Id: 3ec919fb582503dc092\r\nX-Cache-Status: HIT\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1976,"size_decoded":2702,"mime_type":"image/png","magic":"PNG image data, 161 x 52, 4-bit colormap, non-interlaced","md5":"60a2c7c150b01809fbb7b97932684b5b","sha1":"67fc9647c452a17b519c6a51dc8c38daa23755f9","sha256":"c5ce31558a1f979ae78c7779d2f312b196750375541e9c147b73d6e44d47c276","sha512":"2328442fa1c74e47c6eff4adab55920c7e7738e7ae51bd2b222fb696bbcf8201a14805089a33baa80c28a40db47061048d817c384bd72735b2e0c0116ff63c6f","ssdeep":"","tlshash":"b3412a6266729beced1a8c47592c7df1d8338ca1a200e1c150ed761f1bf8e1060e7a94","first_seen":"2025-08-29T11:05:53.23289Z","last_seen":"2026-07-31T12:41:47.156706Z","times_seen":2392,"resource_available":false,"data":null}},"time_used":3218,"timings":{"blocked":2929,"dns":0,"connect":0,"send":0,"wait":289,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-31","alert":"Phishing Block","trigger":"y42t.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-31","alert":"Sinkholed","trigger":"y42t.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"photo.365live88.com/img/fb/team/5555046c43194343aee514179e4390fb?win007=sell","fqdn":"photo.365live88.com","domain":"365live88.com","tld":"com"},"ip":{"addr":"154.41.93.240","port":443,"asn":174,"as":"COGENT-174","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://y42t.top/","date":"2026-07-31T00:10:42.455Z","timestamp":1785456642455,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"photo.365live88.com","organization":""},"issuer":{"commonName":"Encryption Everywhere DV TLS CA - G2","organization":"DigiCert Inc"},"validity":{"start":"Sat, 01 Nov 2025 00:00:00 GMT","end":"Sat, 31 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"45:76:43:9C:31:C5:89:A6:99:FD:9B:D8:6C:A9:3A:E6:2F:D6:E9:80","sha256":"73:27:CF:D8:8D:AC:95:46:00:5D:67:05:1E:70:22:3E:17:F0:94:78:CD:6F:A6:9C:C8:5F:B5:3B:75:60:3D:C8"}}},"request":{"raw":"GET /img/fb/team/5555046c43194343aee514179e4390fb?win007=sell HTTP/1.1\r\nHost: photo.365live88.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://y42t.top/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: openresty\r\nDate: Fri, 31 Jul 2026 00:10:43 GMT\r\nContent-Type: image/png\r\nContent-Length: 32673\r\nConnection: keep-alive\r\nAccept-Ranges: bytes\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Expose-Headers: X-Log, X-Reqid\r\nAccess-Control-Max-Age: 2592000\r\nAge: 1392\r\nCache-Control: public, max-age=31536000\r\nContent-Disposition: inline; filename=\"5555046c43194343aee514179e4390fb\"; filename*=utf-8''5555046c43194343aee514179e4390fb\r\nContent-Md5: 6fMReuKjacLFH1+Nt5a/Vw==\r\nContent-Transfer-Encoding: binary\r\nEtag: \"Fht6b9H9rXLkaPjYRRICikC78CzB\"\r\nLast-Modified: Fri, 24 Jul 2026 19:49:37 GMT\r\nX-Log: X-Log\r\nX-M-Log: QNM:wldsg121;QNM3\r\nX-M-Reqid: 7BhbX4Yi0\r\nX-Qiniu-Zone: as0\r\nX-Qnm-Cache: Hit\r\nX-Reqid: 2iIAAAD8XVUXNscY\r\nX-Svr: IO\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":32673,"size_decoded":33428,"mime_type":"image/png","magic":"PNG image data, 180 x 180, 8-bit/color RGBA, non-interlaced","md5":"e9f3117ae2a369c2c51f5f8db796bf57","sha1":"1b7a6fd1fdad72e468f8d84512028a40bbf02cc1","sha256":"2b51d7bfea62caba7c7ab4b886939cb1caa18f44e0c45a51f83531f6c040d813","sha512":"b9cbbc41bc34ea6fe5e91bba56eb9a5e54d089bca432be9f4df3c742c1cc1337dd77688efb43c994f282ed8891f68e7d4b541a2ab0d20b66678be52f1bfb8f94","ssdeep":"768:7DJ3gh3ec45UrWcPmFi3Ryhe22reqaVXgniddF02DEoJ8n6Oo1LAt:7DJnUKni3RyM2weqQQnWaiE28nEpAt","tlshash":"67e2f1201e444e2fcb5a16af1149d81dcb3e2d419962601ba57b3dafcf3b1201e659fc","first_seen":"2025-10-18T22:21:34.254669Z","last_seen":"2026-07-31T00:12:52.502351Z","times_seen":7,"resource_available":false,"data":null}},"time_used":2014,"timings":{"blocked":-1,"dns":615,"connect":260,"send":0,"wait":346,"receive":268,"ssl":525},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"photo.365live88.com/img/fb/team/eb3ddbfa3e184f70be2d050e0fc9e6de?win007=sell","fqdn":"photo.365live88.com","domain":"365live88.com","tld":"com"},"ip":{"addr":"154.41.93.240","port":443,"asn":174,"as":"COGENT-174","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://y42t.top/","date":"2026-07-31T00:10:42.470Z","timestamp":1785456642470,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"photo.365live88.com","organization":""},"issuer":{"commonName":"Encryption Everywhere DV TLS CA - G2","organization":"DigiCert Inc"},"validity":{"start":"Sat, 01 Nov 2025 00:00:00 GMT","end":"Sat, 31 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"45:76:43:9C:31:C5:89:A6:99:FD:9B:D8:6C:A9:3A:E6:2F:D6:E9:80","sha256":"73:27:CF:D8:8D:AC:95:46:00:5D:67:05:1E:70:22:3E:17:F0:94:78:CD:6F:A6:9C:C8:5F:B5:3B:75:60:3D:C8"}}},"request":{"raw":"GET /img/fb/team/eb3ddbfa3e184f70be2d050e0fc9e6de?win007=sell HTTP/1.1\r\nHost: photo.365live88.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://y42t.top/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: openresty\r\nDate: Fri, 31 Jul 2026 00:10:44 GMT\r\nContent-Type: image/png\r\nContent-Length: 65004\r\nConnection: keep-alive\r\nAccept-Ranges: bytes\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Expose-Headers: X-Log, X-Reqid\r\nAccess-Control-Max-Age: 2592000\r\nAge: 85234\r\nCache-Control: public, max-age=31536000\r\nContent-Disposition: inline; filename=\"eb3ddbfa3e184f70be2d050e0fc9e6de\"; filename*=utf-8''eb3ddbfa3e184f70be2d050e0fc9e6de\r\nContent-Md5: 9L8iuICRROUl9D+d/3hIWg==\r\nContent-Transfer-Encoding: binary\r\nEtag: \"Fq-DV4y2H1Klo0xtBuKUVQTAulMw\"\r\nLast-Modified: Fri, 24 Jul 2026 19:49:43 GMT\r\nX-Log: X-Log\r\nX-M-Log: QNM:wldsg119;QNM3\r\nX-M-Reqid: L175jVQV7\r\nX-Qiniu-Zone: as0\r\nX-Qnm-Cache: Hit\r\nX-Reqid: TSgAAAB0wKbW6cYY\r\nX-Svr: IO\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":65004,"size_decoded":65760,"mime_type":"image/png","magic":"PNG image data, 300 x 300, 8-bit/color RGBA, non-interlaced","md5":"f4bf22b8809144e525f43f9dff78485a","sha1":"af83578cb61f52a5a34c6d06e2945504c0ba5330","sha256":"4a69ae3e9b194c452512fe3e9e83c4081583f032cf484934114d37889853d568","sha512":"cc65f55afbeb8c47ce9382f073510953508a1f42667fa8f1d334106954a33d165060a8338e1f02245fea596d98d7596ea72336373ccb7e29879aeee2acbda07a","ssdeep":"1536:qk6XN7B/IZ6YWNigyTt5y/6V7BG7ILAdrFJ9:rQN7BwZ5JgyTte6VNfLMz9","tlshash":"e7530287700a61f4e93a021b192cf2ba8d85d373731cf465868dff8e6468573b56806f","first_seen":"2025-04-01T11:41:17.93751Z","last_seen":"2026-07-31T00:12:30.738993Z","times_seen":28,"resource_available":false,"data":null}},"time_used":2763,"timings":{"blocked":2369,"dns":0,"connect":0,"send":0,"wait":277,"receive":117,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"photo.365live88.com/img/fb/team/a8b49962e972499496a844072a41dd33?win007=sell","fqdn":"photo.365live88.com","domain":"365live88.com","tld":"com"},"ip":{"addr":"154.41.93.240","port":443,"asn":174,"as":"COGENT-174","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://y42t.top/","date":"2026-07-31T00:10:42.516Z","timestamp":1785456642516,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"photo.365live88.com","organization":""},"issuer":{"commonName":"Encryption Everywhere DV TLS CA - G2","organization":"DigiCert Inc"},"validity":{"start":"Sat, 01 Nov 2025 00:00:00 GMT","end":"Sat, 31 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"45:76:43:9C:31:C5:89:A6:99:FD:9B:D8:6C:A9:3A:E6:2F:D6:E9:80","sha256":"73:27:CF:D8:8D:AC:95:46:00:5D:67:05:1E:70:22:3E:17:F0:94:78:CD:6F:A6:9C:C8:5F:B5:3B:75:60:3D:C8"}}},"request":{"raw":"GET /img/fb/team/a8b49962e972499496a844072a41dd33?win007=sell HTTP/1.1\r\nHost: photo.365live88.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://y42t.top/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: openresty\r\nDate: Fri, 31 Jul 2026 00:10:47 GMT\r\nContent-Type: image/png\r\nContent-Length: 10545\r\nConnection: keep-alive\r\nAccept-Ranges: bytes\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Expose-Headers: X-Log, X-Reqid\r\nAccess-Control-Max-Age: 2592000\r\nAge: 40223\r\nCache-Control: public, max-age=31536000\r\nContent-Disposition: inline; filename=\"a8b49962e972499496a844072a41dd33\"; filename*=utf-8''a8b49962e972499496a844072a41dd33\r\nContent-Md5: 79rjVyrrMk+zOOyUDX8a1w==\r\nContent-Transfer-Encoding: binary\r\nEtag: \"FlbpVmORes5IAFc-s4_SdMfl3QSw\"\r\nLast-Modified: Thu, 23 Jul 2026 20:13:37 GMT\r\nX-Log: X-Log\r\nX-M-Log: QNM:wldsg121;QNM3\r\nX-M-Reqid: oyLmeTGDD\r\nX-Qiniu-Zone: as0\r\nX-Qnm-Cache: Hit\r\nX-Reqid: i2EAAACGTUjHEscY\r\nX-Svr: IO\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":10545,"size_decoded":11301,"mime_type":"image/png","magic":"PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced","md5":"efdae3572aeb324fb338ec940d7f1ad7","sha1":"56e95663917ace4800573eb38fd274c7e5dd04b0","sha256":"be8135f3e1288761f51a8fa0ccc9ab88f4d23ca0ac2768bd6864836dcac7b79a","sha512":"b566484ec1bf6a3c9c2163d0d91cfe87ee27379622a0681230febc442d9ecfbc5d305ba53b042d1f52714b2505b32043fe1001b9ee41ab7583f0eca9cd2e4101","ssdeep":"192:gMwBWv0Jn36bh2nHql3E4/jjXZF2xvXN0v9gqzfZFfbamea:gMwKc6bh2Hql04//6Mv9LZFfbamea","tlshash":"ca22be8afff9fed979a538d5bf1d7e760e10e689b820d4c8431f6e40d61830244693a5","first_seen":"2026-06-12T12:44:02.365989Z","last_seen":"2026-07-31T05:07:38.866273Z","times_seen":100,"resource_available":false,"data":null}},"time_used":4707,"timings":{"blocked":4439,"dns":0,"connect":0,"send":0,"wait":268,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"photo.365live88.com/img/fb/team/fba967cd8477487da67282fb4bdd3b09?win007=sell","fqdn":"photo.365live88.com","domain":"365live88.com","tld":"com"},"ip":{"addr":"154.41.93.240","port":443,"asn":174,"as":"COGENT-174","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://y42t.top/","date":"2026-07-31T00:10:42.566Z","timestamp":1785456642566,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"photo.365live88.com","organization":""},"issuer":{"commonName":"Encryption Everywhere DV TLS CA - G2","organization":"DigiCert Inc"},"validity":{"start":"Sat, 01 Nov 2025 00:00:00 GMT","end":"Sat, 31 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"45:76:43:9C:31:C5:89:A6:99:FD:9B:D8:6C:A9:3A:E6:2F:D6:E9:80","sha256":"73:27:CF:D8:8D:AC:95:46:00:5D:67:05:1E:70:22:3E:17:F0:94:78:CD:6F:A6:9C:C8:5F:B5:3B:75:60:3D:C8"}}},"request":{"raw":"GET /img/fb/team/fba967cd8477487da67282fb4bdd3b09?win007=sell HTTP/1.1\r\nHost: photo.365live88.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://y42t.top/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: openresty\r\nDate: Fri, 31 Jul 2026 00:10:51 GMT\r\nContent-Type: image/png\r\nContent-Length: 19137\r\nConnection: keep-alive\r\nAccept-Ranges: bytes\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Expose-Headers: X-Log, X-Reqid\r\nAccess-Control-Max-Age: 2592000\r\nAge: 18636\r\nCache-Control: public, max-age=31536000\r\nContent-Disposition: inline; filename=\"fba967cd8477487da67282fb4bdd3b09\"; filename*=utf-8''fba967cd8477487da67282fb4bdd3b09\r\nContent-Md5: xqNq7evpxOhwBmLJmOWD5w==\r\nContent-Transfer-Encoding: binary\r\nEtag: \"FhPxNFhiDEtOk_0gPEluyi_VSZdE\"\r\nLast-Modified: Sat, 25 Jul 2026 19:18:09 GMT\r\nX-Log: X-Log\r\nX-M-Log: QNM:wldsg121;QNM3:2\r\nX-M-Reqid: DfH9PDa8W\r\nX-Qiniu-Zone: as0\r\nX-Qnm-Cache: Hit\r\nX-Reqid: QeIAAACLp0JqJscY\r\nX-Svr: IO\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":19137,"size_decoded":19895,"mime_type":"image/png","magic":"PNG image data, 250 x 224, 8-bit/color RGBA, non-interlaced","md5":"c6a36aedebe9c4e8700662c998e583e7","sha1":"13f13458620c4b4e93fd203c496eca2fd5499744","sha256":"4a4c8a2f77c2cf5ab676305fbd4496f059f17de1e2572afa20c84d20813af8dc","sha512":"13d8aa70969babf38a9e1fda102b371c818651e68207992960074d4274130cc4c451095a3c21ad247d0087c61f707dd1df33748a8747d55c1bcbb3ab52df5bfd","ssdeep":"384:KdHu9nEyDXawTbcNK1bEKukREVUlPV1ODrakB7m3J3nINGRg:tE8XFbgKlEKrEeldcZVc3kJ","tlshash":"ad82cfa2ab501555b2017958844c68ca8df7efb7e2f3c3095ae6b320e16f1539e8ce21","first_seen":"2025-06-20T01:32:32.080746Z","last_seen":"2026-07-31T12:41:47.044091Z","times_seen":33,"resource_available":false,"data":null}},"time_used":8786,"timings":{"blocked":8497,"dns":0,"connect":0,"send":0,"wait":282,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"photo.365live88.com/img/fb/team/1254ef1bd3524a529305cae73515916e?win007=sell","fqdn":"photo.365live88.com","domain":"365live88.com","tld":"com"},"ip":{"addr":"154.41.93.240","port":443,"asn":174,"as":"COGENT-174","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://y42t.top/","date":"2026-07-31T00:10:42.518Z","timestamp":1785456642518,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"photo.365live88.com","organization":""},"issuer":{"commonName":"Encryption Everywhere DV TLS CA - G2","organization":"DigiCert Inc"},"validity":{"start":"Sat, 01 Nov 2025 00:00:00 GMT","end":"Sat, 31 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"45:76:43:9C:31:C5:89:A6:99:FD:9B:D8:6C:A9:3A:E6:2F:D6:E9:80","sha256":"73:27:CF:D8:8D:AC:95:46:00:5D:67:05:1E:70:22:3E:17:F0:94:78:CD:6F:A6:9C:C8:5F:B5:3B:75:60:3D:C8"}}},"request":{"raw":"GET /img/fb/team/1254ef1bd3524a529305cae73515916e?win007=sell HTTP/1.1\r\nHost: photo.365live88.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://y42t.top/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: openresty\r\nDate: Fri, 31 Jul 2026 00:10:47 GMT\r\nContent-Type: image/png\r\nContent-Length: 36198\r\nConnection: keep-alive\r\nAccept-Ranges: bytes\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Expose-Headers: X-Log, X-Reqid\r\nAccess-Control-Max-Age: 2592000\r\nAge: 40223\r\nCache-Control: public, max-age=31536000\r\nContent-Disposition: inline; filename=\"1254ef1bd3524a529305cae73515916e\"; filename*=utf-8''1254ef1bd3524a529305cae73515916e\r\nContent-Md5: DqwuKJ+3sA+3PCIq6B/oPA==\r\nContent-Transfer-Encoding: binary\r\nEtag: \"FjG2PI0c0XeegAp6rL1uONuGwDoF\"\r\nLast-Modified: Fri, 24 Jul 2026 19:50:22 GMT\r\nX-Log: X-Log\r\nX-M-Log: QNM:wldsg121;QNM3\r\nX-M-Reqid: JJVG7LwTp\r\nX-Qiniu-Zone: as0\r\nX-Qnm-Cache: Hit\r\nX-Reqid: vCIAAAAIH0vHEscY\r\nX-Svr: IO\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":36198,"size_decoded":36954,"mime_type":"image/png","magic":"PNG image data, 146 x 196, 8-bit/color RGBA, non-interlaced","md5":"0eac2e289fb7b00fb73c222ae81fe83c","sha1":"31b63c8d1cd1779e800a7aacbd6e38db86c03a05","sha256":"6389ceef708433850843d5e7769591992cd6b723af785386d88a8c2e18dd7dc0","sha512":"b09c31529a557d1d6386746fdcc776f417f187ef0b51a139d7307f082b9eff5fd738ec75c370aab444583d85bbe3a028fae7eaf3d6d20a3bae1f4bdddc59b6b1","ssdeep":"768:AMuKLNAdaqvgrzLdCwpnX8C67rl3zKmUMhlhfsJJWa:0vgrzLdN1g7rxz1ldsma","tlshash":"95f2f102e0e021a792133a9a558437c55056233081ebebcddafa67eb6de8f0d8952d47","first_seen":"2025-08-01T05:00:14.189009Z","last_seen":"2026-07-31T12:34:14.050529Z","times_seen":11,"resource_available":false,"data":null}},"time_used":5024,"timings":{"blocked":4707,"dns":0,"connect":0,"send":0,"wait":274,"receive":43,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"photo.365live88.com/img/fb/team/9f48e244d4284924a54545eb3366a61d?win007=sell","fqdn":"photo.365live88.com","domain":"365live88.com","tld":"com"},"ip":{"addr":"154.41.93.240","port":443,"asn":174,"as":"COGENT-174","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://y42t.top/","date":"2026-07-31T00:10:42.548Z","timestamp":1785456642548,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"photo.365live88.com","organization":""},"issuer":{"commonName":"Encryption Everywhere DV TLS CA - G2","organization":"DigiCert Inc"},"validity":{"start":"Sat, 01 Nov 2025 00:00:00 GMT","end":"Sat, 31 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"45:76:43:9C:31:C5:89:A6:99:FD:9B:D8:6C:A9:3A:E6:2F:D6:E9:80","sha256":"73:27:CF:D8:8D:AC:95:46:00:5D:67:05:1E:70:22:3E:17:F0:94:78:CD:6F:A6:9C:C8:5F:B5:3B:75:60:3D:C8"}}},"request":{"raw":"GET /img/fb/team/9f48e244d4284924a54545eb3366a61d?win007=sell HTTP/1.1\r\nHost: photo.365live88.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://y42t.top/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: openresty\r\nDate: Fri, 31 Jul 2026 00:10:49 GMT\r\nContent-Type: image/png\r\nContent-Length: 16655\r\nConnection: keep-alive\r\nAccept-Ranges: bytes\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Expose-Headers: X-Log, X-Reqid\r\nAccess-Control-Max-Age: 2592000\r\nAge: 21341\r\nCache-Control: public, max-age=31536000\r\nContent-Disposition: inline; filename=\"9f48e244d4284924a54545eb3366a61d\"; filename*=utf-8''9f48e244d4284924a54545eb3366a61d\r\nContent-Md5: StEMB09VaAdWwFuzIORO1A==\r\nContent-Transfer-Encoding: binary\r\nEtag: \"FoTIb_1dVZqdZh2gHDFNY4wGoRf_\"\r\nLast-Modified: Sat, 25 Jul 2026 19:17:42 GMT\r\nX-Log: X-Log\r\nX-M-Log: QNM:wldsg119;QNM3\r\nX-M-Reqid: w907PIzq1\r\nX-Qiniu-Zone: as0\r\nX-Qnm-Cache: Hit\r\nX-Reqid: PmwAAAB_GSP0I8cY\r\nX-Svr: IO\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":16655,"size_decoded":17411,"mime_type":"image/png","magic":"PNG image data, 170 x 291, 8-bit/color RGBA, non-interlaced","md5":"4ad10c074f55680756c05bb320e44ed4","sha1":"84c86ffd5d559a9d661da01c314d638c06a117ff","sha256":"7029515c19405d78214c6d55ebc941bbdf560d4b4b5f457120b8b7e997901130","sha512":"ac7262cc4c3681dcee17ce23206db893be5de4804b289ed4807c6804ba52757516d7bc3219f2381a3e948e8fd08da3d3b94d836bff498ba0d695203634631c52","ssdeep":"384:OBndFCkpUtCEu4LTAN6toh+YhE6bzbkoc2iHJiyUikdw:OBd1SoQvQ6tohFhbzhi4m","tlshash":"2972c0cd0352af24f7b0ceda7492818e15246d6802d09f9c00aae98bd42e797515fb26","first_seen":"2023-07-06T07:05:29Z","last_seen":"2026-07-31T12:41:15.165612Z","times_seen":163,"resource_available":false,"data":null}},"time_used":7416,"timings":{"blocked":7136,"dns":0,"connect":0,"send":0,"wait":277,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"photo.365live88.com/img/fb/team/d643631f5c3d473ea6dac7e4711d94fc?win007=sell","fqdn":"photo.365live88.com","domain":"365live88.com","tld":"com"},"ip":{"addr":"154.41.93.240","port":443,"asn":174,"as":"COGENT-174","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://y42t.top/","date":"2026-07-31T00:10:42.553Z","timestamp":1785456642553,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"photo.365live88.com","organization":""},"issuer":{"commonName":"Encryption Everywhere DV TLS CA - G2","organization":"DigiCert Inc"},"validity":{"start":"Sat, 01 Nov 2025 00:00:00 GMT","end":"Sat, 31 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"45:76:43:9C:31:C5:89:A6:99:FD:9B:D8:6C:A9:3A:E6:2F:D6:E9:80","sha256":"73:27:CF:D8:8D:AC:95:46:00:5D:67:05:1E:70:22:3E:17:F0:94:78:CD:6F:A6:9C:C8:5F:B5:3B:75:60:3D:C8"}}},"request":{"raw":"GET /img/fb/team/d643631f5c3d473ea6dac7e4711d94fc?win007=sell HTTP/1.1\r\nHost: photo.365live88.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://y42t.top/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: openresty\r\nDate: Fri, 31 Jul 2026 00:10:50 GMT\r\nContent-Type: image/png\r\nContent-Length: 6438\r\nConnection: keep-alive\r\nAccept-Ranges: bytes\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Expose-Headers: X-Log, X-Reqid\r\nAccess-Control-Max-Age: 2592000\r\nAge: 20439\r\nCache-Control: public, max-age=31536000\r\nContent-Disposition: inline; filename=\"d643631f5c3d473ea6dac7e4711d94fc\"; filename*=utf-8''d643631f5c3d473ea6dac7e4711d94fc\r\nContent-Md5: yV9IQfWoaGiiVTN7GuL9HA==\r\nContent-Transfer-Encoding: binary\r\nEtag: \"FsxqAHqRZTv81DWOv-V02RIgFpZd\"\r\nLast-Modified: Sat, 25 Jul 2026 19:17:48 GMT\r\nX-Log: X-Log\r\nX-M-Log: QNM:wldsg121;QNM3\r\nX-M-Reqid: MrvB6bJLp\r\nX-Qiniu-Zone: as0\r\nX-Qnm-Cache: Hit\r\nX-Reqid: 3coAAACldDrGJMcY\r\nX-Svr: IO\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6438,"size_decoded":7193,"mime_type":"image/png","magic":"PNG image data, 128 x 128, 8-bit colormap, non-interlaced","md5":"c95f4841f5a86868a255337b1ae2fd1c","sha1":"cc6a007a91653bfcd4358ebfe574d9122016965d","sha256":"7a5b5ec0ccc735ce226684109f791b4d19875e1f334722d717194a042324eb6c","sha512":"bc15c2afab72583611c8d03dc981167939bb9d147c69faa1a8ef4077ab14737b1c497998572d82066fa7357be2286e66779767059bd5c45e43ad29fd6576fcf0","ssdeep":"192:g8IdUZDE/qnzqFbk8xHs2fDBaqp+KNZLHsDT0Ldnbe:gLukjVH77Baq/zsDTUpe","tlshash":"85d18eb9eb50d640839911f8aa740f45156946dee20ab4cb10a6b2949f806bd12fd3b3","first_seen":"2025-02-04T17:13:00.952972Z","last_seen":"2026-07-31T12:41:47.031994Z","times_seen":77,"resource_available":false,"data":null}},"time_used":7679,"timings":{"blocked":7413,"dns":0,"connect":0,"send":0,"wait":266,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"y42t.top/img/away-bg.00d4ba2a.png","fqdn":"y42t.top","domain":"y42t.top","tld":"top"},"ip":{"addr":"154.39.104.138","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://y42t.top/","date":"2026-07-31T00:10:42.581Z","timestamp":1785456642581,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"p40f.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 10:44:09 GMT","end":"Tue, 20 Oct 2026 10:44:08 GMT"},"fingerprint":{"sha1":"41:09:2C:3F:FC:9C:25:A9:DB:51:15:BB:D1:5A:D8:01:DC:38:AD:F8","sha256":"49:3B:29:C7:5B:B6:12:CF:84:14:5B:09:42:7D:EF:AA:61:29:EC:A1:D5:40:B5:64:5C:F1:33:AB:9B:E1:13:4D"}}},"request":{"raw":"GET /img/away-bg.00d4ba2a.png HTTP/1.1\r\nHost: y42t.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://y42t.top/css/home.1781011881923.38488e2a.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 31 Jul 2026 00:10:43 GMT\r\nContent-Type: image/png\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Tue, 09 Jun 2026 13:37:10 GMT\r\nVary: Accept-Encoding\r\nETag: W/\"6a281706-f2b\"\r\nCache-Control: public, max-age=2592000, immutable\r\nAccess-Control-Allow-Origin: *\r\nX-Custom-Check: true\r\nContent-Encoding: gzip\r\nServer: Nginx\r\nL-Safe: 1785456643=L21MjTcjPMoacLR4vpNVcs71ZpTSCD9pAjEcK72XJz4geELYb/dM7FIgfcGewCPiEiHBLTyE0/8OE0+Ussy/+H0+QJ0ieZl66nXxiX7hlrgta/bqlKy5K3ZjLS3f1v4h/F2vuy6GEAoffe4Wt8WE6NAsU33QhqR65Iggn1IfkuSp/Pz9elabEun/YDFlVnt3\r\nAge: 499193\r\nL-VIA: l1=TqoDVanjjr6wMExF\r\nL-VERSION: 1784720560\r\nL-Request-Id: 3ec819fb5824f35c0fa\r\nX-Cache-Status: HIT\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3883,"size_decoded":4609,"mime_type":"image/png","magic":"PNG image data, 277 x 80, 8-bit colormap, non-interlaced","md5":"ce3e5a71ef5dcf15c030882243e12315","sha1":"d4fdd1329ecac30941a67bd5108bad525c791c12","sha256":"3c2aad01ce2fce6463d6ed3bde348515922dd019d8a670b07b53d66b39c68d3d","sha512":"f6a55d8c079529988760a1c22541c097af159a3653f5ffe89c5c31ee20371f2c879c64797319f4176be77c821294f0f72d83ad77f2a0141203c857c8f987966c","ssdeep":"","tlshash":"6f815cf693e66bd0d5675106a3a14c89624d69d925a325530923f45ec3bb1ac02fe381","first_seen":"2025-08-29T11:05:53.10673Z","last_seen":"2026-07-31T12:41:15.182516Z","times_seen":2292,"resource_available":false,"data":null}},"time_used":1443,"timings":{"blocked":1156,"dns":0,"connect":0,"send":0,"wait":287,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-31","alert":"Sinkholed","trigger":"y42t.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-31","alert":"Phishing Block","trigger":"y42t.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"y42t.top/img/CHESS.80cb714e.png","fqdn":"y42t.top","domain":"y42t.top","tld":"top"},"ip":{"addr":"154.39.104.138","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://y42t.top/","date":"2026-07-31T00:10:42.766Z","timestamp":1785456642766,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"p40f.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 10:44:09 GMT","end":"Tue, 20 Oct 2026 10:44:08 GMT"},"fingerprint":{"sha1":"41:09:2C:3F:FC:9C:25:A9:DB:51:15:BB:D1:5A:D8:01:DC:38:AD:F8","sha256":"49:3B:29:C7:5B:B6:12:CF:84:14:5B:09:42:7D:EF:AA:61:29:EC:A1:D5:40:B5:64:5C:F1:33:AB:9B:E1:13:4D"}}},"request":{"raw":"GET /img/CHESS.80cb714e.png HTTP/1.1\r\nHost: y42t.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://y42t.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 31 Jul 2026 00:10:45 GMT\r\nContent-Type: image/png\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Tue, 09 Jun 2026 13:37:11 GMT\r\nVary: Accept-Encoding\r\nETag: W/\"6a281707-e587\"\r\nCache-Control: public, max-age=2592000, immutable\r\nAccess-Control-Allow-Origin: *\r\nX-Custom-Check: true\r\nContent-Encoding: gzip\r\nServer: Nginx\r\nL-Safe: 1785456645=3m/UQghxNGW3gPChBH0qwAw5jhMnk/bL7ljEsAqUNfL2w1i0HQREe2rEb4k+hpOpl+mNkeotUTn7rI4RELPi496PFmfq0fH/qKdAcrqsvLVi0CluaNffWUzPkudCch2/uigQXMAy3JVAvXsWZA3UDGCysooGP/loOgkjhRbwnpUqbTZcGQok3Gq63qCfb31c\r\nAge: 499191\r\nL-VIA: l1=TqoDVanjjr6wMExF\r\nL-VERSION: 1784720560\r\nL-Request-Id: 3ec119fb582542dc2c3\r\nX-Cache-Status: HIT\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":58759,"size_decoded":59477,"mime_type":"image/png","magic":"PNG image data, 582 x 307, 8-bit colormap, non-interlaced","md5":"727b4dc207a4141335b27fa73f76fb10","sha1":"bb63b02e635f5503d76c4fc3532c2c652a06cac8","sha256":"5d840214ae46c94540df7d0a94963cc398b32c7b868edddb6a4f2a2faf113e42","sha512":"c1512f9d9a191ea10e806fe3a8f812f78dec9832568373b7b5362fafe9aef6783947d248deb2fc8d30ba1c61fd3b94f308298e69c1de32686110fa35f7bd4ed4","ssdeep":"1536:gtPCh483gu6aLw9AJeteTzkprgTWEHbP4BzrJ:344U9Xte3kprgKE7gZJ","tlshash":"0543025a13c1159f422f37b8148758a6d8154f9f38f32ea11a9e2afda58cb0af431c3d","first_seen":"2023-11-10T19:12:00Z","last_seen":"2026-07-31T12:41:15.225395Z","times_seen":2302,"resource_available":false,"data":null}},"time_used":2590,"timings":{"blocked":2251,"dns":0,"connect":0,"send":0,"wait":311,"receive":28,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-31","alert":"Phishing Block","trigger":"y42t.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-31","alert":"Sinkholed","trigger":"y42t.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"y42t.top/jumpto/img/https://rcf-img-hk.gasdg646fs224cn.com/202503/_webp_size649x578_e50c5112-b480-4217-95c2-f187843fa431.png","fqdn":"y42t.top","domain":"y42t.top","tld":"top"},"ip":{"addr":"154.39.104.138","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://y42t.top/","date":"2026-07-31T00:10:42.865Z","timestamp":1785456642865,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"p40f.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 10:44:09 GMT","end":"Tue, 20 Oct 2026 10:44:08 GMT"},"fingerprint":{"sha1":"41:09:2C:3F:FC:9C:25:A9:DB:51:15:BB:D1:5A:D8:01:DC:38:AD:F8","sha256":"49:3B:29:C7:5B:B6:12:CF:84:14:5B:09:42:7D:EF:AA:61:29:EC:A1:D5:40:B5:64:5C:F1:33:AB:9B:E1:13:4D"}}},"request":{"raw":"GET /jumpto/img/https://rcf-img-hk.gasdg646fs224cn.com/202503/_webp_size649x578_e50c5112-b480-4217-95c2-f187843fa431.png HTTP/1.1\r\nHost: y42t.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://y42t.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 31 Jul 2026 00:10:47 GMT\r\nContent-Type: image/webp\r\nContent-Length: 54466\r\nConnection: keep-alive\r\netag: \"d564e11aa2a3009b6985896da404739e\"\r\nLast-Modified: Sat, 06 Dec 2025 06:22:05 GMT\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bQ9n6%2BYtj3IVIENVJZ%2FgCLt%2BmT7aSpSYA0lyyeGbA2fBLeWBukYW1qEyKH897HhuH8FAS4%2FdE2oPfNj5uZ3bL8QkFLlPkbIOkgubVipjmV3592h64hOnvp%2Bl5hKt%2B0g7tWjFK5Sk8H%2Bx6zjhy37q86w%3D\"}]}\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nAge: 499203\r\ncf-cache-status: HIT\r\nCF-RAY: a208c639ab3eb4c7-HKG\r\nalt-svc: h3=\":443\"; ma=86400\r\nCache-Control: public, max-age=2592000, immutable, public, max-age=2592000, immutable\r\nAccess-Control-Allow-Origin: *\r\nX-Custom-Check: true\r\nServer: Nginx\r\nL-Safe: 1785456647=pwbyu29rM0HEK42bpjFMXQZZ8s1IzzkT40daNMbcT90Ub0zpvrQ+kBR7N9vkAvLpdcGVCAkYTtjHzFt3rikpG2u0ViQwOg9Y/d8oh3QnzrskfHJpkQ3k6DdsyXdsoVGvpU7l+6O6Z96TYcnIdvgBPUL8UMfWMnVf++Fvg3TWLhL2ZP4it9BY8MKVve4d74hd\r\nL-VIA: l1=TqoDVanjjr6wMExF\r\nL-VERSION: 1784720560\r\nL-Request-Id: 3ec819fb5825b9fc10c\r\nX-Cache-Status: HIT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":54466,"size_decoded":55627,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"d564e11aa2a3009b6985896da404739e","sha1":"5701d82c9e2fd24ec69db4bdc9ee3e32cffca139","sha256":"75d785fba01e17e56ae0ba404eb302e8537d3a7b7f84d11128164946a3987384","sha512":"1f6a7673f6ccb42f0f1e5135154db412145225615504419fcd52655726f8ac4c85ec419c54167c1d4e71c60cfbd30f87f7bc07d53858adb3e30e184f2fdb5623","ssdeep":"1536:+USdyAD4v4ReUeNhO2po1VPvBu3czLES5WjB6lieR:Wdym04TGeLvlQAC6geR","tlshash":"fa330269024c6463719556f833feb42aa760a7c63801a4799a8f3594fe24ce874cfd6c","first_seen":"2026-04-24T23:10:16.721458Z","last_seen":"2026-07-31T12:36:18.603179Z","times_seen":908,"resource_available":false,"data":null}},"time_used":4347,"timings":{"blocked":4038,"dns":0,"connect":0,"send":0,"wait":292,"receive":17,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-31","alert":"Phishing Block","trigger":"y42t.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-31","alert":"Sinkholed","trigger":"y42t.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"y32b.top/","fqdn":"y32b.top","domain":"y32b.top","tld":"top"},"ip":{"addr":"103.244.148.114","port":80,"asn":135357,"as":"HONG KONG KOWLOON TELECOMMUNICATIONS CO.,LIMITED","country":"Hong Kong","country_code":"HK"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-07-31T00:10:34.035Z","timestamp":1785456634035,"http_version":"HTTP/1","security_state":"insecure","security_info":null,"request":{"raw":"GET / HTTP/1.1\r\nHost: y32b.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.0 200 OK\r\nConnection: close\r\nCache-Control: max-age=259200\r\nContent-Type: text/html;charset=utf-8\r\nContent-Length: 426\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-31T20:32:35.777412Z","times_seen":17640239,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-31","alert":"Sinkholed","trigger":"y32b.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-31","alert":"Sinkholed","trigger":"y32b.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"photo.365live88.com/img/fb/team/3d63933cac094628908bf799bc2e875c?win007=sell","fqdn":"photo.365live88.com","domain":"365live88.com","tld":"com"},"ip":{"addr":"154.41.93.240","port":443,"asn":174,"as":"COGENT-174","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://y42t.top/","date":"2026-07-31T00:10:42.569Z","timestamp":1785456642569,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"photo.365live88.com","organization":""},"issuer":{"commonName":"Encryption Everywhere DV TLS CA - G2","organization":"DigiCert Inc"},"validity":{"start":"Sat, 01 Nov 2025 00:00:00 GMT","end":"Sat, 31 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"45:76:43:9C:31:C5:89:A6:99:FD:9B:D8:6C:A9:3A:E6:2F:D6:E9:80","sha256":"73:27:CF:D8:8D:AC:95:46:00:5D:67:05:1E:70:22:3E:17:F0:94:78:CD:6F:A6:9C:C8:5F:B5:3B:75:60:3D:C8"}}},"request":{"raw":"GET /img/fb/team/3d63933cac094628908bf799bc2e875c?win007=sell HTTP/1.1\r\nHost: photo.365live88.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://y42t.top/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: openresty\r\nDate: Fri, 31 Jul 2026 00:10:51 GMT\r\nContent-Type: image/png\r\nContent-Length: 138227\r\nConnection: keep-alive\r\nAccept-Ranges: bytes\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Expose-Headers: X-Log, X-Reqid\r\nAccess-Control-Max-Age: 2592000\r\nAge: 15028\r\nCache-Control: public, max-age=31536000\r\nContent-Disposition: inline; filename=\"3d63933cac094628908bf799bc2e875c\"; filename*=utf-8''3d63933cac094628908bf799bc2e875c\r\nContent-Md5: yR94UAXGiUrwW0clvJeJ7A==\r\nContent-Transfer-Encoding: binary\r\nEtag: \"FjMr9wZNZitUsjPEUigIAcf1uvoM\"\r\nLast-Modified: Sat, 25 Jul 2026 19:18:16 GMT\r\nX-Log: X-Log\r\nX-M-Log: QNM:wldsg121;QNM3\r\nX-M-Reqid: HRpjK6SxN\r\nX-Qiniu-Zone: as0\r\nX-Qnm-Cache: Hit\r\nX-Reqid: T6cAAAA-nU-yKccY\r\nX-Svr: IO\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":138227,"size_decoded":138984,"mime_type":"image/png","magic":"PNG image data, 291 x 343, 8-bit/color RGBA, non-interlaced","md5":"c91f785005c6894af05b4725bc9789ec","sha1":"332bf7064d662b54b233c452280801c7f5bafa0c","sha256":"74d1ef8488c066d1b4dfb8b32463dab1a86a57e885852cfd9427c4e6c45e0f71","sha512":"d3d1400c522a0240c1b389517c1594a70b2c6cc068d4670657a9853bec781d91fae5659c786072be863e9b0bc16368930f98d64d6d9eca715088d12eb79791fe","ssdeep":"3072:AOLVi5vI3kr7kVMNlvfQUFPuaxdGpkZr81hYvtLY5/FzT:AOLVixI0fkVCRhdxdM28QF05tX","tlshash":"03d313a0d1fd0da85bdad344579ed7da201fed0de98a6b0e6ec1b60b18c86609cd7730","first_seen":"2025-06-29T16:29:42.744025Z","last_seen":"2026-07-31T12:41:47.075703Z","times_seen":46,"resource_available":false,"data":null}},"time_used":9021,"timings":{"blocked":8682,"dns":0,"connect":0,"send":0,"wait":261,"receive":78,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"photo.365live88.com/img/fb/team/9923b4648f3041dca0c8cf9fec4126ec?win007=sell","fqdn":"photo.365live88.com","domain":"365live88.com","tld":"com"},"ip":{"addr":"154.41.93.240","port":443,"asn":174,"as":"COGENT-174","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://y42t.top/","date":"2026-07-31T00:10:42.574Z","timestamp":1785456642574,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"photo.365live88.com","organization":""},"issuer":{"commonName":"Encryption Everywhere DV TLS CA - G2","organization":"DigiCert Inc"},"validity":{"start":"Sat, 01 Nov 2025 00:00:00 GMT","end":"Sat, 31 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"45:76:43:9C:31:C5:89:A6:99:FD:9B:D8:6C:A9:3A:E6:2F:D6:E9:80","sha256":"73:27:CF:D8:8D:AC:95:46:00:5D:67:05:1E:70:22:3E:17:F0:94:78:CD:6F:A6:9C:C8:5F:B5:3B:75:60:3D:C8"}}},"request":{"raw":"GET /img/fb/team/9923b4648f3041dca0c8cf9fec4126ec?win007=sell HTTP/1.1\r\nHost: photo.365live88.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://y42t.top/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: openresty\r\nDate: Fri, 31 Jul 2026 00:10:51 GMT\r\nContent-Type: image/png\r\nContent-Length: 32056\r\nConnection: keep-alive\r\nAccept-Ranges: bytes\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Expose-Headers: X-Log, X-Reqid\r\nAccess-Control-Max-Age: 2592000\r\nAge: 648\r\nCache-Control: public, max-age=31536000\r\nContent-Disposition: inline; filename=\"9923b4648f3041dca0c8cf9fec4126ec\"; filename*=utf-8''9923b4648f3041dca0c8cf9fec4126ec\r\nContent-Md5: jmEsdE0KuUac84jbrEfewg==\r\nContent-Transfer-Encoding: binary\r\nEtag: \"FqTDj3tmlmphgPfQ24cM9ZpOZaKv\"\r\nLast-Modified: Sat, 25 Jul 2026 19:18:38 GMT\r\nX-Log: X-Log\r\nX-M-Log: QNM:wldsg119;QNM3\r\nX-M-Reqid: fODuIbMGY\r\nX-Qiniu-Zone: as0\r\nX-Qnm-Cache: Hit\r\nX-Reqid: KKMAAACwKXrGNscY\r\nX-Svr: IO\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":32056,"size_decoded":32810,"mime_type":"image/png","magic":"PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced","md5":"8e612c744d0ab9469cf388dbac47dec2","sha1":"a4c38f7b66966a6180f7d0db870cf59a4e65a2af","sha256":"f72882c49c2cc829f0e2872ee5541d8589c8607b0aa618dc46dbd1fe2cefe5c1","sha512":"a3e998f1f8930921488fcb1859df50d02d99cb7c300072f2f2a7044fcebc461e0b0a2907d53a767821201ca939fe03fdbbdbfa08c889fc9cf2d7cc01f686b4fe","ssdeep":"768:je6pyuy1v2XQvVqzVbjvbz86fCXqTuhwnDvq4CXM:R5yIXA8Fvbz86fGq/Tq5c","tlshash":"bfe2f29d5cd9cc4dc398114b2c59ca811fb779e6707f24cdb39ba69210e623f86c2978","first_seen":"2023-08-17T12:39:31Z","last_seen":"2026-07-31T12:41:47.069495Z","times_seen":162,"resource_available":false,"data":null}},"time_used":9521,"timings":{"blocked":9249,"dns":0,"connect":0,"send":0,"wait":260,"receive":12,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"y42t.top/api/sport/match/list?sportId=1\u0026client=web","fqdn":"y42t.top","domain":"y42t.top","tld":"top"},"ip":{"addr":"154.39.104.138","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://y42t.top/","date":"2026-07-31T00:10:47.407Z","timestamp":1785456647407,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"p40f.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 10:44:09 GMT","end":"Tue, 20 Oct 2026 10:44:08 GMT"},"fingerprint":{"sha1":"41:09:2C:3F:FC:9C:25:A9:DB:51:15:BB:D1:5A:D8:01:DC:38:AD:F8","sha256":"49:3B:29:C7:5B:B6:12:CF:84:14:5B:09:42:7D:EF:AA:61:29:EC:A1:D5:40:B5:64:5C:F1:33:AB:9B:E1:13:4D"}}},"request":{"raw":"GET /api/sport/match/list?sportId=1\u0026client=web HTTP/1.1\r\nHost: y42t.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://y42t.top/\r\nx-request-source: https://y42t.top\r\nXign: 0iYwO3s3o6JI3RxxEpf1rMZttd/VphExjk/GuwksxgkFug9OApxSYyevn9aSZ6hQ7X8hSDXxuxIIKdw4H3wXmv0JFMlPQuneEVhklSFAq9KBuXqPjBDlDt7IFYT9QP7PEVNBT53eRCdLaM5RIeKtiT+8KwbZyDO6kFwL21ly6j0=\r\ntimestamp: 1785456647403\r\nsign: i6t695n9666r5h28\r\nversion: 5.6.12.0\r\nclient-type: web\r\ndevice-id: h7Ebc4YSNiCSchfp8FT2WyTT845kFyYC\r\nlang: zh-CN\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 31 Jul 2026 00:10:47 GMT\r\nContent-Type: application/json\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nCache-Control: no-cache, no-store, max-age=0\r\ncontent-encoding: gzip\r\nAccess-Control-Allow-Origin: *\r\nX-Custom-Check: true\r\nServer: Nginx\r\nL-Safe: 1785456647=pwbyu29rM0HEK42bpjFMXQZZ8s1IzzkT40daNMbcT90Ub0zpvrQ+kBR7N9vkAvLpdcGVCAkYTtjHzFt3rikpG2u0ViQwOg9Y/d8oh3QnzrskfHJpkQ3k6DdsyXdsoVGvpU7l+6O6Z96TYcnIdvgBPUL8UMfWMnVf++Fvg3TWLhL2ZP4it9BY8MKVve4d74hd\r\nL-VIA: l1=TqoDVanjjr6wMExF\r\nL-VERSION: 1784720560\r\nL-Request-Id: 3ec219fb5825d81ba2a\r\nX-Cache-Status: BYPASS\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":29835,"size_decoded":6140,"mime_type":"application/json","magic":"Unicode text, UTF-8 text, with very long lines (28507), with no line terminators","md5":"26eeb59235e7e0bd39e862b1570bdd7b","sha1":"2d6093f8163d0acbde241885608d0f2db5e5be9b","sha256":"4806ebb147f9e91a9f860fe56d75c5ea3bebfe2ed10a8e0142dbb878aafc4df5","sha512":"93c723c963ca4d91f3f2e35ddeb727d8fe64bd81795b6f247fe745024fa88137b3d2987c8559fd96f2eb26e700e6e9d79d26fd5c69e7c18db89b456fffc7bc3e","ssdeep":"768:eorWJk2CaAqoCK7pCzVpB3Lq3p8JN8QrYuZZoK6ZVbzZtZBZFwN69HRmFmTCHW5R:eorp2spGpQpkZOjZFZZZt0mGshz0dDHg","tlshash":"b6d2db5681de18992b9c61d59d5e3f4d847ef94b0a9eb5c6ee0ecf1c21b43fb8200d21","first_seen":"2026-07-31T00:11:28.022481Z","last_seen":"2026-07-31T00:12:52.461407Z","times_seen":3,"resource_available":false,"data":null}},"time_used":302,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":302,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-31","alert":"Sinkholed","trigger":"y42t.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-31","alert":"Phishing Block","trigger":"y42t.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"y42t.top/js/22872.1781011881923.153832d9.js","fqdn":"y42t.top","domain":"y42t.top","tld":"top"},"ip":{"addr":"154.39.104.138","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://y42t.top/","date":"2026-07-31T00:10:38.095Z","timestamp":1785456638095,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"p40f.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 10:44:09 GMT","end":"Tue, 20 Oct 2026 10:44:08 GMT"},"fingerprint":{"sha1":"41:09:2C:3F:FC:9C:25:A9:DB:51:15:BB:D1:5A:D8:01:DC:38:AD:F8","sha256":"49:3B:29:C7:5B:B6:12:CF:84:14:5B:09:42:7D:EF:AA:61:29:EC:A1:D5:40:B5:64:5C:F1:33:AB:9B:E1:13:4D"}}},"request":{"raw":"GET /js/22872.1781011881923.153832d9.js HTTP/1.1\r\nHost: y42t.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://y42t.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 31 Jul 2026 00:10:39 GMT\r\nContent-Type: application/javascript\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Tue, 09 Jun 2026 13:37:11 GMT\r\nVary: Accept-Encoding\r\nETag: W/\"6a281707-2679f\"\r\nCache-Control: public, max-age=31536000, immutable\r\nAccess-Control-Allow-Origin: *\r\nX-Custom-Check: true\r\nContent-Encoding: gzip\r\nServer: Nginx\r\nL-Safe: 1785456639=ZQ2Zoq/cRP01EUwFViLw2I2TTD7YXn3fOcUs+xcjh4jH3sEo30QmYTa3wyU19juAAswcF1zK33qXVdu/2wEQssIQmAwdFBkC9e1CbV9WPKEBdbscbAAIXVFwwInqwSqPfxbfTB5XlXMMnezbEIdI/APkRTYkPOXTT5T1KnbKAZgGBnmhack9avnR9rigFkDp\r\nL-VIA: l1=TqoDVanjjr6wMExF\r\nL-VERSION: 1784720560\r\nL-Request-Id: 3ec119fb5823f2cc2b1\r\nX-Cache-Status: BYPASS\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":157599,"size_decoded":50860,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"f9ee602f8eeb24db94a45e276eb229fd","sha1":"add3d7dea3c94842531e4e52db7b334a705c5e6b","sha256":"3d79813c4166473dcbe19eb56d456a226f183993f5aa4108a4fccae156001245","sha512":"8ad5674af4bbf338d1188a8108d0984786a4c94afddefbd592dbc428928dae301e40d4a936d73d0e29ba68989ccd13abee0988a8a6938495736115c80a53eae7","ssdeep":"3072:XHW7tB4Vgj5tNlxyU5YegxYffj7TEOiGzZl+DJVkzEcx1nKs:XHW7tBwgttXxyUtffjAGzT+DJVkzEcxF","tlshash":"21f31bd4f2c071f6475f45f2a22b0075b26f4d92318c98b0e15ba6597f21a48c7abeec","first_seen":"2026-06-12T19:29:57.267326Z","last_seen":"2026-07-31T12:41:47.103795Z","times_seen":942,"resource_available":true,"data":null}},"time_used":1984,"timings":{"blocked":1540,"dns":0,"connect":0,"send":0,"wait":352,"receive":92,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-31","alert":"Phishing Block","trigger":"y42t.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-31","alert":"Sinkholed","trigger":"y42t.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"photo.365live88.com/img/fb/team/33938d692b1440638dcdc51568f47f9c?win007=sell","fqdn":"photo.365live88.com","domain":"365live88.com","tld":"com"},"ip":{"addr":"154.41.93.240","port":443,"asn":174,"as":"COGENT-174","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://y42t.top/","date":"2026-07-31T00:10:42.545Z","timestamp":1785456642545,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"photo.365live88.com","organization":""},"issuer":{"commonName":"Encryption Everywhere DV TLS CA - G2","organization":"DigiCert Inc"},"validity":{"start":"Sat, 01 Nov 2025 00:00:00 GMT","end":"Sat, 31 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"45:76:43:9C:31:C5:89:A6:99:FD:9B:D8:6C:A9:3A:E6:2F:D6:E9:80","sha256":"73:27:CF:D8:8D:AC:95:46:00:5D:67:05:1E:70:22:3E:17:F0:94:78:CD:6F:A6:9C:C8:5F:B5:3B:75:60:3D:C8"}}},"request":{"raw":"GET /img/fb/team/33938d692b1440638dcdc51568f47f9c?win007=sell HTTP/1.1\r\nHost: photo.365live88.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://y42t.top/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: openresty\r\nDate: Fri, 31 Jul 2026 00:10:49 GMT\r\nContent-Type: image/png\r\nContent-Length: 36483\r\nConnection: keep-alive\r\nAccept-Ranges: bytes\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Expose-Headers: X-Log, X-Reqid\r\nAccess-Control-Max-Age: 2592000\r\nAge: 22242\r\nCache-Control: public, max-age=31536000\r\nContent-Disposition: inline; filename=\"33938d692b1440638dcdc51568f47f9c\"; filename*=utf-8''33938d692b1440638dcdc51568f47f9c\r\nContent-Md5: UtO0DDbxrkOHOEAzuJh/AQ==\r\nContent-Transfer-Encoding: binary\r\nEtag: \"FsgmD2DYltgUBRkS2ArqF_5rUgUG\"\r\nLast-Modified: Sat, 25 Jul 2026 19:17:25 GMT\r\nX-Log: X-Log\r\nX-M-Log: QNM:wldsg119;QNM3\r\nX-M-Reqid: Ne1z1iJw2\r\nX-Qiniu-Zone: as0\r\nX-Qnm-Cache: Hit\r\nX-Reqid: b34AAABidFciI8cY\r\nX-Svr: IO\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":36483,"size_decoded":37239,"mime_type":"image/png","magic":"PNG image data, 200 x 200, 8-bit/color RGBA, non-interlaced","md5":"52d3b40c36f1ae4387384033b8987f01","sha1":"c8260f60d896d814051912d80aea17fe6b520506","sha256":"da838b4ede0f8f16672d8418a1472df3eb5a2c5993bc839b56a1448f8283f090","sha512":"7860c25993d1a51345f987c2b42c2ca2ddd37d1755fa95cd7c9b3e3f263ed891c919a5daa227d16b122a1d81d1751e69b5b41fc7daf695dfda9f14d53462b8ac","ssdeep":"768:Z/8dkGZvJwfCl2srY/I31eUwER7AeQcX+pAJMfJUnZSn2wntGGtNBN:ZEiUvJwfCwss/OkUwI7Aml0+SnhntnN7","tlshash":"78f2f101f2aacffe34a12822d5c358b78d78e197eb7551bee911f0a141fd1931a05f89","first_seen":"2025-03-16T17:54:47.590625Z","last_seen":"2026-07-31T12:41:15.174157Z","times_seen":13,"resource_available":false,"data":null}},"time_used":7136,"timings":{"blocked":6831,"dns":0,"connect":0,"send":0,"wait":277,"receive":28,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"y42t.top/jumpto/img/https://rcf-img-hk.gasdg646fs224cn.com/gpmaster/_webp_size328x442_91f2d885-8341-4928-bace-352c8c691bef.png","fqdn":"y42t.top","domain":"y42t.top","tld":"top"},"ip":{"addr":"154.39.104.138","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://y42t.top/","date":"2026-07-31T00:10:42.857Z","timestamp":1785456642857,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"p40f.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 10:44:09 GMT","end":"Tue, 20 Oct 2026 10:44:08 GMT"},"fingerprint":{"sha1":"41:09:2C:3F:FC:9C:25:A9:DB:51:15:BB:D1:5A:D8:01:DC:38:AD:F8","sha256":"49:3B:29:C7:5B:B6:12:CF:84:14:5B:09:42:7D:EF:AA:61:29:EC:A1:D5:40:B5:64:5C:F1:33:AB:9B:E1:13:4D"}}},"request":{"raw":"GET /jumpto/img/https://rcf-img-hk.gasdg646fs224cn.com/gpmaster/_webp_size328x442_91f2d885-8341-4928-bace-352c8c691bef.png HTTP/1.1\r\nHost: y42t.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://y42t.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 31 Jul 2026 00:10:46 GMT\r\nContent-Type: image/webp\r\nContent-Length: 11602\r\nConnection: keep-alive\r\netag: \"5b6551f12b1b84f1734c1a1990de36e3\"\r\nLast-Modified: Tue, 02 Dec 2025 14:08:32 GMT\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=x8LZCQ1p2xfZ6IE6ZFWu5nVwtfFtgrA8hGmVrOvzhcZpBeTDnehh2bxxBsVttvLO93E46utXaXkrJmq1phjQhiy0TCyIWgNJWtEcI%2Btp6v7TEpX83BS%2BFY0cbusmrHE2Jow%2BwGG1Ij2cWvnJOJcS%2B8Q%3D\"}]}\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nAge: 499190\r\ncf-cache-status: HIT\r\nCF-RAY: a208c683ef7c85a6-HKG\r\nalt-svc: h3=\":443\"; ma=86400\r\nCache-Control: public, max-age=2592000, immutable, public, max-age=2592000, immutable\r\nAccess-Control-Allow-Origin: *\r\nX-Custom-Check: true\r\nServer: Nginx\r\nL-Safe: 1785456646=EMBgc894QAdP6slbLJsiNGYFcXUmrvQIWKh5BYYK6Qj4fqRyTGb/Xbwkd279GHpNIUNxmrA5BLARmTn3BBDanv5J4PcdpRxfVwUjHlMDvqiZAET3U1COvNHjyZWcIPWzQSTxYljkuIh13EY2sibpSpVrTubzP7vT5r508KhivSQ1oVznby71Ayyz5cTYVqWG\r\nL-VIA: l1=TqoDVanjjr6wMExF\r\nL-VERSION: 1784720560\r\nL-Request-Id: 3ec519fb58259c7c07c\r\nX-Cache-Status: HIT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":11602,"size_decoded":12757,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"5b6551f12b1b84f1734c1a1990de36e3","sha1":"4a9abbac21133dee3830561cdd3803655c193744","sha256":"fdf8c30716a64d0ba082686010f70ff0347eb4bc57f861ff9ca67ef41700059c","sha512":"c02da03187076f9921fd89e31f1d92cc60c78da95d5b35e179d76d11842191eb9f52431e4a7322e0a9c5d6d54b8c484aa6dea6d6f653557818f3383300b97f61","ssdeep":"192:U9/EwHQZEoeKC69DzEtpjQM8dUNCtSyj2OG5hSutqwILUXr/mt/XqzLYKHiifMfi:4/EwwZpe4Y3MMqUN/Qlw84IL4/M/an/H","tlshash":"0f32c043a66ed2fab717ab660556d304de22e0d468553406d7ebd43a302effeb180d0b","first_seen":"2026-04-24T23:10:16.72574Z","last_seen":"2026-07-31T12:36:18.57111Z","times_seen":899,"resource_available":false,"data":null}},"time_used":3872,"timings":{"blocked":3567,"dns":0,"connect":0,"send":0,"wait":305,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-31","alert":"Phishing Block","trigger":"y42t.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-31","alert":"Sinkholed","trigger":"y42t.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"y42t.top/jumpto/img/https://rcf-img-hk.gasdg646fs224cn.com/gpmaster/_webp_size704x442_7f760e34-ebbd-4cfc-bc28-666cc8a6234f.png","fqdn":"y42t.top","domain":"y42t.top","tld":"top"},"ip":{"addr":"154.39.104.138","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://y42t.top/","date":"2026-07-31T00:10:42.885Z","timestamp":1785456642885,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"p40f.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 10:44:09 GMT","end":"Tue, 20 Oct 2026 10:44:08 GMT"},"fingerprint":{"sha1":"41:09:2C:3F:FC:9C:25:A9:DB:51:15:BB:D1:5A:D8:01:DC:38:AD:F8","sha256":"49:3B:29:C7:5B:B6:12:CF:84:14:5B:09:42:7D:EF:AA:61:29:EC:A1:D5:40:B5:64:5C:F1:33:AB:9B:E1:13:4D"}}},"request":{"raw":"GET /jumpto/img/https://rcf-img-hk.gasdg646fs224cn.com/gpmaster/_webp_size704x442_7f760e34-ebbd-4cfc-bc28-666cc8a6234f.png HTTP/1.1\r\nHost: y42t.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://y42t.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 31 Jul 2026 00:10:48 GMT\r\nContent-Type: image/webp\r\nContent-Length: 44494\r\nConnection: keep-alive\r\netag: \"693c20ba4107f736124e16931ead8d60\"\r\nLast-Modified: Sat, 06 Dec 2025 06:30:27 GMT\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WNGMc5Vrj%2B%2B5KbUzOg%2B1XPaTq64obonS%2Fe%2F1rgRpLsPEd1nD60h0xG18FlEHZeHOEcbP%2BvIikRkHPzdpEXur3%2FZ78lDPCYEYN5FXeDn5GcSXIK12LVQpJ1Quf9vF7TZUjx6hGWUemUgihYRLLZrla0Q%3D\"}]}\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nAge: 499199\r\ncf-cache-status: HIT\r\nCF-RAY: a208c65e1eea1c68-HKG\r\nalt-svc: h3=\":443\"; ma=86400\r\nCache-Control: public, max-age=2592000, immutable, public, max-age=2592000, immutable\r\nAccess-Control-Allow-Origin: *\r\nX-Custom-Check: true\r\nServer: Nginx\r\nL-Safe: 1785456648=Z7fxofmZ9hv3/XQ5t4frSKj942TDDEVXgFNewEpAWWZeSSGmfBEq5p68Wd3/3y67+UP5RiFuBM1NHhhqN9RGX44j5RrNYq5QVDzdwAN37T4mRc2TwqScY+zJAmvwDFiSdBQZRKjiyZLBbVL6KisnflY7oB9woowAE/HfHmrE5yoCQfCsCgc03AQt5IVZ52aB\r\nL-VIA: l1=TqoDVanjjr6wMExF\r\nL-VERSION: 1784720560\r\nL-Request-Id: 3ec119fb5826013c2db\r\nX-Cache-Status: HIT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":44494,"size_decoded":45655,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"693c20ba4107f736124e16931ead8d60","sha1":"6a247e864c0c0a9c40bb5be357de99524abf3e2e","sha256":"342bf65608ae9d71296ffcfbbfb4580c00ba782557c802be6496ec374d5fad11","sha512":"ae136a2a5baba143d5afd3fe4270a5ce2bd0a96655f2f56a65f2d9ea26ada4a90c63b36c96b6b79adb32dc0ac9f118040f236cfcdae958f82c05f3f600dc79da","ssdeep":"768:ssqja8OCwQkPOoS4nNgT3p8tZgn5DVWGgNS4RipleSQ6c5xlGY89B:JVQGS8A+wn5D4GgrkKKc5jGY89B","tlshash":"5a13019a26762833b187c36d0030062c1b78b89f3654c54ea4ed7924975f09ec7eca6f","first_seen":"2026-04-24T23:10:16.7563Z","last_seen":"2026-07-31T12:41:46.994164Z","times_seen":1024,"resource_available":false,"data":null}},"time_used":5507,"timings":{"blocked":5176,"dns":0,"connect":0,"send":0,"wait":311,"receive":20,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-31","alert":"Sinkholed","trigger":"y42t.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-31","alert":"Phishing Block","trigger":"y42t.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"y42t.top/img/appdown.6e7c9177.png","fqdn":"y42t.top","domain":"y42t.top","tld":"top"},"ip":{"addr":"154.39.104.138","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://y42t.top/","date":"2026-07-31T00:10:41.079Z","timestamp":1785456641079,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"p40f.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 10:44:09 GMT","end":"Tue, 20 Oct 2026 10:44:08 GMT"},"fingerprint":{"sha1":"41:09:2C:3F:FC:9C:25:A9:DB:51:15:BB:D1:5A:D8:01:DC:38:AD:F8","sha256":"49:3B:29:C7:5B:B6:12:CF:84:14:5B:09:42:7D:EF:AA:61:29:EC:A1:D5:40:B5:64:5C:F1:33:AB:9B:E1:13:4D"}}},"request":{"raw":"GET /img/appdown.6e7c9177.png HTTP/1.1\r\nHost: y42t.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://y42t.top/css/index-399e2569.1781011881923.a7b0b4f4.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 31 Jul 2026 00:10:43 GMT\r\nContent-Type: image/png\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Tue, 09 Jun 2026 13:37:11 GMT\r\nVary: Accept-Encoding\r\nETag: W/\"6a281707-277f\"\r\nCache-Control: public, max-age=2592000, immutable\r\nAccess-Control-Allow-Origin: *\r\nX-Custom-Check: true\r\nContent-Encoding: gzip\r\nServer: Nginx\r\nL-Safe: 1785456643=L21MjTcjPMoacLR4vpNVcs71ZpTSCD9pAjEcK72XJz4geELYb/dM7FIgfcGewCPiEiHBLTyE0/8OE0+Ussy/+H0+QJ0ieZl66nXxiX7hlrgta/bqlKy5K3ZjLS3f1v4h/F2vuy6GEAoffe4Wt8WE6NAsU33QhqR65Iggn1IfkuSp/Pz9elabEun/YDFlVnt3\r\nAge: 499210\r\nL-VIA: l1=TqoDVanjjr6wMExF\r\nL-VERSION: 1784720560\r\nL-Request-Id: 3ec519fb5824c89c072\r\nX-Cache-Status: HIT\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":10111,"size_decoded":10843,"mime_type":"image/png","magic":"PNG image data, 112 x 112, 8-bit/color RGBA, non-interlaced","md5":"716d097b193628397635cfac41b561fa","sha1":"545d1876219bed15fe850a499a08322de6a26866","sha256":"50276d87fae9c1e30a32c32b4e90dcc2e227cabb4e3bb1d60ecb22fb50c5f2ff","sha512":"47ea5928e921bec4ce4d9c807ee921f6115a6dd27af6fa7325e6d988058d22cf36c03693ebc56665203809cfd6d008cd410380e688e90b36d7eeec18ce6aa92f","ssdeep":"192:cALsiDRih/bWKl4Hq2BHZE6+3paMeCsuTvB6hi6tswYmd:lBEv2Hq2BHS1ZaMJtB+tsud","tlshash":"4622d047a584327b826ec79c8fe98c112470ad1ce6f04d5ac44e711128e8df3503baf2","first_seen":"2023-07-01T07:21:14Z","last_seen":"2026-07-31T12:41:47.149549Z","times_seen":2456,"resource_available":false,"data":null}},"time_used":2284,"timings":{"blocked":1980,"dns":0,"connect":0,"send":0,"wait":304,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-31","alert":"Sinkholed","trigger":"y42t.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-31","alert":"Phishing Block","trigger":"y42t.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"y42t.top/kc523-1/sponsor/sponsor_web_2.png?1781011825626","fqdn":"y42t.top","domain":"y42t.top","tld":"top"},"ip":{"addr":"154.39.104.138","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://y42t.top/","date":"2026-07-31T00:10:41.111Z","timestamp":1785456641111,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"p40f.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 10:44:09 GMT","end":"Tue, 20 Oct 2026 10:44:08 GMT"},"fingerprint":{"sha1":"41:09:2C:3F:FC:9C:25:A9:DB:51:15:BB:D1:5A:D8:01:DC:38:AD:F8","sha256":"49:3B:29:C7:5B:B6:12:CF:84:14:5B:09:42:7D:EF:AA:61:29:EC:A1:D5:40:B5:64:5C:F1:33:AB:9B:E1:13:4D"}}},"request":{"raw":"GET /kc523-1/sponsor/sponsor_web_2.png?1781011825626 HTTP/1.1\r\nHost: y42t.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://y42t.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 31 Jul 2026 00:10:44 GMT\r\nContent-Type: image/png\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Tue, 30 Sep 2025 12:19:27 GMT\r\nVary: Accept-Encoding\r\nETag: W/\"68dbcacf-a049\"\r\nCache-Control: public, max-age=2592000, immutable\r\nAccess-Control-Allow-Origin: *\r\nX-Custom-Check: true\r\nContent-Encoding: gzip\r\nServer: Nginx\r\nL-Safe: 1785456644=ImVO6mGITWMACggqrQcdldqw9lowxQ1+VpRDuAKFwfMb9d30WLVBONutXSRguHOv4S8A2fwwrG4hosTExvfehVfTlImNbeMdeEGGOKfPxTnrTTeg4Ne14CSZz0II/fQW6e3NIBDsQDv0uQ0mehoMPQ1XrPiYIzMRuPb5r05527aZ2mNjo0YBVDxdIUBsWRdM\r\nAge: 499210\r\nL-VIA: l1=TqoDVanjjr6wMExF\r\nL-VERSION: 1784720560\r\nL-Request-Id: 3ec819fb5825262c0fe\r\nX-Cache-Status: HIT\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":41033,"size_decoded":41402,"mime_type":"image/png","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 428x169, components 3","md5":"66036fddf71ff69f45c146ca63883070","sha1":"4b3076a271d5042ef1b6cffc2ff49f421a819f08","sha256":"93c59a52fe04b0050dd4552a135177533afbe2dec54f10c516610b0dee857e0c","sha512":"29c2fc65e144e5d13c011e4897e0bdf771c7b4c249875eca4fa25589625696c71ec015e7e8ef3a5ee45f2a6ae9df3663da0bb736a6fb13c9628f0d0957827c71","ssdeep":"768:6eyNeN9huVfPKv0KhazApErcA6cFKSkS+pbTCx81TxUqIUgYWxDHc9wZGbYGniRl:6eXXh8KcQakywKK++tTCi6xD89HbxiD","tlshash":"b003f15c4c413e7777f19baae00ac84224d11fd4fdd5e3e61a8bc659a843a68bc2540e","first_seen":"2023-11-10T19:12:00Z","last_seen":"2026-07-31T12:36:18.740216Z","times_seen":2314,"resource_available":false,"data":null}},"time_used":3749,"timings":{"blocked":3433,"dns":0,"connect":0,"send":0,"wait":305,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-31","alert":"Sinkholed","trigger":"y42t.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-31","alert":"Phishing Block","trigger":"y42t.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"y42t.top/kc523-1/noData/cms_moren.png?1781011825626","fqdn":"y42t.top","domain":"y42t.top","tld":"top"},"ip":{"addr":"154.39.104.138","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://y42t.top/","date":"2026-07-31T00:10:41.116Z","timestamp":1785456641116,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"p40f.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 10:44:09 GMT","end":"Tue, 20 Oct 2026 10:44:08 GMT"},"fingerprint":{"sha1":"41:09:2C:3F:FC:9C:25:A9:DB:51:15:BB:D1:5A:D8:01:DC:38:AD:F8","sha256":"49:3B:29:C7:5B:B6:12:CF:84:14:5B:09:42:7D:EF:AA:61:29:EC:A1:D5:40:B5:64:5C:F1:33:AB:9B:E1:13:4D"}}},"request":{"raw":"GET /kc523-1/noData/cms_moren.png?1781011825626 HTTP/1.1\r\nHost: y42t.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://y42t.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 31 Jul 2026 00:10:45 GMT\r\nContent-Type: image/png\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Tue, 30 Sep 2025 12:19:27 GMT\r\nVary: Accept-Encoding\r\nETag: W/\"68dbcacf-4d14\"\r\nCache-Control: public, max-age=2592000, immutable\r\nAccess-Control-Allow-Origin: *\r\nX-Custom-Check: true\r\nContent-Encoding: gzip\r\nServer: Nginx\r\nL-Safe: 1785456645=3m/UQghxNGW3gPChBH0qwAw5jhMnk/bL7ljEsAqUNfL2w1i0HQREe2rEb4k+hpOpl+mNkeotUTn7rI4RELPi496PFmfq0fH/qKdAcrqsvLVi0CluaNffWUzPkudCch2/uigQXMAy3JVAvXsWZA3UDGCysooGP/loOgkjhRbwnpUqbTZcGQok3Gq63qCfb31c\r\nAge: 499210\r\nL-VIA: l1=TqoDVanjjr6wMExF\r\nL-VERSION: 1784720560\r\nL-Request-Id: 3ec119fb5825580c2c4\r\nX-Cache-Status: HIT\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":19732,"size_decoded":20464,"mime_type":"image/png","magic":"PNG image data, 215 x 214, 8-bit/color RGBA, non-interlaced","md5":"f3c825751a70d4aad8da2ce57f76acf6","sha1":"732da443668abb03a79a70df2d0ea8d801158655","sha256":"c395f4c1941459ef620f6df95fabd39f9ac98e03f6a389886bf224157557ce41","sha512":"a3b3fa2a216c10d331fea4771b916825d0605b94e21ac242d152d7c5e4b984cf3baad7a3fd071dde3432162037514d756cce1a0f699baf3dc98eaf75483c91b0","ssdeep":"384:64pTwcIHFqFpIlD8SqhwFLW/na2PvyQXSOKvOi58KUezsTT5ZOon:67XlROe8WvOAPHQv","tlshash":"a592d0d8abcb6705bb132b43b941a3558e0dfd6a130b9bb131782805ee16151e8d7e3f","first_seen":"2023-11-10T19:12:00Z","last_seen":"2026-07-31T12:36:18.668976Z","times_seen":2237,"resource_available":false,"data":null}},"time_used":4556,"timings":{"blocked":4242,"dns":0,"connect":0,"send":0,"wait":311,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-31","alert":"Sinkholed","trigger":"y42t.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-31","alert":"Phishing Block","trigger":"y42t.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"photo.365live88.com/img/fb/team/15bbcc36cb4b4acabec992688e8351e9?win007=sell","fqdn":"photo.365live88.com","domain":"365live88.com","tld":"com"},"ip":{"addr":"154.41.93.240","port":443,"asn":174,"as":"COGENT-174","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://y42t.top/","date":"2026-07-31T00:10:42.525Z","timestamp":1785456642525,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"photo.365live88.com","organization":""},"issuer":{"commonName":"Encryption Everywhere DV TLS CA - G2","organization":"DigiCert Inc"},"validity":{"start":"Sat, 01 Nov 2025 00:00:00 GMT","end":"Sat, 31 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"45:76:43:9C:31:C5:89:A6:99:FD:9B:D8:6C:A9:3A:E6:2F:D6:E9:80","sha256":"73:27:CF:D8:8D:AC:95:46:00:5D:67:05:1E:70:22:3E:17:F0:94:78:CD:6F:A6:9C:C8:5F:B5:3B:75:60:3D:C8"}}},"request":{"raw":"GET /img/fb/team/15bbcc36cb4b4acabec992688e8351e9?win007=sell HTTP/1.1\r\nHost: photo.365live88.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://y42t.top/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: openresty\r\nDate: Fri, 31 Jul 2026 00:10:47 GMT\r\nContent-Type: image/png\r\nContent-Length: 21816\r\nConnection: keep-alive\r\nAccept-Ranges: bytes\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Expose-Headers: X-Log, X-Reqid\r\nAccess-Control-Max-Age: 2592000\r\nAge: 31243\r\nCache-Control: public, max-age=31536000\r\nContent-Disposition: inline; filename=\"15bbcc36cb4b4acabec992688e8351e9\"; filename*=utf-8''15bbcc36cb4b4acabec992688e8351e9\r\nContent-Md5: PnMfYnNmBVBeM4xvsr3cGw==\r\nContent-Transfer-Encoding: binary\r\nEtag: \"FpZH-gawjfiVsdg3gw5ILATyjrhE\"\r\nLast-Modified: Fri, 24 Jul 2026 19:50:49 GMT\r\nX-Log: X-Log\r\nX-M-Log: QNM:wldsg121;QNM3\r\nX-M-Reqid: eQ5ac1SUh\r\nX-Qiniu-Zone: as0\r\nX-Qnm-Cache: Hit\r\nX-Reqid: 7-wAAACrshvyGscY\r\nX-Svr: IO\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":21816,"size_decoded":22572,"mime_type":"image/png","magic":"PNG image data, 148 x 148, 8-bit/color RGBA, non-interlaced","md5":"3e731f62736605505e338c6fb2bddc1b","sha1":"9647fa06b08df895b1d837830e482c04f28eb844","sha256":"8736d8adc44c335db4ad8c2255d01b393469f774871c55f961fb5301e1a64fb6","sha512":"00e491cf2372aa17c03859390d49e58e72eeb44fc8248a1a816b715a2d0bcb9e8fdc2503a4bdd1d420cd41c82f2aa43368e08d712db3d5a7a2305287f9f0e24f","ssdeep":"384:FFIgILkawV2NYtJ+/G30xGIodOiuiqTVdnrZloE42H8rR9en:D1a1YzQxPodrqTVJh42H/","tlshash":"69a2e1e14fa0ac97981f1c95b855449633a363de06532a39e6a01c90c67cf29a39f2d0","first_seen":"2023-07-15T11:13:40Z","last_seen":"2026-07-31T12:41:15.219925Z","times_seen":113,"resource_available":false,"data":null}},"time_used":5465,"timings":{"blocked":5213,"dns":0,"connect":0,"send":0,"wait":247,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"y42t.top/img/LOTTERY.4e81790a.png","fqdn":"y42t.top","domain":"y42t.top","tld":"top"},"ip":{"addr":"154.39.104.138","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://y42t.top/","date":"2026-07-31T00:10:42.768Z","timestamp":1785456642768,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"p40f.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 10:44:09 GMT","end":"Tue, 20 Oct 2026 10:44:08 GMT"},"fingerprint":{"sha1":"41:09:2C:3F:FC:9C:25:A9:DB:51:15:BB:D1:5A:D8:01:DC:38:AD:F8","sha256":"49:3B:29:C7:5B:B6:12:CF:84:14:5B:09:42:7D:EF:AA:61:29:EC:A1:D5:40:B5:64:5C:F1:33:AB:9B:E1:13:4D"}}},"request":{"raw":"GET /img/LOTTERY.4e81790a.png HTTP/1.1\r\nHost: y42t.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://y42t.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 31 Jul 2026 00:10:45 GMT\r\nContent-Type: image/png\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Tue, 09 Jun 2026 13:37:11 GMT\r\nVary: Accept-Encoding\r\nETag: W/\"6a281707-e929\"\r\nCache-Control: public, max-age=2592000, immutable\r\nAccess-Control-Allow-Origin: *\r\nX-Custom-Check: true\r\nContent-Encoding: gzip\r\nServer: Nginx\r\nL-Safe: 1785456645=3m/UQghxNGW3gPChBH0qwAw5jhMnk/bL7ljEsAqUNfL2w1i0HQREe2rEb4k+hpOpl+mNkeotUTn7rI4RELPi496PFmfq0fH/qKdAcrqsvLVi0CluaNffWUzPkudCch2/uigQXMAy3JVAvXsWZA3UDGCysooGP/loOgkjhRbwnpUqbTZcGQok3Gq63qCfb31c\r\nAge: 499190\r\nL-VIA: l1=TqoDVanjjr6wMExF\r\nL-VERSION: 1784720560\r\nL-Request-Id: 3ec519fb58254b2c078\r\nX-Cache-Status: HIT\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":59689,"size_decoded":60431,"mime_type":"image/png","magic":"PNG image data, 582 x 307, 8-bit colormap, non-interlaced","md5":"f86c9671c7aed55212fe0eb5219a664d","sha1":"6e765dfb0ce3c646d8c808940071554e78e7d409","sha256":"4ba3fff550a17eff9585d6acbc4a96bd515149510f6a8bb7638985fb4b41a181","sha512":"706aa66f138a3459eaf34f5b7a8ffed3dfacecec6adf14a2e83f1149143cfbb059f97aaaac2032587a80c0e30c62e5b46b07b4dc6f3cf5925e6e1db2a8ed45d6","ssdeep":"1536:Cyp1EBaRnsFt9ZXZj0wEYsRvqm1waPbZsY:CLB+sFtzXN0w2ym1fFsY","tlshash":"914302f36beb0bc5b07adbcf4ed354f0067a71496b42dcd44f4120e61ea6199bac420a","first_seen":"2023-11-10T19:12:00Z","last_seen":"2026-07-31T12:41:15.217056Z","times_seen":2291,"resource_available":false,"data":null}},"time_used":2704,"timings":{"blocked":2384,"dns":0,"connect":0,"send":0,"wait":305,"receive":15,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-31","alert":"Phishing Block","trigger":"y42t.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-31","alert":"Sinkholed","trigger":"y42t.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"y42t.top/jumpto/img/https://rcf-img-hk.gasdg646fs224cn.com/202503/_webp_size649x578_b0506ddf-52e0-4b2d-8f59-16f795505312.png","fqdn":"y42t.top","domain":"y42t.top","tld":"top"},"ip":{"addr":"154.39.104.138","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://y42t.top/","date":"2026-07-31T00:10:42.863Z","timestamp":1785456642863,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"p40f.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 10:44:09 GMT","end":"Tue, 20 Oct 2026 10:44:08 GMT"},"fingerprint":{"sha1":"41:09:2C:3F:FC:9C:25:A9:DB:51:15:BB:D1:5A:D8:01:DC:38:AD:F8","sha256":"49:3B:29:C7:5B:B6:12:CF:84:14:5B:09:42:7D:EF:AA:61:29:EC:A1:D5:40:B5:64:5C:F1:33:AB:9B:E1:13:4D"}}},"request":{"raw":"GET /jumpto/img/https://rcf-img-hk.gasdg646fs224cn.com/202503/_webp_size649x578_b0506ddf-52e0-4b2d-8f59-16f795505312.png HTTP/1.1\r\nHost: y42t.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://y42t.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 31 Jul 2026 00:10:46 GMT\r\nContent-Type: image/webp\r\nContent-Length: 47302\r\nConnection: keep-alive\r\netag: \"69bae2574526d5faae2cab421295d6fb\"\r\nLast-Modified: Sat, 06 Dec 2025 06:22:22 GMT\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nAge: 499203\r\ncf-cache-status: HIT\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qtBXdE6qE2PyPDqZ6BW7JnRRfL2VQBXQIqddSikiYF%2BBgLsTmXyVbiOlPAPfGOnf5HvZQjpvGgtmimknjLdxLGmzcTNYZJOK6Q2eNNab%2Fp5khrnDGRXX3TkYe8evk1stgRQ%2BNFfm0SP2HlQDCKVpnTI%3D\"}]}\r\nCF-RAY: a208c6341f3de2f1-HKG\r\nalt-svc: h3=\":443\"; ma=86400\r\nCache-Control: public, max-age=2592000, immutable, public, max-age=2592000, immutable\r\nAccess-Control-Allow-Origin: *\r\nX-Custom-Check: true\r\nServer: Nginx\r\nL-Safe: 1785456646=EMBgc894QAdP6slbLJsiNGYFcXUmrvQIWKh5BYYK6Qj4fqRyTGb/Xbwkd279GHpNIUNxmrA5BLARmTn3BBDanv5J4PcdpRxfVwUjHlMDvqiZAET3U1COvNHjyZWcIPWzQSTxYljkuIh13EY2sibpSpVrTubzP7vT5r508KhivSQ1oVznby71Ayyz5cTYVqWG\r\nL-VIA: l1=TqoDVanjjr6wMExF\r\nL-VERSION: 1784720560\r\nL-Request-Id: 3ec119fb5825afec2cf\r\nX-Cache-Status: HIT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":47302,"size_decoded":48455,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"69bae2574526d5faae2cab421295d6fb","sha1":"9fbb080feb70d0129b259ee1836a307e2f43a7a7","sha256":"24dc34c37f47f8b318cd186472dfb0aba29bc601bb589497d9131322abf3f12f","sha512":"b6b43f6f2a27bf41323dab6e956cf9e581be28a51078e3ec6568b79a145135dba1644d3e3b8e0a5bb8e7c8fdc132ea34c5002e2c81fa15a9e29e581767b9ad00","ssdeep":"768:3ZnM3sRPLsymAdeJz26xNEyuGpVt/5NS6xUdP8Hx3JZa1pASN7ZWjcTH:JnusBypuGLZnStl8HcjASN7ZW","tlshash":"6223f2c4856c2f711255d3f8ffa06b48c6783940bff8afb69f360a65186d2d2c90a44e","first_seen":"2026-04-24T23:10:16.805393Z","last_seen":"2026-07-31T12:36:18.786847Z","times_seen":900,"resource_available":false,"data":null}},"time_used":4200,"timings":{"blocked":3877,"dns":0,"connect":0,"send":0,"wait":311,"receive":12,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-31","alert":"Phishing Block","trigger":"y42t.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-31","alert":"Sinkholed","trigger":"y42t.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"y42t.top/jumpto/img/https://rcf-img-hk.gasdg646fs224cn.com/gpmaster/_webp_size328x442_b1b5acd8-3851-4b06-8e10-d549f7f09d1b.png","fqdn":"y42t.top","domain":"y42t.top","tld":"top"},"ip":{"addr":"154.39.104.138","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://y42t.top/","date":"2026-07-31T00:10:42.880Z","timestamp":1785456642880,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"p40f.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 10:44:09 GMT","end":"Tue, 20 Oct 2026 10:44:08 GMT"},"fingerprint":{"sha1":"41:09:2C:3F:FC:9C:25:A9:DB:51:15:BB:D1:5A:D8:01:DC:38:AD:F8","sha256":"49:3B:29:C7:5B:B6:12:CF:84:14:5B:09:42:7D:EF:AA:61:29:EC:A1:D5:40:B5:64:5C:F1:33:AB:9B:E1:13:4D"}}},"request":{"raw":"GET /jumpto/img/https://rcf-img-hk.gasdg646fs224cn.com/gpmaster/_webp_size328x442_b1b5acd8-3851-4b06-8e10-d549f7f09d1b.png HTTP/1.1\r\nHost: y42t.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://y42t.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 31 Jul 2026 00:10:48 GMT\r\nContent-Type: image/webp\r\nContent-Length: 15438\r\nConnection: keep-alive\r\netag: \"a1349a63a048224ad8e87814e87bb73e\"\r\nLast-Modified: Tue, 02 Dec 2025 14:12:01 GMT\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DLarzEAUtzhaunK0088jQBxvqMF8mLTdwsMbuzJekl%2FiEGSHYUCT6OZ3U6FA%2BZjpuDtcSTpozY3rO1SgZAMTImFz1Y02iG9ndGW5or2%2F%2F%2F48c3RtgNY2akqfs0XWAxAtJ%2FpDh4bC%2F3UgY5GJarKORjY%3D\"}]}\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nAge: 499200\r\ncf-cache-status: HIT\r\nCF-RAY: a208c6523e0484fa-HKG\r\nalt-svc: h3=\":443\"; ma=86400\r\nCache-Control: public, max-age=2592000, immutable, public, max-age=2592000, immutable\r\nAccess-Control-Allow-Origin: *\r\nX-Custom-Check: true\r\nServer: Nginx\r\nL-Safe: 1785456648=Z7fxofmZ9hv3/XQ5t4frSKj942TDDEVXgFNewEpAWWZeSSGmfBEq5p68Wd3/3y67+UP5RiFuBM1NHhhqN9RGX44j5RrNYq5QVDzdwAN37T4mRc2TwqScY+zJAmvwDFiSdBQZRKjiyZLBbVL6KisnflY7oB9woowAE/HfHmrE5yoCQfCsCgc03AQt5IVZ52aB\r\nL-VIA: l1=TqoDVanjjr6wMExF\r\nL-VERSION: 1784720560\r\nL-Request-Id: 3ec119fb5825f48c2d9\r\nX-Cache-Status: HIT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":15438,"size_decoded":16599,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"a1349a63a048224ad8e87814e87bb73e","sha1":"0e04bbeddf14327f501a7d2c6df6e05795879d8e","sha256":"07dea36c21de6e1a3b038a16fee3fe652275f33b1757c12ef30396e4dcabd2e8","sha512":"6e92d8f202db95f03407b4594b217cc15dd52e187fd69f779d45407cd9644095929c9a657b49fc030e7a2f4b1dc1f92cecddbdf72ceddba23cf33b759b782c11","ssdeep":"384:8033ZoVI43DY5WxPnFK9OMJuFUzYc4Ig30k8E2:PobD3xtwn+jc4IgV8E","tlshash":"2d62d0402ecaf0713ba1781ebb7df58804b89937b45a724758b70471b66d4ae13964f3","first_seen":"2026-04-24T23:10:16.871482Z","last_seen":"2026-07-31T12:41:47.049032Z","times_seen":1009,"resource_available":false,"data":null}},"time_used":5284,"timings":{"blocked":4973,"dns":0,"connect":0,"send":0,"wait":310,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-31","alert":"Sinkholed","trigger":"y42t.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-31","alert":"Phishing Block","trigger":"y42t.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"y42t.top/kc523-1/sponsor/sponsor.json?1781011825626","fqdn":"y42t.top","domain":"y42t.top","tld":"top"},"ip":{"addr":"154.39.104.138","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://y42t.top/","date":"2026-07-31T00:10:41.050Z","timestamp":1785456641050,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"p40f.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 10:44:09 GMT","end":"Tue, 20 Oct 2026 10:44:08 GMT"},"fingerprint":{"sha1":"41:09:2C:3F:FC:9C:25:A9:DB:51:15:BB:D1:5A:D8:01:DC:38:AD:F8","sha256":"49:3B:29:C7:5B:B6:12:CF:84:14:5B:09:42:7D:EF:AA:61:29:EC:A1:D5:40:B5:64:5C:F1:33:AB:9B:E1:13:4D"}}},"request":{"raw":"GET /kc523-1/sponsor/sponsor.json?1781011825626 HTTP/1.1\r\nHost: y42t.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://y42t.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 31 Jul 2026 00:10:41 GMT\r\nContent-Type: application/json\r\nContent-Length: 646\r\nConnection: keep-alive\r\nLast-Modified: Tue, 30 Sep 2025 12:19:27 GMT\r\nETag: \"68dbcacf-286\"\r\nAccess-Control-Allow-Origin: *\r\nX-Custom-Check: true\r\nServer: Nginx\r\nL-Safe: 1785456641=gE780zdPNeqfjPR58ntui758h0rpjLBJh/P/VwEb9QgBdmX5XoCvf3XKS4ubqYQ4aAZoEOOBDBlTTobn+2eZbZ0U5rmjaj2YBZiCmX90g8Si+D3mrq6vSJjZwkQXhlFZx6UYXbz//HB3stXeGCYUIUvqR8AbEmVqeF09wWmA11wJgMs9cyGCHyv3ab/jWW+R\r\nL-VIA: l1=TqoDVanjjr6wMExF\r\nL-VERSION: 1784720560\r\nL-Request-Id: 3ec819fb5824523c0f2\r\nX-Cache-Status: BYPASS\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":646,"size_decoded":1261,"mime_type":"application/json","magic":"JSON text data","md5":"10d2161de8cf99c474812f4c43645a26","sha1":"71884ef7281cdcb5084088f16d4550ce8790e634","sha256":"bb02fd7438bb49dd4decb6f76a71f11e93355332fd9f965d6f9f13bb8175aeca","sha512":"bf0fd1232309fcc5582d5c42644e1c7b4b8d235b1066e988ff55e0dd94a956f89742401f00c2d904359041c8e0c2bac8e9316252fab60db5eb0a3b4c935172f0","ssdeep":"","tlshash":"d8f0f44ad8b25b93211fb57c58cd050470294a8f0eccaac4baac987c4f598ddd1e839e","first_seen":"2023-06-16T04:51:50Z","last_seen":"2026-07-31T12:41:47.01013Z","times_seen":2722,"resource_available":false,"data":null}},"time_used":423,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":423,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-31","alert":"Sinkholed","trigger":"y42t.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-31","alert":"Phishing Block","trigger":"y42t.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"y42t.top/img/pay.8f35ebe1.png","fqdn":"y42t.top","domain":"y42t.top","tld":"top"},"ip":{"addr":"154.39.104.138","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://y42t.top/","date":"2026-07-31T00:10:41.081Z","timestamp":1785456641081,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"p40f.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 10:44:09 GMT","end":"Tue, 20 Oct 2026 10:44:08 GMT"},"fingerprint":{"sha1":"41:09:2C:3F:FC:9C:25:A9:DB:51:15:BB:D1:5A:D8:01:DC:38:AD:F8","sha256":"49:3B:29:C7:5B:B6:12:CF:84:14:5B:09:42:7D:EF:AA:61:29:EC:A1:D5:40:B5:64:5C:F1:33:AB:9B:E1:13:4D"}}},"request":{"raw":"GET /img/pay.8f35ebe1.png HTTP/1.1\r\nHost: y42t.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://y42t.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 31 Jul 2026 00:10:44 GMT\r\nContent-Type: image/png\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Tue, 09 Jun 2026 13:37:11 GMT\r\nVary: Accept-Encoding\r\nETag: W/\"6a281707-154d\"\r\nCache-Control: public, max-age=2592000, immutable\r\nAccess-Control-Allow-Origin: *\r\nX-Custom-Check: true\r\nContent-Encoding: gzip\r\nServer: Nginx\r\nL-Safe: 1785456644=ImVO6mGITWMACggqrQcdldqw9lowxQ1+VpRDuAKFwfMb9d30WLVBONutXSRguHOv4S8A2fwwrG4hosTExvfehVfTlImNbeMdeEGGOKfPxTnrTTeg4Ne14CSZz0II/fQW6e3NIBDsQDv0uQ0mehoMPQ1XrPiYIzMRuPb5r05527aZ2mNjo0YBVDxdIUBsWRdM\r\nAge: 499193\r\nL-VIA: l1=TqoDVanjjr6wMExF\r\nL-VERSION: 1784720560\r\nL-Request-Id: 3ec219fb58250e1ba25\r\nX-Cache-Status: HIT\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5453,"size_decoded":6146,"mime_type":"image/png","magic":"PNG image data, 492 x 132, 4-bit colormap, non-interlaced","md5":"05d444b76263f6958a37ac82e45daa67","sha1":"a067d3a654da1ec4c51d8f049aabaa112183e355","sha256":"49166910b376f5487f30174e60fcf13aaaca9620ef1aa58cfb2c94a8c111ea8d","sha512":"7d276d57b068ec4a0125512e0781c501a96bf6c30b30304d247251190c6421a9ed7a03ec208a590d19d9a1183e3837b06d141bddd99abb7b0ee4e2a1ba28b28b","ssdeep":"96:u9g9Yof8+keuD1Kai/MXG5BHMsDiCNPFH/qX4iWXnqvcIzDRHSVyl07TrOKCm0R4:u9g9rJuYai//7FiSXnqvNYGmrOKcPwzp","tlshash":"74b18e749d6efb2a26b315c30d7499c21ea45c9e0d94f1c2244776963c732de3270985","first_seen":"2025-08-29T11:05:53.301829Z","last_seen":"2026-07-31T12:41:47.183024Z","times_seen":2360,"resource_available":false,"data":null}},"time_used":3385,"timings":{"blocked":3092,"dns":0,"connect":0,"send":0,"wait":293,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-31","alert":"Phishing Block","trigger":"y42t.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-31","alert":"Sinkholed","trigger":"y42t.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"photo.365live88.com/img/fb/team/55ca8c73e28a4a8085b2712fdd47c374?win007=sell","fqdn":"photo.365live88.com","domain":"365live88.com","tld":"com"},"ip":{"addr":"154.41.93.240","port":443,"asn":174,"as":"COGENT-174","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://y42t.top/","date":"2026-07-31T00:10:42.560Z","timestamp":1785456642560,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"photo.365live88.com","organization":""},"issuer":{"commonName":"Encryption Everywhere DV TLS CA - G2","organization":"DigiCert Inc"},"validity":{"start":"Sat, 01 Nov 2025 00:00:00 GMT","end":"Sat, 31 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"45:76:43:9C:31:C5:89:A6:99:FD:9B:D8:6C:A9:3A:E6:2F:D6:E9:80","sha256":"73:27:CF:D8:8D:AC:95:46:00:5D:67:05:1E:70:22:3E:17:F0:94:78:CD:6F:A6:9C:C8:5F:B5:3B:75:60:3D:C8"}}},"request":{"raw":"GET /img/fb/team/55ca8c73e28a4a8085b2712fdd47c374?win007=sell HTTP/1.1\r\nHost: photo.365live88.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://y42t.top/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: openresty\r\nDate: Fri, 31 Jul 2026 00:10:50 GMT\r\nContent-Type: image/png\r\nContent-Length: 21217\r\nConnection: keep-alive\r\nAccept-Ranges: bytes\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Expose-Headers: X-Log, X-Reqid\r\nAccess-Control-Max-Age: 2592000\r\nAge: 19536\r\nCache-Control: public, max-age=31536000\r\nContent-Disposition: inline; filename=\"55ca8c73e28a4a8085b2712fdd47c374\"; filename*=utf-8''55ca8c73e28a4a8085b2712fdd47c374\r\nContent-Md5: UZ9MI8eExD7Gboa9xm+dWw==\r\nContent-Transfer-Encoding: binary\r\nEtag: \"FpRU3WgclXqcif2b5fEvRCNytRSc\"\r\nLast-Modified: Sat, 25 Jul 2026 19:17:52 GMT\r\nX-Log: X-Log\r\nX-M-Log: QNM:wldsg121;QNM3\r\nX-M-Reqid: SDsmj9FlS\r\nX-Qiniu-Zone: as0\r\nX-Qnm-Cache: Hit\r\nX-Reqid: IWsAAAAGwYCYJccY\r\nX-Svr: IO\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":21217,"size_decoded":21973,"mime_type":"image/png","magic":"PNG image data, 180 x 180, 8-bit/color RGBA, non-interlaced","md5":"519f4c23c784c43ec66e86bdc66f9d5b","sha1":"9454dd681c957a9c89fd9be5f12f442372b5149c","sha256":"e85ce7370083a816cb7e4154e51fac10d1a3683b9d78c7e591cf38053f0e12be","sha512":"a5099e1c79b7a895a242a527dc9bfd1e30768518c13abd2b8caa1dd560b1cebb9aba9d5d74dbf21de039d18935c4de910cf17a0ecb9c75bffa3886275762c9ac","ssdeep":"384:YXkHNZhf/KgsHUh1sXdS1KLdzgYrV63XdgbgMB9JJiC7ewxAGRylv2pTAMUs3F2u:YXkHNnHq4sXdqKpszndgbzrJ5eIAGEl0","tlshash":"a892e19a61f3c40619d7b06acbc35a6c256dd888d363f32bd8145ccf29715b966fc413","first_seen":"2025-08-04T09:17:36.598774Z","last_seen":"2026-07-31T12:41:47.020946Z","times_seen":41,"resource_available":false,"data":null}},"time_used":8234,"timings":{"blocked":7946,"dns":0,"connect":0,"send":0,"wait":277,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"y42t.top/config/initGeetest4.js","fqdn":"y42t.top","domain":"y42t.top","tld":"top"},"ip":{"addr":"154.39.104.138","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://y42t.top/","date":"2026-07-31T00:10:38.070Z","timestamp":1785456638070,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"p40f.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 10:44:09 GMT","end":"Tue, 20 Oct 2026 10:44:08 GMT"},"fingerprint":{"sha1":"41:09:2C:3F:FC:9C:25:A9:DB:51:15:BB:D1:5A:D8:01:DC:38:AD:F8","sha256":"49:3B:29:C7:5B:B6:12:CF:84:14:5B:09:42:7D:EF:AA:61:29:EC:A1:D5:40:B5:64:5C:F1:33:AB:9B:E1:13:4D"}}},"request":{"raw":"GET /config/initGeetest4.js HTTP/1.1\r\nHost: y42t.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://y42t.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 31 Jul 2026 00:10:38 GMT\r\nContent-Type: application/javascript\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Tue, 09 Jun 2026 13:37:11 GMT\r\nVary: Accept-Encoding\r\nETag: W/\"6a281707-3a7f\"\r\nCache-Control: public, max-age=31536000, immutable\r\nAccess-Control-Allow-Origin: *\r\nX-Custom-Check: true\r\nContent-Encoding: gzip\r\nServer: Nginx\r\nL-Safe: 1785456638=spfqpn6fY4y3fZtY0H6j2NTv25wzT5EQ1wj7koQgMzA0vWwFcicuKIMZGIdtkkNSeWsrScNU4RjxFciulIcuwtx/yeqqcUPJs5itgwA/VIspYspfgKoNZCVd5ReH5RnmI+JuS7nmr+CJ2mFhP15XL5m4D8uR3ysrOzNOMy1CJ0v2fRXCOc9HkLd5F/w10c5w\r\nL-VIA: l1=TqoDVanjjr6wMExF\r\nL-VERSION: 1784720560\r\nL-Request-Id: 3ec519fb5823908c068\r\nX-Cache-Status: BYPASS\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":14975,"size_decoded":5043,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"87855e19802d75b55afa7bcf3af515c1","sha1":"4af373375728a98d623f2299a68a91e150f2672e","sha256":"9ec8a5ef8c8ffe369dd1a5c4730dce6570c0d90955798c0be4ac04ef1c8f4baa","sha512":"3baa6d9e916abfb3d38b7ebb9372c5987e8f10534bb978383751c0094f8f5a3e764f9b8e44a73d9d4871cbaeca7e1939f0ffaf9499af5c4a71f64c3588167d85","ssdeep":"192:23aP8Ha0D+Nu5dq+EvNiqc4K25MB5VYaiQwSL4SScQVy8QRHIsGiz0iX9rES6Myy:2fe61w1iXKb2sMGUI+KQTwwHlB","tlshash":"00621d0d68f764534553b4388b9fb014b5388a53042cde41be9ce354afa843d9bbabdc","first_seen":"2026-02-16T20:32:40.162764Z","last_seen":"2026-07-31T12:41:47.14071Z","times_seen":1903,"resource_available":true,"data":null}},"time_used":329,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":329,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-31","alert":"Phishing Block","trigger":"y42t.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-31","alert":"Sinkholed","trigger":"y42t.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"y42t.top/css/46431.1781011881923.bc5df1d1.css","fqdn":"y42t.top","domain":"y42t.top","tld":"top"},"ip":{"addr":"154.39.104.138","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://y42t.top/","date":"2026-07-31T00:10:38.076Z","timestamp":1785456638076,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"p40f.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 10:44:09 GMT","end":"Tue, 20 Oct 2026 10:44:08 GMT"},"fingerprint":{"sha1":"41:09:2C:3F:FC:9C:25:A9:DB:51:15:BB:D1:5A:D8:01:DC:38:AD:F8","sha256":"49:3B:29:C7:5B:B6:12:CF:84:14:5B:09:42:7D:EF:AA:61:29:EC:A1:D5:40:B5:64:5C:F1:33:AB:9B:E1:13:4D"}}},"request":{"raw":"GET /css/46431.1781011881923.bc5df1d1.css HTTP/1.1\r\nHost: y42t.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://y42t.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 31 Jul 2026 00:10:38 GMT\r\nContent-Type: text/css\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Tue, 09 Jun 2026 13:37:11 GMT\r\nVary: Accept-Encoding\r\nETag: W/\"6a281707-552d2\"\r\nCache-Control: public, max-age=31536000, immutable\r\nAccess-Control-Allow-Origin: *\r\nX-Custom-Check: true\r\nContent-Encoding: gzip\r\nServer: Nginx\r\nL-Safe: 1785456638=spfqpn6fY4y3fZtY0H6j2NTv25wzT5EQ1wj7koQgMzA0vWwFcicuKIMZGIdtkkNSeWsrScNU4RjxFciulIcuwtx/yeqqcUPJs5itgwA/VIspYspfgKoNZCVd5ReH5RnmI+JuS7nmr+CJ2mFhP15XL5m4D8uR3ysrOzNOMy1CJ0v2fRXCOc9HkLd5F/w10c5w\r\nL-VIA: l1=TqoDVanjjr6wMExF\r\nL-VERSION: 1784720560\r\nL-Request-Id: 3ec919fb5823b59c085\r\nX-Cache-Status: BYPASS\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":348882,"size_decoded":87418,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"93f90e3733fc4af32a4ef4b34416c531","sha1":"bbe0b8f50268073f57565c76a1ac45b46f6c668e","sha256":"ce07d563179018eb4ccfcaf005a871d6baee3ad2ac4400e6e4768a2d35c5aa1e","sha512":"664e0ea56bcf02d80d7e148c8c999493c6501c5b8b6138fb0c5a05c0c0a9c3b5facac9d711aa2ce216eb335328be867456dbbbb2864f99531faffa5fb74eaade","ssdeep":"6144:z4+4r0H8Tu4+4r5cRlGuEQUQ929srbnpTP4T:z4+4ZTu4+4yaT","tlshash":"b774fa6caf1030ae15a7cb27b660f5199c36a443f9bfde9af3e53d580789a510623c13","first_seen":"2026-05-09T01:34:22.507922Z","last_seen":"2026-07-31T12:41:47.07856Z","times_seen":1066,"resource_available":false,"data":null}},"time_used":1624,"timings":{"blocked":-1,"dns":0,"connect":288,"send":0,"wait":436,"receive":601,"ssl":298},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-31","alert":"Sinkholed","trigger":"y42t.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-31","alert":"Phishing Block","trigger":"y42t.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"photo.365live88.com/img/fb/team/d68f4fe7181e47efa45d6dc1f7714072?win007=sell","fqdn":"photo.365live88.com","domain":"365live88.com","tld":"com"},"ip":{"addr":"154.41.93.240","port":443,"asn":174,"as":"COGENT-174","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://y42t.top/","date":"2026-07-31T00:10:42.504Z","timestamp":1785456642504,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"photo.365live88.com","organization":""},"issuer":{"commonName":"Encryption Everywhere DV TLS CA - G2","organization":"DigiCert Inc"},"validity":{"start":"Sat, 01 Nov 2025 00:00:00 GMT","end":"Sat, 31 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"45:76:43:9C:31:C5:89:A6:99:FD:9B:D8:6C:A9:3A:E6:2F:D6:E9:80","sha256":"73:27:CF:D8:8D:AC:95:46:00:5D:67:05:1E:70:22:3E:17:F0:94:78:CD:6F:A6:9C:C8:5F:B5:3B:75:60:3D:C8"}}},"request":{"raw":"GET /img/fb/team/d68f4fe7181e47efa45d6dc1f7714072?win007=sell HTTP/1.1\r\nHost: photo.365live88.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://y42t.top/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: openresty\r\nDate: Fri, 31 Jul 2026 00:10:46 GMT\r\nContent-Type: image/png\r\nContent-Length: 9595\r\nConnection: keep-alive\r\nAccept-Ranges: bytes\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Expose-Headers: X-Log, X-Reqid\r\nAccess-Control-Max-Age: 2592000\r\nAge: 52836\r\nCache-Control: public, max-age=31536000\r\nContent-Disposition: inline; filename=\"d68f4fe7181e47efa45d6dc1f7714072\"; filename*=utf-8''d68f4fe7181e47efa45d6dc1f7714072\r\nContent-Md5: ZpFYHrxxyqSTzggwX7foTg==\r\nContent-Transfer-Encoding: binary\r\nEtag: \"FshY7fdR_zPE3JFJaP3EIVFdVh_6\"\r\nLast-Modified: Fri, 24 Jul 2026 19:49:54 GMT\r\nX-Log: X-Log\r\nX-M-Log: QNM:wldsg119;QNM3\r\nX-M-Reqid: A4coHMX3o\r\nX-Qiniu-Zone: as0\r\nX-Qnm-Cache: Hit\r\nX-Reqid: dREAAABEzmlOB8cY\r\nX-Svr: IO\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":9595,"size_decoded":10350,"mime_type":"image/png","magic":"PNG image data, 180 x 180, 8-bit/color RGBA, non-interlaced","md5":"6691581ebc71caa493ce08305fb7e84e","sha1":"c858edf751ff33c4dc914968fdc421515d561ffa","sha256":"ae7017867f05f8eb664e3fb5599eb04f1ef7f6dd11358647a911fbf7e925ff2d","sha512":"168aa740f6f7d91881dbcb35ceb8b13570e2bf84f2a70e5d7fe3b83430f7940c247683323a004148196d7853e110490a8f6510e5db418e002edfdb4998b9961e","ssdeep":"192:o06MY30BgUKk7/Ky4LoeFNq73GYll45A8yzyCO+kEN6mOF:j6MGljW/KpLoeyjGYfv8+QfVP","tlshash":"26128dd33c7087b7d56333628139aa8224d0c3252531577b2c3f990a9ce567e2765d7e","first_seen":"2025-04-01T11:41:17.760055Z","last_seen":"2026-07-31T05:07:38.954264Z","times_seen":101,"resource_available":false,"data":null}},"time_used":3729,"timings":{"blocked":3456,"dns":0,"connect":0,"send":0,"wait":273,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"y42t.top/jumpto/img/https://rcf-img-hk.gasdg646fs224cn.com/202502/_webp_size328x442_27f7b303-88a3-4b2c-aaf9-2bc0106b5d62.png","fqdn":"y42t.top","domain":"y42t.top","tld":"top"},"ip":{"addr":"154.39.104.138","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://y42t.top/","date":"2026-07-31T00:10:42.855Z","timestamp":1785456642855,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"p40f.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 10:44:09 GMT","end":"Tue, 20 Oct 2026 10:44:08 GMT"},"fingerprint":{"sha1":"41:09:2C:3F:FC:9C:25:A9:DB:51:15:BB:D1:5A:D8:01:DC:38:AD:F8","sha256":"49:3B:29:C7:5B:B6:12:CF:84:14:5B:09:42:7D:EF:AA:61:29:EC:A1:D5:40:B5:64:5C:F1:33:AB:9B:E1:13:4D"}}},"request":{"raw":"GET /jumpto/img/https://rcf-img-hk.gasdg646fs224cn.com/202502/_webp_size328x442_27f7b303-88a3-4b2c-aaf9-2bc0106b5d62.png HTTP/1.1\r\nHost: y42t.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://y42t.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 31 Jul 2026 00:10:46 GMT\r\nContent-Type: image/webp\r\nContent-Length: 22168\r\nConnection: keep-alive\r\netag: \"04f8fffa2b2bc694cfc7174078dc54f1\"\r\nLast-Modified: Tue, 02 Dec 2025 14:17:04 GMT\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=82Oymkw325kiFCvsEEnLKfXAf2OVt2U6yT4FZz0NXmzw4KXTJuiXra4JXvRS3NCCzJmDx3J2itB5DhvclBpvf8zqjRmd0KGayLE2VeILP3KjXA%2Fgjv%2BpOYy1cBzKrrRAj4qgckBj%2FrgQZnHH5HaaKq8%3D\"}]}\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nAge: 499206\r\ncf-cache-status: HIT\r\nCF-RAY: a208c624ec6ddd5d-HKG\r\nalt-svc: h3=\":443\"; ma=86400\r\nCache-Control: public, max-age=2592000, immutable, public, max-age=2592000, immutable\r\nAccess-Control-Allow-Origin: *\r\nX-Custom-Check: true\r\nServer: Nginx\r\nL-Safe: 1785456646=EMBgc894QAdP6slbLJsiNGYFcXUmrvQIWKh5BYYK6Qj4fqRyTGb/Xbwkd279GHpNIUNxmrA5BLARmTn3BBDanv5J4PcdpRxfVwUjHlMDvqiZAET3U1COvNHjyZWcIPWzQSTxYljkuIh13EY2sibpSpVrTubzP7vT5r508KhivSQ1oVznby71Ayyz5cTYVqWG\r\nL-VIA: l1=TqoDVanjjr6wMExF\r\nL-VERSION: 1784720560\r\nL-Request-Id: 3ec119fb5825979c2c9\r\nX-Cache-Status: HIT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":22168,"size_decoded":23321,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"04f8fffa2b2bc694cfc7174078dc54f1","sha1":"ebfaea4761ce72105a95c0241ca87bf998a81338","sha256":"9900ec116e5fa903d64f9cfc38a6855fbc19c42bbad46c2690e2a50920abf030","sha512":"599c14c0dd6eabf0aacdf250e366075584c9086dfe71ab9f4cab55301c2a16efecba29d8dd9b14be7472766ebe2618de9559ca7a20fe3550e9ae564fe12aed05","ssdeep":"384:+Jq0Vf96zLIvbNpNUU2tDeOouLf5GslLXGdB3Rk1SV14Hdyd/2U3lMezZD:+Jq9ENuyOp5G0WdlRkQB12k","tlshash":"d1a2d14f988244a9ddeca9d6e2cf7a5c44f39cc012bea4668eb455c8b04f5163ef1059","first_seen":"2026-04-24T23:10:16.784958Z","last_seen":"2026-07-31T12:36:18.693029Z","times_seen":907,"resource_available":false,"data":null}},"time_used":3805,"timings":{"blocked":3488,"dns":0,"connect":0,"send":0,"wait":312,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-31","alert":"Phishing Block","trigger":"y42t.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-31","alert":"Sinkholed","trigger":"y42t.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"y42t.top/css/home.1781011881923.38488e2a.css","fqdn":"y42t.top","domain":"y42t.top","tld":"top"},"ip":{"addr":"154.39.104.138","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://y42t.top/","date":"2026-07-31T00:10:40.409Z","timestamp":1785456640409,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"p40f.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 10:44:09 GMT","end":"Tue, 20 Oct 2026 10:44:08 GMT"},"fingerprint":{"sha1":"41:09:2C:3F:FC:9C:25:A9:DB:51:15:BB:D1:5A:D8:01:DC:38:AD:F8","sha256":"49:3B:29:C7:5B:B6:12:CF:84:14:5B:09:42:7D:EF:AA:61:29:EC:A1:D5:40:B5:64:5C:F1:33:AB:9B:E1:13:4D"}}},"request":{"raw":"GET /css/home.1781011881923.38488e2a.css HTTP/1.1\r\nHost: y42t.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://y42t.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 31 Jul 2026 00:10:40 GMT\r\nContent-Type: text/css\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Tue, 09 Jun 2026 13:37:11 GMT\r\nVary: Accept-Encoding\r\nETag: W/\"6a281707-163b3\"\r\nCache-Control: public, max-age=31536000, immutable\r\nAccess-Control-Allow-Origin: *\r\nX-Custom-Check: true\r\nContent-Encoding: gzip\r\nServer: Nginx\r\nL-Safe: 1785456640=J17DXMEKXneKJsmf5PklOuZGVEbIRHZaaYUSHzFG19eRab1KmINu7b4QGpzoq2sF3cVtRbxKbhHDWucmkECQYVOT+r0RQLbYm93Pi9MruE4IbJTcWk38kbzXbpB01LsT5BD5K4g3/y6LaDWmYtWF9GJZSB/4ORv/PkgK01jvDx4dXhxfQiC6c5+CxYbaqcYc\r\nL-VIA: l1=TqoDVanjjr6wMExF\r\nL-VERSION: 1784720560\r\nL-Request-Id: 3ec519fb582422bc06e\r\nX-Cache-Status: BYPASS\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":91059,"size_decoded":33286,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (65528), with no line terminators","md5":"e74f15d7fec8fd844f3f07595fad8d36","sha1":"6b072e1cd8db98eabc09e33e5aaecec0fa1f385a","sha256":"e0a518c123b57bf6db4c12b779cb9414056760733b9d1d59ccd160d4ce0f08d2","sha512":"74d96ef5f45097c02d494946f446bb8a1d5fb7b89389543f9c278b5b93678e4b50e75ae534fa8ded5c2b377381acd47403d8baadcf01676bed44d997eae44d1b","ssdeep":"1536:fwRzO3RM7jufawS2d3a8WiLKbzGhbG9jpXdNdp9khN+sJ/:fBiuSJwLUK09j7p9khN+C/","tlshash":"20933b76a610253db427ca72baf05bd8b524c846d7634a3df2537e25cbc72f21236394","first_seen":"2026-06-12T19:29:57.241174Z","last_seen":"2026-07-31T12:41:47.043389Z","times_seen":916,"resource_available":false,"data":null}},"time_used":371,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":332,"receive":39,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-31","alert":"Sinkholed","trigger":"y42t.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-31","alert":"Phishing Block","trigger":"y42t.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"y42t.top/img/zeren.c0aa584f.png","fqdn":"y42t.top","domain":"y42t.top","tld":"top"},"ip":{"addr":"154.39.104.138","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://y42t.top/","date":"2026-07-31T00:10:41.082Z","timestamp":1785456641082,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"p40f.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 10:44:09 GMT","end":"Tue, 20 Oct 2026 10:44:08 GMT"},"fingerprint":{"sha1":"41:09:2C:3F:FC:9C:25:A9:DB:51:15:BB:D1:5A:D8:01:DC:38:AD:F8","sha256":"49:3B:29:C7:5B:B6:12:CF:84:14:5B:09:42:7D:EF:AA:61:29:EC:A1:D5:40:B5:64:5C:F1:33:AB:9B:E1:13:4D"}}},"request":{"raw":"GET /img/zeren.c0aa584f.png HTTP/1.1\r\nHost: y42t.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://y42t.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 31 Jul 2026 00:10:44 GMT\r\nContent-Type: image/png\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Tue, 09 Jun 2026 13:37:11 GMT\r\nVary: Accept-Encoding\r\nETag: W/\"6a281707-cfa\"\r\nCache-Control: public, max-age=2592000, immutable\r\nAccess-Control-Allow-Origin: *\r\nX-Custom-Check: true\r\nContent-Encoding: gzip\r\nServer: Nginx\r\nL-Safe: 1785456644=ImVO6mGITWMACggqrQcdldqw9lowxQ1+VpRDuAKFwfMb9d30WLVBONutXSRguHOv4S8A2fwwrG4hosTExvfehVfTlImNbeMdeEGGOKfPxTnrTTeg4Ne14CSZz0II/fQW6e3NIBDsQDv0uQ0mehoMPQ1XrPiYIzMRuPb5r05527aZ2mNjo0YBVDxdIUBsWRdM\r\nAge: 499193\r\nL-VIA: l1=TqoDVanjjr6wMExF\r\nL-VERSION: 1784720560\r\nL-Request-Id: 3ec519fb5825057c075\r\nX-Cache-Status: HIT\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3322,"size_decoded":4053,"mime_type":"image/png","magic":"PNG image data, 414 x 130, 4-bit colormap, non-interlaced","md5":"217588cbcd6216a09cac17953ae710b1","sha1":"de250755d284bb75dcee38ee45f2fc839987dcba","sha256":"24c2821b322d0c9087bcb0727dc0307311f6cfbb52af9f8a93308e48705f706e","sha512":"da190054ec0862c9927bb3bd928481459d53d4d778e9b2928c2507f2a34df5791d43adda750fcf184b767c1ba3a3f92e45dc57242a80869e253a9b37639abb4a","ssdeep":"","tlshash":"50616c01eb9130b8129c286701bd3fcda4c64d993d203d798d87b29bd6f970d288b123","first_seen":"2025-08-29T11:05:53.326961Z","last_seen":"2026-07-31T12:41:47.080576Z","times_seen":2350,"resource_available":false,"data":null}},"time_used":3255,"timings":{"blocked":2954,"dns":0,"connect":0,"send":0,"wait":301,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-31","alert":"Phishing Block","trigger":"y42t.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-31","alert":"Sinkholed","trigger":"y42t.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"photo.365live88.com/img/fb/team/e264f04174984986bc93825e6f188a52?win007=sell","fqdn":"photo.365live88.com","domain":"365live88.com","tld":"com"},"ip":{"addr":"154.41.93.240","port":443,"asn":174,"as":"COGENT-174","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://y42t.top/","date":"2026-07-31T00:10:42.552Z","timestamp":1785456642552,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"photo.365live88.com","organization":""},"issuer":{"commonName":"Encryption Everywhere DV TLS CA - G2","organization":"DigiCert Inc"},"validity":{"start":"Sat, 01 Nov 2025 00:00:00 GMT","end":"Sat, 31 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"45:76:43:9C:31:C5:89:A6:99:FD:9B:D8:6C:A9:3A:E6:2F:D6:E9:80","sha256":"73:27:CF:D8:8D:AC:95:46:00:5D:67:05:1E:70:22:3E:17:F0:94:78:CD:6F:A6:9C:C8:5F:B5:3B:75:60:3D:C8"}}},"request":{"raw":"GET /img/fb/team/e264f04174984986bc93825e6f188a52?win007=sell HTTP/1.1\r\nHost: photo.365live88.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://y42t.top/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: openresty\r\nDate: Fri, 31 Jul 2026 00:10:50 GMT\r\nContent-Type: image/png\r\nContent-Length: 4581\r\nConnection: keep-alive\r\nAccept-Ranges: bytes\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Expose-Headers: X-Log, X-Reqid\r\nAccess-Control-Max-Age: 2592000\r\nAge: 20439\r\nCache-Control: public, max-age=31536000\r\nContent-Disposition: inline; filename=\"e264f04174984986bc93825e6f188a52\"; filename*=utf-8''e264f04174984986bc93825e6f188a52\r\nContent-Md5: rJf+2YnPal4GAN81hkBlJQ==\r\nContent-Transfer-Encoding: binary\r\nEtag: \"FpvyNWKVUqxT2mynv0zViknxgVDV\"\r\nLast-Modified: Sat, 25 Jul 2026 19:17:47 GMT\r\nX-Log: X-Log\r\nX-M-Log: QNM:wldsg121;QNM3\r\nX-M-Reqid: PTWcF63x8\r\nX-Qiniu-Zone: as0\r\nX-Qnm-Cache: Hit\r\nX-Reqid: Oq0AAAAwnzjGJMcY\r\nX-Svr: IO\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4581,"size_decoded":5336,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 125x125, components 3","md5":"ac97fed989cf6a5e0600df3586406525","sha1":"9bf235629552ac53da6ca7bf4cd58a49f18150d5","sha256":"53acf84f045a5eaaff30570d07b1ee2e2c1fbf505720468bf4f94780ce8218c7","sha512":"e38c7ca1643393a30788e0e746c8742097f755c7529caed13b876df7cffddf17f3af836372353cf855cfc5008e64d0a723cfad63a4f944f065704f53edde7a34","ssdeep":"96:fbtQP2cDodn2yUXfPSIeEt9eMIC+X77EB5WIK1rh:x2xDe2yUvufm5kd","tlshash":"89917c4d62444b04dd27bf79b041d3adc81219087d35f79f03936a61322978b839ef22","first_seen":"2025-02-04T17:13:00.954306Z","last_seen":"2026-07-31T12:41:47.145718Z","times_seen":36,"resource_available":false,"data":null}},"time_used":7654,"timings":{"blocked":7404,"dns":0,"connect":0,"send":0,"wait":250,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"y42t.top/jumpto/img/https://rcf-img-hk.gasdg646fs224cn.com/202503/_webp_size649x578_d991353f-39ff-4552-be18-848fc3fabfb2.png","fqdn":"y42t.top","domain":"y42t.top","tld":"top"},"ip":{"addr":"154.39.104.138","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://y42t.top/","date":"2026-07-31T00:10:42.844Z","timestamp":1785456642844,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"p40f.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 10:44:09 GMT","end":"Tue, 20 Oct 2026 10:44:08 GMT"},"fingerprint":{"sha1":"41:09:2C:3F:FC:9C:25:A9:DB:51:15:BB:D1:5A:D8:01:DC:38:AD:F8","sha256":"49:3B:29:C7:5B:B6:12:CF:84:14:5B:09:42:7D:EF:AA:61:29:EC:A1:D5:40:B5:64:5C:F1:33:AB:9B:E1:13:4D"}}},"request":{"raw":"GET /jumpto/img/https://rcf-img-hk.gasdg646fs224cn.com/202503/_webp_size649x578_d991353f-39ff-4552-be18-848fc3fabfb2.png HTTP/1.1\r\nHost: y42t.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://y42t.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 31 Jul 2026 00:10:46 GMT\r\nContent-Type: image/webp\r\nContent-Length: 47886\r\nConnection: keep-alive\r\netag: \"ba0be3142a5adac8fdffb8c21b319dbb\"\r\nLast-Modified: Sat, 06 Dec 2025 06:30:09 GMT\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=R7XX1tpleaC18z7vhjjRoOttdpTjPsQORP%2BpPcfRaWAfENPi8S5qYwEOztXyyymQzD7BzE20Mql%2BJwX1qD%2BuWJxRKLjTCnXiTTwVWN8ECSnJndBtfjLUihTXJaS9%2FyrhZjF9%2B2t6IaB7cX%2FkFOf9gJk%3D\"}]}\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nAge: 499207\r\ncf-cache-status: HIT\r\nCF-RAY: a208c61d0bd8855c-HKG\r\nalt-svc: h3=\":443\"; ma=86400\r\nCache-Control: public, max-age=2592000, immutable, public, max-age=2592000, immutable\r\nAccess-Control-Allow-Origin: *\r\nX-Custom-Check: true\r\nServer: Nginx\r\nL-Safe: 1785456646=EMBgc894QAdP6slbLJsiNGYFcXUmrvQIWKh5BYYK6Qj4fqRyTGb/Xbwkd279GHpNIUNxmrA5BLARmTn3BBDanv5J4PcdpRxfVwUjHlMDvqiZAET3U1COvNHjyZWcIPWzQSTxYljkuIh13EY2sibpSpVrTubzP7vT5r508KhivSQ1oVznby71Ayyz5cTYVqWG\r\nL-VIA: l1=TqoDVanjjr6wMExF\r\nL-VERSION: 1784720560\r\nL-Request-Id: 3ec819fb582581bc105\r\nX-Cache-Status: HIT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":47886,"size_decoded":49045,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"ba0be3142a5adac8fdffb8c21b319dbb","sha1":"86a3734ad3716c5ecf67412f804a881fc9eaf4ca","sha256":"c3d9e9184bc542699b269037e068dd63803352fc1feaf06695ec888185f77bd0","sha512":"da43e90eef8c8f0aa5daf006910fe64bb579b9a0083df3c06b0f21c8f175d5dacc0b31009365ec391f0482e62f0b8449b98407b5a2423c20fc021aeead097296","ssdeep":"768:zpFTQF6ySs7gk0G8b/lE4qxGPlMt63JKVB/JmKjmz+0N2pqQg6yQV:fpyt7y/y4qoet63UbJRa+Fqwy4","tlshash":"ec2301147718d91012a1a6dbebcc1b6d6cae4947a4457a338d8770ccc7bdc9ee53ce82","first_seen":"2026-04-24T23:10:16.87696Z","last_seen":"2026-07-31T12:36:18.710708Z","times_seen":927,"resource_available":false,"data":null}},"time_used":3464,"timings":{"blocked":3159,"dns":0,"connect":0,"send":0,"wait":291,"receive":14,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-31","alert":"Sinkholed","trigger":"y42t.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-31","alert":"Phishing Block","trigger":"y42t.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"y42t.top/kc523-1/download/download_nav.png?1781011825626","fqdn":"y42t.top","domain":"y42t.top","tld":"top"},"ip":{"addr":"154.39.104.138","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://y42t.top/","date":"2026-07-31T00:10:45.675Z","timestamp":1785456645675,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"p40f.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 10:44:09 GMT","end":"Tue, 20 Oct 2026 10:44:08 GMT"},"fingerprint":{"sha1":"41:09:2C:3F:FC:9C:25:A9:DB:51:15:BB:D1:5A:D8:01:DC:38:AD:F8","sha256":"49:3B:29:C7:5B:B6:12:CF:84:14:5B:09:42:7D:EF:AA:61:29:EC:A1:D5:40:B5:64:5C:F1:33:AB:9B:E1:13:4D"}}},"request":{"raw":"GET /kc523-1/download/download_nav.png?1781011825626 HTTP/1.1\r\nHost: y42t.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://y42t.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 31 Jul 2026 00:10:45 GMT\r\nContent-Type: image/png\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Tue, 30 Sep 2025 12:19:27 GMT\r\nVary: Accept-Encoding\r\nETag: W/\"68dbcacf-2c05a\"\r\nCache-Control: public, max-age=2592000, immutable\r\nAccess-Control-Allow-Origin: *\r\nX-Custom-Check: true\r\nContent-Encoding: gzip\r\nServer: Nginx\r\nL-Safe: 1785456645=3m/UQghxNGW3gPChBH0qwAw5jhMnk/bL7ljEsAqUNfL2w1i0HQREe2rEb4k+hpOpl+mNkeotUTn7rI4RELPi496PFmfq0fH/qKdAcrqsvLVi0CluaNffWUzPkudCch2/uigQXMAy3JVAvXsWZA3UDGCysooGP/loOgkjhRbwnpUqbTZcGQok3Gq63qCfb31c\r\nAge: 499193\r\nL-VIA: l1=TqoDVanjjr6wMExF\r\nL-VERSION: 1784720560\r\nL-Request-Id: 3ec919fb58256bdc099\r\nX-Cache-Status: HIT\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":180314,"size_decoded":181092,"mime_type":"image/png","magic":"PNG image data, 820 x 600, 8-bit colormap, non-interlaced","md5":"87eaffe415a7eb41b7b4b8a868bb3b32","sha1":"575618003efbf8dc8ea781379aeff463cd0cc498","sha256":"4264138e0c015e52e3efa14e34ce9c52490316935b4667756ea631b96eca64dd","sha512":"2b06fbacffed6de2fb1d4a6db2cbd0d9c5c790f9b5a10a6dceac64ff69d300f20628c465a720102da9bd857c80be886ab0a37848929741d2bdef6eddbe0de8bf","ssdeep":"3072:iWlCRQlVF5aSW/mUdJSu3405ovKFzkRKcZjF9Km/mKg/hPFsQBhXRU0K:iWM2I405oCRncZHL/mKWBhXRU0K","tlshash":"0f0412cc23773ffbf8a0865a83fbc1599c3bfd0824e56722ea1662b5186053145a59cb","first_seen":"2023-11-10T19:12:00Z","last_seen":"2026-07-31T12:36:18.704934Z","times_seen":1999,"resource_available":false,"data":null}},"time_used":936,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":345,"receive":591,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-31","alert":"Phishing Block","trigger":"y42t.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-31","alert":"Sinkholed","trigger":"y42t.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"y42t.top/theme.config.ef94991b.js","fqdn":"y42t.top","domain":"y42t.top","tld":"top"},"ip":{"addr":"154.39.104.138","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://y42t.top/","date":"2026-07-31T00:10:38.081Z","timestamp":1785456638081,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"p40f.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 10:44:09 GMT","end":"Tue, 20 Oct 2026 10:44:08 GMT"},"fingerprint":{"sha1":"41:09:2C:3F:FC:9C:25:A9:DB:51:15:BB:D1:5A:D8:01:DC:38:AD:F8","sha256":"49:3B:29:C7:5B:B6:12:CF:84:14:5B:09:42:7D:EF:AA:61:29:EC:A1:D5:40:B5:64:5C:F1:33:AB:9B:E1:13:4D"}}},"request":{"raw":"GET /theme.config.ef94991b.js HTTP/1.1\r\nHost: y42t.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://y42t.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 31 Jul 2026 00:10:38 GMT\r\nContent-Type: application/javascript\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Tue, 09 Jun 2026 13:37:10 GMT\r\nVary: Accept-Encoding\r\nETag: W/\"6a281706-1a62f\"\r\nCache-Control: public, max-age=31536000, immutable\r\nAccess-Control-Allow-Origin: *\r\nX-Custom-Check: true\r\nContent-Encoding: gzip\r\nServer: Nginx\r\nL-Safe: 1785456638=spfqpn6fY4y3fZtY0H6j2NTv25wzT5EQ1wj7koQgMzA0vWwFcicuKIMZGIdtkkNSeWsrScNU4RjxFciulIcuwtx/yeqqcUPJs5itgwA/VIspYspfgKoNZCVd5ReH5RnmI+JuS7nmr+CJ2mFhP15XL5m4D8uR3ysrOzNOMy1CJ0v2fRXCOc9HkLd5F/w10c5w\r\nL-VIA: l1=TqoDVanjjr6wMExF\r\nL-VERSION: 1784720560\r\nL-Request-Id: 3ec119fb5823a41c2ad\r\nX-Cache-Status: BYPASS\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":108079,"size_decoded":16737,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (38260)","md5":"90d279a2980268d2835cec593c23d286","sha1":"4374bf6da5cbdf8f025434137487bda68077cddf","sha256":"1679f19badc24dea0edab376edfb8583714645e18f705fb849037af6cf0b3ff8","sha512":"362ec1b73cebe1ad224a5b745c9ceebf2b86301deab27e35d6517d499499328b34c24d76a72e5b348d623e64a4d17bfa0ab08d2aa012f02af23c6a72df51817f","ssdeep":"1536:D2JREobVmtlIRM4Sb2mcTa2mnzyJog9CcHWHA:qEtlGu1Jnz45HT","tlshash":"c0b3bb7ae20c963a6177a8bfb46ce111d12f9c0c9b1d5fdef03e60a25710669c831de9","first_seen":"2026-06-12T19:29:57.324936Z","last_seen":"2026-07-31T12:41:47.024068Z","times_seen":979,"resource_available":true,"data":null}},"time_used":707,"timings":{"blocked":279,"dns":0,"connect":0,"send":0,"wait":418,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-31","alert":"Sinkholed","trigger":"y42t.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-31","alert":"Phishing Block","trigger":"y42t.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"photo.365live88.com/img/fb/team/9c52c22fa5ae4e3ca968be526dfc28b0?win007=sell","fqdn":"photo.365live88.com","domain":"365live88.com","tld":"com"},"ip":{"addr":"154.41.93.240","port":443,"asn":174,"as":"COGENT-174","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://y42t.top/","date":"2026-07-31T00:10:42.526Z","timestamp":1785456642526,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"photo.365live88.com","organization":""},"issuer":{"commonName":"Encryption Everywhere DV TLS CA - G2","organization":"DigiCert Inc"},"validity":{"start":"Sat, 01 Nov 2025 00:00:00 GMT","end":"Sat, 31 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"45:76:43:9C:31:C5:89:A6:99:FD:9B:D8:6C:A9:3A:E6:2F:D6:E9:80","sha256":"73:27:CF:D8:8D:AC:95:46:00:5D:67:05:1E:70:22:3E:17:F0:94:78:CD:6F:A6:9C:C8:5F:B5:3B:75:60:3D:C8"}}},"request":{"raw":"GET /img/fb/team/9c52c22fa5ae4e3ca968be526dfc28b0?win007=sell HTTP/1.1\r\nHost: photo.365live88.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://y42t.top/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: openresty\r\nDate: Fri, 31 Jul 2026 00:10:48 GMT\r\nContent-Type: image/png\r\nContent-Length: 32181\r\nConnection: keep-alive\r\nAccept-Ranges: bytes\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Expose-Headers: X-Log, X-Reqid\r\nAccess-Control-Max-Age: 2592000\r\nAge: 29320\r\nCache-Control: public, max-age=31536000\r\nContent-Disposition: inline; filename=\"9c52c22fa5ae4e3ca968be526dfc28b0\"; filename*=utf-8''9c52c22fa5ae4e3ca968be526dfc28b0\r\nContent-Md5: W6NkzNR1FowUmgn2eQbFWw==\r\nContent-Transfer-Encoding: binary\r\nEtag: \"FgJNRlDaASdLQRfNyFgGsQilTFiY\"\r\nLast-Modified: Sat, 25 Jul 2026 19:15:16 GMT\r\nX-Log: X-Log\r\nX-M-Log: QNM:wldsg121;QNM3\r\nX-M-Reqid: eTnQgsohE\r\nX-Qiniu-Zone: as0\r\nX-Qnm-Cache: Hit\r\nX-Reqid: 7y8AAACrXhGyHMcY\r\nX-Svr: IO\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":32181,"size_decoded":32937,"mime_type":"image/png","magic":"PNG image data, 200 x 200, 8-bit/color RGBA, non-interlaced","md5":"5ba364ccd475168c149a09f67906c55b","sha1":"024d4650da01274b4117cdc85806b108a54c5898","sha256":"e7e543390643abc59f22f3299456b2f5bfbe42a8771c53076ffe48312ca25a6a","sha512":"af49898d5e7b2f568d7a2637207671923e407b83dd77eee06e385a67f6a7e464eefd407b7b364aa8d471652b24102bc8b17ad3853f8ba4edb7966849cf76f9c2","ssdeep":"768:YiQrIDbp9bvuCXj5mE64CE3FQEWViOiqymmBp/cvZKvZn:P+I/Tbv3165Hm//cRKvp","tlshash":"3fe2e13e1394435e99b90f4d25e9319262544ae59f327e1bef633b00c2a0674ebc653b","first_seen":"2025-08-21T21:50:00.113858Z","last_seen":"2026-07-31T12:41:15.245527Z","times_seen":93,"resource_available":false,"data":null}},"time_used":5714,"timings":{"blocked":5412,"dns":0,"connect":0,"send":0,"wait":278,"receive":24,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"photo.365live88.com/img/fb/team/75526d701d884f43970c643973b2bebe?win007=sell","fqdn":"photo.365live88.com","domain":"365live88.com","tld":"com"},"ip":{"addr":"154.41.93.240","port":443,"asn":174,"as":"COGENT-174","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://y42t.top/","date":"2026-07-31T00:10:42.542Z","timestamp":1785456642542,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"photo.365live88.com","organization":""},"issuer":{"commonName":"Encryption Everywhere DV TLS CA - G2","organization":"DigiCert Inc"},"validity":{"start":"Sat, 01 Nov 2025 00:00:00 GMT","end":"Sat, 31 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"45:76:43:9C:31:C5:89:A6:99:FD:9B:D8:6C:A9:3A:E6:2F:D6:E9:80","sha256":"73:27:CF:D8:8D:AC:95:46:00:5D:67:05:1E:70:22:3E:17:F0:94:78:CD:6F:A6:9C:C8:5F:B5:3B:75:60:3D:C8"}}},"request":{"raw":"GET /img/fb/team/75526d701d884f43970c643973b2bebe?win007=sell HTTP/1.1\r\nHost: photo.365live88.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://y42t.top/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: openresty\r\nDate: Fri, 31 Jul 2026 00:10:49 GMT\r\nContent-Type: image/png\r\nContent-Length: 18374\r\nConnection: keep-alive\r\nAccept-Ranges: bytes\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Expose-Headers: X-Log, X-Reqid\r\nAccess-Control-Max-Age: 2592000\r\nAge: 22242\r\nCache-Control: public, max-age=31536000\r\nContent-Disposition: inline; filename=\"75526d701d884f43970c643973b2bebe\"; filename*=utf-8''75526d701d884f43970c643973b2bebe\r\nContent-Md5: gXAzLdWi7x0ALJV17d1kXA==\r\nContent-Transfer-Encoding: binary\r\nEtag: \"FiZvcf47om4M6OyZDqnUQwlB-Zw1\"\r\nLast-Modified: Sat, 25 Jul 2026 19:17:23 GMT\r\nX-Log: X-Log\r\nX-M-Log: QNM:wldsg121;QNM3\r\nX-M-Reqid: B6pB3T1pJ\r\nX-Qiniu-Zone: as0\r\nX-Qnm-Cache: Hit\r\nX-Reqid: _SEAAAB_CE4iI8cY\r\nX-Svr: IO\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":18374,"size_decoded":19130,"mime_type":"image/png","magic":"PNG image data, 137 x 170, 8-bit/color RGBA, non-interlaced","md5":"8170332dd5a2ef1d002c9575eddd645c","sha1":"266f71fe3ba26e0ce8ec990ea9d4430941f99c35","sha256":"ee432a7eaf868f57ad065af06c314fbe17db2756e1285deba505517393f497e8","sha512":"64db4c2751ef00afa7007b805a29e9639d1b75300c0317e2f47acf5a3eee068b064422c2c9e5caebcb2ca73e1a2bcaca07226df6e6f54ae6b4a72a34f5b5c1f2","ssdeep":"384:JIip5+WHyIFmlcFcwZR04aMCLgAIvID71DO:yip0vIFmW2SRhAIvI/BO","tlshash":"de82d04add803c4ca395872b321753caf529ae95c83b1f51cfa87255ac5508ed823eef","first_seen":"2023-08-02T17:36:25Z","last_seen":"2026-07-31T12:41:15.185542Z","times_seen":95,"resource_available":false,"data":null}},"time_used":6832,"timings":{"blocked":6548,"dns":0,"connect":0,"send":0,"wait":277,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"y42t.top/jumpto/img/https://rcf-img-hk.gasdg646fs224cn.com/202506/_webp_size1260x1156_03543abb-5967-4969-b0c5-87347b24c4d6.png","fqdn":"y42t.top","domain":"y42t.top","tld":"top"},"ip":{"addr":"154.39.104.138","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://y42t.top/","date":"2026-07-31T00:10:42.822Z","timestamp":1785456642822,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"p40f.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 10:44:09 GMT","end":"Tue, 20 Oct 2026 10:44:08 GMT"},"fingerprint":{"sha1":"41:09:2C:3F:FC:9C:25:A9:DB:51:15:BB:D1:5A:D8:01:DC:38:AD:F8","sha256":"49:3B:29:C7:5B:B6:12:CF:84:14:5B:09:42:7D:EF:AA:61:29:EC:A1:D5:40:B5:64:5C:F1:33:AB:9B:E1:13:4D"}}},"request":{"raw":"GET /jumpto/img/https://rcf-img-hk.gasdg646fs224cn.com/202506/_webp_size1260x1156_03543abb-5967-4969-b0c5-87347b24c4d6.png HTTP/1.1\r\nHost: y42t.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://y42t.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 31 Jul 2026 00:10:45 GMT\r\nContent-Type: image/webp\r\nContent-Length: 148768\r\nConnection: keep-alive\r\netag: \"2c43663cd3eeae27a4e751556307f507\"\r\nLast-Modified: Sat, 06 Dec 2025 06:32:06 GMT\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nAge: 499207\r\ncf-cache-status: HIT\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jgspYM3kpWM3aBH5aBeTuX5QqzCVmQW4wEYZjMOokoEePk32w0Svv1%2BRzRBWm6JjtKcRktmjliZefNENvpLYiMyFkcWMWOVTp3EtEmwSSh%2BE2i07VlFOkD6FNPOe7PVVwlTw402D2COASUXy9gcjM8k%3D\"}]}\r\nCF-RAY: a208c6188e4fdd8c-HKG\r\nalt-svc: h3=\":443\"; ma=86400\r\nCache-Control: public, max-age=2592000, immutable, public, max-age=2592000, immutable\r\nAccess-Control-Allow-Origin: *\r\nX-Custom-Check: true\r\nServer: Nginx\r\nL-Safe: 1785456645=3m/UQghxNGW3gPChBH0qwAw5jhMnk/bL7ljEsAqUNfL2w1i0HQREe2rEb4k+hpOpl+mNkeotUTn7rI4RELPi496PFmfq0fH/qKdAcrqsvLVi0CluaNffWUzPkudCch2/uigQXMAy3JVAvXsWZA3UDGCysooGP/loOgkjhRbwnpUqbTZcGQok3Gq63qCfb31c\r\nL-VIA: l1=TqoDVanjjr6wMExF\r\nL-VERSION: 1784720560\r\nL-Request-Id: 3ec519fb58255f3c079\r\nX-Cache-Status: HIT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":148768,"size_decoded":149920,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"2c43663cd3eeae27a4e751556307f507","sha1":"231f268ff0432bf21cea23c1a2cc12003c10f7be","sha256":"cdd625ad600403b36dcbcf589300926ee189bf9d47b2cc2c0715f91c5f6968a5","sha512":"d9ba3dcde4fcd162ea361339bce1c4b8313875af3fe94297a7a55cb8d245e815421dbfb9e5017c19e6a6d50b5ca654e02a326190c2e300b0fd369aa245726567","ssdeep":"3072:IgpSjBxCU8A3MroXYq21tKxGDaxxoyg4KtBHs7T8YMA4q8B4:IgpSjBGYuOYqGKx7ygoBqT8Yln8","tlshash":"3ee313b7f29017bdda91ca376b9f02f832041f64f4077e34a5509801839daada2bb572","first_seen":"2026-04-24T23:10:16.7755Z","last_seen":"2026-07-31T12:36:18.79049Z","times_seen":972,"resource_available":false,"data":null}},"time_used":2995,"timings":{"blocked":2647,"dns":0,"connect":0,"send":0,"wait":305,"receive":43,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-31","alert":"Sinkholed","trigger":"y42t.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-31","alert":"Phishing Block","trigger":"y42t.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"y42t.top/config/telegram.js?t=1785456638055","fqdn":"y42t.top","domain":"y42t.top","tld":"top"},"ip":{"addr":"154.39.104.138","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://y42t.top/","date":"2026-07-31T00:10:38.098Z","timestamp":1785456638098,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"p40f.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 10:44:09 GMT","end":"Tue, 20 Oct 2026 10:44:08 GMT"},"fingerprint":{"sha1":"41:09:2C:3F:FC:9C:25:A9:DB:51:15:BB:D1:5A:D8:01:DC:38:AD:F8","sha256":"49:3B:29:C7:5B:B6:12:CF:84:14:5B:09:42:7D:EF:AA:61:29:EC:A1:D5:40:B5:64:5C:F1:33:AB:9B:E1:13:4D"}}},"request":{"raw":"GET /config/telegram.js?t=1785456638055 HTTP/1.1\r\nHost: y42t.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://y42t.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 31 Jul 2026 00:10:40 GMT\r\nContent-Type: application/javascript\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Tue, 09 Jun 2026 13:37:11 GMT\r\nVary: Accept-Encoding\r\nETag: W/\"6a281707-1c896\"\r\nCache-Control: public, max-age=31536000, immutable\r\nAccess-Control-Allow-Origin: *\r\nX-Custom-Check: true\r\nContent-Encoding: gzip\r\nServer: Nginx\r\nL-Safe: 1785456640=J17DXMEKXneKJsmf5PklOuZGVEbIRHZaaYUSHzFG19eRab1KmINu7b4QGpzoq2sF3cVtRbxKbhHDWucmkECQYVOT+r0RQLbYm93Pi9MruE4IbJTcWk38kbzXbpB01LsT5BD5K4g3/y6LaDWmYtWF9GJZSB/4ORv/PkgK01jvDx4dXhxfQiC6c5+CxYbaqcYc\r\nL-VIA: l1=TqoDVanjjr6wMExF\r\nL-VERSION: 1784720560\r\nL-Request-Id: 3ec519fb5824036c06d\r\nX-Cache-Status: BYPASS\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":116886,"size_decoded":18895,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (483)","md5":"4ef2154bcfb8399f256c2da15a4cb409","sha1":"e0f8f5578b2e0773ec1d79bb1cec54e1f5d6373d","sha256":"73fa4926373755b52fecfdf3145a0c9953c08af374ea69dda46fe2b3b9ddb022","sha512":"8b64643161386bdefbb7eab04416e78e5e183c50acba7b25b146aa6e733744a326566a01eb7eabb1a0a3f5b87ac8461a7ab3b9ad1c44de37ecea25af09e3eb41","ssdeep":"1536:WK4KZK+Klt3LbbdS4V+vO14KtA9phXTQ+fcZl8LDh7j8d3K+V4WMrnf/NunqxF00:Wj+dgdLbbdSA+1XTQRZ1jSBl","tlshash":"14b31c4c5cf3216285a7b1be8b9f925072759893304def203c4d9ba45f98d3c53eaad8","first_seen":"2025-05-31T08:16:48.368096Z","last_seen":"2026-07-31T12:41:47.137816Z","times_seen":2339,"resource_available":true,"data":null}},"time_used":2160,"timings":{"blocked":1804,"dns":0,"connect":0,"send":0,"wait":350,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-31","alert":"Sinkholed","trigger":"y42t.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-31","alert":"Phishing Block","trigger":"y42t.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"photo.365live88.com/img/fb/team/829b4a1ebd2e4883bc7f3ef84d1ccc74?win007=sell","fqdn":"photo.365live88.com","domain":"365live88.com","tld":"com"},"ip":{"addr":"154.41.93.240","port":443,"asn":174,"as":"COGENT-174","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://y42t.top/","date":"2026-07-31T00:10:42.533Z","timestamp":1785456642533,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"photo.365live88.com","organization":""},"issuer":{"commonName":"Encryption Everywhere DV TLS CA - G2","organization":"DigiCert Inc"},"validity":{"start":"Sat, 01 Nov 2025 00:00:00 GMT","end":"Sat, 31 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"45:76:43:9C:31:C5:89:A6:99:FD:9B:D8:6C:A9:3A:E6:2F:D6:E9:80","sha256":"73:27:CF:D8:8D:AC:95:46:00:5D:67:05:1E:70:22:3E:17:F0:94:78:CD:6F:A6:9C:C8:5F:B5:3B:75:60:3D:C8"}}},"request":{"raw":"GET /img/fb/team/829b4a1ebd2e4883bc7f3ef84d1ccc74?win007=sell HTTP/1.1\r\nHost: photo.365live88.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://y42t.top/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: openresty\r\nDate: Fri, 31 Jul 2026 00:10:48 GMT\r\nContent-Type: image/png\r\nContent-Length: 21684\r\nConnection: keep-alive\r\nAccept-Ranges: bytes\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Expose-Headers: X-Log, X-Reqid\r\nAccess-Control-Max-Age: 2592000\r\nAge: 25819\r\nCache-Control: public, max-age=31536000\r\nContent-Disposition: inline; filename=\"829b4a1ebd2e4883bc7f3ef84d1ccc74\"; filename*=utf-8''829b4a1ebd2e4883bc7f3ef84d1ccc74\r\nContent-Md5: ZUVdd7+2Q+OToW/5/Urwmw==\r\nContent-Transfer-Encoding: binary\r\nEtag: \"FgIdgMLFFyeoWZSVcsrqxXDgub6P\"\r\nLast-Modified: Sat, 25 Jul 2026 19:15:47 GMT\r\nX-Log: X-Log\r\nX-M-Log: QNM:wldsg119;QNM3\r\nX-M-Reqid: YG65pIdq8\r\nX-Qiniu-Zone: as0\r\nX-Qnm-Cache: Hit\r\nX-Reqid: Le8AAABjbFnhH8cY\r\nX-Svr: IO\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":21684,"size_decoded":22440,"mime_type":"image/png","magic":"PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced","md5":"65455d77bfb643e393a16ff9fd4af09b","sha1":"021d80c2c51727a859949572caeac570e0b9be8f","sha256":"a74fa210c613837f9074f033228b597eccddaa6f061a9c6ca46ec1f790ed90b7","sha512":"6e9ced4c46a86eb77c6d1abe0852dacac62f17300e22ad7ea6a404c712a9d6aee704a18d4f1c211974455d1d7b887711dbcf88e47cfa142f27ee3e7532da50e7","ssdeep":"384:AYYYpdnQ79n974pfqKoLNAYopca96NlzNdt3muHayNZuC943f3bjyiv0fpg0:A9YpBQ79JOdiAH4lzNdxmuvZXy3P0fp9","tlshash":"f7a2e1b68b3e94d4ec6409763856e6143436649c0e65980ac807d64fb7feb31f43a9b3","first_seen":"2025-01-29T13:39:14.737072Z","last_seen":"2026-07-31T12:41:15.265101Z","times_seen":161,"resource_available":false,"data":null}},"time_used":6085,"timings":{"blocked":5806,"dns":0,"connect":0,"send":0,"wait":267,"receive":12,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"y42t.top/img/bj1.17ef2db8.png","fqdn":"y42t.top","domain":"y42t.top","tld":"top"},"ip":{"addr":"154.39.104.138","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://y42t.top/","date":"2026-07-31T00:10:41.064Z","timestamp":1785456641064,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"p40f.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 10:44:09 GMT","end":"Tue, 20 Oct 2026 10:44:08 GMT"},"fingerprint":{"sha1":"41:09:2C:3F:FC:9C:25:A9:DB:51:15:BB:D1:5A:D8:01:DC:38:AD:F8","sha256":"49:3B:29:C7:5B:B6:12:CF:84:14:5B:09:42:7D:EF:AA:61:29:EC:A1:D5:40:B5:64:5C:F1:33:AB:9B:E1:13:4D"}}},"request":{"raw":"GET /img/bj1.17ef2db8.png HTTP/1.1\r\nHost: y42t.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://y42t.top/css/home.1781011881923.38488e2a.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 31 Jul 2026 00:10:41 GMT\r\nContent-Type: image/png\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Tue, 09 Jun 2026 13:37:11 GMT\r\nVary: Accept-Encoding\r\nETag: W/\"6a281707-e5eb\"\r\nCache-Control: public, max-age=2592000, immutable\r\nAccess-Control-Allow-Origin: *\r\nX-Custom-Check: true\r\nContent-Encoding: gzip\r\nServer: Nginx\r\nL-Safe: 1785456641=gE780zdPNeqfjPR58ntui758h0rpjLBJh/P/VwEb9QgBdmX5XoCvf3XKS4ubqYQ4aAZoEOOBDBlTTobn+2eZbZ0U5rmjaj2YBZiCmX90g8Si+D3mrq6vSJjZwkQXhlFZx6UYXbz//HB3stXeGCYUIUvqR8AbEmVqeF09wWmA11wJgMs9cyGCHyv3ab/jWW+R\r\nAge: 499208\r\nL-VIA: l1=TqoDVanjjr6wMExF\r\nL-VERSION: 1784720560\r\nL-Request-Id: 3ec119fb58246b4c2b6\r\nX-Cache-Status: HIT\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":58859,"size_decoded":59601,"mime_type":"image/png","magic":"PNG image data, 1920 x 1299, 1-bit colormap, non-interlaced","md5":"59f1176bd542d042d8ddecbe4ab2cbdf","sha1":"7251e6f8bc0bf8bf3e62e892b34540f8259dcf9d","sha256":"b3bc2f14721d5f84900af66179eb6ad69a9c8d5a89eae36f877cf09fc9872603","sha512":"c4e7f1491686b72482ba26e34fd94496fc71bec2a35ba1d7cf67391e1f47f859465ad9f0c7d286bd35f9a26132fd80012a2cd2f8133cf1c6013db4f4d27a85d7","ssdeep":"1536:jlJ0Z4kwI3cG0YXIPf/OWcFOtk2bnIlfyMcw68vTbD8:gxbsGvYXd8OtTbIsgTbD8","tlshash":"004302d3b5e9f610dd38c157a3d1c9da504483be3e938d0bebbe402629fd56840a6f16","first_seen":"2023-08-17T12:39:32Z","last_seen":"2026-07-31T12:41:46.988893Z","times_seen":2551,"resource_available":false,"data":null}},"time_used":956,"timings":{"blocked":504,"dns":0,"connect":0,"send":0,"wait":339,"receive":113,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-31","alert":"Phishing Block","trigger":"y42t.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-31","alert":"Sinkholed","trigger":"y42t.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"photo.365live88.com/img/fb/team/e99b5be7115c4c799cd132f5f60ef5d1?win007=sell","fqdn":"photo.365live88.com","domain":"365live88.com","tld":"com"},"ip":{"addr":"154.41.93.240","port":443,"asn":174,"as":"COGENT-174","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://y42t.top/","date":"2026-07-31T00:10:42.461Z","timestamp":1785456642461,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"photo.365live88.com","organization":""},"issuer":{"commonName":"Encryption Everywhere DV TLS CA - G2","organization":"DigiCert Inc"},"validity":{"start":"Sat, 01 Nov 2025 00:00:00 GMT","end":"Sat, 31 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"45:76:43:9C:31:C5:89:A6:99:FD:9B:D8:6C:A9:3A:E6:2F:D6:E9:80","sha256":"73:27:CF:D8:8D:AC:95:46:00:5D:67:05:1E:70:22:3E:17:F0:94:78:CD:6F:A6:9C:C8:5F:B5:3B:75:60:3D:C8"}}},"request":{"raw":"GET /img/fb/team/e99b5be7115c4c799cd132f5f60ef5d1?win007=sell HTTP/1.1\r\nHost: photo.365live88.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://y42t.top/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: openresty\r\nDate: Fri, 31 Jul 2026 00:10:44 GMT\r\nContent-Type: image/png\r\nContent-Length: 14099\r\nConnection: keep-alive\r\nAccept-Ranges: bytes\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Expose-Headers: X-Log, X-Reqid\r\nAccess-Control-Max-Age: 2592000\r\nAge: 86138\r\nCache-Control: public, max-age=31536000\r\nContent-Disposition: inline; filename=\"e99b5be7115c4c799cd132f5f60ef5d1\"; filename*=utf-8''e99b5be7115c4c799cd132f5f60ef5d1\r\nContent-Md5: lG1zrcvbU8fBs84lnradrw==\r\nContent-Transfer-Encoding: binary\r\nEtag: \"Fr8PvrTXQE0mylrRlVuO2sZFxyj1\"\r\nLast-Modified: Fri, 24 Jul 2026 19:49:38 GMT\r\nX-Log: X-Log\r\nX-M-Log: QNM:wldsg121;QNM3\r\nX-M-Reqid: VR3qw5kqO\r\nX-Qiniu-Zone: as0\r\nX-Qnm-Cache: Hit\r\nX-Reqid: FzAAAAD3Mz8E6cYY\r\nX-Svr: IO\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":14099,"size_decoded":14855,"mime_type":"image/png","magic":"PNG image data, 180 x 180, 8-bit/color RGBA, non-interlaced","md5":"946d73adcbdb53c7c1b3ce259eb69daf","sha1":"bf0fbeb4d7404d26ca5ad1955b8edac645c728f5","sha256":"1ad5091e72aa231d713527297e41ec35babd3efcbc398ec5207fbdf3132a590a","sha512":"3e1e5c1e4d0f5af7e6324d95f6eff39ea1418503e6a7bd767bd2f7b6714ccebb5bbe67a769868632843b683382ead7c1ef7722d0b48ed805248a7d35521e738d","ssdeep":"384:AzqM48ZKB2h4NeP01nAJC0PHhb29snWo4TPYJDuviRmn9iXpfD:A0bB2hV0l05b29snN4Uuim8L","tlshash":"db52cfe3165506567e2b77bc5f428886242c22ca77d264dc9aa7cfe180ee2d97c31733","first_seen":"2024-10-24T22:52:54.795342Z","last_seen":"2026-07-31T00:12:52.521561Z","times_seen":145,"resource_available":false,"data":null}},"time_used":2231,"timings":{"blocked":1930,"dns":0,"connect":0,"send":0,"wait":301,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"photo.365live88.com/img/fb/team/e84047dc85e04a47ba8a9342272435fe?win007=sell","fqdn":"photo.365live88.com","domain":"365live88.com","tld":"com"},"ip":{"addr":"154.41.93.240","port":443,"asn":174,"as":"COGENT-174","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://y42t.top/","date":"2026-07-31T00:10:42.482Z","timestamp":1785456642482,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"photo.365live88.com","organization":""},"issuer":{"commonName":"Encryption Everywhere DV TLS CA - G2","organization":"DigiCert Inc"},"validity":{"start":"Sat, 01 Nov 2025 00:00:00 GMT","end":"Sat, 31 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"45:76:43:9C:31:C5:89:A6:99:FD:9B:D8:6C:A9:3A:E6:2F:D6:E9:80","sha256":"73:27:CF:D8:8D:AC:95:46:00:5D:67:05:1E:70:22:3E:17:F0:94:78:CD:6F:A6:9C:C8:5F:B5:3B:75:60:3D:C8"}}},"request":{"raw":"GET /img/fb/team/e84047dc85e04a47ba8a9342272435fe?win007=sell HTTP/1.1\r\nHost: photo.365live88.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://y42t.top/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: openresty\r\nDate: Fri, 31 Jul 2026 00:10:45 GMT\r\nContent-Type: image/png\r\nContent-Length: 22499\r\nConnection: keep-alive\r\nAccept-Ranges: bytes\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Expose-Headers: X-Log, X-Reqid\r\nAccess-Control-Max-Age: 2592000\r\nAge: 226312\r\nCache-Control: public, max-age=31536000\r\nContent-Disposition: inline; filename=\"e84047dc85e04a47ba8a9342272435fe\"; filename*=utf-8''e84047dc85e04a47ba8a9342272435fe\r\nContent-Md5: CspL81pfZ9V640I7xck4GA==\r\nContent-Transfer-Encoding: binary\r\nEtag: \"FuvlKUvW7ed5Sc6EiUFWN5MJMaKl\"\r\nLast-Modified: Mon, 27 Jul 2026 13:16:44 GMT\r\nX-Log: X-Log\r\nX-M-Log: QNM:wldsg121;QNM3\r\nX-M-Reqid: Rjr9wxMUD\r\nX-Qiniu-Zone: as0\r\nX-Qnm-Cache: Hit\r\nX-Reqid: QMIAAAAsf6aHacYY\r\nX-Svr: IO\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":22499,"size_decoded":23256,"mime_type":"image/png","magic":"PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced","md5":"0aca4bf35a5f67d57ae3423bc5c93818","sha1":"ebe5294bd6ede77949ce8489415637930931a2a5","sha256":"502be6bb90f23e27ee43768d1391b5916debece86e06dbb1f58f2f03338a3a9a","sha512":"bdcee37de3e7b4d2b3de65e3dc842f38a27b8ad6284f719b4a09650d0c606978bf761a01b595231c8d18c100c1c75ba3c524c9d89fe42fd621e0d44cbe6bb1fc","ssdeep":"384:70nykSvi/U2giKp0Tnxqq+HKHqs534HrbSxRYoWEqFNTPyJC0Sp0V/zGOsygF6v/:70nyV6M2Jq4Mq+XEYoWEqXr0SCzRdpv/","tlshash":"96a2d04944d7ae9ae94a989c26ac0339c0d3d53b94eee10a3f77359b17d772043d4323","first_seen":"2025-06-30T02:18:01.530306Z","last_seen":"2026-07-31T03:12:02.755672Z","times_seen":6,"resource_available":false,"data":null}},"time_used":3405,"timings":{"blocked":3114,"dns":0,"connect":0,"send":0,"wait":274,"receive":17,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"photo.365live88.com/img/fb/team/26b4bfec3bb342468752709aa9f3803f?win007=sell","fqdn":"photo.365live88.com","domain":"365live88.com","tld":"com"},"ip":{"addr":"154.41.93.240","port":443,"asn":174,"as":"COGENT-174","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://y42t.top/","date":"2026-07-31T00:10:42.539Z","timestamp":1785456642539,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"photo.365live88.com","organization":""},"issuer":{"commonName":"Encryption Everywhere DV TLS CA - G2","organization":"DigiCert Inc"},"validity":{"start":"Sat, 01 Nov 2025 00:00:00 GMT","end":"Sat, 31 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"45:76:43:9C:31:C5:89:A6:99:FD:9B:D8:6C:A9:3A:E6:2F:D6:E9:80","sha256":"73:27:CF:D8:8D:AC:95:46:00:5D:67:05:1E:70:22:3E:17:F0:94:78:CD:6F:A6:9C:C8:5F:B5:3B:75:60:3D:C8"}}},"request":{"raw":"GET /img/fb/team/26b4bfec3bb342468752709aa9f3803f?win007=sell HTTP/1.1\r\nHost: photo.365live88.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://y42t.top/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: openresty\r\nDate: Fri, 31 Jul 2026 00:10:48 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 2770\r\nConnection: keep-alive\r\nAccept-Ranges: bytes\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Expose-Headers: X-Log, X-Reqid\r\nAccess-Control-Max-Age: 2592000\r\nAge: 25817\r\nCache-Control: public, max-age=31536000\r\nContent-Disposition: inline; filename=\"26b4bfec3bb342468752709aa9f3803f\"; filename*=utf-8''26b4bfec3bb342468752709aa9f3803f\r\nContent-Md5: NH1Rs0yzhEmagH49ij5Dvg==\r\nContent-Transfer-Encoding: binary\r\nEtag: \"FgukZWwCIitLweeWhQmRg2Z0Qhg4\"\r\nLast-Modified: Sat, 25 Jul 2026 19:15:46 GMT\r\nX-Log: X-Log\r\nX-M-Log: QNM:wldsg119;QNM3\r\nX-M-Reqid: 6iKVwhArb\r\nX-Qiniu-Zone: as0\r\nX-Qnm-Cache: Hit\r\nX-Reqid: dW8AAAANsZ3hH8cY\r\nX-Svr: IO\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2770,"size_decoded":3526,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 120x92, components 3","md5":"347d51b34cb384499a807e3d8a3e43be","sha1":"0ba4656c02222b4bc1e796850991836674421838","sha256":"1896a9ef82c85813486b5a4634883d52ba1f285104b1f9e3c33b415cb4a8b713","sha512":"48a1f2dcd355baa6ce7f4ab4d002c6436f36b6ade37bf11e353ee405cbf465a4455694305fa9704757049c3e0d947d84a1ec722ea5c229621f66af67edb1532a","ssdeep":"","tlshash":"5f514c12394701ebfe4c55746711bbdc689e1d19df22a3c702498571293535053d5ea5","first_seen":"2025-10-11T14:06:01.265883Z","last_seen":"2026-07-31T12:41:15.226007Z","times_seen":28,"resource_available":false,"data":null}},"time_used":6547,"timings":{"blocked":6285,"dns":0,"connect":0,"send":0,"wait":262,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"photo.365live88.com/img/fb/team/d7c82d394563400b8cd74df68f51df82?win007=sell","fqdn":"photo.365live88.com","domain":"365live88.com","tld":"com"},"ip":{"addr":"154.41.93.240","port":443,"asn":174,"as":"COGENT-174","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://y42t.top/","date":"2026-07-31T00:10:42.563Z","timestamp":1785456642563,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"photo.365live88.com","organization":""},"issuer":{"commonName":"Encryption Everywhere DV TLS CA - G2","organization":"DigiCert Inc"},"validity":{"start":"Sat, 01 Nov 2025 00:00:00 GMT","end":"Sat, 31 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"45:76:43:9C:31:C5:89:A6:99:FD:9B:D8:6C:A9:3A:E6:2F:D6:E9:80","sha256":"73:27:CF:D8:8D:AC:95:46:00:5D:67:05:1E:70:22:3E:17:F0:94:78:CD:6F:A6:9C:C8:5F:B5:3B:75:60:3D:C8"}}},"request":{"raw":"GET /img/fb/team/d7c82d394563400b8cd74df68f51df82?win007=sell HTTP/1.1\r\nHost: photo.365live88.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://y42t.top/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: openresty\r\nDate: Fri, 31 Jul 2026 00:10:50 GMT\r\nContent-Type: image/png\r\nContent-Length: 97013\r\nConnection: keep-alive\r\nAccept-Ranges: bytes\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Expose-Headers: X-Log, X-Reqid\r\nAccess-Control-Max-Age: 2592000\r\nAge: 18636\r\nCache-Control: public, max-age=31536000\r\nContent-Disposition: inline; filename=\"d7c82d394563400b8cd74df68f51df82\"; filename*=utf-8''d7c82d394563400b8cd74df68f51df82\r\nContent-Md5: MfpUcf1mFBCkUvoFbLizNQ==\r\nContent-Transfer-Encoding: binary\r\nEtag: \"FlOUozb8ZGhUZmYAXeipVzw4El9w\"\r\nLast-Modified: Sat, 25 Jul 2026 19:18:11 GMT\r\nX-Log: X-Log\r\nX-M-Log: QNM:wldsg119;QNM3\r\nX-M-Reqid: izl2FnL9Z\r\nX-Qiniu-Zone: as0\r\nX-Qnm-Cache: Hit\r\nX-Reqid: _tgAAABEGBpqJscY\r\nX-Svr: IO\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":97013,"size_decoded":97769,"mime_type":"image/png","magic":"PNG image data, 300 x 300, 8-bit/color RGBA, non-interlaced","md5":"31fa5471fd661410a452fa056cb8b335","sha1":"5394a336fc6468546666005de8a9573c38125f70","sha256":"4ba530c080f44e4c0dd03ccb8e542a6328b091b78514081a721289a547c630b8","sha512":"929572460721d7ffc661a048a9d19c02d6fac4e2ddf54796a8a6b3e5daef40e6f4f47e67494e36cfa7c46b68af2e40e7cf39c5def716d3bae109e66da18f30bf","ssdeep":"1536:W85+1r0h3Qd6zm9WgsmbYkRa4hW7vMggVJGf1+H0hXlMEFqHr44bE/1e3HtE3O2d:S1r0hy6pmbzjvHMlMUqL44WKNE3MDnMl","tlshash":"b493127760a27f49b34fc8e3e51a746473be0c930d79c0d2b0a29b061534722aefb15a","first_seen":"2025-02-26T14:48:47.814951Z","last_seen":"2026-07-31T12:41:47.095187Z","times_seen":46,"resource_available":false,"data":null}},"time_used":8510,"timings":{"blocked":8228,"dns":0,"connect":0,"send":0,"wait":245,"receive":37,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"y42t.top/jumpto/img/https://rcf-img-hk.gasdg646fs224cn.com/202508/_webp_size1298x1156_de72e240-4300-48d6-8f6e-b9cb363e7924.png","fqdn":"y42t.top","domain":"y42t.top","tld":"top"},"ip":{"addr":"154.39.104.138","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://y42t.top/","date":"2026-07-31T00:10:42.872Z","timestamp":1785456642872,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"p40f.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 10:44:09 GMT","end":"Tue, 20 Oct 2026 10:44:08 GMT"},"fingerprint":{"sha1":"41:09:2C:3F:FC:9C:25:A9:DB:51:15:BB:D1:5A:D8:01:DC:38:AD:F8","sha256":"49:3B:29:C7:5B:B6:12:CF:84:14:5B:09:42:7D:EF:AA:61:29:EC:A1:D5:40:B5:64:5C:F1:33:AB:9B:E1:13:4D"}}},"request":{"raw":"GET /jumpto/img/https://rcf-img-hk.gasdg646fs224cn.com/202508/_webp_size1298x1156_de72e240-4300-48d6-8f6e-b9cb363e7924.png HTTP/1.1\r\nHost: y42t.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://y42t.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 31 Jul 2026 00:10:47 GMT\r\nContent-Type: image/webp\r\nContent-Length: 81300\r\nConnection: keep-alive\r\netag: \"4a30c16256a637de0e38e326aa6cdf0c\"\r\nLast-Modified: Wed, 10 Dec 2025 11:51:47 GMT\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=eZYfu21br3R7bHie7diKjUev%2FzIBq9bFqebgh%2BJ0UfwrK%2FxtJNZarx96lfZbxZqIZ8xk2yMhzhPxzMnIiMOUWJXOZMHDpuEZ%2FyJRr6IAV4YZZP3ZsUnRd5NJEjVo87HK46oOgoOaH%2FDhbElLBsuACnM%3D\"}]}\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nAge: 499201\r\ncf-cache-status: HIT\r\nCF-RAY: a208c6491b7610a0-HKG\r\nalt-svc: h3=\":443\"; ma=86400\r\nCache-Control: public, max-age=2592000, immutable, public, max-age=2592000, immutable\r\nAccess-Control-Allow-Origin: *\r\nX-Custom-Check: true\r\nServer: Nginx\r\nL-Safe: 1785456647=pwbyu29rM0HEK42bpjFMXQZZ8s1IzzkT40daNMbcT90Ub0zpvrQ+kBR7N9vkAvLpdcGVCAkYTtjHzFt3rikpG2u0ViQwOg9Y/d8oh3QnzrskfHJpkQ3k6DdsyXdsoVGvpU7l+6O6Z96TYcnIdvgBPUL8UMfWMnVf++Fvg3TWLhL2ZP4it9BY8MKVve4d74hd\r\nL-VIA: l1=TqoDVanjjr6wMExF\r\nL-VERSION: 1784720560\r\nL-Request-Id: 3ec919fb5825d0dc0a5\r\nX-Cache-Status: HIT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":81300,"size_decoded":82457,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"4a30c16256a637de0e38e326aa6cdf0c","sha1":"083a8e24d12a329c41bc5271ff2ee57570a6ff1d","sha256":"2e9e6d8b511c612cae6e20caa233846b723fe3f3c899d19eb8389073f0ca8047","sha512":"2cc3551a276966a3615edbf590ce22d06779e40c371e54737fdd0033faf900483fe32a33fcc86327fc2e3098e5ee02a88d6e7c60552a4ebdeac5ed66a47f007f","ssdeep":"1536:rHYJZl7vtdLMbrX1zS7hmZHerpnyjI79AYRU6kzu0MRsIelVbd:rkf1dLMvl6MZ+9nyjIinjuxcbd","tlshash":"7b83f1603172ed83bd9eb46081883156f984d84473298ff72a779fbd93128e9973970e","first_seen":"2026-04-24T23:10:16.828064Z","last_seen":"2026-07-31T12:36:18.621788Z","times_seen":936,"resource_available":false,"data":null}},"time_used":4784,"timings":{"blocked":4405,"dns":0,"connect":0,"send":0,"wait":313,"receive":66,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-31","alert":"Phishing Block","trigger":"y42t.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-31","alert":"Sinkholed","trigger":"y42t.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"y42t.top/ecb/8f83064248a6651521ab9b26970d60fa83f0bf5f79fe68600101b67707c272184849423924c3e9832923a30acedcbfec8ac50fef89fb","fqdn":"y42t.top","domain":"y42t.top","tld":"top"},"ip":{"addr":"154.39.104.138","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://y42t.top/","date":"2026-07-31T00:10:42.019Z","timestamp":1785456642019,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"p40f.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 10:44:09 GMT","end":"Tue, 20 Oct 2026 10:44:08 GMT"},"fingerprint":{"sha1":"41:09:2C:3F:FC:9C:25:A9:DB:51:15:BB:D1:5A:D8:01:DC:38:AD:F8","sha256":"49:3B:29:C7:5B:B6:12:CF:84:14:5B:09:42:7D:EF:AA:61:29:EC:A1:D5:40:B5:64:5C:F1:33:AB:9B:E1:13:4D"}}},"request":{"raw":"GET /ecb/8f83064248a6651521ab9b26970d60fa83f0bf5f79fe68600101b67707c272184849423924c3e9832923a30acedcbfec8ac50fef89fb HTTP/1.1\r\nHost: y42t.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://y42t.top/\r\nContent-Type: application/x-www-form-urlencoded\r\nx-request-source: https://y42t.top\r\nXign: MojLe3JtBY+5w89mElkadFrHWyckfwhngddJWwlYfXYiWk65Or71jyFKW4dbN5e2RTL55I9FQTM1hlxOcR7rdBoB34pAloVMCreKyQoBEC132y+fH95htKdYQFh/zBi4uqFjZsM6sx5PWf2U6OqrKGAQ3JcFifGicTwU/m4CY4g=\r\ntimestamp: 1785456641870\r\nsign: fh1h53b1d2g3e2l4\r\nversion: 5.6.12.0\r\nclient-type: web\r\ndevice-id: h7Ebc4YSNiCSchfp8FT2WyTT845kFyYC\r\nlang: zh-CN\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 31 Jul 2026 00:10:42 GMT\r\nContent-Type: application/json\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding, Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nExpires: Fri, 31 Jul 2026 00:20:42 GMT\r\nCache-Control: public, max-age=600, s-maxage=600, must-revalidate, stale-while-revalidate=30\r\nX-XSS-Protection: 1; mode=block\r\nX-Request-ID: ee58f740a68f41f8b7307a5762190e46\r\nPragma: public\r\nX-Content-Type-Options: nosniff\r\nStrict-Transport-Security: max-age=63072000; includeSubdomains; preload\r\nAccess-Control-Allow-Origin: *\r\nX-Custom-Check: true, true\r\nContent-Encoding: gzip\r\nServer: Nginx\r\nL-Safe: 1785456642=csqYCqnSrfqstQvye8K/cOFcRTOv1c0xbYhymJAs0/02+uXPG5GVyZ0p6izerPHm8MGf7A/o5MmlVb25OTDKDKeQU0rR3SBVQb7DhxtPpD3sSzxoSDG3GUN9oldUbp9/49xVY7UWBgnWGNvQm3pHmukuHRLxIzXXppUlpGs5PUC8OL5ESDjYobwSrUxT4jKY\r\nL-VIA: l1=TqoDVanjjr6wMExF\r\nL-VERSION: 1784720560\r\nL-Request-Id: 3ec919fb5824876c08c\r\nX-Cache-Status: BYPASS\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6691,"size_decoded":7724,"mime_type":"application/json","magic":"data","md5":"31a9ba77b368009aa3ac83239eac5b65","sha1":"ea5b24c3891339e64c8a7eed2942b8266139797b","sha256":"6f8499975890d27ea9ab4f98dd1f3ff609c49bf05a6472a0b159ffd3cdd23840","sha512":"c19918ba8fee3084d2ea2445409f7b472be44c3ae716adea48cb0e68ca16eb2902ada7aae33202e86e629b0f84333aa89fa4650dbebdbb76d7b48a7c03cd189d","ssdeep":"192:VGXaHYhTBuWN/DcxL4jitSGv3QY5rocQrLI4irw9bdWagTgAGa+:QqHY7uk/DcrtSGv3QY5rTww4dWa6Ma+","tlshash":"b622bf974b53e7a026cdd5fca1221cd12a9fa2cd40bc9bd5d37480a42eaf750b4dc4b5","first_seen":"2026-07-26T23:48:44.029438Z","last_seen":"2026-07-31T00:12:52.465705Z","times_seen":4,"resource_available":false,"data":null}},"time_used":363,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":363,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-31","alert":"Sinkholed","trigger":"y42t.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-31","alert":"Phishing Block","trigger":"y42t.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"photo.365live88.com/img/fb/team/72e7fc1fc006407fadea032c69eb8b55?win007=sell","fqdn":"photo.365live88.com","domain":"365live88.com","tld":"com"},"ip":{"addr":"154.41.93.240","port":443,"asn":174,"as":"COGENT-174","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://y42t.top/","date":"2026-07-31T00:10:42.534Z","timestamp":1785456642534,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"photo.365live88.com","organization":""},"issuer":{"commonName":"Encryption Everywhere DV TLS CA - G2","organization":"DigiCert Inc"},"validity":{"start":"Sat, 01 Nov 2025 00:00:00 GMT","end":"Sat, 31 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"45:76:43:9C:31:C5:89:A6:99:FD:9B:D8:6C:A9:3A:E6:2F:D6:E9:80","sha256":"73:27:CF:D8:8D:AC:95:46:00:5D:67:05:1E:70:22:3E:17:F0:94:78:CD:6F:A6:9C:C8:5F:B5:3B:75:60:3D:C8"}}},"request":{"raw":"GET /img/fb/team/72e7fc1fc006407fadea032c69eb8b55?win007=sell HTTP/1.1\r\nHost: photo.365live88.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://y42t.top/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: openresty\r\nDate: Fri, 31 Jul 2026 00:10:48 GMT\r\nContent-Type: image/png\r\nContent-Length: 15853\r\nConnection: keep-alive\r\nAccept-Ranges: bytes\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Expose-Headers: X-Log, X-Reqid\r\nAccess-Control-Max-Age: 2592000\r\nAge: 25818\r\nCache-Control: public, max-age=31536000\r\nContent-Disposition: inline; filename=\"72e7fc1fc006407fadea032c69eb8b55\"; filename*=utf-8''72e7fc1fc006407fadea032c69eb8b55\r\nContent-Md5: ZvBu/7+G1U5PX8Fl9I0ZNg==\r\nContent-Transfer-Encoding: binary\r\nEtag: \"Fgmd1m5Ir3YYCrfJZ4qk1hidToHP\"\r\nLast-Modified: Sat, 25 Jul 2026 19:15:58 GMT\r\nX-Log: X-Log\r\nX-M-Log: QNM:wldsg121;QNM3\r\nX-M-Reqid: RKkiwNEiY\r\nX-Qiniu-Zone: as0\r\nX-Qnm-Cache: Hit\r\nX-Reqid: 5RoAAABBqH7hH8cY\r\nX-Svr: IO\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":15853,"size_decoded":16609,"mime_type":"image/png","magic":"PNG image data, 250 x 250, 8-bit/color RGBA, non-interlaced","md5":"66f06effbf86d54e4f5fc165f48d1936","sha1":"099dd66e48af76180ab7c9678aa4d6189d4e81cf","sha256":"4854b0b755ac60f377a59cc8b0bd3c395440c1f80aebfeac8784b55823183bbb","sha512":"ae1c5a6264fab455395bb244ee86ed384713539b65747da43c935786eeb9f6b7c4fd46a77dfd9bfeeb1745ca9d688c5d93bea2d8f093c110e6bc02042bfa483b","ssdeep":"384:OpIYCR7hKhdEmEvq11qDRHHA8kKEDf1c0Lt+OKSI:RR7c1D14DZN8tcK+ObI","tlshash":"3962b08e5e1f5d6effacd425e2994fddc825d290191aca18cf32c215e3872e5e02c660","first_seen":"2024-07-29T22:13:39Z","last_seen":"2026-07-31T12:41:15.208692Z","times_seen":23,"resource_available":false,"data":null}},"time_used":6250,"timings":{"blocked":5989,"dns":0,"connect":0,"send":0,"wait":259,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"y42t.top/jumpto/img/https://rcf-img-hk.gasdg646fs224cn.com/202508/_webp_size1298x1156_b219e889-d34b-4c28-b534-674fb2e77fdd.png","fqdn":"y42t.top","domain":"y42t.top","tld":"top"},"ip":{"addr":"154.39.104.138","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://y42t.top/","date":"2026-07-31T00:10:42.873Z","timestamp":1785456642873,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"p40f.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 10:44:09 GMT","end":"Tue, 20 Oct 2026 10:44:08 GMT"},"fingerprint":{"sha1":"41:09:2C:3F:FC:9C:25:A9:DB:51:15:BB:D1:5A:D8:01:DC:38:AD:F8","sha256":"49:3B:29:C7:5B:B6:12:CF:84:14:5B:09:42:7D:EF:AA:61:29:EC:A1:D5:40:B5:64:5C:F1:33:AB:9B:E1:13:4D"}}},"request":{"raw":"GET /jumpto/img/https://rcf-img-hk.gasdg646fs224cn.com/202508/_webp_size1298x1156_b219e889-d34b-4c28-b534-674fb2e77fdd.png HTTP/1.1\r\nHost: y42t.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://y42t.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 31 Jul 2026 00:10:47 GMT\r\nContent-Type: image/webp\r\nContent-Length: 105348\r\nConnection: keep-alive\r\netag: \"e55c87e5077d7d737d02e9a373cf6a5b\"\r\nLast-Modified: Wed, 10 Dec 2025 11:55:39 GMT\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pW7JHc8L8CY2fEqHNlBE7o4KvmVibCAxuZ%2BtmR0l%2B8%2F%2BJQpQzpixzmP2o4UkV8S8SYzi0a0Nzy7fS2NH5atlVxD3LhNaFowvs71KC9rq0%2FzBWSkAmt4IWgDUHBek3Ir0IWZYulQaeHeQUJ9mwrsBxtY%3D\"}]}\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nAge: 499191\r\ncf-cache-status: HIT\r\nCF-RAY: a208c687cdaa58d0-HKG\r\nalt-svc: h3=\":443\"; ma=86400\r\nCache-Control: public, max-age=2592000, immutable, public, max-age=2592000, immutable\r\nAccess-Control-Allow-Origin: *\r\nX-Custom-Check: true\r\nServer: Nginx\r\nL-Safe: 1785456647=pwbyu29rM0HEK42bpjFMXQZZ8s1IzzkT40daNMbcT90Ub0zpvrQ+kBR7N9vkAvLpdcGVCAkYTtjHzFt3rikpG2u0ViQwOg9Y/d8oh3QnzrskfHJpkQ3k6DdsyXdsoVGvpU7l+6O6Z96TYcnIdvgBPUL8UMfWMnVf++Fvg3TWLhL2ZP4it9BY8MKVve4d74hd\r\nL-VIA: l1=TqoDVanjjr6wMExF\r\nL-VERSION: 1784720560\r\nL-Request-Id: 3ec119fb5825d69c2d4\r\nX-Cache-Status: HIT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":105348,"size_decoded":106506,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"e55c87e5077d7d737d02e9a373cf6a5b","sha1":"21898eb8dc994254eb1a125a5f6310fcf94b08c2","sha256":"e2a9d5843140eddeabf22fd2e092ea761500c7b0cbf432c3de4f0e5fda23d2d5","sha512":"b17785a3c181a357def9c7bdf608f2ceb1df6b17339a0b2756e8fef4930f04fbc2fc70d2a4f22cefec30adafa5d9d1b0d259594b97dfa6a7c1fd650322e27f41","ssdeep":"3072:aJ/fAaUQyCHbeJiOjCkW/cRnU/xMT2Wfw//CVX2W:a1oaRyCPYCJe2WfwoX2W","tlshash":"42a3123992169346e97329aa30f80f4dde9874557e26204d78c8d64e45122f2fe78fca","first_seen":"2026-04-24T23:10:16.778762Z","last_seen":"2026-07-31T12:41:47.039405Z","times_seen":949,"resource_available":false,"data":null}},"time_used":4866,"timings":{"blocked":4496,"dns":0,"connect":0,"send":0,"wait":311,"receive":59,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-31","alert":"Sinkholed","trigger":"y42t.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-31","alert":"Phishing Block","trigger":"y42t.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"y42t.top/img/help.4e3cf897.png","fqdn":"y42t.top","domain":"y42t.top","tld":"top"},"ip":{"addr":"154.39.104.138","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://y42t.top/","date":"2026-07-31T00:10:41.077Z","timestamp":1785456641077,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"p40f.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 10:44:09 GMT","end":"Tue, 20 Oct 2026 10:44:08 GMT"},"fingerprint":{"sha1":"41:09:2C:3F:FC:9C:25:A9:DB:51:15:BB:D1:5A:D8:01:DC:38:AD:F8","sha256":"49:3B:29:C7:5B:B6:12:CF:84:14:5B:09:42:7D:EF:AA:61:29:EC:A1:D5:40:B5:64:5C:F1:33:AB:9B:E1:13:4D"}}},"request":{"raw":"GET /img/help.4e3cf897.png HTTP/1.1\r\nHost: y42t.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://y42t.top/css/index-399e2569.1781011881923.a7b0b4f4.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 31 Jul 2026 00:10:44 GMT\r\nContent-Type: image/png\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Tue, 09 Jun 2026 13:37:11 GMT\r\nVary: Accept-Encoding\r\nETag: W/\"6a281707-2852\"\r\nCache-Control: public, max-age=2592000, immutable\r\nAccess-Control-Allow-Origin: *\r\nX-Custom-Check: true\r\nContent-Encoding: gzip\r\nServer: Nginx\r\nL-Safe: 1785456644=ImVO6mGITWMACggqrQcdldqw9lowxQ1+VpRDuAKFwfMb9d30WLVBONutXSRguHOv4S8A2fwwrG4hosTExvfehVfTlImNbeMdeEGGOKfPxTnrTTeg4Ne14CSZz0II/fQW6e3NIBDsQDv0uQ0mehoMPQ1XrPiYIzMRuPb5r05527aZ2mNjo0YBVDxdIUBsWRdM\r\nAge: 499211\r\nL-VIA: l1=TqoDVanjjr6wMExF\r\nL-VERSION: 1784720560\r\nL-Request-Id: 3ec119fb5824fd9c2bf\r\nX-Cache-Status: HIT\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":10322,"size_decoded":11054,"mime_type":"image/png","magic":"PNG image data, 112 x 112, 8-bit/color RGBA, non-interlaced","md5":"6dd52a6a4d07f2786b1926fac1b4b06a","sha1":"9c9908204401fbe65d33cf7df8881639d6aea37d","sha256":"e02471f47b506ab510d0e0dc4224cffc03c34f950b649ce347ccd71af0bcf0ab","sha512":"fdd52f532e5c2e2c182db20e2053eee0ca8c26cec51ff75e1bc341b01911461ac72fa75887fa3114188ba32aa6341c0974d81d071fc42b605e72f73dfb87ab9c","ssdeep":"192:x0C+pMwjX2XZ456BAJu+1KzdjCfDrRq6wUPlJyh2h4PAmWP5yQSkHxfYX32H5TRm:EjGXZau+1MjCrrRLlqGOnWcQSkRQX3IG","tlshash":"3822c054370836084f737a4362ac4e837a06040ffdf9b7919a6372659a5b94e44cfb66","first_seen":"2023-07-01T07:21:14Z","last_seen":"2026-07-31T12:41:47.081455Z","times_seen":2489,"resource_available":false,"data":null}},"time_used":3158,"timings":{"blocked":2815,"dns":0,"connect":0,"send":0,"wait":343,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-31","alert":"Phishing Block","trigger":"y42t.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-31","alert":"Sinkholed","trigger":"y42t.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"photo.365live88.com/img/fb/team/b4b0a699b82c4fbbbd7952455f043c18?win007=sell","fqdn":"photo.365live88.com","domain":"365live88.com","tld":"com"},"ip":{"addr":"154.41.93.240","port":443,"asn":174,"as":"COGENT-174","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://y42t.top/","date":"2026-07-31T00:10:42.438Z","timestamp":1785456642438,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"photo.365live88.com","organization":""},"issuer":{"commonName":"Encryption Everywhere DV TLS CA - G2","organization":"DigiCert Inc"},"validity":{"start":"Sat, 01 Nov 2025 00:00:00 GMT","end":"Sat, 31 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"45:76:43:9C:31:C5:89:A6:99:FD:9B:D8:6C:A9:3A:E6:2F:D6:E9:80","sha256":"73:27:CF:D8:8D:AC:95:46:00:5D:67:05:1E:70:22:3E:17:F0:94:78:CD:6F:A6:9C:C8:5F:B5:3B:75:60:3D:C8"}}},"request":{"raw":"GET /img/fb/team/b4b0a699b82c4fbbbd7952455f043c18?win007=sell HTTP/1.1\r\nHost: photo.365live88.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://y42t.top/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: openresty\r\nDate: Fri, 31 Jul 2026 00:10:43 GMT\r\nContent-Type: image/png\r\nContent-Length: 38695\r\nConnection: keep-alive\r\nAccept-Ranges: bytes\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Expose-Headers: X-Log, X-Reqid\r\nAccess-Control-Max-Age: 2592000\r\nAge: 92426\r\nCache-Control: public, max-age=31536000\r\nContent-Disposition: inline; filename=\"b4b0a699b82c4fbbbd7952455f043c18\"; filename*=utf-8''b4b0a699b82c4fbbbd7952455f043c18\r\nContent-Md5: G1Tp/b6ck2AjxVKZ2kFltw==\r\nContent-Transfer-Encoding: binary\r\nEtag: \"FjT7oQF0oEAOtprussXDFspMwyUI\"\r\nLast-Modified: Fri, 24 Jul 2026 19:49:35 GMT\r\nX-Log: X-Log\r\nX-M-Log: QNM:wldsg121;QNM3\r\nX-M-Reqid: eiySZYjlx\r\nX-Qiniu-Zone: as0\r\nX-Qnm-Cache: Hit\r\nX-Reqid: vVMAAABtOM1L48YY\r\nX-Svr: IO\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":38695,"size_decoded":39451,"mime_type":"image/png","magic":"PNG image data, 300 x 342, 8-bit/color RGBA, non-interlaced","md5":"1b54e9fdbe9c936023c55299da4165b7","sha1":"34fba10174a0400eb69aeeb2c5c316ca4cc32508","sha256":"40d0ae1981f37ef0199cea175ca6e11c75e98a9317e2468c25168565f132ed1a","sha512":"2efd42c71a11bfca6b1e9cd6c3910709216d37593dd2f88f9fdb4498ee5fc8fb89def2f46d76fe60508db457677f040f1b59527196ffbdd0d5fd1631d17f9a2e","ssdeep":"768:oaqIVT7+oCJ4RC2/+vMTJ49dQTaQH1ojt/IcI3ItCDD+TKdm:oaqIVqHp9dQTaQHG+3kTKo","tlshash":"2103f008411e667817e7d7749fa2942a3c9fcc15c3a7b023b0d3e7e8a084667a4cd531","first_seen":"2025-08-27T13:56:24.430949Z","last_seen":"2026-07-31T00:12:52.462631Z","times_seen":151,"resource_available":false,"data":null}},"time_used":1995,"timings":{"blocked":-1,"dns":632,"connect":250,"send":0,"wait":330,"receive":280,"ssl":502},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"photo.365live88.com/img/fb/team/9660b8f861e94a8b88af15206befa0da?win007=sell","fqdn":"photo.365live88.com","domain":"365live88.com","tld":"com"},"ip":{"addr":"154.41.93.240","port":443,"asn":174,"as":"COGENT-174","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://y42t.top/","date":"2026-07-31T00:10:42.505Z","timestamp":1785456642505,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"photo.365live88.com","organization":""},"issuer":{"commonName":"Encryption Everywhere DV TLS CA - G2","organization":"DigiCert Inc"},"validity":{"start":"Sat, 01 Nov 2025 00:00:00 GMT","end":"Sat, 31 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"45:76:43:9C:31:C5:89:A6:99:FD:9B:D8:6C:A9:3A:E6:2F:D6:E9:80","sha256":"73:27:CF:D8:8D:AC:95:46:00:5D:67:05:1E:70:22:3E:17:F0:94:78:CD:6F:A6:9C:C8:5F:B5:3B:75:60:3D:C8"}}},"request":{"raw":"GET /img/fb/team/9660b8f861e94a8b88af15206befa0da?win007=sell HTTP/1.1\r\nHost: photo.365live88.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://y42t.top/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: openresty\r\nDate: Fri, 31 Jul 2026 00:10:46 GMT\r\nContent-Type: image/png\r\nContent-Length: 11173\r\nConnection: keep-alive\r\nAccept-Ranges: bytes\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Expose-Headers: X-Log, X-Reqid\r\nAccess-Control-Max-Age: 2592000\r\nAge: 51035\r\nCache-Control: public, max-age=31536000\r\nContent-Disposition: inline; filename=\"9660b8f861e94a8b88af15206befa0da\"; filename*=utf-8''9660b8f861e94a8b88af15206befa0da\r\nContent-Md5: XCju/7kf4Q3ER243RW4UbA==\r\nContent-Transfer-Encoding: binary\r\nEtag: \"Framch7piZoXBRfsMXJY--xp1rQ9\"\r\nLast-Modified: Fri, 24 Jul 2026 19:50:01 GMT\r\nX-Log: X-Log\r\nX-M-Log: QNM:wldsg121;QNM3\r\nX-M-Reqid: T6vqUCLuK\r\nX-Qiniu-Zone: as0\r\nX-Qnm-Cache: Hit\r\nX-Reqid: C1wAAADAacjxCMcY\r\nX-Svr: IO\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":11173,"size_decoded":11929,"mime_type":"image/png","magic":"PNG image data, 80 x 80, 8-bit/color RGBA, non-interlaced","md5":"5c28eeffb91fe10dc4476e37456e146c","sha1":"b6a6721ee9899a170517ec317258fbec69d6b43d","sha256":"81cdc7d6eb6a6df6cb207f837413f4036cda0d9b34861eca96ddc2d5db3b9ae0","sha512":"176965815b768b961f741d85e3cb28b6c636f2f43113ca118669c96c1d7df808c886c76c68a488b1cee57aa31d880059c00dc7123519823121aba1615eff35c1","ssdeep":"192:j18EM0Hy1wuu0uZReTFohAEaYmjcy+41+j/3o/dxzGAqA2ufgX:jyVno0GwSaDcyf1+74lhGAqAEX","tlshash":"5632bef7156274db2502ab332882fd6eb004147c230b49900dbfdcb0ea778136af4966","first_seen":"2025-08-29T11:05:53.176815Z","last_seen":"2026-07-31T05:07:39.015545Z","times_seen":10,"resource_available":false,"data":null}},"time_used":3908,"timings":{"blocked":3655,"dns":0,"connect":0,"send":0,"wait":253,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"photo.365live88.com/img/fb/team/f468ae8d2ef14627879476ca551710dd?win007=sell","fqdn":"photo.365live88.com","domain":"365live88.com","tld":"com"},"ip":{"addr":"154.41.93.240","port":443,"asn":174,"as":"COGENT-174","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://y42t.top/","date":"2026-07-31T00:10:42.507Z","timestamp":1785456642507,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"photo.365live88.com","organization":""},"issuer":{"commonName":"Encryption Everywhere DV TLS CA - G2","organization":"DigiCert Inc"},"validity":{"start":"Sat, 01 Nov 2025 00:00:00 GMT","end":"Sat, 31 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"45:76:43:9C:31:C5:89:A6:99:FD:9B:D8:6C:A9:3A:E6:2F:D6:E9:80","sha256":"73:27:CF:D8:8D:AC:95:46:00:5D:67:05:1E:70:22:3E:17:F0:94:78:CD:6F:A6:9C:C8:5F:B5:3B:75:60:3D:C8"}}},"request":{"raw":"GET /img/fb/team/f468ae8d2ef14627879476ca551710dd?win007=sell HTTP/1.1\r\nHost: photo.365live88.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://y42t.top/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: openresty\r\nDate: Fri, 31 Jul 2026 00:10:46 GMT\r\nContent-Type: image/png\r\nContent-Length: 7372\r\nConnection: keep-alive\r\nAccept-Ranges: bytes\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Expose-Headers: X-Log, X-Reqid\r\nAccess-Control-Max-Age: 2592000\r\nAge: 51035\r\nCache-Control: public, max-age=31536000\r\nContent-Disposition: inline; filename=\"f468ae8d2ef14627879476ca551710dd\"; filename*=utf-8''f468ae8d2ef14627879476ca551710dd\r\nContent-Md5: TKt/jXuYeOph9MOmL/V5zw==\r\nContent-Transfer-Encoding: binary\r\nEtag: \"Ft6BMjivIiz3gc91g2IXzwg_J5Nq\"\r\nLast-Modified: Fri, 24 Jul 2026 19:50:02 GMT\r\nX-Log: X-Log\r\nX-M-Log: QNM:wldsg121;QNM3\r\nX-M-Reqid: XmrLGYgRE\r\nX-Qiniu-Zone: as0\r\nX-Qnm-Cache: Hit\r\nX-Reqid: Gz8AAACdYMzxCMcY\r\nX-Svr: IO\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":7372,"size_decoded":8127,"mime_type":"image/png","magic":"PNG image data, 150 x 150, 8-bit/color RGBA, non-interlaced","md5":"4cab7f8d7b9878ea61f4c3a62ff579cf","sha1":"de813238af222cf781cf75836217cf083f27936a","sha256":"21f7d4f6f9ab13111bbc18dbe6955255029ca4cb63438a87dde3dac4cff4c678","sha512":"cb952bc1ad8fbc1f54497c42450a23377c64683801b0df82ccd03ac0c2f0455c00845b8f9b6ed2d5e8623dda9b6c8028b089de7bc1cb193ebea1f1a2ac23d8ce","ssdeep":"192:gl3sqJM3SSjLxYtU0g+fYPM25Zc5zakw+F:E3sqJ8BYt7gW/25Z8c8","tlshash":"2fe1afa4ca831b92f633dd53c2824014140d529cecf735b782a3eb6ebea150d7e8c671","first_seen":"2023-11-11T13:40:01Z","last_seen":"2026-07-31T05:07:39.016485Z","times_seen":16,"resource_available":false,"data":null}},"time_used":3992,"timings":{"blocked":3724,"dns":0,"connect":0,"send":0,"wait":268,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"photo.365live88.com/img/fb/team/23c7f25243d54cd4acb2232364c93a75?win007=sell","fqdn":"photo.365live88.com","domain":"365live88.com","tld":"com"},"ip":{"addr":"154.41.93.240","port":443,"asn":174,"as":"COGENT-174","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://y42t.top/","date":"2026-07-31T00:10:42.520Z","timestamp":1785456642520,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"photo.365live88.com","organization":""},"issuer":{"commonName":"Encryption Everywhere DV TLS CA - G2","organization":"DigiCert Inc"},"validity":{"start":"Sat, 01 Nov 2025 00:00:00 GMT","end":"Sat, 31 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"45:76:43:9C:31:C5:89:A6:99:FD:9B:D8:6C:A9:3A:E6:2F:D6:E9:80","sha256":"73:27:CF:D8:8D:AC:95:46:00:5D:67:05:1E:70:22:3E:17:F0:94:78:CD:6F:A6:9C:C8:5F:B5:3B:75:60:3D:C8"}}},"request":{"raw":"GET /img/fb/team/23c7f25243d54cd4acb2232364c93a75?win007=sell HTTP/1.1\r\nHost: photo.365live88.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://y42t.top/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: openresty\r\nDate: Fri, 31 Jul 2026 00:10:47 GMT\r\nContent-Type: image/png\r\nContent-Length: 10985\r\nConnection: keep-alive\r\nAccept-Ranges: bytes\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Expose-Headers: X-Log, X-Reqid\r\nAccess-Control-Max-Age: 2592000\r\nAge: 36618\r\nCache-Control: public, max-age=31536000\r\nContent-Disposition: inline; filename=\"23c7f25243d54cd4acb2232364c93a75\"; filename*=utf-8''23c7f25243d54cd4acb2232364c93a75\r\nContent-Md5: XCDxESB0kWmeXkCpikI5Aw==\r\nContent-Transfer-Encoding: binary\r\nEtag: \"FmLTlvnmgL3TuL-6Nd4HG29OsMoj\"\r\nLast-Modified: Thu, 23 Jul 2026 20:13:30 GMT\r\nX-Log: X-Log\r\nX-M-Log: QNM:wldsg121;QNM3\r\nX-M-Reqid: EEwrFwQPO\r\nX-Qiniu-Zone: as0\r\nX-Qnm-Cache: Hit\r\nX-Reqid: YUIAAAConowOFscY\r\nX-Svr: IO\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":10985,"size_decoded":11741,"mime_type":"image/png","magic":"PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced","md5":"5c20f111207491699e5e40a98a423903","sha1":"62d396f9e680bdd3b8bfba35de071b6f4eb0ca23","sha256":"d5be24a326d7e0664d92b480ce3f6d8ba1e49dc4849d15f60435f81cb8b126f0","sha512":"3e2afe9ddaccc8455db801092405d5d7459fa5e2af0d76317ffc57cbd41a615cf30fb32a27634ceaad94fef7ea536dc341491dd9717c9173516f366c66aa3439","ssdeep":"192:r5GGETps4tbDnwt4EfjNk6Zh0P9dHRjKf0lE22HLQCrW51GfD5:r5GGEls4JDnTgNk6v0PXQYvIQCrmyD5","tlshash":"f632c0e9efe0e9327fdff44a021516df0c970954578a133a61d2334a968db1e640d68f","first_seen":"2026-06-17T11:08:58.067513Z","last_seen":"2026-07-31T12:34:14.005518Z","times_seen":106,"resource_available":false,"data":null}},"time_used":4970,"timings":{"blocked":4725,"dns":0,"connect":0,"send":0,"wait":245,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"photo.365live88.com/img/fb/team/7030c4395671450a8d39085b92cee52a?win007=sell","fqdn":"photo.365live88.com","domain":"365live88.com","tld":"com"},"ip":{"addr":"154.41.93.240","port":443,"asn":174,"as":"COGENT-174","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://y42t.top/","date":"2026-07-31T00:10:42.571Z","timestamp":1785456642571,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"photo.365live88.com","organization":""},"issuer":{"commonName":"Encryption Everywhere DV TLS CA - G2","organization":"DigiCert Inc"},"validity":{"start":"Sat, 01 Nov 2025 00:00:00 GMT","end":"Sat, 31 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"45:76:43:9C:31:C5:89:A6:99:FD:9B:D8:6C:A9:3A:E6:2F:D6:E9:80","sha256":"73:27:CF:D8:8D:AC:95:46:00:5D:67:05:1E:70:22:3E:17:F0:94:78:CD:6F:A6:9C:C8:5F:B5:3B:75:60:3D:C8"}}},"request":{"raw":"GET /img/fb/team/7030c4395671450a8d39085b92cee52a?win007=sell HTTP/1.1\r\nHost: photo.365live88.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://y42t.top/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: openresty\r\nDate: Fri, 31 Jul 2026 00:10:51 GMT\r\nContent-Type: image/png\r\nContent-Length: 39243\r\nConnection: keep-alive\r\nAccept-Ranges: bytes\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Expose-Headers: X-Log, X-Reqid\r\nAccess-Control-Max-Age: 2592000\r\nAge: 2422\r\nCache-Control: public, max-age=31536000\r\nContent-Disposition: inline; filename=\"7030c4395671450a8d39085b92cee52a\"; filename*=utf-8''7030c4395671450a8d39085b92cee52a\r\nContent-Md5: +f5znR9zlQDe+Z7CZEUHlg==\r\nContent-Transfer-Encoding: binary\r\nEtag: \"FuugUMTe_T5yMzCH98RrCEY2iEHL\"\r\nLast-Modified: Sat, 25 Jul 2026 19:18:36 GMT\r\nX-Log: X-Log\r\nX-M-Log: QNM:wldsg121;QNM3\r\nX-M-Reqid: M9euGK5Vc\r\nX-Qiniu-Zone: as0\r\nX-Qnm-Cache: Hit\r\nX-Reqid: 7GQAAAAoPmUpNccY\r\nX-Svr: IO\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":39243,"size_decoded":39998,"mime_type":"image/png","magic":"PNG image data, 180 x 180, 8-bit/color RGBA, non-interlaced","md5":"f9fe739d1f739500def99ec264450796","sha1":"eba050c4defd3e72333087f7c46b0846368841cb","sha256":"a4e7a558d13b8e7a1549c8b0ef18a54c6c20477c5f2ead2dc262c5972dda1158","sha512":"6b3878b8d00d8b20e301aa0876f2e34f15daf0624bc14145015f75e32af52293a14c99e09bcbfa9fbc5fb1a6ff62918a279792ec1ac84dc1f860e37c39283094","ssdeep":"768:mCskeYyVyFeuPS9Y+2iCyARrhtMEMvHzOxCwc/i9pmhHdt8ey:mCTeV4eTKfyCrPuTyS4pgty","tlshash":"6503e1b113d9710774ea2b47db244560a0f08d7164236fd29f0e8eafa04b3d629348bf","first_seen":"2023-06-18T16:15:31Z","last_seen":"2026-07-31T12:41:47.063069Z","times_seen":213,"resource_available":false,"data":null}},"time_used":9249,"timings":{"blocked":8972,"dns":0,"connect":0,"send":0,"wait":261,"receive":16,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"y42t.top/img/service.68be110a.png","fqdn":"y42t.top","domain":"y42t.top","tld":"top"},"ip":{"addr":"154.39.104.138","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://y42t.top/","date":"2026-07-31T00:10:41.078Z","timestamp":1785456641078,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"p40f.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 10:44:09 GMT","end":"Tue, 20 Oct 2026 10:44:08 GMT"},"fingerprint":{"sha1":"41:09:2C:3F:FC:9C:25:A9:DB:51:15:BB:D1:5A:D8:01:DC:38:AD:F8","sha256":"49:3B:29:C7:5B:B6:12:CF:84:14:5B:09:42:7D:EF:AA:61:29:EC:A1:D5:40:B5:64:5C:F1:33:AB:9B:E1:13:4D"}}},"request":{"raw":"GET /img/service.68be110a.png HTTP/1.1\r\nHost: y42t.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://y42t.top/css/index-399e2569.1781011881923.a7b0b4f4.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 31 Jul 2026 00:10:44 GMT\r\nContent-Type: image/png\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Tue, 09 Jun 2026 13:37:11 GMT\r\nVary: Accept-Encoding\r\nETag: W/\"6a281707-2991\"\r\nCache-Control: public, max-age=2592000, immutable\r\nAccess-Control-Allow-Origin: *\r\nX-Custom-Check: true\r\nContent-Encoding: gzip\r\nServer: Nginx\r\nL-Safe: 1785456644=ImVO6mGITWMACggqrQcdldqw9lowxQ1+VpRDuAKFwfMb9d30WLVBONutXSRguHOv4S8A2fwwrG4hosTExvfehVfTlImNbeMdeEGGOKfPxTnrTTeg4Ne14CSZz0II/fQW6e3NIBDsQDv0uQ0mehoMPQ1XrPiYIzMRuPb5r05527aZ2mNjo0YBVDxdIUBsWRdM\r\nAge: 499211\r\nL-VIA: l1=TqoDVanjjr6wMExF\r\nL-VERSION: 1784720560\r\nL-Request-Id: 3ec219fb5824fb2ba23\r\nX-Cache-Status: HIT\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":10641,"size_decoded":11373,"mime_type":"image/png","magic":"PNG image data, 112 x 112, 8-bit/color RGBA, non-interlaced","md5":"993784a38ddc1156572bfc3308055ead","sha1":"becff431867226bf323b5a6535fa383992f107eb","sha256":"abca3af980888b08c6cbd57366b3ac94344d66ea048484c4f9867e300ee8703a","sha512":"48790c6340f273a58295fc6607306353ab69d5a818569fe36ef1bffc8fff084b23d37b401e10502b830c67a5efedca56c1c9d778d6198e4069018d055f1869f0","ssdeep":"192:NdsarkpjwOOmfStcnaHtzB3l2eKD9RdfXtRqi3ln+ojjjKMGlnyL5H7nx+:nJQpjgOz9Dd0orKMGlnA5Hbs","tlshash":"8822c0c41e1be1b6d2ffa916b28543a04b3421fda1a24c342d828c04ccad56ac91f9e7","first_seen":"2023-07-01T07:21:14Z","last_seen":"2026-07-31T12:41:47.144747Z","times_seen":2473,"resource_available":false,"data":null}},"time_used":3092,"timings":{"blocked":2789,"dns":0,"connect":0,"send":0,"wait":303,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-31","alert":"Sinkholed","trigger":"y42t.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-31","alert":"Phishing Block","trigger":"y42t.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"photo.365live88.com/img/fb/team/c626c1c15fa84f6e8f5c53232cd37606?win007=sell","fqdn":"photo.365live88.com","domain":"365live88.com","tld":"com"},"ip":{"addr":"154.41.93.240","port":443,"asn":174,"as":"COGENT-174","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://y42t.top/","date":"2026-07-31T00:10:42.517Z","timestamp":1785456642517,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"photo.365live88.com","organization":""},"issuer":{"commonName":"Encryption Everywhere DV TLS CA - G2","organization":"DigiCert Inc"},"validity":{"start":"Sat, 01 Nov 2025 00:00:00 GMT","end":"Sat, 31 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"45:76:43:9C:31:C5:89:A6:99:FD:9B:D8:6C:A9:3A:E6:2F:D6:E9:80","sha256":"73:27:CF:D8:8D:AC:95:46:00:5D:67:05:1E:70:22:3E:17:F0:94:78:CD:6F:A6:9C:C8:5F:B5:3B:75:60:3D:C8"}}},"request":{"raw":"GET /img/fb/team/c626c1c15fa84f6e8f5c53232cd37606?win007=sell HTTP/1.1\r\nHost: photo.365live88.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://y42t.top/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: openresty\r\nDate: Fri, 31 Jul 2026 00:10:47 GMT\r\nContent-Type: image/png\r\nContent-Length: 67785\r\nConnection: keep-alive\r\nAccept-Ranges: bytes\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Expose-Headers: X-Log, X-Reqid\r\nAccess-Control-Max-Age: 2592000\r\nAge: 40223\r\nCache-Control: public, max-age=31536000\r\nContent-Disposition: inline; filename=\"c626c1c15fa84f6e8f5c53232cd37606\"; filename*=utf-8''c626c1c15fa84f6e8f5c53232cd37606\r\nContent-Md5: +yj9bC/PXOWUXSN59Jg0bw==\r\nContent-Transfer-Encoding: binary\r\nEtag: \"FhrKqR3w9GthTKnrnI3ekFzeVObq\"\r\nLast-Modified: Thu, 23 Jul 2026 20:13:38 GMT\r\nX-Log: X-Log\r\nX-M-Log: QNM:wldsg119;QNM3\r\nX-M-Reqid: UYK3bllgr\r\nX-Qiniu-Zone: as0\r\nX-Qnm-Cache: Hit\r\nX-Reqid: skEAAAAPnkrHEscY\r\nX-Svr: IO\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":67785,"size_decoded":68541,"mime_type":"image/png","magic":"PNG image data, 245 x 244, 8-bit/color RGBA, non-interlaced","md5":"fb28fd6c2fcf5ce5945d2379f498346f","sha1":"1acaa91df0f46b614ca9eb9c8dde905cde54e6ea","sha256":"0f745712faf28225afc496de02d2bf51e9fa2fd233623ca77eb1f27b71e41386","sha512":"5bdb8b3051449949f5911902d2477791ca762a60114f3ceceb88164e9da790500c8d4938aae7fedac5b85921c638814a39899b163571cbf9e7f37f441313e585","ssdeep":"1536:lvF9zE8gUZnTdrf9W3KptPT/8E66eSDTiEp/g0uE4ifn38cftAq0Vmwt:l99zE8gUFhf9WqB8E669DTi0o0uZC3fS","tlshash":"b863029313e0b55fe385a29e2e22e36ef03d3976fc33647c191ca8254356187a7a1167","first_seen":"2025-08-01T05:00:14.144007Z","last_seen":"2026-07-31T12:34:13.992597Z","times_seen":109,"resource_available":false,"data":null}},"time_used":4955,"timings":{"blocked":4586,"dns":0,"connect":0,"send":0,"wait":282,"receive":87,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"photo.365live88.com/img/fb/team/d77406b967444a6ba458a8fbfb4d60d6?win007=sell","fqdn":"photo.365live88.com","domain":"365live88.com","tld":"com"},"ip":{"addr":"154.41.93.240","port":443,"asn":174,"as":"COGENT-174","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://y42t.top/","date":"2026-07-31T00:10:42.543Z","timestamp":1785456642543,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"photo.365live88.com","organization":""},"issuer":{"commonName":"Encryption Everywhere DV TLS CA - G2","organization":"DigiCert Inc"},"validity":{"start":"Sat, 01 Nov 2025 00:00:00 GMT","end":"Sat, 31 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"45:76:43:9C:31:C5:89:A6:99:FD:9B:D8:6C:A9:3A:E6:2F:D6:E9:80","sha256":"73:27:CF:D8:8D:AC:95:46:00:5D:67:05:1E:70:22:3E:17:F0:94:78:CD:6F:A6:9C:C8:5F:B5:3B:75:60:3D:C8"}}},"request":{"raw":"GET /img/fb/team/d77406b967444a6ba458a8fbfb4d60d6?win007=sell HTTP/1.1\r\nHost: photo.365live88.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://y42t.top/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: openresty\r\nDate: Fri, 31 Jul 2026 00:10:49 GMT\r\nContent-Type: image/png\r\nContent-Length: 362437\r\nConnection: keep-alive\r\nAccept-Ranges: bytes\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Expose-Headers: X-Log, X-Reqid\r\nAccess-Control-Max-Age: 2592000\r\nAge: 22242\r\nCache-Control: public, max-age=31536000\r\nContent-Disposition: inline; filename=\"d77406b967444a6ba458a8fbfb4d60d6\"; filename*=utf-8''d77406b967444a6ba458a8fbfb4d60d6\r\nContent-Md5: 9skNAxDdQglG6tz/cFBKxA==\r\nContent-Transfer-Encoding: binary\r\nEtag: \"FhqQoCfwFgYD5QvYSQ4DDIbtlLKl\"\r\nLast-Modified: Sat, 25 Jul 2026 19:17:24 GMT\r\nX-Log: X-Log\r\nX-M-Log: QNM:wldsg121;QNM3\r\nX-M-Reqid: CsDOmZcxL\r\nX-Qiniu-Zone: as0\r\nX-Qnm-Cache: Hit\r\nX-Reqid: urgAAABoPk4iI8cY\r\nX-Svr: IO\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":362437,"size_decoded":363194,"mime_type":"image/png","magic":"PNG image data, 1200 x 1212, 8-bit/color RGBA, non-interlaced","md5":"f6c90d0310dd420946eadcff70504ac4","sha1":"1a90a027f0160603e50bd8490e030c86ed94b2a5","sha256":"bdc7ce95d41e876605ebcd5c5967392d099f7f2b0b13f89d759bcefc66c0c598","sha512":"2cea04b5af7580d9a4bd66ccf1b2abc04a7f367aee58683f85191e876bee5699cba03f81e2a8ff611386a5f006dc52ff114c1445dca7cf642425ab8891844d0c","ssdeep":"6144:NrXDnGt/sMKC+F5fhMGwqs3/DayezpoDOemKVj7PKHvc+vDYCv:xXD0bKf55MG/sLa7WxmKVPKHvLDnv","tlshash":"fa74235ab4c779dde183a4bc7da075b215e074de46b14705e673a04e0c3f12b0a8aafe","first_seen":"2026-01-24T17:33:49.240215Z","last_seen":"2026-07-31T12:41:15.217598Z","times_seen":49,"resource_available":false,"data":null}},"time_used":7147,"timings":{"blocked":6680,"dns":0,"connect":0,"send":0,"wait":247,"receive":220,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"photo.365live88.com/img/fb/team/38b1961bc1024634a69c5b1ab0ccc82d?win007=sell","fqdn":"photo.365live88.com","domain":"365live88.com","tld":"com"},"ip":{"addr":"154.41.93.240","port":443,"asn":174,"as":"COGENT-174","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://y42t.top/","date":"2026-07-31T00:10:42.574Z","timestamp":1785456642574,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"photo.365live88.com","organization":""},"issuer":{"commonName":"Encryption Everywhere DV TLS CA - G2","organization":"DigiCert Inc"},"validity":{"start":"Sat, 01 Nov 2025 00:00:00 GMT","end":"Sat, 31 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"45:76:43:9C:31:C5:89:A6:99:FD:9B:D8:6C:A9:3A:E6:2F:D6:E9:80","sha256":"73:27:CF:D8:8D:AC:95:46:00:5D:67:05:1E:70:22:3E:17:F0:94:78:CD:6F:A6:9C:C8:5F:B5:3B:75:60:3D:C8"}}},"request":{"raw":"GET /img/fb/team/38b1961bc1024634a69c5b1ab0ccc82d?win007=sell HTTP/1.1\r\nHost: photo.365live88.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://y42t.top/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: openresty\r\nDate: Fri, 31 Jul 2026 00:10:51 GMT\r\nContent-Type: image/png\r\nContent-Length: 11142\r\nConnection: keep-alive\r\nAccept-Ranges: bytes\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Expose-Headers: X-Log, X-Reqid\r\nAccess-Control-Max-Age: 2592000\r\nAge: 648\r\nCache-Control: public, max-age=31536000\r\nContent-Disposition: inline; filename=\"38b1961bc1024634a69c5b1ab0ccc82d\"; filename*=utf-8''38b1961bc1024634a69c5b1ab0ccc82d\r\nContent-Md5: cghsF4G2NQriayMB5wSnaw==\r\nContent-Transfer-Encoding: binary\r\nEtag: \"Fr1yEtLamnWXFAskUKtUszfRgu7N\"\r\nLast-Modified: Sat, 25 Jul 2026 19:18:39 GMT\r\nX-Log: X-Log\r\nX-M-Log: QNM:wldsg119;QNM3\r\nX-M-Reqid: CDfSULjTn\r\nX-Qiniu-Zone: as0\r\nX-Qnm-Cache: Hit\r\nX-Reqid: MocAAADxAm3GNscY\r\nX-Svr: IO\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":11142,"size_decoded":11896,"mime_type":"image/png","magic":"PNG image data, 97 x 97, 8-bit/color RGBA, non-interlaced","md5":"72086c1781b6350ae26b2301e704a76b","sha1":"bd7212d2da9a7597140b2450ab54b337d182eecd","sha256":"2cf1e851dd3ea6ea047b4ad0cb1115c9b813a11752aa5fbc668eb47a72ca3a3c","sha512":"80c8f24a4e1022a0d87d11f1911f0a018ccf70b757397b352420d2d4de89c27ae922c8309d3afb49d83c5dffb71d29c2d7e82030d29bedd626195011884f6808","ssdeep":"192:AotS0rGF7PXine49agMnzQb7Gim8rpFEwwh/2fCzDcXPgz2XBDrrpM:HtSNPye4968/Gim8Bk2fCPcEutM","tlshash":"1f32c0b20a75ae17357a1bd0b2cbc0f842de82f32cd0deec970654268ce5957970a16c","first_seen":"2024-08-19T15:01:26.194594Z","last_seen":"2026-07-31T12:41:47.073223Z","times_seen":88,"resource_available":false,"data":null}},"time_used":9354,"timings":{"blocked":9073,"dns":0,"connect":0,"send":0,"wait":281,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"y42t.top/api/tenant/domain/list","fqdn":"y42t.top","domain":"y42t.top","tld":"top"},"ip":{"addr":"154.39.104.138","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://y42t.top/","date":"2026-07-31T00:10:42.029Z","timestamp":1785456642029,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"p40f.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 10:44:09 GMT","end":"Tue, 20 Oct 2026 10:44:08 GMT"},"fingerprint":{"sha1":"41:09:2C:3F:FC:9C:25:A9:DB:51:15:BB:D1:5A:D8:01:DC:38:AD:F8","sha256":"49:3B:29:C7:5B:B6:12:CF:84:14:5B:09:42:7D:EF:AA:61:29:EC:A1:D5:40:B5:64:5C:F1:33:AB:9B:E1:13:4D"}}},"request":{"raw":"GET /api/tenant/domain/list HTTP/1.1\r\nHost: y42t.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://y42t.top/\r\nx-request-source: https://y42t.top\r\nXign: bYUFiA/2UfnM94jDUyTF4aY5rUP/RoKZvjAdU3n7rMC1YpNXb22F+R0ZwLgdCTm7dkT+DR33+8x79PHY1P5cmVwbYdCv6k48jaHW0pGDT3iqmgwGk1rLHXf6RF2fuwZylQ0Oc52suKi7TpF7FbcY9SrnJQbw7Y+lcq7uoYm2dW8=\r\ntimestamp: 1785456641961\r\nsign: 4nep1i2h5g317o2d\r\nversion: 5.6.12.0\r\nclient-type: web\r\ndevice-id: h7Ebc4YSNiCSchfp8FT2WyTT845kFyYC\r\nlang: zh-CN\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 31 Jul 2026 00:10:42 GMT\r\nContent-Type: application/json\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nExpires: Fri, 31 Jul 2026 00:20:42 GMT\r\nCache-Control: public, max-age=600, s-maxage=600, must-revalidate, stale-while-revalidate=30\r\nX-XSS-Protection: 1; mode=block\r\nX-Request-ID: 03745c24b3864265a30e4749c9720526\r\nPragma: public\r\nVary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nX-Content-Type-Options: nosniff\r\nAccess-Control-Allow-Origin: *\r\nX-Custom-Check: true\r\nContent-Encoding: gzip\r\nServer: Nginx\r\nL-Safe: 1785456642=csqYCqnSrfqstQvye8K/cOFcRTOv1c0xbYhymJAs0/02+uXPG5GVyZ0p6izerPHm8MGf7A/o5MmlVb25OTDKDKeQU0rR3SBVQb7DhxtPpD3sSzxoSDG3GUN9oldUbp9/49xVY7UWBgnWGNvQm3pHmukuHRLxIzXXppUlpGs5PUC8OL5ESDjYobwSrUxT4jKY\r\nL-VIA: l1=TqoDVanjjr6wMExF\r\nL-VERSION: 1784720560\r\nL-Request-Id: 3ec219fb58249caba21\r\nX-Cache-Status: BYPASS\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1108,"size_decoded":1825,"mime_type":"application/json","magic":"JSON text data","md5":"5d9e96bd132a2c24281ae50f2b09efe4","sha1":"503ea18100d0f1573baa195933355a1372e93841","sha256":"7f205b18b5deaae96622989dbc8ad73999a9616e96ef26d909f19525deadb328","sha512":"ab5a589dc81944d2fe05d656777e9e490d42a2fd68c7e577387cfdd47c9b0c5276ca2f91a3868407c373e500d00bb5360a5ae035c7c0cb1addf47f20755a268b","ssdeep":"","tlshash":"fb11c6101c6f12c8d6e8d29263503345388d8b76056db91b69d6b74fae0583a32120a4","first_seen":"2025-08-29T11:05:53.144028Z","last_seen":"2026-07-31T12:41:47.012028Z","times_seen":2539,"resource_available":false,"data":null}},"time_used":619,"timings":{"blocked":328,"dns":0,"connect":0,"send":0,"wait":290,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-31","alert":"Sinkholed","trigger":"y42t.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-31","alert":"Phishing Block","trigger":"y42t.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"photo.365live88.com/img/fb/team/c68aade37c464af0bb701dec5f842674?win007=sell","fqdn":"photo.365live88.com","domain":"365live88.com","tld":"com"},"ip":{"addr":"154.41.93.240","port":443,"asn":174,"as":"COGENT-174","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://y42t.top/","date":"2026-07-31T00:10:42.526Z","timestamp":1785456642526,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"photo.365live88.com","organization":""},"issuer":{"commonName":"Encryption Everywhere DV TLS CA - G2","organization":"DigiCert Inc"},"validity":{"start":"Sat, 01 Nov 2025 00:00:00 GMT","end":"Sat, 31 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"45:76:43:9C:31:C5:89:A6:99:FD:9B:D8:6C:A9:3A:E6:2F:D6:E9:80","sha256":"73:27:CF:D8:8D:AC:95:46:00:5D:67:05:1E:70:22:3E:17:F0:94:78:CD:6F:A6:9C:C8:5F:B5:3B:75:60:3D:C8"}}},"request":{"raw":"GET /img/fb/team/c68aade37c464af0bb701dec5f842674?win007=sell HTTP/1.1\r\nHost: photo.365live88.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://y42t.top/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: openresty\r\nDate: Fri, 31 Jul 2026 00:10:47 GMT\r\nContent-Type: image/png\r\nContent-Length: 29942\r\nConnection: keep-alive\r\nAccept-Ranges: bytes\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Expose-Headers: X-Log, X-Reqid\r\nAccess-Control-Max-Age: 2592000\r\nAge: 29319\r\nCache-Control: public, max-age=31536000\r\nContent-Disposition: inline; filename=\"c68aade37c464af0bb701dec5f842674\"; filename*=utf-8''c68aade37c464af0bb701dec5f842674\r\nContent-Md5: 2EUqjGzv/sqI1qY8Vr+V+g==\r\nContent-Transfer-Encoding: binary\r\nEtag: \"Fv-M-EU6cCxDFEQRbGWD4TBmQEQC\"\r\nLast-Modified: Sat, 25 Jul 2026 19:15:16 GMT\r\nX-Log: X-Log\r\nX-M-Log: QNM:wldsg119;QNM3\r\nX-M-Reqid: riwbWYRDp\r\nX-Qiniu-Zone: as0\r\nX-Qnm-Cache: Hit\r\nX-Reqid: o-MAAAAHYC-yHMcY\r\nX-Svr: IO\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":29942,"size_decoded":30698,"mime_type":"image/png","magic":"PNG image data, 180 x 180, 8-bit/color RGBA, non-interlaced","md5":"d8452a8c6ceffeca88d6a63c56bf95fa","sha1":"ff8cf8453a702c431444116c6583e13066404402","sha256":"63cd113115fbd200e48f3deffb6860e157bdec210fc9f5a8916725eea457397c","sha512":"c5904cad1621eeb02d9500deb414d6ffb8844593aa532aa3b7bb2ab6c426260d8d11c387a80bd1f572167c1cac05f5d47e5625290d306f0f7f7a4ccfb3d07db5","ssdeep":"768:em1JqNIG/nG8UsdCem4YtLV5XOclcVaZY++81:em1o+85dCem4YtJ5B6Vu+81","tlshash":"aed2f14b39486b3972fd0cc6d2596510a4844d1d0af4a91398b2b7c3bff019bbf9582e","first_seen":"2023-05-30T11:51:18Z","last_seen":"2026-07-31T12:41:15.234784Z","times_seen":93,"resource_available":false,"data":null}},"time_used":5550,"timings":{"blocked":5259,"dns":0,"connect":0,"send":0,"wait":267,"receive":24,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"photo.365live88.com/img/fb/team/6b7ea6ee92a1466dbd283dd6421d2a36?win007=sell","fqdn":"photo.365live88.com","domain":"365live88.com","tld":"com"},"ip":{"addr":"154.41.93.240","port":443,"asn":174,"as":"COGENT-174","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://y42t.top/","date":"2026-07-31T00:10:42.544Z","timestamp":1785456642544,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"photo.365live88.com","organization":""},"issuer":{"commonName":"Encryption Everywhere DV TLS CA - G2","organization":"DigiCert Inc"},"validity":{"start":"Sat, 01 Nov 2025 00:00:00 GMT","end":"Sat, 31 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"45:76:43:9C:31:C5:89:A6:99:FD:9B:D8:6C:A9:3A:E6:2F:D6:E9:80","sha256":"73:27:CF:D8:8D:AC:95:46:00:5D:67:05:1E:70:22:3E:17:F0:94:78:CD:6F:A6:9C:C8:5F:B5:3B:75:60:3D:C8"}}},"request":{"raw":"GET /img/fb/team/6b7ea6ee92a1466dbd283dd6421d2a36?win007=sell HTTP/1.1\r\nHost: photo.365live88.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://y42t.top/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: openresty\r\nDate: Fri, 31 Jul 2026 00:10:49 GMT\r\nContent-Type: image/png\r\nContent-Length: 16939\r\nConnection: keep-alive\r\nAccept-Ranges: bytes\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Expose-Headers: X-Log, X-Reqid\r\nAccess-Control-Max-Age: 2592000\r\nAge: 22242\r\nCache-Control: public, max-age=31536000\r\nContent-Disposition: inline; filename=\"6b7ea6ee92a1466dbd283dd6421d2a36\"; filename*=utf-8''6b7ea6ee92a1466dbd283dd6421d2a36\r\nContent-Md5: uqRSzNxWlY5hB0xu3XYp4A==\r\nContent-Transfer-Encoding: binary\r\nEtag: \"FnCpC_FagB1CJGLNEQZDbBZXlNYb\"\r\nLast-Modified: Sat, 25 Jul 2026 19:17:25 GMT\r\nX-Log: X-Log\r\nX-M-Log: QNM:wldsg119;QNM3\r\nX-M-Reqid: nb1MnSD33\r\nX-Qiniu-Zone: as0\r\nX-Qnm-Cache: Hit\r\nX-Reqid: jz4AAADEeE8iI8cY\r\nX-Svr: IO\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":16939,"size_decoded":17695,"mime_type":"image/png","magic":"PNG image data, 180 x 195, 8-bit/color RGBA, non-interlaced","md5":"baa452ccdc56958e61074c6edd7629e0","sha1":"70a90bf15a801d422462cd1106436c165794d61b","sha256":"d0965115be9ae83146a62507855fce85daa9af58d40be866f6053e29ab327315","sha512":"2b337e71c86c653d79f21dd93725de670d6116f648197a7999e3d71c72814ddc2cd391ec7f133a69ef7f628ac12aa7a2e75f05b12e31ff40e03a75f23eceb50e","ssdeep":"384:G/QGBoXKd+7135EUYzJKFozQJZj1NS7aptm/reKj:8Y1pgzJKFoAZj1Ka+iKj","tlshash":"e272d1bb92751291f29b1670a28ecc1c4334b1686d383d4547affb985e0de4f82999c1","first_seen":"2025-09-27T19:21:32.385425Z","last_seen":"2026-07-31T12:41:15.172538Z","times_seen":32,"resource_available":false,"data":null}},"time_used":7047,"timings":{"blocked":6780,"dns":0,"connect":0,"send":0,"wait":264,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"y42t.top/jumpto/img/https://rcf-img-hk.gasdg646fs224cn.com/202503/_webp_size649x578_07a2d840-d1e1-4217-9d3b-badf80b88abd.png","fqdn":"y42t.top","domain":"y42t.top","tld":"top"},"ip":{"addr":"154.39.104.138","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://y42t.top/","date":"2026-07-31T00:10:42.840Z","timestamp":1785456642840,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"p40f.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 10:44:09 GMT","end":"Tue, 20 Oct 2026 10:44:08 GMT"},"fingerprint":{"sha1":"41:09:2C:3F:FC:9C:25:A9:DB:51:15:BB:D1:5A:D8:01:DC:38:AD:F8","sha256":"49:3B:29:C7:5B:B6:12:CF:84:14:5B:09:42:7D:EF:AA:61:29:EC:A1:D5:40:B5:64:5C:F1:33:AB:9B:E1:13:4D"}}},"request":{"raw":"GET /jumpto/img/https://rcf-img-hk.gasdg646fs224cn.com/202503/_webp_size649x578_07a2d840-d1e1-4217-9d3b-badf80b88abd.png HTTP/1.1\r\nHost: y42t.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://y42t.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 31 Jul 2026 00:10:45 GMT\r\nContent-Type: image/webp\r\nContent-Length: 77072\r\nConnection: keep-alive\r\netag: \"81934df1c48f153ec91149ba3c3beb37\"\r\nLast-Modified: Sat, 06 Dec 2025 06:20:21 GMT\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4kp68jwy%2Fi5kDx9VDeKwjBfIXQv8zVj0%2BQGAqscrWIUeTTMIi6J5u9V2c5l9UEgp0kYibNEvMfia3TmpG%2BU%2BaDiyPb%2FUK6nQHKpWuq4apH1Egy8Hl%2BL3CWPLIGn5P%2FG5SJiwiirwsPiuFUTpztLyNTo%3D\"}]}\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nAge: 499204\r\ncf-cache-status: HIT\r\nCF-RAY: a208c62b39c38ca6-HKG\r\nalt-svc: h3=\":443\"; ma=86400\r\nCache-Control: public, max-age=2592000, immutable, public, max-age=2592000, immutable\r\nAccess-Control-Allow-Origin: *\r\nX-Custom-Check: true\r\nServer: Nginx\r\nL-Safe: 1785456645=3m/UQghxNGW3gPChBH0qwAw5jhMnk/bL7ljEsAqUNfL2w1i0HQREe2rEb4k+hpOpl+mNkeotUTn7rI4RELPi496PFmfq0fH/qKdAcrqsvLVi0CluaNffWUzPkudCch2/uigQXMAy3JVAvXsWZA3UDGCysooGP/loOgkjhRbwnpUqbTZcGQok3Gq63qCfb31c\r\nL-VIA: l1=TqoDVanjjr6wMExF\r\nL-VERSION: 1784720560\r\nL-Request-Id: 3ec119fb582573ec2c6\r\nX-Cache-Status: HIT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":77072,"size_decoded":78233,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"81934df1c48f153ec91149ba3c3beb37","sha1":"263dec3db6f316ad859fae46f18adc5cbb9e5c61","sha256":"9393129dc2d2eb90aa6b0e3cae170e77eccc785d4fca575804e1d25a2bee1383","sha512":"9d322a35877bc71c33fad174b47d6377f214fba0f11bc6a6180c5032765a9f4332354a4e6192a33049ab7a20a79ef58804de08d54098f64d8511c08b50e2b6ca","ssdeep":"1536:vow5Jv2vmGSpZk1IdIwZojJkcFgxPAifiE3TcBUPpCoS+LsAEZhO96:vowCOGYZk1w7q+PaE3T8uS+Lr2hO96","tlshash":"a573127b5c2c0bb32fc676c6e2e9b5c82cc817b1478556cf5b7958af95a4311232c02a","first_seen":"2026-04-24T23:10:16.861629Z","last_seen":"2026-07-31T12:36:18.761488Z","times_seen":921,"resource_available":false,"data":null}},"time_used":3277,"timings":{"blocked":2941,"dns":0,"connect":0,"send":0,"wait":310,"receive":26,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-31","alert":"Phishing Block","trigger":"y42t.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-31","alert":"Sinkholed","trigger":"y42t.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"y42t.top/jumpto/img/https://rcf-img-hk.gasdg646fs224cn.com/202508/_webp_size1298x1156_04beb05f-bdcc-4bf4-a35f-b560e45e45b0.png","fqdn":"y42t.top","domain":"y42t.top","tld":"top"},"ip":{"addr":"154.39.104.138","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://y42t.top/","date":"2026-07-31T00:10:42.869Z","timestamp":1785456642869,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"p40f.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 10:44:09 GMT","end":"Tue, 20 Oct 2026 10:44:08 GMT"},"fingerprint":{"sha1":"41:09:2C:3F:FC:9C:25:A9:DB:51:15:BB:D1:5A:D8:01:DC:38:AD:F8","sha256":"49:3B:29:C7:5B:B6:12:CF:84:14:5B:09:42:7D:EF:AA:61:29:EC:A1:D5:40:B5:64:5C:F1:33:AB:9B:E1:13:4D"}}},"request":{"raw":"GET /jumpto/img/https://rcf-img-hk.gasdg646fs224cn.com/202508/_webp_size1298x1156_04beb05f-bdcc-4bf4-a35f-b560e45e45b0.png HTTP/1.1\r\nHost: y42t.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://y42t.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 31 Jul 2026 00:10:47 GMT\r\nContent-Type: image/webp\r\nContent-Length: 73676\r\nConnection: keep-alive\r\netag: \"41e79b39dc26bbaf7f40e04fea71c634\"\r\nLast-Modified: Wed, 10 Dec 2025 11:53:06 GMT\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kwVwW4HbYn3X6uiGCOgtN4Mj2GACKr%2FCxOcF%2FkT1qWfzTsi7UgKgSXewH%2FKzXzX9yME4b%2B0uiJME3MiqMyk%2B5MZ0EmsBvcjXYHCWGtUyTeGNRzpafODv04haJApLpPgfxBVVIc%2FzF1DVup%2Br%2F8ZBBn8%3D\"}]}\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nAge: 499202\r\ncf-cache-status: HIT\r\nCF-RAY: a208c6430b8bf57a-HKG\r\nalt-svc: h3=\":443\"; ma=86400\r\nCache-Control: public, max-age=2592000, immutable, public, max-age=2592000, immutable\r\nAccess-Control-Allow-Origin: *\r\nX-Custom-Check: true\r\nServer: Nginx\r\nL-Safe: 1785456647=pwbyu29rM0HEK42bpjFMXQZZ8s1IzzkT40daNMbcT90Ub0zpvrQ+kBR7N9vkAvLpdcGVCAkYTtjHzFt3rikpG2u0ViQwOg9Y/d8oh3QnzrskfHJpkQ3k6DdsyXdsoVGvpU7l+6O6Z96TYcnIdvgBPUL8UMfWMnVf++Fvg3TWLhL2ZP4it9BY8MKVve4d74hd\r\nL-VIA: l1=TqoDVanjjr6wMExF\r\nL-VERSION: 1784720560\r\nL-Request-Id: 3ec819fb5825cd5c10e\r\nX-Cache-Status: HIT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":73676,"size_decoded":74839,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"41e79b39dc26bbaf7f40e04fea71c634","sha1":"477586286821f2dab7b013e04ff4921b7719f121","sha256":"a6091cb61f7968a02345dfef2905c4f62f401345fb3fd5d2bdf5306416b50d90","sha512":"5fd2068c26d3d5e6995cbe847edecc9145c7abcdfee76ed94e1db9b97da7abb651e8dc990d06f05d2bc9b04cfbaa5c9cb41fa32da479554d64e47eb91e01fe56","ssdeep":"1536:Dsmee6MaqRp352dNFckeb6yTb6Kpmd4xIccPip688s23Z72HuJjJrl:gEaqRfoeb6yTb6KsdiIccuE3Rfrl","tlshash":"c7730143ccff7298de2c687e0d5e0caa191442443f8c0ab3e6e5615571697af36b32b8","first_seen":"2026-04-24T23:10:16.752534Z","last_seen":"2026-07-31T12:36:18.671363Z","times_seen":916,"resource_available":false,"data":null}},"time_used":4665,"timings":{"blocked":4347,"dns":0,"connect":0,"send":0,"wait":298,"receive":20,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-31","alert":"Phishing Block","trigger":"y42t.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-31","alert":"Sinkholed","trigger":"y42t.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ssl.hw301.xyz:8900/?u=y32b.top/\u0026p=/","fqdn":"ssl.hw301.xyz","domain":"hw301.xyz","tld":"xyz"},"ip":{"addr":"23.224.132.157","port":8900,"asn":40065,"as":"CNSERVERS","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-07-31T00:10:34.600Z","timestamp":1785456634600,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"cloud.hw301.top","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 08 Jun 2026 00:00:00 GMT","end":"Wed, 23 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"67:F4:44:A8:2A:80:5A:70:54:A1:CF:76:81:D8:73:BE:07:8A:03:BF","sha256":"6D:29:23:0E:AA:5C:2D:C5:FB:64:FA:CA:EE:F0:40:A5:66:21:88:96:78:F4:E6:C3:EA:8D:6F:71:1A:2E:8A:B0"}}},"request":{"raw":"GET /?u=http://y32b.top/\u0026p=/ HTTP/1.1\r\nHost: ssl.hw301.xyz:8900\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://y32b.top/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 302 Found\r\nServer: nginx\r\nDate: Fri, 31 Jul 2026 00:10:35 GMT\r\nContent-Type: text/html; charset=utf-8\r\nContent-Length: 0\r\nConnection: keep-alive\r\nLocation: https://y42t.top\r\nX-Frame-Options: DENY\r\nVary: Origin\r\nReferrer-Policy: same-origin\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-31T20:32:35.777412Z","times_seen":17640239,"resource_available":true,"data":null}},"time_used":976,"timings":{"blocked":-1,"dns":114,"connect":166,"send":0,"wait":196,"receive":0,"ssl":499},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-31","alert":"Sinkholed","trigger":"ssl.hw301.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"y42t.top/assets/logo/favicon.ico","fqdn":"y42t.top","domain":"y42t.top","tld":"top"},"ip":{"addr":"154.39.104.138","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://y42t.top/","date":"2026-07-31T00:10:40.819Z","timestamp":1785456640819,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"p40f.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 10:44:09 GMT","end":"Tue, 20 Oct 2026 10:44:08 GMT"},"fingerprint":{"sha1":"41:09:2C:3F:FC:9C:25:A9:DB:51:15:BB:D1:5A:D8:01:DC:38:AD:F8","sha256":"49:3B:29:C7:5B:B6:12:CF:84:14:5B:09:42:7D:EF:AA:61:29:EC:A1:D5:40:B5:64:5C:F1:33:AB:9B:E1:13:4D"}}},"request":{"raw":"GET /assets/logo/favicon.ico HTTP/1.1\r\nHost: y42t.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://y42t.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 31 Jul 2026 00:10:40 GMT\r\nContent-Type: image/x-icon\r\nContent-Length: 585615\r\nConnection: keep-alive\r\nLast-Modified: Wed, 01 Apr 2026 05:40:09 GMT\r\nETag: \"69ccafb9-8ef8f\"\r\nCache-Control: public, max-age=2592000, immutable\r\nAccess-Control-Allow-Origin: *\r\nX-Custom-Check: true\r\nServer: Nginx\r\nL-Safe: 1785456640=J17DXMEKXneKJsmf5PklOuZGVEbIRHZaaYUSHzFG19eRab1KmINu7b4QGpzoq2sF3cVtRbxKbhHDWucmkECQYVOT+r0RQLbYm93Pi9MruE4IbJTcWk38kbzXbpB01LsT5BD5K4g3/y6LaDWmYtWF9GJZSB/4ORv/PkgK01jvDx4dXhxfQiC6c5+CxYbaqcYc\r\nL-VIA: l1=TqoDVanjjr6wMExF\r\nL-VERSION: 1784720560\r\nL-Request-Id: 3ec519fb58243c5c06f\r\nX-Cache-Status: BYPASS\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":585615,"size_decoded":586282,"mime_type":"image/x-icon","magic":"PNG image data, 1024 x 1024, 8-bit/color RGBA, non-interlaced","md5":"abd1eb812e495d993fb310ca906ea605","sha1":"77a61cd2ad4a89c22f4a979571d3c259870732f5","sha256":"ccd41d39ff7fbed7a9200f685d9b0198736d1a2f737e9d32f83ddaeef39a4180","sha512":"e8221a9acda08a0a0bc5410cd14bc72d30e6fa66cc6e7a4bc07b53f5c94b5ec670f19571246ab2f55ec2924f679543780e9f55e0ecf8a169ce3b91e38da07d25","ssdeep":"12288:zObp4IC0/qFNYge/0z5g2c+UTxVi1+4g+/F5:ibpa2qFNNe8zy+si1+4V/F5","tlshash":"e8c4230df5a39834d5dc996741db54e0c790e4183db25e323ba3448ea3d05b8ea267f7","first_seen":"2026-03-20T12:57:26.707036Z","last_seen":"2026-07-31T12:41:47.123442Z","times_seen":1380,"resource_available":false,"data":null}},"time_used":1162,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":343,"receive":819,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-31","alert":"Phishing Block","trigger":"y42t.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-31","alert":"Sinkholed","trigger":"y42t.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"y42t.top/kc523-1/sponsor/sponsor_nav_web_2.png?1781011825626","fqdn":"y42t.top","domain":"y42t.top","tld":"top"},"ip":{"addr":"154.39.104.138","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://y42t.top/","date":"2026-07-31T00:10:41.062Z","timestamp":1785456641062,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"p40f.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 10:44:09 GMT","end":"Tue, 20 Oct 2026 10:44:08 GMT"},"fingerprint":{"sha1":"41:09:2C:3F:FC:9C:25:A9:DB:51:15:BB:D1:5A:D8:01:DC:38:AD:F8","sha256":"49:3B:29:C7:5B:B6:12:CF:84:14:5B:09:42:7D:EF:AA:61:29:EC:A1:D5:40:B5:64:5C:F1:33:AB:9B:E1:13:4D"}}},"request":{"raw":"GET /kc523-1/sponsor/sponsor_nav_web_2.png?1781011825626 HTTP/1.1\r\nHost: y42t.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://y42t.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 31 Jul 2026 00:10:44 GMT\r\nContent-Type: image/png\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Tue, 30 Sep 2025 12:19:27 GMT\r\nVary: Accept-Encoding\r\nETag: W/\"68dbcacf-1922\"\r\nCache-Control: public, max-age=2592000, immutable\r\nAccess-Control-Allow-Origin: *\r\nX-Custom-Check: true\r\nContent-Encoding: gzip\r\nServer: Nginx\r\nL-Safe: 1785456644=ImVO6mGITWMACggqrQcdldqw9lowxQ1+VpRDuAKFwfMb9d30WLVBONutXSRguHOv4S8A2fwwrG4hosTExvfehVfTlImNbeMdeEGGOKfPxTnrTTeg4Ne14CSZz0II/fQW6e3NIBDsQDv0uQ0mehoMPQ1XrPiYIzMRuPb5r05527aZ2mNjo0YBVDxdIUBsWRdM\r\nAge: 499211\r\nL-VIA: l1=TqoDVanjjr6wMExF\r\nL-VERSION: 1784720560\r\nL-Request-Id: 3ec919fb582535dc095\r\nX-Cache-Status: HIT\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6434,"size_decoded":7129,"mime_type":"image/png","magic":"PNG image data, 206 x 332, 8-bit colormap, non-interlaced","md5":"e31cb9f70abcc458288bb53868031352","sha1":"965f7cb9aaf0d166c21b8681b0671d17e019c74e","sha256":"33295ad776e1fde54dace5b0343c9aab9a2d70cfa8848e5cbd09065c340e294f","sha512":"acd328b1f4cb6e1c7267696487f637ea5ae4b724f7ab32516632a3eb2c8b4e374fa472ab77120230258fb49a23f54ba3988b155004b46e69519fe3ef57ee79c9","ssdeep":"192:RYc0QiGWn0WG2WmjNJMjOluoj/xrASMJmoJESULHT:RYc0QiGlHmjOo1j/xPMAG2Lz","tlshash":"c9d18ea6ea2a4a52cf8d0d633efc5b0671508e582f390826809a1d1d57767fa24a13e7","first_seen":"2023-11-10T19:12:00Z","last_seen":"2026-07-31T12:36:18.57357Z","times_seen":2189,"resource_available":false,"data":null}},"time_used":4037,"timings":{"blocked":3747,"dns":0,"connect":0,"send":0,"wait":290,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-31","alert":"Sinkholed","trigger":"y42t.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-31","alert":"Phishing Block","trigger":"y42t.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"photo.365live88.com/img/fb/team/1a23f8e016de4c39a35ce16cc8c07cba?win007=sell","fqdn":"photo.365live88.com","domain":"365live88.com","tld":"com"},"ip":{"addr":"154.41.93.240","port":443,"asn":174,"as":"COGENT-174","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://y42t.top/","date":"2026-07-31T00:10:42.501Z","timestamp":1785456642501,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"photo.365live88.com","organization":""},"issuer":{"commonName":"Encryption Everywhere DV TLS CA - G2","organization":"DigiCert Inc"},"validity":{"start":"Sat, 01 Nov 2025 00:00:00 GMT","end":"Sat, 31 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"45:76:43:9C:31:C5:89:A6:99:FD:9B:D8:6C:A9:3A:E6:2F:D6:E9:80","sha256":"73:27:CF:D8:8D:AC:95:46:00:5D:67:05:1E:70:22:3E:17:F0:94:78:CD:6F:A6:9C:C8:5F:B5:3B:75:60:3D:C8"}}},"request":{"raw":"GET /img/fb/team/1a23f8e016de4c39a35ce16cc8c07cba?win007=sell HTTP/1.1\r\nHost: photo.365live88.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://y42t.top/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: openresty\r\nDate: Fri, 31 Jul 2026 00:10:46 GMT\r\nContent-Type: image/png\r\nContent-Length: 18727\r\nConnection: keep-alive\r\nAccept-Ranges: bytes\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Expose-Headers: X-Log, X-Reqid\r\nAccess-Control-Max-Age: 2592000\r\nAge: 52836\r\nCache-Control: public, max-age=31536000\r\nContent-Disposition: inline; filename=\"1a23f8e016de4c39a35ce16cc8c07cba\"; filename*=utf-8''1a23f8e016de4c39a35ce16cc8c07cba\r\nContent-Md5: ggp5J/zTvyaLb2ptLGmVEg==\r\nContent-Transfer-Encoding: binary\r\nEtag: \"FrpjtXso4P5mWQX7MplWaihTbz6X\"\r\nLast-Modified: Fri, 24 Jul 2026 19:49:53 GMT\r\nX-Log: X-Log\r\nX-M-Log: QNM:wldsg119;QNM3\r\nX-M-Reqid: CHoAjYK96\r\nX-Qiniu-Zone: as0\r\nX-Qnm-Cache: Hit\r\nX-Reqid: h6QAAAAiQ1BOB8cY\r\nX-Svr: IO\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":18727,"size_decoded":19483,"mime_type":"image/png","magic":"PNG image data, 180 x 180, 8-bit/color RGBA, non-interlaced","md5":"820a7927fcd3bf268b6f6a6d2c699512","sha1":"ba63b57b28e0fe665905fb3299566a28536f3e97","sha256":"e7ccf49eed7fb9ef9cbe49b26afdaf631fb12d7a933b89e5b27796fa12c69d17","sha512":"5b3ce5f3d5b32aa227e0ae1a130ddb14619628f13ae3acba861ab076f5deaf6c1bc745442ed78a437f5e063e408eecdf965312abb0d403f38e960c29b155e59a","ssdeep":"384:lJR92pHJ3z8RfayQQ9iVAq8vI2YP16s5in5nNwES7MN2Q7d94mj82sKhdgj:PWpwRfGQIVb8Qx35Ow/G2lmj82Hhdgj","tlshash":"cd82d059148251f8ea672159d368feb24ccb4794218a139a6a0180def3ff610a272b39","first_seen":"2025-04-01T11:41:17.946317Z","last_seen":"2026-07-31T05:07:39.028463Z","times_seen":88,"resource_available":false,"data":null}},"time_used":3776,"timings":{"blocked":3413,"dns":0,"connect":0,"send":0,"wait":340,"receive":23,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"photo.365live88.com/img/fb/team/32d4ac4faaf54ffeb618c0a2879a41ed?win007=sell","fqdn":"photo.365live88.com","domain":"365live88.com","tld":"com"},"ip":{"addr":"154.41.93.240","port":443,"asn":174,"as":"COGENT-174","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://y42t.top/","date":"2026-07-31T00:10:42.523Z","timestamp":1785456642523,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"photo.365live88.com","organization":""},"issuer":{"commonName":"Encryption Everywhere DV TLS CA - G2","organization":"DigiCert Inc"},"validity":{"start":"Sat, 01 Nov 2025 00:00:00 GMT","end":"Sat, 31 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"45:76:43:9C:31:C5:89:A6:99:FD:9B:D8:6C:A9:3A:E6:2F:D6:E9:80","sha256":"73:27:CF:D8:8D:AC:95:46:00:5D:67:05:1E:70:22:3E:17:F0:94:78:CD:6F:A6:9C:C8:5F:B5:3B:75:60:3D:C8"}}},"request":{"raw":"GET /img/fb/team/32d4ac4faaf54ffeb618c0a2879a41ed?win007=sell HTTP/1.1\r\nHost: photo.365live88.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://y42t.top/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: openresty\r\nDate: Fri, 31 Jul 2026 00:10:47 GMT\r\nContent-Type: image/png\r\nContent-Length: 13047\r\nConnection: keep-alive\r\nAccept-Ranges: bytes\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Expose-Headers: X-Log, X-Reqid\r\nAccess-Control-Max-Age: 2592000\r\nAge: 33044\r\nCache-Control: public, max-age=31536000\r\nContent-Disposition: inline; filename=\"32d4ac4faaf54ffeb618c0a2879a41ed\"; filename*=utf-8''32d4ac4faaf54ffeb618c0a2879a41ed\r\nContent-Md5: eg6y9R+V/Hd43Re6vTIFaA==\r\nContent-Transfer-Encoding: binary\r\nEtag: \"FtBkC0tDSn3uJGQ14vuVNFKpcqu0\"\r\nLast-Modified: Fri, 24 Jul 2026 19:50:34 GMT\r\nX-Log: X-Log\r\nX-M-Log: QNM:wldsg121;QNM3\r\nX-M-Reqid: fvEitCC87\r\nX-Qiniu-Zone: as0\r\nX-Qnm-Cache: Hit\r\nX-Reqid: xf8AAABZ0LZOGccY\r\nX-Svr: IO\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":13047,"size_decoded":13803,"mime_type":"image/png","magic":"PNG image data, 150 x 150, 8-bit/color RGBA, non-interlaced","md5":"7a0eb2f51f95fc7778dd17babd320568","sha1":"d0640b4b434a7dee246435e2fb953452a972abb4","sha256":"61a6324f9e2250268ad078eebaceb03666a7b399f47598d027b6d711d2b10042","sha512":"449e1f198befca9f23739da7f73a7929e8586717ad9653ccf1e2fdd2ee4780d90be26b3b7b49e9280ca7403b2825e945160d7902d8086d960df393d3ef539aaf","ssdeep":"192:3rI3fGSuW5lbu4C8R69nxM5CqTaMtB3GPG3knfOHZuLY+XMJk8SR4Dl:3rIPWWOFQuM4ql/2PYmOQcJk8SCDl","tlshash":"fc42be90f7f5d7c58d82ca964d4f62bfec2526442e1a20bef1139aa2bc1fd681214e21","first_seen":"2025-01-29T13:39:14.550259Z","last_seen":"2026-07-31T12:41:15.21111Z","times_seen":13,"resource_available":false,"data":null}},"time_used":5261,"timings":{"blocked":4994,"dns":0,"connect":0,"send":0,"wait":267,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"photo.365live88.com/img/fb/team/d5fac8b596194f75880c2b13bcc02bfb?win007=sell","fqdn":"photo.365live88.com","domain":"365live88.com","tld":"com"},"ip":{"addr":"154.41.93.240","port":443,"asn":174,"as":"COGENT-174","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://y42t.top/","date":"2026-07-31T00:10:42.575Z","timestamp":1785456642575,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"photo.365live88.com","organization":""},"issuer":{"commonName":"Encryption Everywhere DV TLS CA - G2","organization":"DigiCert Inc"},"validity":{"start":"Sat, 01 Nov 2025 00:00:00 GMT","end":"Sat, 31 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"45:76:43:9C:31:C5:89:A6:99:FD:9B:D8:6C:A9:3A:E6:2F:D6:E9:80","sha256":"73:27:CF:D8:8D:AC:95:46:00:5D:67:05:1E:70:22:3E:17:F0:94:78:CD:6F:A6:9C:C8:5F:B5:3B:75:60:3D:C8"}}},"request":{"raw":"GET /img/fb/team/d5fac8b596194f75880c2b13bcc02bfb?win007=sell HTTP/1.1\r\nHost: photo.365live88.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://y42t.top/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: openresty\r\nDate: Fri, 31 Jul 2026 00:10:51 GMT\r\nContent-Type: image/png\r\nContent-Length: 39113\r\nConnection: keep-alive\r\nAccept-Ranges: bytes\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Expose-Headers: X-Log, X-Reqid\r\nAccess-Control-Max-Age: 2592000\r\nAge: 648\r\nCache-Control: public, max-age=31536000\r\nContent-Disposition: inline; filename=\"d5fac8b596194f75880c2b13bcc02bfb\"; filename*=utf-8''d5fac8b596194f75880c2b13bcc02bfb\r\nContent-Md5: 8ucsG+afwZkUX6IBdQdeyw==\r\nContent-Transfer-Encoding: binary\r\nEtag: \"Fl3qEnEIDSCeiPful0lEPf5Brvc0\"\r\nLast-Modified: Sat, 25 Jul 2026 19:18:38 GMT\r\nX-Log: X-Log\r\nX-M-Log: QNM:wldsg121;QNM3\r\nX-M-Reqid: 3PKGpkB50\r\nX-Qiniu-Zone: as0\r\nX-Qnm-Cache: Hit\r\nX-Reqid: VREAAAAbFpfGNscY\r\nX-Svr: IO\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":39113,"size_decoded":39867,"mime_type":"image/png","magic":"PNG image data, 180 x 180, 8-bit/color RGBA, non-interlaced","md5":"f2e72c1be69fc199145fa20175075ecb","sha1":"5dea1271080d209e88f7ee9749443dfe41aef734","sha256":"c3e9d6b10d07b2ccf69e1980d13570ff0292b30b54950b27cef4a3c8bc8d0e94","sha512":"c9c98b3e93e34590a6da57c536d36537896e98736eebc02deb7221f5e6f293a1b5dc17e071e6326038fa56ab9c458807cb21f8e42a4ad76f3afef03124110744","ssdeep":"768:GbXAYRhsJlnlNoO+PenstFdv9DzgaKCoYKYHHfidGuhRKD:kVeRlNoOHsfdCaegHHfgg","tlshash":"e803f2211ba56b893a21f5db130334e5c3494c6dbd05a642e98bd1ad0f3efe2b6790cd","first_seen":"2025-10-05T20:13:27.563383Z","last_seen":"2026-07-31T12:41:46.99282Z","times_seen":206,"resource_available":false,"data":null}},"time_used":9563,"timings":{"blocked":9285,"dns":0,"connect":0,"send":0,"wait":262,"receive":16,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"y42t.top/api/sport/match/list?sportId=1\u0026client=web","fqdn":"y42t.top","domain":"y42t.top","tld":"top"},"ip":{"addr":"154.39.104.138","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://y42t.top/","date":"2026-07-31T00:10:58.042Z","timestamp":1785456658042,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"p40f.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 10:44:09 GMT","end":"Tue, 20 Oct 2026 10:44:08 GMT"},"fingerprint":{"sha1":"41:09:2C:3F:FC:9C:25:A9:DB:51:15:BB:D1:5A:D8:01:DC:38:AD:F8","sha256":"49:3B:29:C7:5B:B6:12:CF:84:14:5B:09:42:7D:EF:AA:61:29:EC:A1:D5:40:B5:64:5C:F1:33:AB:9B:E1:13:4D"}}},"request":{"raw":"GET /api/sport/match/list?sportId=1\u0026client=web HTTP/1.1\r\nHost: y42t.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://y42t.top/\r\nx-request-source: https://y42t.top\r\nXign: IIbUwejnxCcIaAkqdHlPQ8i30b1lIWceINGs14IKPJwkXxl5S1ZeSpsRuzdiIkXGJ2YPkIdtGAF4qkX3RE8YOGu14tNWzGmfe9d3iaghhcMTiGWAlCI0hHXSRqt5GS1FfCQK7P+71krt72vtT4sYi4EGkN9NoSvLGbibfv28vL0=\r\ntimestamp: 1785456658035\r\nsign: 314a18702o6a3910\r\nversion: 5.6.12.0\r\nclient-type: web\r\ndevice-id: h7Ebc4YSNiCSchfp8FT2WyTT845kFyYC\r\nlang: zh-CN\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 31 Jul 2026 00:10:58 GMT\r\nContent-Type: application/json\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nCache-Control: no-cache, no-store, max-age=0\r\ncontent-encoding: gzip\r\nAccess-Control-Allow-Origin: *\r\nX-Custom-Check: true\r\nServer: Nginx\r\nL-Safe: 1785456658=WPSwJbqkZOzI5foHNcVYjQIKue7PJE+kGO2A3yT1haBk6nqyKKDh0EIOuWb58hA6Ar7CI/muo6AU0GXnBK2Ghj/ElEMyvbOL73WskLP8hS75+mMsSDhentC5aQ+vrDeMOzAmrmznu+u6WG9mKzh+GUrK/To0+tCKd7t7WDsksF7qE6/gkuJKEmT7UkoLdoH8\r\nL-VIA: l1=TqoDVanjjr6wMExF\r\nL-VERSION: 1784720560\r\nL-Request-Id: 3ec519fb582870dc086\r\nX-Cache-Status: BYPASS\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":29835,"size_decoded":6172,"mime_type":"application/json","magic":"Unicode text, UTF-8 text, with very long lines (28507), with no line terminators","md5":"26eeb59235e7e0bd39e862b1570bdd7b","sha1":"2d6093f8163d0acbde241885608d0f2db5e5be9b","sha256":"4806ebb147f9e91a9f860fe56d75c5ea3bebfe2ed10a8e0142dbb878aafc4df5","sha512":"93c723c963ca4d91f3f2e35ddeb727d8fe64bd81795b6f247fe745024fa88137b3d2987c8559fd96f2eb26e700e6e9d79d26fd5c69e7c18db89b456fffc7bc3e","ssdeep":"768:eorWJk2CaAqoCK7pCzVpB3Lq3p8JN8QrYuZZoK6ZVbzZtZBZFwN69HRmFmTCHW5R:eorp2spGpQpkZOjZFZZZt0mGshz0dDHg","tlshash":"b6d2db5681de18992b9c61d59d5e3f4d847ef94b0a9eb5c6ee0ecf1c21b43fb8200d21","first_seen":"2026-07-31T00:11:28.022481Z","last_seen":"2026-07-31T00:12:52.461407Z","times_seen":3,"resource_available":false,"data":null}},"time_used":311,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":311,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-31","alert":"Phishing Block","trigger":"y42t.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-31","alert":"Sinkholed","trigger":"y42t.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"photo.365live88.com/img/fb/team/6f56334541a344de8a00f0cbfbd3a68d?win007=sell","fqdn":"photo.365live88.com","domain":"365live88.com","tld":"com"},"ip":{"addr":"154.41.93.240","port":443,"asn":174,"as":"COGENT-174","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://y42t.top/","date":"2026-07-31T00:10:42.532Z","timestamp":1785456642532,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"photo.365live88.com","organization":""},"issuer":{"commonName":"Encryption Everywhere DV TLS CA - G2","organization":"DigiCert Inc"},"validity":{"start":"Sat, 01 Nov 2025 00:00:00 GMT","end":"Sat, 31 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"45:76:43:9C:31:C5:89:A6:99:FD:9B:D8:6C:A9:3A:E6:2F:D6:E9:80","sha256":"73:27:CF:D8:8D:AC:95:46:00:5D:67:05:1E:70:22:3E:17:F0:94:78:CD:6F:A6:9C:C8:5F:B5:3B:75:60:3D:C8"}}},"request":{"raw":"GET /img/fb/team/6f56334541a344de8a00f0cbfbd3a68d?win007=sell HTTP/1.1\r\nHost: photo.365live88.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://y42t.top/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: openresty\r\nDate: Fri, 31 Jul 2026 00:10:48 GMT\r\nContent-Type: image/png\r\nContent-Length: 16102\r\nConnection: keep-alive\r\nAccept-Ranges: bytes\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Expose-Headers: X-Log, X-Reqid\r\nAccess-Control-Max-Age: 2592000\r\nAge: 25819\r\nCache-Control: public, max-age=31536000\r\nContent-Disposition: inline; filename=\"6f56334541a344de8a00f0cbfbd3a68d\"; filename*=utf-8''6f56334541a344de8a00f0cbfbd3a68d\r\nContent-Md5: RgE0zMPOSTGanst/WYz9rQ==\r\nContent-Transfer-Encoding: binary\r\nEtag: \"FmXjpTLBUh4B3f2RcWsgkWYAgEK1\"\r\nLast-Modified: Sat, 25 Jul 2026 19:15:47 GMT\r\nX-Log: X-Log\r\nX-M-Log: QNM:wldsg121;QNM3\r\nX-M-Reqid: sXKO0U19I\r\nX-Qiniu-Zone: as0\r\nX-Qnm-Cache: Hit\r\nX-Reqid: 1SwAAAD1DljhH8cY\r\nX-Svr: IO\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":16102,"size_decoded":16858,"mime_type":"image/png","magic":"PNG image data, 180 x 180, 8-bit/color RGBA, non-interlaced","md5":"460134ccc3ce49319a9ecb7f598cfdad","sha1":"65e3a532c1521e01ddfd91716b209166008042b5","sha256":"9c39156543ae9ceb78ba604479ba0e74d5c9b532529570657bc1057ffc122383","sha512":"5de95d27be4114f77aff0d11205e04932587e4b9e11550b8fcac9cc9b8b7205135721c85f06fe2c70d14f4e75f257172595188db8f516f8b6a299ac44e206ae6","ssdeep":"384:fpz94dlRKlkQrVodvEjmkCdaq8VSg8qokxXh+lnFmU:f1AQR6vpkCdaq2X80xR+lJ","tlshash":"fc72cf9d367a613ae439c47815d2415c01f2d0e5028a56cf32bfe7770aa92774db9724","first_seen":"2025-09-23T04:37:00.270864Z","last_seen":"2026-07-31T12:41:15.258472Z","times_seen":123,"resource_available":false,"data":null}},"time_used":5995,"timings":{"blocked":5714,"dns":0,"connect":0,"send":0,"wait":278,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"photo.365live88.com/img/fb/team/1bcb8b4ed6184136bc04ee66f795580b?win007=sell","fqdn":"photo.365live88.com","domain":"365live88.com","tld":"com"},"ip":{"addr":"154.41.93.240","port":443,"asn":174,"as":"COGENT-174","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://y42t.top/","date":"2026-07-31T00:10:42.547Z","timestamp":1785456642547,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"photo.365live88.com","organization":""},"issuer":{"commonName":"Encryption Everywhere DV TLS CA - G2","organization":"DigiCert Inc"},"validity":{"start":"Sat, 01 Nov 2025 00:00:00 GMT","end":"Sat, 31 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"45:76:43:9C:31:C5:89:A6:99:FD:9B:D8:6C:A9:3A:E6:2F:D6:E9:80","sha256":"73:27:CF:D8:8D:AC:95:46:00:5D:67:05:1E:70:22:3E:17:F0:94:78:CD:6F:A6:9C:C8:5F:B5:3B:75:60:3D:C8"}}},"request":{"raw":"GET /img/fb/team/1bcb8b4ed6184136bc04ee66f795580b?win007=sell HTTP/1.1\r\nHost: photo.365live88.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://y42t.top/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: openresty\r\nDate: Fri, 31 Jul 2026 00:10:49 GMT\r\nContent-Type: image/png\r\nContent-Length: 11271\r\nConnection: keep-alive\r\nAccept-Ranges: bytes\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Expose-Headers: X-Log, X-Reqid\r\nAccess-Control-Max-Age: 2592000\r\nAge: 22242\r\nCache-Control: public, max-age=31536000\r\nContent-Disposition: inline; filename=\"1bcb8b4ed6184136bc04ee66f795580b\"; filename*=utf-8''1bcb8b4ed6184136bc04ee66f795580b\r\nContent-Md5: fxzB+wouT5ECmUro2zOLEw==\r\nContent-Transfer-Encoding: binary\r\nEtag: \"FixE10N2MUwQ_oPHbKLfuK8I9TDJ\"\r\nLast-Modified: Sun, 26 Jul 2026 01:15:19 GMT\r\nX-Log: X-Log\r\nX-M-Log: QNM:wldsg121;QNM3\r\nX-M-Reqid: YLxxFcgle\r\nX-Qiniu-Zone: as0\r\nX-Qnm-Cache: Hit\r\nX-Reqid: 13IAAAAT-mEiI8cY\r\nX-Svr: IO\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":11271,"size_decoded":12027,"mime_type":"image/png","magic":"PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced","md5":"7f1cc1fb0a2e4f9102994ae8db338b13","sha1":"2c44d74376314c10fe83c76ca2dfb8af08f530c9","sha256":"5b7d2c5eba5333788a8c42316b7f4bc5fdd7e20565fb254d715f9fc898ee306f","sha512":"b3ef0f70807c8b094ece6c787f8a543e87dca9904b340be35d3ecf6b12c4fff5a2d17e022d8b7e93e6041a572e5912793997faf3a15147a94b76b7642a39e41b","ssdeep":"192:62LOHkmwS/yOAW8SZ0uP2c2fVfaSe+R1KwbFFcvT1iyiwlbqfXr8WjCb2e38c2GC:NSkm/yOAtqyhfVSSeXw5yvbimbqfXr0g","tlshash":"5c32c0b1dda3c752ef6212be72355e06bc334d9c7b6c24c1903feb50477592e5289258","first_seen":"2026-07-31T00:11:28.127181Z","last_seen":"2026-07-31T12:41:15.176135Z","times_seen":9,"resource_available":false,"data":null}},"time_used":7308,"timings":{"blocked":7047,"dns":0,"connect":0,"send":0,"wait":261,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"y42t.top/kc523-1/sponsor/sponsor_web_1.png?1781011825626","fqdn":"y42t.top","domain":"y42t.top","tld":"top"},"ip":{"addr":"154.39.104.138","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://y42t.top/","date":"2026-07-31T00:10:41.110Z","timestamp":1785456641110,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"p40f.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 10:44:09 GMT","end":"Tue, 20 Oct 2026 10:44:08 GMT"},"fingerprint":{"sha1":"41:09:2C:3F:FC:9C:25:A9:DB:51:15:BB:D1:5A:D8:01:DC:38:AD:F8","sha256":"49:3B:29:C7:5B:B6:12:CF:84:14:5B:09:42:7D:EF:AA:61:29:EC:A1:D5:40:B5:64:5C:F1:33:AB:9B:E1:13:4D"}}},"request":{"raw":"GET /kc523-1/sponsor/sponsor_web_1.png?1781011825626 HTTP/1.1\r\nHost: y42t.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://y42t.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 31 Jul 2026 00:10:44 GMT\r\nContent-Type: image/png\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Tue, 30 Sep 2025 12:19:27 GMT\r\nVary: Accept-Encoding\r\nETag: W/\"68dbcacf-a556\"\r\nCache-Control: public, max-age=2592000, immutable\r\nAccess-Control-Allow-Origin: *\r\nX-Custom-Check: true\r\nContent-Encoding: gzip\r\nServer: Nginx\r\nL-Safe: 1785456644=ImVO6mGITWMACggqrQcdldqw9lowxQ1+VpRDuAKFwfMb9d30WLVBONutXSRguHOv4S8A2fwwrG4hosTExvfehVfTlImNbeMdeEGGOKfPxTnrTTeg4Ne14CSZz0II/fQW6e3NIBDsQDv0uQ0mehoMPQ1XrPiYIzMRuPb5r05527aZ2mNjo0YBVDxdIUBsWRdM\r\nAge: 499210\r\nL-VIA: l1=TqoDVanjjr6wMExF\r\nL-VERSION: 1784720560\r\nL-Request-Id: 3ec519fb5825249c076\r\nX-Cache-Status: HIT\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":42326,"size_decoded":42417,"mime_type":"image/png","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 428x169, components 3","md5":"e0ecbe5a9349aaa328ffd6f9515f9007","sha1":"79ebc30d345c812a3e3a122f152829d161b00a52","sha256":"452d27839b3f3f35d11c9a26f06d6cc9db56dc8c61261ee43e0512f69abf71f4","sha512":"fd322bf3ca925ce2eb45317adae1dee0f1c2e4f30035738052a97ccc054ffb576a92a46758559c8d13cff6be549caca5541d14c5692cbec2758ab2b3c7f3324a","ssdeep":"768:2o9mjFjepo5h5jLasrCO57PIrvmMOSf4t7q5bo6Wruv9CSMsfRLMD7XZ0:2ogpymTxRrwmDSM7mbo6WrutR60","tlshash":"8713f2ebe1075d80bb946c9b3925eec61da50f047bc78d68c5e055f921290bb0fa33a7","first_seen":"2023-11-10T19:12:00Z","last_seen":"2026-07-31T12:36:18.67664Z","times_seen":2321,"resource_available":false,"data":null}},"time_used":3737,"timings":{"blocked":3422,"dns":0,"connect":0,"send":0,"wait":306,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-31","alert":"Sinkholed","trigger":"y42t.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-31","alert":"Phishing Block","trigger":"y42t.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"photo.365live88.com/img/fb/team/d3b9e0ae9df54ba9bbc798881c6cd65e?win007=sell","fqdn":"photo.365live88.com","domain":"365live88.com","tld":"com"},"ip":{"addr":"154.41.93.240","port":443,"asn":174,"as":"COGENT-174","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://y42t.top/","date":"2026-07-31T00:10:42.467Z","timestamp":1785456642467,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"photo.365live88.com","organization":""},"issuer":{"commonName":"Encryption Everywhere DV TLS CA - G2","organization":"DigiCert Inc"},"validity":{"start":"Sat, 01 Nov 2025 00:00:00 GMT","end":"Sat, 31 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"45:76:43:9C:31:C5:89:A6:99:FD:9B:D8:6C:A9:3A:E6:2F:D6:E9:80","sha256":"73:27:CF:D8:8D:AC:95:46:00:5D:67:05:1E:70:22:3E:17:F0:94:78:CD:6F:A6:9C:C8:5F:B5:3B:75:60:3D:C8"}}},"request":{"raw":"GET /img/fb/team/d3b9e0ae9df54ba9bbc798881c6cd65e?win007=sell HTTP/1.1\r\nHost: photo.365live88.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://y42t.top/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: openresty\r\nDate: Fri, 31 Jul 2026 00:10:44 GMT\r\nContent-Type: image/png\r\nContent-Length: 26540\r\nConnection: keep-alive\r\nAccept-Ranges: bytes\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Expose-Headers: X-Log, X-Reqid\r\nAccess-Control-Max-Age: 2592000\r\nAge: 85235\r\nCache-Control: public, max-age=31536000\r\nContent-Disposition: inline; filename=\"d3b9e0ae9df54ba9bbc798881c6cd65e\"; filename*=utf-8''d3b9e0ae9df54ba9bbc798881c6cd65e\r\nContent-Md5: CBygtX9pd5kGi15Yhx/xkw==\r\nContent-Transfer-Encoding: binary\r\nEtag: \"Fkuc4IvR18tUyWq4FJ_9g-A_8nKB\"\r\nLast-Modified: Fri, 24 Jul 2026 19:49:41 GMT\r\nX-Log: X-Log\r\nX-M-Log: QNM:wldsg119;QNM3\r\nX-M-Reqid: Bx2zEFVbJ\r\nX-Qiniu-Zone: as0\r\nX-Qnm-Cache: Hit\r\nX-Reqid: 8PIAAADLpobW6cYY\r\nX-Svr: IO\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":26540,"size_decoded":27296,"mime_type":"image/png","magic":"PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced","md5":"081ca0b57f697799068b5e58871ff193","sha1":"4b9ce08bd1d7cb54c96ab8149ffd83e03ff27281","sha256":"b2b7d07fb9b8094176f210ee65a201eeec664d9bf504179bfebb38d519341dcb","sha512":"9ef49d365e39157b0c13e26bd40f5bcd9c189e0566b8ffce01132cf14975565a2f5555de70a05ffa41cf0b8a32e77687e232213e87b8107b52410c098193b839","ssdeep":"768:u4ENzH7H9Oyox3ipCXjmhVG1WW06FzaEKynNp3FUAN:Q2NiMX+41WS3rNJN","tlshash":"89c2ae46787ecdb6d96f087f56d53fef03022e3a87e515f0820b675c4ba4d0a254e48a","first_seen":"2025-02-24T02:30:01.461727Z","last_seen":"2026-07-31T00:12:52.489893Z","times_seen":47,"resource_available":false,"data":null}},"time_used":2639,"timings":{"blocked":2267,"dns":0,"connect":0,"send":0,"wait":320,"receive":52,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"y42t.top/jumpto/img/https://rcf-img-hk.gasdg646fs224cn.com/202503/_webp_size649x578_2a74177b-d024-4ea3-8b58-fce53f91051b.png","fqdn":"y42t.top","domain":"y42t.top","tld":"top"},"ip":{"addr":"154.39.104.138","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://y42t.top/","date":"2026-07-31T00:10:42.860Z","timestamp":1785456642860,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"p40f.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 10:44:09 GMT","end":"Tue, 20 Oct 2026 10:44:08 GMT"},"fingerprint":{"sha1":"41:09:2C:3F:FC:9C:25:A9:DB:51:15:BB:D1:5A:D8:01:DC:38:AD:F8","sha256":"49:3B:29:C7:5B:B6:12:CF:84:14:5B:09:42:7D:EF:AA:61:29:EC:A1:D5:40:B5:64:5C:F1:33:AB:9B:E1:13:4D"}}},"request":{"raw":"GET /jumpto/img/https://rcf-img-hk.gasdg646fs224cn.com/202503/_webp_size649x578_2a74177b-d024-4ea3-8b58-fce53f91051b.png HTTP/1.1\r\nHost: y42t.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://y42t.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 31 Jul 2026 00:10:46 GMT\r\nContent-Type: image/webp\r\nContent-Length: 65510\r\nConnection: keep-alive\r\netag: \"1841972db1eb6b1b08f2b8849b98ffad\"\r\nLast-Modified: Sat, 06 Dec 2025 06:23:06 GMT\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nAge: 499204\r\ncf-cache-status: HIT\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6r%2FBLmhL0WuNzXMee6RXSU1N7K4wNw4REL86R4zPu49lHTBPoEaDcfLrwgHjGMpbj36NX9vRl9hAzyIX639lhlvl17Eg5awjONJ9BIxl6i95BmOI9WuybsmTvvX0m40mZBEs1q2PUJdo51sPSYkiyXI%3D\"}]}\r\nCF-RAY: a208c62dec66b1bf-HKG\r\nalt-svc: h3=\":443\"; ma=86400\r\nCache-Control: public, max-age=2592000, immutable, public, max-age=2592000, immutable\r\nAccess-Control-Allow-Origin: *\r\nX-Custom-Check: true\r\nServer: Nginx\r\nL-Safe: 1785456646=EMBgc894QAdP6slbLJsiNGYFcXUmrvQIWKh5BYYK6Qj4fqRyTGb/Xbwkd279GHpNIUNxmrA5BLARmTn3BBDanv5J4PcdpRxfVwUjHlMDvqiZAET3U1COvNHjyZWcIPWzQSTxYljkuIh13EY2sibpSpVrTubzP7vT5r508KhivSQ1oVznby71Ayyz5cTYVqWG\r\nL-VIA: l1=TqoDVanjjr6wMExF\r\nL-VERSION: 1784720560\r\nL-Request-Id: 3ec919fb5825a8ac0a1\r\nX-Cache-Status: HIT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":65510,"size_decoded":66659,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"1841972db1eb6b1b08f2b8849b98ffad","sha1":"6194c3f706be3f6aa4cf9042d0cc4b9c2a77a1a4","sha256":"0b162dd98f34fc830303fa40c47a002b14c2b6f4947a7378247db3c924bb7fac","sha512":"e9fb0eff09d46b3c88de962b1d6a020fd55f98d777e56ee4a0ac8aa615d14faa3d95de3ac35a92451ef4be5c8141532327b97c6fa95d5090aa61847b2b24d370","ssdeep":"1536:HsAMZEDXiepWzfRKc7nC3BQkbf9ptwv+AOtedy3JMw:HsAMZwMrC3BVTtAy3iw","tlshash":"5a5302765eef65629bf42eeb0331c6856fcb5a10803814b83059e1e5ee85c29f61d372","first_seen":"2026-04-24T23:10:16.852267Z","last_seen":"2026-07-31T12:41:15.242352Z","times_seen":906,"resource_available":false,"data":null}},"time_used":4070,"timings":{"blocked":3762,"dns":0,"connect":0,"send":0,"wait":294,"receive":14,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-31","alert":"Phishing Block","trigger":"y42t.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-31","alert":"Sinkholed","trigger":"y42t.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"photo.365live88.com/img/fb/team/182518f4005349429b5ac3bed7597a67?win007=sell","fqdn":"photo.365live88.com","domain":"365live88.com","tld":"com"},"ip":{"addr":"154.41.93.240","port":443,"asn":174,"as":"COGENT-174","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://y42t.top/","date":"2026-07-31T00:10:42.512Z","timestamp":1785456642512,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"photo.365live88.com","organization":""},"issuer":{"commonName":"Encryption Everywhere DV TLS CA - G2","organization":"DigiCert Inc"},"validity":{"start":"Sat, 01 Nov 2025 00:00:00 GMT","end":"Sat, 31 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"45:76:43:9C:31:C5:89:A6:99:FD:9B:D8:6C:A9:3A:E6:2F:D6:E9:80","sha256":"73:27:CF:D8:8D:AC:95:46:00:5D:67:05:1E:70:22:3E:17:F0:94:78:CD:6F:A6:9C:C8:5F:B5:3B:75:60:3D:C8"}}},"request":{"raw":"GET /img/fb/team/182518f4005349429b5ac3bed7597a67?win007=sell HTTP/1.1\r\nHost: photo.365live88.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://y42t.top/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: openresty\r\nDate: Fri, 31 Jul 2026 00:10:46 GMT\r\nContent-Type: image/png\r\nContent-Length: 99369\r\nConnection: keep-alive\r\nAccept-Ranges: bytes\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Expose-Headers: X-Log, X-Reqid\r\nAccess-Control-Max-Age: 2592000\r\nAge: 45327\r\nCache-Control: public, max-age=31536000\r\nContent-Disposition: inline; filename=\"182518f4005349429b5ac3bed7597a67\"; filename*=utf-8''182518f4005349429b5ac3bed7597a67\r\nContent-Md5: iS23IRQtBD8eRf5nex2sCw==\r\nContent-Transfer-Encoding: binary\r\nEtag: \"FtMd_GjcfNhDGgxWbJvjISdSpH0A\"\r\nLast-Modified: Fri, 24 Jul 2026 19:50:15 GMT\r\nX-Log: X-Log\r\nX-M-Log: QNM:wldsg119;QNM3\r\nX-M-Reqid: 72FcFg2O6\r\nX-Qiniu-Zone: as0\r\nX-Qnm-Cache: Hit\r\nX-Reqid: ed0AAABhkZciDscY\r\nX-Svr: IO\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":99369,"size_decoded":100125,"mime_type":"image/png","magic":"PNG image data, 300 x 390, 8-bit/color RGBA, non-interlaced","md5":"892db721142d043f1e45fe677b1dac0b","sha1":"d31dfc68dc7cd8431a0c566c9be3212752a47d00","sha256":"4f4a751d49d688c15687dfe96fa593ed66371e4e587f5f7eeae44fd00fba7486","sha512":"0d7a2446322414a31f7da70644adccb8e4e1e5d01d98333d4ed027d0b08ca5d91c89d3f5f008a45de1fd6c955aae638c39eb7e0ce79a09491bdca54df14c9b96","ssdeep":"3072:MIlIsPv4e3xREI00iwX1Ctf5mI+Ayn7ORS6/:MJkRE0iaL+Z","tlshash":"0ca312c7021dc4c0e3dc5e327384f729ea6b66d994c1a7c53cbe14fb61e7899132258a","first_seen":"2025-03-31T13:06:08.244232Z","last_seen":"2026-07-31T12:41:47.0407Z","times_seen":207,"resource_available":false,"data":null}},"time_used":4722,"timings":{"blocked":4065,"dns":0,"connect":0,"send":0,"wait":303,"receive":354,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"photo.365live88.com/img/fb/team/eb2b76331bf24421b428d775e5280648?win007=sell","fqdn":"photo.365live88.com","domain":"365live88.com","tld":"com"},"ip":{"addr":"154.41.93.240","port":443,"asn":174,"as":"COGENT-174","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://y42t.top/","date":"2026-07-31T00:10:42.558Z","timestamp":1785456642558,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"photo.365live88.com","organization":""},"issuer":{"commonName":"Encryption Everywhere DV TLS CA - G2","organization":"DigiCert Inc"},"validity":{"start":"Sat, 01 Nov 2025 00:00:00 GMT","end":"Sat, 31 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"45:76:43:9C:31:C5:89:A6:99:FD:9B:D8:6C:A9:3A:E6:2F:D6:E9:80","sha256":"73:27:CF:D8:8D:AC:95:46:00:5D:67:05:1E:70:22:3E:17:F0:94:78:CD:6F:A6:9C:C8:5F:B5:3B:75:60:3D:C8"}}},"request":{"raw":"GET /img/fb/team/eb2b76331bf24421b428d775e5280648?win007=sell HTTP/1.1\r\nHost: photo.365live88.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://y42t.top/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: openresty\r\nDate: Fri, 31 Jul 2026 00:10:50 GMT\r\nContent-Type: image/png\r\nContent-Length: 204660\r\nConnection: keep-alive\r\nAccept-Ranges: bytes\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Expose-Headers: X-Log, X-Reqid\r\nAccess-Control-Max-Age: 2592000\r\nAge: 19537\r\nCache-Control: public, max-age=31536000\r\nContent-Disposition: inline; filename=\"eb2b76331bf24421b428d775e5280648\"; filename*=utf-8''eb2b76331bf24421b428d775e5280648\r\nContent-Md5: +3wlP+f4xg+Q3nVszOwcYw==\r\nContent-Transfer-Encoding: binary\r\nEtag: \"FrUf7-1z1Tf3p0mZSO6-5wgtSQJz\"\r\nLast-Modified: Sat, 25 Jul 2026 19:18:00 GMT\r\nX-Log: X-Log\r\nX-M-Log: QNM:wldsg119;QNM3\r\nX-M-Reqid: 1rtMvktPs\r\nX-Qiniu-Zone: as0\r\nX-Qnm-Cache: Hit\r\nX-Reqid: rO8AAACrzWWYJccY\r\nX-Svr: IO\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":204660,"size_decoded":205417,"mime_type":"image/png","magic":"PNG image data, 312 x 333, 8-bit/color RGBA, non-interlaced","md5":"fb7c253fe7f8c60f90de756cccec1c63","sha1":"b51fefed73d537f7a7499948eebee7082d490273","sha256":"e484a4baede5b3ab4c7fc99911c54b24ba9445f5227f9938a2f62d7ce28d90a9","sha512":"2cb5f8eac0c9fe37b1a6bd2b918740126cee83682f1545692b7dd3b211a731bfaae689982c3d5c8d9a6e0492e170735f8873869f9dce84e5b84ebc4150c7d127","ssdeep":"3072:hmUTdHTm3r4p7TknOFlHa2Z7rLyAUiMFIogdOMO1IlXSP678RHSEvKFZ7uP3Z20:/Nm74JTL4s3LysMmogU55lvp3T","tlshash":"061423fdc74995153036b0ebec5ff4bc7697fa3d099e21e11011c99cd10abe446a1a8b","first_seen":"2026-07-31T00:11:28.133298Z","last_seen":"2026-07-31T12:41:47.082517Z","times_seen":10,"resource_available":false,"data":null}},"time_used":8228,"timings":{"blocked":7898,"dns":0,"connect":0,"send":0,"wait":246,"receive":84,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"y42t.top/js/45540.1781011881923.25dfba7d.js","fqdn":"y42t.top","domain":"y42t.top","tld":"top"},"ip":{"addr":"154.39.104.138","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://y42t.top/","date":"2026-07-31T00:10:38.090Z","timestamp":1785456638090,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"p40f.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 10:44:09 GMT","end":"Tue, 20 Oct 2026 10:44:08 GMT"},"fingerprint":{"sha1":"41:09:2C:3F:FC:9C:25:A9:DB:51:15:BB:D1:5A:D8:01:DC:38:AD:F8","sha256":"49:3B:29:C7:5B:B6:12:CF:84:14:5B:09:42:7D:EF:AA:61:29:EC:A1:D5:40:B5:64:5C:F1:33:AB:9B:E1:13:4D"}}},"request":{"raw":"GET /js/45540.1781011881923.25dfba7d.js HTTP/1.1\r\nHost: y42t.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://y42t.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 31 Jul 2026 00:10:39 GMT\r\nContent-Type: application/javascript\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Tue, 09 Jun 2026 13:37:11 GMT\r\nVary: Accept-Encoding\r\nETag: W/\"6a281707-37ff6\"\r\nCache-Control: public, max-age=31536000, immutable\r\nAccess-Control-Allow-Origin: *\r\nX-Custom-Check: true\r\nContent-Encoding: gzip\r\nServer: Nginx\r\nL-Safe: 1785456639=ZQ2Zoq/cRP01EUwFViLw2I2TTD7YXn3fOcUs+xcjh4jH3sEo30QmYTa3wyU19juAAswcF1zK33qXVdu/2wEQssIQmAwdFBkC9e1CbV9WPKEBdbscbAAIXVFwwInqwSqPfxbfTB5XlXMMnezbEIdI/APkRTYkPOXTT5T1KnbKAZgGBnmhack9avnR9rigFkDp\r\nL-VIA: l1=TqoDVanjjr6wMExF\r\nL-VERSION: 1784720560\r\nL-Request-Id: 3ec219fb5823e12ba1c\r\nX-Cache-Status: BYPASS\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":229366,"size_decoded":65835,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"7983a109fba451279f84fe7b75724983","sha1":"9487dc955240c6083cf3497e806dff89bec2061f","sha256":"80bb5c781336a9095ee3e8ae99d724f58a409c7f3c159bf0f320a9c948afe030","sha512":"ddf49f5cfb4721100ef951228391607209e248a8733d48229ff5196fd8a32fc3e759d90c1040dd591b1c0bd97ab83a1c8baaffa70fa96bbe2d556af2379478b0","ssdeep":"6144:1YD4wFsYiSGfKnCKPP6Xm9sm3MCln1OSgpozfEe5a:1YD4wFsYiSAKNH3TY5","tlshash":"e724f894f294f1be075fc1f1d23b501af35b5e6120cc9ca0d296e6942e20b49da77eac","first_seen":"2026-06-12T19:29:57.328205Z","last_seen":"2026-07-31T12:41:47.102379Z","times_seen":968,"resource_available":true,"data":null}},"time_used":1883,"timings":{"blocked":1258,"dns":0,"connect":0,"send":0,"wait":369,"receive":256,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-31","alert":"Phishing Block","trigger":"y42t.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-31","alert":"Sinkholed","trigger":"y42t.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"y42t.top/kc523-1/sponsor/sponsor.json?1781011825626","fqdn":"y42t.top","domain":"y42t.top","tld":"top"},"ip":{"addr":"154.39.104.138","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://y42t.top/","date":"2026-07-31T00:10:41.052Z","timestamp":1785456641052,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"p40f.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 10:44:09 GMT","end":"Tue, 20 Oct 2026 10:44:08 GMT"},"fingerprint":{"sha1":"41:09:2C:3F:FC:9C:25:A9:DB:51:15:BB:D1:5A:D8:01:DC:38:AD:F8","sha256":"49:3B:29:C7:5B:B6:12:CF:84:14:5B:09:42:7D:EF:AA:61:29:EC:A1:D5:40:B5:64:5C:F1:33:AB:9B:E1:13:4D"}}},"request":{"raw":"GET /kc523-1/sponsor/sponsor.json?1781011825626 HTTP/1.1\r\nHost: y42t.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://y42t.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 31 Jul 2026 00:10:41 GMT\r\nContent-Type: application/json\r\nContent-Length: 646\r\nConnection: keep-alive\r\nLast-Modified: Tue, 30 Sep 2025 12:19:27 GMT\r\nETag: \"68dbcacf-286\"\r\nAccess-Control-Allow-Origin: *\r\nX-Custom-Check: true\r\nServer: Nginx\r\nL-Safe: 1785456641=gE780zdPNeqfjPR58ntui758h0rpjLBJh/P/VwEb9QgBdmX5XoCvf3XKS4ubqYQ4aAZoEOOBDBlTTobn+2eZbZ0U5rmjaj2YBZiCmX90g8Si+D3mrq6vSJjZwkQXhlFZx6UYXbz//HB3stXeGCYUIUvqR8AbEmVqeF09wWmA11wJgMs9cyGCHyv3ab/jWW+R\r\nL-VIA: l1=TqoDVanjjr6wMExF\r\nL-VERSION: 1784720560\r\nL-Request-Id: 3ec619fb5824524bcef\r\nX-Cache-Status: BYPASS\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":646,"size_decoded":1261,"mime_type":"application/json","magic":"JSON text data","md5":"10d2161de8cf99c474812f4c43645a26","sha1":"71884ef7281cdcb5084088f16d4550ce8790e634","sha256":"bb02fd7438bb49dd4decb6f76a71f11e93355332fd9f965d6f9f13bb8175aeca","sha512":"bf0fd1232309fcc5582d5c42644e1c7b4b8d235b1066e988ff55e0dd94a956f89742401f00c2d904359041c8e0c2bac8e9316252fab60db5eb0a3b4c935172f0","ssdeep":"","tlshash":"d8f0f44ad8b25b93211fb57c58cd050470294a8f0eccaac4baac987c4f598ddd1e839e","first_seen":"2023-06-16T04:51:50Z","last_seen":"2026-07-31T12:41:47.01013Z","times_seen":2722,"resource_available":false,"data":null}},"time_used":423,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":423,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-31","alert":"Sinkholed","trigger":"y42t.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-31","alert":"Phishing Block","trigger":"y42t.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"y42t.top/img/sports.60212fd6.png","fqdn":"y42t.top","domain":"y42t.top","tld":"top"},"ip":{"addr":"154.39.104.138","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://y42t.top/","date":"2026-07-31T00:10:41.069Z","timestamp":1785456641069,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"p40f.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 10:44:09 GMT","end":"Tue, 20 Oct 2026 10:44:08 GMT"},"fingerprint":{"sha1":"41:09:2C:3F:FC:9C:25:A9:DB:51:15:BB:D1:5A:D8:01:DC:38:AD:F8","sha256":"49:3B:29:C7:5B:B6:12:CF:84:14:5B:09:42:7D:EF:AA:61:29:EC:A1:D5:40:B5:64:5C:F1:33:AB:9B:E1:13:4D"}}},"request":{"raw":"GET /img/sports.60212fd6.png HTTP/1.1\r\nHost: y42t.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://y42t.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 31 Jul 2026 00:10:41 GMT\r\nContent-Type: image/png\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Tue, 09 Jun 2026 13:37:11 GMT\r\nVary: Accept-Encoding\r\nETag: W/\"6a281707-1c734\"\r\nCache-Control: public, max-age=2592000, immutable\r\nAccess-Control-Allow-Origin: *\r\nX-Custom-Check: true\r\nContent-Encoding: gzip\r\nServer: Nginx\r\nL-Safe: 1785456641=gE780zdPNeqfjPR58ntui758h0rpjLBJh/P/VwEb9QgBdmX5XoCvf3XKS4ubqYQ4aAZoEOOBDBlTTobn+2eZbZ0U5rmjaj2YBZiCmX90g8Si+D3mrq6vSJjZwkQXhlFZx6UYXbz//HB3stXeGCYUIUvqR8AbEmVqeF09wWmA11wJgMs9cyGCHyv3ab/jWW+R\r\nAge: 499205\r\nL-VIA: l1=TqoDVanjjr6wMExF\r\nL-VERSION: 1784720560\r\nL-Request-Id: 3ec919fb5824795c08b\r\nX-Cache-Status: HIT\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":116532,"size_decoded":117112,"mime_type":"image/png","magic":"PNG image data, 666 x 541, 8-bit colormap, non-interlaced","md5":"fc82aa907334f929011fc2a6ec906f55","sha1":"f76bd75b9d1235807c70c7d763a1865d7c3f8d4e","sha256":"2ae1d61176960d7ddfddcb30a69d22b9da893687370d8cd26f4917d129a1bf3b","sha512":"12ef7a828d7d4228596b0db0ad77b200e8ffcfe2457d12821a4e9778b62668ebeef075c2bc79076e36291e3015afbfe276a2ca230ead018b38e2d3fd803dd31f","ssdeep":"3072:/ZEgiWqpGRwEyiwX0wgOZzbKoSxNiSvrUeO4h:/ZLf/R2iVwgAKoSPiSvVOy","tlshash":"76b3021c79775a2083c6bcb40b583aeae09b3dc19d169808d68b7791993df43c970bed","first_seen":"2023-11-10T19:12:00Z","last_seen":"2026-07-31T12:41:47.12707Z","times_seen":2596,"resource_available":false,"data":null}},"time_used":1045,"timings":{"blocked":723,"dns":0,"connect":0,"send":0,"wait":293,"receive":29,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-31","alert":"Sinkholed","trigger":"y42t.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-31","alert":"Phishing Block","trigger":"y42t.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"photo.365live88.com/img/fb/team/b85896464fc34cc984ecea1daf4fccdd?win007=sell","fqdn":"photo.365live88.com","domain":"365live88.com","tld":"com"},"ip":{"addr":"154.41.93.240","port":443,"asn":174,"as":"COGENT-174","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://y42t.top/","date":"2026-07-31T00:10:42.481Z","timestamp":1785456642481,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"photo.365live88.com","organization":""},"issuer":{"commonName":"Encryption Everywhere DV TLS CA - G2","organization":"DigiCert Inc"},"validity":{"start":"Sat, 01 Nov 2025 00:00:00 GMT","end":"Sat, 31 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"45:76:43:9C:31:C5:89:A6:99:FD:9B:D8:6C:A9:3A:E6:2F:D6:E9:80","sha256":"73:27:CF:D8:8D:AC:95:46:00:5D:67:05:1E:70:22:3E:17:F0:94:78:CD:6F:A6:9C:C8:5F:B5:3B:75:60:3D:C8"}}},"request":{"raw":"GET /img/fb/team/b85896464fc34cc984ecea1daf4fccdd?win007=sell HTTP/1.1\r\nHost: photo.365live88.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://y42t.top/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: openresty\r\nDate: Fri, 31 Jul 2026 00:10:45 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 3973\r\nConnection: keep-alive\r\nAccept-Ranges: bytes\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Expose-Headers: X-Log, X-Reqid\r\nAccess-Control-Max-Age: 2592000\r\nAge: 83431\r\nCache-Control: public, max-age=31536000\r\nContent-Disposition: inline; filename=\"b85896464fc34cc984ecea1daf4fccdd\"; filename*=utf-8''b85896464fc34cc984ecea1daf4fccdd\r\nContent-Md5: FCRA++mGkuUuvcvBqclmtg==\r\nContent-Transfer-Encoding: binary\r\nEtag: \"FnAOGFeBQgXMEz3G9yJ_cje_DM5U\"\r\nLast-Modified: Fri, 24 Jul 2026 19:49:44 GMT\r\nX-Log: X-Log\r\nX-M-Log: QNM:wldsg119;QNM3\r\nX-M-Reqid: gnqdJDP6P\r\nX-Qiniu-Zone: as0\r\nX-Qnm-Cache: Hit\r\nX-Reqid: 7iYAAACfJ8l668YY\r\nX-Svr: IO\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3973,"size_decoded":4729,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 125x125, components 3","md5":"142440fbe98692e52ebdcbc1a9c966b6","sha1":"700e1857814205cc133dc6f7227f7237bf0cce54","sha256":"8c8be42015ceb0dcb13d5d1ece2007a84b2175decd05862942845e38634078e2","sha512":"d82f749db876caa2029e82663ea68212dbee83a4bc9fa0198248b7352c1ce07444b9a7448582cd07ed57a9057397328f97c623fd1398756ef27ced31c488bd3a","ssdeep":"","tlshash":"bc814c5e23a2969ddfd5ad787af41341128e070b07af5e0a1bfa43e04267550abf1df0","first_seen":"2025-04-01T11:41:17.744465Z","last_seen":"2026-07-31T00:12:30.753392Z","times_seen":25,"resource_available":false,"data":null}},"time_used":3178,"timings":{"blocked":2937,"dns":0,"connect":0,"send":0,"wait":241,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"photo.365live88.com/img/fb/team/b6a3eed7c5d54c8786ef0bdee45d8862?win007=sell","fqdn":"photo.365live88.com","domain":"365live88.com","tld":"com"},"ip":{"addr":"154.41.93.240","port":443,"asn":174,"as":"COGENT-174","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://y42t.top/","date":"2026-07-31T00:10:42.567Z","timestamp":1785456642567,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"photo.365live88.com","organization":""},"issuer":{"commonName":"Encryption Everywhere DV TLS CA - G2","organization":"DigiCert Inc"},"validity":{"start":"Sat, 01 Nov 2025 00:00:00 GMT","end":"Sat, 31 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"45:76:43:9C:31:C5:89:A6:99:FD:9B:D8:6C:A9:3A:E6:2F:D6:E9:80","sha256":"73:27:CF:D8:8D:AC:95:46:00:5D:67:05:1E:70:22:3E:17:F0:94:78:CD:6F:A6:9C:C8:5F:B5:3B:75:60:3D:C8"}}},"request":{"raw":"GET /img/fb/team/b6a3eed7c5d54c8786ef0bdee45d8862?win007=sell HTTP/1.1\r\nHost: photo.365live88.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://y42t.top/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: openresty\r\nDate: Fri, 31 Jul 2026 00:10:51 GMT\r\nContent-Type: image/png\r\nContent-Length: 120673\r\nConnection: keep-alive\r\nAccept-Ranges: bytes\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Expose-Headers: X-Log, X-Reqid\r\nAccess-Control-Max-Age: 2592000\r\nAge: 18636\r\nCache-Control: public, max-age=31536000\r\nContent-Disposition: inline; filename=\"b6a3eed7c5d54c8786ef0bdee45d8862\"; filename*=utf-8''b6a3eed7c5d54c8786ef0bdee45d8862\r\nContent-Md5: ZnLdehwUBa/W+di5+HVg3Q==\r\nContent-Transfer-Encoding: binary\r\nEtag: \"Fu-e837HidZuy5TbOvyVHN11Oob8\"\r\nLast-Modified: Sat, 25 Jul 2026 19:18:10 GMT\r\nX-Log: X-Log\r\nX-M-Log: QNM:wldsg119;QNM3\r\nX-M-Reqid: cvY7alnc3\r\nX-Qiniu-Zone: as0\r\nX-Qnm-Cache: Hit\r\nX-Reqid: qzsAAAArmFhqJscY\r\nX-Svr: IO\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":120673,"size_decoded":121430,"mime_type":"image/png","magic":"PNG image data, 1200 x 1054, 8-bit/color RGBA, non-interlaced","md5":"6672dd7a1c1405afd6f9d8b9f87560dd","sha1":"ef9ef37ec789d66ecb94db3afc951cdd753a86fc","sha256":"cdd4a672a6ba3d8859d41c0f122728c43bbebfd5c53d94274da2185045c97ab3","sha512":"d9d73cac5285ad071a6b1365dbb215750574fd20142210ad5a6759c4d1f5d3b4cfa84bdee63c047b3cfdb7be9252020fc2a931f5004ab3ff771d4c74e8513e8d","ssdeep":"1536:73KvbGXpPtgQFpI5e1UiCw1/8hHYORAQwY40/yjqsGjYmuthXJe9EkXlsHHYPFcL:73oGIQE01UdK/7OJmqsG0pZXkXlsQFyV","tlshash":"09c3025155baea2fdc7f22e91500cf5b03b7dce2949443038da6bf4e8e18bf82446666","first_seen":"2025-08-28T12:35:57.888425Z","last_seen":"2026-07-31T12:41:47.010673Z","times_seen":110,"resource_available":false,"data":null}},"time_used":8806,"timings":{"blocked":8510,"dns":0,"connect":0,"send":0,"wait":248,"receive":48,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"photo.365live88.com/img/fb/team/642bfab886d148fc88b521797700b3ed?win007=sell","fqdn":"photo.365live88.com","domain":"365live88.com","tld":"com"},"ip":{"addr":"154.41.93.240","port":443,"asn":174,"as":"COGENT-174","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://y42t.top/","date":"2026-07-31T00:10:42.524Z","timestamp":1785456642524,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"photo.365live88.com","organization":""},"issuer":{"commonName":"Encryption Everywhere DV TLS CA - G2","organization":"DigiCert Inc"},"validity":{"start":"Sat, 01 Nov 2025 00:00:00 GMT","end":"Sat, 31 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"45:76:43:9C:31:C5:89:A6:99:FD:9B:D8:6C:A9:3A:E6:2F:D6:E9:80","sha256":"73:27:CF:D8:8D:AC:95:46:00:5D:67:05:1E:70:22:3E:17:F0:94:78:CD:6F:A6:9C:C8:5F:B5:3B:75:60:3D:C8"}}},"request":{"raw":"GET /img/fb/team/642bfab886d148fc88b521797700b3ed?win007=sell HTTP/1.1\r\nHost: photo.365live88.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://y42t.top/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: openresty\r\nDate: Fri, 31 Jul 2026 00:10:47 GMT\r\nContent-Type: image/png\r\nContent-Length: 83145\r\nConnection: keep-alive\r\nAccept-Ranges: bytes\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Expose-Headers: X-Log, X-Reqid\r\nAccess-Control-Max-Age: 2592000\r\nAge: 31243\r\nCache-Control: public, max-age=31536000\r\nContent-Disposition: inline; filename=\"642bfab886d148fc88b521797700b3ed\"; filename*=utf-8''642bfab886d148fc88b521797700b3ed\r\nContent-Md5: 9dCz8XQWgIj2T2W0evcY+g==\r\nContent-Transfer-Encoding: binary\r\nEtag: \"FgqiNUFoSAN6UUqBDFmtqrCDvBE7\"\r\nLast-Modified: Fri, 24 Jul 2026 19:50:49 GMT\r\nX-Log: X-Log\r\nX-M-Log: QNM:wldsg121;QNM3\r\nX-M-Reqid: x5fPkSTQc\r\nX-Qiniu-Zone: as0\r\nX-Qnm-Cache: Hit\r\nX-Reqid: 5cUAAAAioB7yGscY\r\nX-Svr: IO\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":83145,"size_decoded":83901,"mime_type":"image/png","magic":"PNG image data, 300 x 300, 8-bit/color RGBA, non-interlaced","md5":"f5d0b3f174168088f64f65b47af718fa","sha1":"0aa235416848037a514a810c59adaab083bc113b","sha256":"d4de253d47c9fd3ca3f6131a4ce6652a818931131465c618de02abc0a0c031f6","sha512":"19b7767c0f0423c6b70502ce411795f06e8a6c8436b2cea74077476d877757b7eb3ad21ce7d0c2b1e0ef6923bb0e6f2d9f01af1349c248f490abec21664eb058","ssdeep":"1536:WfV1qbWrq2U+TPxAK1h6NxtXxOFch35Jwa0CXvG03hYFNtMMVm+ViYvP5VRNH:WfV1qSry2GKarXxlhNG0ylrgPYvP5/B","tlshash":"e08312ce8795f82aa9321970e39cfa8b28358454dd10f9831ae2df9d1fdd0d05622de3","first_seen":"2025-01-29T13:39:14.796686Z","last_seen":"2026-07-31T12:41:15.255273Z","times_seen":58,"resource_available":false,"data":null}},"time_used":5433,"timings":{"blocked":5023,"dns":0,"connect":0,"send":0,"wait":273,"receive":137,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"photo.365live88.com/img/fb/team/9d4f3634be6e406bb06fc8f695275f8c?win007=sell","fqdn":"photo.365live88.com","domain":"365live88.com","tld":"com"},"ip":{"addr":"154.41.93.240","port":443,"asn":174,"as":"COGENT-174","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://y42t.top/","date":"2026-07-31T00:10:42.533Z","timestamp":1785456642533,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"photo.365live88.com","organization":""},"issuer":{"commonName":"Encryption Everywhere DV TLS CA - G2","organization":"DigiCert Inc"},"validity":{"start":"Sat, 01 Nov 2025 00:00:00 GMT","end":"Sat, 31 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"45:76:43:9C:31:C5:89:A6:99:FD:9B:D8:6C:A9:3A:E6:2F:D6:E9:80","sha256":"73:27:CF:D8:8D:AC:95:46:00:5D:67:05:1E:70:22:3E:17:F0:94:78:CD:6F:A6:9C:C8:5F:B5:3B:75:60:3D:C8"}}},"request":{"raw":"GET /img/fb/team/9d4f3634be6e406bb06fc8f695275f8c?win007=sell HTTP/1.1\r\nHost: photo.365live88.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://y42t.top/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: openresty\r\nDate: Fri, 31 Jul 2026 00:10:48 GMT\r\nContent-Type: image/png\r\nContent-Length: 16597\r\nConnection: keep-alive\r\nAccept-Ranges: bytes\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Expose-Headers: X-Log, X-Reqid\r\nAccess-Control-Max-Age: 2592000\r\nAge: 25818\r\nCache-Control: public, max-age=31536000\r\nContent-Disposition: inline; filename=\"9d4f3634be6e406bb06fc8f695275f8c\"; filename*=utf-8''9d4f3634be6e406bb06fc8f695275f8c\r\nContent-Md5: mPjbtTfRf2EfFMHrG/Y+lQ==\r\nContent-Transfer-Encoding: binary\r\nEtag: \"FoRL0LceEvPhfr17nTtdEYBYZhcr\"\r\nLast-Modified: Sat, 25 Jul 2026 19:15:58 GMT\r\nX-Log: X-Log\r\nX-M-Log: QNM:wldsg119;QNM3\r\nX-M-Reqid: CsiszwFlh\r\nX-Qiniu-Zone: as0\r\nX-Qnm-Cache: Hit\r\nX-Reqid: qgQAAAAgvG_hH8cY\r\nX-Svr: IO\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":16597,"size_decoded":17353,"mime_type":"image/png","magic":"PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced","md5":"98f8dbb537d17f611f14c1eb1bf63e95","sha1":"844bd0b71e12f3e17ebd7b9d3b5d11805866172b","sha256":"3f97a3c4017a46a6d314b2ae74a0a8e6831d16344aab56e1a9d65c6dfd9879a7","sha512":"4b250e1a11dfec239d50cf9a391be24e4c9c7f401035b7becbc620278e3cba7403bb54d86f03a8a7dfd318e547c281776faadb30625a861c91ee31858a2ffd26","ssdeep":"384:/NZmwBjwpSQEDHca+xsYhLlF+3X4EYAQCEkQlsLcibtz:FbdoSQEL0xsYhlQYHCENGcibl","tlshash":"e172d031a529f50ce95f09ba3c79a2e22b318f38168b39dfee5ff1124b4550171999c2","first_seen":"2025-08-29T05:40:39.850494Z","last_seen":"2026-07-31T12:41:15.261417Z","times_seen":23,"resource_available":false,"data":null}},"time_used":6197,"timings":{"blocked":5947,"dns":0,"connect":0,"send":0,"wait":248,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"photo.365live88.com/img/fb/team/c0dab83fbd7b46ffb0a455b2ff897356?win007=sell","fqdn":"photo.365live88.com","domain":"365live88.com","tld":"com"},"ip":{"addr":"154.41.93.240","port":443,"asn":174,"as":"COGENT-174","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://y42t.top/","date":"2026-07-31T00:10:42.542Z","timestamp":1785456642542,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"photo.365live88.com","organization":""},"issuer":{"commonName":"Encryption Everywhere DV TLS CA - G2","organization":"DigiCert Inc"},"validity":{"start":"Sat, 01 Nov 2025 00:00:00 GMT","end":"Sat, 31 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"45:76:43:9C:31:C5:89:A6:99:FD:9B:D8:6C:A9:3A:E6:2F:D6:E9:80","sha256":"73:27:CF:D8:8D:AC:95:46:00:5D:67:05:1E:70:22:3E:17:F0:94:78:CD:6F:A6:9C:C8:5F:B5:3B:75:60:3D:C8"}}},"request":{"raw":"GET /img/fb/team/c0dab83fbd7b46ffb0a455b2ff897356?win007=sell HTTP/1.1\r\nHost: photo.365live88.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://y42t.top/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: openresty\r\nDate: Fri, 31 Jul 2026 00:10:49 GMT\r\nContent-Type: image/png\r\nContent-Length: 212352\r\nConnection: keep-alive\r\nAccept-Ranges: bytes\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Expose-Headers: X-Log, X-Reqid\r\nAccess-Control-Max-Age: 2592000\r\nAge: 24045\r\nCache-Control: public, max-age=31536000\r\nContent-Disposition: inline; filename=\"c0dab83fbd7b46ffb0a455b2ff897356\"; filename*=utf-8''c0dab83fbd7b46ffb0a455b2ff897356\r\nContent-Md5: oE2IWTmnx4toUFCiXy65oA==\r\nContent-Transfer-Encoding: binary\r\nEtag: \"FqQ6X6_aSgpT79w_XrZsjlpexwJx\"\r\nLast-Modified: Sat, 25 Jul 2026 19:16:59 GMT\r\nX-Log: X-Log\r\nX-M-Log: QNM:wldsg119;QNM3\r\nX-M-Reqid: 4qfJh1U7H\r\nX-Qiniu-Zone: as0\r\nX-Qnm-Cache: Hit\r\nX-Reqid: _cAAAACI8Wl-IccY\r\nX-Svr: IO\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":212352,"size_decoded":213109,"mime_type":"image/png","magic":"PNG image data, 1200 x 1412, 8-bit/color RGBA, non-interlaced","md5":"a04d885939a7c78b685050a25f2eb9a0","sha1":"a43a5fafda4a0a53efdc3f5eb66c8e5a5ec70271","sha256":"1aa3935b0183655369dfbb4a807d9f7f719b7513d127df43370bc8ff39509d7d","sha512":"f660ece9a3c9d6784b1b442047dbdb792ccd9547562aa07c7ed44c048b9656b7872bf9f96c394f40c7bd333b3a7047a9b22ecf490105ed92b380265b8df8b7e5","ssdeep":"3072:StH7xpVUimrJ3AQylDzAs24M0e4lVZTGeB68CC0q6vyMdm1JSJJ+efKQ760TW5xH:S5xMF7yly4M0jZ/CC56KMJvKQ7Xq32+B","tlshash":"45240123c998358f4871620467db79c3e23ad94b3a381f8e0fe598719e6b8d4f076d52","first_seen":"2026-02-08T14:49:50.336177Z","last_seen":"2026-07-31T12:41:15.220496Z","times_seen":10,"resource_available":false,"data":null}},"time_used":6899,"timings":{"blocked":6510,"dns":0,"connect":0,"send":0,"wait":258,"receive":131,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"y42t.top/js/home.1781011881923.a94e73ca.js","fqdn":"y42t.top","domain":"y42t.top","tld":"top"},"ip":{"addr":"154.39.104.138","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://y42t.top/","date":"2026-07-31T00:10:40.411Z","timestamp":1785456640411,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"p40f.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 10:44:09 GMT","end":"Tue, 20 Oct 2026 10:44:08 GMT"},"fingerprint":{"sha1":"41:09:2C:3F:FC:9C:25:A9:DB:51:15:BB:D1:5A:D8:01:DC:38:AD:F8","sha256":"49:3B:29:C7:5B:B6:12:CF:84:14:5B:09:42:7D:EF:AA:61:29:EC:A1:D5:40:B5:64:5C:F1:33:AB:9B:E1:13:4D"}}},"request":{"raw":"GET /js/home.1781011881923.a94e73ca.js HTTP/1.1\r\nHost: y42t.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://y42t.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 31 Jul 2026 00:10:40 GMT\r\nContent-Type: application/javascript\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Tue, 09 Jun 2026 13:37:11 GMT\r\nVary: Accept-Encoding\r\nETag: W/\"6a281707-319eb\"\r\nCache-Control: public, max-age=31536000, immutable\r\nAccess-Control-Allow-Origin: *\r\nX-Custom-Check: true\r\nContent-Encoding: gzip\r\nServer: Nginx\r\nL-Safe: 1785456640=J17DXMEKXneKJsmf5PklOuZGVEbIRHZaaYUSHzFG19eRab1KmINu7b4QGpzoq2sF3cVtRbxKbhHDWucmkECQYVOT+r0RQLbYm93Pi9MruE4IbJTcWk38kbzXbpB01LsT5BD5K4g3/y6LaDWmYtWF9GJZSB/4ORv/PkgK01jvDx4dXhxfQiC6c5+CxYbaqcYc\r\nL-VIA: l1=TqoDVanjjr6wMExF\r\nL-VERSION: 1784720560\r\nL-Request-Id: 3ec819fb582422ec0f0\r\nX-Cache-Status: BYPASS\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":203243,"size_decoded":60718,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (64174), with no line terminators","md5":"7ad9af47a2c0c93f65e42ff84b45dad7","sha1":"eed3b4bd1191c75416f457ee41317595880f8635","sha256":"c9d64aef33c7a35945a5963b08b2bc3157f403dc91a5c9c9463c82a0d4075af6","sha512":"757a63f9b96bc8a36491424f8e0ae9fd6813983817ab2da87bb3455e18b5cb5f71d5e682919941194e4a588bea925c790888e4d27f8531ee03c777c1e2c92678","ssdeep":"3072:T5daS9tSIMcewi8uJBuoMfqFf2GMkvVJuhxffj7TEOiGRlc:T5ES9tSIMcewiLQqFRmzffjAGHc","tlshash":"93141880b5f0e275575fc2a7d7371025b2271786d0ccac60e1f66b187e2879ab236db8","first_seen":"2026-06-12T19:29:57.277471Z","last_seen":"2026-07-31T12:41:47.120711Z","times_seen":915,"resource_available":true,"data":null}},"time_used":404,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":322,"receive":82,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-31","alert":"Sinkholed","trigger":"y42t.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-31","alert":"Phishing Block","trigger":"y42t.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"y42t.top/ecb/8f8306425cb6740e78b2802ff5047afa96a8ae096bee393c421cac4924db741c4a080b3f3ed2f2822673f3118bd3bae081df46a59bfce8","fqdn":"y42t.top","domain":"y42t.top","tld":"top"},"ip":{"addr":"154.39.104.138","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://y42t.top/","date":"2026-07-31T00:10:42.025Z","timestamp":1785456642025,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"p40f.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 10:44:09 GMT","end":"Tue, 20 Oct 2026 10:44:08 GMT"},"fingerprint":{"sha1":"41:09:2C:3F:FC:9C:25:A9:DB:51:15:BB:D1:5A:D8:01:DC:38:AD:F8","sha256":"49:3B:29:C7:5B:B6:12:CF:84:14:5B:09:42:7D:EF:AA:61:29:EC:A1:D5:40:B5:64:5C:F1:33:AB:9B:E1:13:4D"}}},"request":{"raw":"GET /ecb/8f8306425cb6740e78b2802ff5047afa96a8ae096bee393c421cac4924db741c4a080b3f3ed2f2822673f3118bd3bae081df46a59bfce8 HTTP/1.1\r\nHost: y42t.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://y42t.top/\r\nContent-Type: application/x-www-form-urlencoded\r\nx-request-source: https://y42t.top\r\nXign: uDCUumUbCoVm7cXwEToYj0p5w8tbgrws+3KYvDx5QOosOk6iSHAke4f05MBzylSNpGhwyEG3zAu73Vj2B3qoctUkVaKaSATONjbbgy7WyfV/9BgG8qp9ajorDBVqHitDyT90kJJYpOdJwFLZiumNiRujRDq5aEIpv7uvl4LMQQE=\r\ntimestamp: 1785456641871\r\nsign: 21s6o2e3e4be6d6f\r\nversion: 5.6.12.0\r\nclient-type: web\r\ndevice-id: h7Ebc4YSNiCSchfp8FT2WyTT845kFyYC\r\nlang: zh-CN\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 31 Jul 2026 00:10:42 GMT\r\nContent-Type: application/json\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding, Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nExpires: Fri, 31 Jul 2026 00:20:42 GMT\r\nCache-Control: public, max-age=600, s-maxage=600, must-revalidate, stale-while-revalidate=30\r\nX-XSS-Protection: 1; mode=block\r\nX-Request-ID: 9fa88e4e0642495e8e8fbcf46d412aa5\r\nPragma: public\r\nX-Content-Type-Options: nosniff\r\nStrict-Transport-Security: max-age=63072000; includeSubdomains; preload\r\nAccess-Control-Allow-Origin: *\r\nX-Custom-Check: true, true\r\nContent-Encoding: gzip\r\nServer: Nginx\r\nL-Safe: 1785456642=csqYCqnSrfqstQvye8K/cOFcRTOv1c0xbYhymJAs0/02+uXPG5GVyZ0p6izerPHm8MGf7A/o5MmlVb25OTDKDKeQU0rR3SBVQb7DhxtPpD3sSzxoSDG3GUN9oldUbp9/49xVY7UWBgnWGNvQm3pHmukuHRLxIzXXppUlpGs5PUC8OL5ESDjYobwSrUxT4jKY\r\nL-VIA: l1=TqoDVanjjr6wMExF\r\nL-VERSION: 1784720560\r\nL-Request-Id: 3ec819fb58249b4c0f6\r\nX-Cache-Status: BYPASS\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":854,"size_decoded":1887,"mime_type":"application/json","magic":"data","md5":"1dbfbf1673ccdc41dcd72473d501c2e8","sha1":"97d7e44b21c76fc45a3324c837350652657ab2f0","sha256":"5b6acdff9f205c8383d521e1dbd61b709b290810090354330f686ee061188698","sha512":"18de86d95335f98694d134bd3bd69dffa58e5d24bf517075960fe1c0a03a9dd80d30407bf30ee827a9f463e6a92277a440239d22fa1e44ec324cedbc2235cd0f","ssdeep":"","tlshash":"3121c59022029e06a72163a12023d1c2ba7323881ac8ea60c2e1e552ac62e5b47df677","first_seen":"2026-07-26T23:48:44.123952Z","last_seen":"2026-07-31T00:12:52.506347Z","times_seen":4,"resource_available":false,"data":null}},"time_used":598,"timings":{"blocked":307,"dns":0,"connect":0,"send":0,"wait":290,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-31","alert":"Phishing Block","trigger":"y42t.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-31","alert":"Sinkholed","trigger":"y42t.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"photo.365live88.com/img/fb/team/c19d14b72ff748a9aa3be6fb00e99f6a?win007=sell","fqdn":"photo.365live88.com","domain":"365live88.com","tld":"com"},"ip":{"addr":"154.41.93.240","port":443,"asn":174,"as":"COGENT-174","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://y42t.top/","date":"2026-07-31T00:10:42.493Z","timestamp":1785456642493,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"photo.365live88.com","organization":""},"issuer":{"commonName":"Encryption Everywhere DV TLS CA - G2","organization":"DigiCert Inc"},"validity":{"start":"Sat, 01 Nov 2025 00:00:00 GMT","end":"Sat, 31 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"45:76:43:9C:31:C5:89:A6:99:FD:9B:D8:6C:A9:3A:E6:2F:D6:E9:80","sha256":"73:27:CF:D8:8D:AC:95:46:00:5D:67:05:1E:70:22:3E:17:F0:94:78:CD:6F:A6:9C:C8:5F:B5:3B:75:60:3D:C8"}}},"request":{"raw":"GET /img/fb/team/c19d14b72ff748a9aa3be6fb00e99f6a?win007=sell HTTP/1.1\r\nHost: photo.365live88.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://y42t.top/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: openresty\r\nDate: Fri, 31 Jul 2026 00:10:45 GMT\r\nContent-Type: image/png\r\nContent-Length: 20464\r\nConnection: keep-alive\r\nAccept-Ranges: bytes\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Expose-Headers: X-Log, X-Reqid\r\nAccess-Control-Max-Age: 2592000\r\nAge: 52836\r\nCache-Control: public, max-age=31536000\r\nContent-Disposition: inline; filename=\"c19d14b72ff748a9aa3be6fb00e99f6a\"; filename*=utf-8''c19d14b72ff748a9aa3be6fb00e99f6a\r\nContent-Md5: MSB1TFxUbvTCxNBf1g65mw==\r\nContent-Transfer-Encoding: binary\r\nEtag: \"Fhw1CYlXuCYD3LpZmI4ASRGd1R6i\"\r\nLast-Modified: Fri, 24 Jul 2026 19:49:55 GMT\r\nX-Log: X-Log\r\nX-M-Log: QNM:wldsg121;QNM3\r\nX-M-Reqid: 9VbrC8tws\r\nX-Qiniu-Zone: as0\r\nX-Qnm-Cache: Hit\r\nX-Reqid: 0FQAAACfvy5OB8cY\r\nX-Svr: IO\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":20464,"size_decoded":21220,"mime_type":"image/png","magic":"PNG image data, 180 x 180, 8-bit/color RGBA, non-interlaced","md5":"3120754c5c546ef4c2c4d05fd60eb99b","sha1":"1c35098957b82603dcba59988e0049119dd51ea2","sha256":"3618250d95563a8f52dd6dfa7c91cde3041d5235fc98a26676b36daef1c8822c","sha512":"40187d1342a43bbe1ec84e83816fe33ee33cfcb836c3a2015280f556933a9929f80663f3d2bf1fa8a5417aa02ae58984ad5fd0afe9775a49409f337a694aa58d","ssdeep":"384:wV3+vIC+B8hi+RhARUAroFeJ5o0Vj3IekAKWCjl5xeddg3NC3kwu7snY:DIv2RhSUArwHekA+x2gClzY","tlshash":"d592e1d8f53112ad3d2b2d276c1886e034d427d88ad5dbf62a7ae540e5ad07ecdd3113","first_seen":"2023-08-25T07:55:33Z","last_seen":"2026-07-31T05:07:38.919155Z","times_seen":80,"resource_available":false,"data":null}},"time_used":3477,"timings":{"blocked":3187,"dns":0,"connect":0,"send":0,"wait":281,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"photo.365live88.com/img/fb/team/f30f98028fdf41ff81ffe531a03727f4?win007=sell","fqdn":"photo.365live88.com","domain":"365live88.com","tld":"com"},"ip":{"addr":"154.41.93.240","port":443,"asn":174,"as":"COGENT-174","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://y42t.top/","date":"2026-07-31T00:10:42.508Z","timestamp":1785456642508,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"photo.365live88.com","organization":""},"issuer":{"commonName":"Encryption Everywhere DV TLS CA - G2","organization":"DigiCert Inc"},"validity":{"start":"Sat, 01 Nov 2025 00:00:00 GMT","end":"Sat, 31 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"45:76:43:9C:31:C5:89:A6:99:FD:9B:D8:6C:A9:3A:E6:2F:D6:E9:80","sha256":"73:27:CF:D8:8D:AC:95:46:00:5D:67:05:1E:70:22:3E:17:F0:94:78:CD:6F:A6:9C:C8:5F:B5:3B:75:60:3D:C8"}}},"request":{"raw":"GET /img/fb/team/f30f98028fdf41ff81ffe531a03727f4?win007=sell HTTP/1.1\r\nHost: photo.365live88.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://y42t.top/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: openresty\r\nDate: Fri, 31 Jul 2026 00:10:46 GMT\r\nContent-Type: image/png\r\nContent-Length: 47009\r\nConnection: keep-alive\r\nAccept-Ranges: bytes\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Expose-Headers: X-Log, X-Reqid\r\nAccess-Control-Max-Age: 2592000\r\nAge: 51034\r\nCache-Control: public, max-age=31536000\r\nContent-Disposition: inline; filename=\"f30f98028fdf41ff81ffe531a03727f4\"; filename*=utf-8''f30f98028fdf41ff81ffe531a03727f4\r\nContent-Md5: BH0Y5xYBOW2//05z1gHDNg==\r\nContent-Transfer-Encoding: binary\r\nEtag: \"Fq3m5WeXnRqTA4LOT-sMPAOp00_V\"\r\nLast-Modified: Fri, 24 Jul 2026 19:49:55 GMT\r\nX-Log: X-Log\r\nX-M-Log: QNM:wldsg119;QNM3\r\nX-M-Reqid: EedeDpRTP\r\nX-Qiniu-Zone: as0\r\nX-Qnm-Cache: Hit\r\nX-Reqid: bTsAAABYPt7xCMcY\r\nX-Svr: IO\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":47009,"size_decoded":47765,"mime_type":"image/png","magic":"PNG image data, 180 x 180, 8-bit/color RGBA, non-interlaced","md5":"047d18e71601396dbfff4e73d601c336","sha1":"ade6e567979d1a930382ce4feb0c3c03a9d34fd5","sha256":"02e377a9bd123b4d7f858e0d7c11223cc04bd17b3745348cf1e79929bfe36af0","sha512":"88a248ca0568cf40f831c7af7ef2ecc14b94648843c681ac4e23f7f8217148b51956a3db06e952e8720a67cebd6143794594feb7844ff08dc0e8c056bf1bc465","ssdeep":"768:PaOPNyfTcvk5b/irnIo0DHib68L/r0nXxR4DFo8F7IGjvbyvg6FHByROBcdT2s:P9WdDirnIo07iLYRWIGjjegGeOBcdTz","tlshash":"b12302d0d4a9ce2ac52885d44ae90cdfaccf2158943bbc6c9e2474508ed64fb3f175e0","first_seen":"2023-08-25T07:55:33Z","last_seen":"2026-07-31T05:07:38.924737Z","times_seen":119,"resource_available":false,"data":null}},"time_used":4084,"timings":{"blocked":3747,"dns":0,"connect":0,"send":0,"wait":273,"receive":64,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"photo.365live88.com/img/fb/team/e43dadad89274ca19604786218d7ad97?win007=sell","fqdn":"photo.365live88.com","domain":"365live88.com","tld":"com"},"ip":{"addr":"154.41.93.240","port":443,"asn":174,"as":"COGENT-174","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://y42t.top/","date":"2026-07-31T00:10:42.509Z","timestamp":1785456642509,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"photo.365live88.com","organization":""},"issuer":{"commonName":"Encryption Everywhere DV TLS CA - G2","organization":"DigiCert Inc"},"validity":{"start":"Sat, 01 Nov 2025 00:00:00 GMT","end":"Sat, 31 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"45:76:43:9C:31:C5:89:A6:99:FD:9B:D8:6C:A9:3A:E6:2F:D6:E9:80","sha256":"73:27:CF:D8:8D:AC:95:46:00:5D:67:05:1E:70:22:3E:17:F0:94:78:CD:6F:A6:9C:C8:5F:B5:3B:75:60:3D:C8"}}},"request":{"raw":"GET /img/fb/team/e43dadad89274ca19604786218d7ad97?win007=sell HTTP/1.1\r\nHost: photo.365live88.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://y42t.top/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: openresty\r\nDate: Fri, 31 Jul 2026 00:10:46 GMT\r\nContent-Type: image/png\r\nContent-Length: 14488\r\nConnection: keep-alive\r\nAccept-Ranges: bytes\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Expose-Headers: X-Log, X-Reqid\r\nAccess-Control-Max-Age: 2592000\r\nAge: 51034\r\nCache-Control: public, max-age=31536000\r\nContent-Disposition: inline; filename=\"e43dadad89274ca19604786218d7ad97\"; filename*=utf-8''e43dadad89274ca19604786218d7ad97\r\nContent-Md5: W1BeFOXrpLeMLETWx+3D8A==\r\nContent-Transfer-Encoding: binary\r\nEtag: \"FvdblbS9nxc5Iub1UchE6F_qp5sJ\"\r\nLast-Modified: Fri, 24 Jul 2026 19:49:56 GMT\r\nX-Log: X-Log\r\nX-M-Log: QNM:wldsg121;QNM3\r\nX-M-Reqid: ahRoPmU7Q\r\nX-Qiniu-Zone: as0\r\nX-Qnm-Cache: Hit\r\nX-Reqid: Hc0AAACIFOPxCMcY\r\nX-Svr: IO\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":14488,"size_decoded":15244,"mime_type":"image/png","magic":"PNG image data, 180 x 180, 8-bit/color RGBA, non-interlaced","md5":"5b505e14e5eba4b78c2c44d6c7edc3f0","sha1":"f75b95b4bd9f173922e6f551c844e85feaa79b09","sha256":"5e9a7e23b0cbb0feccda964e892990b14dfd6031873d70b865006c43c779fe8c","sha512":"eef2d0e37dc1f5125b8b827c3901c9dd1ddb3bdd1e6b0adbb3c3fbc7d58d721168f2e79103fc814d7fccdf0b64324167f3ec1f6aea25eeb3fb0dd88c2d14a760","ssdeep":"384:Y1BZGv48DWj6SwpnUFQYGGlYz370sre51GNcxT/x:27GvJDWj6SwpnU6oK37k+Izx","tlshash":"c352d062765b509e8d05b60b493f341f900881bdcaae319273ccb91df4d8b96c1c8a1b","first_seen":"2024-08-19T21:56:05.871706Z","last_seen":"2026-07-31T05:07:38.925459Z","times_seen":63,"resource_available":false,"data":null}},"time_used":4065,"timings":{"blocked":3764,"dns":0,"connect":0,"send":0,"wait":301,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"photo.365live88.com/img/fb/team/e7e0cf42045d4e02926ab34e121b9f28?win007=sell","fqdn":"photo.365live88.com","domain":"365live88.com","tld":"com"},"ip":{"addr":"154.41.93.240","port":443,"asn":174,"as":"COGENT-174","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://y42t.top/","date":"2026-07-31T00:10:42.570Z","timestamp":1785456642570,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"photo.365live88.com","organization":""},"issuer":{"commonName":"Encryption Everywhere DV TLS CA - G2","organization":"DigiCert Inc"},"validity":{"start":"Sat, 01 Nov 2025 00:00:00 GMT","end":"Sat, 31 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"45:76:43:9C:31:C5:89:A6:99:FD:9B:D8:6C:A9:3A:E6:2F:D6:E9:80","sha256":"73:27:CF:D8:8D:AC:95:46:00:5D:67:05:1E:70:22:3E:17:F0:94:78:CD:6F:A6:9C:C8:5F:B5:3B:75:60:3D:C8"}}},"request":{"raw":"GET /img/fb/team/e7e0cf42045d4e02926ab34e121b9f28?win007=sell HTTP/1.1\r\nHost: photo.365live88.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://y42t.top/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: openresty\r\nDate: Fri, 31 Jul 2026 00:10:51 GMT\r\nContent-Type: image/png\r\nContent-Length: 52152\r\nConnection: keep-alive\r\nAccept-Ranges: bytes\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Expose-Headers: X-Log, X-Reqid\r\nAccess-Control-Max-Age: 2592000\r\nAge: 7837\r\nCache-Control: public, max-age=31536000\r\nContent-Disposition: inline; filename=\"e7e0cf42045d4e02926ab34e121b9f28\"; filename*=utf-8''e7e0cf42045d4e02926ab34e121b9f28\r\nContent-Md5: CLpyksthXtWxf6djaFTEOg==\r\nContent-Transfer-Encoding: binary\r\nEtag: \"Fk5i8CyHe_t8ngglBgWJ8A7CMe79\"\r\nLast-Modified: Tue, 21 Jul 2026 20:10:44 GMT\r\nX-Log: X-Log\r\nX-M-Log: QNM:wldsg119;QNM3\r\nX-M-Reqid: kuAh7nqqx\r\nX-Qiniu-Zone: as0\r\nX-Qnm-Cache: Hit\r\nX-Reqid: dToAAACqq5w8MMcY\r\nX-Svr: IO\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":52152,"size_decoded":52907,"mime_type":"image/png","magic":"PNG image data, 300 x 300, 8-bit/color RGBA, non-interlaced","md5":"08ba7292cb615ed5b17fa7636854c43a","sha1":"4e62f02c877bfb7c9e0825060589f00ec231eefd","sha256":"29ef3b56c95b25d501a82941433d2463735ee21090c0cba7cb603bffee492588","sha512":"863e5c41b6be3956481da3d069cd797ecd1b4f81416f61aba7709d15aa4e79d82ae9d1870d6f72646e5a30ddda6aa869783d28696ccede3614c0620a12fc31ea","ssdeep":"1536:h6WuUSVHy7TQU2U5lA2EELYdvYUQmvWc400:cWuhob2iA3ELNfm+l","tlshash":"1e330242a694ff57ed8070504689d1b93ec0e22680174c96c37ffb31cafa67a9578d4b","first_seen":"2025-02-26T14:48:47.893778Z","last_seen":"2026-07-31T12:41:47.072352Z","times_seen":67,"resource_available":false,"data":null}},"time_used":9070,"timings":{"blocked":8805,"dns":0,"connect":0,"send":0,"wait":248,"receive":17,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"y42t.top/jumpto/img/https://rcf-img-hk.gasdg646fs224cn.com/gpmaster/_webp_size328x442_bbac9ff6-d09b-48f7-9e60-77639d6ba1ec.png","fqdn":"y42t.top","domain":"y42t.top","tld":"top"},"ip":{"addr":"154.39.104.138","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://y42t.top/","date":"2026-07-31T00:10:42.852Z","timestamp":1785456642852,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"p40f.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 10:44:09 GMT","end":"Tue, 20 Oct 2026 10:44:08 GMT"},"fingerprint":{"sha1":"41:09:2C:3F:FC:9C:25:A9:DB:51:15:BB:D1:5A:D8:01:DC:38:AD:F8","sha256":"49:3B:29:C7:5B:B6:12:CF:84:14:5B:09:42:7D:EF:AA:61:29:EC:A1:D5:40:B5:64:5C:F1:33:AB:9B:E1:13:4D"}}},"request":{"raw":"GET /jumpto/img/https://rcf-img-hk.gasdg646fs224cn.com/gpmaster/_webp_size328x442_bbac9ff6-d09b-48f7-9e60-77639d6ba1ec.png HTTP/1.1\r\nHost: y42t.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://y42t.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 31 Jul 2026 00:10:46 GMT\r\nContent-Type: image/webp\r\nContent-Length: 10174\r\nConnection: keep-alive\r\netag: \"786d2731ac4145dbdb474c2ef236dbe0\"\r\nLast-Modified: Tue, 02 Dec 2025 14:07:48 GMT\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lTj%2FTACteZM9a7GQoPN2aTwzlM9WwrhfXYOOcS23v8KYQJHCJmZlxoWt3wT47748mt3PxvQpbuKc%2B9LIk7nPOKT4Dl844Mdc2CA2ywotrueAwHjFg4e8rOex3MCQr7Q46%2Bl9wjzvsR%2FbdAE8waixjA4%3D\"}]}\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nAge: 499206\r\ncf-cache-status: HIT\r\nCF-RAY: a208c621592c07ae-HKG\r\nalt-svc: h3=\":443\"; ma=86400\r\nCache-Control: public, max-age=2592000, immutable, public, max-age=2592000, immutable\r\nAccess-Control-Allow-Origin: *\r\nX-Custom-Check: true\r\nServer: Nginx\r\nL-Safe: 1785456646=EMBgc894QAdP6slbLJsiNGYFcXUmrvQIWKh5BYYK6Qj4fqRyTGb/Xbwkd279GHpNIUNxmrA5BLARmTn3BBDanv5J4PcdpRxfVwUjHlMDvqiZAET3U1COvNHjyZWcIPWzQSTxYljkuIh13EY2sibpSpVrTubzP7vT5r508KhivSQ1oVznby71Ayyz5cTYVqWG\r\nL-VIA: l1=TqoDVanjjr6wMExF\r\nL-VERSION: 1784720560\r\nL-Request-Id: 3ec819fb582594cc108\r\nX-Cache-Status: HIT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":10174,"size_decoded":11329,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"786d2731ac4145dbdb474c2ef236dbe0","sha1":"e25bf96d16a7d8c9ba8cb8977c5223823b576354","sha256":"a5582288a05ad90cab5e153a954cc868cbf69672d5811c24564ed2292638b772","sha512":"aab8876381867a1eca57b4f3b8c18c5244840ce1283a71b3387e80ea096b2c956dd8cd3461861cf6be2d063f980a1c59495aa8d3c47f1579017239ac07ecd1c3","ssdeep":"192:Oz8jXYXj6SZFy5siAvpSdg/2OwNHKThGZ0G9g1/5gqWLbG0X6YqIsyT:nXbMFy5siMSdNQh3oSe6Ye","tlshash":"1c22afa5b4ff3f61484df1f1f78ad342559a697432be475d79b5467218082988c303f2","first_seen":"2026-04-24T23:10:16.833619Z","last_seen":"2026-07-31T12:36:18.704424Z","times_seen":906,"resource_available":false,"data":null}},"time_used":3741,"timings":{"blocked":3452,"dns":0,"connect":0,"send":0,"wait":289,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-31","alert":"Sinkholed","trigger":"y42t.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-31","alert":"Phishing Block","trigger":"y42t.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"y42t.top/jumpto/img/https://rcf-img-hk.gasdg646fs224cn.com/202508/_webp_size1280x294_3ce652c0-55c8-48f5-a72d-a300accd6573.jpg","fqdn":"y42t.top","domain":"y42t.top","tld":"top"},"ip":{"addr":"154.39.104.138","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://y42t.top/","date":"2026-07-31T00:10:42.393Z","timestamp":1785456642393,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"p40f.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 10:44:09 GMT","end":"Tue, 20 Oct 2026 10:44:08 GMT"},"fingerprint":{"sha1":"41:09:2C:3F:FC:9C:25:A9:DB:51:15:BB:D1:5A:D8:01:DC:38:AD:F8","sha256":"49:3B:29:C7:5B:B6:12:CF:84:14:5B:09:42:7D:EF:AA:61:29:EC:A1:D5:40:B5:64:5C:F1:33:AB:9B:E1:13:4D"}}},"request":{"raw":"GET /jumpto/img/https://rcf-img-hk.gasdg646fs224cn.com/202508/_webp_size1280x294_3ce652c0-55c8-48f5-a72d-a300accd6573.jpg HTTP/1.1\r\nHost: y42t.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://y42t.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 31 Jul 2026 00:10:45 GMT\r\nContent-Type: image/webp\r\nContent-Length: 33078\r\nConnection: keep-alive\r\netag: \"0a0135f97e5634a3589065dc1f4203a2\"\r\nLast-Modified: Wed, 10 Dec 2025 10:48:35 GMT\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5CUozkedOHjh8Eds3iLKT5WCuroYU4YZCDtJcbQIsBOau%2BDi%2BJCzBOFQ0lB8limpOTCQio4xCpXodwFQzd%2FK8lFdVMc3CK5w3U1yMy8SgP2KIKWu216U2b1AZLFzxXG6dwn4b4ysvakxwWItOIwg83M%3D\"}]}\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nAge: 499187\r\ncf-cache-status: HIT\r\nCF-RAY: a208c6933e9f2f3c-HKG\r\nalt-svc: h3=\":443\"; ma=86400\r\nCache-Control: public, max-age=2592000, immutable, public, max-age=2592000, immutable\r\nAccess-Control-Allow-Origin: *\r\nX-Custom-Check: true\r\nServer: Nginx\r\nL-Safe: 1785456645=3m/UQghxNGW3gPChBH0qwAw5jhMnk/bL7ljEsAqUNfL2w1i0HQREe2rEb4k+hpOpl+mNkeotUTn7rI4RELPi496PFmfq0fH/qKdAcrqsvLVi0CluaNffWUzPkudCch2/uigQXMAy3JVAvXsWZA3UDGCysooGP/loOgkjhRbwnpUqbTZcGQok3Gq63qCfb31c\r\nL-VIA: l1=TqoDVanjjr6wMExF\r\nL-VERSION: 1784720560\r\nL-Request-Id: 3ec919fb58255b3c098\r\nX-Cache-Status: HIT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":33078,"size_decoded":34231,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1280x294, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"0a0135f97e5634a3589065dc1f4203a2","sha1":"0606b7a4f7dd769e8f68c0b444764bfdabd584dd","sha256":"b615b66587167edb3c9283e97940d3fc3f1f1bc910e6d3c98c55015a6bb3fd94","sha512":"bacaeaae43764c19a7148549deea3aad9d04df47cc2f25ce0db95d356b2c6fb46884ed4e9b16f6ef3e3467392fd71343509495dd68eef11cccc779dcc1b35ae4","ssdeep":"768:rWixhnCoTUtb7DBUFrJLDUJmEBsReZrbHf4K:rWivRTUt3DI1cJmEBs8ZrbHt","tlshash":"aae202d5b06953b1fe1439d3fe5cae680b2810b7edc74ce59e1bc95e819c2805ae1918","first_seen":"2026-04-24T23:10:16.804529Z","last_seen":"2026-07-31T12:36:18.56784Z","times_seen":899,"resource_available":false,"data":null}},"time_used":3314,"timings":{"blocked":3016,"dns":0,"connect":0,"send":0,"wait":293,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-31","alert":"Sinkholed","trigger":"y42t.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-31","alert":"Phishing Block","trigger":"y42t.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"photo.365live88.com/img/fb/team/3cfd289df9054616a45fdc94d3537e95?win007=sell","fqdn":"photo.365live88.com","domain":"365live88.com","tld":"com"},"ip":{"addr":"154.41.93.240","port":443,"asn":174,"as":"COGENT-174","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://y42t.top/","date":"2026-07-31T00:10:42.472Z","timestamp":1785456642472,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"photo.365live88.com","organization":""},"issuer":{"commonName":"Encryption Everywhere DV TLS CA - G2","organization":"DigiCert Inc"},"validity":{"start":"Sat, 01 Nov 2025 00:00:00 GMT","end":"Sat, 31 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"45:76:43:9C:31:C5:89:A6:99:FD:9B:D8:6C:A9:3A:E6:2F:D6:E9:80","sha256":"73:27:CF:D8:8D:AC:95:46:00:5D:67:05:1E:70:22:3E:17:F0:94:78:CD:6F:A6:9C:C8:5F:B5:3B:75:60:3D:C8"}}},"request":{"raw":"GET /img/fb/team/3cfd289df9054616a45fdc94d3537e95?win007=sell HTTP/1.1\r\nHost: photo.365live88.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://y42t.top/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: openresty\r\nDate: Fri, 31 Jul 2026 00:10:45 GMT\r\nContent-Type: image/png\r\nContent-Length: 70366\r\nConnection: keep-alive\r\nAccept-Ranges: bytes\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Expose-Headers: X-Log, X-Reqid\r\nAccess-Control-Max-Age: 2592000\r\nAge: 83432\r\nCache-Control: public, max-age=31536000\r\nContent-Disposition: inline; filename=\"3cfd289df9054616a45fdc94d3537e95\"; filename*=utf-8''3cfd289df9054616a45fdc94d3537e95\r\nContent-Md5: L8pSurfRFXTSYBGZs7Ubrg==\r\nContent-Transfer-Encoding: binary\r\nEtag: \"FnKqWGBDb9_4AXK_RqX5ivEPX-xh\"\r\nLast-Modified: Fri, 24 Jul 2026 19:49:45 GMT\r\nX-Log: X-Log\r\nX-M-Log: QNM:wldsg119;QNM3\r\nX-M-Reqid: mVoMu4FKe\r\nX-Qiniu-Zone: as0\r\nX-Qnm-Cache: Hit\r\nX-Reqid: IEYAAADwBpJ668YY\r\nX-Svr: IO\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":70366,"size_decoded":71122,"mime_type":"image/png","magic":"PNG image data, 300 x 300, 8-bit/color RGBA, non-interlaced","md5":"2fca52bab7d11574d2601199b3b51bae","sha1":"72aa5860436fdff80172bf46a5f98af10f5fec61","sha256":"c30264313b334c202d0b810789151d426ff4058ea83d04f5a636ac5fe6fb75dd","sha512":"7c5d940eb315d269c02a5bd34cf6732d410033784b37792ace56ef763c0e601be8a55de2914e0b2d8e5f790d5ef253942b1a9abc24b8f79a55d93cc455cb4e3f","ssdeep":"1536:LMErUwAGN7vg3tR48N901DmCG4VxIA+5VihdeYwodTFoUrz:oErUwAGN8P460lxUTYwodvn","tlshash":"206301b6a53fc563f46e033215c9ba68ef98f0bae51d6e860ff97414190bb290170987","first_seen":"2025-03-16T19:56:39.439446Z","last_seen":"2026-07-31T00:12:30.736348Z","times_seen":89,"resource_available":false,"data":null}},"time_used":3219,"timings":{"blocked":2634,"dns":0,"connect":0,"send":0,"wait":319,"receive":266,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"photo.365live88.com/img/fb/team/861de261a05c44699ca625d802453130?win007=sell","fqdn":"photo.365live88.com","domain":"365live88.com","tld":"com"},"ip":{"addr":"154.41.93.240","port":443,"asn":174,"as":"COGENT-174","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://y42t.top/","date":"2026-07-31T00:10:42.554Z","timestamp":1785456642554,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"photo.365live88.com","organization":""},"issuer":{"commonName":"Encryption Everywhere DV TLS CA - G2","organization":"DigiCert Inc"},"validity":{"start":"Sat, 01 Nov 2025 00:00:00 GMT","end":"Sat, 31 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"45:76:43:9C:31:C5:89:A6:99:FD:9B:D8:6C:A9:3A:E6:2F:D6:E9:80","sha256":"73:27:CF:D8:8D:AC:95:46:00:5D:67:05:1E:70:22:3E:17:F0:94:78:CD:6F:A6:9C:C8:5F:B5:3B:75:60:3D:C8"}}},"request":{"raw":"GET /img/fb/team/861de261a05c44699ca625d802453130?win007=sell HTTP/1.1\r\nHost: photo.365live88.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://y42t.top/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: openresty\r\nDate: Fri, 31 Jul 2026 00:10:50 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 3960\r\nConnection: keep-alive\r\nAccept-Ranges: bytes\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Expose-Headers: X-Log, X-Reqid\r\nAccess-Control-Max-Age: 2592000\r\nAge: 19537\r\nCache-Control: public, max-age=31536000\r\nContent-Disposition: inline; filename=\"861de261a05c44699ca625d802453130\"; filename*=utf-8''861de261a05c44699ca625d802453130\r\nContent-Md5: PfdWzypHq4pw0EzQZifF7g==\r\nContent-Transfer-Encoding: binary\r\nEtag: \"FiXFN1sagOsMQFsvnoaSZXPdMw9M\"\r\nLast-Modified: Sat, 25 Jul 2026 19:18:03 GMT\r\nX-Log: X-Log\r\nX-M-Log: QNM:wldsg119;QNM3\r\nX-M-Reqid: RKYirv5ii\r\nX-Qiniu-Zone: as0\r\nX-Qnm-Cache: Hit\r\nX-Reqid: TWEAAADAwkSYJccY\r\nX-Svr: IO\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3960,"size_decoded":4716,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 125x125, components 3","md5":"3df756cf2a47ab8a70d04cd06627c5ee","sha1":"25c5375b1a80eb0c405b2f9e86926573dd330f4c","sha256":"0deffe6a9f1b5fe91af7108a8b19aec9ae332e95fd2e00435a0c01e86afadd4a","sha512":"b2bec03273de8a69d6b64704aa5f84c748d4851110c00278ecb8621a60802260ffd463a9d14e2f34060c21a8d5714f21d40ad8ecf8e5e26c831f706b3cdd72b0","ssdeep":"","tlshash":"a5814c104dde52efe6d1e2313950b3b5ab4d7572a700e804a75de8ce1a688901f19eaa","first_seen":"2026-07-31T00:11:28.151795Z","last_seen":"2026-07-31T12:41:47.056735Z","times_seen":10,"resource_available":false,"data":null}},"time_used":7831,"timings":{"blocked":7580,"dns":0,"connect":0,"send":0,"wait":251,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"photo.365live88.com/img/fb/team/5fea586ffd4948f194a44850487751b9?win007=sell","fqdn":"photo.365live88.com","domain":"365live88.com","tld":"com"},"ip":{"addr":"154.41.93.240","port":443,"asn":174,"as":"COGENT-174","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://y42t.top/","date":"2026-07-31T00:10:42.555Z","timestamp":1785456642555,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"photo.365live88.com","organization":""},"issuer":{"commonName":"Encryption Everywhere DV TLS CA - G2","organization":"DigiCert Inc"},"validity":{"start":"Sat, 01 Nov 2025 00:00:00 GMT","end":"Sat, 31 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"45:76:43:9C:31:C5:89:A6:99:FD:9B:D8:6C:A9:3A:E6:2F:D6:E9:80","sha256":"73:27:CF:D8:8D:AC:95:46:00:5D:67:05:1E:70:22:3E:17:F0:94:78:CD:6F:A6:9C:C8:5F:B5:3B:75:60:3D:C8"}}},"request":{"raw":"GET /img/fb/team/5fea586ffd4948f194a44850487751b9?win007=sell HTTP/1.1\r\nHost: photo.365live88.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://y42t.top/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: openresty\r\nDate: Fri, 31 Jul 2026 00:10:50 GMT\r\nContent-Type: image/png\r\nContent-Length: 19186\r\nConnection: keep-alive\r\nAccept-Ranges: bytes\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Expose-Headers: X-Log, X-Reqid\r\nAccess-Control-Max-Age: 2592000\r\nAge: 19537\r\nCache-Control: public, max-age=31536000\r\nContent-Disposition: inline; filename=\"5fea586ffd4948f194a44850487751b9\"; filename*=utf-8''5fea586ffd4948f194a44850487751b9\r\nContent-Md5: r2cUXTfrcJ7d8TISj8oewA==\r\nContent-Transfer-Encoding: binary\r\nEtag: \"FsBq6e-WP_lG1zyyDyOuGaBm-fDr\"\r\nLast-Modified: Sat, 25 Jul 2026 19:18:00 GMT\r\nX-Log: X-Log\r\nX-M-Log: QNM:wldsg119;QNM3\r\nX-M-Reqid: 8DkcJwGLo\r\nX-Qiniu-Zone: as0\r\nX-Qnm-Cache: Hit\r\nX-Reqid: vFgAAABsgTqYJccY\r\nX-Svr: IO\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":19186,"size_decoded":19942,"mime_type":"image/png","magic":"PNG image data, 240 x 240, 8-bit/color RGBA, non-interlaced","md5":"af67145d37eb709eddf132128fca1ec0","sha1":"c06ae9ef963ff946d73cb20f23ae19a066f9f0eb","sha256":"40617857ad4755f7acb9faa1ed9fa8b82d0071bfeae452290f822e26c8e95007","sha512":"20cd632f016160ebc74fe2e20be742240a603f57eca391bc485e362f2caf55ed1cc01a9d56317261a65d56103528422b5eaf8b675ea455162657b5d868a75264","ssdeep":"384:epPMWTM0PLpJVk1/SE6UMV/mV9/TyzdXo7sL0Qy4D5Lz8wxHhQNgBX:epLPFKz6UMVrWw0Qy4D5LwyHhJBX","tlshash":"c982d034b9f5454cf2003af4ab2a17ef2cc09ed4d7fe9d5780aa508abd6169cab73444","first_seen":"2026-07-31T00:11:28.153317Z","last_seen":"2026-07-31T12:41:47.062277Z","times_seen":10,"resource_available":false,"data":null}},"time_used":7914,"timings":{"blocked":7654,"dns":0,"connect":0,"send":0,"wait":257,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"y42t.top/jumpto/img/https://rcf-img-hk.gasdg646fs224cn.com/gpmaster/_webp_size328x442_bdd30f19-a4d8-4eb3-b2d5-d24180d2e353.png","fqdn":"y42t.top","domain":"y42t.top","tld":"top"},"ip":{"addr":"154.39.104.138","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://y42t.top/","date":"2026-07-31T00:10:42.856Z","timestamp":1785456642856,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"p40f.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 10:44:09 GMT","end":"Tue, 20 Oct 2026 10:44:08 GMT"},"fingerprint":{"sha1":"41:09:2C:3F:FC:9C:25:A9:DB:51:15:BB:D1:5A:D8:01:DC:38:AD:F8","sha256":"49:3B:29:C7:5B:B6:12:CF:84:14:5B:09:42:7D:EF:AA:61:29:EC:A1:D5:40:B5:64:5C:F1:33:AB:9B:E1:13:4D"}}},"request":{"raw":"GET /jumpto/img/https://rcf-img-hk.gasdg646fs224cn.com/gpmaster/_webp_size328x442_bdd30f19-a4d8-4eb3-b2d5-d24180d2e353.png HTTP/1.1\r\nHost: y42t.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://y42t.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 31 Jul 2026 00:10:46 GMT\r\nContent-Type: image/webp\r\nContent-Length: 15228\r\nConnection: keep-alive\r\netag: \"6a267f5e09a632be650a3775bc739a4d\"\r\nLast-Modified: Tue, 02 Dec 2025 14:16:53 GMT\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nAge: 499205\r\ncf-cache-status: HIT\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=d4KRCCDc0DRodyUWaLifsU12T3jcdPRyzlhBJkc8TxK8klCJPvQK75mnAF1vIaC966I4Nxsiv5QmM2jhDtkM57zhlV%2FRfhzdo9o4XXq9mI2jzDeq8AafT%2FmgfXbub35meLAuziHgzpOFLv6Dmftwfr0%3D\"}]}\r\nCF-RAY: a208c6264a64097b-HKG\r\nalt-svc: h3=\":443\"; ma=86400\r\nCache-Control: public, max-age=2592000, immutable, public, max-age=2592000, immutable\r\nAccess-Control-Allow-Origin: *\r\nX-Custom-Check: true\r\nServer: Nginx\r\nL-Safe: 1785456646=EMBgc894QAdP6slbLJsiNGYFcXUmrvQIWKh5BYYK6Qj4fqRyTGb/Xbwkd279GHpNIUNxmrA5BLARmTn3BBDanv5J4PcdpRxfVwUjHlMDvqiZAET3U1COvNHjyZWcIPWzQSTxYljkuIh13EY2sibpSpVrTubzP7vT5r508KhivSQ1oVznby71Ayyz5cTYVqWG\r\nL-VIA: l1=TqoDVanjjr6wMExF\r\nL-VERSION: 1784720560\r\nL-Request-Id: 3ec119fb58259c6c2cb\r\nX-Cache-Status: HIT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15228,"size_decoded":16379,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"6a267f5e09a632be650a3775bc739a4d","sha1":"5289878ed6bc3c5b6b06a9986ec15a3c6946fcc5","sha256":"88151c14f52fcf8359fe0a5b86c3a14bee6df5f37cfccabd75a86a559e3737aa","sha512":"0c3f82afc7a20b69b90d2ca8d6d00e07c5c097353a5a81024069fb7ed724ee50c335e9fed0860cc92d1274939c0476cbf8cc49b058813775df45f96a3028af3e","ssdeep":"384:1jnjswfCwfOcnPcxsiO8JvyITPiO3BBBJRqn0Rf/dzVPC1D:11fCwFnUl1uwRqnc/dxa1D","tlshash":"e862c1c96f1cf1dabc9c9d3c7a944d369d0c4472a4d804e980b69d2bf98eac78501f2e","first_seen":"2026-04-24T23:10:16.724806Z","last_seen":"2026-07-31T12:36:18.659517Z","times_seen":905,"resource_available":false,"data":null}},"time_used":3878,"timings":{"blocked":3566,"dns":0,"connect":0,"send":0,"wait":311,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-31","alert":"Phishing Block","trigger":"y42t.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-31","alert":"Sinkholed","trigger":"y42t.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"photo.365live88.com/img/fb/team/257b29f227da4d0fb9b1f046a4a20f71?win007=sell","fqdn":"photo.365live88.com","domain":"365live88.com","tld":"com"},"ip":{"addr":"154.41.93.240","port":443,"asn":174,"as":"COGENT-174","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://y42t.top/","date":"2026-07-31T00:10:42.450Z","timestamp":1785456642450,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"photo.365live88.com","organization":""},"issuer":{"commonName":"Encryption Everywhere DV TLS CA - G2","organization":"DigiCert Inc"},"validity":{"start":"Sat, 01 Nov 2025 00:00:00 GMT","end":"Sat, 31 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"45:76:43:9C:31:C5:89:A6:99:FD:9B:D8:6C:A9:3A:E6:2F:D6:E9:80","sha256":"73:27:CF:D8:8D:AC:95:46:00:5D:67:05:1E:70:22:3E:17:F0:94:78:CD:6F:A6:9C:C8:5F:B5:3B:75:60:3D:C8"}}},"request":{"raw":"GET /img/fb/team/257b29f227da4d0fb9b1f046a4a20f71?win007=sell HTTP/1.1\r\nHost: photo.365live88.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://y42t.top/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: openresty\r\nDate: Fri, 31 Jul 2026 00:10:43 GMT\r\nContent-Type: image/png\r\nContent-Length: 59144\r\nConnection: keep-alive\r\nAccept-Ranges: bytes\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Expose-Headers: X-Log, X-Reqid\r\nAccess-Control-Max-Age: 2592000\r\nAge: 2595\r\nCache-Control: public, max-age=31536000\r\nContent-Disposition: inline; filename=\"257b29f227da4d0fb9b1f046a4a20f71\"; filename*=utf-8''257b29f227da4d0fb9b1f046a4a20f71\r\nContent-Md5: JX11jFz0NFPs+wqR0YAtOg==\r\nContent-Transfer-Encoding: binary\r\nEtag: \"Ft6R4U_JGSUPGPyycw-4lOxAPWm1\"\r\nLast-Modified: Fri, 24 Jul 2026 19:49:35 GMT\r\nX-Log: X-Log\r\nX-M-Log: QNM:wldsg119;QNM3\r\nX-M-Reqid: Fv7IifHmK\r\nX-Qiniu-Zone: as0\r\nX-Qnm-Cache: Hit\r\nX-Reqid: uY8AAAA-90b_NMcY\r\nX-Svr: IO\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":59144,"size_decoded":59899,"mime_type":"image/png","magic":"PNG image data, 300 x 368, 8-bit/color RGBA, non-interlaced","md5":"257d758c5cf43453ecfb0a91d1802d3a","sha1":"de91e14fc919250f18fcb2730fb894ec403d69b5","sha256":"c60f9d9513d6d579348be9f3733ab92012f2bab1c4017c76f1e4af8ceaa91f7a","sha512":"04d4b411e739aff3442acf11056c2e48afbd914af97150f5f37d6ed55ae80fa51296b067387b0911e4a2b900cce33aa31b94f2c17f8bcc29e6b5e59a8da6e327","ssdeep":"1536:yzZBupZGeUt1MQ1eM3uOQTavZO4x26n0XNkIb:y9ApS173MuvZO4Ig0XK6","tlshash":"eb430284145d62d47abaff6a6a04a4264f21ef2a5d5b1137c438e06cfd0977312ba3fc","first_seen":"2025-02-24T02:30:01.441461Z","last_seen":"2026-07-31T00:12:30.659283Z","times_seen":307,"resource_available":false,"data":null}},"time_used":2135,"timings":{"blocked":-1,"dns":620,"connect":248,"send":0,"wait":330,"receive":433,"ssl":503},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"photo.365live88.com/img/fb/team/9c57f13e6b134f89b9bf74b81be536b6?win007=sell","fqdn":"photo.365live88.com","domain":"365live88.com","tld":"com"},"ip":{"addr":"154.41.93.240","port":443,"asn":174,"as":"COGENT-174","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://y42t.top/","date":"2026-07-31T00:10:42.528Z","timestamp":1785456642528,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"photo.365live88.com","organization":""},"issuer":{"commonName":"Encryption Everywhere DV TLS CA - G2","organization":"DigiCert Inc"},"validity":{"start":"Sat, 01 Nov 2025 00:00:00 GMT","end":"Sat, 31 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"45:76:43:9C:31:C5:89:A6:99:FD:9B:D8:6C:A9:3A:E6:2F:D6:E9:80","sha256":"73:27:CF:D8:8D:AC:95:46:00:5D:67:05:1E:70:22:3E:17:F0:94:78:CD:6F:A6:9C:C8:5F:B5:3B:75:60:3D:C8"}}},"request":{"raw":"GET /img/fb/team/9c57f13e6b134f89b9bf74b81be536b6?win007=sell HTTP/1.1\r\nHost: photo.365live88.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://y42t.top/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: openresty\r\nDate: Fri, 31 Jul 2026 00:10:48 GMT\r\nContent-Type: image/png\r\nContent-Length: 166375\r\nConnection: keep-alive\r\nAccept-Ranges: bytes\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Expose-Headers: X-Log, X-Reqid\r\nAccess-Control-Max-Age: 2592000\r\nAge: 29320\r\nCache-Control: public, max-age=31536000\r\nContent-Disposition: inline; filename=\"9c57f13e6b134f89b9bf74b81be536b6\"; filename*=utf-8''9c57f13e6b134f89b9bf74b81be536b6\r\nContent-Md5: rzlNLfWBls58SWmTk28R9w==\r\nContent-Transfer-Encoding: binary\r\nEtag: \"FvCTO7n3nQzPrHGX4HE5ne2x0G3E\"\r\nLast-Modified: Sat, 25 Jul 2026 19:15:17 GMT\r\nX-Log: X-Log\r\nX-M-Log: QNM:wldsg121;QNM3\r\nX-M-Reqid: KBH7FfZGM\r\nX-Qiniu-Zone: as0\r\nX-Qnm-Cache: Hit\r\nX-Reqid: dmcAAAAVBh6yHMcY\r\nX-Svr: IO\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":166375,"size_decoded":167132,"mime_type":"image/png","magic":"PNG image data, 1200 x 1540, 8-bit/color RGBA, non-interlaced","md5":"af394d2df58196ce7c496993936f11f7","sha1":"f0933bb9f79d0ccfac7197e071399dedb1d06dc4","sha256":"54af027c8e8e1516e8f0c794d61a1748bcdcf1e3c371f312f50318684ae14b9c","sha512":"fa18bc30c16099acfc0b12d741db7984682ba1fd6af3f6ea513b18c80510386f83e727383204621e155d356870f135062829e89a84cfe1bb6a9985306ea7cd6f","ssdeep":"3072:LbMzwNyw/S4hS30PDIJyV8vBTAGVlTCKhkvOc6lU9vtawtVNqr/:Lg0NTat30888JAgRxlO9vtaw7Qr/","tlshash":"ccf31291d6b7f2e26c3f5623680c0428587c2aab932f6932d72df2244d371f595d31ba","first_seen":"2025-08-25T01:40:32.424628Z","last_seen":"2026-07-31T12:41:15.212308Z","times_seen":22,"resource_available":false,"data":null}},"time_used":5989,"timings":{"blocked":5431,"dns":0,"connect":0,"send":0,"wait":272,"receive":286,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"y42t.top/img/bj.ada43481.png","fqdn":"y42t.top","domain":"y42t.top","tld":"top"},"ip":{"addr":"154.39.104.138","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://y42t.top/","date":"2026-07-31T00:10:41.075Z","timestamp":1785456641075,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"p40f.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 10:44:09 GMT","end":"Tue, 20 Oct 2026 10:44:08 GMT"},"fingerprint":{"sha1":"41:09:2C:3F:FC:9C:25:A9:DB:51:15:BB:D1:5A:D8:01:DC:38:AD:F8","sha256":"49:3B:29:C7:5B:B6:12:CF:84:14:5B:09:42:7D:EF:AA:61:29:EC:A1:D5:40:B5:64:5C:F1:33:AB:9B:E1:13:4D"}}},"request":{"raw":"GET /img/bj.ada43481.png HTTP/1.1\r\nHost: y42t.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://y42t.top/css/home.1781011881923.38488e2a.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 31 Jul 2026 00:10:42 GMT\r\nContent-Type: image/png\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Tue, 09 Jun 2026 13:37:11 GMT\r\nVary: Accept-Encoding\r\nETag: W/\"6a281707-6b4d0\"\r\nCache-Control: public, max-age=2592000, immutable\r\nAccess-Control-Allow-Origin: *\r\nX-Custom-Check: true\r\nContent-Encoding: gzip\r\nServer: Nginx\r\nL-Safe: 1785456642=csqYCqnSrfqstQvye8K/cOFcRTOv1c0xbYhymJAs0/02+uXPG5GVyZ0p6izerPHm8MGf7A/o5MmlVb25OTDKDKeQU0rR3SBVQb7DhxtPpD3sSzxoSDG3GUN9oldUbp9/49xVY7UWBgnWGNvQm3pHmukuHRLxIzXXppUlpGs5PUC8OL5ESDjYobwSrUxT4jKY\r\nAge: 499209\r\nL-VIA: l1=TqoDVanjjr6wMExF\r\nL-VERSION: 1784720560\r\nL-Request-Id: 3ec819fb5824ba0c0f8\r\nX-Cache-Status: HIT\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":439504,"size_decoded":440362,"mime_type":"image/png","magic":"PNG image data, 1920 x 927, 8-bit colormap, non-interlaced","md5":"2c55f8fcc8edb773be5014d8deb72c4e","sha1":"e7e55505bf22de833ec6b82a229e70bdba93b58f","sha256":"21c44535cffd825752bf9a535001b4b605147e3434cf2906fc2c8fcdcd992c1a","sha512":"bab93e8eb191df623bd7e238ae8d5cf7feae73e2a768d7b591d4dd8b7aafc199fce7c34066a272fc9137959a78a6bcd9fb388f39d4a0938f5674aaee815a3cf7","ssdeep":"12288:K+TyFzCVXhEu0hvb3kkjOO9FNkh4k6yvwUKA4AuJiT9h+:tTyFGjENkkyOWh87UK/JiT9h+","tlshash":"739423b1df0b89c858a39043dc74f99263e8d0a6bdc40ab80bf14b9176709dbbbf5116","first_seen":"2023-08-17T12:39:32Z","last_seen":"2026-07-31T12:41:46.995166Z","times_seen":2393,"resource_available":false,"data":null}},"time_used":2610,"timings":{"blocked":1752,"dns":0,"connect":0,"send":0,"wait":304,"receive":554,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-31","alert":"Phishing Block","trigger":"y42t.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-31","alert":"Sinkholed","trigger":"y42t.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"y42t.top/kc523-1/logo/logoWhite.png?1781011825626","fqdn":"y42t.top","domain":"y42t.top","tld":"top"},"ip":{"addr":"154.39.104.138","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://y42t.top/","date":"2026-07-31T00:10:41.107Z","timestamp":1785456641107,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"p40f.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 10:44:09 GMT","end":"Tue, 20 Oct 2026 10:44:08 GMT"},"fingerprint":{"sha1":"41:09:2C:3F:FC:9C:25:A9:DB:51:15:BB:D1:5A:D8:01:DC:38:AD:F8","sha256":"49:3B:29:C7:5B:B6:12:CF:84:14:5B:09:42:7D:EF:AA:61:29:EC:A1:D5:40:B5:64:5C:F1:33:AB:9B:E1:13:4D"}}},"request":{"raw":"GET /kc523-1/logo/logoWhite.png?1781011825626 HTTP/1.1\r\nHost: y42t.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://y42t.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 31 Jul 2026 00:10:45 GMT\r\nContent-Type: image/png\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Wed, 01 Apr 2026 05:40:09 GMT\r\nVary: Accept-Encoding\r\nETag: W/\"69ccafb9-547d\"\r\nCache-Control: public, max-age=2592000, immutable\r\nAccess-Control-Allow-Origin: *\r\nX-Custom-Check: true\r\nContent-Encoding: gzip\r\nServer: Nginx\r\nL-Safe: 1785456645=3m/UQghxNGW3gPChBH0qwAw5jhMnk/bL7ljEsAqUNfL2w1i0HQREe2rEb4k+hpOpl+mNkeotUTn7rI4RELPi496PFmfq0fH/qKdAcrqsvLVi0CluaNffWUzPkudCch2/uigQXMAy3JVAvXsWZA3UDGCysooGP/loOgkjhRbwnpUqbTZcGQok3Gq63qCfb31c\r\nAge: 499210\r\nL-VIA: l1=TqoDVanjjr6wMExF\r\nL-VERSION: 1784720560\r\nL-Request-Id: 3ec219fb5825567ba28\r\nX-Cache-Status: HIT\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":21629,"size_decoded":22177,"mime_type":"image/png","magic":"PNG image data, 318 x 144, 8-bit/color RGBA, non-interlaced","md5":"0fe99b7761db545277ab76a5eac225b7","sha1":"c0ae9d5f9473be88b84d7d46d1efc51283a57a76","sha256":"e74b087729f820069fc590a73411d4b19d3da8a22ad1d127d4e4109be832cd97","sha512":"848f1da518a00ef98cf0e70429260b91720d3f139ed89714536d0a267aaacb8acb9779dfb1c0b42b134f81cb1ec0f5af97a160f1fc327750b111e88d7c6cc239","ssdeep":"384:Ok3FHRYfLVQEST+Yh9YDQiIkXnq3H+PxYi5JLL5PI4v2Kee/0Aytd:nFHRYfL+r9AQiIk0H+ZRGQHee/yr","tlshash":"aaa2d0d63930414ec49128de0fc1b9285cb6858847fd1e944f9f5eb2b4a3df62b4b368","first_seen":"2026-03-22T09:12:55.770605Z","last_seen":"2026-07-31T12:36:18.792129Z","times_seen":1018,"resource_available":false,"data":null}},"time_used":4542,"timings":{"blocked":4221,"dns":0,"connect":0,"send":0,"wait":312,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-31","alert":"Phishing Block","trigger":"y42t.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-31","alert":"Sinkholed","trigger":"y42t.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"photo.365live88.com/img/fb/team/0d068fc1af6a4c3fbdbf800984522798?win007=sell","fqdn":"photo.365live88.com","domain":"365live88.com","tld":"com"},"ip":{"addr":"154.41.93.240","port":443,"asn":174,"as":"COGENT-174","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://y42t.top/","date":"2026-07-31T00:10:42.466Z","timestamp":1785456642466,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"photo.365live88.com","organization":""},"issuer":{"commonName":"Encryption Everywhere DV TLS CA - G2","organization":"DigiCert Inc"},"validity":{"start":"Sat, 01 Nov 2025 00:00:00 GMT","end":"Sat, 31 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"45:76:43:9C:31:C5:89:A6:99:FD:9B:D8:6C:A9:3A:E6:2F:D6:E9:80","sha256":"73:27:CF:D8:8D:AC:95:46:00:5D:67:05:1E:70:22:3E:17:F0:94:78:CD:6F:A6:9C:C8:5F:B5:3B:75:60:3D:C8"}}},"request":{"raw":"GET /img/fb/team/0d068fc1af6a4c3fbdbf800984522798?win007=sell HTTP/1.1\r\nHost: photo.365live88.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://y42t.top/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: openresty\r\nDate: Fri, 31 Jul 2026 00:10:44 GMT\r\nContent-Type: image/png\r\nContent-Length: 19246\r\nConnection: keep-alive\r\nAccept-Ranges: bytes\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Expose-Headers: X-Log, X-Reqid\r\nAccess-Control-Max-Age: 2592000\r\nAge: 85235\r\nCache-Control: public, max-age=31536000\r\nContent-Disposition: inline; filename=\"0d068fc1af6a4c3fbdbf800984522798\"; filename*=utf-8''0d068fc1af6a4c3fbdbf800984522798\r\nContent-Md5: 4lkyldoAxEfYyDlra7dKHg==\r\nContent-Transfer-Encoding: binary\r\nEtag: \"FuVUCwL-I8fqGagswiB1CZzK-dOd\"\r\nLast-Modified: Fri, 24 Jul 2026 19:49:40 GMT\r\nX-Log: X-Log\r\nX-M-Log: QNM:wldsg121;QNM3\r\nX-M-Reqid: 30J4WHNZ1\r\nX-Qiniu-Zone: as0\r\nX-Qnm-Cache: Hit\r\nX-Reqid: YfsAAAAyZZ3W6cYY\r\nX-Svr: IO\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":19246,"size_decoded":20002,"mime_type":"image/png","magic":"PNG image data, 180 x 180, 8-bit/color RGBA, non-interlaced","md5":"e2593295da00c447d8c8396b6bb74a1e","sha1":"e5540b02fe23c7ea19a82cc22075099ccaf9d39d","sha256":"c073c08ae49f4c2033600c49aaff8313aea78cc7cbf2373d5389050a9736444f","sha512":"1c161d94d40f84999102481da3c12e4e698518817630a2b4e0c733bbb04b15ec153828d90f1c215ee730c9863cd86010856beec93313a5c245d049818b9e27b3","ssdeep":"384:7iWuZ9XQ8+pbL7VkPaDTxisAt4Vc8+qw6HLfYyOvYj/WyklllA4ZkAuXb/:QzgpvZphix+a8+r6HLgyO8Px","tlshash":"d282e1c479ab885374a4ca7cc24b0e50ecc539c10f8b686e2d71174542fda26ee1b4fc","first_seen":"2025-04-01T11:41:18.027774Z","last_seen":"2026-07-31T00:12:52.483875Z","times_seen":186,"resource_available":false,"data":null}},"time_used":2550,"timings":{"blocked":2226,"dns":0,"connect":0,"send":0,"wait":301,"receive":23,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"y42t.top/kc523-1/sponsor/sponsor_nav_web_3.png?1781011825626","fqdn":"y42t.top","domain":"y42t.top","tld":"top"},"ip":{"addr":"154.39.104.138","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://y42t.top/","date":"2026-07-31T00:10:41.063Z","timestamp":1785456641063,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"p40f.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 10:44:09 GMT","end":"Tue, 20 Oct 2026 10:44:08 GMT"},"fingerprint":{"sha1":"41:09:2C:3F:FC:9C:25:A9:DB:51:15:BB:D1:5A:D8:01:DC:38:AD:F8","sha256":"49:3B:29:C7:5B:B6:12:CF:84:14:5B:09:42:7D:EF:AA:61:29:EC:A1:D5:40:B5:64:5C:F1:33:AB:9B:E1:13:4D"}}},"request":{"raw":"GET /kc523-1/sponsor/sponsor_nav_web_3.png?1781011825626 HTTP/1.1\r\nHost: y42t.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://y42t.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 31 Jul 2026 00:10:44 GMT\r\nContent-Type: image/png\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Tue, 30 Sep 2025 12:19:27 GMT\r\nVary: Accept-Encoding\r\nETag: W/\"68dbcacf-1cf4\"\r\nCache-Control: public, max-age=2592000, immutable\r\nAccess-Control-Allow-Origin: *\r\nX-Custom-Check: true\r\nContent-Encoding: gzip\r\nServer: Nginx\r\nL-Safe: 1785456644=ImVO6mGITWMACggqrQcdldqw9lowxQ1+VpRDuAKFwfMb9d30WLVBONutXSRguHOv4S8A2fwwrG4hosTExvfehVfTlImNbeMdeEGGOKfPxTnrTTeg4Ne14CSZz0II/fQW6e3NIBDsQDv0uQ0mehoMPQ1XrPiYIzMRuPb5r05527aZ2mNjo0YBVDxdIUBsWRdM\r\nAge: 499210\r\nL-VIA: l1=TqoDVanjjr6wMExF\r\nL-VERSION: 1784720560\r\nL-Request-Id: 3ec519fb5825384c077\r\nX-Cache-Status: HIT\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":7412,"size_decoded":8117,"mime_type":"image/png","magic":"PNG image data, 206 x 332, 8-bit colormap, non-interlaced","md5":"eb94a297c215863d5d2232eaa67f4779","sha1":"d006f382f63ada4e4ef65d124a75eac2e4e72dd0","sha256":"6bd46b617bf27cb28fb798d50b2d6daa2aaed1a278ed50e9aa549b6e4fac48c3","sha512":"dc7759393acb5e7d1a635b4d91d73e84abc41fe6afde99a85a8e4ed6f4f8b1b5819bbcaa80b1c213c00c89df8b81db512a7bff142b24c50565ff1e6289f1a30c","ssdeep":"192:Sfq39wgHGYB1fcUWobKUUR6IHaDmzDxfbTow:uQ9gCEUWoWUe6DeJQw","tlshash":"94e1ad76a7f6d695a6b7908cfece94050fbba2722c6352762b7b8c02170c339525b411","first_seen":"2023-11-10T19:12:00Z","last_seen":"2026-07-31T12:36:18.727684Z","times_seen":2194,"resource_available":false,"data":null}},"time_used":4088,"timings":{"blocked":3785,"dns":0,"connect":0,"send":0,"wait":303,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-31","alert":"Sinkholed","trigger":"y42t.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-31","alert":"Phishing Block","trigger":"y42t.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"photo.365live88.com/img/fb/team/6b76a4a8c47a4899a6d6bcf8ed6f361c?win007=sell","fqdn":"photo.365live88.com","domain":"365live88.com","tld":"com"},"ip":{"addr":"154.41.93.240","port":443,"asn":174,"as":"COGENT-174","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://y42t.top/","date":"2026-07-31T00:10:42.500Z","timestamp":1785456642500,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"photo.365live88.com","organization":""},"issuer":{"commonName":"Encryption Everywhere DV TLS CA - G2","organization":"DigiCert Inc"},"validity":{"start":"Sat, 01 Nov 2025 00:00:00 GMT","end":"Sat, 31 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"45:76:43:9C:31:C5:89:A6:99:FD:9B:D8:6C:A9:3A:E6:2F:D6:E9:80","sha256":"73:27:CF:D8:8D:AC:95:46:00:5D:67:05:1E:70:22:3E:17:F0:94:78:CD:6F:A6:9C:C8:5F:B5:3B:75:60:3D:C8"}}},"request":{"raw":"GET /img/fb/team/6b76a4a8c47a4899a6d6bcf8ed6f361c?win007=sell HTTP/1.1\r\nHost: photo.365live88.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://y42t.top/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: openresty\r\nDate: Fri, 31 Jul 2026 00:10:46 GMT\r\nContent-Type: image/png\r\nContent-Length: 19694\r\nConnection: keep-alive\r\nAccept-Ranges: bytes\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Expose-Headers: X-Log, X-Reqid\r\nAccess-Control-Max-Age: 2592000\r\nAge: 52837\r\nCache-Control: public, max-age=31536000\r\nContent-Disposition: inline; filename=\"6b76a4a8c47a4899a6d6bcf8ed6f361c\"; filename*=utf-8''6b76a4a8c47a4899a6d6bcf8ed6f361c\r\nContent-Md5: qet5C2GP+Kvtp8S+4gTcEg==\r\nContent-Transfer-Encoding: binary\r\nEtag: \"FhrPPm4LaZIm5dxB1wX5JKK74HHB\"\r\nLast-Modified: Fri, 24 Jul 2026 19:49:53 GMT\r\nX-Log: X-Log\r\nX-M-Log: QNM:wldsg119;QNM3\r\nX-M-Reqid: rmXtcU7lF\r\nX-Qiniu-Zone: as0\r\nX-Qnm-Cache: Hit\r\nX-Reqid: OJcAAACkB0NOB8cY\r\nX-Svr: IO\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":19694,"size_decoded":20450,"mime_type":"image/png","magic":"PNG image data, 100 x 99, 8-bit/color RGBA, non-interlaced","md5":"a9eb790b618ff8abeda7c4bee204dc12","sha1":"1acf3e6e0b699226e5dc41d705f924a2bbe071c1","sha256":"6f917e75f5ebf84c02ab9ef6a2b36ed13e8143248c67974fe36fcedad1a29aa0","sha512":"6d3fdde210ecf1d6396c17b31b4d8a6b4b819c3e5a57aa0637e56cbfaea37c62bb05e3807cdf92b410646757b539e631faae77ac149351d016be1e0361037bc1","ssdeep":"384:DwyV+wpIPcBSzO7oAzYRihWLI69YelgfWyS2A00g+5hFmJgldRJYqPQ4AoHZw:DVVkc2VI69YefyS2MdmAP3RHO","tlshash":"5192e0c8f622d273811712ee1eab88ce76a8dddd0274a66d3347394b585e814e0a9d38","first_seen":"2025-04-15T05:18:26.169953Z","last_seen":"2026-07-31T03:12:02.816905Z","times_seen":89,"resource_available":false,"data":null}},"time_used":3662,"timings":{"blocked":3397,"dns":0,"connect":0,"send":0,"wait":257,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"photo.365live88.com/img/fb/team/934a8b1d539c4716be188755d0aea975?win007=sell","fqdn":"photo.365live88.com","domain":"365live88.com","tld":"com"},"ip":{"addr":"154.41.93.240","port":443,"asn":174,"as":"COGENT-174","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://y42t.top/","date":"2026-07-31T00:10:42.510Z","timestamp":1785456642510,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"photo.365live88.com","organization":""},"issuer":{"commonName":"Encryption Everywhere DV TLS CA - G2","organization":"DigiCert Inc"},"validity":{"start":"Sat, 01 Nov 2025 00:00:00 GMT","end":"Sat, 31 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"45:76:43:9C:31:C5:89:A6:99:FD:9B:D8:6C:A9:3A:E6:2F:D6:E9:80","sha256":"73:27:CF:D8:8D:AC:95:46:00:5D:67:05:1E:70:22:3E:17:F0:94:78:CD:6F:A6:9C:C8:5F:B5:3B:75:60:3D:C8"}}},"request":{"raw":"GET /img/fb/team/934a8b1d539c4716be188755d0aea975?win007=sell HTTP/1.1\r\nHost: photo.365live88.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://y42t.top/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: openresty\r\nDate: Fri, 31 Jul 2026 00:10:46 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 4469\r\nConnection: keep-alive\r\nAccept-Ranges: bytes\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Expose-Headers: X-Log, X-Reqid\r\nAccess-Control-Max-Age: 2592000\r\nAge: 49232\r\nCache-Control: public, max-age=31536000\r\nContent-Disposition: inline; filename=\"934a8b1d539c4716be188755d0aea975\"; filename*=utf-8''934a8b1d539c4716be188755d0aea975\r\nContent-Md5: sIQ1SUOTQUwPrJMRaoNonA==\r\nContent-Transfer-Encoding: binary\r\nEtag: \"FuCk081BeWRWAjcnvU4W-DZ0OUZ9\"\r\nLast-Modified: Fri, 24 Jul 2026 19:50:05 GMT\r\nX-Log: X-Log\r\nX-M-Log: QNM:wldsg119;QNM3\r\nX-M-Reqid: jUkuyrIzw\r\nX-Qiniu-Zone: as0\r\nX-Qnm-Cache: Hit\r\nX-Reqid: _M4AAAAkMIOVCscY\r\nX-Svr: IO\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4469,"size_decoded":5225,"mime_type":"image/png","magic":"PNG image data, 64 x 80, 8-bit colormap, non-interlaced","md5":"b08435494393414c0fac93116a83689c","sha1":"e0a4d3cd41796456023727bd4e16f8367439467d","sha256":"a44d68b1343a3852c7ab94d82e531246c9e25f3fadb74b4436bcb790ead8f5db","sha512":"a1ba33297be1ede38a226c537c4037f016a3a535f3d8b381df99f1fc9988e75caa4dcc4512976c45b549ee1262e46f09a637a02b03c2e922569d7561e578bb4f","ssdeep":"96:xsH0PT/ArTTdLOi9swGf3y+kwQl6OaKsQ+98BHY2LNxRbd9C:TbexyiL7+klHarQ+2HYmNxRbTC","tlshash":"a2917e469e710c5c92ca4fc839381a56d64e9c668c23006661c2bfd7dabb1578f4f370","first_seen":"2024-08-19T15:01:26.109847Z","last_seen":"2026-07-31T05:07:39.113351Z","times_seen":92,"resource_available":false,"data":null}},"time_used":4145,"timings":{"blocked":3903,"dns":0,"connect":0,"send":0,"wait":242,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"y42t.top/jumpto/img/https://rcf-img-hk.gasdg646fs224cn.com/202503/_webp_size649x578_188684fd-5a0b-43f3-8a6e-b9c558e44ec4.png","fqdn":"y42t.top","domain":"y42t.top","tld":"top"},"ip":{"addr":"154.39.104.138","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://y42t.top/","date":"2026-07-31T00:10:42.831Z","timestamp":1785456642831,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"p40f.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 10:44:09 GMT","end":"Tue, 20 Oct 2026 10:44:08 GMT"},"fingerprint":{"sha1":"41:09:2C:3F:FC:9C:25:A9:DB:51:15:BB:D1:5A:D8:01:DC:38:AD:F8","sha256":"49:3B:29:C7:5B:B6:12:CF:84:14:5B:09:42:7D:EF:AA:61:29:EC:A1:D5:40:B5:64:5C:F1:33:AB:9B:E1:13:4D"}}},"request":{"raw":"GET /jumpto/img/https://rcf-img-hk.gasdg646fs224cn.com/202503/_webp_size649x578_188684fd-5a0b-43f3-8a6e-b9c558e44ec4.png HTTP/1.1\r\nHost: y42t.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://y42t.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 31 Jul 2026 00:10:45 GMT\r\nContent-Type: image/webp\r\nContent-Length: 79930\r\nConnection: keep-alive\r\netag: \"bd7f8602db8e332117b1715d58aef000\"\r\nLast-Modified: Sat, 06 Dec 2025 06:20:07 GMT\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nAge: 499205\r\ncf-cache-status: HIT\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uBVKfYYbaaWrBIgm9aNOV9jCMu7ebsC5KMyweJbt6Cz4iaUiJEmeHCzNCPdg%2BoZVfSO89IwrssqQYDfxI1NI3QteriUHEspk2YyN7y9jKnS898FMani3%2BxLLPyc36UtjgXddm1xB4hh73AwoykZLxw0%3D\"}]}\r\nCF-RAY: a208c621f8900960-HKG\r\nalt-svc: h3=\":443\"; ma=86400\r\nCache-Control: public, max-age=2592000, immutable, public, max-age=2592000, immutable\r\nAccess-Control-Allow-Origin: *\r\nX-Custom-Check: true\r\nServer: Nginx\r\nL-Safe: 1785456645=3m/UQghxNGW3gPChBH0qwAw5jhMnk/bL7ljEsAqUNfL2w1i0HQREe2rEb4k+hpOpl+mNkeotUTn7rI4RELPi496PFmfq0fH/qKdAcrqsvLVi0CluaNffWUzPkudCch2/uigQXMAy3JVAvXsWZA3UDGCysooGP/loOgkjhRbwnpUqbTZcGQok3Gq63qCfb31c\r\nL-VIA: l1=TqoDVanjjr6wMExF\r\nL-VERSION: 1784720560\r\nL-Request-Id: 3ec119fb58256bac2c5\r\nX-Cache-Status: HIT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":79930,"size_decoded":81081,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"bd7f8602db8e332117b1715d58aef000","sha1":"7e5e353a2493869ab29d7087ed6854d05eaa1dbe","sha256":"289cf0eaed99d77e8ca59df43b5dd2e5a2e28fc8efbf2b4f918bd33293c6801c","sha512":"b3493bc56d6f778167f81e32ba77c61328584255960ca10373c2bccbe8f13b9f886c806142bd05e1e116ccd835870db787ae4225843b1aced6de971e177f90d8","ssdeep":"1536:1Vx1HKbkHPxLc4OWZ0+j0j8R+dWMIFtCTbYgw:1Vx1H6kHZTOWV0kMGsTbNw","tlshash":"cd7302a40e4e35b3dc0bcb7fb59c8e7606fb9be3251da9c00d55674adad81ad13a10c8","first_seen":"2026-04-24T23:10:16.741634Z","last_seen":"2026-07-31T12:36:18.71013Z","times_seen":928,"resource_available":false,"data":null}},"time_used":3184,"timings":{"blocked":2831,"dns":0,"connect":0,"send":0,"wait":311,"receive":42,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-31","alert":"Sinkholed","trigger":"y42t.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-31","alert":"Phishing Block","trigger":"y42t.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"y42t.top/img/bj2.a8fabbac.png","fqdn":"y42t.top","domain":"y42t.top","tld":"top"},"ip":{"addr":"154.39.104.138","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://y42t.top/","date":"2026-07-31T00:10:41.072Z","timestamp":1785456641072,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"p40f.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 10:44:09 GMT","end":"Tue, 20 Oct 2026 10:44:08 GMT"},"fingerprint":{"sha1":"41:09:2C:3F:FC:9C:25:A9:DB:51:15:BB:D1:5A:D8:01:DC:38:AD:F8","sha256":"49:3B:29:C7:5B:B6:12:CF:84:14:5B:09:42:7D:EF:AA:61:29:EC:A1:D5:40:B5:64:5C:F1:33:AB:9B:E1:13:4D"}}},"request":{"raw":"GET /img/bj2.a8fabbac.png HTTP/1.1\r\nHost: y42t.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://y42t.top/css/home.1781011881923.38488e2a.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 31 Jul 2026 00:10:42 GMT\r\nContent-Type: image/png\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Tue, 09 Jun 2026 13:37:11 GMT\r\nVary: Accept-Encoding\r\nETag: W/\"6a281707-5809c\"\r\nCache-Control: public, max-age=2592000, immutable\r\nAccess-Control-Allow-Origin: *\r\nX-Custom-Check: true\r\nContent-Encoding: gzip\r\nServer: Nginx\r\nL-Safe: 1785456642=csqYCqnSrfqstQvye8K/cOFcRTOv1c0xbYhymJAs0/02+uXPG5GVyZ0p6izerPHm8MGf7A/o5MmlVb25OTDKDKeQU0rR3SBVQb7DhxtPpD3sSzxoSDG3GUN9oldUbp9/49xVY7UWBgnWGNvQm3pHmukuHRLxIzXXppUlpGs5PUC8OL5ESDjYobwSrUxT4jKY\r\nAge: 499206\r\nL-VIA: l1=TqoDVanjjr6wMExF\r\nL-VERSION: 1784720560\r\nL-Request-Id: 3ec519fb582484fc070\r\nX-Cache-Status: HIT\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":360604,"size_decoded":360172,"mime_type":"image/png","magic":"PNG image data, 1920 x 641, 8-bit/color RGBA, non-interlaced","md5":"e0fe8ffeed1841f74df53c3b0c1f2db0","sha1":"77bf6dfe664cdc936776654af151f49368479ec3","sha256":"db4d87e8a403e388c54dd5d114b738c82e1d2dbe65b95630fd5782179f0d7d54","sha512":"825bf73262c2b613b6a8a8397f869db6b2cd4118e554689d228503e7a04c4e674d49c5649e4ac8e2423a7b526c0f6621c259566d0e9bb6ebfa0712a7352968fa","ssdeep":"6144:iAHwIFRCiRIygxWS9v34xfZzuwbIYGzl8BPp0eIiOk3Fg7la6RUIs4pU2:rwy0IgxDEfQwbjw8dpmiOiFgpLHFU2","tlshash":"2874238d711d48cc9c9b45003dd82d9e1c55aa2f7aab20b58264fed24d17ddeec0ea3b","first_seen":"2023-11-10T19:12:00Z","last_seen":"2026-07-31T12:41:47.030239Z","times_seen":2425,"resource_available":false,"data":null}},"time_used":1323,"timings":{"blocked":906,"dns":0,"connect":0,"send":0,"wait":305,"receive":112,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-31","alert":"Phishing Block","trigger":"y42t.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-31","alert":"Sinkholed","trigger":"y42t.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"photo.365live88.com/img/fb/team/38a5fe3d275e4fdc9c47f7aec94160be?win007=sell","fqdn":"photo.365live88.com","domain":"365live88.com","tld":"com"},"ip":{"addr":"154.41.93.240","port":443,"asn":174,"as":"COGENT-174","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://y42t.top/","date":"2026-07-31T00:10:42.519Z","timestamp":1785456642519,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"photo.365live88.com","organization":""},"issuer":{"commonName":"Encryption Everywhere DV TLS CA - G2","organization":"DigiCert Inc"},"validity":{"start":"Sat, 01 Nov 2025 00:00:00 GMT","end":"Sat, 31 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"45:76:43:9C:31:C5:89:A6:99:FD:9B:D8:6C:A9:3A:E6:2F:D6:E9:80","sha256":"73:27:CF:D8:8D:AC:95:46:00:5D:67:05:1E:70:22:3E:17:F0:94:78:CD:6F:A6:9C:C8:5F:B5:3B:75:60:3D:C8"}}},"request":{"raw":"GET /img/fb/team/38a5fe3d275e4fdc9c47f7aec94160be?win007=sell HTTP/1.1\r\nHost: photo.365live88.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://y42t.top/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: openresty\r\nDate: Fri, 31 Jul 2026 00:10:47 GMT\r\nContent-Type: image/png\r\nContent-Length: 16183\r\nConnection: keep-alive\r\nAccept-Ranges: bytes\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Expose-Headers: X-Log, X-Reqid\r\nAccess-Control-Max-Age: 2592000\r\nAge: 40223\r\nCache-Control: public, max-age=31536000\r\nContent-Disposition: inline; filename=\"38a5fe3d275e4fdc9c47f7aec94160be\"; filename*=utf-8''38a5fe3d275e4fdc9c47f7aec94160be\r\nContent-Md5: sIvPuheBhcR73pYugI1T5g==\r\nContent-Transfer-Encoding: binary\r\nEtag: \"Fm4DSMGuj1cWLjhadylYKH0vSG6s\"\r\nLast-Modified: Fri, 24 Jul 2026 19:50:22 GMT\r\nX-Log: X-Log\r\nX-M-Log: QNM:wldsg119;QNM3\r\nX-M-Reqid: qw9o3XcZi\r\nX-Qiniu-Zone: as0\r\nX-Qnm-Cache: Hit\r\nX-Reqid: LigAAACxaWbHEscY\r\nX-Svr: IO\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":16183,"size_decoded":16939,"mime_type":"image/png","magic":"PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced","md5":"b08bcfba178185c47bde962e808d53e6","sha1":"6e0348c1ae8f57162e385a772958287d2f486eac","sha256":"2f3f5e9b1aae526bfa6181a36682ecde3ac94d7d0f4301d4bab27eb5e3cb0d53","sha512":"74b39a1a4e2b0dc087d3d32434bfe9731352fbcd3c9f204eba1e9e4de7f4344b1900165287acbf7268ec8cb369c81799d55bb849b4cf8895c2b31ec2b66933fd","ssdeep":"384:66kg9eme+kZRxYeSxDEJX7mmGWpSyR0LDlCXltxP:HkfmBkZROeSx9OSBLJC1bP","tlshash":"6072d03ebcd4d5ccd1462e5572cb8f43c64b77d9048b1628b9ce4447bbce3a811a2e95","first_seen":"2025-10-14T12:49:03.890903Z","last_seen":"2026-07-31T12:34:14.056102Z","times_seen":17,"resource_available":false,"data":null}},"time_used":4995,"timings":{"blocked":4721,"dns":0,"connect":0,"send":0,"wait":270,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"photo.365live88.com/img/fb/team/c52cdb22a13c45b598a00d20b69f3dcc?win007=sell","fqdn":"photo.365live88.com","domain":"365live88.com","tld":"com"},"ip":{"addr":"154.41.93.240","port":443,"asn":174,"as":"COGENT-174","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://y42t.top/","date":"2026-07-31T00:10:42.538Z","timestamp":1785456642538,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"photo.365live88.com","organization":""},"issuer":{"commonName":"Encryption Everywhere DV TLS CA - G2","organization":"DigiCert Inc"},"validity":{"start":"Sat, 01 Nov 2025 00:00:00 GMT","end":"Sat, 31 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"45:76:43:9C:31:C5:89:A6:99:FD:9B:D8:6C:A9:3A:E6:2F:D6:E9:80","sha256":"73:27:CF:D8:8D:AC:95:46:00:5D:67:05:1E:70:22:3E:17:F0:94:78:CD:6F:A6:9C:C8:5F:B5:3B:75:60:3D:C8"}}},"request":{"raw":"GET /img/fb/team/c52cdb22a13c45b598a00d20b69f3dcc?win007=sell HTTP/1.1\r\nHost: photo.365live88.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://y42t.top/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: openresty\r\nDate: Fri, 31 Jul 2026 00:10:48 GMT\r\nContent-Type: image/png\r\nContent-Length: 23427\r\nConnection: keep-alive\r\nAccept-Ranges: bytes\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Expose-Headers: X-Log, X-Reqid\r\nAccess-Control-Max-Age: 2592000\r\nAge: 25818\r\nCache-Control: public, max-age=31536000\r\nContent-Disposition: inline; filename=\"c52cdb22a13c45b598a00d20b69f3dcc\"; filename*=utf-8''c52cdb22a13c45b598a00d20b69f3dcc\r\nContent-Md5: /LkC8WbO2sxZg2DVVIGSqw==\r\nContent-Transfer-Encoding: binary\r\nEtag: \"FozCwZE8qlxrDfh1a9Bp7_qef_VB\"\r\nLast-Modified: Sat, 25 Jul 2026 19:15:48 GMT\r\nX-Log: X-Log\r\nX-M-Log: QNM:wldsg121;QNM3\r\nX-M-Reqid: Lcn5bbqcH\r\nX-Qiniu-Zone: as0\r\nX-Qnm-Cache: Hit\r\nX-Reqid: umIAAADzopDhH8cY\r\nX-Svr: IO\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":23427,"size_decoded":24183,"mime_type":"image/png","magic":"PNG image data, 147 x 160, 8-bit/color RGBA, non-interlaced","md5":"fcb902f166cedacc598360d5548192ab","sha1":"8cc2c1913caa5c6b0df8756bd069effa9e7ff541","sha256":"0046767b4dcf5f07cff2eec2435b12ef5803f06cb0bc9e0df95853015126cf2b","sha512":"927993008766420326c0a1ba79d4d18bdebffce8b305b74cc57f93557241114b1212d7e59ea59b75ecb285b35d71cd8c6b9fbd4db5487d8bcf350cea2754e81f","ssdeep":"384:rc6h1pEtxwHtuk2RIFg73LQCSghPy5FLdD0FKZtTiFe1Tk1tNjC9dBnh:vh1Uxw+RIFAbQCoLLdJIhsbh","tlshash":"68b2e1d0cb179b78a5243284ba587af43d888ea3840cdf3b16d35d2cded14944b85ee9","first_seen":"2025-09-07T00:46:43.005854Z","last_seen":"2026-07-31T12:41:15.24024Z","times_seen":68,"resource_available":false,"data":null}},"time_used":6510,"timings":{"blocked":6247,"dns":0,"connect":0,"send":0,"wait":257,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"photo.365live88.com/img/fb/team/51685bfb1ed4415cbf2cff5f42c947fa?win007=sell","fqdn":"photo.365live88.com","domain":"365live88.com","tld":"com"},"ip":{"addr":"154.41.93.240","port":443,"asn":174,"as":"COGENT-174","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://y42t.top/","date":"2026-07-31T00:10:42.553Z","timestamp":1785456642553,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"photo.365live88.com","organization":""},"issuer":{"commonName":"Encryption Everywhere DV TLS CA - G2","organization":"DigiCert Inc"},"validity":{"start":"Sat, 01 Nov 2025 00:00:00 GMT","end":"Sat, 31 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"45:76:43:9C:31:C5:89:A6:99:FD:9B:D8:6C:A9:3A:E6:2F:D6:E9:80","sha256":"73:27:CF:D8:8D:AC:95:46:00:5D:67:05:1E:70:22:3E:17:F0:94:78:CD:6F:A6:9C:C8:5F:B5:3B:75:60:3D:C8"}}},"request":{"raw":"GET /img/fb/team/51685bfb1ed4415cbf2cff5f42c947fa?win007=sell HTTP/1.1\r\nHost: photo.365live88.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://y42t.top/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: openresty\r\nDate: Fri, 31 Jul 2026 00:10:50 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 3388\r\nConnection: keep-alive\r\nAccept-Ranges: bytes\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Expose-Headers: X-Log, X-Reqid\r\nAccess-Control-Max-Age: 2592000\r\nAge: 19537\r\nCache-Control: public, max-age=31536000\r\nContent-Disposition: inline; filename=\"51685bfb1ed4415cbf2cff5f42c947fa\"; filename*=utf-8''51685bfb1ed4415cbf2cff5f42c947fa\r\nContent-Md5: RhzcALeYeAA2DhdjTWE15g==\r\nContent-Transfer-Encoding: binary\r\nEtag: \"Fsdk8MkkESXGLNJI_V_Vzh5P4Aba\"\r\nLast-Modified: Sat, 25 Jul 2026 19:18:03 GMT\r\nX-Log: X-Log\r\nX-M-Log: QNM:wldsg119;QNM3\r\nX-M-Reqid: 9JUfGAZiJ\r\nX-Qiniu-Zone: as0\r\nX-Qnm-Cache: Hit\r\nX-Reqid: PGsAAADvp0aYJccY\r\nX-Svr: IO\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3388,"size_decoded":4144,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 122x122, components 3","md5":"461cdc00b7987800360e17634d6135e6","sha1":"c764f0c9241125c62cd248fd5fd5ce1e4fe006da","sha256":"a1d969f08ef4f7b440c65e9f1522d9ca3fbcb512ab3f324a682df87a375e6ba9","sha512":"c2f82fb3900c6e129392d00f66bb61df411aa4d766dd7bafcc0dce67d46e204e64b8aa265c81c69cdf91bd85bca5c38de4355e53ebe23979d1b35a8a80aa4e86","ssdeep":"","tlshash":"2c614a9d18a4d70ba98002bc2163d7dc798079ea26c41e778bbbd1c03c2a19d0f7a87c","first_seen":"2026-07-31T00:11:28.165876Z","last_seen":"2026-07-31T12:41:47.124402Z","times_seen":10,"resource_available":false,"data":null}},"time_used":7655,"timings":{"blocked":7415,"dns":0,"connect":0,"send":0,"wait":240,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"y42t.top/jumpto/img/https://rcf-img-hk.gasdg646fs224cn.com/202503/_webp_size649x578_ebfde7c7-fdc6-4b58-9f46-2e709f79d7d7.png","fqdn":"y42t.top","domain":"y42t.top","tld":"top"},"ip":{"addr":"154.39.104.138","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://y42t.top/","date":"2026-07-31T00:10:42.862Z","timestamp":1785456642862,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"p40f.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 10:44:09 GMT","end":"Tue, 20 Oct 2026 10:44:08 GMT"},"fingerprint":{"sha1":"41:09:2C:3F:FC:9C:25:A9:DB:51:15:BB:D1:5A:D8:01:DC:38:AD:F8","sha256":"49:3B:29:C7:5B:B6:12:CF:84:14:5B:09:42:7D:EF:AA:61:29:EC:A1:D5:40:B5:64:5C:F1:33:AB:9B:E1:13:4D"}}},"request":{"raw":"GET /jumpto/img/https://rcf-img-hk.gasdg646fs224cn.com/202503/_webp_size649x578_ebfde7c7-fdc6-4b58-9f46-2e709f79d7d7.png HTTP/1.1\r\nHost: y42t.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://y42t.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 31 Jul 2026 00:10:46 GMT\r\nContent-Type: image/webp\r\nContent-Length: 52382\r\nConnection: keep-alive\r\netag: \"d82815d2e1685b08148f834895263ba3\"\r\nLast-Modified: Sat, 06 Dec 2025 06:31:00 GMT\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5I5igvhKteeGxHCA4WJB%2BIAYzyFl%2BiOCcMPBezERXI7EpJyJwT9eYajOd0UT0o9CDRuau%2FArbBJwJWZ8gF9Eher%2BNciK41GPzxOVV%2FNyOv6DgxYbtHjT1KO61bzW%2FPzUmPQJij5T7usVFkp6I%2B1FPKg%3D\"}]}\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nAge: 499203\r\ncf-cache-status: HIT\r\nCF-RAY: a208c633793309b8-HKG\r\nalt-svc: h3=\":443\"; ma=86400\r\nCache-Control: public, max-age=2592000, immutable, public, max-age=2592000, immutable\r\nAccess-Control-Allow-Origin: *\r\nX-Custom-Check: true\r\nServer: Nginx\r\nL-Safe: 1785456646=EMBgc894QAdP6slbLJsiNGYFcXUmrvQIWKh5BYYK6Qj4fqRyTGb/Xbwkd279GHpNIUNxmrA5BLARmTn3BBDanv5J4PcdpRxfVwUjHlMDvqiZAET3U1COvNHjyZWcIPWzQSTxYljkuIh13EY2sibpSpVrTubzP7vT5r508KhivSQ1oVznby71Ayyz5cTYVqWG\r\nL-VIA: l1=TqoDVanjjr6wMExF\r\nL-VERSION: 1784720560\r\nL-Request-Id: 3ec519fb5825af9c07d\r\nX-Cache-Status: HIT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":52382,"size_decoded":53543,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"d82815d2e1685b08148f834895263ba3","sha1":"77d1ecea682ed9c5c6be0f1644f2314eb3db64e2","sha256":"4dfee4506bce2de57a4d8d608edd295e0f8233b44b869f6d94481d17931a42d6","sha512":"9941cf4ea9abb6631c519ddd7067d21ac74afd06329b64581be00aa28b89e4ae7dd9750fcec2913df15a4f5fd7209a2049ae62bfec1c802d304a710105ed5d0c","ssdeep":"768:i2/E0Y/tLxLsxLHzZGHtzwzzxgHi5hUOjl7pE1+J1r5k+A8okW8winHfG1HL:xEHVNshHzIIxEuh7q4JxqXPin/G","tlshash":"a13301689c11db25d8805a2dd62fbfce984330e2231f0bca5b13d95e0bf1a852f44c9e","first_seen":"2026-04-24T23:10:16.886375Z","last_seen":"2026-07-31T12:36:18.665688Z","times_seen":898,"resource_available":false,"data":null}},"time_used":4190,"timings":{"blocked":3872,"dns":0,"connect":0,"send":0,"wait":306,"receive":12,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-31","alert":"Phishing Block","trigger":"y42t.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-31","alert":"Sinkholed","trigger":"y42t.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"y42t.top/img/loading.da46bff6.png","fqdn":"y42t.top","domain":"y42t.top","tld":"top"},"ip":{"addr":"154.39.104.138","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://y42t.top/","date":"2026-07-31T00:10:41.115Z","timestamp":1785456641115,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"p40f.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 10:44:09 GMT","end":"Tue, 20 Oct 2026 10:44:08 GMT"},"fingerprint":{"sha1":"41:09:2C:3F:FC:9C:25:A9:DB:51:15:BB:D1:5A:D8:01:DC:38:AD:F8","sha256":"49:3B:29:C7:5B:B6:12:CF:84:14:5B:09:42:7D:EF:AA:61:29:EC:A1:D5:40:B5:64:5C:F1:33:AB:9B:E1:13:4D"}}},"request":{"raw":"GET /img/loading.da46bff6.png HTTP/1.1\r\nHost: y42t.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://y42t.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 31 Jul 2026 00:10:44 GMT\r\nContent-Type: image/png\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Tue, 09 Jun 2026 13:37:11 GMT\r\nVary: Accept-Encoding\r\nETag: W/\"6a281707-7384c\"\r\nCache-Control: public, max-age=2592000, immutable\r\nAccess-Control-Allow-Origin: *\r\nX-Custom-Check: true\r\nContent-Encoding: gzip\r\nServer: Nginx\r\nL-Safe: 1785456644=ImVO6mGITWMACggqrQcdldqw9lowxQ1+VpRDuAKFwfMb9d30WLVBONutXSRguHOv4S8A2fwwrG4hosTExvfehVfTlImNbeMdeEGGOKfPxTnrTTeg4Ne14CSZz0II/fQW6e3NIBDsQDv0uQ0mehoMPQ1XrPiYIzMRuPb5r05527aZ2mNjo0YBVDxdIUBsWRdM\r\nAge: 499209\r\nL-VIA: l1=TqoDVanjjr6wMExF\r\nL-VERSION: 1784720560\r\nL-Request-Id: 3ec119fb5825284c2c1\r\nX-Cache-Status: HIT\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":473164,"size_decoded":468833,"mime_type":"image/png","magic":"PNG image data, 200 x 200, 8-bit/color RGBA, non-interlaced","md5":"ac7ca483f10bc73cffa89f639f6ffa56","sha1":"03873b9607c635752526968af31773498d259afa","sha256":"a054b81d2850fe2da5b4f97a1c50c05ee59a24c37f1c700e5cc45fe6079598b6","sha512":"caa6b3e243f02c86ccaf71aafd0e716834a7a0cf07305c5c7cc0a1b9d637cc2802caa067b0010c7c3c064e3fe8f7881b26992f57137f98477266653342257760","ssdeep":"6144:NFoYczeWIF3Q/IUPYhuF0KX38I4z/tcKZPehCIjAl/CS+b:rLczeTUPpF083CBdeh7MlvI","tlshash":"79a423929b411988e1096432215fab4d23993b6458ab5fbf78843d88893cf059ff763f","first_seen":"2023-07-01T07:21:14Z","last_seen":"2026-07-31T12:36:18.574406Z","times_seen":2200,"resource_available":false,"data":null}},"time_used":4599,"timings":{"blocked":3456,"dns":0,"connect":0,"send":0,"wait":359,"receive":784,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-31","alert":"Sinkholed","trigger":"y42t.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-31","alert":"Phishing Block","trigger":"y42t.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"photo.365live88.com/img/fb/team/55f1a79133664fc0880d62be7fdd4bdd?win007=sell","fqdn":"photo.365live88.com","domain":"365live88.com","tld":"com"},"ip":{"addr":"154.41.93.240","port":443,"asn":174,"as":"COGENT-174","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://y42t.top/","date":"2026-07-31T00:10:42.471Z","timestamp":1785456642471,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"photo.365live88.com","organization":""},"issuer":{"commonName":"Encryption Everywhere DV TLS CA - G2","organization":"DigiCert Inc"},"validity":{"start":"Sat, 01 Nov 2025 00:00:00 GMT","end":"Sat, 31 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"45:76:43:9C:31:C5:89:A6:99:FD:9B:D8:6C:A9:3A:E6:2F:D6:E9:80","sha256":"73:27:CF:D8:8D:AC:95:46:00:5D:67:05:1E:70:22:3E:17:F0:94:78:CD:6F:A6:9C:C8:5F:B5:3B:75:60:3D:C8"}}},"request":{"raw":"GET /img/fb/team/55f1a79133664fc0880d62be7fdd4bdd?win007=sell HTTP/1.1\r\nHost: photo.365live88.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://y42t.top/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: openresty\r\nDate: Fri, 31 Jul 2026 00:10:45 GMT\r\nContent-Type: image/png\r\nContent-Length: 10960\r\nConnection: keep-alive\r\nAccept-Ranges: bytes\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Expose-Headers: X-Log, X-Reqid\r\nAccess-Control-Max-Age: 2592000\r\nAge: 85234\r\nCache-Control: public, max-age=31536000\r\nContent-Disposition: inline; filename=\"55f1a79133664fc0880d62be7fdd4bdd\"; filename*=utf-8''55f1a79133664fc0880d62be7fdd4bdd\r\nContent-Md5: bYrqatk6Dy5i4lA8ljfLGA==\r\nContent-Transfer-Encoding: binary\r\nEtag: \"FrIdrMt6w4zHzVx14iw5G6PeASTx\"\r\nLast-Modified: Fri, 24 Jul 2026 19:49:43 GMT\r\nX-Log: X-Log\r\nX-M-Log: QNM:wldsg121;QNM3\r\nX-M-Reqid: gYj8iwG2Q\r\nX-Qiniu-Zone: as0\r\nX-Qnm-Cache: Hit\r\nX-Reqid: TlUAAADda8nW6cYY\r\nX-Svr: IO\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":10960,"size_decoded":11716,"mime_type":"image/png","magic":"PNG image data, 180 x 180, 8-bit/color RGBA, non-interlaced","md5":"6d8aea6ad93a0f2e62e2503c9637cb18","sha1":"b21daccb7ac38cc7cd5c75e22c391ba3de0124f1","sha256":"ce26fe9d7a399a16d9e2f518c99b2cb0cd28fbfb33ef7e233dbbe1909416e8e6","sha512":"61ba4eeaeb8808133cbfd3ad7a0b4b561e0e41a432947576a62926dd852b1eb9b2f830b9c7b291d856e4fa6c3e038864f76c5180d909021ab4c40e11a9d00606","ssdeep":"192:rf3rExDoDkxqKGTbccaZOexJXF3O50PG9ub+Gd+v4lmimgPskRYVKAb/c:fCDxnGPMO4BNkubdd+v4lmi+IYQAb0","tlshash":"1332d0ada129934cd003fdb3bf1d860c656aaa846358c96ef571b3115df1833cdb6638","first_seen":"2025-03-18T20:23:41.996157Z","last_seen":"2026-07-31T00:12:52.484624Z","times_seen":63,"resource_available":false,"data":null}},"time_used":2835,"timings":{"blocked":2545,"dns":0,"connect":0,"send":0,"wait":290,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"photo.365live88.com/img/fb/team/db3dfe7c610140d18bff378a071642d0?win007=sell","fqdn":"photo.365live88.com","domain":"365live88.com","tld":"com"},"ip":{"addr":"154.41.93.240","port":443,"asn":174,"as":"COGENT-174","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://y42t.top/","date":"2026-07-31T00:10:42.513Z","timestamp":1785456642513,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"photo.365live88.com","organization":""},"issuer":{"commonName":"Encryption Everywhere DV TLS CA - G2","organization":"DigiCert Inc"},"validity":{"start":"Sat, 01 Nov 2025 00:00:00 GMT","end":"Sat, 31 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"45:76:43:9C:31:C5:89:A6:99:FD:9B:D8:6C:A9:3A:E6:2F:D6:E9:80","sha256":"73:27:CF:D8:8D:AC:95:46:00:5D:67:05:1E:70:22:3E:17:F0:94:78:CD:6F:A6:9C:C8:5F:B5:3B:75:60:3D:C8"}}},"request":{"raw":"GET /img/fb/team/db3dfe7c610140d18bff378a071642d0?win007=sell HTTP/1.1\r\nHost: photo.365live88.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://y42t.top/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: openresty\r\nDate: Fri, 31 Jul 2026 00:10:46 GMT\r\nContent-Type: image/png\r\nContent-Length: 54030\r\nConnection: keep-alive\r\nAccept-Ranges: bytes\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Expose-Headers: X-Log, X-Reqid\r\nAccess-Control-Max-Age: 2592000\r\nAge: 45327\r\nCache-Control: public, max-age=31536000\r\nContent-Disposition: inline; filename=\"db3dfe7c610140d18bff378a071642d0\"; filename*=utf-8''db3dfe7c610140d18bff378a071642d0\r\nContent-Md5: 2cqg3rC6CGO1Vx+1F1IcAQ==\r\nContent-Transfer-Encoding: binary\r\nEtag: \"Fp1aR2N7VPHnw1frSeGAAcXsRN9v\"\r\nLast-Modified: Fri, 24 Jul 2026 19:50:15 GMT\r\nX-Log: X-Log\r\nX-M-Log: QNM:wldsg119;QNM3\r\nX-M-Reqid: UGVbPuvuq\r\nX-Qiniu-Zone: as0\r\nX-Qnm-Cache: Hit\r\nX-Reqid: HMUAAAAe86QiDscY\r\nX-Svr: IO\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":54030,"size_decoded":54786,"mime_type":"image/png","magic":"PNG image data, 197 x 182, 8-bit/color RGBA, non-interlaced","md5":"d9caa0deb0ba0863b5571fb517521c01","sha1":"9d5a47637b54f1e7c357eb49e18001c5ec44df6f","sha256":"3f5ce91e87bfb2844ca164ea817cb3b18087ab06173595c09c1b1facff793b1e","sha512":"f5c7791ed7f44f094794fbaeb32b5b87f291168c7d7712ef101602191e533f181f4f9531d0caf53e844258660d9e86773fc481a769eef8446f19c3882995b1fd","ssdeep":"1536:RjMpe9ILDL0xtTtBBXLifdU00QNR/Q5kdk:hMpe8v0/TXBbifdLnQT","tlshash":"78330170efa5bb2e23f4d162f7968e43320ae6e8712e881790d3d50cb55271e83d0c64","first_seen":"2025-04-01T11:41:17.755018Z","last_seen":"2026-07-31T05:07:38.867465Z","times_seen":158,"resource_available":false,"data":null}},"time_used":4439,"timings":{"blocked":4085,"dns":0,"connect":0,"send":0,"wait":274,"receive":80,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"photo.365live88.com/img/fb/team/6450706a1752405cb2b1be832a86540c?win007=sell","fqdn":"photo.365live88.com","domain":"365live88.com","tld":"com"},"ip":{"addr":"154.41.93.240","port":443,"asn":174,"as":"COGENT-174","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://y42t.top/","date":"2026-07-31T00:10:42.550Z","timestamp":1785456642550,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"photo.365live88.com","organization":""},"issuer":{"commonName":"Encryption Everywhere DV TLS CA - G2","organization":"DigiCert Inc"},"validity":{"start":"Sat, 01 Nov 2025 00:00:00 GMT","end":"Sat, 31 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"45:76:43:9C:31:C5:89:A6:99:FD:9B:D8:6C:A9:3A:E6:2F:D6:E9:80","sha256":"73:27:CF:D8:8D:AC:95:46:00:5D:67:05:1E:70:22:3E:17:F0:94:78:CD:6F:A6:9C:C8:5F:B5:3B:75:60:3D:C8"}}},"request":{"raw":"GET /img/fb/team/6450706a1752405cb2b1be832a86540c?win007=sell HTTP/1.1\r\nHost: photo.365live88.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://y42t.top/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: openresty\r\nDate: Fri, 31 Jul 2026 00:10:49 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 12428\r\nConnection: keep-alive\r\nAccept-Ranges: bytes\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Expose-Headers: X-Log, X-Reqid\r\nAccess-Control-Max-Age: 2592000\r\nAge: 20438\r\nCache-Control: public, max-age=31536000\r\nContent-Disposition: inline; filename=\"6450706a1752405cb2b1be832a86540c\"; filename*=utf-8''6450706a1752405cb2b1be832a86540c\r\nContent-Md5: syZBsG7lBRE8siDMKe1zyg==\r\nContent-Transfer-Encoding: binary\r\nEtag: \"FuMr9xp8_o4e0OD4UTTIDVdLWRLt\"\r\nLast-Modified: Sat, 25 Jul 2026 19:17:44 GMT\r\nX-Log: X-Log\r\nX-M-Log: QNM:wldsg121;QNM3\r\nX-M-Reqid: jhFmsV82m\r\nX-Qiniu-Zone: as0\r\nX-Qnm-Cache: Hit\r\nX-Reqid: xGAAAABhnTjGJMcY\r\nX-Svr: IO\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":12428,"size_decoded":13185,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 217x232, components 3","md5":"b32641b06ee505113cb220cc29ed73ca","sha1":"e32bf71a7cfe8e1ed0e0f85134c80d574b5912ed","sha256":"f2179787f751df2cddd63d842b7df5aca7a8aedede59be08edfbceb0dbf1a240","sha512":"2b260e1ff6842c72d44b3adf0e11ca1612aec84e2aacc34f3aa3e5b3a31251912c9310a85428e0ab1555e753ccf055f46779d1982b7b38d6c7e0f6e621ba0be4","ssdeep":"384:9cS8LWluiWUTnrE4s5TbEb+lBS16y5jPay1F:9cD3STrE4ETbEbgS1ray1F","tlshash":"9a429f1b1ca0cbf2a4acd12315ed0b75c601e2d36172057b147b2ee7a5fb3be649d628","first_seen":"2025-02-24T02:30:01.433146Z","last_seen":"2026-07-31T12:41:47.024899Z","times_seen":21,"resource_available":false,"data":null}},"time_used":7407,"timings":{"blocked":7152,"dns":0,"connect":0,"send":0,"wait":255,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"photo.365live88.com/img/fb/team/b4939e58c245480d9f3da2ffffcb848d?win007=sell","fqdn":"photo.365live88.com","domain":"365live88.com","tld":"com"},"ip":{"addr":"154.41.93.240","port":443,"asn":174,"as":"COGENT-174","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://y42t.top/","date":"2026-07-31T00:10:42.562Z","timestamp":1785456642562,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"photo.365live88.com","organization":""},"issuer":{"commonName":"Encryption Everywhere DV TLS CA - G2","organization":"DigiCert Inc"},"validity":{"start":"Sat, 01 Nov 2025 00:00:00 GMT","end":"Sat, 31 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"45:76:43:9C:31:C5:89:A6:99:FD:9B:D8:6C:A9:3A:E6:2F:D6:E9:80","sha256":"73:27:CF:D8:8D:AC:95:46:00:5D:67:05:1E:70:22:3E:17:F0:94:78:CD:6F:A6:9C:C8:5F:B5:3B:75:60:3D:C8"}}},"request":{"raw":"GET /img/fb/team/b4939e58c245480d9f3da2ffffcb848d?win007=sell HTTP/1.1\r\nHost: photo.365live88.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://y42t.top/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: openresty\r\nDate: Fri, 31 Jul 2026 00:10:50 GMT\r\nContent-Type: image/png\r\nContent-Length: 22801\r\nConnection: keep-alive\r\nAccept-Ranges: bytes\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Expose-Headers: X-Log, X-Reqid\r\nAccess-Control-Max-Age: 2592000\r\nAge: 18636\r\nCache-Control: public, max-age=31536000\r\nContent-Disposition: inline; filename=\"b4939e58c245480d9f3da2ffffcb848d\"; filename*=utf-8''b4939e58c245480d9f3da2ffffcb848d\r\nContent-Md5: QDMrHDSiDCx12hYnMILzYg==\r\nContent-Transfer-Encoding: binary\r\nEtag: \"FmMXa_OACJjiwlDzWy9_hPQugCK0\"\r\nLast-Modified: Sat, 25 Jul 2026 19:18:11 GMT\r\nX-Log: X-Log\r\nX-M-Log: QNM:wldsg121;QNM3\r\nX-M-Reqid: EHNlbWxzh\r\nX-Qiniu-Zone: as0\r\nX-Qnm-Cache: Hit\r\nX-Reqid: 4HkAAADzTChqJscY\r\nX-Svr: IO\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":22801,"size_decoded":23557,"mime_type":"image/png","magic":"PNG image data, 180 x 180, 8-bit/color RGBA, non-interlaced","md5":"40332b1c34a20c2c75da16273082f362","sha1":"63176bf3800898e2c250f35b2f7f84f42e8022b4","sha256":"0194c4720a55cfaace1d9f04160ea16f51f07a60b222e0fe49e10f8db1c21d82","sha512":"7476a40c5e164cf7452c022c0e615ddb6e1024700b752c3cb393cdbfd658595a4d000845b986e5dcea6dc43385c8b04832501d6f26e788c511eba04b02b34113","ssdeep":"384:npiPkH9WC4n0R0SpUpv41NLcv4GhpGXJ7BJ8yd0GEOvQG0gsbJ6Pvfw5R:nEeMGR0SpUq1NhwGx82ZIJ6vw5R","tlshash":"61a2d1b1f4fe572d068b055283b758639c50a4f397918b379a5a46e310f2fa86770b0e","first_seen":"2025-02-26T15:38:27.688659Z","last_seen":"2026-07-31T12:41:47.068759Z","times_seen":26,"resource_available":false,"data":null}},"time_used":8427,"timings":{"blocked":8165,"dns":0,"connect":0,"send":0,"wait":257,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"photo.365live88.com/img/fb/team/5895bcc5af3f4e42a29d434754ef36cf?win007=sell","fqdn":"photo.365live88.com","domain":"365live88.com","tld":"com"},"ip":{"addr":"154.41.93.240","port":443,"asn":174,"as":"COGENT-174","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://y42t.top/","date":"2026-07-31T00:10:42.565Z","timestamp":1785456642565,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"photo.365live88.com","organization":""},"issuer":{"commonName":"Encryption Everywhere DV TLS CA - G2","organization":"DigiCert Inc"},"validity":{"start":"Sat, 01 Nov 2025 00:00:00 GMT","end":"Sat, 31 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"45:76:43:9C:31:C5:89:A6:99:FD:9B:D8:6C:A9:3A:E6:2F:D6:E9:80","sha256":"73:27:CF:D8:8D:AC:95:46:00:5D:67:05:1E:70:22:3E:17:F0:94:78:CD:6F:A6:9C:C8:5F:B5:3B:75:60:3D:C8"}}},"request":{"raw":"GET /img/fb/team/5895bcc5af3f4e42a29d434754ef36cf?win007=sell HTTP/1.1\r\nHost: photo.365live88.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://y42t.top/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: openresty\r\nDate: Fri, 31 Jul 2026 00:10:51 GMT\r\nContent-Type: image/png\r\nContent-Length: 11381\r\nConnection: keep-alive\r\nAccept-Ranges: bytes\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Expose-Headers: X-Log, X-Reqid\r\nAccess-Control-Max-Age: 2592000\r\nAge: 18637\r\nCache-Control: public, max-age=31536000\r\nContent-Disposition: inline; filename=\"5895bcc5af3f4e42a29d434754ef36cf\"; filename*=utf-8''5895bcc5af3f4e42a29d434754ef36cf\r\nContent-Md5: /8NH10i2UvpjzcsmL3HDPw==\r\nContent-Transfer-Encoding: binary\r\nEtag: \"Fmfm0kp31b1HzQx8kh2mTcgSzrlZ\"\r\nLast-Modified: Sat, 25 Jul 2026 19:18:09 GMT\r\nX-Log: X-Log\r\nX-M-Log: QNM:wldsg119;QNM3\r\nX-M-Reqid: Nwg4YOgyU\r\nX-Qiniu-Zone: as0\r\nX-Qnm-Cache: Hit\r\nX-Reqid: m0UAAADy1CtqJscY\r\nX-Svr: IO\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":11381,"size_decoded":12137,"mime_type":"image/png","magic":"PNG image data, 220 x 220, 8-bit/color RGBA, non-interlaced","md5":"ffc347d748b652fa63cdcb262f71c33f","sha1":"67e6d24a77d5bd47cd0c7c921da64dc812ceb959","sha256":"2055aface4120da5eee6f914414b7cfbec9d6871bd14f761927777b6d35ef042","sha512":"b536fa4c00b8effb01c0637ca3ddd2c934a8b2a195600881e6b55eae58d7e5a305f3f95bc29cc2e5c246fcbf4f4ae8653dc72385472503a27b97e43f8cbd727a","ssdeep":"192:B0Cxweb2l4rTXqWqPLyXfK8kE7tiIZKftpzi0ixZbqDPgmgW22/FF8KvE+Rtejey:B0B4KzPLcy8kE7YVtpziaTeW22dqxuql","tlshash":"5832cf5d829481060f576f63fa3ae03acc2a5b75c60bf012c85a39062352db70dec3e6","first_seen":"2026-03-15T16:07:18.422887Z","last_seen":"2026-07-31T12:41:47.035263Z","times_seen":137,"resource_available":false,"data":null}},"time_used":8682,"timings":{"blocked":8427,"dns":0,"connect":0,"send":0,"wait":255,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"y42t.top/jumpto/img/https://rcf-img-hk.gasdg646fs224cn.com/gpmaster/_webp_size328x442_9986c108-3fd7-4f35-9443-f78ce32e1660.png","fqdn":"y42t.top","domain":"y42t.top","tld":"top"},"ip":{"addr":"154.39.104.138","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://y42t.top/","date":"2026-07-31T00:10:42.879Z","timestamp":1785456642879,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"p40f.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 10:44:09 GMT","end":"Tue, 20 Oct 2026 10:44:08 GMT"},"fingerprint":{"sha1":"41:09:2C:3F:FC:9C:25:A9:DB:51:15:BB:D1:5A:D8:01:DC:38:AD:F8","sha256":"49:3B:29:C7:5B:B6:12:CF:84:14:5B:09:42:7D:EF:AA:61:29:EC:A1:D5:40:B5:64:5C:F1:33:AB:9B:E1:13:4D"}}},"request":{"raw":"GET /jumpto/img/https://rcf-img-hk.gasdg646fs224cn.com/gpmaster/_webp_size328x442_9986c108-3fd7-4f35-9443-f78ce32e1660.png HTTP/1.1\r\nHost: y42t.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://y42t.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 31 Jul 2026 00:10:47 GMT\r\nContent-Type: image/webp\r\nContent-Length: 15914\r\nConnection: keep-alive\r\netag: \"d455ee7db25284552aeaae58bb713429\"\r\nLast-Modified: Tue, 02 Dec 2025 14:11:43 GMT\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nAge: 499200\r\ncf-cache-status: HIT\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FXq0JvQ3MA9pEhtfNVPKJ60Cf94hD0%2BVswT5rXeawUYch5zQpSMqisnPidqTYuKMjLg8Ofdr7C%2BKLoBUKvVXtt8CbFUrbsmQeGQIyZp4dshmVUEzwZr8Ijw8uhYypIwWAgrKRRXZHLv%2FddcYMaoFD28%3D\"}]}\r\nCF-RAY: a208c6509ec685dd-HKG\r\nalt-svc: h3=\":443\"; ma=86400\r\nCache-Control: public, max-age=2592000, immutable, public, max-age=2592000, immutable\r\nAccess-Control-Allow-Origin: *\r\nX-Custom-Check: true\r\nServer: Nginx\r\nL-Safe: 1785456647=pwbyu29rM0HEK42bpjFMXQZZ8s1IzzkT40daNMbcT90Ub0zpvrQ+kBR7N9vkAvLpdcGVCAkYTtjHzFt3rikpG2u0ViQwOg9Y/d8oh3QnzrskfHJpkQ3k6DdsyXdsoVGvpU7l+6O6Z96TYcnIdvgBPUL8UMfWMnVf++Fvg3TWLhL2ZP4it9BY8MKVve4d74hd\r\nL-VIA: l1=TqoDVanjjr6wMExF\r\nL-VERSION: 1784720560\r\nL-Request-Id: 3ec119fb5825edbc2d7\r\nX-Cache-Status: HIT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15914,"size_decoded":17069,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"d455ee7db25284552aeaae58bb713429","sha1":"22ea59f69e3ce33cb693d6ab7cde1f4f64bbe6b6","sha256":"20c558fe862164c2d2636a0b3aa259515f5175835dd461e5c16689338ba39413","sha512":"bc5147cbcf7ebb167eb2a75a56c140a33d81616f014f44c4976eff4525f665957e33e6d46f946d873016140af260808658915299a2004c2964be1543126a00b2","ssdeep":"384:POdbE1lYVo0UOKUjQgxN5voCgMMZUN3GcHHZUX3650gyyY44oDMWQ:P4+6+0URmQ+OMMZUNnnZUX6jyJPoD","tlshash":"8b62b051fa2b34398ea119feefcd1d195804ce608a3e6d6a6f3cd20d96b450ec46ed05","first_seen":"2026-04-24T23:10:16.815124Z","last_seen":"2026-07-31T12:41:47.073972Z","times_seen":1005,"resource_available":false,"data":null}},"time_used":5175,"timings":{"blocked":4865,"dns":0,"connect":0,"send":0,"wait":310,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-31","alert":"Phishing Block","trigger":"y42t.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-31","alert":"Sinkholed","trigger":"y42t.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"y42t.top/css/83749.1781011881923.2e202a68.css","fqdn":"y42t.top","domain":"y42t.top","tld":"top"},"ip":{"addr":"154.39.104.138","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://y42t.top/","date":"2026-07-31T00:10:40.973Z","timestamp":1785456640973,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"p40f.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 10:44:09 GMT","end":"Tue, 20 Oct 2026 10:44:08 GMT"},"fingerprint":{"sha1":"41:09:2C:3F:FC:9C:25:A9:DB:51:15:BB:D1:5A:D8:01:DC:38:AD:F8","sha256":"49:3B:29:C7:5B:B6:12:CF:84:14:5B:09:42:7D:EF:AA:61:29:EC:A1:D5:40:B5:64:5C:F1:33:AB:9B:E1:13:4D"}}},"request":{"raw":"GET /css/83749.1781011881923.2e202a68.css HTTP/1.1\r\nHost: y42t.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://y42t.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 31 Jul 2026 00:10:41 GMT\r\nContent-Type: text/css\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Tue, 09 Jun 2026 13:37:11 GMT\r\nVary: Accept-Encoding\r\nETag: W/\"6a281707-6f2f\"\r\nCache-Control: public, max-age=31536000, immutable\r\nAccess-Control-Allow-Origin: *\r\nX-Custom-Check: true\r\nContent-Encoding: gzip\r\nServer: Nginx\r\nL-Safe: 1785456641=gE780zdPNeqfjPR58ntui758h0rpjLBJh/P/VwEb9QgBdmX5XoCvf3XKS4ubqYQ4aAZoEOOBDBlTTobn+2eZbZ0U5rmjaj2YBZiCmX90g8Si+D3mrq6vSJjZwkQXhlFZx6UYXbz//HB3stXeGCYUIUvqR8AbEmVqeF09wWmA11wJgMs9cyGCHyv3ab/jWW+R\r\nL-VIA: l1=TqoDVanjjr6wMExF\r\nL-VERSION: 1784720560\r\nL-Request-Id: 3ec119fb58244cfc2b5\r\nX-Cache-Status: BYPASS\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":28463,"size_decoded":6305,"mime_type":"text/css","magic":"ASCII text, with very long lines (28463), with no line terminators","md5":"1ead8072763d5fe20963f033dc63d94e","sha1":"36eeb0853a1b5681ab464dc1ef3682160e420e60","sha256":"8f014d5d9b2798ecfc473bac7c23f80295b94af3cbeff054fcaf973b286f8240","sha512":"92670a870b9db4259e71072ab72699e3431fa9eb53027f4b90c954b51eaf1869f5f50987808e5c625e9101ea4ea3aca655b81ba73f3ba2ced4cd480eb9a915cc","ssdeep":"384:DYCKpsUIc1F8l1TANI34yQyqPPQwmfzIfRbHx6+OhCcbakzeYaTONdqdK:DYCKpcPE64yDqbodqdK","tlshash":"07d2739ae5d4b13e6c1fbb35ebc5a1ecb1399450df620e7af202762547c3af1012216d","first_seen":"2026-04-29T03:41:13.425526Z","last_seen":"2026-07-31T12:41:46.994684Z","times_seen":1309,"resource_available":false,"data":null}},"time_used":536,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":536,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-31","alert":"Sinkholed","trigger":"y42t.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-31","alert":"Phishing Block","trigger":"y42t.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"photo.365live88.com/img/fb/team/34fe3f587922460095f7827929ecde37?win007=sell","fqdn":"photo.365live88.com","domain":"365live88.com","tld":"com"},"ip":{"addr":"154.41.93.240","port":443,"asn":174,"as":"COGENT-174","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://y42t.top/","date":"2026-07-31T00:10:42.511Z","timestamp":1785456642511,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"photo.365live88.com","organization":""},"issuer":{"commonName":"Encryption Everywhere DV TLS CA - G2","organization":"DigiCert Inc"},"validity":{"start":"Sat, 01 Nov 2025 00:00:00 GMT","end":"Sat, 31 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"45:76:43:9C:31:C5:89:A6:99:FD:9B:D8:6C:A9:3A:E6:2F:D6:E9:80","sha256":"73:27:CF:D8:8D:AC:95:46:00:5D:67:05:1E:70:22:3E:17:F0:94:78:CD:6F:A6:9C:C8:5F:B5:3B:75:60:3D:C8"}}},"request":{"raw":"GET /img/fb/team/34fe3f587922460095f7827929ecde37?win007=sell HTTP/1.1\r\nHost: photo.365live88.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://y42t.top/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: openresty\r\nDate: Fri, 31 Jul 2026 00:10:46 GMT\r\nContent-Type: image/png\r\nContent-Length: 35136\r\nConnection: keep-alive\r\nAccept-Ranges: bytes\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Expose-Headers: X-Log, X-Reqid\r\nAccess-Control-Max-Age: 2592000\r\nAge: 49232\r\nCache-Control: public, max-age=31536000\r\nContent-Disposition: inline; filename=\"34fe3f587922460095f7827929ecde37\"; filename*=utf-8''34fe3f587922460095f7827929ecde37\r\nContent-Md5: UUsvah720m4kBlpq+XNy5g==\r\nContent-Transfer-Encoding: binary\r\nEtag: \"FlvWFzlALJEZ_5OOPPXk3jxtlbQN\"\r\nLast-Modified: Fri, 24 Jul 2026 19:50:05 GMT\r\nX-Log: X-Log\r\nX-M-Log: QNM:wldsg121;QNM3\r\nX-M-Reqid: NrIFUSehn\r\nX-Qiniu-Zone: as0\r\nX-Qnm-Cache: Hit\r\nX-Reqid: cbUAAAB343-VCscY\r\nX-Svr: IO\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":35136,"size_decoded":35892,"mime_type":"image/png","magic":"PNG image data, 179 x 179, 8-bit/color RGBA, non-interlaced","md5":"514b2f6a1ef6d26e24065a6af97372e6","sha1":"5bd61739402c9119ff938e3cf5e4de3c6d95b40d","sha256":"505d97a3a0ea3e3c4c5a968f8bd0503b899fb5e8c98adc6d7e3ec0b22f986790","sha512":"ce4a8ebb3714f081703269fc1e3b5f5eae2fc37bc8402f22faecd3d4a77aa7175f9e881fe5f4542da66e626dcd16699551194b60a007ed99a90c92f758e97781","ssdeep":"768:VdJO+xm5zNEJnkJRORTRA7I+EZIjrbXJ2V0Zvv6450sfOqSHM:nJO+M5hEJn0OR1w6I3fZvvP50sfOo","tlshash":"8bf2f1ded730319dfe04e5d44c9019658830407fbee90a62a91ea99d71bcf2ca91ea1e","first_seen":"2025-03-07T06:52:36.023119Z","last_seen":"2026-07-31T05:07:39.056149Z","times_seen":138,"resource_available":false,"data":null}},"time_used":4307,"timings":{"blocked":3990,"dns":0,"connect":0,"send":0,"wait":282,"receive":35,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"y42t.top/css/60024.1781011881923.0ab0fca2.css","fqdn":"y42t.top","domain":"y42t.top","tld":"top"},"ip":{"addr":"154.39.104.138","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://y42t.top/","date":"2026-07-31T00:10:40.852Z","timestamp":1785456640852,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"p40f.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 10:44:09 GMT","end":"Tue, 20 Oct 2026 10:44:08 GMT"},"fingerprint":{"sha1":"41:09:2C:3F:FC:9C:25:A9:DB:51:15:BB:D1:5A:D8:01:DC:38:AD:F8","sha256":"49:3B:29:C7:5B:B6:12:CF:84:14:5B:09:42:7D:EF:AA:61:29:EC:A1:D5:40:B5:64:5C:F1:33:AB:9B:E1:13:4D"}}},"request":{"raw":"GET /css/60024.1781011881923.0ab0fca2.css HTTP/1.1\r\nHost: y42t.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://y42t.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 31 Jul 2026 00:10:41 GMT\r\nContent-Type: text/css\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Tue, 09 Jun 2026 13:37:11 GMT\r\nVary: Accept-Encoding\r\nETag: W/\"6a281707-1439\"\r\nCache-Control: public, max-age=31536000, immutable\r\nAccess-Control-Allow-Origin: *\r\nX-Custom-Check: true\r\nContent-Encoding: gzip\r\nServer: Nginx\r\nL-Safe: 1785456641=gE780zdPNeqfjPR58ntui758h0rpjLBJh/P/VwEb9QgBdmX5XoCvf3XKS4ubqYQ4aAZoEOOBDBlTTobn+2eZbZ0U5rmjaj2YBZiCmX90g8Si+D3mrq6vSJjZwkQXhlFZx6UYXbz//HB3stXeGCYUIUvqR8AbEmVqeF09wWmA11wJgMs9cyGCHyv3ab/jWW+R\r\nL-VIA: l1=TqoDVanjjr6wMExF\r\nL-VERSION: 1784720560\r\nL-Request-Id: 3ec219fb5824454ba1e\r\nX-Cache-Status: BYPASS\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5177,"size_decoded":1961,"mime_type":"text/css","magic":"ASCII text, with very long lines (5177), with no line terminators","md5":"a0ef4268641ef0b005737ce8cc0c4b44","sha1":"9bb50b9000a419e7a701392b0d7d6c992cf585bb","sha256":"f64c7a7e6ecd620d1c7f8cc67e1eda83a0a115a8d86f3954efdaba3c09d62e66","sha512":"07605ebd7e16aef28f0ad5ed406f29ea9b77e8ba6b2079c810aacf8faf0b4a8d18d4f7775c62860cbf6d4379729a60076103a4daa833c860ddebeee3793ccbe2","ssdeep":"48:ZSPkOO2s2L5Pukasq+nArLkrL4QuQKhUjUkM5P6CdRDRWURcWaTHR/:iOvyP2r4rEDFP61LR/","tlshash":"d1b1412f01703349641bad6807dc67098325d8b399eb37da259d2a0dcbc3f861eb718b","first_seen":"2025-06-26T16:31:28.933081Z","last_seen":"2026-07-31T12:41:47.079592Z","times_seen":3604,"resource_available":false,"data":null}},"time_used":512,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":510,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-31","alert":"Sinkholed","trigger":"y42t.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-31","alert":"Phishing Block","trigger":"y42t.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"y42t.top/fonts/DINPro.9ee75b04.ttf","fqdn":"y42t.top","domain":"y42t.top","tld":"top"},"ip":{"addr":"154.39.104.138","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://y42t.top/","date":"2026-07-31T00:10:41.106Z","timestamp":1785456641106,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"p40f.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 10:44:09 GMT","end":"Tue, 20 Oct 2026 10:44:08 GMT"},"fingerprint":{"sha1":"41:09:2C:3F:FC:9C:25:A9:DB:51:15:BB:D1:5A:D8:01:DC:38:AD:F8","sha256":"49:3B:29:C7:5B:B6:12:CF:84:14:5B:09:42:7D:EF:AA:61:29:EC:A1:D5:40:B5:64:5C:F1:33:AB:9B:E1:13:4D"}}},"request":{"raw":"GET /fonts/DINPro.9ee75b04.ttf HTTP/1.1\r\nHost: y42t.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://y42t.top/css/46431.1781011881923.bc5df1d1.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 31 Jul 2026 00:10:41 GMT\r\nContent-Type: application/octet-stream\r\nContent-Length: 119892\r\nConnection: keep-alive\r\nLast-Modified: Tue, 09 Jun 2026 13:37:10 GMT\r\nETag: \"6a281706-1d454\"\r\nCache-Control: public, max-age=2592000, immutable\r\nAccess-Control-Allow-Origin: *\r\nX-Custom-Check: true\r\nServer: Nginx\r\nL-Safe: 1785456641=gE780zdPNeqfjPR58ntui758h0rpjLBJh/P/VwEb9QgBdmX5XoCvf3XKS4ubqYQ4aAZoEOOBDBlTTobn+2eZbZ0U5rmjaj2YBZiCmX90g8Si+D3mrq6vSJjZwkQXhlFZx6UYXbz//HB3stXeGCYUIUvqR8AbEmVqeF09wWmA11wJgMs9cyGCHyv3ab/jWW+R\r\nL-VIA: l1=TqoDVanjjr6wMExF\r\nL-VERSION: 1784720560\r\nL-Request-Id: 3ec819fb5824697c0f3\r\nX-Cache-Status: BYPASS\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":119892,"size_decoded":120571,"mime_type":"application/octet-stream","magic":"TrueType Font data, 10 tables, 1st \"OS/2\", 30 names, Macintosh, 2005 Albert-Jan Pool published by FSI FontShop International GmbHDIN Pro RegularRegularAlbert-Ja","md5":"028cefac160ed3b006f47106fbc68d1c","sha1":"efcecac09684435facd7397e4f6163a5069802c2","sha256":"fb841a09a82787982ad1774bdeb45e8e06ff4909161a9ce33fd42f8822c5ddc3","sha512":"3a5a284d0c4da6593b857ba785a4ba7d5f2e2b73d22a2ef25435b9558063d2486228d76a3cd5d3a59b5abe4c0da696a75373111b3569a94a9dea1516cf16091f","ssdeep":"3072:YhtN/CZnt1tbtKtHtFNgz1QZt0tbt2ktwtNstAtqNaEctWpy8TLtsIb66AUeo:YhtNGnt1tbtKtHt7t0tbtxtwtNstAtqV","tlshash":"5ac308c153e8fa4ad83996388511c7434226ff2de65d4f36ffd94d8c688e8e9064e6e0","first_seen":"2023-05-08T18:58:40Z","last_seen":"2026-07-31T12:41:47.005535Z","times_seen":5411,"resource_available":false,"data":null}},"time_used":917,"timings":{"blocked":433,"dns":0,"connect":0,"send":0,"wait":310,"receive":174,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-31","alert":"Sinkholed","trigger":"y42t.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-31","alert":"Phishing Block","trigger":"y42t.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"photo.365live88.com/img/fb/team/0942d456b217495a968d91ced3ae8b60?win007=sell","fqdn":"photo.365live88.com","domain":"365live88.com","tld":"com"},"ip":{"addr":"154.41.93.240","port":443,"asn":174,"as":"COGENT-174","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://y42t.top/","date":"2026-07-31T00:10:42.469Z","timestamp":1785456642469,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"photo.365live88.com","organization":""},"issuer":{"commonName":"Encryption Everywhere DV TLS CA - G2","organization":"DigiCert Inc"},"validity":{"start":"Sat, 01 Nov 2025 00:00:00 GMT","end":"Sat, 31 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"45:76:43:9C:31:C5:89:A6:99:FD:9B:D8:6C:A9:3A:E6:2F:D6:E9:80","sha256":"73:27:CF:D8:8D:AC:95:46:00:5D:67:05:1E:70:22:3E:17:F0:94:78:CD:6F:A6:9C:C8:5F:B5:3B:75:60:3D:C8"}}},"request":{"raw":"GET /img/fb/team/0942d456b217495a968d91ced3ae8b60?win007=sell HTTP/1.1\r\nHost: photo.365live88.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://y42t.top/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: openresty\r\nDate: Fri, 31 Jul 2026 00:10:44 GMT\r\nContent-Type: image/png\r\nContent-Length: 92406\r\nConnection: keep-alive\r\nAccept-Ranges: bytes\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Expose-Headers: X-Log, X-Reqid\r\nAccess-Control-Max-Age: 2592000\r\nAge: 85234\r\nCache-Control: public, max-age=31536000\r\nContent-Disposition: inline; filename=\"0942d456b217495a968d91ced3ae8b60\"; filename*=utf-8''0942d456b217495a968d91ced3ae8b60\r\nContent-Md5: ntLE9q3FGXXNvSqTCT5qQw==\r\nContent-Transfer-Encoding: binary\r\nEtag: \"FhghSHH0VJklYn4rN6tzitcSQ7eY\"\r\nLast-Modified: Fri, 24 Jul 2026 19:49:42 GMT\r\nX-Log: X-Log\r\nX-M-Log: QNM:wldsg119;QNM3\r\nX-M-Reqid: oUZ7PgCOg\r\nX-Qiniu-Zone: as0\r\nX-Qnm-Cache: Hit\r\nX-Reqid: JHQAAAAPK6XW6cYY\r\nX-Svr: IO\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":92406,"size_decoded":93162,"mime_type":"image/png","magic":"PNG image data, 300 x 300, 8-bit/color RGBA, non-interlaced","md5":"9ed2c4f6adc51975cdbd2a93093e6a43","sha1":"18214871f4549925627e2b37ab738ad71243b798","sha256":"c6fe17552384ad15e09143680be34f4eeb071f3fef168b3663f32969681e984d","sha512":"17c1822be2532f8c741ead91046f3b23506d6de28e8756bbafa4ed25fcff37d69503caf73c9be25bdfe45738e50667a1f0da1fd380afefa56cdd0270840e21ec","ssdeep":"1536:U6s34JG8spL94S0Lqsk9HdZyLTlq3i9W/+/pjvPuCQFTjeXsVazV6RbcYB25iOiV:2LLWS0OhDcPkgW/I1PzQgsVazV+Ig2kV","tlshash":"ff93129c35232f4a3a85d77a7260ba1e2590783f12f8df60607e67390de110cb87a7b4","first_seen":"2023-08-31T00:31:19Z","last_seen":"2026-07-31T00:12:30.760974Z","times_seen":249,"resource_available":false,"data":null}},"time_used":2957,"timings":{"blocked":2323,"dns":0,"connect":0,"send":0,"wait":293,"receive":341,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"photo.365live88.com/img/fb/team/4c63b8211e784573b9675097d001a7ed?win007=sell","fqdn":"photo.365live88.com","domain":"365live88.com","tld":"com"},"ip":{"addr":"154.41.93.240","port":443,"asn":174,"as":"COGENT-174","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://y42t.top/","date":"2026-07-31T00:10:42.550Z","timestamp":1785456642550,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"photo.365live88.com","organization":""},"issuer":{"commonName":"Encryption Everywhere DV TLS CA - G2","organization":"DigiCert Inc"},"validity":{"start":"Sat, 01 Nov 2025 00:00:00 GMT","end":"Sat, 31 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"45:76:43:9C:31:C5:89:A6:99:FD:9B:D8:6C:A9:3A:E6:2F:D6:E9:80","sha256":"73:27:CF:D8:8D:AC:95:46:00:5D:67:05:1E:70:22:3E:17:F0:94:78:CD:6F:A6:9C:C8:5F:B5:3B:75:60:3D:C8"}}},"request":{"raw":"GET /img/fb/team/4c63b8211e784573b9675097d001a7ed?win007=sell HTTP/1.1\r\nHost: photo.365live88.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://y42t.top/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: openresty\r\nDate: Fri, 31 Jul 2026 00:10:49 GMT\r\nContent-Type: image/png\r\nContent-Length: 23690\r\nConnection: keep-alive\r\nAccept-Ranges: bytes\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Expose-Headers: X-Log, X-Reqid\r\nAccess-Control-Max-Age: 2592000\r\nAge: 20438\r\nCache-Control: public, max-age=31536000\r\nContent-Disposition: inline; filename=\"4c63b8211e784573b9675097d001a7ed\"; filename*=utf-8''4c63b8211e784573b9675097d001a7ed\r\nContent-Md5: 6HO3NAAZ8tKKMOzWUlkRtw==\r\nContent-Transfer-Encoding: binary\r\nEtag: \"Fs4frKDvgoStXg5pjgir-TFxx4ZZ\"\r\nLast-Modified: Sat, 25 Jul 2026 19:17:44 GMT\r\nX-Log: X-Log\r\nX-M-Log: QNM:wldsg119;QNM3\r\nX-M-Reqid: M5CGfoV3Z\r\nX-Qiniu-Zone: as0\r\nX-Qnm-Cache: Hit\r\nX-Reqid: JxIAAADuoDjGJMcY\r\nX-Svr: IO\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":23690,"size_decoded":24446,"mime_type":"image/png","magic":"PNG image data, 220 x 234, 8-bit/color RGBA, non-interlaced","md5":"e873b7340019f2d28a30ecd6525911b7","sha1":"ce1faca0ef8284ad5e0e698e08abf93171c78659","sha256":"d26ca7543818857c4df763f947389caae2f75d95870edaa266b95f1cddfd5efc","sha512":"88286af749fc04cbbc10d0970352e0cbdd5af1e957d2a5bff608c47a1974220296d3f00dbec91840d955247f4f2d565b7ed2ee897c610997f376310258ce3b78","ssdeep":"384:ylS5NmDwK9Bf7rFhimSpsc7ntLITtg2cP72n1yGcGC2Fii0CxFPMu9UDrOzZtW32:yMNYwa9zRcRLITtvMGc5iR33FQ/BwD","tlshash":"03b2e1d22e573e5a3b7768b70115bfb4406ae0c6dfa941a02639c815ed41b9c83d83fa","first_seen":"2025-02-26T14:48:47.77077Z","last_seen":"2026-07-31T12:41:46.982566Z","times_seen":81,"resource_available":false,"data":null}},"time_used":7580,"timings":{"blocked":7305,"dns":0,"connect":0,"send":0,"wait":265,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"y42t.top/jumpto/img/https://rcf-img-hk.gasdg646fs224cn.com/gpmaster/_webp_size328x442_2cf32c0e-cd2d-4274-8e00-d67d14e5086e.png","fqdn":"y42t.top","domain":"y42t.top","tld":"top"},"ip":{"addr":"154.39.104.138","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://y42t.top/","date":"2026-07-31T00:10:42.874Z","timestamp":1785456642874,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"p40f.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 10:44:09 GMT","end":"Tue, 20 Oct 2026 10:44:08 GMT"},"fingerprint":{"sha1":"41:09:2C:3F:FC:9C:25:A9:DB:51:15:BB:D1:5A:D8:01:DC:38:AD:F8","sha256":"49:3B:29:C7:5B:B6:12:CF:84:14:5B:09:42:7D:EF:AA:61:29:EC:A1:D5:40:B5:64:5C:F1:33:AB:9B:E1:13:4D"}}},"request":{"raw":"GET /jumpto/img/https://rcf-img-hk.gasdg646fs224cn.com/gpmaster/_webp_size328x442_2cf32c0e-cd2d-4274-8e00-d67d14e5086e.png HTTP/1.1\r\nHost: y42t.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://y42t.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 31 Jul 2026 00:10:47 GMT\r\nContent-Type: image/webp\r\nContent-Length: 7390\r\nConnection: keep-alive\r\netag: \"f111a1ab6243183e54c8c152a111da67\"\r\nLast-Modified: Sun, 09 Nov 2025 14:10:40 GMT\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JN0qjafxeI%2BQpq14FJ7Z11dy3j6Q%2BUQPiRkti%2BCJKsEIad%2FwXYZxBIJgx1u3%2BGH%2FzbLYrBcr9o2v4uXfOTXNdHLiTrIKyBCMdh4xegy7Y%2F6zQ9%2BKI%2FdaHrJ5EcEi1DznhGo3fIhPasCbZvECg5dR2s0%3D\"}]}\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nAge: 499201\r\ncf-cache-status: HIT\r\nCF-RAY: a208c64ba8e06ad4-HKG\r\nalt-svc: h3=\":443\"; ma=86400\r\nCache-Control: public, max-age=2592000, immutable, public, max-age=2592000, immutable\r\nAccess-Control-Allow-Origin: *\r\nX-Custom-Check: true\r\nServer: Nginx\r\nL-Safe: 1785456647=pwbyu29rM0HEK42bpjFMXQZZ8s1IzzkT40daNMbcT90Ub0zpvrQ+kBR7N9vkAvLpdcGVCAkYTtjHzFt3rikpG2u0ViQwOg9Y/d8oh3QnzrskfHJpkQ3k6DdsyXdsoVGvpU7l+6O6Z96TYcnIdvgBPUL8UMfWMnVf++Fvg3TWLhL2ZP4it9BY8MKVve4d74hd\r\nL-VIA: l1=TqoDVanjjr6wMExF\r\nL-VERSION: 1784720560\r\nL-Request-Id: 3ec519fb5825da3c081\r\nX-Cache-Status: HIT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":7390,"size_decoded":8554,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"f111a1ab6243183e54c8c152a111da67","sha1":"64384e28a720752201bdef5fb2d779e3b9c85f09","sha256":"5cc2cf8571b6a9483514b5a6a4624cf867c12addfcffa3ed0ca5b24a2354dda1","sha512":"38c484611e089f275c9cad39c3978fde5cc040959db3de91ae8744ce33f66b4ecf40b01f464e2081395aa408bbbc6a6c7bd845799ae892a8611b04c24c2198f6","ssdeep":"96:0UX6jHvysggvfrPtYvuy3/9Ic5G1SB2P80d2QWAqhs0ufLIbqvfgJ965FkBYUU:vmqsggvf5Uuy3lQ1Yues0uDlngJY","tlshash":"4ae1bf2cec9e39805c1c3cb8a451111c6f08688cadcc8cd55915be29f277beab5d6e41","first_seen":"2026-04-24T23:10:16.706864Z","last_seen":"2026-07-31T12:41:47.134176Z","times_seen":960,"resource_available":false,"data":null}},"time_used":4858,"timings":{"blocked":4555,"dns":0,"connect":0,"send":0,"wait":303,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-31","alert":"Phishing Block","trigger":"y42t.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-31","alert":"Sinkholed","trigger":"y42t.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"y42t.top/jumpto/img/https://rcf-img-hk.gasdg646fs224cn.com/gpmaster/_webp_size328x422_936e6f39-c72d-42ec-ab51-2bd5a806c902.png","fqdn":"y42t.top","domain":"y42t.top","tld":"top"},"ip":{"addr":"154.39.104.138","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://y42t.top/","date":"2026-07-31T00:10:42.876Z","timestamp":1785456642876,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"p40f.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 10:44:09 GMT","end":"Tue, 20 Oct 2026 10:44:08 GMT"},"fingerprint":{"sha1":"41:09:2C:3F:FC:9C:25:A9:DB:51:15:BB:D1:5A:D8:01:DC:38:AD:F8","sha256":"49:3B:29:C7:5B:B6:12:CF:84:14:5B:09:42:7D:EF:AA:61:29:EC:A1:D5:40:B5:64:5C:F1:33:AB:9B:E1:13:4D"}}},"request":{"raw":"GET /jumpto/img/https://rcf-img-hk.gasdg646fs224cn.com/gpmaster/_webp_size328x422_936e6f39-c72d-42ec-ab51-2bd5a806c902.png HTTP/1.1\r\nHost: y42t.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://y42t.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 31 Jul 2026 00:10:47 GMT\r\nContent-Type: image/webp\r\nContent-Length: 15760\r\nConnection: keep-alive\r\netag: \"dbd5bbca2ac98b7327bec49ec9e17a87\"\r\nLast-Modified: Tue, 02 Dec 2025 14:11:52 GMT\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nAge: 499200\r\ncf-cache-status: HIT\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3H5O2r%2Fh2Ee%2BY6nC0KKCvpCLe%2FFvkzOqUBF7Gld2b0RrCAc6RToBUy9gIR4shSon0jnGjFYeavDiuYTZrkFs82D0gq6%2FJOCL2IHw6Lbf%2BlIS2yDIVYjAFekoHNVufcTf6tUVpZ0vhQzvXfkkeomvGyE%3D\"}]}\r\nCF-RAY: a208c64e78cf62ae-HKG\r\nalt-svc: h3=\":443\"; ma=86400\r\nCache-Control: public, max-age=2592000, immutable, public, max-age=2592000, immutable\r\nAccess-Control-Allow-Origin: *\r\nX-Custom-Check: true\r\nServer: Nginx\r\nL-Safe: 1785456647=pwbyu29rM0HEK42bpjFMXQZZ8s1IzzkT40daNMbcT90Ub0zpvrQ+kBR7N9vkAvLpdcGVCAkYTtjHzFt3rikpG2u0ViQwOg9Y/d8oh3QnzrskfHJpkQ3k6DdsyXdsoVGvpU7l+6O6Z96TYcnIdvgBPUL8UMfWMnVf++Fvg3TWLhL2ZP4it9BY8MKVve4d74hd\r\nL-VIA: l1=TqoDVanjjr6wMExF\r\nL-VERSION: 1784720560\r\nL-Request-Id: 3ec819fb5825e89c10f\r\nX-Cache-Status: HIT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15760,"size_decoded":16917,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"dbd5bbca2ac98b7327bec49ec9e17a87","sha1":"7ad876b6c3f6922c1cff9db452948604cfc691cf","sha256":"12e3a0e3de790b5f640b48e4fede8f5d1c881e23b4d710d1971282362277eee3","sha512":"c96a4f88a602c4bd5d8ccc3a0ae44ca9d85d5a75175b8b8c219c527d2ed1338b8d65e9bc52e9c1e844f34aa76e6d0d1d81c4eea6b28592de710a4f4922b11701","ssdeep":"384:z25GXKCP2DdvL8cWHImH7LKcCZzFwu/6unzgL4X9:S55Ce/xsln46un88","tlshash":"f462d0149f5537278cc4787941315fbf7f601c42b208e45296ffa86bba2c2957a146f3","first_seen":"2026-04-24T23:10:16.813188Z","last_seen":"2026-07-31T12:41:47.135076Z","times_seen":981,"resource_available":false,"data":null}},"time_used":5075,"timings":{"blocked":4784,"dns":0,"connect":0,"send":0,"wait":291,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-31","alert":"Phishing Block","trigger":"y42t.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-31","alert":"Sinkholed","trigger":"y42t.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"y42t.top/ecb/8f8306425ab46d0221b2c56ef50f72e487d5bb0255ee7333091abb7c08c465094a574c3c12d0e1812241fe43c0d5f0ea88d857f698a4fd081b","fqdn":"y42t.top","domain":"y42t.top","tld":"top"},"ip":{"addr":"154.39.104.138","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://y42t.top/","date":"2026-07-31T00:10:42.020Z","timestamp":1785456642020,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"p40f.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 10:44:09 GMT","end":"Tue, 20 Oct 2026 10:44:08 GMT"},"fingerprint":{"sha1":"41:09:2C:3F:FC:9C:25:A9:DB:51:15:BB:D1:5A:D8:01:DC:38:AD:F8","sha256":"49:3B:29:C7:5B:B6:12:CF:84:14:5B:09:42:7D:EF:AA:61:29:EC:A1:D5:40:B5:64:5C:F1:33:AB:9B:E1:13:4D"}}},"request":{"raw":"GET /ecb/8f8306425ab46d0221b2c56ef50f72e487d5bb0255ee7333091abb7c08c465094a574c3c12d0e1812241fe43c0d5f0ea88d857f698a4fd081b HTTP/1.1\r\nHost: y42t.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://y42t.top/\r\nContent-Type: application/x-www-form-urlencoded\r\nx-request-source: https://y42t.top\r\nXign: 1v/aInkflIYEYtvcgORdyAlf3UrnNSd2r8876CHkIxuMdzqtk4zGxA04kCCXeDn2vrWSYIOvv7G3k2nVg/9cdqNTLe1CHKCrLO2fiS3wNn1D7NPe4LOZbcV7Rpel39l4EV2o6mP4Vr0UKcym62c98Ttd8L9JqMqJ1QmMsg+h/+k=\r\ntimestamp: 1785456641870\r\nsign: 4c372f5735342t4l\r\nversion: 5.6.12.0\r\nclient-type: web\r\ndevice-id: h7Ebc4YSNiCSchfp8FT2WyTT845kFyYC\r\nlang: zh-CN\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 31 Jul 2026 00:10:42 GMT\r\nContent-Type: application/json\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding, Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nExpires: Fri, 31 Jul 2026 00:15:42 GMT\r\nCache-Control: public, max-age=300, s-maxage=300, must-revalidate, stale-while-revalidate=30\r\nX-XSS-Protection: 1; mode=block\r\nX-Request-ID: 332af8bf670048e1adbd44ef267c8a27\r\nPragma: public\r\nX-Content-Type-Options: nosniff\r\nStrict-Transport-Security: max-age=63072000; includeSubdomains; preload\r\nAccess-Control-Allow-Origin: *\r\nX-Custom-Check: true, true\r\nContent-Encoding: gzip\r\nServer: Nginx\r\nL-Safe: 1785456642=csqYCqnSrfqstQvye8K/cOFcRTOv1c0xbYhymJAs0/02+uXPG5GVyZ0p6izerPHm8MGf7A/o5MmlVb25OTDKDKeQU0rR3SBVQb7DhxtPpD3sSzxoSDG3GUN9oldUbp9/49xVY7UWBgnWGNvQm3pHmukuHRLxIzXXppUlpGs5PUC8OL5ESDjYobwSrUxT4jKY\r\nL-VIA: l1=TqoDVanjjr6wMExF\r\nL-VERSION: 1784720560\r\nL-Request-Id: 3ec819fb5824876c0f4\r\nX-Cache-Status: BYPASS\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":35371,"size_decoded":36414,"mime_type":"application/json","magic":"data","md5":"2eea9315feaaa3bd6030b0567faee082","sha1":"63b74338070dc11430b8fc1a503963a794be5419","sha256":"55fb265ee89384a7ca38eb72aa5b5257ae84c2d10c6f4d2e6a6ee78a7618433f","sha512":"cf8b860f30e07301894ea6c8e478bd7a185de015876d3b07fe71bf9b375e9d135fba4f0cab7899e05427a9fd07be8b1297e2a8a16749eab6f8dc9fd1394625c3","ssdeep":"1536:ORIEMsO9jvDFd2ygZd5ey5zJhjyigD9uiMVF:cIEMs+vdK7euJhGR9ZMVF","tlshash":"7433d0210342f3f1d06ad8e3a61641d407105ae1abb7fd60da74d6b11daa22ea3cfd87","first_seen":"2026-07-31T00:11:28.181453Z","last_seen":"2026-07-31T00:12:52.511733Z","times_seen":3,"resource_available":false,"data":null}},"time_used":679,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":425,"receive":254,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-31","alert":"Phishing Block","trigger":"y42t.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-31","alert":"Sinkholed","trigger":"y42t.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"y42t.top/ecb/8f83064249b06e0660afdb30b60772fdcdfbb3036fb467600d10b16d76dc640e","fqdn":"y42t.top","domain":"y42t.top","tld":"top"},"ip":{"addr":"154.39.104.138","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://y42t.top/","date":"2026-07-31T00:10:42.024Z","timestamp":1785456642024,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"p40f.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 10:44:09 GMT","end":"Tue, 20 Oct 2026 10:44:08 GMT"},"fingerprint":{"sha1":"41:09:2C:3F:FC:9C:25:A9:DB:51:15:BB:D1:5A:D8:01:DC:38:AD:F8","sha256":"49:3B:29:C7:5B:B6:12:CF:84:14:5B:09:42:7D:EF:AA:61:29:EC:A1:D5:40:B5:64:5C:F1:33:AB:9B:E1:13:4D"}}},"request":{"raw":"GET /ecb/8f83064249b06e0660afdb30b60772fdcdfbb3036fb467600d10b16d76dc640e HTTP/1.1\r\nHost: y42t.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://y42t.top/\r\nContent-Type: application/x-www-form-urlencoded\r\nx-request-source: https://y42t.top\r\nXign: iYxrQg6Fd+kBJgaQHO5jwyxypiAsN2lF0dMdiNzvFbuKnhA1kzNOjf89e6ullRYelJWdaQ3JpZcN8qEM7B0/arfml3JihMF/QmvMqjyKg6+aL8YOUfWOXp0nVc0jSfUA+TKvoZyXmfSeopps3ifDePbCHPgTHqBGABcZ7dwBiZM=\r\ntimestamp: 1785456641870\r\nsign: 319r5i4i527c2n1p\r\nversion: 5.6.12.0\r\nclient-type: web\r\ndevice-id: h7Ebc4YSNiCSchfp8FT2WyTT845kFyYC\r\nlang: zh-CN\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 31 Jul 2026 00:10:42 GMT\r\nContent-Type: application/json\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding, Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nExpires: Fri, 31 Jul 2026 00:20:42 GMT\r\nCache-Control: public, max-age=600, s-maxage=600, must-revalidate, stale-while-revalidate=30\r\nX-XSS-Protection: 1; mode=block\r\nX-Request-ID: 7f9b2f8b73434e42927a96446321dab5\r\nPragma: public\r\nX-Content-Type-Options: nosniff\r\nStrict-Transport-Security: max-age=63072000; includeSubdomains; preload\r\nAccess-Control-Allow-Origin: *\r\nX-Custom-Check: true, true\r\nContent-Encoding: gzip\r\nServer: Nginx\r\nL-Safe: 1785456642=csqYCqnSrfqstQvye8K/cOFcRTOv1c0xbYhymJAs0/02+uXPG5GVyZ0p6izerPHm8MGf7A/o5MmlVb25OTDKDKeQU0rR3SBVQb7DhxtPpD3sSzxoSDG3GUN9oldUbp9/49xVY7UWBgnWGNvQm3pHmukuHRLxIzXXppUlpGs5PUC8OL5ESDjYobwSrUxT4jKY\r\nL-VIA: l1=TqoDVanjjr6wMExF\r\nL-VERSION: 1784720560\r\nL-Request-Id: 3ec919fb58249b2c08d\r\nX-Cache-Status: BYPASS\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4985,"size_decoded":6018,"mime_type":"application/json","magic":"data","md5":"c6ca87bc09afc08fb50c63f742ce3fb2","sha1":"d27896a6467e59a107d48814d714d5b80b71dc6b","sha256":"c2de0d4d29dbd73bbc11b7c04bd58e5e2afd4dd96a4fa9ebe9d62fee206aa438","sha512":"8a70be52b1c8e9fce13da5e3758e4571440afb1573b949ea8a3838011a9a5dbbd92d53ba87fd9bb25cba2319edfed2ab6390f663d3a2af83cccb61ceabe30a9d","ssdeep":"192:VeAeRiOVtkzgWYjmcI/IWl2BOqULT7iH4UpOQwTkbbynhY7:xYVnm/IwiOtLfiH4lvTkbuhY7","tlshash":"95f1af0197d8a768c5e7c1e3384273458252054a310f5f4cca6c62f7ae5f42512ff9b7","first_seen":"2026-07-26T23:48:43.949632Z","last_seen":"2026-07-31T00:12:52.527159Z","times_seen":4,"resource_available":false,"data":null}},"time_used":599,"timings":{"blocked":305,"dns":0,"connect":0,"send":0,"wait":294,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-31","alert":"Phishing Block","trigger":"y42t.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-31","alert":"Sinkholed","trigger":"y42t.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"y42t.top/img/ESPORT.4f4b51d4.png","fqdn":"y42t.top","domain":"y42t.top","tld":"top"},"ip":{"addr":"154.39.104.138","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://y42t.top/","date":"2026-07-31T00:10:42.767Z","timestamp":1785456642767,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"p40f.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 10:44:09 GMT","end":"Tue, 20 Oct 2026 10:44:08 GMT"},"fingerprint":{"sha1":"41:09:2C:3F:FC:9C:25:A9:DB:51:15:BB:D1:5A:D8:01:DC:38:AD:F8","sha256":"49:3B:29:C7:5B:B6:12:CF:84:14:5B:09:42:7D:EF:AA:61:29:EC:A1:D5:40:B5:64:5C:F1:33:AB:9B:E1:13:4D"}}},"request":{"raw":"GET /img/ESPORT.4f4b51d4.png HTTP/1.1\r\nHost: y42t.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://y42t.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 31 Jul 2026 00:10:45 GMT\r\nContent-Type: image/png\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Tue, 09 Jun 2026 13:37:11 GMT\r\nVary: Accept-Encoding\r\nETag: W/\"6a281707-101b0\"\r\nCache-Control: public, max-age=2592000, immutable\r\nAccess-Control-Allow-Origin: *\r\nX-Custom-Check: true\r\nContent-Encoding: gzip\r\nServer: Nginx\r\nL-Safe: 1785456645=3m/UQghxNGW3gPChBH0qwAw5jhMnk/bL7ljEsAqUNfL2w1i0HQREe2rEb4k+hpOpl+mNkeotUTn7rI4RELPi496PFmfq0fH/qKdAcrqsvLVi0CluaNffWUzPkudCch2/uigQXMAy3JVAvXsWZA3UDGCysooGP/loOgkjhRbwnpUqbTZcGQok3Gq63qCfb31c\r\nAge: 499191\r\nL-VIA: l1=TqoDVanjjr6wMExF\r\nL-VERSION: 1784720560\r\nL-Request-Id: 3ec919fb5825480c096\r\nX-Cache-Status: HIT\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":65968,"size_decoded":66691,"mime_type":"image/png","magic":"PNG image data, 582 x 307, 8-bit colormap, non-interlaced","md5":"29610094acb703084f79c42c17547a7c","sha1":"3c824ba387e36bcce1a5f1d0d14b513fb278db9d","sha256":"8c3dc9ee49224eff4a37ec488ff0a413f3150ec7a62640a466a802750a573146","sha512":"db986acc62bb0d35583a1c298b468e1fa7869269c738eadc82b944b1a8f9b2c0723087db8a065d60495938e834337e72e3c438089d1d02ff90f4983e0d6461fb","ssdeep":"1536:ObUUUNbT8bJcHe4DyC8KLT/KKeRfm4AH7XAlzS7M2Z:rbgNcHwE/eshbE/2Z","tlshash":"b25302e1df60cb022efe65ca89acf12ae204a0a61476453f7a231d6f3744016af973c4","first_seen":"2023-11-10T19:12:00Z","last_seen":"2026-07-31T12:41:47.029286Z","times_seen":2297,"resource_available":false,"data":null}},"time_used":2640,"timings":{"blocked":2333,"dns":0,"connect":0,"send":0,"wait":293,"receive":14,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-31","alert":"Sinkholed","trigger":"y42t.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-31","alert":"Phishing Block","trigger":"y42t.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"y42t.top/jumpto/img/https://rcf-img-hk.gasdg646fs224cn.com/202506/_webp_size1164x872_0e80d399-2c93-4f64-89db-61a96d3b05e4.png","fqdn":"y42t.top","domain":"y42t.top","tld":"top"},"ip":{"addr":"154.39.104.138","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://y42t.top/","date":"2026-07-31T00:10:42.837Z","timestamp":1785456642837,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"p40f.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 10:44:09 GMT","end":"Tue, 20 Oct 2026 10:44:08 GMT"},"fingerprint":{"sha1":"41:09:2C:3F:FC:9C:25:A9:DB:51:15:BB:D1:5A:D8:01:DC:38:AD:F8","sha256":"49:3B:29:C7:5B:B6:12:CF:84:14:5B:09:42:7D:EF:AA:61:29:EC:A1:D5:40:B5:64:5C:F1:33:AB:9B:E1:13:4D"}}},"request":{"raw":"GET /jumpto/img/https://rcf-img-hk.gasdg646fs224cn.com/202506/_webp_size1164x872_0e80d399-2c93-4f64-89db-61a96d3b05e4.png HTTP/1.1\r\nHost: y42t.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://y42t.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 31 Jul 2026 00:10:45 GMT\r\nContent-Type: image/webp\r\nContent-Length: 112700\r\nConnection: keep-alive\r\netag: \"62970d9f3c6d5069ad898724c19a4277\"\r\nLast-Modified: Sat, 06 Dec 2025 06:28:28 GMT\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZZ%2BExYp0j9j%2FuShBnCcE6jRLRauXtUkj8J7vuT9GIsiKf6JZdxnwvPRLrbUDLpLzSRJfgUKfFieu3aLYCOpCLcsKQaUHBAtihY1WDZncWVpDPHlbX6IO0BTZS3mKMxP8h8t7Bsz1NB4IdbvhldtCIA0%3D\"}]}\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nAge: 499204\r\ncf-cache-status: HIT\r\nCF-RAY: a208c6278ea20965-HKG\r\nalt-svc: h3=\":443\"; ma=86400\r\nCache-Control: public, max-age=2592000, immutable, public, max-age=2592000, immutable\r\nAccess-Control-Allow-Origin: *\r\nX-Custom-Check: true\r\nServer: Nginx\r\nL-Safe: 1785456645=3m/UQghxNGW3gPChBH0qwAw5jhMnk/bL7ljEsAqUNfL2w1i0HQREe2rEb4k+hpOpl+mNkeotUTn7rI4RELPi496PFmfq0fH/qKdAcrqsvLVi0CluaNffWUzPkudCch2/uigQXMAy3JVAvXsWZA3UDGCysooGP/loOgkjhRbwnpUqbTZcGQok3Gq63qCfb31c\r\nL-VIA: l1=TqoDVanjjr6wMExF\r\nL-VERSION: 1784720560\r\nL-Request-Id: 3ec919fb58256e4c09a\r\nX-Cache-Status: HIT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":112700,"size_decoded":113852,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"62970d9f3c6d5069ad898724c19a4277","sha1":"2b378bf8f829167d47bea58444d399fe47052617","sha256":"7b17d39fcff43e49c7a9cfa070a2e9ad41f466c464e347b7f2a91b705f6b5161","sha512":"00e247d65514ff4a5e8032c591faf83e4af220acd25b5b2fb5883c3f85ec349284e1609489cad86537bcbdc7718e2bc956f6b2c9bfef0cee09b54f036b9b495a","ssdeep":"3072:2Q4KKXKBHjDhDCq5qNrHMlyp8Rod8oucXQUEyr:DjBHRCqwNM4dw25r","tlshash":"e7b312dd1216b6b4a8b027fb23ccbd8944cd2ef64e787e96d8a9c8513545b2f40f4d42","first_seen":"2026-04-24T23:10:16.754484Z","last_seen":"2026-07-31T12:36:18.776836Z","times_seen":924,"resource_available":false,"data":null}},"time_used":3181,"timings":{"blocked":2860,"dns":0,"connect":0,"send":0,"wait":293,"receive":28,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-31","alert":"Sinkholed","trigger":"y42t.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-31","alert":"Phishing Block","trigger":"y42t.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"photo.365live88.com/img/fb/team/a5dcb28b93494fb5a38c0f71c509fbfe?win007=sell","fqdn":"photo.365live88.com","domain":"365live88.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://y42t.top/","date":"2026-07-31T00:10:42.439Z","timestamp":1785456642439,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /img/fb/team/a5dcb28b93494fb5a38c0f71c509fbfe?win007=sell HTTP/1.1\r\nHost: photo.365live88.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://y42t.top/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-31T20:32:35.777412Z","times_seen":17640239,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"photo.365live88.com/img/fb/team/5894005c40ad4ca2acb9c533cefff09f?win007=sell","fqdn":"photo.365live88.com","domain":"365live88.com","tld":"com"},"ip":{"addr":"154.41.93.240","port":443,"asn":174,"as":"COGENT-174","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://y42t.top/","date":"2026-07-31T00:10:42.491Z","timestamp":1785456642491,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"photo.365live88.com","organization":""},"issuer":{"commonName":"Encryption Everywhere DV TLS CA - G2","organization":"DigiCert Inc"},"validity":{"start":"Sat, 01 Nov 2025 00:00:00 GMT","end":"Sat, 31 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"45:76:43:9C:31:C5:89:A6:99:FD:9B:D8:6C:A9:3A:E6:2F:D6:E9:80","sha256":"73:27:CF:D8:8D:AC:95:46:00:5D:67:05:1E:70:22:3E:17:F0:94:78:CD:6F:A6:9C:C8:5F:B5:3B:75:60:3D:C8"}}},"request":{"raw":"GET /img/fb/team/5894005c40ad4ca2acb9c533cefff09f?win007=sell HTTP/1.1\r\nHost: photo.365live88.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://y42t.top/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: openresty\r\nDate: Fri, 31 Jul 2026 00:10:45 GMT\r\nContent-Type: image/png\r\nContent-Length: 9407\r\nConnection: keep-alive\r\nAccept-Ranges: bytes\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Expose-Headers: X-Log, X-Reqid\r\nAccess-Control-Max-Age: 2592000\r\nAge: 52836\r\nCache-Control: public, max-age=31536000\r\nContent-Disposition: inline; filename=\"5894005c40ad4ca2acb9c533cefff09f\"; filename*=utf-8''5894005c40ad4ca2acb9c533cefff09f\r\nContent-Md5: GFRxCT4kel17/a0FsST41A==\r\nContent-Transfer-Encoding: binary\r\nEtag: \"Fvka8N917SCAdxg_xNDokD2miR5U\"\r\nLast-Modified: Fri, 24 Jul 2026 19:49:54 GMT\r\nX-Log: X-Log\r\nX-M-Log: QNM:wldsg121;QNM3\r\nX-M-Reqid: y2MX7zeNm\r\nX-Qiniu-Zone: as0\r\nX-Qnm-Cache: Hit\r\nX-Reqid: 3OoAAAB5Qy5OB8cY\r\nX-Svr: IO\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":9407,"size_decoded":10162,"mime_type":"image/png","magic":"PNG image data, 203 x 203, 8-bit colormap, non-interlaced","md5":"185471093e247a5d7bfdad05b124f8d4","sha1":"f91af0df75ed208077183fc4d0e8903da6891e54","sha256":"57d7c471951ccf7d0d4cd3ed30122dac83f1d052e39dacacaee3e71117875547","sha512":"44d73d8f67e3739e7157aaa2524f6b89d0556d3d749ca4816128c2e57898f58ecb0494dcce60811dbf735c7244c2e6544716ddcc1dd95f8fa81b6f4aa538941b","ssdeep":"192:X50eHdyqNrxMqnoAcJfzbQ4RLKhmswK8buOKy:9HFxqxbQALKca4uOn","tlshash":"f812a0ebdc921941f9167cd252b5002490dd60902ec994ba77fdf432dc6858741f68ef","first_seen":"2025-04-15T05:18:26.173983Z","last_seen":"2026-07-31T05:07:38.916257Z","times_seen":130,"resource_available":false,"data":null}},"time_used":3411,"timings":{"blocked":3162,"dns":0,"connect":0,"send":0,"wait":249,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"photo.365live88.com/img/fb/team/a6a903b444014ae5b94f4b8688e513d7?win007=sell","fqdn":"photo.365live88.com","domain":"365live88.com","tld":"com"},"ip":{"addr":"154.41.93.240","port":443,"asn":174,"as":"COGENT-174","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://y42t.top/","date":"2026-07-31T00:10:42.576Z","timestamp":1785456642576,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"photo.365live88.com","organization":""},"issuer":{"commonName":"Encryption Everywhere DV TLS CA - G2","organization":"DigiCert Inc"},"validity":{"start":"Sat, 01 Nov 2025 00:00:00 GMT","end":"Sat, 31 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"45:76:43:9C:31:C5:89:A6:99:FD:9B:D8:6C:A9:3A:E6:2F:D6:E9:80","sha256":"73:27:CF:D8:8D:AC:95:46:00:5D:67:05:1E:70:22:3E:17:F0:94:78:CD:6F:A6:9C:C8:5F:B5:3B:75:60:3D:C8"}}},"request":{"raw":"GET /img/fb/team/a6a903b444014ae5b94f4b8688e513d7?win007=sell HTTP/1.1\r\nHost: photo.365live88.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://y42t.top/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: openresty\r\nDate: Fri, 31 Jul 2026 00:10:52 GMT\r\nContent-Type: image/png\r\nContent-Length: 12902\r\nConnection: keep-alive\r\nAccept-Ranges: bytes\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Expose-Headers: X-Log, X-Reqid\r\nAccess-Control-Max-Age: 2592000\r\nAge: 649\r\nCache-Control: public, max-age=31536000\r\nContent-Disposition: inline; filename=\"a6a903b444014ae5b94f4b8688e513d7\"; filename*=utf-8''a6a903b444014ae5b94f4b8688e513d7\r\nContent-Md5: lB30SJhFPFXDWcCZm2Nctw==\r\nContent-Transfer-Encoding: binary\r\nEtag: \"FvGSdAqcPE1L4v40EjOKHA60hvOF\"\r\nLast-Modified: Sat, 25 Jul 2026 19:18:37 GMT\r\nX-Log: X-Log\r\nX-M-Log: QNM:wldsg121;QNM3\r\nX-M-Reqid: lJCe4dTvs\r\nX-Qiniu-Zone: as0\r\nX-Qnm-Cache: Hit\r\nX-Reqid: lq4AAAAOPprGNscY\r\nX-Svr: IO\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":12902,"size_decoded":13656,"mime_type":"image/png","magic":"PNG image data, 472 x 472, 8-bit colormap, non-interlaced","md5":"941df44898453c55c359c0999b635cb7","sha1":"f192740a9c3c4d4be2fe3412338a1c0eb486f385","sha256":"ffac856725158fb6e21e44e5d8062044bc6681eb65798bf1a1f1de60104e019c","sha512":"f5b05ec9330f87996e595993751c07577301930df453c253251d07dd8251d9e0edb0801cf6db132829f401bff420de92e56e14426470da61c46132ed2d8fa2ec","ssdeep":"384:BgwCgz4MgL3h46KHs6wxrdW1UM9y24GXrBW2Dz/:2wCg4MgL3h46KMjrdkUM95Xl","tlshash":"be42c163bf4151601294e87c48c4129633aabec37f591bb3e0fb7928c9f2392d2504de","first_seen":"2026-01-31T20:09:29.90868Z","last_seen":"2026-07-31T12:41:47.064442Z","times_seen":24,"resource_available":false,"data":null}},"time_used":9567,"timings":{"blocked":9317,"dns":0,"connect":0,"send":0,"wait":250,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"y42t.top/img/vs.21f89f73.png","fqdn":"y42t.top","domain":"y42t.top","tld":"top"},"ip":{"addr":"154.39.104.138","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://y42t.top/","date":"2026-07-31T00:10:42.580Z","timestamp":1785456642580,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"p40f.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 10:44:09 GMT","end":"Tue, 20 Oct 2026 10:44:08 GMT"},"fingerprint":{"sha1":"41:09:2C:3F:FC:9C:25:A9:DB:51:15:BB:D1:5A:D8:01:DC:38:AD:F8","sha256":"49:3B:29:C7:5B:B6:12:CF:84:14:5B:09:42:7D:EF:AA:61:29:EC:A1:D5:40:B5:64:5C:F1:33:AB:9B:E1:13:4D"}}},"request":{"raw":"GET /img/vs.21f89f73.png HTTP/1.1\r\nHost: y42t.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://y42t.top/css/home.1781011881923.38488e2a.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 31 Jul 2026 00:10:43 GMT\r\nContent-Type: image/png\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Tue, 09 Jun 2026 13:37:10 GMT\r\nVary: Accept-Encoding\r\nETag: W/\"6a281706-51a\"\r\nCache-Control: public, max-age=2592000, immutable\r\nAccess-Control-Allow-Origin: *\r\nX-Custom-Check: true\r\nContent-Encoding: gzip\r\nServer: Nginx\r\nL-Safe: 1785456643=L21MjTcjPMoacLR4vpNVcs71ZpTSCD9pAjEcK72XJz4geELYb/dM7FIgfcGewCPiEiHBLTyE0/8OE0+Ussy/+H0+QJ0ieZl66nXxiX7hlrgta/bqlKy5K3ZjLS3f1v4h/F2vuy6GEAoffe4Wt8WE6NAsU33QhqR65Iggn1IfkuSp/Pz9elabEun/YDFlVnt3\r\nAge: 499193\r\nL-VIA: l1=TqoDVanjjr6wMExF\r\nL-VERSION: 1784720560\r\nL-Request-Id: 3ec519fb5824f27c074\r\nX-Cache-Status: HIT\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1306,"size_decoded":2037,"mime_type":"image/png","magic":"PNG image data, 70 x 28, 8-bit colormap, non-interlaced","md5":"41cff06a80e61ee3fcd32f7c29a6493e","sha1":"bb70bb0a3a0fde7a132788777aee629392c756e9","sha256":"3240fcea2e4168dc863b8aea602750e6a1fe11a557c18ac6a381781ef487746b","sha512":"fce7ff9f62b51c4f8994f0a8ec4a56f21570d0cd163471d99b357eb0a9a735c800b389c4a8a611ba441b208cea7eb483140042f5d11ef110b591c1c1898bbb8d","ssdeep":"","tlshash":"e921eaffe15b2c75ccb59bb3bc6c12656809582970866b137125e7588c539217f0c461","first_seen":"2025-08-29T11:05:53.184813Z","last_seen":"2026-07-31T12:41:15.194504Z","times_seen":2306,"resource_available":false,"data":null}},"time_used":1446,"timings":{"blocked":1143,"dns":0,"connect":0,"send":0,"wait":303,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-31","alert":"Sinkholed","trigger":"y42t.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-31","alert":"Phishing Block","trigger":"y42t.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"y42t.top/jumpto/img/https://rcf-img-hk.gasdg646fs224cn.com/202508/_webp_size1298x1156_13f1f273-ad7d-4854-b9a3-7f3eb8823296.png","fqdn":"y42t.top","domain":"y42t.top","tld":"top"},"ip":{"addr":"154.39.104.138","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://y42t.top/","date":"2026-07-31T00:10:42.866Z","timestamp":1785456642866,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"p40f.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 10:44:09 GMT","end":"Tue, 20 Oct 2026 10:44:08 GMT"},"fingerprint":{"sha1":"41:09:2C:3F:FC:9C:25:A9:DB:51:15:BB:D1:5A:D8:01:DC:38:AD:F8","sha256":"49:3B:29:C7:5B:B6:12:CF:84:14:5B:09:42:7D:EF:AA:61:29:EC:A1:D5:40:B5:64:5C:F1:33:AB:9B:E1:13:4D"}}},"request":{"raw":"GET /jumpto/img/https://rcf-img-hk.gasdg646fs224cn.com/202508/_webp_size1298x1156_13f1f273-ad7d-4854-b9a3-7f3eb8823296.png HTTP/1.1\r\nHost: y42t.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://y42t.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 31 Jul 2026 00:10:47 GMT\r\nContent-Type: image/webp\r\nContent-Length: 78902\r\nConnection: keep-alive\r\netag: \"5cae9008e22ccc62c09f38e52e664de6\"\r\nLast-Modified: Wed, 10 Dec 2025 11:49:58 GMT\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bqAzpHRt5587LxWY5UntUd9wqpEr%2BOv1yR%2BHNMccSmi7CjVU9ld7JbLC%2BcoXQrONJKNDxj%2BWr%2BsjGF2bPPZZTbF0K6ZE0BBERe6vNgQmeDeR4yRPkv9nZ8pIJDn%2BL3AvgR51sA4xNGsErQIhvOVXOa4%3D\"}]}\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nAge: 499203\r\ncf-cache-status: HIT\r\nCF-RAY: a208c63ace47dd5d-HKG\r\nalt-svc: h3=\":443\"; ma=86400\r\nCache-Control: public, max-age=2592000, immutable, public, max-age=2592000, immutable\r\nAccess-Control-Allow-Origin: *\r\nX-Custom-Check: true\r\nServer: Nginx\r\nL-Safe: 1785456647=pwbyu29rM0HEK42bpjFMXQZZ8s1IzzkT40daNMbcT90Ub0zpvrQ+kBR7N9vkAvLpdcGVCAkYTtjHzFt3rikpG2u0ViQwOg9Y/d8oh3QnzrskfHJpkQ3k6DdsyXdsoVGvpU7l+6O6Z96TYcnIdvgBPUL8UMfWMnVf++Fvg3TWLhL2ZP4it9BY8MKVve4d74hd\r\nL-VIA: l1=TqoDVanjjr6wMExF\r\nL-VERSION: 1784720560\r\nL-Request-Id: 3ec919fb5825bbfc0a3\r\nX-Cache-Status: HIT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":78902,"size_decoded":80061,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"5cae9008e22ccc62c09f38e52e664de6","sha1":"a1f17e80566874fe9706d17a46a2d46f82bb4334","sha256":"3148a6d8c30b8b20d81c8e0873dc24170d6be114b7e3570870da05e12202d770","sha512":"49b2777a4621bd265be1b02773561be3504f5d1dd0c104f8ddd0781e36791a1f12be3093743baa2a7d21c70766e76f7d5d475efe312d725a1959acf4a1625551","ssdeep":"1536:blYjfVyd06MgAmxW/kYHFfuwKFhzwOxl3juR+GfDIroclZ:bc606u75s1wMGlfTclZ","tlshash":"5673012aa243088ae0f71039184a6be7f90d11a1e7e85fef84e7570bbe0df413d65e50","first_seen":"2026-04-24T23:10:16.877965Z","last_seen":"2026-07-31T12:41:47.118711Z","times_seen":903,"resource_available":false,"data":null}},"time_used":4381,"timings":{"blocked":4069,"dns":0,"connect":0,"send":0,"wait":294,"receive":18,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-31","alert":"Phishing Block","trigger":"y42t.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-31","alert":"Sinkholed","trigger":"y42t.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"y42t.top/jumpto/img/https://rcf-img-hk.gasdg646fs224cn.com/202508/_webp_size1298x1156_f26e0b0b-19a9-470f-90cf-ab38984671ab.png","fqdn":"y42t.top","domain":"y42t.top","tld":"top"},"ip":{"addr":"154.39.104.138","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://y42t.top/","date":"2026-07-31T00:10:42.868Z","timestamp":1785456642868,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"p40f.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 10:44:09 GMT","end":"Tue, 20 Oct 2026 10:44:08 GMT"},"fingerprint":{"sha1":"41:09:2C:3F:FC:9C:25:A9:DB:51:15:BB:D1:5A:D8:01:DC:38:AD:F8","sha256":"49:3B:29:C7:5B:B6:12:CF:84:14:5B:09:42:7D:EF:AA:61:29:EC:A1:D5:40:B5:64:5C:F1:33:AB:9B:E1:13:4D"}}},"request":{"raw":"GET /jumpto/img/https://rcf-img-hk.gasdg646fs224cn.com/202508/_webp_size1298x1156_f26e0b0b-19a9-470f-90cf-ab38984671ab.png HTTP/1.1\r\nHost: y42t.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://y42t.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 31 Jul 2026 00:10:47 GMT\r\nContent-Type: image/webp\r\nContent-Length: 96286\r\nConnection: keep-alive\r\netag: \"a7ec31389e5a634d92383c733b498506\"\r\nLast-Modified: Wed, 10 Dec 2025 11:50:21 GMT\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ks5Gh1jsEW0I9ddIqULKjHzxmxlV%2BlCz13JtOMfUeRhL%2BziFA1TBotFvODHSNopxgA1V3%2B8lJvzuemFMDaDmGV%2BJt4Q2ULLgoxWyyzHd%2F1vniQrO1CcoWIQutgVF3NmAzqUWPstP0pp5Wi6WxqNql18%3D\"}]}\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nAge: 499203\r\ncf-cache-status: HIT\r\nCF-RAY: a208c63e7e903947-HKG\r\nalt-svc: h3=\":443\"; ma=86400\r\nCache-Control: public, max-age=2592000, immutable, public, max-age=2592000, immutable\r\nAccess-Control-Allow-Origin: *\r\nX-Custom-Check: true\r\nServer: Nginx\r\nL-Safe: 1785456647=pwbyu29rM0HEK42bpjFMXQZZ8s1IzzkT40daNMbcT90Ub0zpvrQ+kBR7N9vkAvLpdcGVCAkYTtjHzFt3rikpG2u0ViQwOg9Y/d8oh3QnzrskfHJpkQ3k6DdsyXdsoVGvpU7l+6O6Z96TYcnIdvgBPUL8UMfWMnVf++Fvg3TWLhL2ZP4it9BY8MKVve4d74hd\r\nL-VIA: l1=TqoDVanjjr6wMExF\r\nL-VERSION: 1784720560\r\nL-Request-Id: 3ec519fb5825c38c07e\r\nX-Cache-Status: HIT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":96286,"size_decoded":97443,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"a7ec31389e5a634d92383c733b498506","sha1":"4386adc654865c1594ba0ac604ac3a4177a84b7e","sha256":"978643b0ac1ecb3edf679a74610a1a0fdaebb02505e0dc607a15e56b1bd5212c","sha512":"222ad2805e8bd8957e696920a81cdb86bbf7a0bd6720b2cb67ae89758558331b6842fcdf208560ba355a522bcf0b177a7b124ff3d2c4db25c1fd8b4eebe5c74f","ssdeep":"1536:s9n08pg3G3xErU4qzJYMDLc0OzGR5AGsSrbY4V9SrXLDoJgG4oaUHG0S/F:knptxviMDCzGRyXSrs4VQDocoxHNS/F","tlshash":"079312e74a42ba67f808b1319ea01b6ef3d7b43f09ac1a6d47599a7c4831bc4458137f","first_seen":"2026-04-24T23:10:16.718761Z","last_seen":"2026-07-31T12:36:18.773044Z","times_seen":915,"resource_available":false,"data":null}},"time_used":4524,"timings":{"blocked":4191,"dns":0,"connect":0,"send":0,"wait":306,"receive":27,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-31","alert":"Phishing Block","trigger":"y42t.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-31","alert":"Sinkholed","trigger":"y42t.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"y42t.top/js/13575.1781011881923.cda1d494.js","fqdn":"y42t.top","domain":"y42t.top","tld":"top"},"ip":{"addr":"154.39.104.138","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://y42t.top/","date":"2026-07-31T00:10:38.092Z","timestamp":1785456638092,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"p40f.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 10:44:09 GMT","end":"Tue, 20 Oct 2026 10:44:08 GMT"},"fingerprint":{"sha1":"41:09:2C:3F:FC:9C:25:A9:DB:51:15:BB:D1:5A:D8:01:DC:38:AD:F8","sha256":"49:3B:29:C7:5B:B6:12:CF:84:14:5B:09:42:7D:EF:AA:61:29:EC:A1:D5:40:B5:64:5C:F1:33:AB:9B:E1:13:4D"}}},"request":{"raw":"GET /js/13575.1781011881923.cda1d494.js HTTP/1.1\r\nHost: y42t.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://y42t.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 31 Jul 2026 00:10:39 GMT\r\nContent-Type: application/javascript\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Tue, 09 Jun 2026 13:37:11 GMT\r\nVary: Accept-Encoding\r\nETag: W/\"6a281707-2f964\"\r\nCache-Control: public, max-age=31536000, immutable\r\nAccess-Control-Allow-Origin: *\r\nX-Custom-Check: true\r\nContent-Encoding: gzip\r\nServer: Nginx\r\nL-Safe: 1785456639=ZQ2Zoq/cRP01EUwFViLw2I2TTD7YXn3fOcUs+xcjh4jH3sEo30QmYTa3wyU19juAAswcF1zK33qXVdu/2wEQssIQmAwdFBkC9e1CbV9WPKEBdbscbAAIXVFwwInqwSqPfxbfTB5XlXMMnezbEIdI/APkRTYkPOXTT5T1KnbKAZgGBnmhack9avnR9rigFkDp\r\nL-VIA: l1=TqoDVanjjr6wMExF\r\nL-VERSION: 1784720560\r\nL-Request-Id: 3ec519fb5823e82c06b\r\nX-Cache-Status: BYPASS\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":194916,"size_decoded":60169,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65535), with no line terminators","md5":"65e5fffbcacf52710ad963a4aeede3be","sha1":"f9c16a3c86649aeacf18e736faacff0cf78192e7","sha256":"36f42498ee253b0d1d5e7ec8bdf406f05c4c91e72f64169b1ff67435d2069099","sha512":"96e8263c115ca75ff63f6ce70ba8ad5af370662f86c2f95a8960a5aa5a30ce4134fa01d7fbd1694ce37f111b69e3e418f0542a7ab1bae4cec570c8c3d8d08986","ssdeep":"1536:917BBHFeKRKp+3ELSPtj6x2DgJoG7PIDmj9VA+s69JAFdE6WIzl+Ik1+eXMa7a4H:7jHoKRKphCnDgJoec+IDWIzls+7Xr0X7","tlshash":"23141a84764170b8c396a165322f601ae22f789650dd9c24f3789ba47f7470df26fabc","first_seen":"2026-06-12T19:29:57.266361Z","last_seen":"2026-07-31T12:41:47.042675Z","times_seen":967,"resource_available":true,"data":null}},"time_used":1807,"timings":{"blocked":1371,"dns":0,"connect":0,"send":0,"wait":340,"receive":96,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-31","alert":"Phishing Block","trigger":"y42t.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-31","alert":"Sinkholed","trigger":"y42t.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"photo.365live88.com/img/fb/team/0ff133d33bbd4fc88ff57f311dedb4ed?win007=sell","fqdn":"photo.365live88.com","domain":"365live88.com","tld":"com"},"ip":{"addr":"154.41.93.240","port":443,"asn":174,"as":"COGENT-174","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://y42t.top/","date":"2026-07-31T00:10:42.451Z","timestamp":1785456642451,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"photo.365live88.com","organization":""},"issuer":{"commonName":"Encryption Everywhere DV TLS CA - G2","organization":"DigiCert Inc"},"validity":{"start":"Sat, 01 Nov 2025 00:00:00 GMT","end":"Sat, 31 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"45:76:43:9C:31:C5:89:A6:99:FD:9B:D8:6C:A9:3A:E6:2F:D6:E9:80","sha256":"73:27:CF:D8:8D:AC:95:46:00:5D:67:05:1E:70:22:3E:17:F0:94:78:CD:6F:A6:9C:C8:5F:B5:3B:75:60:3D:C8"}}},"request":{"raw":"GET /img/fb/team/0ff133d33bbd4fc88ff57f311dedb4ed?win007=sell HTTP/1.1\r\nHost: photo.365live88.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://y42t.top/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: openresty\r\nDate: Fri, 31 Jul 2026 00:10:43 GMT\r\nContent-Type: image/png\r\nContent-Length: 28870\r\nConnection: keep-alive\r\nAccept-Ranges: bytes\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Expose-Headers: X-Log, X-Reqid\r\nAccess-Control-Max-Age: 2592000\r\nAge: 1392\r\nCache-Control: public, max-age=31536000\r\nContent-Disposition: inline; filename=\"0ff133d33bbd4fc88ff57f311dedb4ed\"; filename*=utf-8''0ff133d33bbd4fc88ff57f311dedb4ed\r\nContent-Md5: P6ga/G17OYx5i3ZmNKiGeQ==\r\nContent-Transfer-Encoding: binary\r\nEtag: \"FsOS5rTeZpN9qKlKfgpJMAZJHFNy\"\r\nLast-Modified: Fri, 24 Jul 2026 19:49:36 GMT\r\nX-Log: X-Log\r\nX-M-Log: QNM:wldsg121;QNM3\r\nX-M-Reqid: IpR35h35Z\r\nX-Qiniu-Zone: as0\r\nX-Qnm-Cache: Hit\r\nX-Reqid: 1goAAADZWlUXNscY\r\nX-Svr: IO\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":28870,"size_decoded":29625,"mime_type":"image/png","magic":"PNG image data, 180 x 180, 8-bit/color RGBA, non-interlaced","md5":"3fa81afc6d7b398c798b766634a88679","sha1":"c392e6b4de66937da8a94a7e0a493006491c5372","sha256":"f37e6f96fd92b1abfe967e846f839f9d4d34660b6981e9a58e5fed277256a6f4","sha512":"3223d87ef5ff6899a14b79ce37e47ef2044584e8e40df321a55104d585ee83fbb766416fb446238c49488f457ce1c48e0b70a84f89fc22f548aeb322006a8fe3","ssdeep":"768:htEcdKvaY2odVTlKHDww7RkZGUozSpCSG4l8Ixg:hmcdKvaY2eu8HYUIp4lw","tlshash":"b9d2e187e539663009e531f590f4aa26a0b2c5da5b3c24e48d52fb1a4bcf7628303777","first_seen":"2025-09-25T04:27:51.290345Z","last_seen":"2026-07-31T00:12:52.503933Z","times_seen":5,"resource_available":false,"data":null}},"time_used":1870,"timings":{"blocked":-1,"dns":619,"connect":238,"send":0,"wait":317,"receive":214,"ssl":482},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"y42t.top/jumpto/img/https://rcf-img-hk.gasdg646fs224cn.com/gpmaster/_webp_size328x442_392325e1-efd7-4953-83f1-410dea55a03c.png","fqdn":"y42t.top","domain":"y42t.top","tld":"top"},"ip":{"addr":"154.39.104.138","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://y42t.top/","date":"2026-07-31T00:10:42.848Z","timestamp":1785456642848,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"p40f.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 10:44:09 GMT","end":"Tue, 20 Oct 2026 10:44:08 GMT"},"fingerprint":{"sha1":"41:09:2C:3F:FC:9C:25:A9:DB:51:15:BB:D1:5A:D8:01:DC:38:AD:F8","sha256":"49:3B:29:C7:5B:B6:12:CF:84:14:5B:09:42:7D:EF:AA:61:29:EC:A1:D5:40:B5:64:5C:F1:33:AB:9B:E1:13:4D"}}},"request":{"raw":"GET /jumpto/img/https://rcf-img-hk.gasdg646fs224cn.com/gpmaster/_webp_size328x442_392325e1-efd7-4953-83f1-410dea55a03c.png HTTP/1.1\r\nHost: y42t.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://y42t.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 31 Jul 2026 00:10:46 GMT\r\nContent-Type: image/webp\r\nContent-Length: 13178\r\nConnection: keep-alive\r\netag: \"38581a2c1fb9355639ffb5a31aa0642d\"\r\nLast-Modified: Tue, 02 Dec 2025 14:07:28 GMT\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nAge: 499204\r\ncf-cache-status: HIT\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zF0ZeXvicH2acFffgLsqt4SA8RGRwxIiMhmKLDsLIVbzY8tIe5Jb121XFrLtge9jZnFmKjUXXIhkfJ8%2FjDPfJNFEieJpZ717HHfMdIpV7SF%2B3JHBqi%2Fb1vTg5ca7n0ADqldfAZGk8wu%2FJU8Ft4vvA%2B8%3D\"}]}\r\nCF-RAY: a208c62c89f0095e-HKG\r\nalt-svc: h3=\":443\"; ma=86400\r\nCache-Control: public, max-age=2592000, immutable, public, max-age=2592000, immutable\r\nAccess-Control-Allow-Origin: *\r\nX-Custom-Check: true\r\nServer: Nginx\r\nL-Safe: 1785456646=EMBgc894QAdP6slbLJsiNGYFcXUmrvQIWKh5BYYK6Qj4fqRyTGb/Xbwkd279GHpNIUNxmrA5BLARmTn3BBDanv5J4PcdpRxfVwUjHlMDvqiZAET3U1COvNHjyZWcIPWzQSTxYljkuIh13EY2sibpSpVrTubzP7vT5r508KhivSQ1oVznby71Ayyz5cTYVqWG\r\nL-VIA: l1=TqoDVanjjr6wMExF\r\nL-VERSION: 1784720560\r\nL-Request-Id: 3ec119fb5825842c2c7\r\nX-Cache-Status: HIT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":13178,"size_decoded":14335,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"38581a2c1fb9355639ffb5a31aa0642d","sha1":"dc4eee50f114bf0f120b50766fd207ec5522e9dd","sha256":"88d44a033517e73fcf97528b670ccfa16743d61b2c0c7deca8d7fc247e2595d3","sha512":"e1757677642582409db9344003b4c9454757755bf157f2491aabdf2b1c454d3d0073f4b0012faa1e9681397e7004428f087b8a1e338f3812137007909ed9ed89","ssdeep":"384:yPsoyVYHcsbr84JZQ4zAogmntgxn7uxj8+4n:toyVUbrXDQ4UogKWlWQ+u","tlshash":"3542cf151f4044575ecd7aeb108a5ebcc9450918e63cac716493bc388ef09bf4aeb6ed","first_seen":"2026-04-24T23:10:16.737591Z","last_seen":"2026-07-31T12:36:18.749896Z","times_seen":906,"resource_available":false,"data":null}},"time_used":3499,"timings":{"blocked":3190,"dns":0,"connect":0,"send":0,"wait":309,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-31","alert":"Sinkholed","trigger":"y42t.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-31","alert":"Phishing Block","trigger":"y42t.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"y42t.top/config/gd.js","fqdn":"y42t.top","domain":"y42t.top","tld":"top"},"ip":{"addr":"154.39.104.138","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://y42t.top/","date":"2026-07-31T00:10:38.072Z","timestamp":1785456638072,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"p40f.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 10:44:09 GMT","end":"Tue, 20 Oct 2026 10:44:08 GMT"},"fingerprint":{"sha1":"41:09:2C:3F:FC:9C:25:A9:DB:51:15:BB:D1:5A:D8:01:DC:38:AD:F8","sha256":"49:3B:29:C7:5B:B6:12:CF:84:14:5B:09:42:7D:EF:AA:61:29:EC:A1:D5:40:B5:64:5C:F1:33:AB:9B:E1:13:4D"}}},"request":{"raw":"GET /config/gd.js HTTP/1.1\r\nHost: y42t.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://y42t.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 31 Jul 2026 00:10:38 GMT\r\nContent-Type: application/javascript\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Tue, 09 Jun 2026 13:37:11 GMT\r\nVary: Accept-Encoding\r\nETag: W/\"6a281707-4420\"\r\nCache-Control: public, max-age=31536000, immutable\r\nAccess-Control-Allow-Origin: *\r\nX-Custom-Check: true\r\nContent-Encoding: gzip\r\nServer: Nginx\r\nL-Safe: 1785456638=spfqpn6fY4y3fZtY0H6j2NTv25wzT5EQ1wj7koQgMzA0vWwFcicuKIMZGIdtkkNSeWsrScNU4RjxFciulIcuwtx/yeqqcUPJs5itgwA/VIspYspfgKoNZCVd5ReH5RnmI+JuS7nmr+CJ2mFhP15XL5m4D8uR3ysrOzNOMy1CJ0v2fRXCOc9HkLd5F/w10c5w\r\nL-VIA: l1=TqoDVanjjr6wMExF\r\nL-VERSION: 1784720560\r\nL-Request-Id: 3ec119fb5823b6fc2ae\r\nX-Cache-Status: BYPASS\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":17440,"size_decoded":5524,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"368318100a3c0f64373230a250953d5a","sha1":"6e0d91639cafd23f1b22aecee332da83c70b93ea","sha256":"dffc9b203a19b9e70363f75f737b7afe2164d6b8c045800d4dd7931d9093aff4","sha512":"91077ca792821795a816a0ee1a9cef242bf2915c02402706c7bd5c027c62f4bc52517b6a5e3db9f4b873e5a3c9d652758cc277c1f5ba07dc12e0d69b4f6e9eeb","ssdeep":"384:bJA61XVpi5LH4NmeJPXwXkQdcAwR0Nw3zzbSGwYg1C:bJA6BZX+oJjzzgY","tlshash":"80721f4d68f7905345a3b03c8bafa114b5388643181cde457e9ce394af6843d97babdc","first_seen":"2026-05-19T02:14:56.346288Z","last_seen":"2026-07-31T12:41:46.997243Z","times_seen":1106,"resource_available":true,"data":null}},"time_used":966,"timings":{"blocked":-1,"dns":0,"connect":301,"send":0,"wait":354,"receive":0,"ssl":311},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-31","alert":"Phishing Block","trigger":"y42t.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-31","alert":"Sinkholed","trigger":"y42t.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"photo.365live88.com/img/fb/team/3eb49e4ec6744898ac0c62575dcca809?win007=sell","fqdn":"photo.365live88.com","domain":"365live88.com","tld":"com"},"ip":{"addr":"154.41.93.240","port":443,"asn":174,"as":"COGENT-174","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://y42t.top/","date":"2026-07-31T00:10:42.463Z","timestamp":1785456642463,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"photo.365live88.com","organization":""},"issuer":{"commonName":"Encryption Everywhere DV TLS CA - G2","organization":"DigiCert Inc"},"validity":{"start":"Sat, 01 Nov 2025 00:00:00 GMT","end":"Sat, 31 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"45:76:43:9C:31:C5:89:A6:99:FD:9B:D8:6C:A9:3A:E6:2F:D6:E9:80","sha256":"73:27:CF:D8:8D:AC:95:46:00:5D:67:05:1E:70:22:3E:17:F0:94:78:CD:6F:A6:9C:C8:5F:B5:3B:75:60:3D:C8"}}},"request":{"raw":"GET /img/fb/team/3eb49e4ec6744898ac0c62575dcca809?win007=sell HTTP/1.1\r\nHost: photo.365live88.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://y42t.top/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: openresty\r\nDate: Fri, 31 Jul 2026 00:10:44 GMT\r\nContent-Type: image/png\r\nContent-Length: 11926\r\nConnection: keep-alive\r\nAccept-Ranges: bytes\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Expose-Headers: X-Log, X-Reqid\r\nAccess-Control-Max-Age: 2592000\r\nAge: 86138\r\nCache-Control: public, max-age=31536000\r\nContent-Disposition: inline; filename=\"3eb49e4ec6744898ac0c62575dcca809\"; filename*=utf-8''3eb49e4ec6744898ac0c62575dcca809\r\nContent-Md5: sHXTUnlZ5PsmR9krRrnThg==\r\nContent-Transfer-Encoding: binary\r\nEtag: \"FrTYM2Vf_Vk8HhdbaOUMvVkOeNo2\"\r\nLast-Modified: Fri, 24 Jul 2026 19:49:39 GMT\r\nX-Log: X-Log\r\nX-M-Log: QNM:wldsg119;QNM3\r\nX-M-Reqid: dmdPVMxMT\r\nX-Qiniu-Zone: as0\r\nX-Qnm-Cache: Hit\r\nX-Reqid: ooAAAAABVj8E6cYY\r\nX-Svr: IO\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":11926,"size_decoded":12682,"mime_type":"image/png","magic":"PNG image data, 180 x 180, 8-bit/color RGBA, non-interlaced","md5":"b075d3527959e4fb2647d92b46b9d386","sha1":"b4d833655ffd593c1e175b68e50cbd590e78da36","sha256":"241cd7f864e1e54f728bc5229abf98adbd6457058299c7e02f75138e54635b82","sha512":"55834c625509877d01a259d294c20f2c68b4b0729e12d48b2ed4ba45bb20c2d774d27ddbdcf56a9257dc2a442b42799b2229eddbe9c4f3c2d053b3cc81935eac","ssdeep":"192:YCZXW4hij8S2UBVFLsgKxWtE0FogcglY4GNroKPfmWiuP+KCcWdNehm3BGahiMkc:SGij83UBVFLpEGogloTfmWXMcU4AxGrc","tlshash":"7b32bf45af60b6051b30cc8effa887ba56b59319f7ad4d85488b109c9089a2f0cd66ed","first_seen":"2025-01-29T13:39:14.615916Z","last_seen":"2026-07-31T00:12:52.463171Z","times_seen":133,"resource_available":false,"data":null}},"time_used":2272,"timings":{"blocked":1964,"dns":0,"connect":0,"send":0,"wait":308,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"photo.365live88.com/img/fb/team/094b4d13fc48463fbce42be0e1171a73?win007=sell","fqdn":"photo.365live88.com","domain":"365live88.com","tld":"com"},"ip":{"addr":"154.41.93.240","port":443,"asn":174,"as":"COGENT-174","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://y42t.top/","date":"2026-07-31T00:10:42.465Z","timestamp":1785456642465,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"photo.365live88.com","organization":""},"issuer":{"commonName":"Encryption Everywhere DV TLS CA - G2","organization":"DigiCert Inc"},"validity":{"start":"Sat, 01 Nov 2025 00:00:00 GMT","end":"Sat, 31 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"45:76:43:9C:31:C5:89:A6:99:FD:9B:D8:6C:A9:3A:E6:2F:D6:E9:80","sha256":"73:27:CF:D8:8D:AC:95:46:00:5D:67:05:1E:70:22:3E:17:F0:94:78:CD:6F:A6:9C:C8:5F:B5:3B:75:60:3D:C8"}}},"request":{"raw":"GET /img/fb/team/094b4d13fc48463fbce42be0e1171a73?win007=sell HTTP/1.1\r\nHost: photo.365live88.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://y42t.top/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: openresty\r\nDate: Fri, 31 Jul 2026 00:10:44 GMT\r\nContent-Type: image/png\r\nContent-Length: 22844\r\nConnection: keep-alive\r\nAccept-Ranges: bytes\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Expose-Headers: X-Log, X-Reqid\r\nAccess-Control-Max-Age: 2592000\r\nAge: 85235\r\nCache-Control: public, max-age=31536000\r\nContent-Disposition: inline; filename=\"094b4d13fc48463fbce42be0e1171a73\"; filename*=utf-8''094b4d13fc48463fbce42be0e1171a73\r\nContent-Md5: AIDf5iEC4oP3xOe0Yq054w==\r\nContent-Transfer-Encoding: binary\r\nEtag: \"Fl_T_ISgv48y_fFX5Xpp6KntP7eL\"\r\nLast-Modified: Fri, 24 Jul 2026 19:49:40 GMT\r\nX-Log: X-Log\r\nX-M-Log: QNM:wldsg119;QNM3\r\nX-M-Reqid: KvvsIHGY1\r\nX-Qiniu-Zone: as0\r\nX-Qnm-Cache: Hit\r\nX-Reqid: P3wAAACy8IfW6cYY\r\nX-Svr: IO\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":22844,"size_decoded":23600,"mime_type":"image/png","magic":"PNG image data, 180 x 180, 8-bit/color RGBA, non-interlaced","md5":"0080dfe62102e283f7c4e7b462ad39e3","sha1":"5fd3fc84a0bf8f32fdf157e57a69e8a9ed3fb78b","sha256":"9f70180f904500215e36b413e6517694e5bd19d72a5808f9205c57e5fecd547d","sha512":"0241631b90d1a7881095aaf9fdf42c08741e29646a1ae01c3166dd76143358a828a2cbc29b0156e1e208b93a11c851e6fb63009daf876c0b8f62d0ea8e50861e","ssdeep":"384:z3oRyTfOoOTsjuIvsv/s9gUnM9oydmdKznqPZX0cHz1K29K:z3oYmXojuIm/k7M9vOKznqPZXFHzo29K","tlshash":"39a2e1bf80c4c081a6a146a1f76fe5a2f603d57d8078344e5fa2781797941ccab77c27","first_seen":"2025-06-15T20:13:29.958411Z","last_seen":"2026-07-31T00:12:52.510144Z","times_seen":129,"resource_available":false,"data":null}},"time_used":2374,"timings":{"blocked":2077,"dns":0,"connect":0,"send":0,"wait":279,"receive":18,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"y42t.top/jumpto/img/https://rcf-img-hk.gasdg646fs224cn.com/202606/_webp_size1298x1156_317f68a9-d367-4c78-837b-bba9a02cccbd.png","fqdn":"y42t.top","domain":"y42t.top","tld":"top"},"ip":{"addr":"154.39.104.138","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://y42t.top/","date":"2026-07-31T00:10:42.845Z","timestamp":1785456642845,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"p40f.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 10:44:09 GMT","end":"Tue, 20 Oct 2026 10:44:08 GMT"},"fingerprint":{"sha1":"41:09:2C:3F:FC:9C:25:A9:DB:51:15:BB:D1:5A:D8:01:DC:38:AD:F8","sha256":"49:3B:29:C7:5B:B6:12:CF:84:14:5B:09:42:7D:EF:AA:61:29:EC:A1:D5:40:B5:64:5C:F1:33:AB:9B:E1:13:4D"}}},"request":{"raw":"GET /jumpto/img/https://rcf-img-hk.gasdg646fs224cn.com/202606/_webp_size1298x1156_317f68a9-d367-4c78-837b-bba9a02cccbd.png HTTP/1.1\r\nHost: y42t.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://y42t.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 31 Jul 2026 00:10:46 GMT\r\nContent-Type: image/webp\r\nContent-Length: 104872\r\nConnection: keep-alive\r\netag: \"7225fe319e0063733dc28dc3cc064ba5\"\r\nLast-Modified: Tue, 09 Jun 2026 11:46:19 GMT\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nAge: 499191\r\ncf-cache-status: HIT\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AFM2vcSWBek9nAZ%2F82pi7aE06SPnRixa5kattbgAC%2F5OeBgzPcDrJrEqiyqv4Yet3lfdeGG1vfDduvJBNQ8J5l1DmFhb8dQQhblXLFYLzjljl6hBPYUjaEcy7mYt8XFEzUf8TsEg5vEhbXXDqKzzhA0%3D\"}]}\r\nCF-RAY: a208c6830bf7b433-HKG\r\nalt-svc: h3=\":443\"; ma=86400\r\nCache-Control: public, max-age=2592000, immutable, public, max-age=2592000, immutable\r\nAccess-Control-Allow-Origin: *\r\nX-Custom-Check: true\r\nServer: Nginx\r\nL-Safe: 1785456646=EMBgc894QAdP6slbLJsiNGYFcXUmrvQIWKh5BYYK6Qj4fqRyTGb/Xbwkd279GHpNIUNxmrA5BLARmTn3BBDanv5J4PcdpRxfVwUjHlMDvqiZAET3U1COvNHjyZWcIPWzQSTxYljkuIh13EY2sibpSpVrTubzP7vT5r508KhivSQ1oVznby71Ayyz5cTYVqWG\r\nL-VIA: l1=TqoDVanjjr6wMExF\r\nL-VERSION: 1784720560\r\nL-Request-Id: 3ec919fb5825826c09c\r\nX-Cache-Status: HIT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":104872,"size_decoded":106024,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"7225fe319e0063733dc28dc3cc064ba5","sha1":"3ace9d566c5ba5d7547e966b52a7718aba214871","sha256":"8512dfacfdccfbee2dcd4b545bfcf151229cf83d6f5ea6d4762d9fa1dbb52724","sha512":"6fc35795ed02e0af6d9e8593948460d2d159871ef64d68fcdb6c3849e1d04e095df2f083e371ad185dec337852c56fe8772e51ba5c23127db88ca78d2b887c20","ssdeep":"1536:Lbtnypjj4aiFU6CcwUrT7oxzAjzIVbxV6FscOAlMIUZdH6/8JEfuI1Q/QY:J8jpAU6iUn7oxzAjzIVbOVlhUZdH2T1","tlshash":"47a312041207b12ef9eecc769e4f92c16d190c357cde1a676abb74c8e206e174d4e8ac","first_seen":"2026-06-12T19:29:57.257753Z","last_seen":"2026-07-31T12:36:18.665112Z","times_seen":570,"resource_available":false,"data":null}},"time_used":3488,"timings":{"blocked":3169,"dns":0,"connect":0,"send":0,"wait":293,"receive":26,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-31","alert":"Phishing Block","trigger":"y42t.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-31","alert":"Sinkholed","trigger":"y42t.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"y42t.top/jumpto/img/https://rcf-img-hk.gasdg646fs224cn.com/202503/_webp_size649x578_b82399e1-d771-428f-9811-f7e15cda0f21.png","fqdn":"y42t.top","domain":"y42t.top","tld":"top"},"ip":{"addr":"154.39.104.138","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://y42t.top/","date":"2026-07-31T00:10:42.883Z","timestamp":1785456642883,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"p40f.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 10:44:09 GMT","end":"Tue, 20 Oct 2026 10:44:08 GMT"},"fingerprint":{"sha1":"41:09:2C:3F:FC:9C:25:A9:DB:51:15:BB:D1:5A:D8:01:DC:38:AD:F8","sha256":"49:3B:29:C7:5B:B6:12:CF:84:14:5B:09:42:7D:EF:AA:61:29:EC:A1:D5:40:B5:64:5C:F1:33:AB:9B:E1:13:4D"}}},"request":{"raw":"GET /jumpto/img/https://rcf-img-hk.gasdg646fs224cn.com/202503/_webp_size649x578_b82399e1-d771-428f-9811-f7e15cda0f21.png HTTP/1.1\r\nHost: y42t.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://y42t.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 31 Jul 2026 00:10:48 GMT\r\nContent-Type: image/webp\r\nContent-Length: 103194\r\nConnection: keep-alive\r\netag: \"f704aac32ea52a31d6fc3ed2cf265934\"\r\nLast-Modified: Sat, 06 Dec 2025 06:26:28 GMT\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BGoEB3qFunUWTWlL563%2FoQ60BdfwuuEsxkBtgu2Hg5Dgt3culhY22VJMpj1O7Fn9EhVRTjP4WOKdECHE5dQW15qJw7rRjoSk6etoR40AYglRRCafvzG8Xv148c7E95OXSyUjDO0bNiy8FdY1pTFplNE%3D\"}]}\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nAge: 499200\r\ncf-cache-status: HIT\r\nCF-RAY: a208c6579f29dd44-HKG\r\nalt-svc: h3=\":443\"; ma=86400\r\nCache-Control: public, max-age=2592000, immutable, public, max-age=2592000, immutable\r\nAccess-Control-Allow-Origin: *\r\nX-Custom-Check: true\r\nServer: Nginx\r\nL-Safe: 1785456648=Z7fxofmZ9hv3/XQ5t4frSKj942TDDEVXgFNewEpAWWZeSSGmfBEq5p68Wd3/3y67+UP5RiFuBM1NHhhqN9RGX44j5RrNYq5QVDzdwAN37T4mRc2TwqScY+zJAmvwDFiSdBQZRKjiyZLBbVL6KisnflY7oB9woowAE/HfHmrE5yoCQfCsCgc03AQt5IVZ52aB\r\nL-VIA: l1=TqoDVanjjr6wMExF\r\nL-VERSION: 1784720560\r\nL-Request-Id: 3ec919fb5825fe5c0a9\r\nX-Cache-Status: HIT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":103194,"size_decoded":104344,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"f704aac32ea52a31d6fc3ed2cf265934","sha1":"45282832d890a7ff431a3e080bf45820996e1377","sha256":"0177775ecd75f420bfdca35ff7886a7e7c2be56137652084986057b7e1566a09","sha512":"6f0b988c4ffe01ea848e549c9856a39d00f127a59b0bee21b29601f055eb98ef5fd349d6b7290257bb3845ecc7ea55a6d103173ba7e689c1d4303fe1c0e8ff9e","ssdeep":"3072:CgsNR4fWsUvdSDU+qlX2KtmzD/CbIGM1:Cg8R4fWSVKYibIG","tlshash":"1ea312850993c5f1bb7598259f7acb20a51a7d70f392ef21cfa94f3ec0b50799a14242","first_seen":"2026-04-24T23:10:16.761671Z","last_seen":"2026-07-31T12:41:47.15567Z","times_seen":1012,"resource_available":false,"data":null}},"time_used":5530,"timings":{"blocked":5130,"dns":0,"connect":0,"send":0,"wait":314,"receive":86,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-31","alert":"Phishing Block","trigger":"y42t.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-31","alert":"Sinkholed","trigger":"y42t.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"y42t.top/js/60024.1781011881923.e9a203dc.js","fqdn":"y42t.top","domain":"y42t.top","tld":"top"},"ip":{"addr":"154.39.104.138","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://y42t.top/","date":"2026-07-31T00:10:40.854Z","timestamp":1785456640854,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"p40f.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 10:44:09 GMT","end":"Tue, 20 Oct 2026 10:44:08 GMT"},"fingerprint":{"sha1":"41:09:2C:3F:FC:9C:25:A9:DB:51:15:BB:D1:5A:D8:01:DC:38:AD:F8","sha256":"49:3B:29:C7:5B:B6:12:CF:84:14:5B:09:42:7D:EF:AA:61:29:EC:A1:D5:40:B5:64:5C:F1:33:AB:9B:E1:13:4D"}}},"request":{"raw":"GET /js/60024.1781011881923.e9a203dc.js HTTP/1.1\r\nHost: y42t.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://y42t.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 31 Jul 2026 00:10:41 GMT\r\nContent-Type: application/javascript\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Tue, 09 Jun 2026 13:37:11 GMT\r\nVary: Accept-Encoding\r\nETag: W/\"6a281707-11f9\"\r\nCache-Control: public, max-age=31536000, immutable\r\nAccess-Control-Allow-Origin: *\r\nX-Custom-Check: true\r\nContent-Encoding: gzip\r\nServer: Nginx\r\nL-Safe: 1785456641=gE780zdPNeqfjPR58ntui758h0rpjLBJh/P/VwEb9QgBdmX5XoCvf3XKS4ubqYQ4aAZoEOOBDBlTTobn+2eZbZ0U5rmjaj2YBZiCmX90g8Si+D3mrq6vSJjZwkQXhlFZx6UYXbz//HB3stXeGCYUIUvqR8AbEmVqeF09wWmA11wJgMs9cyGCHyv3ab/jWW+R\r\nL-VIA: l1=TqoDVanjjr6wMExF\r\nL-VERSION: 1784720560\r\nL-Request-Id: 3ec119fb5824456c2b4\r\nX-Cache-Status: BYPASS\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4601,"size_decoded":2490,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (4601), with no line terminators","md5":"ac04ba4305a374571b2d241fe1f50dc2","sha1":"e559b9a0a338e35fb6605942f7d14e96c031ae71","sha256":"788282499d13bd0bb6207ed41a15a3d0b2058ca97003d1e1a872e81401f02aa7","sha512":"6edc613a3f8585bf6cfb8c034199265c1c1daf368d0d3a6e2c41bf441a334a7f93139c0b0fb4147b98264567be9b135fab3cbe923e8fe040ec553e9fec04c8ae","ssdeep":"96:UR4NFRSZqe65bD7RM/Rsxkw9usN6tKex9sX2NaenPdqUDDEz:UR4NFRSZqesbD6Rgks0RxeX2NbnPdqUE","tlshash":"3491cbd876d2f071426f9678862f285fe27bead074ccb415d1c1e690aef062d8933d68","first_seen":"2026-06-12T19:29:57.341024Z","last_seen":"2026-07-31T12:41:47.105093Z","times_seen":901,"resource_available":true,"data":null}},"time_used":574,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":571,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-31","alert":"Sinkholed","trigger":"y42t.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-31","alert":"Phishing Block","trigger":"y42t.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"photo.365live88.com/img/fb/team/783ab3c2f6634fb7ba9c941e4b4290aa?win007=sell","fqdn":"photo.365live88.com","domain":"365live88.com","tld":"com"},"ip":{"addr":"154.41.93.240","port":443,"asn":174,"as":"COGENT-174","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://y42t.top/","date":"2026-07-31T00:10:42.531Z","timestamp":1785456642531,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"photo.365live88.com","organization":""},"issuer":{"commonName":"Encryption Everywhere DV TLS CA - G2","organization":"DigiCert Inc"},"validity":{"start":"Sat, 01 Nov 2025 00:00:00 GMT","end":"Sat, 31 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"45:76:43:9C:31:C5:89:A6:99:FD:9B:D8:6C:A9:3A:E6:2F:D6:E9:80","sha256":"73:27:CF:D8:8D:AC:95:46:00:5D:67:05:1E:70:22:3E:17:F0:94:78:CD:6F:A6:9C:C8:5F:B5:3B:75:60:3D:C8"}}},"request":{"raw":"GET /img/fb/team/783ab3c2f6634fb7ba9c941e4b4290aa?win007=sell HTTP/1.1\r\nHost: photo.365live88.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://y42t.top/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: openresty\r\nDate: Fri, 31 Jul 2026 00:10:48 GMT\r\nContent-Type: image/gif\r\nContent-Length: 3589\r\nConnection: keep-alive\r\nAccept-Ranges: bytes\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Expose-Headers: X-Log, X-Reqid\r\nAccess-Control-Max-Age: 2592000\r\nAge: 29320\r\nCache-Control: public, max-age=31536000\r\nContent-Disposition: inline; filename=\"783ab3c2f6634fb7ba9c941e4b4290aa\"; filename*=utf-8''783ab3c2f6634fb7ba9c941e4b4290aa\r\nContent-Md5: /DaAlamgmPpw26d89roUeA==\r\nContent-Transfer-Encoding: binary\r\nEtag: \"Fhj9pkoBe-jeskmrknNlZNnhTAeW\"\r\nLast-Modified: Sat, 25 Jul 2026 19:15:09 GMT\r\nX-Log: X-Log\r\nX-M-Log: QNM:wldsg121;QNM3\r\nX-M-Reqid: JDm0wicGQ\r\nX-Qiniu-Zone: as0\r\nX-Qnm-Cache: Hit\r\nX-Reqid: djcAAADkJBiyHMcY\r\nX-Svr: IO\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3589,"size_decoded":4344,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 112x127, components 3","md5":"fc368095a9a098fa70dba77cf6ba1478","sha1":"18fda64a017be8deb249ab92736564d9e14c0796","sha256":"2676f23ab8f4924f2e3ff7765eed1a438bb32546446c6bdb8f9418f20cebf839","sha512":"5d51476ed0aec44626678dfaa6c825d1e8d0b2ad6f2c3d39651c0f4d10adae92b56c0357b367c430a53b05aaf93f849f0c771a493e1d56321e65110ab80c53f4","ssdeep":"","tlshash":"08715d1847726807cf7476326aa63604b312a76b3052bbb94778d7ac74e5c714e01c2b","first_seen":"2025-11-16T14:04:56.205248Z","last_seen":"2026-07-31T12:41:15.264484Z","times_seen":13,"resource_available":false,"data":null}},"time_used":5948,"timings":{"blocked":5707,"dns":0,"connect":0,"send":0,"wait":241,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"photo.365live88.com/img/fb/team/3b5a3632166e47a8836a619632578267?win007=sell","fqdn":"photo.365live88.com","domain":"365live88.com","tld":"com"},"ip":{"addr":"154.41.93.240","port":443,"asn":174,"as":"COGENT-174","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://y42t.top/","date":"2026-07-31T00:10:42.546Z","timestamp":1785456642546,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"photo.365live88.com","organization":""},"issuer":{"commonName":"Encryption Everywhere DV TLS CA - G2","organization":"DigiCert Inc"},"validity":{"start":"Sat, 01 Nov 2025 00:00:00 GMT","end":"Sat, 31 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"45:76:43:9C:31:C5:89:A6:99:FD:9B:D8:6C:A9:3A:E6:2F:D6:E9:80","sha256":"73:27:CF:D8:8D:AC:95:46:00:5D:67:05:1E:70:22:3E:17:F0:94:78:CD:6F:A6:9C:C8:5F:B5:3B:75:60:3D:C8"}}},"request":{"raw":"GET /img/fb/team/3b5a3632166e47a8836a619632578267?win007=sell HTTP/1.1\r\nHost: photo.365live88.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://y42t.top/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: openresty\r\nDate: Fri, 31 Jul 2026 00:10:49 GMT\r\nContent-Type: image/png\r\nContent-Length: 8920\r\nConnection: keep-alive\r\nAccept-Ranges: bytes\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Expose-Headers: X-Log, X-Reqid\r\nAccess-Control-Max-Age: 2592000\r\nAge: 22242\r\nCache-Control: public, max-age=31536000\r\nContent-Disposition: inline; filename=\"3b5a3632166e47a8836a619632578267\"; filename*=utf-8''3b5a3632166e47a8836a619632578267\r\nContent-Md5: WQExcneITNPetjgdt16OxQ==\r\nContent-Transfer-Encoding: binary\r\nEtag: \"FkzfK2vwoELXs6tk6F73do_f-iwh\"\r\nLast-Modified: Sun, 26 Jul 2026 01:15:19 GMT\r\nX-Log: X-Log\r\nX-M-Log: QNM:wldsg119;QNM3\r\nX-M-Reqid: DUaZxulVb\r\nX-Qiniu-Zone: as0\r\nX-Qnm-Cache: Hit\r\nX-Reqid: 39QAAACtKlgiI8cY\r\nX-Svr: IO\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":8920,"size_decoded":9675,"mime_type":"image/png","magic":"PNG image data, 252 x 252, 8-bit colormap, non-interlaced","md5":"5901317277884cd3deb6381db75e8ec5","sha1":"4cdf2b6bf0a042d7b3ab64e85ef7768fdffa2c21","sha256":"ee5e4f71ace1143ff33e714477eaacc9b61a9a21cf765391fb314720e231dd20","sha512":"520d95ec303e84935d1456884a5780ff0bfd2745bc9e96274fa6e85ed1e32040f63706c1c9845db751b09c6c93d3b8fe009f7cfeee19d4b11badde47e7e9fc38","ssdeep":"192:yDHBdNyS4STvmBxf0nPcYx0OVpZKcSc5ky7LK4h4:QHg0eGnx0OVpZKcS8ky7LKJ","tlshash":"1202b09b3c4a6b678051448a039db6f2ff2ff92d85815fd62ade5cc4d080171632ed65","first_seen":"2026-07-31T00:11:28.206107Z","last_seen":"2026-07-31T12:41:15.230266Z","times_seen":9,"resource_available":false,"data":null}},"time_used":7152,"timings":{"blocked":6898,"dns":0,"connect":0,"send":0,"wait":254,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"photo.365live88.com/img/fb/team/66b2ab897c2042f0831cd4d6f430b1c2?win007=sell","fqdn":"photo.365live88.com","domain":"365live88.com","tld":"com"},"ip":{"addr":"154.41.93.240","port":443,"asn":174,"as":"COGENT-174","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://y42t.top/","date":"2026-07-31T00:10:42.564Z","timestamp":1785456642564,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"photo.365live88.com","organization":""},"issuer":{"commonName":"Encryption Everywhere DV TLS CA - G2","organization":"DigiCert Inc"},"validity":{"start":"Sat, 01 Nov 2025 00:00:00 GMT","end":"Sat, 31 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"45:76:43:9C:31:C5:89:A6:99:FD:9B:D8:6C:A9:3A:E6:2F:D6:E9:80","sha256":"73:27:CF:D8:8D:AC:95:46:00:5D:67:05:1E:70:22:3E:17:F0:94:78:CD:6F:A6:9C:C8:5F:B5:3B:75:60:3D:C8"}}},"request":{"raw":"GET /img/fb/team/66b2ab897c2042f0831cd4d6f430b1c2?win007=sell HTTP/1.1\r\nHost: photo.365live88.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://y42t.top/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: openresty\r\nDate: Fri, 31 Jul 2026 00:10:50 GMT\r\nContent-Type: image/png\r\nContent-Length: 4567\r\nConnection: keep-alive\r\nAccept-Ranges: bytes\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Expose-Headers: X-Log, X-Reqid\r\nAccess-Control-Max-Age: 2592000\r\nAge: 18636\r\nCache-Control: public, max-age=31536000\r\nContent-Disposition: inline; filename=\"66b2ab897c2042f0831cd4d6f430b1c2\"; filename*=utf-8''66b2ab897c2042f0831cd4d6f430b1c2\r\nContent-Md5: wf9gKGTCD/JibgrDXvYABQ==\r\nContent-Transfer-Encoding: binary\r\nEtag: \"FpF1DABjPa0ibRgIKt1OP7SILrj4\"\r\nLast-Modified: Sat, 25 Jul 2026 19:18:09 GMT\r\nX-Log: X-Log\r\nX-M-Log: QNM:wldsg119;QNM3\r\nX-M-Reqid: PGxK7Lx5x\r\nX-Qiniu-Zone: as0\r\nX-Qnm-Cache: Hit\r\nX-Reqid: cTYAAADGKQ9qJscY\r\nX-Svr: IO\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":4567,"size_decoded":5322,"mime_type":"image/png","magic":"PNG image data, 217 x 217, 8-bit colormap, non-interlaced","md5":"c1ff602864c20ff2626e0ac35ef60005","sha1":"91750c00633dad226d18082add4e3fb4882eb8f8","sha256":"8707ae506adfffcd0f036fc912ecc48cfa4ca1cf39ccd68e13310079d2379ed6","sha512":"954ebf0054a83654a3fdce9c721c07d7567e5fd634187f9554eb94e61f5d8e9aed7e0dab985b8b2354eda72c68741c85a077d9a390401e365b9addd11c33da3d","ssdeep":"96:eeSlHi1e0V6o9XnltcGQFLXTvxvRufVjV++jj1dmxXwYGkc:bSY1r79XnlOrFZGjV+ij1dmCYY","tlshash":"af916c7e6f4818fa456e43835722ebdd920918d5eaaa280d300517f56713e1e428389b","first_seen":"2023-08-17T12:39:30Z","last_seen":"2026-07-31T12:41:47.16369Z","times_seen":308,"resource_available":false,"data":null}},"time_used":8497,"timings":{"blocked":8234,"dns":0,"connect":0,"send":0,"wait":263,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"y42t.top/jumpto/img/https://rcf-img-hk.gasdg646fs224cn.com/202503/_webp_size649x578_3340babe-d86d-4379-84e5-92efe2221568.png","fqdn":"y42t.top","domain":"y42t.top","tld":"top"},"ip":{"addr":"154.39.104.138","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://y42t.top/","date":"2026-07-31T00:10:42.827Z","timestamp":1785456642827,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"p40f.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 10:44:09 GMT","end":"Tue, 20 Oct 2026 10:44:08 GMT"},"fingerprint":{"sha1":"41:09:2C:3F:FC:9C:25:A9:DB:51:15:BB:D1:5A:D8:01:DC:38:AD:F8","sha256":"49:3B:29:C7:5B:B6:12:CF:84:14:5B:09:42:7D:EF:AA:61:29:EC:A1:D5:40:B5:64:5C:F1:33:AB:9B:E1:13:4D"}}},"request":{"raw":"GET /jumpto/img/https://rcf-img-hk.gasdg646fs224cn.com/202503/_webp_size649x578_3340babe-d86d-4379-84e5-92efe2221568.png HTTP/1.1\r\nHost: y42t.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://y42t.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 31 Jul 2026 00:10:45 GMT\r\nContent-Type: image/webp\r\nContent-Length: 69604\r\nConnection: keep-alive\r\netag: \"bf4ab4dd29a7e850bb98cc23f8aa469b\"\r\nLast-Modified: Sat, 06 Dec 2025 06:31:49 GMT\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jcyY19Wcq9O7xCXkDdaA8ux1yKzFjm6i%2BqtO5VIEBYCnn4p7KuL3pmw%2BGgUi65osxtUGqSbE%2FkJG3JimT627l0PpYPc%2FD9AlE5aUOQ25gEMGidy7n2SHy8gOre%2BGk7MAWAoH%2BrsIcmFxfIhsekgFYYk%3D\"}]}\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nAge: 499206\r\ncf-cache-status: HIT\r\nCF-RAY: a208c61fda51f540-HKG\r\nalt-svc: h3=\":443\"; ma=86400\r\nCache-Control: public, max-age=2592000, immutable, public, max-age=2592000, immutable\r\nAccess-Control-Allow-Origin: *\r\nX-Custom-Check: true\r\nServer: Nginx\r\nL-Safe: 1785456645=3m/UQghxNGW3gPChBH0qwAw5jhMnk/bL7ljEsAqUNfL2w1i0HQREe2rEb4k+hpOpl+mNkeotUTn7rI4RELPi496PFmfq0fH/qKdAcrqsvLVi0CluaNffWUzPkudCch2/uigQXMAy3JVAvXsWZA3UDGCysooGP/loOgkjhRbwnpUqbTZcGQok3Gq63qCfb31c\r\nL-VIA: l1=TqoDVanjjr6wMExF\r\nL-VERSION: 1784720560\r\nL-Request-Id: 3ec219fb58256a8ba29\r\nX-Cache-Status: HIT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":69604,"size_decoded":70763,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"bf4ab4dd29a7e850bb98cc23f8aa469b","sha1":"bf8a5db8a24980c822ff470dfd5c400c3a7c9318","sha256":"2755467e92e31efad621b2e575f92ee22de6de608fa8f2fddb67db94b677b946","sha512":"21ee32c3081cdce13a032da5e97d59e0a8abd54778a0be5efadea03e95f5a9876414faeb43046ddeeeb580bc384b67ef786ac80243a9b7d10b4695ed25a5fb03","ssdeep":"1536:kzZ24Ia5yjsOfOLgsOtyLr/i7deYSzcwqzpf1btvhp61:kzZDIa5yjDMkyLr/z/cwqzpdxpp61","tlshash":"f76302aa4a11d1c8af767507133a99aa77ec93ea60d612f04077944f162bddba1f0c0f","first_seen":"2026-04-24T23:10:16.876074Z","last_seen":"2026-07-31T12:36:18.570253Z","times_seen":927,"resource_available":false,"data":null}},"time_used":3228,"timings":{"blocked":2818,"dns":0,"connect":0,"send":0,"wait":311,"receive":99,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-31","alert":"Phishing Block","trigger":"y42t.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-31","alert":"Sinkholed","trigger":"y42t.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"y42t.top/img/heying.d446c85d.png","fqdn":"y42t.top","domain":"y42t.top","tld":"top"},"ip":{"addr":"154.39.104.138","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://y42t.top/","date":"2026-07-31T00:10:41.109Z","timestamp":1785456641109,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"p40f.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 10:44:09 GMT","end":"Tue, 20 Oct 2026 10:44:08 GMT"},"fingerprint":{"sha1":"41:09:2C:3F:FC:9C:25:A9:DB:51:15:BB:D1:5A:D8:01:DC:38:AD:F8","sha256":"49:3B:29:C7:5B:B6:12:CF:84:14:5B:09:42:7D:EF:AA:61:29:EC:A1:D5:40:B5:64:5C:F1:33:AB:9B:E1:13:4D"}}},"request":{"raw":"GET /img/heying.d446c85d.png HTTP/1.1\r\nHost: y42t.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://y42t.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 31 Jul 2026 00:10:44 GMT\r\nContent-Type: image/png\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Tue, 09 Jun 2026 13:37:11 GMT\r\nVary: Accept-Encoding\r\nETag: W/\"6a281707-591\"\r\nCache-Control: public, max-age=2592000, immutable\r\nAccess-Control-Allow-Origin: *\r\nX-Custom-Check: true\r\nContent-Encoding: gzip\r\nServer: Nginx\r\nL-Safe: 1785456644=ImVO6mGITWMACggqrQcdldqw9lowxQ1+VpRDuAKFwfMb9d30WLVBONutXSRguHOv4S8A2fwwrG4hosTExvfehVfTlImNbeMdeEGGOKfPxTnrTTeg4Ne14CSZz0II/fQW6e3NIBDsQDv0uQ0mehoMPQ1XrPiYIzMRuPb5r05527aZ2mNjo0YBVDxdIUBsWRdM\r\nAge: 499209\r\nL-VIA: l1=TqoDVanjjr6wMExF\r\nL-VERSION: 1784720560\r\nL-Request-Id: 3ec919fb582523cc093\r\nX-Cache-Status: HIT\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1425,"size_decoded":2156,"mime_type":"image/png","magic":"PNG image data, 22 x 22, 8-bit/color RGBA, non-interlaced","md5":"c0d0c516850381dd1ca39dd94b08f21b","sha1":"54522affec52debd9c0bd3784f0ce9bf692f5d6d","sha256":"301cbb9a8c3fae88d732c8b8fdfe40113e3257831d37150e95564cc0f9b8fbe7","sha512":"6d6b1263f2de2b35237c784fd0aa127c469f8b6ebf347ff1987d791611d5b36f0909f3a81f9db6b1571756ecae60454d854e776e5ed782acbdfcce4fda2b9c86","ssdeep":"","tlshash":"dd213b5023742cd0e8ae3457ef12e5fdb823417994f8dd0c99b9bc3e84908b1057a48e","first_seen":"2025-09-04T00:49:32.953523Z","last_seen":"2026-07-31T05:07:38.903647Z","times_seen":2243,"resource_available":false,"data":null}},"time_used":3698,"timings":{"blocked":3409,"dns":0,"connect":0,"send":0,"wait":289,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-31","alert":"Sinkholed","trigger":"y42t.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-31","alert":"Phishing Block","trigger":"y42t.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"photo.365live88.com/img/fb/team/af1d96f9e6f743c6b6158bad035c95f6?win007=sell","fqdn":"photo.365live88.com","domain":"365live88.com","tld":"com"},"ip":{"addr":"154.41.93.240","port":443,"asn":174,"as":"COGENT-174","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://y42t.top/","date":"2026-07-31T00:10:42.535Z","timestamp":1785456642535,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"photo.365live88.com","organization":""},"issuer":{"commonName":"Encryption Everywhere DV TLS CA - G2","organization":"DigiCert Inc"},"validity":{"start":"Sat, 01 Nov 2025 00:00:00 GMT","end":"Sat, 31 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"45:76:43:9C:31:C5:89:A6:99:FD:9B:D8:6C:A9:3A:E6:2F:D6:E9:80","sha256":"73:27:CF:D8:8D:AC:95:46:00:5D:67:05:1E:70:22:3E:17:F0:94:78:CD:6F:A6:9C:C8:5F:B5:3B:75:60:3D:C8"}}},"request":{"raw":"GET /img/fb/team/af1d96f9e6f743c6b6158bad035c95f6?win007=sell HTTP/1.1\r\nHost: photo.365live88.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://y42t.top/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: openresty\r\nDate: Fri, 31 Jul 2026 00:10:48 GMT\r\nContent-Type: image/png\r\nContent-Length: 26552\r\nConnection: keep-alive\r\nAccept-Ranges: bytes\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Expose-Headers: X-Log, X-Reqid\r\nAccess-Control-Max-Age: 2592000\r\nAge: 25818\r\nCache-Control: public, max-age=31536000\r\nContent-Disposition: inline; filename=\"af1d96f9e6f743c6b6158bad035c95f6\"; filename*=utf-8''af1d96f9e6f743c6b6158bad035c95f6\r\nContent-Md5: GSK+D1vgH0j30DSP+7BKpA==\r\nContent-Transfer-Encoding: binary\r\nEtag: \"FnTd8T5_XSD3Pd5U5OU-UubKlYzX\"\r\nLast-Modified: Sat, 25 Jul 2026 19:15:59 GMT\r\nX-Log: X-Log\r\nX-M-Log: QNM:wldsg119;QNM3\r\nX-M-Reqid: mBwqsdMZq\r\nX-Qiniu-Zone: as0\r\nX-Qnm-Cache: Hit\r\nX-Reqid: 4VkAAADviX7hH8cY\r\nX-Svr: IO\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":26552,"size_decoded":27308,"mime_type":"image/png","magic":"PNG image data, 220 x 229, 8-bit/color RGBA, non-interlaced","md5":"1922be0f5be01f48f7d0348ffbb04aa4","sha1":"74ddf13e7f5d20f73dde54e4e53e52e6ca958cd7","sha256":"b8ae36e0bfded004ad7085967d8e3c7ad83a309b643e611a2978664574f8e9e9","sha512":"effb57192738c2332f8b2356e01b7e9cfbff7a306b798faee63e42aea0484a4bdd096fbe6a419593c1254c00fa4e9e90ae9310154f118e9d2526e020c18fda8a","ssdeep":"384:scAe/gdJzicSYBlcyMQ56a6STftccgLA7q2+1HsSZ6ZxSqk0YejBGp77wc4YjdhH:NkzPSGScdxLELX1HCS/PP6LVqBfd","tlshash":"87c2e1bf679fc55f7b47b3f52cb488e298d70b8069c6c1d03352624718a5be2e4a44c2","first_seen":"2023-08-24T20:41:52Z","last_seen":"2026-07-31T12:41:15.248027Z","times_seen":83,"resource_available":false,"data":null}},"time_used":6285,"timings":{"blocked":5993,"dns":0,"connect":0,"send":0,"wait":278,"receive":14,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"photo.365live88.com/img/fb/team/c1d7e5551dcd41ab8cd0c43670081b31?win007=sell","fqdn":"photo.365live88.com","domain":"365live88.com","tld":"com"},"ip":{"addr":"154.41.93.240","port":443,"asn":174,"as":"COGENT-174","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://y42t.top/","date":"2026-07-31T00:10:42.540Z","timestamp":1785456642540,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"photo.365live88.com","organization":""},"issuer":{"commonName":"Encryption Everywhere DV TLS CA - G2","organization":"DigiCert Inc"},"validity":{"start":"Sat, 01 Nov 2025 00:00:00 GMT","end":"Sat, 31 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"45:76:43:9C:31:C5:89:A6:99:FD:9B:D8:6C:A9:3A:E6:2F:D6:E9:80","sha256":"73:27:CF:D8:8D:AC:95:46:00:5D:67:05:1E:70:22:3E:17:F0:94:78:CD:6F:A6:9C:C8:5F:B5:3B:75:60:3D:C8"}}},"request":{"raw":"GET /img/fb/team/c1d7e5551dcd41ab8cd0c43670081b31?win007=sell HTTP/1.1\r\nHost: photo.365live88.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://y42t.top/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: openresty\r\nDate: Fri, 31 Jul 2026 00:10:49 GMT\r\nContent-Type: image/png\r\nContent-Length: 7445\r\nConnection: keep-alive\r\nAccept-Ranges: bytes\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Expose-Headers: X-Log, X-Reqid\r\nAccess-Control-Max-Age: 2592000\r\nAge: 25818\r\nCache-Control: public, max-age=31536000\r\nContent-Disposition: inline; filename=\"c1d7e5551dcd41ab8cd0c43670081b31\"; filename*=utf-8''c1d7e5551dcd41ab8cd0c43670081b31\r\nContent-Md5: no17AV0Z1g/n2dHj4RTObQ==\r\nContent-Transfer-Encoding: binary\r\nEtag: \"FjIBvkUCWi-8kZM8hAa1HiBI5xEh\"\r\nLast-Modified: Sat, 25 Jul 2026 19:15:46 GMT\r\nX-Log: X-Log\r\nX-M-Log: QNM:wldsg121;QNM3\r\nX-M-Reqid: F8AhKXtmx\r\nX-Qiniu-Zone: as0\r\nX-Qnm-Cache: Hit\r\nX-Reqid: 45IAAACCiZ3hH8cY\r\nX-Svr: IO\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":7445,"size_decoded":8200,"mime_type":"image/png","magic":"PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced","md5":"9e8d7b015d19d60fe7d9d1e3e114ce6d","sha1":"3201be45025a2fbc91933c8406b51e2048e71121","sha256":"cdd6dc23f6787c22daf1b93465603094627c587a4d23d653635fcf80c901172d","sha512":"c931a674cdf5bfe53311facdbef6ae5d728994fada5a6367994cbc5976dcb4f4b1932cf7f508e8598a86677fe099c3d4d9ae7db9759b2d8e9289bc342fb528bf","ssdeep":"192:JuHWuFHxs1I1N1EGBi9Di18BwGueaVmXzC7r6B:JuHWuFHxLN1EGBi9DzKeacjCCB","tlshash":"a3e19f5bbf236774629ac66a31a0eadfeb92c0db90532062879e515548f0341a2be209","first_seen":"2025-11-05T18:18:50.176522Z","last_seen":"2026-07-31T12:41:15.262017Z","times_seen":12,"resource_available":false,"data":null}},"time_used":6680,"timings":{"blocked":6437,"dns":0,"connect":0,"send":0,"wait":243,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"photo.365live88.com/img/fb/team/ded27caf1af14423a5cf7c2742c14672?win007=sell","fqdn":"photo.365live88.com","domain":"365live88.com","tld":"com"},"ip":{"addr":"154.41.93.240","port":443,"asn":174,"as":"COGENT-174","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://y42t.top/","date":"2026-07-31T00:10:42.558Z","timestamp":1785456642558,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"photo.365live88.com","organization":""},"issuer":{"commonName":"Encryption Everywhere DV TLS CA - G2","organization":"DigiCert Inc"},"validity":{"start":"Sat, 01 Nov 2025 00:00:00 GMT","end":"Sat, 31 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"45:76:43:9C:31:C5:89:A6:99:FD:9B:D8:6C:A9:3A:E6:2F:D6:E9:80","sha256":"73:27:CF:D8:8D:AC:95:46:00:5D:67:05:1E:70:22:3E:17:F0:94:78:CD:6F:A6:9C:C8:5F:B5:3B:75:60:3D:C8"}}},"request":{"raw":"GET /img/fb/team/ded27caf1af14423a5cf7c2742c14672?win007=sell HTTP/1.1\r\nHost: photo.365live88.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://y42t.top/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: openresty\r\nDate: Fri, 31 Jul 2026 00:10:50 GMT\r\nContent-Type: image/png\r\nContent-Length: 19381\r\nConnection: keep-alive\r\nAccept-Ranges: bytes\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Expose-Headers: X-Log, X-Reqid\r\nAccess-Control-Max-Age: 2592000\r\nAge: 19537\r\nCache-Control: public, max-age=31536000\r\nContent-Disposition: inline; filename=\"ded27caf1af14423a5cf7c2742c14672\"; filename*=utf-8''ded27caf1af14423a5cf7c2742c14672\r\nContent-Md5: vwIO+I0FAEGEnZI6x+V1Pg==\r\nContent-Transfer-Encoding: binary\r\nEtag: \"FkxkhayT52CPqgaj56Dv6DWrMqru\"\r\nLast-Modified: Sat, 25 Jul 2026 19:18:02 GMT\r\nX-Log: X-Log\r\nX-M-Log: QNM:wldsg121;QNM3\r\nX-M-Reqid: u40wfoNSQ\r\nX-Qiniu-Zone: as0\r\nX-Qnm-Cache: Hit\r\nX-Reqid: VhUAAAClyVqYJccY\r\nX-Svr: IO\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":19381,"size_decoded":20137,"mime_type":"image/png","magic":"PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced","md5":"bf020ef88d050041849d923ac7e5753e","sha1":"4c6485ac93e7608faa06a3e7a0efe835ab32aaee","sha256":"9c11c25adb547034d1cc48587a571ca55e4e059ac306e964c18ab08bef621101","sha512":"7b718e9c709d9fc72919d3a6347b846ecf9be0f2072243979159d35c358ef2aebb5dc1e85fb6923ff7d64c979c3dfa575693fd6e4c4fc0ffe5f7ef8e97b0b138","ssdeep":"384:c8kt0pNKEvacPt2EJArkqhmaxuMzg8zpa2ym2J4WO/aa6XTV1kf6kt3zbx:cRt0z2cPt5qLDzCXwR6X/cZ","tlshash":"4292d02f177a75a4f246a5b7046ba080741c0d40e900a6bb48bc6db50f0de9cdef97da","first_seen":"2026-07-31T00:11:28.214834Z","last_seen":"2026-07-31T12:41:47.046207Z","times_seen":10,"resource_available":false,"data":null}},"time_used":8102,"timings":{"blocked":7831,"dns":0,"connect":0,"send":0,"wait":264,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"photo.365live88.com/img/fb/team/da751611df334ace929663365d070a5e?win007=sell","fqdn":"photo.365live88.com","domain":"365live88.com","tld":"com"},"ip":{"addr":"154.41.93.240","port":443,"asn":174,"as":"COGENT-174","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://y42t.top/","date":"2026-07-31T00:10:42.572Z","timestamp":1785456642572,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"photo.365live88.com","organization":""},"issuer":{"commonName":"Encryption Everywhere DV TLS CA - G2","organization":"DigiCert Inc"},"validity":{"start":"Sat, 01 Nov 2025 00:00:00 GMT","end":"Sat, 31 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"45:76:43:9C:31:C5:89:A6:99:FD:9B:D8:6C:A9:3A:E6:2F:D6:E9:80","sha256":"73:27:CF:D8:8D:AC:95:46:00:5D:67:05:1E:70:22:3E:17:F0:94:78:CD:6F:A6:9C:C8:5F:B5:3B:75:60:3D:C8"}}},"request":{"raw":"GET /img/fb/team/da751611df334ace929663365d070a5e?win007=sell HTTP/1.1\r\nHost: photo.365live88.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://y42t.top/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: openresty\r\nDate: Fri, 31 Jul 2026 00:10:51 GMT\r\nContent-Type: image/png\r\nContent-Length: 15801\r\nConnection: keep-alive\r\nAccept-Ranges: bytes\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Expose-Headers: X-Log, X-Reqid\r\nAccess-Control-Max-Age: 2592000\r\nAge: 2422\r\nCache-Control: public, max-age=31536000\r\nContent-Disposition: inline; filename=\"da751611df334ace929663365d070a5e\"; filename*=utf-8''da751611df334ace929663365d070a5e\r\nContent-Md5: nYJJYfjiyGh5pLqf7Yy+eQ==\r\nContent-Transfer-Encoding: binary\r\nEtag: \"FgmsWIYOZl6koPvWL7_bAoTjM6iS\"\r\nLast-Modified: Sat, 25 Jul 2026 19:18:36 GMT\r\nX-Log: X-Log\r\nX-M-Log: QNM:wldsg121;QNM3\r\nX-M-Reqid: p0WEpRtIM\r\nX-Qiniu-Zone: as0\r\nX-Qnm-Cache: Hit\r\nX-Reqid: 1PEAAADfomYpNccY\r\nX-Svr: IO\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":15801,"size_decoded":16556,"mime_type":"image/png","magic":"PNG image data, 180 x 180, 8-bit/color RGBA, non-interlaced","md5":"9d824961f8e2c86879a4ba9fed8cbe79","sha1":"09ac58860e665ea4a0fbd62fbfdb0284e333a892","sha256":"613aff513552266acef8405e1f3e50fdaddbc918439a5da912580199d59f7149","sha512":"0e618d91548175f03408ab74ef778429774b0154d0077bae3b6e94a3e3d624195b945246ad33855fc75e4a9b257852207fa4205ab9b326d6905351212cd27a24","ssdeep":"384:yUukVasqygW0/7KjS1+mpXvK6CKY5no/YgCJ:yU7Vmx7Kjhcv/CKY5noQgCJ","tlshash":"c262c05bd85d746a7198a99b58c24bb2c48f988ce719cdc3f4072c36357eb40fd82e85","first_seen":"2025-04-19T22:34:55.247404Z","last_seen":"2026-07-31T12:41:47.063749Z","times_seen":170,"resource_available":false,"data":null}},"time_used":9285,"timings":{"blocked":9021,"dns":0,"connect":0,"send":0,"wait":262,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"y42t.top/img/SPORT.aab253e7.png","fqdn":"y42t.top","domain":"y42t.top","tld":"top"},"ip":{"addr":"154.39.104.138","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://y42t.top/","date":"2026-07-31T00:10:42.763Z","timestamp":1785456642763,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"p40f.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 10:44:09 GMT","end":"Tue, 20 Oct 2026 10:44:08 GMT"},"fingerprint":{"sha1":"41:09:2C:3F:FC:9C:25:A9:DB:51:15:BB:D1:5A:D8:01:DC:38:AD:F8","sha256":"49:3B:29:C7:5B:B6:12:CF:84:14:5B:09:42:7D:EF:AA:61:29:EC:A1:D5:40:B5:64:5C:F1:33:AB:9B:E1:13:4D"}}},"request":{"raw":"GET /img/SPORT.aab253e7.png HTTP/1.1\r\nHost: y42t.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://y42t.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 31 Jul 2026 00:10:45 GMT\r\nContent-Type: image/png\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Tue, 09 Jun 2026 13:37:11 GMT\r\nVary: Accept-Encoding\r\nETag: W/\"6a281707-d854\"\r\nCache-Control: public, max-age=2592000, immutable\r\nAccess-Control-Allow-Origin: *\r\nX-Custom-Check: true\r\nContent-Encoding: gzip\r\nServer: Nginx\r\nL-Safe: 1785456645=3m/UQghxNGW3gPChBH0qwAw5jhMnk/bL7ljEsAqUNfL2w1i0HQREe2rEb4k+hpOpl+mNkeotUTn7rI4RELPi496PFmfq0fH/qKdAcrqsvLVi0CluaNffWUzPkudCch2/uigQXMAy3JVAvXsWZA3UDGCysooGP/loOgkjhRbwnpUqbTZcGQok3Gq63qCfb31c\r\nAge: 499193\r\nL-VIA: l1=TqoDVanjjr6wMExF\r\nL-VERSION: 1784720560\r\nL-Request-Id: 3ec819fb5825391c0ff\r\nX-Cache-Status: HIT\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":55380,"size_decoded":56122,"mime_type":"image/png","magic":"PNG image data, 582 x 307, 8-bit colormap, non-interlaced","md5":"3990a0dcf110f100c97ab413079e969e","sha1":"8087b72a149b71f4f5fc43b0f8bc07b89b621583","sha256":"6ddc189e7780b1313933d4903be9fbf6644b6a590e9aba83a6e4e50fdafb170e","sha512":"6b092584d42ec1423ecb94383907f29571e93308944813286d6e74b10f6eccb27536924220780f9a080dc259a095718a33f0757fc0adb04d737c83a6fa1647e5","ssdeep":"768:aEivx5zbZ4L0zze87wWbuKu4YIsZdCPX4ueh17yEs7NsGJSLsBQ1MDAaYHKJTbYC:aEi3eL0za8xbw4UmXI1VfJIRDYqz6W","tlshash":"bc43022944944c242384f1a6ac778dbc6dffa348a5f38f639a842bec7dcd84d95f4811","first_seen":"2023-11-10T19:12:00Z","last_seen":"2026-07-31T12:41:15.21053Z","times_seen":2327,"resource_available":false,"data":null}},"time_used":2406,"timings":{"blocked":2098,"dns":0,"connect":0,"send":0,"wait":291,"receive":17,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-31","alert":"Phishing Block","trigger":"y42t.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-31","alert":"Sinkholed","trigger":"y42t.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"y42t.top/jumpto/img/https://rcf-img-hk.gasdg646fs224cn.com/202508/_webp_size1298x1156_aa2a4724-288d-4252-82c6-453d0458d8c1.png","fqdn":"y42t.top","domain":"y42t.top","tld":"top"},"ip":{"addr":"154.39.104.138","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://y42t.top/","date":"2026-07-31T00:10:42.870Z","timestamp":1785456642870,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"p40f.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 10:44:09 GMT","end":"Tue, 20 Oct 2026 10:44:08 GMT"},"fingerprint":{"sha1":"41:09:2C:3F:FC:9C:25:A9:DB:51:15:BB:D1:5A:D8:01:DC:38:AD:F8","sha256":"49:3B:29:C7:5B:B6:12:CF:84:14:5B:09:42:7D:EF:AA:61:29:EC:A1:D5:40:B5:64:5C:F1:33:AB:9B:E1:13:4D"}}},"request":{"raw":"GET /jumpto/img/https://rcf-img-hk.gasdg646fs224cn.com/202508/_webp_size1298x1156_aa2a4724-288d-4252-82c6-453d0458d8c1.png HTTP/1.1\r\nHost: y42t.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://y42t.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 31 Jul 2026 00:10:47 GMT\r\nContent-Type: image/webp\r\nContent-Length: 49050\r\nConnection: keep-alive\r\netag: \"bb2aa8a4e812ea372888371e3493b542\"\r\nLast-Modified: Wed, 10 Dec 2025 11:52:08 GMT\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qeZ5ShBzARaR7OIfZtBuBV2BC%2BZVqDDbnTOodM%2F15CsLUEWDzZcZH5K6a0Fp3lK2Qks%2Bq33cjLYIM0ApEHRGKALPNb9l3231GjKKYyzgUZV%2B0JzAxYd%2FOcf4avwEapc4sKBY7SMFZh7VbzRcnyj8BkE%3D\"}]}\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nAge: 499202\r\ncf-cache-status: HIT\r\nCF-RAY: a208c643ce9403b3-HKG\r\nalt-svc: h3=\":443\"; ma=86400\r\nCache-Control: public, max-age=2592000, immutable, public, max-age=2592000, immutable\r\nAccess-Control-Allow-Origin: *\r\nX-Custom-Check: true\r\nServer: Nginx\r\nL-Safe: 1785456647=pwbyu29rM0HEK42bpjFMXQZZ8s1IzzkT40daNMbcT90Ub0zpvrQ+kBR7N9vkAvLpdcGVCAkYTtjHzFt3rikpG2u0ViQwOg9Y/d8oh3QnzrskfHJpkQ3k6DdsyXdsoVGvpU7l+6O6Z96TYcnIdvgBPUL8UMfWMnVf++Fvg3TWLhL2ZP4it9BY8MKVve4d74hd\r\nL-VIA: l1=TqoDVanjjr6wMExF\r\nL-VERSION: 1784720560\r\nL-Request-Id: 3ec919fb5825cf8c0a4\r\nX-Cache-Status: HIT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":49050,"size_decoded":50207,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"bb2aa8a4e812ea372888371e3493b542","sha1":"4a36a3e778cd1cfaa8cbecc34e70d024963106a5","sha256":"fe97bdaee3660ca686cab03b1ef7af16d387780811e739ac2271082c7d4bb489","sha512":"f5ffb0368751705c8584d3a6bafa79c865cf33c0d4d8e58f06404807864ceefc41d20cd1162c01b17afcbc438a2fb2ed4f92b8f80938387b012bdd10e0ff2302","ssdeep":"768:6UQ6Jz2sCQ6dza0R/4YUaVSjgKLnkBM/jScHyXLEcDs5Op2jbOKz6im:tD5rCRNa0R2aOgKzkKucHybEcLKwl","tlshash":"2323f1d8f25dd108f9c51d3e9ebe898e6cbaeded3ec998c6224cd81c041494678d6623","first_seen":"2026-04-24T23:10:16.759919Z","last_seen":"2026-07-31T12:36:18.750416Z","times_seen":938,"resource_available":false,"data":null}},"time_used":4686,"timings":{"blocked":4382,"dns":0,"connect":0,"send":0,"wait":295,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-31","alert":"Sinkholed","trigger":"y42t.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-31","alert":"Phishing Block","trigger":"y42t.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"y42t.top/js/83749.1781011881923.02b71cf6.js","fqdn":"y42t.top","domain":"y42t.top","tld":"top"},"ip":{"addr":"154.39.104.138","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://y42t.top/","date":"2026-07-31T00:10:40.975Z","timestamp":1785456640975,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"p40f.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 10:44:09 GMT","end":"Tue, 20 Oct 2026 10:44:08 GMT"},"fingerprint":{"sha1":"41:09:2C:3F:FC:9C:25:A9:DB:51:15:BB:D1:5A:D8:01:DC:38:AD:F8","sha256":"49:3B:29:C7:5B:B6:12:CF:84:14:5B:09:42:7D:EF:AA:61:29:EC:A1:D5:40:B5:64:5C:F1:33:AB:9B:E1:13:4D"}}},"request":{"raw":"GET /js/83749.1781011881923.02b71cf6.js HTTP/1.1\r\nHost: y42t.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://y42t.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 31 Jul 2026 00:10:41 GMT\r\nContent-Type: application/javascript\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Tue, 09 Jun 2026 13:37:11 GMT\r\nVary: Accept-Encoding\r\nETag: W/\"6a281707-16665\"\r\nCache-Control: public, max-age=31536000, immutable\r\nAccess-Control-Allow-Origin: *\r\nX-Custom-Check: true\r\nContent-Encoding: gzip\r\nServer: Nginx\r\nL-Safe: 1785456641=gE780zdPNeqfjPR58ntui758h0rpjLBJh/P/VwEb9QgBdmX5XoCvf3XKS4ubqYQ4aAZoEOOBDBlTTobn+2eZbZ0U5rmjaj2YBZiCmX90g8Si+D3mrq6vSJjZwkQXhlFZx6UYXbz//HB3stXeGCYUIUvqR8AbEmVqeF09wWmA11wJgMs9cyGCHyv3ab/jWW+R\r\nL-VIA: l1=TqoDVanjjr6wMExF\r\nL-VERSION: 1784720560\r\nL-Request-Id: 3eba19fb58244dac834\r\nX-Cache-Status: BYPASS\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":91749,"size_decoded":29137,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (64016), with no line terminators","md5":"c1d2645de169d30e7a814fdbd1c1a47d","sha1":"41959bb5171f196d813c4b3c27bb3135d993ff43","sha256":"a400126839acc7fff4ce08e50633afc5560f3eb3e8aae7ec697fff30423bd26a","sha512":"21e02eeba3e71baf0938766c7abf83b68a4f54b149ea679f43c221c429729dacd395ed0e54233ff22be739636dcaf0104cd58083c50df9b6c521fcb2c3e27419","ssdeep":"1536:lcK/KnqHB3vmxuHXvKe+Gruc7iSxTcgOX8JwTl0sI5pQiVFFsdt+H+Xk:rB3vywXSex7HYgOXawTl0sgQi2tkwk","tlshash":"3693e7c4b5f4f5f8279ec5a2973644b8b02527c5b1c8ace0d2e96e147f19b62b0718bc","first_seen":"2026-06-12T19:29:57.252198Z","last_seen":"2026-07-31T12:41:47.049863Z","times_seen":899,"resource_available":true,"data":null}},"time_used":820,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":609,"receive":211,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-31","alert":"Phishing Block","trigger":"y42t.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-31","alert":"Sinkholed","trigger":"y42t.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"y42t.top/ecb/8f83064248a6651521ab9b26970d60fa83f0bf5f79fe68600101b67707c272184849423924c3e9832923a30acedcbfec8ac50fef89fb","fqdn":"y42t.top","domain":"y42t.top","tld":"top"},"ip":{"addr":"154.39.104.138","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://y42t.top/","date":"2026-07-31T00:10:42.027Z","timestamp":1785456642027,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"p40f.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 10:44:09 GMT","end":"Tue, 20 Oct 2026 10:44:08 GMT"},"fingerprint":{"sha1":"41:09:2C:3F:FC:9C:25:A9:DB:51:15:BB:D1:5A:D8:01:DC:38:AD:F8","sha256":"49:3B:29:C7:5B:B6:12:CF:84:14:5B:09:42:7D:EF:AA:61:29:EC:A1:D5:40:B5:64:5C:F1:33:AB:9B:E1:13:4D"}}},"request":{"raw":"GET /ecb/8f83064248a6651521ab9b26970d60fa83f0bf5f79fe68600101b67707c272184849423924c3e9832923a30acedcbfec8ac50fef89fb HTTP/1.1\r\nHost: y42t.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://y42t.top/\r\nContent-Type: application/x-www-form-urlencoded\r\nx-request-source: https://y42t.top\r\nXign: rV3k4flOI6Y36Q7C+sApVTmevW8A6YyO3Bt97T4W6o48XRE/rqXduULBldH7ybnaQv/CRZjHPGtbnFYNss36Veueo7Pre85n/pGWyOteYR1qRLezRNoV7STcJ6wErm8HT2RhEW36G6/aKT1pW/iN7Ryj+cNlgkWQxdU0/v+Wihw=\r\ntimestamp: 1785456641871\r\nsign: 1h3e2v7r78245s77\r\nversion: 5.6.12.0\r\nclient-type: web\r\ndevice-id: h7Ebc4YSNiCSchfp8FT2WyTT845kFyYC\r\nlang: zh-CN\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 31 Jul 2026 00:10:42 GMT\r\nContent-Type: application/json\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding, Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nExpires: Fri, 31 Jul 2026 00:20:42 GMT\r\nCache-Control: public, max-age=600, s-maxage=600, must-revalidate, stale-while-revalidate=30\r\nX-XSS-Protection: 1; mode=block\r\nX-Request-ID: 10ab08363ba34f4f8a13c1df18acdfdb\r\nPragma: public\r\nX-Content-Type-Options: nosniff\r\nStrict-Transport-Security: max-age=63072000; includeSubdomains; preload\r\nAccess-Control-Allow-Origin: *\r\nX-Custom-Check: true, true\r\nContent-Encoding: gzip\r\nServer: Nginx\r\nL-Safe: 1785456642=csqYCqnSrfqstQvye8K/cOFcRTOv1c0xbYhymJAs0/02+uXPG5GVyZ0p6izerPHm8MGf7A/o5MmlVb25OTDKDKeQU0rR3SBVQb7DhxtPpD3sSzxoSDG3GUN9oldUbp9/49xVY7UWBgnWGNvQm3pHmukuHRLxIzXXppUlpGs5PUC8OL5ESDjYobwSrUxT4jKY\r\nL-VIA: l1=TqoDVanjjr6wMExF\r\nL-VERSION: 1784720560\r\nL-Request-Id: 3ec819fb582487dc0f5\r\nX-Cache-Status: BYPASS\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6691,"size_decoded":7724,"mime_type":"application/json","magic":"data","md5":"31a9ba77b368009aa3ac83239eac5b65","sha1":"ea5b24c3891339e64c8a7eed2942b8266139797b","sha256":"6f8499975890d27ea9ab4f98dd1f3ff609c49bf05a6472a0b159ffd3cdd23840","sha512":"c19918ba8fee3084d2ea2445409f7b472be44c3ae716adea48cb0e68ca16eb2902ada7aae33202e86e629b0f84333aa89fa4650dbebdbb76d7b48a7c03cd189d","ssdeep":"192:VGXaHYhTBuWN/DcxL4jitSGv3QY5rocQrLI4irw9bdWagTgAGa+:QqHY7uk/DcrtSGv3QY5rTww4dWa6Ma+","tlshash":"b622bf974b53e7a026cdd5fca1221cd12a9fa2cd40bc9bd5d37480a42eaf750b4dc4b5","first_seen":"2026-07-26T23:48:44.029438Z","last_seen":"2026-07-31T00:12:52.465705Z","times_seen":4,"resource_available":false,"data":null}},"time_used":309,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":309,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-31","alert":"Sinkholed","trigger":"y42t.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-31","alert":"Phishing Block","trigger":"y42t.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"y42t.top/jumpto/img/https://rcf-img-hk.gasdg646fs224cn.com/202508/_webp_size1298x1156_79864bfb-d71a-4513-a524-8823b86ee01d.png","fqdn":"y42t.top","domain":"y42t.top","tld":"top"},"ip":{"addr":"154.39.104.138","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://y42t.top/","date":"2026-07-31T00:10:42.871Z","timestamp":1785456642871,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"p40f.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 10:44:09 GMT","end":"Tue, 20 Oct 2026 10:44:08 GMT"},"fingerprint":{"sha1":"41:09:2C:3F:FC:9C:25:A9:DB:51:15:BB:D1:5A:D8:01:DC:38:AD:F8","sha256":"49:3B:29:C7:5B:B6:12:CF:84:14:5B:09:42:7D:EF:AA:61:29:EC:A1:D5:40:B5:64:5C:F1:33:AB:9B:E1:13:4D"}}},"request":{"raw":"GET /jumpto/img/https://rcf-img-hk.gasdg646fs224cn.com/202508/_webp_size1298x1156_79864bfb-d71a-4513-a524-8823b86ee01d.png HTTP/1.1\r\nHost: y42t.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://y42t.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 31 Jul 2026 00:10:43 GMT\r\nContent-Type: image/webp\r\nContent-Length: 69284\r\nConnection: keep-alive\r\netag: \"1f023b2fde7cad748f40bc1d26f7bcf5\"\r\nLast-Modified: Wed, 10 Dec 2025 11:51:05 GMT\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CZnHswV0p5iKyv5nTOhG2wSiwCZYNFlr8s228cv%2BrYaOw%2FogU2DfuECsWQGSXL6pjurpRr3JePpqGOgUHRTa3TxMN2WcMpokfShJoFziZ1qX%2BfZHbzwbonHlmKztloVg2rOS0i9fhW%2FsC%2FXFnXkyBaI%3D\"}]}\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nAge: 499197\r\ncf-cache-status: HIT\r\nCF-RAY: a208c6478ca520e7-HKG\r\nalt-svc: h3=\":443\"; ma=86400\r\nCache-Control: public, max-age=2592000, immutable, public, max-age=2592000, immutable\r\nAccess-Control-Allow-Origin: *\r\nX-Custom-Check: true\r\nServer: Nginx\r\nL-Safe: 1785456643=L21MjTcjPMoacLR4vpNVcs71ZpTSCD9pAjEcK72XJz4geELYb/dM7FIgfcGewCPiEiHBLTyE0/8OE0+Ussy/+H0+QJ0ieZl66nXxiX7hlrgta/bqlKy5K3ZjLS3f1v4h/F2vuy6GEAoffe4Wt8WE6NAsU33QhqR65Iggn1IfkuSp/Pz9elabEun/YDFlVnt3\r\nL-VIA: l1=TqoDVanjjr6wMExF\r\nL-VERSION: 1784720560\r\nL-Request-Id: 3ec119fb5824bc9c2bb\r\nX-Cache-Status: HIT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":69284,"size_decoded":70441,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"1f023b2fde7cad748f40bc1d26f7bcf5","sha1":"b6f87014c3efd309dd208adbde662efd12ed1630","sha256":"37500d21d34445843f3857ddc61970168d68b86f1f37208f3e0b05b5fe1575ee","sha512":"afc994859a75b3a91939974cdd03b6973f68d7e5be316f8a67ac60412782cb748d7ad3b7b7f62d931496e61c198098e6ff42f280ec5c5ed40164f5351dde15af","ssdeep":"1536:LQyDg35QNQHWhyCUVgapIL88bSxgjfxjgS1xnVluzXj1/7qLE0rOFXrb:8qm5MQvC4gapxxgFjgQn7ax/kE0rSH","tlshash":"d66302cf2367021ed8f7a779922a46dda041f25ed16a73acfc919d45f88221726ec09c","first_seen":"2026-04-24T23:10:16.798872Z","last_seen":"2026-07-31T12:36:18.773793Z","times_seen":933,"resource_available":false,"data":null}},"time_used":503,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":342,"receive":161,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-31","alert":"Phishing Block","trigger":"y42t.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-31","alert":"Sinkholed","trigger":"y42t.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"y32b.top/","fqdn":"y32b.top","domain":"y32b.top","tld":"top"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-07-31T00:10:29.490Z","timestamp":1785456629490,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET / HTTP/1.1\r\nHost: y32b.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-31T20:32:35.777412Z","times_seen":17640239,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-31","alert":"Sinkholed","trigger":"y32b.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-31","alert":"Sinkholed","trigger":"y32b.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"y42t.top/ecb/8f8306425fb46e096ba9db3ab31b67b681fbb31575ff397b0117","fqdn":"y42t.top","domain":"y42t.top","tld":"top"},"ip":{"addr":"154.39.104.138","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://y42t.top/","date":"2026-07-31T00:10:42.022Z","timestamp":1785456642022,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"p40f.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 10:44:09 GMT","end":"Tue, 20 Oct 2026 10:44:08 GMT"},"fingerprint":{"sha1":"41:09:2C:3F:FC:9C:25:A9:DB:51:15:BB:D1:5A:D8:01:DC:38:AD:F8","sha256":"49:3B:29:C7:5B:B6:12:CF:84:14:5B:09:42:7D:EF:AA:61:29:EC:A1:D5:40:B5:64:5C:F1:33:AB:9B:E1:13:4D"}}},"request":{"raw":"GET /ecb/8f8306425fb46e096ba9db3ab31b67b681fbb31575ff397b0117 HTTP/1.1\r\nHost: y42t.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://y42t.top/\r\nContent-Type: application/x-www-form-urlencoded\r\nx-request-source: https://y42t.top\r\nXign: fnnh+qFHREu3Cr6rpK6CzRbTDQBOpZWGGxdBm3548fKSGDzNfHiOAptwx0s/F6LgGRaxB6ALN8fhnnOB6oqoOA+lx4v3wvMCQXtNmLQ7mo/PuiCdkD1x+W1Y2kULg7xlCzkoY5Luv7xqZ9RtQhBtCFShyesNW1JjGFPnf2G3mCo=\r\ntimestamp: 1785456641870\r\nsign: 97i1l6oe5t4c602b\r\nversion: 5.6.12.0\r\nclient-type: web\r\ndevice-id: h7Ebc4YSNiCSchfp8FT2WyTT845kFyYC\r\nlang: zh-CN\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 31 Jul 2026 00:10:42 GMT\r\nContent-Type: application/json\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding, Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nExpires: Fri, 31 Jul 2026 00:20:42 GMT\r\nCache-Control: public, max-age=600, s-maxage=600, must-revalidate, stale-while-revalidate=30\r\nX-XSS-Protection: 1; mode=block\r\nX-Request-ID: edf46de3d50142cd9ed693a2e85af003\r\nPragma: public\r\nX-Content-Type-Options: nosniff\r\nStrict-Transport-Security: max-age=63072000; includeSubdomains; preload\r\nAccess-Control-Allow-Origin: *\r\nX-Custom-Check: true, true\r\nContent-Encoding: gzip\r\nServer: Nginx\r\nL-Safe: 1785456642=csqYCqnSrfqstQvye8K/cOFcRTOv1c0xbYhymJAs0/02+uXPG5GVyZ0p6izerPHm8MGf7A/o5MmlVb25OTDKDKeQU0rR3SBVQb7DhxtPpD3sSzxoSDG3GUN9oldUbp9/49xVY7UWBgnWGNvQm3pHmukuHRLxIzXXppUlpGs5PUC8OL5ESDjYobwSrUxT4jKY\r\nL-VIA: l1=TqoDVanjjr6wMExF\r\nL-VERSION: 1784720560\r\nL-Request-Id: 3ec119fb5824878c2b8\r\nX-Cache-Status: BYPASS\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2132,"size_decoded":3165,"mime_type":"application/json","magic":"data","md5":"378b9e38f83642d572427f43aae6bd03","sha1":"c22de598836e528d593cb3840e2c0b5e271f2450","sha256":"946d3a237f051aa6751fc91608970f430a2c341c6fbbce6814c294a783fedd13","sha512":"24a886cffdc12d74ac4bd1102661b0ea3f9dfa6c11ca54b34864a5fc2510dbe8dd68c768855b9f58e60f06c67af2b7bf1bed9a30bee39840350ad5c9e885d950","ssdeep":"","tlshash":"38615c176a8df356da2a4eb5c5334ce96d5c832d775cf8e3c5904f1082d6343306d540","first_seen":"2026-07-26T23:48:43.993403Z","last_seen":"2026-07-31T00:12:52.520124Z","times_seen":4,"resource_available":false,"data":null}},"time_used":316,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":316,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-31","alert":"Phishing Block","trigger":"y42t.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-31","alert":"Sinkholed","trigger":"y42t.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"photo.365live88.com/img/fb/team/96ae08f690f947eda4f4b65c1b4d5dc4?win007=sell","fqdn":"photo.365live88.com","domain":"365live88.com","tld":"com"},"ip":{"addr":"154.41.93.240","port":443,"asn":174,"as":"COGENT-174","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://y42t.top/","date":"2026-07-31T00:10:42.475Z","timestamp":1785456642475,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"photo.365live88.com","organization":""},"issuer":{"commonName":"Encryption Everywhere DV TLS CA - G2","organization":"DigiCert Inc"},"validity":{"start":"Sat, 01 Nov 2025 00:00:00 GMT","end":"Sat, 31 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"45:76:43:9C:31:C5:89:A6:99:FD:9B:D8:6C:A9:3A:E6:2F:D6:E9:80","sha256":"73:27:CF:D8:8D:AC:95:46:00:5D:67:05:1E:70:22:3E:17:F0:94:78:CD:6F:A6:9C:C8:5F:B5:3B:75:60:3D:C8"}}},"request":{"raw":"GET /img/fb/team/96ae08f690f947eda4f4b65c1b4d5dc4?win007=sell HTTP/1.1\r\nHost: photo.365live88.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://y42t.top/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: openresty\r\nDate: Fri, 31 Jul 2026 00:10:45 GMT\r\nContent-Type: image/png\r\nContent-Length: 19795\r\nConnection: keep-alive\r\nAccept-Ranges: bytes\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Expose-Headers: X-Log, X-Reqid\r\nAccess-Control-Max-Age: 2592000\r\nAge: 83431\r\nCache-Control: public, max-age=31536000\r\nContent-Disposition: inline; filename=\"96ae08f690f947eda4f4b65c1b4d5dc4\"; filename*=utf-8''96ae08f690f947eda4f4b65c1b4d5dc4\r\nContent-Md5: wqcsRDFQsmVcZs23POS8TA==\r\nContent-Transfer-Encoding: binary\r\nEtag: \"FkANKN6PbUQEfIwSPducCD34YBOG\"\r\nLast-Modified: Fri, 24 Jul 2026 19:49:44 GMT\r\nX-Log: X-Log\r\nX-M-Log: QNM:wldsg119;QNM3\r\nX-M-Reqid: WzmIeZszQ\r\nX-Qiniu-Zone: as0\r\nX-Qnm-Cache: Hit\r\nX-Reqid: QwYAAAANOa1668YY\r\nX-Svr: IO\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":19795,"size_decoded":20551,"mime_type":"image/png","magic":"PNG image data, 200 x 224, 8-bit/color RGBA, non-interlaced","md5":"c2a72c443150b2655c66cdb73ce4bc4c","sha1":"400d28de8f6d44047c8c123ddb9c083df8601386","sha256":"eaaf44fcee14b41d20ed7f63312bae82c0daf8d08148c759837cb5e40fbd66e7","sha512":"1b7e708cd09e27f324c0dd1bbebe0f47574d30162a4ec9346d50adf33c34d987e564d5915ac2eed169ef86483c66e2872847eb2a13752884f451d9acc3868743","ssdeep":"384:LFh4v8iKlIyxCERZhVGHlB55BFZQUGo2AgEcCTZ9Kp5uoyb0KOkd8qxZiT1:LFhRiRQAFBHBFZQUGomLC9Okbw1","tlshash":"7b92d0714652fc2af365ebc58ef93f2606de80691bd0ce710246848c5ad67f6140b7b7","first_seen":"2024-10-24T22:52:54.582127Z","last_seen":"2026-07-31T00:12:30.661662Z","times_seen":44,"resource_available":false,"data":null}},"time_used":3157,"timings":{"blocked":2833,"dns":0,"connect":0,"send":0,"wait":301,"receive":23,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"photo.365live88.com/img/fb/team/7366b0fe4bc947b4bf1de3f1c03c923b?win007=sell","fqdn":"photo.365live88.com","domain":"365live88.com","tld":"com"},"ip":{"addr":"154.41.93.240","port":443,"asn":174,"as":"COGENT-174","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://y42t.top/","date":"2026-07-31T00:10:42.573Z","timestamp":1785456642573,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"photo.365live88.com","organization":""},"issuer":{"commonName":"Encryption Everywhere DV TLS CA - G2","organization":"DigiCert Inc"},"validity":{"start":"Sat, 01 Nov 2025 00:00:00 GMT","end":"Sat, 31 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"45:76:43:9C:31:C5:89:A6:99:FD:9B:D8:6C:A9:3A:E6:2F:D6:E9:80","sha256":"73:27:CF:D8:8D:AC:95:46:00:5D:67:05:1E:70:22:3E:17:F0:94:78:CD:6F:A6:9C:C8:5F:B5:3B:75:60:3D:C8"}}},"request":{"raw":"GET /img/fb/team/7366b0fe4bc947b4bf1de3f1c03c923b?win007=sell HTTP/1.1\r\nHost: photo.365live88.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://y42t.top/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: openresty\r\nDate: Fri, 31 Jul 2026 00:10:51 GMT\r\nContent-Type: image/png\r\nContent-Length: 2509\r\nConnection: keep-alive\r\nAccept-Ranges: bytes\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Expose-Headers: X-Log, X-Reqid\r\nAccess-Control-Max-Age: 2592000\r\nAge: 648\r\nCache-Control: public, max-age=31536000\r\nContent-Disposition: inline; filename=\"7366b0fe4bc947b4bf1de3f1c03c923b\"; filename*=utf-8''7366b0fe4bc947b4bf1de3f1c03c923b\r\nContent-Md5: ISM6FPbjmFUiLcz2Wn4yag==\r\nContent-Transfer-Encoding: binary\r\nEtag: \"FjR_lJxgwfx86FQZjmiCs3IHXJwq\"\r\nLast-Modified: Sat, 25 Jul 2026 19:18:39 GMT\r\nX-Log: X-Log\r\nX-M-Log: QNM:wldsg121;QNM3\r\nX-M-Reqid: TJTP1hyYt\r\nX-Qiniu-Zone: as0\r\nX-Qnm-Cache: Hit\r\nX-Reqid: 6E4AAAAdDmrGNscY\r\nX-Svr: IO\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2509,"size_decoded":3262,"mime_type":"image/png","magic":"PNG image data, 99 x 99, 8-bit colormap, non-interlaced","md5":"21233a14f6e39855222dccf65a7e326a","sha1":"347f949c60c1fc7ce854198e6882b372075c9c2a","sha256":"aaacfe6c4c0d26c5df5bee46f192cfd9f05ce9235a0f811d697c9a2ccf1fd99e","sha512":"53be9c9b5ce903ad82a08be417f7ab011f342a567c62c2f37911af80612c842f50990a29b023e5e3e39499ba6248bdf5fe468ab8a3d66ad6b35c83629073b3fa","ssdeep":"","tlshash":"57514a457a258da1ca00ccd4c46699ab7fa352d5f80ce40bf8c98710317e1cf9e8a59f","first_seen":"2025-03-30T02:59:21.080784Z","last_seen":"2026-07-31T12:41:46.999926Z","times_seen":82,"resource_available":false,"data":null}},"time_used":9317,"timings":{"blocked":9070,"dns":0,"connect":0,"send":0,"wait":247,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"y42t.top/jumpto/img/https://rcf-img-hk.gasdg646fs224cn.com/202503/_webp_size649x578_ca5ef219-cb88-4c5a-b68c-c85984b21465.png","fqdn":"y42t.top","domain":"y42t.top","tld":"top"},"ip":{"addr":"154.39.104.138","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://y42t.top/","date":"2026-07-31T00:10:42.823Z","timestamp":1785456642823,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"p40f.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 10:44:09 GMT","end":"Tue, 20 Oct 2026 10:44:08 GMT"},"fingerprint":{"sha1":"41:09:2C:3F:FC:9C:25:A9:DB:51:15:BB:D1:5A:D8:01:DC:38:AD:F8","sha256":"49:3B:29:C7:5B:B6:12:CF:84:14:5B:09:42:7D:EF:AA:61:29:EC:A1:D5:40:B5:64:5C:F1:33:AB:9B:E1:13:4D"}}},"request":{"raw":"GET /jumpto/img/https://rcf-img-hk.gasdg646fs224cn.com/202503/_webp_size649x578_ca5ef219-cb88-4c5a-b68c-c85984b21465.png HTTP/1.1\r\nHost: y42t.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://y42t.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 31 Jul 2026 00:10:45 GMT\r\nContent-Type: image/webp\r\nContent-Length: 83944\r\nConnection: keep-alive\r\netag: \"cd3cf96ac48355aa8a68b4dd114b3511\"\r\nLast-Modified: Sat, 06 Dec 2025 06:32:14 GMT\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1Ds5lmPkG3pjrBd%2F8UnJYo7uigfl39MgkB9JUwQT97fGycSx0xrFXBgzUi9nybTjJOb%2BhVndS%2BQ%2FjuoqVQlupn5GjZV0oNgEBhuJ1w2xB7ZTP76cltN7kziueHX%2BAs7QljwMjn4ZbXwToAohn7yU7lg%3D\"}]}\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nAge: 499203\r\ncf-cache-status: HIT\r\nCF-RAY: a208c62dddfd0977-HKG\r\nalt-svc: h3=\":443\"; ma=86400\r\nCache-Control: public, max-age=2592000, immutable, public, max-age=2592000, immutable\r\nAccess-Control-Allow-Origin: *\r\nX-Custom-Check: true\r\nServer: Nginx\r\nL-Safe: 1785456645=3m/UQghxNGW3gPChBH0qwAw5jhMnk/bL7ljEsAqUNfL2w1i0HQREe2rEb4k+hpOpl+mNkeotUTn7rI4RELPi496PFmfq0fH/qKdAcrqsvLVi0CluaNffWUzPkudCch2/uigQXMAy3JVAvXsWZA3UDGCysooGP/loOgkjhRbwnpUqbTZcGQok3Gq63qCfb31c\r\nL-VIA: l1=TqoDVanjjr6wMExF\r\nL-VERSION: 1784720560\r\nL-Request-Id: 3ec819fb58255fdc101\r\nX-Cache-Status: HIT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":83944,"size_decoded":85101,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"cd3cf96ac48355aa8a68b4dd114b3511","sha1":"344310d10f86fbdbc05ee7080d3ca849573ac9ef","sha256":"e9d91b84873b60fda60b6113151bcb7abb1225aa67f1d823343f611eac3c92af","sha512":"987cad3ea6ba2be77a3fd0904132cb11c1945e1e5556cdec550708d2e22c279398f951312a4029b369980af4ab0b30f4fd72ad5d38740800d6dd48938d323016","ssdeep":"1536:Ka0Pq9/ipy6cNgUraO4ysYwAcTa6bfr9BHltyI4VGeglGZVClKy:Ka0Pq9/hzvhsTAp6bhBH7QLZolKy","tlshash":"2a83128e457a2ceec4bf7de9267cf94f60ca5e31557b1add437826c5208b80cd227292","first_seen":"2026-04-24T23:10:16.791296Z","last_seen":"2026-07-31T12:36:18.71378Z","times_seen":934,"resource_available":false,"data":null}},"time_used":2975,"timings":{"blocked":2654,"dns":0,"connect":0,"send":0,"wait":291,"receive":30,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-31","alert":"Sinkholed","trigger":"y42t.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-31","alert":"Phishing Block","trigger":"y42t.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"y42t.top/jumpto/img/https://rcf-img-hk.gasdg646fs224cn.com/gpmaster/_webp_size750x590_1103f977-5f3c-414d-8305-ab6884e8769c.png","fqdn":"y42t.top","domain":"y42t.top","tld":"top"},"ip":{"addr":"154.39.104.138","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://y42t.top/","date":"2026-07-31T00:10:42.884Z","timestamp":1785456642884,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"p40f.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 10:44:09 GMT","end":"Tue, 20 Oct 2026 10:44:08 GMT"},"fingerprint":{"sha1":"41:09:2C:3F:FC:9C:25:A9:DB:51:15:BB:D1:5A:D8:01:DC:38:AD:F8","sha256":"49:3B:29:C7:5B:B6:12:CF:84:14:5B:09:42:7D:EF:AA:61:29:EC:A1:D5:40:B5:64:5C:F1:33:AB:9B:E1:13:4D"}}},"request":{"raw":"GET /jumpto/img/https://rcf-img-hk.gasdg646fs224cn.com/gpmaster/_webp_size750x590_1103f977-5f3c-414d-8305-ab6884e8769c.png HTTP/1.1\r\nHost: y42t.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://y42t.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 31 Jul 2026 00:10:48 GMT\r\nContent-Type: image/webp\r\nContent-Length: 43614\r\nConnection: keep-alive\r\netag: \"f0558545ac271256cf9e2e089c4b5d7b\"\r\nLast-Modified: Sun, 09 Nov 2025 14:30:08 GMT\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nAge: 499199\r\ncf-cache-status: HIT\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=y3PNDFpLLLk8M5eYhnKFk%2Ba6XUULRm4BoW2EovWnJ2E5%2B9HSVQ0Rd3y81rGqA2OG8ixSB9kXT2HvDQ8B8HEyWqW3G6sg8GGXkBbfMdt68LGGphVA6YlAPYLBeLb4%2F3fyz0xCHmgIl84IZlpizTNDI3k%3D\"}]}\r\nCF-RAY: a208c65adff11ebf-HKG\r\nalt-svc: h3=\":443\"; ma=86400\r\nCache-Control: public, max-age=2592000, immutable, public, max-age=2592000, immutable\r\nAccess-Control-Allow-Origin: *\r\nX-Custom-Check: true\r\nServer: Nginx\r\nL-Safe: 1785456648=Z7fxofmZ9hv3/XQ5t4frSKj942TDDEVXgFNewEpAWWZeSSGmfBEq5p68Wd3/3y67+UP5RiFuBM1NHhhqN9RGX44j5RrNYq5QVDzdwAN37T4mRc2TwqScY+zJAmvwDFiSdBQZRKjiyZLBbVL6KisnflY7oB9woowAE/HfHmrE5yoCQfCsCgc03AQt5IVZ52aB\r\nL-VIA: l1=TqoDVanjjr6wMExF\r\nL-VERSION: 1784720560\r\nL-Request-Id: 3ec519fb5826005c083\r\nX-Cache-Status: HIT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":43614,"size_decoded":44767,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"f0558545ac271256cf9e2e089c4b5d7b","sha1":"9594bc20fca63f0cfc8d31eeda8158bab7c54139","sha256":"cdd8fa33c321da25e96a0fff96453673d60d6c59c309aa7a2048e32b78f29e75","sha512":"e9a34139f7f091d9269ef1b87c11fa7900523ac4d286fddb7843e64afb1ea084064441c836ca8460185a800378cfe5153141613f0807d84e0687a1ef41f027b6","ssdeep":"768:c8urDr4gpwG3TMvUToCKvqwP9bDPCqO45+V0D63GQu54vlb:c8urDr4VGj9KPPh3+y2Dvvlb","tlshash":"b41302a684b210b1cc6db573dda010661bb07cb8ad6d5d1e0690e60fadbcdf12ca3e90","first_seen":"2026-04-24T23:10:16.765262Z","last_seen":"2026-07-31T12:41:47.011194Z","times_seen":1034,"resource_available":false,"data":null}},"time_used":5479,"timings":{"blocked":5162,"dns":0,"connect":0,"send":0,"wait":307,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-31","alert":"Phishing Block","trigger":"y42t.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-31","alert":"Sinkholed","trigger":"y42t.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"y42t.top/js/index-399e2569.1781011881923.9d909473.js","fqdn":"y42t.top","domain":"y42t.top","tld":"top"},"ip":{"addr":"154.39.104.138","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://y42t.top/","date":"2026-07-31T00:10:38.097Z","timestamp":1785456638097,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"p40f.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 10:44:09 GMT","end":"Tue, 20 Oct 2026 10:44:08 GMT"},"fingerprint":{"sha1":"41:09:2C:3F:FC:9C:25:A9:DB:51:15:BB:D1:5A:D8:01:DC:38:AD:F8","sha256":"49:3B:29:C7:5B:B6:12:CF:84:14:5B:09:42:7D:EF:AA:61:29:EC:A1:D5:40:B5:64:5C:F1:33:AB:9B:E1:13:4D"}}},"request":{"raw":"GET /js/index-399e2569.1781011881923.9d909473.js HTTP/1.1\r\nHost: y42t.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://y42t.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 31 Jul 2026 00:10:39 GMT\r\nContent-Type: application/javascript\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Tue, 09 Jun 2026 13:37:11 GMT\r\nVary: Accept-Encoding\r\nETag: W/\"6a281707-5cdf\"\r\nCache-Control: public, max-age=31536000, immutable\r\nAccess-Control-Allow-Origin: *\r\nX-Custom-Check: true\r\nContent-Encoding: gzip\r\nServer: Nginx\r\nL-Safe: 1785456639=ZQ2Zoq/cRP01EUwFViLw2I2TTD7YXn3fOcUs+xcjh4jH3sEo30QmYTa3wyU19juAAswcF1zK33qXVdu/2wEQssIQmAwdFBkC9e1CbV9WPKEBdbscbAAIXVFwwInqwSqPfxbfTB5XlXMMnezbEIdI/APkRTYkPOXTT5T1KnbKAZgGBnmhack9avnR9rigFkDp\r\nL-VIA: l1=TqoDVanjjr6wMExF\r\nL-VERSION: 1784720560\r\nL-Request-Id: 3ec119fb5823f89c2b2\r\nX-Cache-Status: BYPASS\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":23775,"size_decoded":11338,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (23775), with no line terminators","md5":"a89a32dae8cc80557b581a69e02f0d02","sha1":"00f9cfeca127af0a139c0670ed8d2e2e7ccf673b","sha256":"6f97c8ce9605a8e9e80a699696c70ec26a4b9bce20badaa6947bf4e5ac52e9d2","sha512":"2ca5bc054575932085e6cd6529613a94f145aa9a3b7731fb85b97b27286a882043110ab45b7eb4673228185ce1560b47968d3aa7b77492f17abf82e778076a9b","ssdeep":"384:pZTANHmDGIaVPkrTBTcK8K+Ehn6A3zgJ9Ks/fT5qZsxbt85F3oWf0Af/nwtU8Zci:znDGIYPkPVf8K5hn33UnKofy5FYxAfPY","tlshash":"e2b2b6e63392bdb8c24f9676f23a58ecc43f9141c30fc4f8d265bd947d98644aa92784","first_seen":"2026-06-12T19:29:57.227313Z","last_seen":"2026-07-31T12:41:47.058944Z","times_seen":945,"resource_available":true,"data":null}},"time_used":1971,"timings":{"blocked":1630,"dns":0,"connect":0,"send":0,"wait":341,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-31","alert":"Sinkholed","trigger":"y42t.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-31","alert":"Phishing Block","trigger":"y42t.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"y42t.top/kc523-1/sponsor/sponsor_web_3.png?1781011825626","fqdn":"y42t.top","domain":"y42t.top","tld":"top"},"ip":{"addr":"154.39.104.138","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://y42t.top/","date":"2026-07-31T00:10:41.112Z","timestamp":1785456641112,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"p40f.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 10:44:09 GMT","end":"Tue, 20 Oct 2026 10:44:08 GMT"},"fingerprint":{"sha1":"41:09:2C:3F:FC:9C:25:A9:DB:51:15:BB:D1:5A:D8:01:DC:38:AD:F8","sha256":"49:3B:29:C7:5B:B6:12:CF:84:14:5B:09:42:7D:EF:AA:61:29:EC:A1:D5:40:B5:64:5C:F1:33:AB:9B:E1:13:4D"}}},"request":{"raw":"GET /kc523-1/sponsor/sponsor_web_3.png?1781011825626 HTTP/1.1\r\nHost: y42t.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://y42t.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 31 Jul 2026 00:10:44 GMT\r\nContent-Type: image/png\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Tue, 30 Sep 2025 12:19:27 GMT\r\nVary: Accept-Encoding\r\nETag: W/\"68dbcacf-9faf\"\r\nCache-Control: public, max-age=2592000, immutable\r\nAccess-Control-Allow-Origin: *\r\nX-Custom-Check: true\r\nContent-Encoding: gzip\r\nServer: Nginx\r\nL-Safe: 1785456644=ImVO6mGITWMACggqrQcdldqw9lowxQ1+VpRDuAKFwfMb9d30WLVBONutXSRguHOv4S8A2fwwrG4hosTExvfehVfTlImNbeMdeEGGOKfPxTnrTTeg4Ne14CSZz0II/fQW6e3NIBDsQDv0uQ0mehoMPQ1XrPiYIzMRuPb5r05527aZ2mNjo0YBVDxdIUBsWRdM\r\nAge: 499210\r\nL-VIA: l1=TqoDVanjjr6wMExF\r\nL-VERSION: 1784720560\r\nL-Request-Id: 3ec219fb5825275ba26\r\nX-Cache-Status: HIT\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":40879,"size_decoded":41252,"mime_type":"image/png","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 428x169, components 3","md5":"c26161f438986f6e2d677c34d653285e","sha1":"faf6c47a013a9944bb8cac197688908422992039","sha256":"58d11e173550b3420b35c4e4be3eeb76b59ac790d9fb59b535ffe55d3b470fa9","sha512":"97649de556447ef6aa6cdd7d0bec46837cfb328335daa3b862cbaa5e23ca5a8f2af296703c9e961cbad02bb797ebf1f99ced2d1d245fbbb3a428e39d26428c76","ssdeep":"768:ub+4OMIuYE3McXMuDR64Q7sRFKJdsCA1Hunj5tyKxGGTVtkDGlT2oTO:uS4OMXYODNDR6XsRFisCAk39t6oi","tlshash":"db03f108254f2d4466ec90bbc7a1e0f7ee1d103dddb7e30c35a685163e46ca559fa0e6","first_seen":"2023-11-10T19:12:00Z","last_seen":"2026-07-31T12:36:18.756299Z","times_seen":2299,"resource_available":false,"data":null}},"time_used":3823,"timings":{"blocked":3446,"dns":0,"connect":0,"send":0,"wait":332,"receive":45,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-31","alert":"Phishing Block","trigger":"y42t.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-31","alert":"Sinkholed","trigger":"y42t.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"y42t.top/kc523-1/noData/cms_noimg.png?1781011825626","fqdn":"y42t.top","domain":"y42t.top","tld":"top"},"ip":{"addr":"154.39.104.138","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://y42t.top/","date":"2026-07-31T00:10:42.592Z","timestamp":1785456642592,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"p40f.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 10:44:09 GMT","end":"Tue, 20 Oct 2026 10:44:08 GMT"},"fingerprint":{"sha1":"41:09:2C:3F:FC:9C:25:A9:DB:51:15:BB:D1:5A:D8:01:DC:38:AD:F8","sha256":"49:3B:29:C7:5B:B6:12:CF:84:14:5B:09:42:7D:EF:AA:61:29:EC:A1:D5:40:B5:64:5C:F1:33:AB:9B:E1:13:4D"}}},"request":{"raw":"GET /kc523-1/noData/cms_noimg.png?1781011825626 HTTP/1.1\r\nHost: y42t.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://y42t.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 31 Jul 2026 00:10:44 GMT\r\nContent-Type: image/png\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Tue, 30 Sep 2025 12:19:27 GMT\r\nVary: Accept-Encoding\r\nETag: W/\"68dbcacf-269a\"\r\nCache-Control: public, max-age=2592000, immutable\r\nAccess-Control-Allow-Origin: *\r\nX-Custom-Check: true\r\nContent-Encoding: gzip\r\nServer: Nginx\r\nL-Safe: 1785456644=ImVO6mGITWMACggqrQcdldqw9lowxQ1+VpRDuAKFwfMb9d30WLVBONutXSRguHOv4S8A2fwwrG4hosTExvfehVfTlImNbeMdeEGGOKfPxTnrTTeg4Ne14CSZz0II/fQW6e3NIBDsQDv0uQ0mehoMPQ1XrPiYIzMRuPb5r05527aZ2mNjo0YBVDxdIUBsWRdM\r\nAge: 499194\r\nL-VIA: l1=TqoDVanjjr6wMExF\r\nL-VERSION: 1784720560\r\nL-Request-Id: 3ec119fb5825135c2c0\r\nX-Cache-Status: HIT\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":9882,"size_decoded":4614,"mime_type":"image/png","magic":"PNG image data, 1920 x 700, 8-bit/color RGBA, non-interlaced","md5":"85e60fd8767b18839ffb552a5d543f8a","sha1":"341cfd68a5b39cb246af6ade1e3171c857d2df5a","sha256":"4b7ad68306ffac25830d1016ba86154890deef8bd77a03257b767b37de1c8338","sha512":"785f028aab80d3f96794431f84025483f490d7d642022404a7b14ccb4785aa52fe4a21048d44acda3bd160eedeaccfb4959a677986dfe47ef038d80724f2acb2","ssdeep":"96:74iGykVWI7TGvGJUgTFSebsBzYofEC16+TqBK7R7LWKaR8a8D7uZNgAMXFL73:74iyHunEFSebsvP1nTP7IF2uAAMX5","tlshash":"141259118573d43cd82ce57926df6fb93b709f996890476e8328e7342f2a2f78d60848","first_seen":"2023-05-01T09:33:58Z","last_seen":"2026-07-31T12:41:47.113507Z","times_seen":3109,"resource_available":false,"data":null}},"time_used":1975,"timings":{"blocked":1667,"dns":0,"connect":0,"send":0,"wait":308,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-31","alert":"Phishing Block","trigger":"y42t.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-31","alert":"Sinkholed","trigger":"y42t.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"y42t.top/jumpto/img/https://rcf-img-hk.gasdg646fs224cn.com/202503/_webp_size649x578_96811f47-5a2c-446d-a8ca-696df160de09.png","fqdn":"y42t.top","domain":"y42t.top","tld":"top"},"ip":{"addr":"154.39.104.138","port":443,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://y42t.top/","date":"2026-07-31T00:10:42.881Z","timestamp":1785456642881,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"p40f.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 10:44:09 GMT","end":"Tue, 20 Oct 2026 10:44:08 GMT"},"fingerprint":{"sha1":"41:09:2C:3F:FC:9C:25:A9:DB:51:15:BB:D1:5A:D8:01:DC:38:AD:F8","sha256":"49:3B:29:C7:5B:B6:12:CF:84:14:5B:09:42:7D:EF:AA:61:29:EC:A1:D5:40:B5:64:5C:F1:33:AB:9B:E1:13:4D"}}},"request":{"raw":"GET /jumpto/img/https://rcf-img-hk.gasdg646fs224cn.com/202503/_webp_size649x578_96811f47-5a2c-446d-a8ca-696df160de09.png HTTP/1.1\r\nHost: y42t.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://y42t.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 31 Jul 2026 00:10:48 GMT\r\nContent-Type: image/webp\r\nContent-Length: 46184\r\nConnection: keep-alive\r\netag: \"c0ef8343c60fc9c02bde9fb0823e1ef6\"\r\nLast-Modified: Sat, 06 Dec 2025 06:26:38 GMT\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RgLSSjSMHRBnt9jD6uIY684xOuEhvE2uFdsQUwiZQ4qbliO3JuVBAnpsJbdFsHdLcdG6pji6sAhCmONodTH0NGoxTcFk032FJzzIBfqIvzaSQbbIcj2qUM%2BaG7t1nCEHAPEc4PVQJBkxFEXpcQa%2FCmI%3D\"}]}\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nAge: 499200\r\ncf-cache-status: HIT\r\nCF-RAY: a208c652ed6708f9-HKG\r\nalt-svc: h3=\":443\"; ma=86400\r\nCache-Control: public, max-age=2592000, immutable, public, max-age=2592000, immutable\r\nAccess-Control-Allow-Origin: *\r\nX-Custom-Check: true\r\nServer: Nginx\r\nL-Safe: 1785456648=Z7fxofmZ9hv3/XQ5t4frSKj942TDDEVXgFNewEpAWWZeSSGmfBEq5p68Wd3/3y67+UP5RiFuBM1NHhhqN9RGX44j5RrNYq5QVDzdwAN37T4mRc2TwqScY+zJAmvwDFiSdBQZRKjiyZLBbVL6KisnflY7oB9woowAE/HfHmrE5yoCQfCsCgc03AQt5IVZ52aB\r\nL-VIA: l1=TqoDVanjjr6wMExF\r\nL-VERSION: 1784720560\r\nL-Request-Id: 3ec919fb5825f51c0a8\r\nX-Cache-Status: HIT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":46184,"size_decoded":47335,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"c0ef8343c60fc9c02bde9fb0823e1ef6","sha1":"3a5e1c7a0e16e4df0a591749d4a8a1d01b381277","sha256":"1042e3632605c2e70706209ece9e2b341695afc4e57d5512818e458078c55040","sha512":"950b59f182c21e7d78ac56d6c1cb0f22a295ede2a579f9513c69166b2c227d5ebc4a8e16d5528f530488d5c36d8b88d9c29bb251820627d596156f90445a90f6","ssdeep":"768:fs+YB8yjw8RTKT4uT+QCkrgAEnaCA/RE4qehyRcQsII+IYJxT8sJk2RaA2b:fsDjxR+LT+vkrgAZ/R1hyqQ5IeJxTbR0","tlshash":"182302b81bd5a7b7cec731f89ce2890a4d17c2d5e183b0667d686bd6aa114c1f4c0ed1","first_seen":"2026-04-24T23:10:16.848247Z","last_seen":"2026-07-31T12:41:47.130635Z","times_seen":1026,"resource_available":false,"data":null}},"time_used":5286,"timings":{"blocked":4984,"dns":0,"connect":0,"send":0,"wait":293,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-31","alert":"Phishing Block","trigger":"y42t.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-31","alert":"Sinkholed","trigger":"y42t.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"photo.365live88.com/img/fb/team/58f43d5d78ff4b1a959698c7d1ddeb18?win007=sell","fqdn":"photo.365live88.com","domain":"365live88.com","tld":"com"},"ip":{"addr":"154.41.93.240","port":443,"asn":174,"as":"COGENT-174","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://y42t.top/","date":"2026-07-31T00:10:42.556Z","timestamp":1785456642556,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"photo.365live88.com","organization":""},"issuer":{"commonName":"Encryption Everywhere DV TLS CA - G2","organization":"DigiCert Inc"},"validity":{"start":"Sat, 01 Nov 2025 00:00:00 GMT","end":"Sat, 31 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"45:76:43:9C:31:C5:89:A6:99:FD:9B:D8:6C:A9:3A:E6:2F:D6:E9:80","sha256":"73:27:CF:D8:8D:AC:95:46:00:5D:67:05:1E:70:22:3E:17:F0:94:78:CD:6F:A6:9C:C8:5F:B5:3B:75:60:3D:C8"}}},"request":{"raw":"GET /img/fb/team/58f43d5d78ff4b1a959698c7d1ddeb18?win007=sell HTTP/1.1\r\nHost: photo.365live88.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://y42t.top/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: openresty\r\nDate: Fri, 31 Jul 2026 00:10:50 GMT\r\nContent-Type: image/png\r\nContent-Length: 12623\r\nConnection: keep-alive\r\nAccept-Ranges: bytes\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Expose-Headers: X-Log, X-Reqid\r\nAccess-Control-Max-Age: 2592000\r\nAge: 19537\r\nCache-Control: public, max-age=31536000\r\nContent-Disposition: inline; filename=\"58f43d5d78ff4b1a959698c7d1ddeb18\"; filename*=utf-8''58f43d5d78ff4b1a959698c7d1ddeb18\r\nContent-Md5: QgonNfFG/8U3nQ0+4swqyg==\r\nContent-Transfer-Encoding: binary\r\nEtag: \"Fh39LNxZMMBJM4zW1CgHJA0w2J9m\"\r\nLast-Modified: Sat, 25 Jul 2026 19:18:01 GMT\r\nX-Log: X-Log\r\nX-M-Log: QNM:wldsg121;QNM3\r\nX-M-Reqid: Q62AzW4RC\r\nX-Qiniu-Zone: as0\r\nX-Qnm-Cache: Hit\r\nX-Reqid: 5ccAAAAwq1OYJccY\r\nX-Svr: IO\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":12623,"size_decoded":13379,"mime_type":"image/png","magic":"PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced","md5":"420a2735f146ffc5379d0d3ee2cc2aca","sha1":"1dfd2cdc5930c049338cd6d42807240d30d89f66","sha256":"0b2c97279f2e4ef60c4ef2800f6b9cf2bd5ad6538c39dda475a494e7740976c4","sha512":"c938b4e454eb974340e75114c2e826ab92d05ac1550069bdb06cbb3d8c0f39cd4644d241543727da545f84878fd6ba6b443fb6cc6b9ae3cd779b03ee8329c083","ssdeep":"384:uHMe9+jzHkZvdnv71ghs7eiCNmmg7paMC:iMe9+jWdxh7e6PIMC","tlshash":"1942cf51a2089bc8afcffb5af253f89dcab516d53a84c11bff9991214623e313907384","first_seen":"2026-07-31T00:11:28.238904Z","last_seen":"2026-07-31T12:41:46.997909Z","times_seen":10,"resource_available":false,"data":null}},"time_used":7898,"timings":{"blocked":7655,"dns":0,"connect":0,"send":0,"wait":243,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}