{"report_id":"a062962f-a2fb-4ccb-b506-ffb0a758face","version":6,"status":"done","tags":[],"date":"2026-02-01T07:41:39Z","url":{"schema":"http","addr":"xitongtiandi.net/soft_lt/7017.html","fqdn":"xitongtiandi.net","domain":"xitongtiandi.net","tld":"net"},"ip":{"addr":"115.223.9.113","port":0,"asn":134771,"as":"WENZHOU, ZHEJIANG Province, P.R.China.","country":"China","country_code":"CN"},"final":{"url":{"schema":"https","addr":"xitongtiandi.net/soft_lt/7017.html","fqdn":"xitongtiandi.net","domain":"xitongtiandi.net","tld":"net"},"title":"方正小标宋简体字体免费下载｜附方正小标宋简体安装使用教程--系统之家","dom":{"size":75252,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (18832)","md5":"deb5b5d550adde0b5740496f198026a8","sha1":"707fe7de169a66b5a612f70c5c7e60ba68d908b5","sha256":"38c43d20e52bcb5906bd6d564cf333bf08d65f4f26cbf5bca3211bd5098c5a99","sha512":"c3f886717162a58caca21f92842a0be84a2aeaac4fd4813a8d0ee7a87287ee6257ae3792b12106c6b1ab9556cea0b808b97c48823bd0ac4651d1e78348a6a3a9","ssdeep":"1536:QbAu5oyMGbO5ryoF6jRE+IpFN/k5UW032bOts7oM5N3MqiMLyMqn:zwoyMGbOzF6jRE882bOOsKNI","tlshash":"9e732a124aeb0867e4237458afcb27193d64d543ef45ce18baac6b845f80d6b4173bf8","dom_hash":"domhash0e267c5f9602e962acf566d95a36331b","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"xitongtiandi.net/soft_lt/7017.html","fqdn":"xitongtiandi.net","domain":"xitongtiandi.net","tld":"net"},"ip":{"addr":"115.223.9.113","port":0,"asn":134771,"as":"WENZHOU, ZHEJIANG Province, P.R.China.","country":"China","country_code":"CN"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-03-08T07:41:39Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":2,"urlquery":0,"analyzer":0}},"detection":{"ids":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-02-01T07:41:23Z","timestamp":1769931683,"ip_dst":{"addr":"Client IP","port":53122,"asn":0,"as":"","country":"","country_code":"zz"},"ip_src":{"addr":"122.112.196.83","port":443,"asn":55990,"as":"Huawei Cloud Service data center","country":"China","country_code":"CN"},"severity":"low","alert":"ET INFO Observed ZeroSSL SSL/TLS Certificate","source":"{\"timestamp\":\"2026-02-01T07:41:23.396633+0000\",\"flow_id\":2024763608405729,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"122.112.196.83\",\"src_port\":443,\"dest_ip\":\"172.18.0.45\",\"dest_port\":53122,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2031231,\"rev\":3,\"signature\":\"ET INFO Observed ZeroSSL SSL/TLS Certificate\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"confidence\":[\"High\"],\"created_at\":[\"2020_11_23\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2022_12_01\"]}},\"tls\":{\"subject\":\"CN=bigdata.downza.com\",\"issuerdn\":\"C=AT, O=ZeroSSL, CN=ZeroSSL ECC Domain Secure Site CA\",\"serial\":\"7C:F7:CE:33:33:CC:F1:40:29:BA:D5:E4:5C:8E:61:1B\",\"fingerprint\":\"1d:ee:64:20:4c:e4:ff:49:a7:08:b2:93:b4:5b:f8:eb:1f:c4:f9:d2\",\"sni\":\"bigdata.downza.com\",\"version\":\"TLS 1.2\",\"notbefore\":\"2026-01-12T00:00:00\",\"notafter\":\"2026-04-12T23:59:59\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"fe0146829eef1917ba6c2dd4f5c08905\",\"string\":\"771,49196,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":7,\"pkts_toclient\":6,\"bytes_toserver\":1223,\"bytes_toclient\":3634,\"start\":\"2026-02-01T07:41:22.530145+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-02-01T07:41:23Z","timestamp":1769931683,"ip_dst":{"addr":"Client IP","port":53120,"asn":0,"as":"","country":"","country_code":"zz"},"ip_src":{"addr":"122.112.196.83","port":443,"asn":55990,"as":"Huawei Cloud Service data center","country":"China","country_code":"CN"},"severity":"low","alert":"ET INFO Observed ZeroSSL SSL/TLS Certificate","source":"{\"timestamp\":\"2026-02-01T07:41:23.926818+0000\",\"flow_id\":2235448934154095,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"122.112.196.83\",\"src_port\":443,\"dest_ip\":\"172.18.0.45\",\"dest_port\":53120,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2031231,\"rev\":3,\"signature\":\"ET INFO Observed ZeroSSL SSL/TLS Certificate\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"confidence\":[\"High\"],\"created_at\":[\"2020_11_23\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2022_12_01\"]}},\"tls\":{\"subject\":\"CN=bigdata.downza.com\",\"issuerdn\":\"C=AT, O=ZeroSSL, CN=ZeroSSL ECC Domain Secure Site CA\",\"serial\":\"7C:F7:CE:33:33:CC:F1:40:29:BA:D5:E4:5C:8E:61:1B\",\"fingerprint\":\"1d:ee:64:20:4c:e4:ff:49:a7:08:b2:93:b4:5b:f8:eb:1f:c4:f9:d2\",\"sni\":\"bigdata.downza.com\",\"version\":\"TLS 1.2\",\"notbefore\":\"2026-01-12T00:00:00\",\"notafter\":\"2026-04-12T23:59:59\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"fe0146829eef1917ba6c2dd4f5c08905\",\"string\":\"771,49196,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":8,\"pkts_toclient\":6,\"bytes_toserver\":1675,\"bytes_toclient\":3634,\"start\":\"2026-02-01T07:41:22.278383+0000\"}}"}],"analyzer":null,"urlquery":null},"summary":[{"fqdn":"hm.baidu.com","ip":{"addr":"111.45.11.83","port":443,"asn":9808,"as":"China Mobile Communications Group Co., Ltd.","country":"China","country_code":"CN"},"domain_registered":"1999-10-11","domain_rank":54491,"first_seen":"2012-05-26T08:38:45Z","last_seen":"2026-01-26T01:43:20.661835Z","alert_count":0,"request_count":4,"received_data":61915,"sent_data":2777,"comment":"","tags":null,"fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"bigdata.downza.com","ip":{"addr":"122.112.196.83","port":443,"asn":55990,"as":"Huawei Cloud Service data center","country":"China","country_code":"CN"},"domain_registered":"2011-03-27","domain_rank":0,"first_seen":"2021-06-08T10:16:41Z","last_seen":"2026-01-23T23:21:42.057188Z","alert_count":0,"request_count":2,"received_data":3690,"sent_data":1365,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"img.xitongtiandi.net","ip":{"addr":"120.52.95.238","port":443,"asn":133119,"as":"China Unicom IP network","country":"China","country_code":"CN"},"domain_registered":"2014-12-10","domain_rank":0,"first_seen":"2022-11-15T14:34:57Z","last_seen":"2025-07-21T04:14:48.275729Z","alert_count":0,"request_count":14,"received_data":677864,"sent_data":6862,"comment":"","tags":null,"fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"lupic.cdn.bcebos.com","ip":{"addr":"111.225.213.35","port":443,"asn":58539,"as":"China Telecom","country":"China","country_code":"CN"},"domain_registered":"2014-08-28","domain_rank":340547,"first_seen":"2019-09-06T07:22:33Z","last_seen":"2026-01-25T10:22:06.051341Z","alert_count":0,"request_count":3,"received_data":41315,"sent_data":1375,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"sp0.baidu.com","ip":{"addr":"103.235.46.102","port":443,"asn":55967,"as":"Beijing Baidu Netcom Science and Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"domain_registered":"1999-10-11","domain_rank":220073,"first_seen":"2014-12-05T23:12:12Z","last_seen":"2026-01-28T13:03:28.603145Z","alert_count":0,"request_count":1,"received_data":116,"sent_data":501,"comment":"","tags":null,"fingerprints":null},{"fqdn":"eclick.baidu.com","ip":{"addr":"110.242.68.137","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"domain_registered":"1999-10-11","domain_rank":382785,"first_seen":"2012-07-19T18:16:58Z","last_seen":"2026-01-31T19:44:08.245929Z","alert_count":0,"request_count":2,"received_data":590,"sent_data":1012,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"pos.baidu.com","ip":{"addr":"103.235.46.94","port":443,"asn":55967,"as":"Beijing Baidu Netcom Science and Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"domain_registered":"1999-10-11","domain_rank":155213,"first_seen":"2012-05-24T21:17:49Z","last_seen":"2026-01-31T02:39:41.3892Z","alert_count":0,"request_count":2,"received_data":58570,"sent_data":4164,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"cpro.baidustatic.com","ip":{"addr":"112.82.180.38","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"domain_registered":"2012-03-28","domain_rank":335584,"first_seen":"2012-08-26T15:55:02Z","last_seen":"2026-01-31T02:39:42.019108Z","alert_count":0,"request_count":3,"received_data":130943,"sent_data":1292,"comment":"","tags":null,"fingerprints":null},{"fqdn":"res.xitongtiandi.net","ip":{"addr":"121.22.232.168","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"domain_registered":"2014-12-10","domain_rank":0,"first_seen":"2022-11-15T14:34:55Z","last_seen":"2025-07-21T04:14:48.036885Z","alert_count":0,"request_count":14,"received_data":183798,"sent_data":6633,"comment":"","tags":null,"fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}]},{"fqdn":"zz.bdstatic.com","ip":{"addr":"157.255.63.48","port":443,"asn":136958,"as":"China Unicom Guangdong IP network","country":"China","country_code":"CN"},"domain_registered":"2011-12-26","domain_rank":365334,"first_seen":"2017-01-30T07:45:48Z","last_seen":"2026-01-28T11:48:08.206921Z","alert_count":0,"request_count":1,"received_data":767,"sent_data":423,"comment":"","tags":null,"fingerprints":null},{"fqdn":"res.njxzwh.com","ip":{"addr":"113.240.117.108","port":443,"asn":63835,"as":"No.293,Wanbao Avenue","country":"China","country_code":"CN"},"domain_registered":"2016-03-02","domain_rank":0,"first_seen":"2016-11-14T20:56:28Z","last_seen":"2026-01-23T07:07:27.083546Z","alert_count":0,"request_count":1,"received_data":3850,"sent_data":460,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}]},{"fqdn":"wn.pos.baidu.com","ip":{"addr":"182.61.200.11","port":443,"asn":38365,"as":"Beijing Baidu Netcom Science and Technology Co., Ltd.","country":"China","country_code":"CN"},"domain_registered":"1999-10-11","domain_rank":219334,"first_seen":"2013-07-30T20:38:27Z","last_seen":"2026-01-31T19:44:07.238138Z","alert_count":0,"request_count":1,"received_data":422,"sent_data":1231,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"image.xitongtiandi.net","ip":{"addr":"116.153.39.131","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"domain_registered":"2014-12-10","domain_rank":0,"first_seen":"2022-11-15T14:34:57Z","last_seen":"2025-07-21T04:14:47.53156Z","alert_count":0,"request_count":15,"received_data":483008,"sent_data":7050,"comment":"","tags":null,"fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"xitongtiandi.net","ip":{"addr":"116.153.39.131","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"domain_registered":"2014-12-10","domain_rank":2833950,"first_seen":"2026-02-01T07:41:40.969795Z","last_seen":"2026-02-01T07:41:40.969795Z","alert_count":0,"request_count":2,"received_data":39395,"sent_data":1248,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"PHP:7.4.30","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"jQuery:1.8.3","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"pos.baidu.com/scvm?conwid=370\u0026conhei=180\u0026rdid=7002770\u0026dc=3\u0026di=u7002770\u0026s1=4034329033\u0026s2=2872728590\u0026dri=0\u0026dis=0\u0026dai=1\u0026ps=3402x60\u0026enu=encoding\u0026exps=110277,110275,110261,110252,110011\u0026ant=0\u0026psi=1da7a967d3738233\u0026dcb=___adblockplus_\u0026dtm=HTML_POST\u0026dvi=0.0\u0026dci=-1\u0026dpt=none\u0026tpr=1769931685223\u0026ti=%E6%96%B9%E6%AD%A3%E5%B0%8F%E6%A0%87%E5%AE%8B%E7%AE%80%E4%BD%93%E5%AD%97%E4%BD%93%E5%85%8D%E8%B4%B9%E4%B8%8B%E8%BD%BD%EF%BD%9C%E9%99%84%E6%96%B9%E6%AD%A3%E5%B0%8F%E6%A0%87%E5%AE%8B%E7%AE%80%E4%BD%93%E5%AE%89%E8%A3%85%E4%BD%BF%E7%94%A8%E6%95%99%E7%A8%8B--%E7%B3%BB%E7%BB%9F%E4%B9%8B%E5%AE%B6\u0026ari=2\u0026ver=0620\u0026vc=%E6%99%AE%E9%80%9A%E4%B8%8B%E8%BD%BD%E5%9C%B0%E5%9D%80\u0026kws=%E6%96%B9%E6%AD%A3%E5%B0%8F%E6%A0%87%E5%AE%8B%E7%AE%80%E4%BD%93%E5%AD%97%E4%BD%93%2C%E6%96%B9%E6%AD%A3%E5%B0%8F%E6%A0%87%E5%AE%8B%E7%AE%80%E4%BD%93ttf%2C%E6%96%B9%E6%AD%A3%E5%B0%8F%E6%A0%87%E5%AE%8B%E7%AE%80%E4%BD%93%E5%AE%89%E8%A3%85\u0026dps=%E6%96%B9%E6%AD%A3%E5%B0%8F%E6%A0%87%E5%AE%8B%E7%AE%80%E4%BD%93%E5%AD%97%E4%BD%93%E3%80%82%E8%AF%A5%E5%AD%97%E4%BD%93%E9%9D%9E%E5%B8%B8%E7%BE%8E%E8%A7%82%EF%BC%8C%E9%80%82%E5%90%88%E5%9C%A8%E6%AD%A3%E5%BC%8F%E7%9A%84%E5%9C%BA%E5%90%88%E6%9D%A5%E8%BF%9B%E8%A1%8C%E4%BD%BF%E7%94%A8%EF%BC%8C%E6%AF%94%E5%A6%82%E7%94%A8%E4%BA%8E%E6%8A%95%E5%BD%B1%E6%BC%94%E7%A4%BA%EF%BC%8C%E6%89%93%E5%8D%B0%E5%90%88%E5%90%8C%E6%96%87%E6%9C%AC%EF%BC%8C%E8%AF%B4%E6%98%8E%E6%96%87%E6%9C%AC%E7%AD%89%E3%80%82%E6%9C%AC%E7%AB%99%E6%8F%90%E4%BE%9B%E6%96%B9%E6%AD%A3\u0026dbv=0\u0026drs=3\u0026pcs=1280x1024\u0026pss=1280x3801\u0026cfv=0\u0026cpl=5\u0026chi=2\u0026cce=true\u0026cec=UTF-8\u0026tlm=1769931685\u0026prot=2\u0026rw=1024\u0026ltu=https%3A%2F%2Fxitongtiandi.net%2Fsoft_lt%2F7017.html\u0026ecd=1\u0026dft=0\u0026uc=1280x1024\u0026pis=-1x-1\u0026sr=1280x1024\u0026tcn=1769931685\u0026qn=5fd469c31b5c2809\u0026ft=1","fqdn":"pos.baidu.com","domain":"baidu.com","tld":"com"},"ip":{"addr":"103.235.46.94","port":443,"asn":55967,"as":"Beijing Baidu Netcom Science and Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":true,"md5":"245d4babbd1beb6e8d9825eebf21a944","sha1":"d6a0e15bde9d543bf2cf790c62116db6d5ee92d9","sha256":"0f20f0b295af53cad4007283310501f115cd26723948edd222f25d202f962b44","sha512":"213c620813aa9df25e18d2072542981cda09951ebdab2d77ebf717b7bc0c1974d8d348125d7b844318bf6a5aa75b2daf7a8c1849cc8b2f13d90c71b72596a036","ssdeep":"","tlshash":"51511216b0668dee173e74f8708f006e62f4ef241bed0174d780baaa693106e4771ee5","size":3087,"data":"","first_seen":"2023-03-07T12:24:52Z","last_seen":"2026-06-01T04:39:40.444223Z","times_seen":399,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"res.xitongtiandi.net/xttd/js/public.js?2026020107","fqdn":"res.xitongtiandi.net","domain":"xitongtiandi.net","tld":"net"},"ip":{"addr":"121.22.232.168","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"introduction_type":"scriptElement","is_inline":false,"md5":"015d02798e8adb56a3e38d337e238480","sha1":"f409d7d40642d4fd673dbdc46c6522e99a30e939","sha256":"50b904ded33036e78acc57f101a608b16e5c6c148b3d50e9f6a14d8ea861ebc0","sha512":"e320c97607c35a83a47fa6a4d73f1dc1de86d4e01ca3521803d6bbc4c9a9023c4850ac1098a3f3319a1b503a4e759d49e85d72af40e3c9bed81c043c1b017383","ssdeep":"","tlshash":"4181c958b254169110bf737b9b2fe195ee19810bc1a18601f92eada00fb01a87737f8f","size":3984,"data":"","first_seen":"2026-02-01T07:42:01.690319Z","last_seen":"2026-02-01T07:42:01.690319Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bigdata.downza.com/js/xingzhi.js?6Z61","fqdn":"bigdata.downza.com","domain":"downza.com","tld":"com"},"ip":{"addr":"122.112.196.83","port":443,"asn":55990,"as":"Huawei Cloud Service data center","country":"China","country_code":"CN"},"introduction_type":"scriptElement","is_inline":false,"md5":"20cfe5a66ceaa704c9134202b3197360","sha1":"1465772bfe2402479f12f67574cde3e4515b77f7","sha256":"df9d37d34bbd878277d92fa3633976f3a4f61a076c86a76bdbf51c350e928e0a","sha512":"4c93a2504530954a3e0f5535cc2ac214c94d14540af20fec2e8d2aa6f54aed586045d9e5ce92d93224a845dfe08e7c0bf04c892369f134faef9797e762201cee","ssdeep":"","tlshash":"57612274b294247540a12069672b734b63365146b84f6491a43eeef0bd74f47a123fbf","size":3300,"data":"","first_seen":"2023-03-09T21:13:51Z","last_seen":"2026-06-02T12:23:57.060041Z","times_seen":162,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"res.xitongtiandi.net/xttd/js/jquery-1.8.3.min.js","fqdn":"res.xitongtiandi.net","domain":"xitongtiandi.net","tld":"net"},"ip":{"addr":"121.22.232.168","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"introduction_type":"scriptElement","is_inline":false,"md5":"e1288116312e4728f98923c79b034b67","sha1":"8b6babff47b8a9793f37036fd1b1a3ad41d38423","sha256":"ba6eda7945ab8d7e57b34cc5a3dd292fa2e4c60a5ced79236ecf1a9e0f0c2d32","sha512":"bf28a9a446e50639a9592d7651f89511fc4e583e213f20a0dff3a44e1a7d73ceefdb6597db121c7742bde92410a27d83d92e2e86466858a19803e72a168e5656","ssdeep":"1536:96IzxETpavYSGaW4snuHEk/yosnSFngC/VEEG0vd0KO4emAp2LSEMBoviR+I1z5T:v+vIklosn/BLXjxzMhsSQ","tlshash":"f793f8ed73c6717243ab30ae40af610ef1365869280d8410f129e8f9bc79a499277f7d","size":93637,"data":"","first_seen":"2023-03-07T01:02:21Z","last_seen":"2026-06-02T16:10:32.708402Z","times_seen":21534,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cpro.baidustatic.com/cpro/ui/cm.js","fqdn":"cpro.baidustatic.com","domain":"baidustatic.com","tld":"com"},"ip":{"addr":"112.82.180.38","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"introduction_type":"scriptElement","is_inline":false,"md5":"b543dbe074718c21f7f5e7cbf1aff034","sha1":"99ef1caf9c69e99a60c2f0ee33720cb40cdf1cc8","sha256":"b6a34b928d00909e40ec7edfadd89ac0cfa1fcc5892bdf3168b60b28a5bfe1f6","sha512":"56d74637e8023b8983c240ec595528c56ed7d84f461fd4a1e16d329906a2dbfd023a8d519a68b1458a48f9cd19176df60dc099102640f0c3589c3bddd69221b7","ssdeep":"3072:GpOyaTRXqCpCOjwlfbitfD9mxf1W4OwYsRQD+fgpNCpIdlw:GpBApCO0fyfDcTQD+fgXRdlw","tlshash":"f4b3e899f6d2742546a220a4162f2609b2375548748b8480f67ee8d1fdbcf4f607bfbc","size":117379,"data":"","first_seen":"2025-06-30T07:43:55.721259Z","last_seen":"2026-06-02T12:23:57.146637Z","times_seen":1018,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xitongtiandi.net/soft_lt/7017.html","fqdn":"xitongtiandi.net","domain":"xitongtiandi.net","tld":"net"},"ip":{"addr":"116.153.39.131","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"introduction_type":"scriptElement","is_inline":true,"md5":"c9b7adf48357108fed204c3a8aa5249c","sha1":"3b39b931ec408980bdd8b4939b55e3604855168e","sha256":"efd608cd5d4715b6e25624084306a8036c9fc0e5dac329cf7b0d9db10668969a","sha512":"74e7b91b379d6f04f984485e06c2d0ce9933f5cce2aecf0152fa0772459b1af56f0d6b25765e49d501ebc12ca37fbccfad484d09bbf282a9bb6997d1c23b8120","ssdeep":"","tlshash":"53d0238e21b7404519533055cf451154123300fb3c9d560378ec4fe05f057690363f59","size":221,"data":"","first_seen":"2025-07-21T04:14:50.883709Z","last_seen":"2026-02-01T07:42:01.70793Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xitongtiandi.net/soft_lt/7017.html","fqdn":"xitongtiandi.net","domain":"xitongtiandi.net","tld":"net"},"ip":{"addr":"116.153.39.131","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"introduction_type":"Function","is_inline":false,"md5":"1c5c9160600df2d96d69a4ea16cec7ed","sha1":"3cf678c9135cc952ba6970ef545035bb757a443f","sha256":"a3520fe88e248d2b6c9c6db93309a037ef969fe297208e5bd7e49a55bb32c808","sha512":"2a298a8c2552c6a6c6f8d3f7327d2e9abfa87a0dbb27e9e528a8539b416155c0860f54f46464dfe7e5d49c7906a9eacdac7e5181b86ef15a83276a8f4fee0546","ssdeep":"","tlshash":"078004d531c35040475331d400571cd4503444f014444d544040d4511c55030d1154dc","size":37,"data":"","first_seen":"2023-04-11T21:49:14Z","last_seen":"2026-06-02T18:08:36.795528Z","times_seen":119926,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pos.baidu.com/scvm?di=u7002770\u0026uuid=f076f9c9ab3a5c0e\u0026dri=0\u0026dis=0\u0026dai=1\u0026ps=3402x60\u0026enu=encoding\u0026exps=110011\u0026ant=0\u0026psi=1da7a967d3738233\u0026dcb=___adblockplus_\u0026dtm=SSP_JSONP\u0026dvi=0.0\u0026dci=-1\u0026dpt=none\u0026tpr=1769931685223\u0026ti=%E6%96%B9%E6%AD%A3%E5%B0%8F%E6%A0%87%E5%AE%8B%E7%AE%80%E4%BD%93%E5%AD%97%E4%BD%93%E5%85%8D%E8%B4%B9%E4%B8%8B%E8%BD%BD%EF%BD%9C%E9%99%84%E6%96%B9%E6%AD%A3%E5%B0%8F%E6%A0%87%E5%AE%8B%E7%AE%80%E4%BD%93%E5%AE%89%E8%A3%85%E4%BD%BF%E7%94%A8%E6%95%99%E7%A8%8B--%E7%B3%BB%E7%BB%9F%E4%B9%8B%E5%AE%B6\u0026ari=2\u0026ver=0620\u0026vc=%E6%99%AE%E9%80%9A%E4%B8%8B%E8%BD%BD%E5%9C%B0%E5%9D%80\u0026kws=%E6%96%B9%E6%AD%A3%E5%B0%8F%E6%A0%87%E5%AE%8B%E7%AE%80%E4%BD%93%E5%AD%97%E4%BD%93%2C%E6%96%B9%E6%AD%A3%E5%B0%8F%E6%A0%87%E5%AE%8B%E7%AE%80%E4%BD%93ttf%2C%E6%96%B9%E6%AD%A3%E5%B0%8F%E6%A0%87%E5%AE%8B%E7%AE%80%E4%BD%93%E5%AE%89%E8%A3%85\u0026dps=%E6%96%B9%E6%AD%A3%E5%B0%8F%E6%A0%87%E5%AE%8B%E7%AE%80%E4%BD%93%E5%AD%97%E4%BD%93%E3%80%82%E8%AF%A5%E5%AD%97%E4%BD%93%E9%9D%9E%E5%B8%B8%E7%BE%8E%E8%A7%82%EF%BC%8C%E9%80%82%E5%90%88%E5%9C%A8%E6%AD%A3%E5%BC%8F%E7%9A%84%E5%9C%BA%E5%90%88%E6%9D%A5%E8%BF%9B%E8%A1%8C%E4%BD%BF%E7%94%A8%EF%BC%8C%E6%AF%94%E5%A6%82%E7%94%A8%E4%BA%8E%E6%8A%95%E5%BD%B1%E6%BC%94%E7%A4%BA%EF%BC%8C%E6%89%93%E5%8D%B0%E5%90%88%E5%90%8C%E6%96%87%E6%9C%AC%EF%BC%8C%E8%AF%B4%E6%98%8E%E6%96%87%E6%9C%AC%E7%AD%89%E3%80%82%E6%9C%AC%E7%AB%99%E6%8F%90%E4%BE%9B%E6%96%B9%E6%AD%A3\u0026dbv=0\u0026drs=3\u0026pcs=1280x1024\u0026pss=1280x3801\u0026cfv=0\u0026cpl=5\u0026chi=2\u0026cce=true\u0026cec=UTF-8\u0026tlm=1769931685\u0026prot=2\u0026rw=1024\u0026ltu=https%3A%2F%2Fxitongtiandi.net%2Fsoft_lt%2F7017.html\u0026ecd=1\u0026dft=0\u0026uc=1280x1024\u0026pis=-1x-1\u0026sr=1280x1024\u0026tcn=1769931685","fqdn":"pos.baidu.com","domain":"baidu.com","tld":"com"},"ip":{"addr":"103.235.46.94","port":443,"asn":55967,"as":"Beijing Baidu Netcom Science and Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"ab24c61d56ff3f4db93e00a54e91f6fe","sha1":"0d9cb8759169913ca16f06fc90501841c010f529","sha256":"6aa8e55e8fe665f6faa0d652ee1c5fc2ac07a6e1eb9ecc44ad0cf7f59ae75592","sha512":"e2d0dc60f596e65e1e5f5b2d6112b214c9ad701f20e578841368ca3bd857a56a95e6b8c3a8bbe7243e8713c7ee3698a8ebf11897518278d6d29a54683daf0de2","ssdeep":"","tlshash":"ad110255ea37eeb7a664e42a30f9318e443faf26770405c18278cf30036c102335daa3","size":1065,"data":"","first_seen":"2026-02-01T07:42:01.641417Z","last_seen":"2026-02-01T07:42:01.641417Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pos.baidu.com/scvm?conwid=370\u0026conhei=180\u0026rdid=7002770\u0026dc=3\u0026di=u7002770\u0026s1=4034329033\u0026s2=2872728590\u0026dri=0\u0026dis=0\u0026dai=1\u0026ps=3402x60\u0026enu=encoding\u0026exps=110277,110275,110261,110252,110011\u0026ant=0\u0026psi=1da7a967d3738233\u0026dcb=___adblockplus_\u0026dtm=HTML_POST\u0026dvi=0.0\u0026dci=-1\u0026dpt=none\u0026tpr=1769931685223\u0026ti=%E6%96%B9%E6%AD%A3%E5%B0%8F%E6%A0%87%E5%AE%8B%E7%AE%80%E4%BD%93%E5%AD%97%E4%BD%93%E5%85%8D%E8%B4%B9%E4%B8%8B%E8%BD%BD%EF%BD%9C%E9%99%84%E6%96%B9%E6%AD%A3%E5%B0%8F%E6%A0%87%E5%AE%8B%E7%AE%80%E4%BD%93%E5%AE%89%E8%A3%85%E4%BD%BF%E7%94%A8%E6%95%99%E7%A8%8B--%E7%B3%BB%E7%BB%9F%E4%B9%8B%E5%AE%B6\u0026ari=2\u0026ver=0620\u0026vc=%E6%99%AE%E9%80%9A%E4%B8%8B%E8%BD%BD%E5%9C%B0%E5%9D%80\u0026kws=%E6%96%B9%E6%AD%A3%E5%B0%8F%E6%A0%87%E5%AE%8B%E7%AE%80%E4%BD%93%E5%AD%97%E4%BD%93%2C%E6%96%B9%E6%AD%A3%E5%B0%8F%E6%A0%87%E5%AE%8B%E7%AE%80%E4%BD%93ttf%2C%E6%96%B9%E6%AD%A3%E5%B0%8F%E6%A0%87%E5%AE%8B%E7%AE%80%E4%BD%93%E5%AE%89%E8%A3%85\u0026dps=%E6%96%B9%E6%AD%A3%E5%B0%8F%E6%A0%87%E5%AE%8B%E7%AE%80%E4%BD%93%E5%AD%97%E4%BD%93%E3%80%82%E8%AF%A5%E5%AD%97%E4%BD%93%E9%9D%9E%E5%B8%B8%E7%BE%8E%E8%A7%82%EF%BC%8C%E9%80%82%E5%90%88%E5%9C%A8%E6%AD%A3%E5%BC%8F%E7%9A%84%E5%9C%BA%E5%90%88%E6%9D%A5%E8%BF%9B%E8%A1%8C%E4%BD%BF%E7%94%A8%EF%BC%8C%E6%AF%94%E5%A6%82%E7%94%A8%E4%BA%8E%E6%8A%95%E5%BD%B1%E6%BC%94%E7%A4%BA%EF%BC%8C%E6%89%93%E5%8D%B0%E5%90%88%E5%90%8C%E6%96%87%E6%9C%AC%EF%BC%8C%E8%AF%B4%E6%98%8E%E6%96%87%E6%9C%AC%E7%AD%89%E3%80%82%E6%9C%AC%E7%AB%99%E6%8F%90%E4%BE%9B%E6%96%B9%E6%AD%A3\u0026dbv=0\u0026drs=3\u0026pcs=1280x1024\u0026pss=1280x3801\u0026cfv=0\u0026cpl=5\u0026chi=2\u0026cce=true\u0026cec=UTF-8\u0026tlm=1769931685\u0026prot=2\u0026rw=1024\u0026ltu=https%3A%2F%2Fxitongtiandi.net%2Fsoft_lt%2F7017.html\u0026ecd=1\u0026dft=0\u0026uc=1280x1024\u0026pis=-1x-1\u0026sr=1280x1024\u0026tcn=1769931685\u0026qn=5fd469c31b5c2809\u0026ft=1","fqdn":"pos.baidu.com","domain":"baidu.com","tld":"com"},"ip":{"addr":"103.235.46.94","port":443,"asn":55967,"as":"Beijing Baidu Netcom Science and Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"introduction_type":"Function","is_inline":false,"md5":"dac37ac31bd0120512e608d03ec2075b","sha1":"61f8703dfde7c1c82c0ce081d95c34ffa9011794","sha256":"891f285404ac26038f242ea8d0157fa2ec8da1cb13b370abfe9f63cf505968cc","sha512":"14be3896be0b2b546661e55c2523380652e836522ac29b02c8ba5e25b21ddd3d11cb8f746eba7e5aca426a0c5cb71b7dec51636bcaf5c5d568c373894300f04e","ssdeep":"192:6iRFi1i7aFiUmixiBidiniia1QFiUmilFiUmi9ikinipFiUmi3i11JmiqimiQ0iL:nRkU7akUjAQMin1QkUjlkUjstipkUjyS","tlshash":"c6220224c9b99230567e5168edc6470ca3a5c8730f9304667bed077d4be19bf037aa92","size":10496,"data":"","first_seen":"2023-04-05T05:14:30Z","last_seen":"2026-06-01T04:39:40.472078Z","times_seen":338,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cpro.baidustatic.com/js/logo/js/logo.js","fqdn":"cpro.baidustatic.com","domain":"baidustatic.com","tld":"com"},"ip":{"addr":"112.82.180.38","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"introduction_type":"scriptElement","is_inline":false,"md5":"8b5e08871e305d7e5a1ca11fe3cdd24f","sha1":"799c2474dc053a40d1c2d3b230e0a012e4546b09","sha256":"81ca845c7a7ad5c9b166d37e60590125d1e76c83c2dcdb71d0fddfab1309cef0","sha512":"11b9232dd5a49ff0c43e32343455191ebab2d1bb0238430af052a36ad62b2b271385884d0a588e74d5a1434b17bc368246856f5e257881b8e2356a822018388a","ssdeep":"192:p1Q97FnMytGBE7qLtgsfoM0lOLiJTslMe3ZtIt3NgBnV7wsQ+JkCTUTUyoRys+JK:D2MwGm7qLtJjc3MZt2NgBnRlAIyoRytK","tlshash":"8e226e6f3484293e97fb41d8725b3b4e3435658dda060c54c5a1ccd9a7fac4bb371290","size":10053,"data":"","first_seen":"2023-11-29T11:37:30Z","last_seen":"2026-06-02T04:53:51.08164Z","times_seen":1044,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pos.baidu.com/scvm?conwid=370\u0026conhei=180\u0026rdid=7002770\u0026dc=3\u0026di=u7002770\u0026s1=4034329033\u0026s2=2872728590\u0026dri=0\u0026dis=0\u0026dai=1\u0026ps=3402x60\u0026enu=encoding\u0026exps=110277,110275,110261,110252,110011\u0026ant=0\u0026psi=1da7a967d3738233\u0026dcb=___adblockplus_\u0026dtm=HTML_POST\u0026dvi=0.0\u0026dci=-1\u0026dpt=none\u0026tpr=1769931685223\u0026ti=%E6%96%B9%E6%AD%A3%E5%B0%8F%E6%A0%87%E5%AE%8B%E7%AE%80%E4%BD%93%E5%AD%97%E4%BD%93%E5%85%8D%E8%B4%B9%E4%B8%8B%E8%BD%BD%EF%BD%9C%E9%99%84%E6%96%B9%E6%AD%A3%E5%B0%8F%E6%A0%87%E5%AE%8B%E7%AE%80%E4%BD%93%E5%AE%89%E8%A3%85%E4%BD%BF%E7%94%A8%E6%95%99%E7%A8%8B--%E7%B3%BB%E7%BB%9F%E4%B9%8B%E5%AE%B6\u0026ari=2\u0026ver=0620\u0026vc=%E6%99%AE%E9%80%9A%E4%B8%8B%E8%BD%BD%E5%9C%B0%E5%9D%80\u0026kws=%E6%96%B9%E6%AD%A3%E5%B0%8F%E6%A0%87%E5%AE%8B%E7%AE%80%E4%BD%93%E5%AD%97%E4%BD%93%2C%E6%96%B9%E6%AD%A3%E5%B0%8F%E6%A0%87%E5%AE%8B%E7%AE%80%E4%BD%93ttf%2C%E6%96%B9%E6%AD%A3%E5%B0%8F%E6%A0%87%E5%AE%8B%E7%AE%80%E4%BD%93%E5%AE%89%E8%A3%85\u0026dps=%E6%96%B9%E6%AD%A3%E5%B0%8F%E6%A0%87%E5%AE%8B%E7%AE%80%E4%BD%93%E5%AD%97%E4%BD%93%E3%80%82%E8%AF%A5%E5%AD%97%E4%BD%93%E9%9D%9E%E5%B8%B8%E7%BE%8E%E8%A7%82%EF%BC%8C%E9%80%82%E5%90%88%E5%9C%A8%E6%AD%A3%E5%BC%8F%E7%9A%84%E5%9C%BA%E5%90%88%E6%9D%A5%E8%BF%9B%E8%A1%8C%E4%BD%BF%E7%94%A8%EF%BC%8C%E6%AF%94%E5%A6%82%E7%94%A8%E4%BA%8E%E6%8A%95%E5%BD%B1%E6%BC%94%E7%A4%BA%EF%BC%8C%E6%89%93%E5%8D%B0%E5%90%88%E5%90%8C%E6%96%87%E6%9C%AC%EF%BC%8C%E8%AF%B4%E6%98%8E%E6%96%87%E6%9C%AC%E7%AD%89%E3%80%82%E6%9C%AC%E7%AB%99%E6%8F%90%E4%BE%9B%E6%96%B9%E6%AD%A3\u0026dbv=0\u0026drs=3\u0026pcs=1280x1024\u0026pss=1280x3801\u0026cfv=0\u0026cpl=5\u0026chi=2\u0026cce=true\u0026cec=UTF-8\u0026tlm=1769931685\u0026prot=2\u0026rw=1024\u0026ltu=https%3A%2F%2Fxitongtiandi.net%2Fsoft_lt%2F7017.html\u0026ecd=1\u0026dft=0\u0026uc=1280x1024\u0026pis=-1x-1\u0026sr=1280x1024\u0026tcn=1769931685\u0026qn=5fd469c31b5c2809\u0026ft=1","fqdn":"pos.baidu.com","domain":"baidu.com","tld":"com"},"ip":{"addr":"103.235.46.94","port":443,"asn":55967,"as":"Beijing Baidu Netcom Science and Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":true,"md5":"087b13102c753fc4053eb4e3cfb190ab","sha1":"d19976d73d622993b5eeb15fa8d072887830617f","sha256":"b200ce5baafe896ad209cf4dc9abd9eca9110c00fc079285a99f7ff1866526ca","sha512":"0c93476ef8708d8323e9252222e89cb75f9855dc17b7c359589e89fd13ca49cb16ee8bdfa686aaeebbab912922850dd582eea6ae4deffa154dbbc88410610521","ssdeep":"96:tPh9SeewysXhWeKmPaiMyfV/rqeLmPUSeeUyc4veMZWcbGMptv:Jh9SeeBo1RqnUSeevBZWcbBptv","tlshash":"4891a48f86699ceb5b1739d686833d359ec87e039ca8c5a1e76cdd492b84807121a4c8","size":4427,"data":"","first_seen":"2026-02-01T07:42:01.710022Z","last_seen":"2026-02-01T07:42:01.710022Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xitongtiandi.net/soft_lt/7017.html","fqdn":"xitongtiandi.net","domain":"xitongtiandi.net","tld":"net"},"ip":{"addr":"116.153.39.131","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"introduction_type":"scriptElement","is_inline":true,"md5":"49869a695728a64b27c39d62e5fde42d","sha1":"81187200cd9c3cd0c434f0652d9b4635692f91a3","sha256":"29827e57a2a043f43104e9d7a1016c55bff792829cf6740d45d404ddfdb1acf3","sha512":"0330981650958df8ebe4a1fbef9433ca8cc08d8fdd3adf19f9ad535382cc064bd18f3290d479fcb216d5063fe9af168afa2872015a46ec843515de4f84aded23","ssdeep":"","tlshash":"97e07d6b74e349f0497bf47f631b3701601340135800c5063e8c9d614f35d5e143a1c8","size":436,"data":"","first_seen":"2026-02-01T07:42:01.710978Z","last_seen":"2026-02-01T07:42:01.710978Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xitongtiandi.net/soft_lt/7017.html","fqdn":"xitongtiandi.net","domain":"xitongtiandi.net","tld":"net"},"ip":{"addr":"116.153.39.131","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"introduction_type":"scriptElement","is_inline":true,"md5":"6bf60390c6e068f557df67da02e3e93d","sha1":"3302726541f312627ecc4ac44711381f367323d3","sha256":"bb81c3ec20d4cdf7ab655f462095b9ae13e8d5bf0dd94e0baea3dd19b97a68f4","sha512":"22ff66346f2e6a686c742e50d9b024da4c9b85b94732c04fd401b170ef4ea0587b4fb7c05fec96f92133167d70f8e6d1eead0f2ea44d57e4d8b4f91f4c5d77ef","ssdeep":"","tlshash":"02e02b07467b483100329815051b20002c00040368407c613fec8620ff3880f8de01a9","size":311,"data":"","first_seen":"2026-02-01T07:42:01.712156Z","last_seen":"2026-02-01T07:42:01.712156Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xitongtiandi.net/soft_lt/7017.html","fqdn":"xitongtiandi.net","domain":"xitongtiandi.net","tld":"net"},"ip":{"addr":"116.153.39.131","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"introduction_type":"Function","is_inline":false,"md5":"1c5c9160600df2d96d69a4ea16cec7ed","sha1":"3cf678c9135cc952ba6970ef545035bb757a443f","sha256":"a3520fe88e248d2b6c9c6db93309a037ef969fe297208e5bd7e49a55bb32c808","sha512":"2a298a8c2552c6a6c6f8d3f7327d2e9abfa87a0dbb27e9e528a8539b416155c0860f54f46464dfe7e5d49c7906a9eacdac7e5181b86ef15a83276a8f4fee0546","ssdeep":"","tlshash":"078004d531c35040475331d400571cd4503444f014444d544040d4511c55030d1154dc","size":37,"data":"","first_seen":"2023-04-11T21:49:14Z","last_seen":"2026-06-02T18:08:36.795528Z","times_seen":119926,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xitongtiandi.net/soft_lt/7017.html","fqdn":"xitongtiandi.net","domain":"xitongtiandi.net","tld":"net"},"ip":{"addr":"116.153.39.131","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"introduction_type":"Function","is_inline":false,"md5":"1c5c9160600df2d96d69a4ea16cec7ed","sha1":"3cf678c9135cc952ba6970ef545035bb757a443f","sha256":"a3520fe88e248d2b6c9c6db93309a037ef969fe297208e5bd7e49a55bb32c808","sha512":"2a298a8c2552c6a6c6f8d3f7327d2e9abfa87a0dbb27e9e528a8539b416155c0860f54f46464dfe7e5d49c7906a9eacdac7e5181b86ef15a83276a8f4fee0546","ssdeep":"","tlshash":"078004d531c35040475331d400571cd4503444f014444d544040d4511c55030d1154dc","size":37,"data":"","first_seen":"2023-04-11T21:49:14Z","last_seen":"2026-06-02T18:08:36.795528Z","times_seen":119926,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hm.baidu.com/hm.js?d128ef8d389e0228675892fb380d7193","fqdn":"hm.baidu.com","domain":"baidu.com","tld":"com"},"ip":{"addr":"111.45.11.83","port":443,"asn":9808,"as":"China Mobile Communications Group Co., Ltd.","country":"China","country_code":"CN"},"introduction_type":"scriptElement","is_inline":false,"md5":"303d01f15447e174cc6a80249374616e","sha1":"836ee51b9c48b9918b955ce8cb3a68a428311d1a","sha256":"35f47c4e262fd8c985205f0c0e1187865d79070adffc4dabab7508b98370cb53","sha512":"8f991653049aee230b3aa6ff10114d7c5de2101a65407f7a417e10c1ae089dd8d4858b75c86ec3342152ea4003bf4409839df8743aac6006dac29583cedb7317","ssdeep":"384:aJSoLMJJTRl6s1JXFVCFI/TayvuodsZPIGm8XaR1JRwvutq1tGdc7M04gRw6:a4VJfHgMdvussZPIx82Rwvutcto07v","tlshash":"3ad2d9e9b282713293a324a5157f324af07b5a54bd4968a4f11894c07d38fbb027bfdd","size":30049,"data":"","first_seen":"2026-02-01T07:42:01.650652Z","last_seen":"2026-02-01T07:42:01.650652Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pos.baidu.com/scvm?conwid=370\u0026conhei=180\u0026rdid=7002770\u0026dc=3\u0026di=u7002770\u0026s1=4034329033\u0026s2=2872728590\u0026dri=0\u0026dis=0\u0026dai=1\u0026ps=3402x60\u0026enu=encoding\u0026exps=110277,110275,110261,110252,110011\u0026ant=0\u0026psi=1da7a967d3738233\u0026dcb=___adblockplus_\u0026dtm=HTML_POST\u0026dvi=0.0\u0026dci=-1\u0026dpt=none\u0026tpr=1769931685223\u0026ti=%E6%96%B9%E6%AD%A3%E5%B0%8F%E6%A0%87%E5%AE%8B%E7%AE%80%E4%BD%93%E5%AD%97%E4%BD%93%E5%85%8D%E8%B4%B9%E4%B8%8B%E8%BD%BD%EF%BD%9C%E9%99%84%E6%96%B9%E6%AD%A3%E5%B0%8F%E6%A0%87%E5%AE%8B%E7%AE%80%E4%BD%93%E5%AE%89%E8%A3%85%E4%BD%BF%E7%94%A8%E6%95%99%E7%A8%8B--%E7%B3%BB%E7%BB%9F%E4%B9%8B%E5%AE%B6\u0026ari=2\u0026ver=0620\u0026vc=%E6%99%AE%E9%80%9A%E4%B8%8B%E8%BD%BD%E5%9C%B0%E5%9D%80\u0026kws=%E6%96%B9%E6%AD%A3%E5%B0%8F%E6%A0%87%E5%AE%8B%E7%AE%80%E4%BD%93%E5%AD%97%E4%BD%93%2C%E6%96%B9%E6%AD%A3%E5%B0%8F%E6%A0%87%E5%AE%8B%E7%AE%80%E4%BD%93ttf%2C%E6%96%B9%E6%AD%A3%E5%B0%8F%E6%A0%87%E5%AE%8B%E7%AE%80%E4%BD%93%E5%AE%89%E8%A3%85\u0026dps=%E6%96%B9%E6%AD%A3%E5%B0%8F%E6%A0%87%E5%AE%8B%E7%AE%80%E4%BD%93%E5%AD%97%E4%BD%93%E3%80%82%E8%AF%A5%E5%AD%97%E4%BD%93%E9%9D%9E%E5%B8%B8%E7%BE%8E%E8%A7%82%EF%BC%8C%E9%80%82%E5%90%88%E5%9C%A8%E6%AD%A3%E5%BC%8F%E7%9A%84%E5%9C%BA%E5%90%88%E6%9D%A5%E8%BF%9B%E8%A1%8C%E4%BD%BF%E7%94%A8%EF%BC%8C%E6%AF%94%E5%A6%82%E7%94%A8%E4%BA%8E%E6%8A%95%E5%BD%B1%E6%BC%94%E7%A4%BA%EF%BC%8C%E6%89%93%E5%8D%B0%E5%90%88%E5%90%8C%E6%96%87%E6%9C%AC%EF%BC%8C%E8%AF%B4%E6%98%8E%E6%96%87%E6%9C%AC%E7%AD%89%E3%80%82%E6%9C%AC%E7%AB%99%E6%8F%90%E4%BE%9B%E6%96%B9%E6%AD%A3\u0026dbv=0\u0026drs=3\u0026pcs=1280x1024\u0026pss=1280x3801\u0026cfv=0\u0026cpl=5\u0026chi=2\u0026cce=true\u0026cec=UTF-8\u0026tlm=1769931685\u0026prot=2\u0026rw=1024\u0026ltu=https%3A%2F%2Fxitongtiandi.net%2Fsoft_lt%2F7017.html\u0026ecd=1\u0026dft=0\u0026uc=1280x1024\u0026pis=-1x-1\u0026sr=1280x1024\u0026tcn=1769931685\u0026qn=5fd469c31b5c2809\u0026ft=1","fqdn":"pos.baidu.com","domain":"baidu.com","tld":"com"},"ip":{"addr":"103.235.46.94","port":443,"asn":55967,"as":"Beijing Baidu Netcom Science and Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":true,"md5":"00f4736d4172f3d57f6c3ee9ab14eae0","sha1":"0a9c0a166e39adecacb3748c7158a4daabda0b18","sha256":"8864e7c8f853a1d216248ccfa0b88d04fa960a763263a034dd859e761f109feb","sha512":"4e86c6dd986be85cc75699de6865e8c43eeb25f178008d645da2449256fb937a37802e39d4bef285399608dc1d39483c81d0231c64ca4a88629029ff4456ac3c","ssdeep":"","tlshash":"69212344e5319d736164e40d35ab324ea43faf376e0428d0d2684f592b6d11b736c7d3","size":1373,"data":"","first_seen":"2026-02-01T07:42:01.713145Z","last_seen":"2026-02-01T07:42:01.713145Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xitongtiandi.net/soft_lt/7017.html","fqdn":"xitongtiandi.net","domain":"xitongtiandi.net","tld":"net"},"ip":{"addr":"116.153.39.131","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"introduction_type":"scriptElement","is_inline":true,"md5":"228eff0eb5d24723dca5190d841dfdbf","sha1":"fda9af452c49d80cdfc98d6ece5e52941a2e4b5f","sha256":"46d398217da760cb6154e215cefde07b4efa5a9c51895a6b13fd6775ef5148d5","sha512":"5ea529829b28edf9eeaf536f41842e8c8fc2e1e766b3d438a996e4aa415264fc39f2fd82a58ed680a5e2d9435301ad5e68224259592a1b272fe2447a088f6023","ssdeep":"","tlshash":"bfd02b2bbc5724747757046d13bed54cb2d2114f5069d044788df8405f51dd9082d7c8","size":289,"data":"","first_seen":"2026-02-01T07:42:01.714074Z","last_seen":"2026-02-01T07:42:01.714074Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xitongtiandi.net/soft_lt/7017.html","fqdn":"xitongtiandi.net","domain":"xitongtiandi.net","tld":"net"},"ip":{"addr":"116.153.39.131","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"introduction_type":"Function","is_inline":false,"md5":"1c5c9160600df2d96d69a4ea16cec7ed","sha1":"3cf678c9135cc952ba6970ef545035bb757a443f","sha256":"a3520fe88e248d2b6c9c6db93309a037ef969fe297208e5bd7e49a55bb32c808","sha512":"2a298a8c2552c6a6c6f8d3f7327d2e9abfa87a0dbb27e9e528a8539b416155c0860f54f46464dfe7e5d49c7906a9eacdac7e5181b86ef15a83276a8f4fee0546","ssdeep":"","tlshash":"078004d531c35040475331d400571cd4503444f014444d544040d4511c55030d1154dc","size":37,"data":"","first_seen":"2023-04-11T21:49:14Z","last_seen":"2026-06-02T18:08:36.795528Z","times_seen":119926,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pos.baidu.com/scvm?conwid=370\u0026conhei=180\u0026rdid=7002770\u0026dc=3\u0026di=u7002770\u0026s1=4034329033\u0026s2=2872728590\u0026dri=0\u0026dis=0\u0026dai=1\u0026ps=3402x60\u0026enu=encoding\u0026exps=110277,110275,110261,110252,110011\u0026ant=0\u0026psi=1da7a967d3738233\u0026dcb=___adblockplus_\u0026dtm=HTML_POST\u0026dvi=0.0\u0026dci=-1\u0026dpt=none\u0026tpr=1769931685223\u0026ti=%E6%96%B9%E6%AD%A3%E5%B0%8F%E6%A0%87%E5%AE%8B%E7%AE%80%E4%BD%93%E5%AD%97%E4%BD%93%E5%85%8D%E8%B4%B9%E4%B8%8B%E8%BD%BD%EF%BD%9C%E9%99%84%E6%96%B9%E6%AD%A3%E5%B0%8F%E6%A0%87%E5%AE%8B%E7%AE%80%E4%BD%93%E5%AE%89%E8%A3%85%E4%BD%BF%E7%94%A8%E6%95%99%E7%A8%8B--%E7%B3%BB%E7%BB%9F%E4%B9%8B%E5%AE%B6\u0026ari=2\u0026ver=0620\u0026vc=%E6%99%AE%E9%80%9A%E4%B8%8B%E8%BD%BD%E5%9C%B0%E5%9D%80\u0026kws=%E6%96%B9%E6%AD%A3%E5%B0%8F%E6%A0%87%E5%AE%8B%E7%AE%80%E4%BD%93%E5%AD%97%E4%BD%93%2C%E6%96%B9%E6%AD%A3%E5%B0%8F%E6%A0%87%E5%AE%8B%E7%AE%80%E4%BD%93ttf%2C%E6%96%B9%E6%AD%A3%E5%B0%8F%E6%A0%87%E5%AE%8B%E7%AE%80%E4%BD%93%E5%AE%89%E8%A3%85\u0026dps=%E6%96%B9%E6%AD%A3%E5%B0%8F%E6%A0%87%E5%AE%8B%E7%AE%80%E4%BD%93%E5%AD%97%E4%BD%93%E3%80%82%E8%AF%A5%E5%AD%97%E4%BD%93%E9%9D%9E%E5%B8%B8%E7%BE%8E%E8%A7%82%EF%BC%8C%E9%80%82%E5%90%88%E5%9C%A8%E6%AD%A3%E5%BC%8F%E7%9A%84%E5%9C%BA%E5%90%88%E6%9D%A5%E8%BF%9B%E8%A1%8C%E4%BD%BF%E7%94%A8%EF%BC%8C%E6%AF%94%E5%A6%82%E7%94%A8%E4%BA%8E%E6%8A%95%E5%BD%B1%E6%BC%94%E7%A4%BA%EF%BC%8C%E6%89%93%E5%8D%B0%E5%90%88%E5%90%8C%E6%96%87%E6%9C%AC%EF%BC%8C%E8%AF%B4%E6%98%8E%E6%96%87%E6%9C%AC%E7%AD%89%E3%80%82%E6%9C%AC%E7%AB%99%E6%8F%90%E4%BE%9B%E6%96%B9%E6%AD%A3\u0026dbv=0\u0026drs=3\u0026pcs=1280x1024\u0026pss=1280x3801\u0026cfv=0\u0026cpl=5\u0026chi=2\u0026cce=true\u0026cec=UTF-8\u0026tlm=1769931685\u0026prot=2\u0026rw=1024\u0026ltu=https%3A%2F%2Fxitongtiandi.net%2Fsoft_lt%2F7017.html\u0026ecd=1\u0026dft=0\u0026uc=1280x1024\u0026pis=-1x-1\u0026sr=1280x1024\u0026tcn=1769931685\u0026qn=5fd469c31b5c2809\u0026ft=1","fqdn":"pos.baidu.com","domain":"baidu.com","tld":"com"},"ip":{"addr":"103.235.46.94","port":443,"asn":55967,"as":"Beijing Baidu Netcom Science and Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":true,"md5":"5d4e296cd06cfa9d1deb88320747bea4","sha1":"77fef758e53794ff3faaca75b72a87069d24bcf9","sha256":"490946c119b2dcf7fed28b85345b61a41acfea2b0db35a4c089ef633d73fc6bf","sha512":"270583afb176f2e6ffbdf3eac05e6203b1f599e20348807714edb9d48a33ed7e71998974aca0344ad4d099f99d194fbd7aabbc011411555d275b419f400f5dc6","ssdeep":"192:5+FNhH13ZZC65sd12RKubCE+uIaSCxjQMUL2C5QMJWMHCCOCwCNprkcILTlU8aSS:5aX5sd16IpLxN/k5UjK0R2I","tlshash":"94521f5a2bef0473e45b342d8f4f01047a35968f9e4acd187d6da1c48f60a3891b6fb8","size":14476,"data":"","first_seen":"2023-03-07T12:24:52Z","last_seen":"2026-06-01T04:39:40.448914Z","times_seen":338,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pos.baidu.com/scvm?conwid=370\u0026conhei=180\u0026rdid=7002770\u0026dc=3\u0026di=u7002770\u0026s1=4034329033\u0026s2=2872728590\u0026dri=0\u0026dis=0\u0026dai=1\u0026ps=3402x60\u0026enu=encoding\u0026exps=110277,110275,110261,110252,110011\u0026ant=0\u0026psi=1da7a967d3738233\u0026dcb=___adblockplus_\u0026dtm=HTML_POST\u0026dvi=0.0\u0026dci=-1\u0026dpt=none\u0026tpr=1769931685223\u0026ti=%E6%96%B9%E6%AD%A3%E5%B0%8F%E6%A0%87%E5%AE%8B%E7%AE%80%E4%BD%93%E5%AD%97%E4%BD%93%E5%85%8D%E8%B4%B9%E4%B8%8B%E8%BD%BD%EF%BD%9C%E9%99%84%E6%96%B9%E6%AD%A3%E5%B0%8F%E6%A0%87%E5%AE%8B%E7%AE%80%E4%BD%93%E5%AE%89%E8%A3%85%E4%BD%BF%E7%94%A8%E6%95%99%E7%A8%8B--%E7%B3%BB%E7%BB%9F%E4%B9%8B%E5%AE%B6\u0026ari=2\u0026ver=0620\u0026vc=%E6%99%AE%E9%80%9A%E4%B8%8B%E8%BD%BD%E5%9C%B0%E5%9D%80\u0026kws=%E6%96%B9%E6%AD%A3%E5%B0%8F%E6%A0%87%E5%AE%8B%E7%AE%80%E4%BD%93%E5%AD%97%E4%BD%93%2C%E6%96%B9%E6%AD%A3%E5%B0%8F%E6%A0%87%E5%AE%8B%E7%AE%80%E4%BD%93ttf%2C%E6%96%B9%E6%AD%A3%E5%B0%8F%E6%A0%87%E5%AE%8B%E7%AE%80%E4%BD%93%E5%AE%89%E8%A3%85\u0026dps=%E6%96%B9%E6%AD%A3%E5%B0%8F%E6%A0%87%E5%AE%8B%E7%AE%80%E4%BD%93%E5%AD%97%E4%BD%93%E3%80%82%E8%AF%A5%E5%AD%97%E4%BD%93%E9%9D%9E%E5%B8%B8%E7%BE%8E%E8%A7%82%EF%BC%8C%E9%80%82%E5%90%88%E5%9C%A8%E6%AD%A3%E5%BC%8F%E7%9A%84%E5%9C%BA%E5%90%88%E6%9D%A5%E8%BF%9B%E8%A1%8C%E4%BD%BF%E7%94%A8%EF%BC%8C%E6%AF%94%E5%A6%82%E7%94%A8%E4%BA%8E%E6%8A%95%E5%BD%B1%E6%BC%94%E7%A4%BA%EF%BC%8C%E6%89%93%E5%8D%B0%E5%90%88%E5%90%8C%E6%96%87%E6%9C%AC%EF%BC%8C%E8%AF%B4%E6%98%8E%E6%96%87%E6%9C%AC%E7%AD%89%E3%80%82%E6%9C%AC%E7%AB%99%E6%8F%90%E4%BE%9B%E6%96%B9%E6%AD%A3\u0026dbv=0\u0026drs=3\u0026pcs=1280x1024\u0026pss=1280x3801\u0026cfv=0\u0026cpl=5\u0026chi=2\u0026cce=true\u0026cec=UTF-8\u0026tlm=1769931685\u0026prot=2\u0026rw=1024\u0026ltu=https%3A%2F%2Fxitongtiandi.net%2Fsoft_lt%2F7017.html\u0026ecd=1\u0026dft=0\u0026uc=1280x1024\u0026pis=-1x-1\u0026sr=1280x1024\u0026tcn=1769931685\u0026qn=5fd469c31b5c2809\u0026ft=1","fqdn":"pos.baidu.com","domain":"baidu.com","tld":"com"},"ip":{"addr":"103.235.46.94","port":443,"asn":55967,"as":"Beijing Baidu Netcom Science and Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":true,"md5":"0c4d0bd9f553e0245e50577d9b7063ea","sha1":"af51058dfdcfd0cea2bf281cf32fb8c925c71577","sha256":"df7b955294b6edbf7ecfe8c226efba4384e115e4abd36b972d6d8040fefbfa5a","sha512":"4b7d42103d88acec2214a78412fba06379f70c1e7c9539172895dfa8d1b2da6ec9c6c83771c77748e5f110dfbba9909f8bc8df49ae744ec4606a1141a1465ee6","ssdeep":"","tlshash":"f481d78f875daceb1a2739c5c6873d35eec87f029cacc4f0c3289d45268856b211a8c9","size":4074,"data":"","first_seen":"2026-02-01T07:42:01.716041Z","last_seen":"2026-02-01T07:42:01.716041Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xitongtiandi.net/soft_lt/7017.html","fqdn":"xitongtiandi.net","domain":"xitongtiandi.net","tld":"net"},"ip":{"addr":"116.153.39.131","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"introduction_type":"scriptElement","is_inline":true,"md5":"ca09eb23bea5af8d17302fe31a2e4a06","sha1":"72acb136d7a9066e2a4b8faa5e4db11059cfef21","sha256":"7e6052ad3bd680a25332c0c7577bb5b862ad05bc27f05778ddc69e6facfc0bf5","sha512":"d04c294c1b29af97417d2739ef55255b53c8cf0c80521fa5184e86323e34e7e0c1f4132f56d5a93ff06c15b4836f4144ce4438c20e76a27c13437542923476fe","ssdeep":"","tlshash":"40f02b6e9cb706b4769214be4a2fa418f1e6512f1044d402794cfc014f10da74b1dbe4","size":452,"data":"","first_seen":"2023-03-07T12:12:30Z","last_seen":"2026-06-02T11:40:54.502647Z","times_seen":329,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xitongtiandi.net/soft_lt/7017.html","fqdn":"xitongtiandi.net","domain":"xitongtiandi.net","tld":"net"},"ip":{"addr":"116.153.39.131","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"introduction_type":"Function","is_inline":false,"md5":"85c8ee3085d625348853f23c51cb5f49","sha1":"dcd80d5c4e2c306b1b969c32026e4d6ea3a53f63","sha256":"6e4c62176f15c64af16840e07a6600b092e2b70722d1fbef16df2a4b5150e095","sha512":"3f0cb9b02edab8232df4778b413f34ac03659f5f6b29a2831e05fce3242157949af70871d4f942c85978e613a6de5fa8cff22368677f32171cd83990c9994f07","ssdeep":"","tlshash":"e1f08bde6395c54274e2ecfd7b607b35b08d0c6a1cfda4a84c00610237c60bb00c018f","size":577,"data":"","first_seen":"2026-02-01T07:42:01.717616Z","last_seen":"2026-02-01T07:42:01.717616Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pos.baidu.com/scvm?conwid=370\u0026conhei=180\u0026rdid=7002770\u0026dc=3\u0026di=u7002770\u0026s1=4034329033\u0026s2=2872728590\u0026dri=0\u0026dis=0\u0026dai=1\u0026ps=3402x60\u0026enu=encoding\u0026exps=110277,110275,110261,110252,110011\u0026ant=0\u0026psi=1da7a967d3738233\u0026dcb=___adblockplus_\u0026dtm=HTML_POST\u0026dvi=0.0\u0026dci=-1\u0026dpt=none\u0026tpr=1769931685223\u0026ti=%E6%96%B9%E6%AD%A3%E5%B0%8F%E6%A0%87%E5%AE%8B%E7%AE%80%E4%BD%93%E5%AD%97%E4%BD%93%E5%85%8D%E8%B4%B9%E4%B8%8B%E8%BD%BD%EF%BD%9C%E9%99%84%E6%96%B9%E6%AD%A3%E5%B0%8F%E6%A0%87%E5%AE%8B%E7%AE%80%E4%BD%93%E5%AE%89%E8%A3%85%E4%BD%BF%E7%94%A8%E6%95%99%E7%A8%8B--%E7%B3%BB%E7%BB%9F%E4%B9%8B%E5%AE%B6\u0026ari=2\u0026ver=0620\u0026vc=%E6%99%AE%E9%80%9A%E4%B8%8B%E8%BD%BD%E5%9C%B0%E5%9D%80\u0026kws=%E6%96%B9%E6%AD%A3%E5%B0%8F%E6%A0%87%E5%AE%8B%E7%AE%80%E4%BD%93%E5%AD%97%E4%BD%93%2C%E6%96%B9%E6%AD%A3%E5%B0%8F%E6%A0%87%E5%AE%8B%E7%AE%80%E4%BD%93ttf%2C%E6%96%B9%E6%AD%A3%E5%B0%8F%E6%A0%87%E5%AE%8B%E7%AE%80%E4%BD%93%E5%AE%89%E8%A3%85\u0026dps=%E6%96%B9%E6%AD%A3%E5%B0%8F%E6%A0%87%E5%AE%8B%E7%AE%80%E4%BD%93%E5%AD%97%E4%BD%93%E3%80%82%E8%AF%A5%E5%AD%97%E4%BD%93%E9%9D%9E%E5%B8%B8%E7%BE%8E%E8%A7%82%EF%BC%8C%E9%80%82%E5%90%88%E5%9C%A8%E6%AD%A3%E5%BC%8F%E7%9A%84%E5%9C%BA%E5%90%88%E6%9D%A5%E8%BF%9B%E8%A1%8C%E4%BD%BF%E7%94%A8%EF%BC%8C%E6%AF%94%E5%A6%82%E7%94%A8%E4%BA%8E%E6%8A%95%E5%BD%B1%E6%BC%94%E7%A4%BA%EF%BC%8C%E6%89%93%E5%8D%B0%E5%90%88%E5%90%8C%E6%96%87%E6%9C%AC%EF%BC%8C%E8%AF%B4%E6%98%8E%E6%96%87%E6%9C%AC%E7%AD%89%E3%80%82%E6%9C%AC%E7%AB%99%E6%8F%90%E4%BE%9B%E6%96%B9%E6%AD%A3\u0026dbv=0\u0026drs=3\u0026pcs=1280x1024\u0026pss=1280x3801\u0026cfv=0\u0026cpl=5\u0026chi=2\u0026cce=true\u0026cec=UTF-8\u0026tlm=1769931685\u0026prot=2\u0026rw=1024\u0026ltu=https%3A%2F%2Fxitongtiandi.net%2Fsoft_lt%2F7017.html\u0026ecd=1\u0026dft=0\u0026uc=1280x1024\u0026pis=-1x-1\u0026sr=1280x1024\u0026tcn=1769931685\u0026qn=5fd469c31b5c2809\u0026ft=1","fqdn":"pos.baidu.com","domain":"baidu.com","tld":"com"},"ip":{"addr":"103.235.46.94","port":443,"asn":55967,"as":"Beijing Baidu Netcom Science and Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":true,"md5":"333d0a528d5a49b9172ab72ee2f7eec8","sha1":"75f771f2f112ce84cd4d1cea2273de4824c89edd","sha256":"0e45242c4bc23b8f926d3b154f2fee0092f84533ab699324cff5a162708db99b","sha512":"a185fabab837a7e3c2d5d5d8d30986fe16ecba7f596b6b42715edb19db4acf5add8946a586f4a88ddfe7fe692b362747b17cd75e8c1ef846b3334d5bdcca72fe","ssdeep":"","tlshash":"f2112129f78478fa9251757c979fe313712a30932d448e247415eca1b838ca209b386c","size":989,"data":"","first_seen":"2023-03-07T12:24:52Z","last_seen":"2026-06-01T04:39:40.464504Z","times_seen":335,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pos.baidu.com/scvm?conwid=370\u0026conhei=180\u0026rdid=7002770\u0026dc=3\u0026di=u7002770\u0026s1=4034329033\u0026s2=2872728590\u0026dri=0\u0026dis=0\u0026dai=1\u0026ps=3402x60\u0026enu=encoding\u0026exps=110277,110275,110261,110252,110011\u0026ant=0\u0026psi=1da7a967d3738233\u0026dcb=___adblockplus_\u0026dtm=HTML_POST\u0026dvi=0.0\u0026dci=-1\u0026dpt=none\u0026tpr=1769931685223\u0026ti=%E6%96%B9%E6%AD%A3%E5%B0%8F%E6%A0%87%E5%AE%8B%E7%AE%80%E4%BD%93%E5%AD%97%E4%BD%93%E5%85%8D%E8%B4%B9%E4%B8%8B%E8%BD%BD%EF%BD%9C%E9%99%84%E6%96%B9%E6%AD%A3%E5%B0%8F%E6%A0%87%E5%AE%8B%E7%AE%80%E4%BD%93%E5%AE%89%E8%A3%85%E4%BD%BF%E7%94%A8%E6%95%99%E7%A8%8B--%E7%B3%BB%E7%BB%9F%E4%B9%8B%E5%AE%B6\u0026ari=2\u0026ver=0620\u0026vc=%E6%99%AE%E9%80%9A%E4%B8%8B%E8%BD%BD%E5%9C%B0%E5%9D%80\u0026kws=%E6%96%B9%E6%AD%A3%E5%B0%8F%E6%A0%87%E5%AE%8B%E7%AE%80%E4%BD%93%E5%AD%97%E4%BD%93%2C%E6%96%B9%E6%AD%A3%E5%B0%8F%E6%A0%87%E5%AE%8B%E7%AE%80%E4%BD%93ttf%2C%E6%96%B9%E6%AD%A3%E5%B0%8F%E6%A0%87%E5%AE%8B%E7%AE%80%E4%BD%93%E5%AE%89%E8%A3%85\u0026dps=%E6%96%B9%E6%AD%A3%E5%B0%8F%E6%A0%87%E5%AE%8B%E7%AE%80%E4%BD%93%E5%AD%97%E4%BD%93%E3%80%82%E8%AF%A5%E5%AD%97%E4%BD%93%E9%9D%9E%E5%B8%B8%E7%BE%8E%E8%A7%82%EF%BC%8C%E9%80%82%E5%90%88%E5%9C%A8%E6%AD%A3%E5%BC%8F%E7%9A%84%E5%9C%BA%E5%90%88%E6%9D%A5%E8%BF%9B%E8%A1%8C%E4%BD%BF%E7%94%A8%EF%BC%8C%E6%AF%94%E5%A6%82%E7%94%A8%E4%BA%8E%E6%8A%95%E5%BD%B1%E6%BC%94%E7%A4%BA%EF%BC%8C%E6%89%93%E5%8D%B0%E5%90%88%E5%90%8C%E6%96%87%E6%9C%AC%EF%BC%8C%E8%AF%B4%E6%98%8E%E6%96%87%E6%9C%AC%E7%AD%89%E3%80%82%E6%9C%AC%E7%AB%99%E6%8F%90%E4%BE%9B%E6%96%B9%E6%AD%A3\u0026dbv=0\u0026drs=3\u0026pcs=1280x1024\u0026pss=1280x3801\u0026cfv=0\u0026cpl=5\u0026chi=2\u0026cce=true\u0026cec=UTF-8\u0026tlm=1769931685\u0026prot=2\u0026rw=1024\u0026ltu=https%3A%2F%2Fxitongtiandi.net%2Fsoft_lt%2F7017.html\u0026ecd=1\u0026dft=0\u0026uc=1280x1024\u0026pis=-1x-1\u0026sr=1280x1024\u0026tcn=1769931685\u0026qn=5fd469c31b5c2809\u0026ft=1","fqdn":"pos.baidu.com","domain":"baidu.com","tld":"com"},"ip":{"addr":"103.235.46.94","port":443,"asn":55967,"as":"Beijing Baidu Netcom Science and Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":true,"md5":"87a92bda90312e8f4352aa0aff163d1c","sha1":"241190b918a71247e6b34fd66ce89abcb705a12a","sha256":"fc64599d60b225327b4cd232f988aee43f25df9037a6ef64322b0497c4b2e3d1","sha512":"de63019ca776dd385511091774e12cb0c578c6219c7ea9692ecc87a9da15fb172cef632d571c993d6aef900fc8d8d5855c9634d611d2c24b0954e0b978e03609","ssdeep":"","tlshash":"b53153de6824992fb57215b09df75a44f0e9a433e86c4c506182aef8d12c7c6011ff0f","size":1622,"data":"","first_seen":"2026-02-01T07:42:01.719157Z","last_seen":"2026-02-01T07:42:01.719157Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zz.bdstatic.com/linksubmit/push.js","fqdn":"zz.bdstatic.com","domain":"bdstatic.com","tld":"com"},"ip":{"addr":"157.255.63.48","port":443,"asn":136958,"as":"China Unicom Guangdong IP network","country":"China","country_code":"CN"},"introduction_type":"scriptElement","is_inline":false,"md5":"f9fc52ab67f035b8baf5d558714cc94d","sha1":"37062a6fb1ef410d496137d44275738ae743c747","sha256":"c31f2003f1c93ac1e34b09f376d97a65da6e110bf451cf1e0e50a7946c5e7212","sha512":"ebb0415852fbb5b964094e2e55a28b90f701dff1977c8b98c6f24d65d09067dc0c417d01492ca28a4be6747816d7c0bfac87b73a33725aee047a5d2f7ab83182","ssdeep":"","tlshash":"11e0cde86054c01c0dcb107135bb324ce7771d675a645545c04d9445396cb1f8247fe9","size":308,"data":"","first_seen":"2023-03-07T01:18:58Z","last_seen":"2026-06-02T18:04:36.187622Z","times_seen":22957,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xitongtiandi.net/soft_lt/7017.html","fqdn":"xitongtiandi.net","domain":"xitongtiandi.net","tld":"net"},"ip":{"addr":"116.153.39.131","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"introduction_type":"scriptElement","is_inline":true,"md5":"2cb1302ba19e917538f34c89c4185b85","sha1":"44441c2150dc1748a0a895a4340279a5d4f10270","sha256":"6f291f53cb2b78c6f404884738c674f09c81e1bf24946b0e2b46fbe234d7134a","sha512":"fb36d4412f567ce7dd16a86d10a902cf360b539ed629888736082d3f7a51ba9b38122d8eff4d258931d4396b974250b6d21ba755347f165a24e24505311e0b11","ssdeep":"","tlshash":"69d02b1f5c1718742796046a52bfd848f1b1114f2079d501b88de8444f50dd90c2dbc8","size":281,"data":"","first_seen":"2026-02-01T07:42:01.720271Z","last_seen":"2026-02-01T07:42:01.720271Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xitongtiandi.net/soft_lt/7017.html","fqdn":"xitongtiandi.net","domain":"xitongtiandi.net","tld":"net"},"ip":{"addr":"116.153.39.131","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"introduction_type":"scriptElement","is_inline":true,"md5":"2d447c83d0f3fe7bf6ce701afbbdb806","sha1":"1f3c0bee7b40ae84e7c3b7db8069731596474bae","sha256":"ecafff9b520e9c4433c0ab874a22d8d29123c66117a89d5b098a47eaf82e0ef9","sha512":"d6a66aa8d82b1a0c54f74b8220461a8d5380054b2155200d20f011253af24ead869b2827496d439504e4187e1c328774b292d3ae957e75fbd419ee202f0558c1","ssdeep":"","tlshash":"c211f91c5963e5a908f32169978ba248e27310133119edc6fe5d8b01cf9ce1c4ee7b9e","size":1056,"data":"","first_seen":"2026-02-01T07:42:01.721427Z","last_seen":"2026-02-01T07:42:01.721427Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hm.baidu.com/hm.js?8d3a8c2aa80b0500d1cea1a67160df2d","fqdn":"hm.baidu.com","domain":"baidu.com","tld":"com"},"ip":{"addr":"111.45.11.83","port":443,"asn":9808,"as":"China Mobile Communications Group Co., Ltd.","country":"China","country_code":"CN"},"introduction_type":"scriptElement","is_inline":false,"md5":"3849b2edcf3bd2d6746af0fb00fd4a6b","sha1":"40f763c225b75b7f9e756e808f7f3582eef6da5f","sha256":"453fc02ea0121282e7ffe41979e3beb1c01976a0809c408674bf0b15a14c3bd5","sha512":"783d0d62e2c43bb2d9ac400b46872fa119569014e887bad666d28e425ea614cf945c589c1608d1f91d38b7d0f0f73a7c4429bd517ac995e0e1f545731a415dd2","ssdeep":"384:zYJSoLMJJTRl6s1JXFVCFI/TayvuodsZPIGm8XaR1JRwvutq1tGdc7M04gRw6:zY4VJfHgMdvussZPIx82Rwvutcto07v","tlshash":"ead2d9e9b282713293a324a5153f324af07b5a54bd4968a4f11894c07d38fbb027bfdd","size":29902,"data":"","first_seen":"2026-02-01T07:42:01.664594Z","last_seen":"2026-02-01T07:42:01.664594Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pos.baidu.com/scvm?conwid=370\u0026conhei=180\u0026rdid=7002770\u0026dc=3\u0026di=u7002770\u0026s1=4034329033\u0026s2=2872728590\u0026dri=0\u0026dis=0\u0026dai=1\u0026ps=3402x60\u0026enu=encoding\u0026exps=110277,110275,110261,110252,110011\u0026ant=0\u0026psi=1da7a967d3738233\u0026dcb=___adblockplus_\u0026dtm=HTML_POST\u0026dvi=0.0\u0026dci=-1\u0026dpt=none\u0026tpr=1769931685223\u0026ti=%E6%96%B9%E6%AD%A3%E5%B0%8F%E6%A0%87%E5%AE%8B%E7%AE%80%E4%BD%93%E5%AD%97%E4%BD%93%E5%85%8D%E8%B4%B9%E4%B8%8B%E8%BD%BD%EF%BD%9C%E9%99%84%E6%96%B9%E6%AD%A3%E5%B0%8F%E6%A0%87%E5%AE%8B%E7%AE%80%E4%BD%93%E5%AE%89%E8%A3%85%E4%BD%BF%E7%94%A8%E6%95%99%E7%A8%8B--%E7%B3%BB%E7%BB%9F%E4%B9%8B%E5%AE%B6\u0026ari=2\u0026ver=0620\u0026vc=%E6%99%AE%E9%80%9A%E4%B8%8B%E8%BD%BD%E5%9C%B0%E5%9D%80\u0026kws=%E6%96%B9%E6%AD%A3%E5%B0%8F%E6%A0%87%E5%AE%8B%E7%AE%80%E4%BD%93%E5%AD%97%E4%BD%93%2C%E6%96%B9%E6%AD%A3%E5%B0%8F%E6%A0%87%E5%AE%8B%E7%AE%80%E4%BD%93ttf%2C%E6%96%B9%E6%AD%A3%E5%B0%8F%E6%A0%87%E5%AE%8B%E7%AE%80%E4%BD%93%E5%AE%89%E8%A3%85\u0026dps=%E6%96%B9%E6%AD%A3%E5%B0%8F%E6%A0%87%E5%AE%8B%E7%AE%80%E4%BD%93%E5%AD%97%E4%BD%93%E3%80%82%E8%AF%A5%E5%AD%97%E4%BD%93%E9%9D%9E%E5%B8%B8%E7%BE%8E%E8%A7%82%EF%BC%8C%E9%80%82%E5%90%88%E5%9C%A8%E6%AD%A3%E5%BC%8F%E7%9A%84%E5%9C%BA%E5%90%88%E6%9D%A5%E8%BF%9B%E8%A1%8C%E4%BD%BF%E7%94%A8%EF%BC%8C%E6%AF%94%E5%A6%82%E7%94%A8%E4%BA%8E%E6%8A%95%E5%BD%B1%E6%BC%94%E7%A4%BA%EF%BC%8C%E6%89%93%E5%8D%B0%E5%90%88%E5%90%8C%E6%96%87%E6%9C%AC%EF%BC%8C%E8%AF%B4%E6%98%8E%E6%96%87%E6%9C%AC%E7%AD%89%E3%80%82%E6%9C%AC%E7%AB%99%E6%8F%90%E4%BE%9B%E6%96%B9%E6%AD%A3\u0026dbv=0\u0026drs=3\u0026pcs=1280x1024\u0026pss=1280x3801\u0026cfv=0\u0026cpl=5\u0026chi=2\u0026cce=true\u0026cec=UTF-8\u0026tlm=1769931685\u0026prot=2\u0026rw=1024\u0026ltu=https%3A%2F%2Fxitongtiandi.net%2Fsoft_lt%2F7017.html\u0026ecd=1\u0026dft=0\u0026uc=1280x1024\u0026pis=-1x-1\u0026sr=1280x1024\u0026tcn=1769931685\u0026qn=5fd469c31b5c2809\u0026ft=1","fqdn":"pos.baidu.com","domain":"baidu.com","tld":"com"},"ip":{"addr":"103.235.46.94","port":443,"asn":55967,"as":"Beijing Baidu Netcom Science and Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":true,"md5":"be7f95f4b660c9e9ef9929a532315ea2","sha1":"2dadcf96b7674ad775c7ae79d2edabbd040d5052","sha256":"2b37ab63fdc70ede05e9ea1ab287c7654bf8a51ff184af48b43360f09e84a514","sha512":"1476dddcb65c0b8b0c98a164e6a8ee60999da66aa4996e8baa90ffa7b5570a93f25e95680fed0379a75f5451c14c65efd7811d4c8a2050eab3b0f45774ee6f51","ssdeep":"","tlshash":"ebf0282bb31a67334ab0095e925ed7423e51d6e3eb82b4524268f810f683f13c80ed34","size":603,"data":"","first_seen":"2023-03-07T12:24:52Z","last_seen":"2026-06-01T14:55:24.287226Z","times_seen":647,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pos.baidu.com/scvm?conwid=370\u0026conhei=180\u0026rdid=7002770\u0026dc=3\u0026di=u7002770\u0026s1=4034329033\u0026s2=2872728590\u0026dri=0\u0026dis=0\u0026dai=1\u0026ps=3402x60\u0026enu=encoding\u0026exps=110277,110275,110261,110252,110011\u0026ant=0\u0026psi=1da7a967d3738233\u0026dcb=___adblockplus_\u0026dtm=HTML_POST\u0026dvi=0.0\u0026dci=-1\u0026dpt=none\u0026tpr=1769931685223\u0026ti=%E6%96%B9%E6%AD%A3%E5%B0%8F%E6%A0%87%E5%AE%8B%E7%AE%80%E4%BD%93%E5%AD%97%E4%BD%93%E5%85%8D%E8%B4%B9%E4%B8%8B%E8%BD%BD%EF%BD%9C%E9%99%84%E6%96%B9%E6%AD%A3%E5%B0%8F%E6%A0%87%E5%AE%8B%E7%AE%80%E4%BD%93%E5%AE%89%E8%A3%85%E4%BD%BF%E7%94%A8%E6%95%99%E7%A8%8B--%E7%B3%BB%E7%BB%9F%E4%B9%8B%E5%AE%B6\u0026ari=2\u0026ver=0620\u0026vc=%E6%99%AE%E9%80%9A%E4%B8%8B%E8%BD%BD%E5%9C%B0%E5%9D%80\u0026kws=%E6%96%B9%E6%AD%A3%E5%B0%8F%E6%A0%87%E5%AE%8B%E7%AE%80%E4%BD%93%E5%AD%97%E4%BD%93%2C%E6%96%B9%E6%AD%A3%E5%B0%8F%E6%A0%87%E5%AE%8B%E7%AE%80%E4%BD%93ttf%2C%E6%96%B9%E6%AD%A3%E5%B0%8F%E6%A0%87%E5%AE%8B%E7%AE%80%E4%BD%93%E5%AE%89%E8%A3%85\u0026dps=%E6%96%B9%E6%AD%A3%E5%B0%8F%E6%A0%87%E5%AE%8B%E7%AE%80%E4%BD%93%E5%AD%97%E4%BD%93%E3%80%82%E8%AF%A5%E5%AD%97%E4%BD%93%E9%9D%9E%E5%B8%B8%E7%BE%8E%E8%A7%82%EF%BC%8C%E9%80%82%E5%90%88%E5%9C%A8%E6%AD%A3%E5%BC%8F%E7%9A%84%E5%9C%BA%E5%90%88%E6%9D%A5%E8%BF%9B%E8%A1%8C%E4%BD%BF%E7%94%A8%EF%BC%8C%E6%AF%94%E5%A6%82%E7%94%A8%E4%BA%8E%E6%8A%95%E5%BD%B1%E6%BC%94%E7%A4%BA%EF%BC%8C%E6%89%93%E5%8D%B0%E5%90%88%E5%90%8C%E6%96%87%E6%9C%AC%EF%BC%8C%E8%AF%B4%E6%98%8E%E6%96%87%E6%9C%AC%E7%AD%89%E3%80%82%E6%9C%AC%E7%AB%99%E6%8F%90%E4%BE%9B%E6%96%B9%E6%AD%A3\u0026dbv=0\u0026drs=3\u0026pcs=1280x1024\u0026pss=1280x3801\u0026cfv=0\u0026cpl=5\u0026chi=2\u0026cce=true\u0026cec=UTF-8\u0026tlm=1769931685\u0026prot=2\u0026rw=1024\u0026ltu=https%3A%2F%2Fxitongtiandi.net%2Fsoft_lt%2F7017.html\u0026ecd=1\u0026dft=0\u0026uc=1280x1024\u0026pis=-1x-1\u0026sr=1280x1024\u0026tcn=1769931685\u0026qn=5fd469c31b5c2809\u0026ft=1","fqdn":"pos.baidu.com","domain":"baidu.com","tld":"com"},"ip":{"addr":"103.235.46.94","port":443,"asn":55967,"as":"Beijing Baidu Netcom Science and Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":true,"md5":"2249362d326da34b993e5960118cdb36","sha1":"a4c9de5784ae5aebf9493ccde43fe3359384beff","sha256":"1999e22ccecce48965c246bfb777d81c7d37116272e200f0dbbb4ba73b63e8b0","sha512":"00bba0e6a0483dbaec0c216ece8e0a9964f159b23437cab8fce505d537f2a052a15e79205fc7525fb31785c5a9b38d4e67b30ca4a4c3673af29ba0af2260fa55","ssdeep":"","tlshash":"8361e345aaf7085eae9730963e4f29487c3c00534e48ef04fdacb3551f94b665ab8b8c","size":3363,"data":"","first_seen":"2023-03-07T12:24:52Z","last_seen":"2026-06-01T04:39:40.475091Z","times_seen":334,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pos.baidu.com/scvm?conwid=370\u0026conhei=180\u0026rdid=7002770\u0026dc=3\u0026di=u7002770\u0026s1=4034329033\u0026s2=2872728590\u0026dri=0\u0026dis=0\u0026dai=1\u0026ps=3402x60\u0026enu=encoding\u0026exps=110277,110275,110261,110252,110011\u0026ant=0\u0026psi=1da7a967d3738233\u0026dcb=___adblockplus_\u0026dtm=HTML_POST\u0026dvi=0.0\u0026dci=-1\u0026dpt=none\u0026tpr=1769931685223\u0026ti=%E6%96%B9%E6%AD%A3%E5%B0%8F%E6%A0%87%E5%AE%8B%E7%AE%80%E4%BD%93%E5%AD%97%E4%BD%93%E5%85%8D%E8%B4%B9%E4%B8%8B%E8%BD%BD%EF%BD%9C%E9%99%84%E6%96%B9%E6%AD%A3%E5%B0%8F%E6%A0%87%E5%AE%8B%E7%AE%80%E4%BD%93%E5%AE%89%E8%A3%85%E4%BD%BF%E7%94%A8%E6%95%99%E7%A8%8B--%E7%B3%BB%E7%BB%9F%E4%B9%8B%E5%AE%B6\u0026ari=2\u0026ver=0620\u0026vc=%E6%99%AE%E9%80%9A%E4%B8%8B%E8%BD%BD%E5%9C%B0%E5%9D%80\u0026kws=%E6%96%B9%E6%AD%A3%E5%B0%8F%E6%A0%87%E5%AE%8B%E7%AE%80%E4%BD%93%E5%AD%97%E4%BD%93%2C%E6%96%B9%E6%AD%A3%E5%B0%8F%E6%A0%87%E5%AE%8B%E7%AE%80%E4%BD%93ttf%2C%E6%96%B9%E6%AD%A3%E5%B0%8F%E6%A0%87%E5%AE%8B%E7%AE%80%E4%BD%93%E5%AE%89%E8%A3%85\u0026dps=%E6%96%B9%E6%AD%A3%E5%B0%8F%E6%A0%87%E5%AE%8B%E7%AE%80%E4%BD%93%E5%AD%97%E4%BD%93%E3%80%82%E8%AF%A5%E5%AD%97%E4%BD%93%E9%9D%9E%E5%B8%B8%E7%BE%8E%E8%A7%82%EF%BC%8C%E9%80%82%E5%90%88%E5%9C%A8%E6%AD%A3%E5%BC%8F%E7%9A%84%E5%9C%BA%E5%90%88%E6%9D%A5%E8%BF%9B%E8%A1%8C%E4%BD%BF%E7%94%A8%EF%BC%8C%E6%AF%94%E5%A6%82%E7%94%A8%E4%BA%8E%E6%8A%95%E5%BD%B1%E6%BC%94%E7%A4%BA%EF%BC%8C%E6%89%93%E5%8D%B0%E5%90%88%E5%90%8C%E6%96%87%E6%9C%AC%EF%BC%8C%E8%AF%B4%E6%98%8E%E6%96%87%E6%9C%AC%E7%AD%89%E3%80%82%E6%9C%AC%E7%AB%99%E6%8F%90%E4%BE%9B%E6%96%B9%E6%AD%A3\u0026dbv=0\u0026drs=3\u0026pcs=1280x1024\u0026pss=1280x3801\u0026cfv=0\u0026cpl=5\u0026chi=2\u0026cce=true\u0026cec=UTF-8\u0026tlm=1769931685\u0026prot=2\u0026rw=1024\u0026ltu=https%3A%2F%2Fxitongtiandi.net%2Fsoft_lt%2F7017.html\u0026ecd=1\u0026dft=0\u0026uc=1280x1024\u0026pis=-1x-1\u0026sr=1280x1024\u0026tcn=1769931685\u0026qn=5fd469c31b5c2809\u0026ft=1","fqdn":"pos.baidu.com","domain":"baidu.com","tld":"com"},"ip":{"addr":"103.235.46.94","port":443,"asn":55967,"as":"Beijing Baidu Netcom Science and Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"introduction_type":"eval","is_inline":false,"md5":"f2a3816a519e9b647f39851bd709da24","sha1":"3844e1a72e765bbbe1ba3748d3f252766a5a42bc","sha256":"e6400ed58a0a32912bdae90bc21d02ba6f1e7c3dccf3ab439815ffaa78bbaef5","sha512":"8c5163130a5a0d13199ebde4355d337b49f275e26e2838ab659802d16b756a6aa7526075cd8ea879cb8d66dfb7466a0d9b970cc4ece277006bb8c01c36308b64","ssdeep":"","tlshash":"b19002c0632623815101b04c5c25bd01b5e46e19e604e648112096211d0d112a410a84","size":52,"data":"","first_seen":"2023-03-07T12:24:52Z","last_seen":"2026-06-01T04:39:40.444849Z","times_seen":403,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xitongtiandi.net/soft_lt/7017.html","fqdn":"xitongtiandi.net","domain":"xitongtiandi.net","tld":"net"},"ip":{"addr":"116.153.39.131","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"introduction_type":"scriptElement","is_inline":true,"md5":"ebdbc7c9fc883aad1b5037cd692a7574","sha1":"9921e08f49cf598e62e1f238908ff78f4c51c38e","sha256":"74dbf1763fcb14a8f6d13a9785c115cad0f936d3e3a79f375e5b6055f1ec927d","sha512":"8a3392e344e08f15829d95e291c32120e143467e5627282e82929c330f2a512ab05387eaf5b2ad4240ff0dc018158bfd213603814989b355b867075a19957463","ssdeep":"","tlshash":"3511bd69a7a3519182b760e6077f73943177000ba115cc98bc4d4392bf38d1da5e378e","size":1005,"data":"","first_seen":"2026-02-01T07:42:01.724617Z","last_seen":"2026-02-01T07:42:01.724617Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xitongtiandi.net/soft_lt/7017.html","fqdn":"xitongtiandi.net","domain":"xitongtiandi.net","tld":"net"},"ip":{"addr":"116.153.39.131","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"introduction_type":"Function","is_inline":false,"md5":"c8cf93f9fd6d7dd66cad22358edf9469","sha1":"6d6c10e3345266e4374c3d3d3c6d41f1ea8b1bcd","sha256":"cf1a7ff3e355e726d243576f656304f04a263f31a1c206601b1f45d8d34bc18f","sha512":"1a8e9606b5ddb8a8bfd36fd3c733646868efcc95a0a2584e43cf0286c565b6a82aaba1afa9df235597962fe899ccdccc9dcf57f35fc4cbfca21e52a6a7a5be00","ssdeep":"","tlshash":"48f08bde0399c94175d1ecfdbe717b74b08d0c6a2cfda8689c01510226c94bb44c048f","size":578,"data":"","first_seen":"2026-02-01T07:42:01.72562Z","last_seen":"2026-02-01T07:42:01.72562Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pos.baidu.com/scvm?conwid=370\u0026conhei=180\u0026rdid=7002770\u0026dc=3\u0026di=u7002770\u0026s1=4034329033\u0026s2=2872728590\u0026dri=0\u0026dis=0\u0026dai=1\u0026ps=3402x60\u0026enu=encoding\u0026exps=110277,110275,110261,110252,110011\u0026ant=0\u0026psi=1da7a967d3738233\u0026dcb=___adblockplus_\u0026dtm=HTML_POST\u0026dvi=0.0\u0026dci=-1\u0026dpt=none\u0026tpr=1769931685223\u0026ti=%E6%96%B9%E6%AD%A3%E5%B0%8F%E6%A0%87%E5%AE%8B%E7%AE%80%E4%BD%93%E5%AD%97%E4%BD%93%E5%85%8D%E8%B4%B9%E4%B8%8B%E8%BD%BD%EF%BD%9C%E9%99%84%E6%96%B9%E6%AD%A3%E5%B0%8F%E6%A0%87%E5%AE%8B%E7%AE%80%E4%BD%93%E5%AE%89%E8%A3%85%E4%BD%BF%E7%94%A8%E6%95%99%E7%A8%8B--%E7%B3%BB%E7%BB%9F%E4%B9%8B%E5%AE%B6\u0026ari=2\u0026ver=0620\u0026vc=%E6%99%AE%E9%80%9A%E4%B8%8B%E8%BD%BD%E5%9C%B0%E5%9D%80\u0026kws=%E6%96%B9%E6%AD%A3%E5%B0%8F%E6%A0%87%E5%AE%8B%E7%AE%80%E4%BD%93%E5%AD%97%E4%BD%93%2C%E6%96%B9%E6%AD%A3%E5%B0%8F%E6%A0%87%E5%AE%8B%E7%AE%80%E4%BD%93ttf%2C%E6%96%B9%E6%AD%A3%E5%B0%8F%E6%A0%87%E5%AE%8B%E7%AE%80%E4%BD%93%E5%AE%89%E8%A3%85\u0026dps=%E6%96%B9%E6%AD%A3%E5%B0%8F%E6%A0%87%E5%AE%8B%E7%AE%80%E4%BD%93%E5%AD%97%E4%BD%93%E3%80%82%E8%AF%A5%E5%AD%97%E4%BD%93%E9%9D%9E%E5%B8%B8%E7%BE%8E%E8%A7%82%EF%BC%8C%E9%80%82%E5%90%88%E5%9C%A8%E6%AD%A3%E5%BC%8F%E7%9A%84%E5%9C%BA%E5%90%88%E6%9D%A5%E8%BF%9B%E8%A1%8C%E4%BD%BF%E7%94%A8%EF%BC%8C%E6%AF%94%E5%A6%82%E7%94%A8%E4%BA%8E%E6%8A%95%E5%BD%B1%E6%BC%94%E7%A4%BA%EF%BC%8C%E6%89%93%E5%8D%B0%E5%90%88%E5%90%8C%E6%96%87%E6%9C%AC%EF%BC%8C%E8%AF%B4%E6%98%8E%E6%96%87%E6%9C%AC%E7%AD%89%E3%80%82%E6%9C%AC%E7%AB%99%E6%8F%90%E4%BE%9B%E6%96%B9%E6%AD%A3\u0026dbv=0\u0026drs=3\u0026pcs=1280x1024\u0026pss=1280x3801\u0026cfv=0\u0026cpl=5\u0026chi=2\u0026cce=true\u0026cec=UTF-8\u0026tlm=1769931685\u0026prot=2\u0026rw=1024\u0026ltu=https%3A%2F%2Fxitongtiandi.net%2Fsoft_lt%2F7017.html\u0026ecd=1\u0026dft=0\u0026uc=1280x1024\u0026pis=-1x-1\u0026sr=1280x1024\u0026tcn=1769931685\u0026qn=5fd469c31b5c2809\u0026ft=1","fqdn":"pos.baidu.com","domain":"baidu.com","tld":"com"},"ip":{"addr":"103.235.46.94","port":443,"asn":55967,"as":"Beijing Baidu Netcom Science and Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"introduction_type":"Function","is_inline":false,"md5":"62d9be129608e83fe36e6495da1b416b","sha1":"2433fe96cf478c31a4a04c7aed67634f0178a587","sha256":"c1812e501f78f11a1816e851932411c6fca598abe521c6be2c888ae36da96b0a","sha512":"1c68d51752a73f985028dde8992cbcdedd3c0e0b9ff20ab534d712b43c1e05009055e1d535953a0f4c43934b769632edc64ba3a079215108ef3601b7936cc10f","ssdeep":"","tlshash":"f261bd154cb960302a7d805c8805290cf765f9bbcb5616d1b6ef033e9bf4b7b0379a65","size":3387,"data":"","first_seen":"2023-04-20T10:54:36Z","last_seen":"2026-06-01T04:39:40.457441Z","times_seen":339,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pos.baidu.com/scvm?conwid=370\u0026conhei=180\u0026rdid=7002770\u0026dc=3\u0026di=u7002770\u0026s1=4034329033\u0026s2=2872728590\u0026dri=0\u0026dis=0\u0026dai=1\u0026ps=3402x60\u0026enu=encoding\u0026exps=110277,110275,110261,110252,110011\u0026ant=0\u0026psi=1da7a967d3738233\u0026dcb=___adblockplus_\u0026dtm=HTML_POST\u0026dvi=0.0\u0026dci=-1\u0026dpt=none\u0026tpr=1769931685223\u0026ti=%E6%96%B9%E6%AD%A3%E5%B0%8F%E6%A0%87%E5%AE%8B%E7%AE%80%E4%BD%93%E5%AD%97%E4%BD%93%E5%85%8D%E8%B4%B9%E4%B8%8B%E8%BD%BD%EF%BD%9C%E9%99%84%E6%96%B9%E6%AD%A3%E5%B0%8F%E6%A0%87%E5%AE%8B%E7%AE%80%E4%BD%93%E5%AE%89%E8%A3%85%E4%BD%BF%E7%94%A8%E6%95%99%E7%A8%8B--%E7%B3%BB%E7%BB%9F%E4%B9%8B%E5%AE%B6\u0026ari=2\u0026ver=0620\u0026vc=%E6%99%AE%E9%80%9A%E4%B8%8B%E8%BD%BD%E5%9C%B0%E5%9D%80\u0026kws=%E6%96%B9%E6%AD%A3%E5%B0%8F%E6%A0%87%E5%AE%8B%E7%AE%80%E4%BD%93%E5%AD%97%E4%BD%93%2C%E6%96%B9%E6%AD%A3%E5%B0%8F%E6%A0%87%E5%AE%8B%E7%AE%80%E4%BD%93ttf%2C%E6%96%B9%E6%AD%A3%E5%B0%8F%E6%A0%87%E5%AE%8B%E7%AE%80%E4%BD%93%E5%AE%89%E8%A3%85\u0026dps=%E6%96%B9%E6%AD%A3%E5%B0%8F%E6%A0%87%E5%AE%8B%E7%AE%80%E4%BD%93%E5%AD%97%E4%BD%93%E3%80%82%E8%AF%A5%E5%AD%97%E4%BD%93%E9%9D%9E%E5%B8%B8%E7%BE%8E%E8%A7%82%EF%BC%8C%E9%80%82%E5%90%88%E5%9C%A8%E6%AD%A3%E5%BC%8F%E7%9A%84%E5%9C%BA%E5%90%88%E6%9D%A5%E8%BF%9B%E8%A1%8C%E4%BD%BF%E7%94%A8%EF%BC%8C%E6%AF%94%E5%A6%82%E7%94%A8%E4%BA%8E%E6%8A%95%E5%BD%B1%E6%BC%94%E7%A4%BA%EF%BC%8C%E6%89%93%E5%8D%B0%E5%90%88%E5%90%8C%E6%96%87%E6%9C%AC%EF%BC%8C%E8%AF%B4%E6%98%8E%E6%96%87%E6%9C%AC%E7%AD%89%E3%80%82%E6%9C%AC%E7%AB%99%E6%8F%90%E4%BE%9B%E6%96%B9%E6%AD%A3\u0026dbv=0\u0026drs=3\u0026pcs=1280x1024\u0026pss=1280x3801\u0026cfv=0\u0026cpl=5\u0026chi=2\u0026cce=true\u0026cec=UTF-8\u0026tlm=1769931685\u0026prot=2\u0026rw=1024\u0026ltu=https%3A%2F%2Fxitongtiandi.net%2Fsoft_lt%2F7017.html\u0026ecd=1\u0026dft=0\u0026uc=1280x1024\u0026pis=-1x-1\u0026sr=1280x1024\u0026tcn=1769931685\u0026qn=5fd469c31b5c2809\u0026ft=1","fqdn":"pos.baidu.com","domain":"baidu.com","tld":"com"},"ip":{"addr":"103.235.46.94","port":443,"asn":55967,"as":"Beijing Baidu Netcom Science and Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"introduction_type":"eval","is_inline":false,"md5":"f2a3816a519e9b647f39851bd709da24","sha1":"3844e1a72e765bbbe1ba3748d3f252766a5a42bc","sha256":"e6400ed58a0a32912bdae90bc21d02ba6f1e7c3dccf3ab439815ffaa78bbaef5","sha512":"8c5163130a5a0d13199ebde4355d337b49f275e26e2838ab659802d16b756a6aa7526075cd8ea879cb8d66dfb7466a0d9b970cc4ece277006bb8c01c36308b64","ssdeep":"","tlshash":"b19002c0632623815101b04c5c25bd01b5e46e19e604e648112096211d0d112a410a84","size":52,"data":"","first_seen":"2023-03-07T12:24:52Z","last_seen":"2026-06-01T04:39:40.444849Z","times_seen":403,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"image.xitongtiandi.net/upload/202507/163047-688340b7236d3.jpg","fqdn":"image.xitongtiandi.net","domain":"xitongtiandi.net","tld":"net"},"ip":{"addr":"116.153.39.131","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xitongtiandi.net/soft_lt/7017.html","date":"2026-02-01T07:41:21.749Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"image.xitongtiandi.net","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Fri, 26 Dec 2025 00:00:00 GMT","end":"Thu, 26 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"68:45:42:1A:66:A6:87:1B:03:DE:5B:E1:65:05:9A:BC:74:13:56:8C","sha256":"CD:0E:7D:D7:D9:AE:12:8F:B5:76:68:8F:82:80:8E:28:F2:30:73:19:10:FF:CE:F4:29:DC:D0:CD:5D:16:AB:2E"}}},"request":{"raw":"GET /upload/202507/163047-688340b7236d3.jpg HTTP/1.1\r\nHost: image.xitongtiandi.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xitongtiandi.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sun, 01 Feb 2026 07:41:25 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 9543\r\nConnection: keep-alive\r\nServer: openresty\r\nCloudServiceDiscount: CDN\r\nx-obs-request-id: 000001998E96C24497C99351B8B88C91\r\nETag: \"5a67521f24b25f36f5e0205696c22dae\"\r\nLast-Modified: Fri, 25 Jul 2025 08:30:47 GMT\r\nx-obs-id-2: 36AAAQAAEAABAAAQAAEAABAAAQAAEAABAAAaI=AAAAAAAAAAAAAAAAAAAAAAAAAA\r\nX-CCDN-Expires: 517647\r\nvia: CHN-JXnanchang-AREACUCC1-CACHE60[3],CHN-JXnanchang-AREACUCC1-CACHE19[0,TCP_HIT,0],CHN-JSwuxi-GLOBAL2-CACHE102[21],CHN-JSwuxi-GLOBAL2-CACHE41[0,TCP_HIT,13]\r\nx-hcs-proxy-type: 1\r\nX-CCDN-CacheTTL: 2592000\r\nnginx-hit: 1\r\nAge: 2074365\r\nAccept-Ranges: bytes\r\nContent-Disposition: inline\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":9543,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=1, software=www.meitu.com], baseline, precision 8, 80x80, components 3","md5":"5a67521f24b25f36f5e0205696c22dae","sha1":"71a42c5a196ed8b27d36aad97e5bb1ae702e4828","sha256":"985830901c93da2a5dd00f7b4e4e60b76602ca0d9f8bbf8dbbb335542377ac16","sha512":"dd29b01d1b336f5c43799735d82b9847c74bc55f43d5e75bd7ed56436c5b317ed08b92659adb7980662b05ca2f021294a99d4c1549158027cd170496bf4ccb21","ssdeep":"192:qN+PRbALuyP6z+2X7U6UEjTFdiqsA5ysEgUKmEMnxjQ7V1tfgtZaMAq7:qIRbmuyiXcup+hFQ7DtfaZaMr7","tlshash":"3212af7e0a280148fe58956ca2f85084e6f6e713381cb65d75f093fbe9d70f90a5db21","first_seen":"2026-02-01T07:42:01.638791Z","last_seen":"2026-02-01T07:42:01.638791Z","times_seen":1,"resource_available":false,"data":null}},"time_used":4433,"timings":{"blocked":3327,"dns":0,"connect":325,"send":0,"wait":341,"receive":0,"ssl":439},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xitongtiandi.net/favicon.ico","fqdn":"xitongtiandi.net","domain":"xitongtiandi.net","tld":"net"},"ip":{"addr":"116.153.39.131","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xitongtiandi.net/soft_lt/7017.html","date":"2026-02-01T07:41:27.849Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xitongtiandi.net","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Fri, 26 Dec 2025 00:00:00 GMT","end":"Thu, 26 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"F4:52:D9:82:75:C2:6A:EF:2C:47:B9:F7:15:DB:5C:D6:A9:8B:47:35","sha256":"02:12:35:D1:65:13:37:64:B1:C0:2C:97:7A:6C:55:81:55:B4:90:6D:94:B8:97:FF:79:EB:C8:CB:50:69:0A:F6"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: xitongtiandi.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xitongtiandi.net/soft_lt/7017.html\r\nCookie: xz_id=0c7944f6-cb91-31dd-9b9a-3965331c0677; Hm_lvt_d128ef8d389e0228675892fb380d7193=1769931686; Hm_lpvt_d128ef8d389e0228675892fb380d7193=1769931686; HMACCOUNT=A7BA117D1A05CEBC; Hm_lvt_8d3a8c2aa80b0500d1cea1a67160df2d=1769931686; Hm_lpvt_8d3a8c2aa80b0500d1cea1a67160df2d=1769931686\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sun, 01 Feb 2026 07:41:27 GMT\r\nContent-Type: image/x-icon\r\nContent-Length: 1150\r\nConnection: keep-alive\r\nServer: openresty\r\nLast-Modified: Thu, 08 Sep 2022 01:20:02 GMT\r\nETag: \"63194342-47e\"\r\nvia: CHN-JXnanchang-AREACUCC1-CACHE8[8],CHN-JXnanchang-AREACUCC1-CACHE18[0,TCP_HIT,6],CHN-JSwuxi-GLOBAL2-CACHE12[4],CHN-JSwuxi-GLOBAL2-CACHE18[0,TCP_HIT,2],CHN-SH-GLOBAL4-CACHE141[23],CHN-SH-GLOBAL4-CACHE34[16,TCP_MISS,23],CHN-SH-GLOBAL4-CACHE34[15,TCP_MISS,16]\r\nx-hcs-proxy-type: 1\r\nX-CCDN-CacheTTL: 2592000\r\nX-CCDN-REQ-ID-46B1: 405f083f0fcfdf680ef2535d01d3babc\r\nX-CCDN-Expires: 1617780\r\nnginx-hit: 1\r\nAge: 974220\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":1150,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 16x16, 32 bits/pixel","md5":"84a63d82d0c5c86732050adc82ea7404","sha1":"294efacb47c2d02ae0cc32e46f2ddc6bd08afc4f","sha256":"202c69013dbb4c843acdc0df6b665b74cdcc2fe71baf331eae06b40934df5706","sha512":"2cda965cbefb813d324b5b22a615378d67dfd22dbcd1b0adde27fc0b39afbe0fffe27c1aa7bccfcbd1c3d6afcd0bb27012531932e4b0174fbaabfb5117c01d49","ssdeep":"","tlshash":"ad21a1d1f7420ae9ec1c43b1b03b8f8440a73a284130b09d0dabb0adfc77148803122f","first_seen":"2026-02-01T07:42:01.640177Z","last_seen":"2026-02-01T07:42:01.640177Z","times_seen":1,"resource_available":false,"data":null}},"time_used":313,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":313,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pos.baidu.com/scvm?di=u7002770\u0026uuid=f076f9c9ab3a5c0e\u0026dri=0\u0026dis=0\u0026dai=1\u0026ps=3402x60\u0026enu=encoding\u0026exps=110011\u0026ant=0\u0026psi=1da7a967d3738233\u0026dcb=___adblockplus_\u0026dtm=SSP_JSONP\u0026dvi=0.0\u0026dci=-1\u0026dpt=none\u0026tpr=1769931685223\u0026ti=%E6%96%B9%E6%AD%A3%E5%B0%8F%E6%A0%87%E5%AE%8B%E7%AE%80%E4%BD%93%E5%AD%97%E4%BD%93%E5%85%8D%E8%B4%B9%E4%B8%8B%E8%BD%BD%EF%BD%9C%E9%99%84%E6%96%B9%E6%AD%A3%E5%B0%8F%E6%A0%87%E5%AE%8B%E7%AE%80%E4%BD%93%E5%AE%89%E8%A3%85%E4%BD%BF%E7%94%A8%E6%95%99%E7%A8%8B--%E7%B3%BB%E7%BB%9F%E4%B9%8B%E5%AE%B6\u0026ari=2\u0026ver=0620\u0026vc=%E6%99%AE%E9%80%9A%E4%B8%8B%E8%BD%BD%E5%9C%B0%E5%9D%80\u0026kws=%E6%96%B9%E6%AD%A3%E5%B0%8F%E6%A0%87%E5%AE%8B%E7%AE%80%E4%BD%93%E5%AD%97%E4%BD%93%2C%E6%96%B9%E6%AD%A3%E5%B0%8F%E6%A0%87%E5%AE%8B%E7%AE%80%E4%BD%93ttf%2C%E6%96%B9%E6%AD%A3%E5%B0%8F%E6%A0%87%E5%AE%8B%E7%AE%80%E4%BD%93%E5%AE%89%E8%A3%85\u0026dps=%E6%96%B9%E6%AD%A3%E5%B0%8F%E6%A0%87%E5%AE%8B%E7%AE%80%E4%BD%93%E5%AD%97%E4%BD%93%E3%80%82%E8%AF%A5%E5%AD%97%E4%BD%93%E9%9D%9E%E5%B8%B8%E7%BE%8E%E8%A7%82%EF%BC%8C%E9%80%82%E5%90%88%E5%9C%A8%E6%AD%A3%E5%BC%8F%E7%9A%84%E5%9C%BA%E5%90%88%E6%9D%A5%E8%BF%9B%E8%A1%8C%E4%BD%BF%E7%94%A8%EF%BC%8C%E6%AF%94%E5%A6%82%E7%94%A8%E4%BA%8E%E6%8A%95%E5%BD%B1%E6%BC%94%E7%A4%BA%EF%BC%8C%E6%89%93%E5%8D%B0%E5%90%88%E5%90%8C%E6%96%87%E6%9C%AC%EF%BC%8C%E8%AF%B4%E6%98%8E%E6%96%87%E6%9C%AC%E7%AD%89%E3%80%82%E6%9C%AC%E7%AB%99%E6%8F%90%E4%BE%9B%E6%96%B9%E6%AD%A3\u0026dbv=0\u0026drs=3\u0026pcs=1280x1024\u0026pss=1280x3801\u0026cfv=0\u0026cpl=5\u0026chi=2\u0026cce=true\u0026cec=UTF-8\u0026tlm=1769931685\u0026prot=2\u0026rw=1024\u0026ltu=https%3A%2F%2Fxitongtiandi.net%2Fsoft_lt%2F7017.html\u0026ecd=1\u0026dft=0\u0026uc=1280x1024\u0026pis=-1x-1\u0026sr=1280x1024\u0026tcn=1769931685","fqdn":"pos.baidu.com","domain":"baidu.com","tld":"com"},"ip":{"addr":"103.235.46.94","port":443,"asn":55967,"as":"Beijing Baidu Netcom Science and Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xitongtiandi.net/soft_lt/7017.html","date":"2026-02-01T07:41:25.233Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"baidu.com","organization":"Beijing Baidu Netcom Science Technology Co., Ltd"},"issuer":{"commonName":"GlobalSign RSA OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 09 Jul 2025 07:01:02 GMT","end":"Mon, 10 Aug 2026 07:01:01 GMT"},"fingerprint":{"sha1":"21:BF:66:0D:67:BE:7A:7F:49:48:05:30:F4:7F:09:F2:30:36:CA:63","sha256":"0D:82:2C:9A:90:5A:EF:E9:8F:37:12:C0:E0:26:30:EE:95:33:2C:45:5F:E7:74:5D:F0:8D:BC:79:F4:B0:A1:49"}}},"request":{"raw":"GET /scvm?di=u7002770\u0026uuid=f076f9c9ab3a5c0e\u0026dri=0\u0026dis=0\u0026dai=1\u0026ps=3402x60\u0026enu=encoding\u0026exps=110011\u0026ant=0\u0026psi=1da7a967d3738233\u0026dcb=___adblockplus_\u0026dtm=SSP_JSONP\u0026dvi=0.0\u0026dci=-1\u0026dpt=none\u0026tpr=1769931685223\u0026ti=%E6%96%B9%E6%AD%A3%E5%B0%8F%E6%A0%87%E5%AE%8B%E7%AE%80%E4%BD%93%E5%AD%97%E4%BD%93%E5%85%8D%E8%B4%B9%E4%B8%8B%E8%BD%BD%EF%BD%9C%E9%99%84%E6%96%B9%E6%AD%A3%E5%B0%8F%E6%A0%87%E5%AE%8B%E7%AE%80%E4%BD%93%E5%AE%89%E8%A3%85%E4%BD%BF%E7%94%A8%E6%95%99%E7%A8%8B--%E7%B3%BB%E7%BB%9F%E4%B9%8B%E5%AE%B6\u0026ari=2\u0026ver=0620\u0026vc=%E6%99%AE%E9%80%9A%E4%B8%8B%E8%BD%BD%E5%9C%B0%E5%9D%80\u0026kws=%E6%96%B9%E6%AD%A3%E5%B0%8F%E6%A0%87%E5%AE%8B%E7%AE%80%E4%BD%93%E5%AD%97%E4%BD%93%2C%E6%96%B9%E6%AD%A3%E5%B0%8F%E6%A0%87%E5%AE%8B%E7%AE%80%E4%BD%93ttf%2C%E6%96%B9%E6%AD%A3%E5%B0%8F%E6%A0%87%E5%AE%8B%E7%AE%80%E4%BD%93%E5%AE%89%E8%A3%85\u0026dps=%E6%96%B9%E6%AD%A3%E5%B0%8F%E6%A0%87%E5%AE%8B%E7%AE%80%E4%BD%93%E5%AD%97%E4%BD%93%E3%80%82%E8%AF%A5%E5%AD%97%E4%BD%93%E9%9D%9E%E5%B8%B8%E7%BE%8E%E8%A7%82%EF%BC%8C%E9%80%82%E5%90%88%E5%9C%A8%E6%AD%A3%E5%BC%8F%E7%9A%84%E5%9C%BA%E5%90%88%E6%9D%A5%E8%BF%9B%E8%A1%8C%E4%BD%BF%E7%94%A8%EF%BC%8C%E6%AF%94%E5%A6%82%E7%94%A8%E4%BA%8E%E6%8A%95%E5%BD%B1%E6%BC%94%E7%A4%BA%EF%BC%8C%E6%89%93%E5%8D%B0%E5%90%88%E5%90%8C%E6%96%87%E6%9C%AC%EF%BC%8C%E8%AF%B4%E6%98%8E%E6%96%87%E6%9C%AC%E7%AD%89%E3%80%82%E6%9C%AC%E7%AB%99%E6%8F%90%E4%BE%9B%E6%96%B9%E6%AD%A3\u0026dbv=0\u0026drs=3\u0026pcs=1280x1024\u0026pss=1280x3801\u0026cfv=0\u0026cpl=5\u0026chi=2\u0026cce=true\u0026cec=UTF-8\u0026tlm=1769931685\u0026prot=2\u0026rw=1024\u0026ltu=https%3A%2F%2Fxitongtiandi.net%2Fsoft_lt%2F7017.html\u0026ecd=1\u0026dft=0\u0026uc=1280x1024\u0026pis=-1x-1\u0026sr=1280x1024\u0026tcn=1769931685 HTTP/1.1\r\nHost: pos.baidu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xitongtiandi.net/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nCache-Control: post-check=0, pre-check=0\r\nConnection: keep-alive\r\nContent-Encoding: gzip\r\nContent-Length: 594\r\nContent-Type: application/javascript;charset=UTF-8\r\nDate: Sun, 01 Feb 2026 07:41:26 GMT\r\nExpires: Mon, 26 Jul 1997 05:00:00 GMT\r\nLast-Modified: Sun Feb  1 15:41:26 2026\r\nP3p: CP=\" OTI DSP COR IVA OUR IND COM \", CP=\" OTI DSP COR IVA OUR IND COM \"\r\nPragma: no-cache\r\nServer: nginx\r\nSet-Cookie: BAIDUID=7700EBDD10BE59CECC07876791D7BAE9:FG=1; expires=Mon, 01-Feb-57 07:41:26 GMT; max-age=31536000; path=/; domain=.baidu.com; version=1\r\nX-Xss-Protection: 0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1065,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"ASCII text, with very long lines (866)","md5":"ab24c61d56ff3f4db93e00a54e91f6fe","sha1":"0d9cb8759169913ca16f06fc90501841c010f529","sha256":"6aa8e55e8fe665f6faa0d652ee1c5fc2ac07a6e1eb9ecc44ad0cf7f59ae75592","sha512":"e2d0dc60f596e65e1e5f5b2d6112b214c9ad701f20e578841368ca3bd857a56a95e6b8c3a8bbe7243e8713c7ee3698a8ebf11897518278d6d29a54683daf0de2","ssdeep":"","tlshash":"ad110255ea37eeb7a664e42a30f9318e443faf26770405c18278cf30036c102335daa3","first_seen":"2026-02-01T07:42:01.641417Z","last_seen":"2026-02-01T07:42:01.641417Z","times_seen":1,"resource_available":true,"data":null}},"time_used":1362,"timings":{"blocked":-1,"dns":279,"connect":262,"send":0,"wait":281,"receive":0,"ssl":540},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"image.xitongtiandi.net/upload/202403/112713-6600ef1115ef2.png","fqdn":"image.xitongtiandi.net","domain":"xitongtiandi.net","tld":"net"},"ip":{"addr":"116.153.39.131","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xitongtiandi.net/soft_lt/7017.html","date":"2026-02-01T07:41:21.735Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"image.xitongtiandi.net","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Fri, 26 Dec 2025 00:00:00 GMT","end":"Thu, 26 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"68:45:42:1A:66:A6:87:1B:03:DE:5B:E1:65:05:9A:BC:74:13:56:8C","sha256":"CD:0E:7D:D7:D9:AE:12:8F:B5:76:68:8F:82:80:8E:28:F2:30:73:19:10:FF:CE:F4:29:DC:D0:CD:5D:16:AB:2E"}}},"request":{"raw":"GET /upload/202403/112713-6600ef1115ef2.png HTTP/1.1\r\nHost: image.xitongtiandi.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xitongtiandi.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sun, 01 Feb 2026 07:41:26 GMT\r\nContent-Type: image/png\r\nContent-Length: 88530\r\nConnection: keep-alive\r\nServer: openresty\r\nCloudServiceDiscount: CDN\r\nx-obs-request-id: 000001947364AF1397C725231819E4CB\r\nETag: \"9c505b1b8f2e8f26ac48508f8f1500c0\"\r\nLast-Modified: Mon, 25 Mar 2024 03:27:13 GMT\r\nx-obs-id-2: 32AAAQAAEAABAAAQAAEAABAAAQAAEAABCSAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA\r\nX-CCDN-Expires: 1876908\r\nvia: CHN-JXnanchang-AREACUCC1-CACHE15[3],CHN-JXnanchang-AREACUCC1-CACHE41[0,TCP_HIT,0],CHN-JSwuxi-GLOBAL2-CACHE28[30],CHN-JSwuxi-GLOBAL2-CACHE60[0,TCP_HIT,25],CHN-SH-GLOBAL4-CACHE9[23],CHN-SH-GLOBAL4-CACHE86[0,TCP_HIT,16]\r\nx-hcs-proxy-type: 1\r\nX-CCDN-CacheTTL: 2592000\r\nnginx-hit: 1\r\nAge: 715105\r\nAccept-Ranges: bytes\r\nContent-Disposition: inline\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":88530,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 260 x 150, 8-bit/color RGB, non-interlaced","md5":"9c505b1b8f2e8f26ac48508f8f1500c0","sha1":"47c4db2e8cd6fa8dc807cd45ad4b64f6881abbc8","sha256":"84ceda24092579f0f28d710a679532bab7c8e5917c6f5f6a6eea11e68ef275f5","sha512":"6cec7e304dd83df484c80c596fa80c324e7d1b56d01ee7c3362dcc03672cbb393612e37d3d2fad55148c655e127577d2b329d3054cdf86db6265c2d96eb404be","ssdeep":"1536:rlu78eoWnCndrBxmfM+NUCHcAUDjXiBu9p/tDwTnecf:rlu78eoZndFxyNUCHcAUDDcu9B1wTneq","tlshash":"5e8312e12497bed16ccd95ca3a9ac31db3c3e0b2b415c21beadd105d36510fb2e786a0","first_seen":"2026-02-01T07:42:01.64278Z","last_seen":"2026-02-01T07:42:01.64278Z","times_seen":1,"resource_available":false,"data":null}},"time_used":5552,"timings":{"blocked":4694,"dns":0,"connect":0,"send":0,"wait":366,"receive":492,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cpro.baidustatic.com/cpro/ui/cm.js","fqdn":"cpro.baidustatic.com","domain":"baidustatic.com","tld":"com"},"ip":{"addr":"112.82.180.38","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xitongtiandi.net/soft_lt/7017.html","date":"2026-02-01T07:41:21.746Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"baidu.com","organization":"Beijing Baidu Netcom Science Technology Co., Ltd"},"issuer":{"commonName":"GlobalSign RSA OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 09 Jul 2025 07:01:02 GMT","end":"Mon, 10 Aug 2026 07:01:01 GMT"},"fingerprint":{"sha1":"21:BF:66:0D:67:BE:7A:7F:49:48:05:30:F4:7F:09:F2:30:36:CA:63","sha256":"0D:82:2C:9A:90:5A:EF:E9:8F:37:12:C0:E0:26:30:EE:95:33:2C:45:5F:E7:74:5D:F0:8D:BC:79:F4:B0:A1:49"}}},"request":{"raw":"GET /cpro/ui/cm.js HTTP/1.1\r\nHost: cpro.baidustatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xitongtiandi.net/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: JSP3/2.0.14\r\ndate: Sun, 01 Feb 2026 07:41:22 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncontent-length: 39420\r\nexpires: Sun, 01 Feb 2026 08:41:07 GMT\r\nlast-modified: Fri, 20 Jun 2025 03:28:07 GMT\r\ncache-control: max-age=3600\r\ncontent-encoding: gzip\r\nage: 10\r\naccept-ranges: bytes\r\nohc-global-saved-time: Sun, 01 Feb 2026 07:41:07 GMT\r\nohc-cache-hit: cz2un60 [2], czix84 [2]\r\nohc-file-size: 39420\r\nx-cache-status: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":117379,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65532), with no line terminators","md5":"b543dbe074718c21f7f5e7cbf1aff034","sha1":"99ef1caf9c69e99a60c2f0ee33720cb40cdf1cc8","sha256":"b6a34b928d00909e40ec7edfadd89ac0cfa1fcc5892bdf3168b60b28a5bfe1f6","sha512":"56d74637e8023b8983c240ec595528c56ed7d84f461fd4a1e16d329906a2dbfd023a8d519a68b1458a48f9cd19176df60dc099102640f0c3589c3bddd69221b7","ssdeep":"3072:GpOyaTRXqCpCOjwlfbitfD9mxf1W4OwYsRQD+fgpNCpIdlw:GpBApCO0fyfDcTQD+fgXRdlw","tlshash":"f4b3e899f6d2742546a220a4162f2609b2375548748b8480f67ee8d1fdbcf4f607bfbc","first_seen":"2025-06-30T07:43:55.721259Z","last_seen":"2026-06-02T12:23:57.146637Z","times_seen":1018,"resource_available":true,"data":null}},"time_used":1526,"timings":{"blocked":-1,"dns":276,"connect":299,"send":0,"wait":465,"receive":138,"ssl":348},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cpro.baidustatic.com/js/logo/js/logo.js","fqdn":"cpro.baidustatic.com","domain":"baidustatic.com","tld":"com"},"ip":{"addr":"112.82.180.38","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://pos.baidu.com/scvm?conwid=370\u0026conhei=180\u0026rdid=7002770\u0026dc=3\u0026di=u7002770\u0026s1=4034329033\u0026s2=2872728590\u0026dri=0\u0026dis=0\u0026dai=1\u0026ps=3402x60\u0026enu=encoding\u0026exps=110277,110275,110261,110252,110011\u0026ant=0\u0026psi=1da7a967d3738233\u0026dcb=___adblockplus_\u0026dtm=HTML_POST\u0026dvi=0.0\u0026dci=-1\u0026dpt=none\u0026tpr=1769931685223\u0026ti=%E6%96%B9%E6%AD%A3%E5%B0%8F%E6%A0%87%E5%AE%8B%E7%AE%80%E4%BD%93%E5%AD%97%E4%BD%93%E5%85%8D%E8%B4%B9%E4%B8%8B%E8%BD%BD%EF%BD%9C%E9%99%84%E6%96%B9%E6%AD%A3%E5%B0%8F%E6%A0%87%E5%AE%8B%E7%AE%80%E4%BD%93%E5%AE%89%E8%A3%85%E4%BD%BF%E7%94%A8%E6%95%99%E7%A8%8B--%E7%B3%BB%E7%BB%9F%E4%B9%8B%E5%AE%B6\u0026ari=2\u0026ver=0620\u0026vc=%E6%99%AE%E9%80%9A%E4%B8%8B%E8%BD%BD%E5%9C%B0%E5%9D%80\u0026kws=%E6%96%B9%E6%AD%A3%E5%B0%8F%E6%A0%87%E5%AE%8B%E7%AE%80%E4%BD%93%E5%AD%97%E4%BD%93%2C%E6%96%B9%E6%AD%A3%E5%B0%8F%E6%A0%87%E5%AE%8B%E7%AE%80%E4%BD%93ttf%2C%E6%96%B9%E6%AD%A3%E5%B0%8F%E6%A0%87%E5%AE%8B%E7%AE%80%E4%BD%93%E5%AE%89%E8%A3%85\u0026dps=%E6%96%B9%E6%AD%A3%E5%B0%8F%E6%A0%87%E5%AE%8B%E7%AE%80%E4%BD%93%E5%AD%97%E4%BD%93%E3%80%82%E8%AF%A5%E5%AD%97%E4%BD%93%E9%9D%9E%E5%B8%B8%E7%BE%8E%E8%A7%82%EF%BC%8C%E9%80%82%E5%90%88%E5%9C%A8%E6%AD%A3%E5%BC%8F%E7%9A%84%E5%9C%BA%E5%90%88%E6%9D%A5%E8%BF%9B%E8%A1%8C%E4%BD%BF%E7%94%A8%EF%BC%8C%E6%AF%94%E5%A6%82%E7%94%A8%E4%BA%8E%E6%8A%95%E5%BD%B1%E6%BC%94%E7%A4%BA%EF%BC%8C%E6%89%93%E5%8D%B0%E5%90%88%E5%90%8C%E6%96%87%E6%9C%AC%EF%BC%8C%E8%AF%B4%E6%98%8E%E6%96%87%E6%9C%AC%E7%AD%89%E3%80%82%E6%9C%AC%E7%AB%99%E6%8F%90%E4%BE%9B%E6%96%B9%E6%AD%A3\u0026dbv=0\u0026drs=3\u0026pcs=1280x1024\u0026pss=1280x3801\u0026cfv=0\u0026cpl=5\u0026chi=2\u0026cce=true\u0026cec=UTF-8\u0026tlm=1769931685\u0026prot=2\u0026rw=1024\u0026ltu=https%3A%2F%2Fxitongtiandi.net%2Fsoft_lt%2F7017.html\u0026ecd=1\u0026dft=0\u0026uc=1280x1024\u0026pis=-1x-1\u0026sr=1280x1024\u0026tcn=1769931685\u0026qn=5fd469c31b5c2809\u0026ft=1","date":"2026-02-01T07:41:27.049Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"baidu.com","organization":"Beijing Baidu Netcom Science Technology Co., Ltd"},"issuer":{"commonName":"GlobalSign RSA OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 09 Jul 2025 07:01:02 GMT","end":"Mon, 10 Aug 2026 07:01:01 GMT"},"fingerprint":{"sha1":"21:BF:66:0D:67:BE:7A:7F:49:48:05:30:F4:7F:09:F2:30:36:CA:63","sha256":"0D:82:2C:9A:90:5A:EF:E9:8F:37:12:C0:E0:26:30:EE:95:33:2C:45:5F:E7:74:5D:F0:8D:BC:79:F4:B0:A1:49"}}},"request":{"raw":"GET /js/logo/js/logo.js HTTP/1.1\r\nHost: cpro.baidustatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pos.baidu.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: JSP3/2.0.14\r\ndate: Sun, 01 Feb 2026 07:41:27 GMT\r\ncontent-type: application/x-javascript\r\nexpires: Sun, 01 Feb 2026 07:43:53 GMT\r\nlast-modified: Mon, 12 Jan 2026 08:44:23 GMT\r\netag: \"6964b467-2745\"\r\ncache-control: max-age=3600\r\ncontent-encoding: br\r\nage: 3454\r\naccept-ranges: bytes\r\nohc-global-saved-time: Sun, 01 Feb 2026 06:43:53 GMT\r\nohc-cache-hit: cz2un60 [2], csix67 [2]\r\nohc-file-size: 6147\r\nx-cache-status: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":10053,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (9949), with no line terminators","md5":"8b5e08871e305d7e5a1ca11fe3cdd24f","sha1":"799c2474dc053a40d1c2d3b230e0a012e4546b09","sha256":"81ca845c7a7ad5c9b166d37e60590125d1e76c83c2dcdb71d0fddfab1309cef0","sha512":"11b9232dd5a49ff0c43e32343455191ebab2d1bb0238430af052a36ad62b2b271385884d0a588e74d5a1434b17bc368246856f5e257881b8e2356a822018388a","ssdeep":"192:p1Q97FnMytGBE7qLtgsfoM0lOLiJTslMe3ZtIt3NgBnV7wsQ+JkCTUTUyoRys+JK:D2MwGm7qLtJjc3MZt2NgBnRlAIyoRytK","tlshash":"8e226e6f3484293e97fb41d8725b3b4e3435658dda060c54c5a1ccd9a7fac4bb371290","first_seen":"2023-11-29T11:37:30Z","last_seen":"2026-06-02T04:53:51.08164Z","times_seen":1044,"resource_available":true,"data":null}},"time_used":300,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":300,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hm.baidu.com/hm.gif?hca=A7BA117D1A05CEBC\u0026cc=1\u0026ck=1\u0026cl=24-bit\u0026ds=1280x1024\u0026vl=1024\u0026et=0\u0026ja=0\u0026ln=en-us\u0026lo=0\u0026rnd=1095296881\u0026si=8d3a8c2aa80b0500d1cea1a67160df2d\u0026v=1.3.2\u0026lv=1\u0026sn=27941\u0026r=0\u0026ww=1280\u0026u=https%3A%2F%2Fxitongtiandi.net%2Fsoft_lt%2F7017.html\u0026tt=%E6%96%B9%E6%AD%A3%E5%B0%8F%E6%A0%87%E5%AE%8B%E7%AE%80%E4%BD%93%E5%AD%97%E4%BD%93%E5%85%8D%E8%B4%B9%E4%B8%8B%E8%BD%BD%EF%BD%9C%E9%99%84%E6%96%B9%E6%AD%A3%E5%B0%8F%E6%A0%87%E5%AE%8B%E7%AE%80%E4%BD%93%E5%AE%89%E8%A3%85%E4%BD%BF%E7%94%A8%E6%95%99%E7%A8%8B--%E7%B3%BB%E7%BB%9F%E4%B9%8B%E5%AE%B6","fqdn":"hm.baidu.com","domain":"baidu.com","tld":"com"},"ip":{"addr":"111.45.11.83","port":443,"asn":9808,"as":"China Mobile Communications Group Co., Ltd.","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xitongtiandi.net/soft_lt/7017.html","date":"2026-02-01T07:41:26.056Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"baidu.com","organization":"Beijing Baidu Netcom Science Technology Co., Ltd"},"issuer":{"commonName":"GlobalSign RSA OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 09 Jul 2025 07:01:02 GMT","end":"Mon, 10 Aug 2026 07:01:01 GMT"},"fingerprint":{"sha1":"21:BF:66:0D:67:BE:7A:7F:49:48:05:30:F4:7F:09:F2:30:36:CA:63","sha256":"0D:82:2C:9A:90:5A:EF:E9:8F:37:12:C0:E0:26:30:EE:95:33:2C:45:5F:E7:74:5D:F0:8D:BC:79:F4:B0:A1:49"}}},"request":{"raw":"GET /hm.gif?hca=A7BA117D1A05CEBC\u0026cc=1\u0026ck=1\u0026cl=24-bit\u0026ds=1280x1024\u0026vl=1024\u0026et=0\u0026ja=0\u0026ln=en-us\u0026lo=0\u0026rnd=1095296881\u0026si=8d3a8c2aa80b0500d1cea1a67160df2d\u0026v=1.3.2\u0026lv=1\u0026sn=27941\u0026r=0\u0026ww=1280\u0026u=https%3A%2F%2Fxitongtiandi.net%2Fsoft_lt%2F7017.html\u0026tt=%E6%96%B9%E6%AD%A3%E5%B0%8F%E6%A0%87%E5%AE%8B%E7%AE%80%E4%BD%93%E5%AD%97%E4%BD%93%E5%85%8D%E8%B4%B9%E4%B8%8B%E8%BD%BD%EF%BD%9C%E9%99%84%E6%96%B9%E6%AD%A3%E5%B0%8F%E6%A0%87%E5%AE%8B%E7%AE%80%E4%BD%93%E5%AE%89%E8%A3%85%E4%BD%BF%E7%94%A8%E6%95%99%E7%A8%8B--%E7%B3%BB%E7%BB%9F%E4%B9%8B%E5%AE%B6 HTTP/1.1\r\nHost: hm.baidu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xitongtiandi.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nCache-Control: private, max-age=0, no-cache\r\nContent-Length: 43\r\nContent-Type: image/gif\r\nDate: Sun, 01 Feb 2026 07:41:26 GMT\r\nP3p: CP=\"CURa ADMa DEVa PSAo PSDo OUR BUS UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR\"\r\nPragma: no-cache\r\nServer: apache\r\nSet-Cookie: HMACCOUNT=5811C777D8401A39; Path=/; Domain=hm.baidu.com; Expires=Sun, 18 Jan 2038 00:00:00 GMT\r\nStrict-Transport-Security: max-age=172800\r\nX-Content-Type-Options: nosniff\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"ad4b0f606e0f8465bc4c4c170b37e1a3","sha1":"50b30fd5f87c85fe5cba2635cb83316ca71250d7","sha256":"cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda","sha512":"ebfe0c0df4bcc167d5cb6ebdd379f9083df62bef63a23818e1c6adf0f64b65467ea58b7cd4d03cf0a1b1a2b07fb7b969bf35f25f1f8538cc65cf3eebdf8a0910","ssdeep":"","tlshash":"15900003fbc08002c2b2e0300b3b0380238ce2200aa8030b80aeb0acecaa3a20c03020","first_seen":"2023-04-05T02:54:03Z","last_seen":"2026-06-02T18:08:36.74522Z","times_seen":364205,"resource_available":true,"data":null}},"time_used":267,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":267,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bigdata.downza.com/js/xingzhi.js?6Z61","fqdn":"bigdata.downza.com","domain":"downza.com","tld":"com"},"ip":{"addr":"122.112.196.83","port":443,"asn":55990,"as":"Huawei Cloud Service data center","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xitongtiandi.net/soft_lt/7017.html","date":"2026-02-01T07:41:21.722Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"bigdata.downza.com","organization":""},"issuer":{"commonName":"ZeroSSL ECC Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Mon, 12 Jan 2026 00:00:00 GMT","end":"Sun, 12 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"1D:EE:64:20:4C:E4:FF:49:A7:08:B2:93:B4:5B:F8:EB:1F:C4:F9:D2","sha256":"71:5B:06:AD:59:2A:D1:95:61:B4:50:C3:35:EE:5F:84:84:AA:DE:DB:EE:F2:DA:39:8C:02:79:E8:BE:82:44:61"}}},"request":{"raw":"GET /js/xingzhi.js?6Z61 HTTP/1.1\r\nHost: bigdata.downza.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xitongtiandi.net/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 01 Feb 2026 07:41:24 GMT\r\nContent-Type: application/javascript\r\nLast-Modified: Fri, 14 Jan 2022 07:11:30 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"61e12222-ce4\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3300,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (3300), with no line terminators","md5":"20cfe5a66ceaa704c9134202b3197360","sha1":"1465772bfe2402479f12f67574cde3e4515b77f7","sha256":"df9d37d34bbd878277d92fa3633976f3a4f61a076c86a76bdbf51c350e928e0a","sha512":"4c93a2504530954a3e0f5535cc2ac214c94d14540af20fec2e8d2aa6f54aed586045d9e5ce92d93224a845dfe08e7c0bf04c892369f134faef9797e762201cee","ssdeep":"","tlshash":"57612274b294247540a12069672b734b63365146b84f6491a43eeef0bd74f47a123fbf","first_seen":"2023-03-09T21:13:51Z","last_seen":"2026-06-02T12:23:57.060041Z","times_seen":162,"resource_available":true,"data":null}},"time_used":2508,"timings":{"blocked":-1,"dns":575,"connect":283,"send":0,"wait":284,"receive":0,"ssl":1366},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.xitongtiandi.net/d/file/tiandi/liaotian/ltgj/2020-02-12/smallf2dd67314ea66e87ecb7d76385e73ebd1581490427.jpg","fqdn":"img.xitongtiandi.net","domain":"xitongtiandi.net","tld":"net"},"ip":{"addr":"120.52.95.238","port":443,"asn":133119,"as":"China Unicom IP network","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xitongtiandi.net/soft_lt/7017.html","date":"2026-02-01T07:41:21.727Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.xitongtiandi.net","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Fri, 26 Dec 2025 00:00:00 GMT","end":"Thu, 26 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"76:AE:74:5D:DA:22:6F:75:FF:B8:99:47:85:9F:B9:1D:12:D7:B2:E0","sha256":"7E:AA:16:44:B1:24:13:58:14:68:DE:F8:07:07:9D:F6:FF:DB:FE:1B:17:14:79:E9:F9:47:14:8C:63:F0:C7:08"}}},"request":{"raw":"GET /d/file/tiandi/liaotian/ltgj/2020-02-12/smallf2dd67314ea66e87ecb7d76385e73ebd1581490427.jpg HTTP/1.1\r\nHost: img.xitongtiandi.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xitongtiandi.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sun, 01 Feb 2026 07:41:26 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 2613\r\nConnection: keep-alive\r\nServer: openresty\r\nCloudServiceDiscount: CDN\r\nx-obs-request-id: 0000019361164E67976423DABC7C32F5\r\nETag: \"79f2a23b6cf7d8f567ae6a3c1ee470e5\"\r\nLast-Modified: Wed, 30 Oct 2024 03:39:36 GMT\r\nContent-Disposition: attachment\r\nx-obs-id-2: 32AAAQAAEAABAAAQAAEAABAAAQAAEAABCSAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA\r\nX-CCDN-Expires: 2129551\r\nvia: CHN-HElangfang-AREACUCC1-CACHE2[2],CHN-HElangfang-AREACUCC1-CACHE34[0,TCP_HIT,0],CHN-HElangfang-GLOBAL6-CACHE108[10],CHN-HElangfang-GLOBAL6-CACHE69[0,TCP_HIT,8]\r\nx-hcs-proxy-type: 1\r\nX-CCDN-CacheTTL: 2592000\r\nnginx-hit: 1\r\nAge: 462463\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2613,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), default quality\", baseline, precision 8, 240x180, components 3","md5":"79f2a23b6cf7d8f567ae6a3c1ee470e5","sha1":"55328e9b7aa3f9cb8cbb53c073941b420c3b318d","sha256":"ffadb75122e83bd6611b881b7c64611752dd4d0684ae9eaf8dd11f40979e7802","sha512":"1f8810a491cff1284c14d0ef9ee50b0d56bacc7936f56121acbac46d049156c00dca7a88eabe708409069239a8d7f4450bc2e1feb23ce15a9603f2af0f09b1e9","ssdeep":"","tlshash":"8d51d907ce008743572207beae031d7a4b4e6a1ca59273fe04731c5b6924fb16c8f01e","first_seen":"2026-02-01T07:42:01.648374Z","last_seen":"2026-02-01T07:42:01.648374Z","times_seen":1,"resource_available":false,"data":null}},"time_used":4730,"timings":{"blocked":4434,"dns":0,"connect":0,"send":0,"wait":296,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"image.xitongtiandi.net/upload/202507/214557-68838a950ebda.jpg","fqdn":"image.xitongtiandi.net","domain":"xitongtiandi.net","tld":"net"},"ip":{"addr":"116.153.39.131","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xitongtiandi.net/soft_lt/7017.html","date":"2026-02-01T07:41:21.750Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"image.xitongtiandi.net","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Fri, 26 Dec 2025 00:00:00 GMT","end":"Thu, 26 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"68:45:42:1A:66:A6:87:1B:03:DE:5B:E1:65:05:9A:BC:74:13:56:8C","sha256":"CD:0E:7D:D7:D9:AE:12:8F:B5:76:68:8F:82:80:8E:28:F2:30:73:19:10:FF:CE:F4:29:DC:D0:CD:5D:16:AB:2E"}}},"request":{"raw":"GET /upload/202507/214557-68838a950ebda.jpg HTTP/1.1\r\nHost: image.xitongtiandi.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xitongtiandi.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sun, 01 Feb 2026 07:41:25 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 4335\r\nConnection: keep-alive\r\nServer: openresty\r\nCloudServiceDiscount: CDN\r\nx-obs-request-id: 000001994BBB1F3897CA7C879CE6DEFA\r\nETag: \"d45624a38bd5199fb823658977d8124a\"\r\nLast-Modified: Fri, 25 Jul 2025 13:45:57 GMT\r\nx-obs-id-2: 36AAAQAAEAABAAAQAAEAABAAAQAAEAABAAAaI=AAAAAAAAAAAAAAAAAAAAAAAAAA\r\nX-CCDN-Expires: 2055460\r\nvia: CHN-JXnanchang-AREACUCC1-CACHE15[2],CHN-JXnanchang-AREACUCC1-CACHE66[0,TCP_HIT,0],CHN-JSwuxi-GLOBAL2-CACHE66[27],CHN-JSwuxi-GLOBAL2-CACHE74[0,TCP_HIT,22]\r\nx-hcs-proxy-type: 1\r\nX-CCDN-CacheTTL: 2592000\r\nnginx-hit: 1\r\nAge: 536552\r\nAccept-Ranges: bytes\r\nContent-Disposition: inline\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4335,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=3], baseline, precision 8, 80x80, components 3","md5":"d45624a38bd5199fb823658977d8124a","sha1":"fd37477f49e150090c92c6f59978c94124039563","sha256":"2775255b03904bd72683e2dff1eae62eff091231689e570a7bd2a35428c31307","sha512":"1883f3d9a372fa57c7fff8a81f85f913b2e6915fc36305b84c5ca8f9fe745878f0f38769608d950b2d600167fb637b4923b4b83ec70791fde591940932a88e97","ssdeep":"96:ITGME95aHpVhw0/cPsEaBCS/7CQw6za9hWG+oM:IXNnD/cs8S/7Ha3+oM","tlshash":"59916d10bb810e3388c4943d6d86c1dabb9b2974b15bdf4898b64b02fc565cd3945bf9","first_seen":"2026-02-01T07:42:01.649481Z","last_seen":"2026-02-01T07:42:01.649481Z","times_seen":1,"resource_available":false,"data":null}},"time_used":4369,"timings":{"blocked":3325,"dns":0,"connect":278,"send":0,"wait":294,"receive":0,"ssl":471},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hm.baidu.com/hm.js?d128ef8d389e0228675892fb380d7193","fqdn":"hm.baidu.com","domain":"baidu.com","tld":"com"},"ip":{"addr":"111.45.11.83","port":443,"asn":9808,"as":"China Mobile Communications Group Co., Ltd.","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xitongtiandi.net/soft_lt/7017.html","date":"2026-02-01T07:41:25.126Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"baidu.com","organization":"Beijing Baidu Netcom Science Technology Co., Ltd"},"issuer":{"commonName":"GlobalSign RSA OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 09 Jul 2025 07:01:02 GMT","end":"Mon, 10 Aug 2026 07:01:01 GMT"},"fingerprint":{"sha1":"21:BF:66:0D:67:BE:7A:7F:49:48:05:30:F4:7F:09:F2:30:36:CA:63","sha256":"0D:82:2C:9A:90:5A:EF:E9:8F:37:12:C0:E0:26:30:EE:95:33:2C:45:5F:E7:74:5D:F0:8D:BC:79:F4:B0:A1:49"}}},"request":{"raw":"GET /hm.js?d128ef8d389e0228675892fb380d7193 HTTP/1.1\r\nHost: hm.baidu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xitongtiandi.net/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nCache-Control: max-age=0, must-revalidate\r\nContent-Encoding: gzip\r\nContent-Length: 11443\r\nContent-Type: application/javascript\r\nDate: Sun, 01 Feb 2026 07:41:25 GMT\r\nEtag: 151709c92b4d17d1885400edcc229042\r\nP3p: CP=\"CURa ADMa DEVa PSAo PSDo OUR BUS UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR\"\r\nServer: apache\r\nSet-Cookie: HMACCOUNT=A7BA117D1A05CEBC; Path=/; Domain=hm.baidu.com; Expires=Sun, 18 Jan 2038 00:00:00 GMT\r\nStrict-Transport-Security: max-age=172800\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":30049,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (773)","md5":"303d01f15447e174cc6a80249374616e","sha1":"836ee51b9c48b9918b955ce8cb3a68a428311d1a","sha256":"35f47c4e262fd8c985205f0c0e1187865d79070adffc4dabab7508b98370cb53","sha512":"8f991653049aee230b3aa6ff10114d7c5de2101a65407f7a417e10c1ae089dd8d4858b75c86ec3342152ea4003bf4409839df8743aac6006dac29583cedb7317","ssdeep":"384:aJSoLMJJTRl6s1JXFVCFI/TayvuodsZPIGm8XaR1JRwvutq1tGdc7M04gRw6:a4VJfHgMdvussZPIx82Rwvutcto07v","tlshash":"3ad2d9e9b282713293a324a5157f324af07b5a54bd4968a4f11894c07d38fbb027bfdd","first_seen":"2026-02-01T07:42:01.650652Z","last_seen":"2026-02-01T07:42:01.650652Z","times_seen":1,"resource_available":true,"data":null}},"time_used":899,"timings":{"blocked":-1,"dns":1,"connect":208,"send":0,"wait":270,"receive":1,"ssl":420},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"res.xitongtiandi.net/xttd/images/icon-crumbs.png","fqdn":"res.xitongtiandi.net","domain":"xitongtiandi.net","tld":"net"},"ip":{"addr":"121.22.232.168","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xitongtiandi.net/soft_lt/7017.html","date":"2026-02-01T07:41:25.154Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"res.xitongtiandi.net","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Fri, 26 Dec 2025 00:00:00 GMT","end":"Thu, 26 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"1F:66:E3:A4:D8:97:BC:27:31:E3:7E:C0:E9:87:F8:8A:BD:5F:78:50","sha256":"9B:66:75:12:D8:16:0B:05:6B:AE:85:41:94:BC:0E:10:20:C6:42:E3:74:BA:E9:1E:EB:1B:6F:DA:FC:A1:3F:1B"}}},"request":{"raw":"GET /xttd/images/icon-crumbs.png HTTP/1.1\r\nHost: res.xitongtiandi.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://res.xitongtiandi.net/xttd/css/r-detail.css?2026020107\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sun, 01 Feb 2026 07:41:25 GMT\r\nContent-Type: image/png\r\nContent-Length: 588\r\nConnection: keep-alive\r\nServer: openresty\r\nx-reserved: amazon, aws and amazon web services are trademarks or registered trademarks of Amazon Technologies, Inc\r\nCloudServiceDiscount: CDN\r\nx-amz-request-id: 0000019C032A77D1900780A6BBA33963\r\nETag: \"382dd47200d435a38659b2600223a0c1\"\r\nLast-Modified: Thu, 31 Jul 2025 10:20:35 GMT\r\nx-amz-id-2: 36AAAQAAEAABAAAQAAEAABAAAQAAEAABAAAaI=AAAAAAAAAAAAAAAAAAAAAAAAAA\r\nX-CCDN-Expires: 2514838\r\nvia: CHN-HEqinhuangdao-AREACUCC1-CACHE12[3],CHN-HEqinhuangdao-AREACUCC1-CACHE30[0,TCP_HIT,2],CHN-TJ-GLOBAL6-CACHE104[4],CHN-TJ-GLOBAL6-CACHE51[0,TCP_HIT,3]\r\nx-hcs-proxy-type: 1\r\nX-CCDN-CacheTTL: 2592000\r\nnginx-hit: 1\r\nAge: 77162\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":588,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 18 x 18, 8-bit/color RGBA, non-interlaced","md5":"382dd47200d435a38659b2600223a0c1","sha1":"f9ce68b1c0edc211452d2f69772fd327674f4703","sha256":"874034e46b497132cb1fb6c559b3b63ec092820e515022b18fb9c99a175ea8de","sha512":"7331125c2fc2964ee12bce658a3f1b869f991038c944e1f356a639c6dbd77264f141d89cb10232569391e143dcef0fd08216080b5528f828d6001f59f7526e6b","ssdeep":"","tlshash":"8ef047d7418a6c9ca90d1033126a1355f83011e2d81856bc05f56f258fb630dc8e1fb3","first_seen":"2023-07-03T04:23:05Z","last_seen":"2026-02-01T07:42:01.65182Z","times_seen":4,"resource_available":false,"data":null}},"time_used":309,"timings":{"blocked":46,"dns":0,"connect":0,"send":0,"wait":263,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hm.baidu.com/hm.gif?hca=A7BA117D1A05CEBC\u0026cc=1\u0026ck=1\u0026cl=24-bit\u0026ds=1280x1024\u0026vl=1024\u0026et=0\u0026ja=0\u0026ln=en-us\u0026lo=0\u0026rnd=524109951\u0026si=d128ef8d389e0228675892fb380d7193\u0026v=1.3.2\u0026lv=1\u0026sn=27941\u0026r=0\u0026ww=1280\u0026u=https%3A%2F%2Fxitongtiandi.net%2Fsoft_lt%2F7017.html\u0026tt=%E6%96%B9%E6%AD%A3%E5%B0%8F%E6%A0%87%E5%AE%8B%E7%AE%80%E4%BD%93%E5%AD%97%E4%BD%93%E5%85%8D%E8%B4%B9%E4%B8%8B%E8%BD%BD%EF%BD%9C%E9%99%84%E6%96%B9%E6%AD%A3%E5%B0%8F%E6%A0%87%E5%AE%8B%E7%AE%80%E4%BD%93%E5%AE%89%E8%A3%85%E4%BD%BF%E7%94%A8%E6%95%99%E7%A8%8B--%E7%B3%BB%E7%BB%9F%E4%B9%8B%E5%AE%B6","fqdn":"hm.baidu.com","domain":"baidu.com","tld":"com"},"ip":{"addr":"111.45.11.83","port":443,"asn":9808,"as":"China Mobile Communications Group Co., Ltd.","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xitongtiandi.net/soft_lt/7017.html","date":"2026-02-01T07:41:26.041Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"baidu.com","organization":"Beijing Baidu Netcom Science Technology Co., Ltd"},"issuer":{"commonName":"GlobalSign RSA OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 09 Jul 2025 07:01:02 GMT","end":"Mon, 10 Aug 2026 07:01:01 GMT"},"fingerprint":{"sha1":"21:BF:66:0D:67:BE:7A:7F:49:48:05:30:F4:7F:09:F2:30:36:CA:63","sha256":"0D:82:2C:9A:90:5A:EF:E9:8F:37:12:C0:E0:26:30:EE:95:33:2C:45:5F:E7:74:5D:F0:8D:BC:79:F4:B0:A1:49"}}},"request":{"raw":"GET /hm.gif?hca=A7BA117D1A05CEBC\u0026cc=1\u0026ck=1\u0026cl=24-bit\u0026ds=1280x1024\u0026vl=1024\u0026et=0\u0026ja=0\u0026ln=en-us\u0026lo=0\u0026rnd=524109951\u0026si=d128ef8d389e0228675892fb380d7193\u0026v=1.3.2\u0026lv=1\u0026sn=27941\u0026r=0\u0026ww=1280\u0026u=https%3A%2F%2Fxitongtiandi.net%2Fsoft_lt%2F7017.html\u0026tt=%E6%96%B9%E6%AD%A3%E5%B0%8F%E6%A0%87%E5%AE%8B%E7%AE%80%E4%BD%93%E5%AD%97%E4%BD%93%E5%85%8D%E8%B4%B9%E4%B8%8B%E8%BD%BD%EF%BD%9C%E9%99%84%E6%96%B9%E6%AD%A3%E5%B0%8F%E6%A0%87%E5%AE%8B%E7%AE%80%E4%BD%93%E5%AE%89%E8%A3%85%E4%BD%BF%E7%94%A8%E6%95%99%E7%A8%8B--%E7%B3%BB%E7%BB%9F%E4%B9%8B%E5%AE%B6 HTTP/1.1\r\nHost: hm.baidu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xitongtiandi.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nCache-Control: private, max-age=0, no-cache\r\nContent-Length: 43\r\nContent-Type: image/gif\r\nDate: Sun, 01 Feb 2026 07:41:26 GMT\r\nP3p: CP=\"CURa ADMa DEVa PSAo PSDo OUR BUS UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR\"\r\nPragma: no-cache\r\nServer: apache\r\nSet-Cookie: HMACCOUNT=ABCDB17C2EFC7376; Path=/; Domain=hm.baidu.com; Expires=Sun, 18 Jan 2038 00:00:00 GMT\r\nStrict-Transport-Security: max-age=172800\r\nX-Content-Type-Options: nosniff\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"ad4b0f606e0f8465bc4c4c170b37e1a3","sha1":"50b30fd5f87c85fe5cba2635cb83316ca71250d7","sha256":"cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda","sha512":"ebfe0c0df4bcc167d5cb6ebdd379f9083df62bef63a23818e1c6adf0f64b65467ea58b7cd4d03cf0a1b1a2b07fb7b969bf35f25f1f8538cc65cf3eebdf8a0910","ssdeep":"","tlshash":"15900003fbc08002c2b2e0300b3b0380238ce2200aa8030b80aeb0acecaa3a20c03020","first_seen":"2023-04-05T02:54:03Z","last_seen":"2026-06-02T18:08:36.74522Z","times_seen":364205,"resource_available":true,"data":null}},"time_used":817,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":817,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lupic.cdn.bcebos.com/2022_double11/3088802844_14_600_429.jpg","fqdn":"lupic.cdn.bcebos.com","domain":"bcebos.com","tld":"com"},"ip":{"addr":"111.225.213.35","port":443,"asn":58539,"as":"China Telecom","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://pos.baidu.com/scvm?conwid=370\u0026conhei=180\u0026rdid=7002770\u0026dc=3\u0026di=u7002770\u0026s1=4034329033\u0026s2=2872728590\u0026dri=0\u0026dis=0\u0026dai=1\u0026ps=3402x60\u0026enu=encoding\u0026exps=110277,110275,110261,110252,110011\u0026ant=0\u0026psi=1da7a967d3738233\u0026dcb=___adblockplus_\u0026dtm=HTML_POST\u0026dvi=0.0\u0026dci=-1\u0026dpt=none\u0026tpr=1769931685223\u0026ti=%E6%96%B9%E6%AD%A3%E5%B0%8F%E6%A0%87%E5%AE%8B%E7%AE%80%E4%BD%93%E5%AD%97%E4%BD%93%E5%85%8D%E8%B4%B9%E4%B8%8B%E8%BD%BD%EF%BD%9C%E9%99%84%E6%96%B9%E6%AD%A3%E5%B0%8F%E6%A0%87%E5%AE%8B%E7%AE%80%E4%BD%93%E5%AE%89%E8%A3%85%E4%BD%BF%E7%94%A8%E6%95%99%E7%A8%8B--%E7%B3%BB%E7%BB%9F%E4%B9%8B%E5%AE%B6\u0026ari=2\u0026ver=0620\u0026vc=%E6%99%AE%E9%80%9A%E4%B8%8B%E8%BD%BD%E5%9C%B0%E5%9D%80\u0026kws=%E6%96%B9%E6%AD%A3%E5%B0%8F%E6%A0%87%E5%AE%8B%E7%AE%80%E4%BD%93%E5%AD%97%E4%BD%93%2C%E6%96%B9%E6%AD%A3%E5%B0%8F%E6%A0%87%E5%AE%8B%E7%AE%80%E4%BD%93ttf%2C%E6%96%B9%E6%AD%A3%E5%B0%8F%E6%A0%87%E5%AE%8B%E7%AE%80%E4%BD%93%E5%AE%89%E8%A3%85\u0026dps=%E6%96%B9%E6%AD%A3%E5%B0%8F%E6%A0%87%E5%AE%8B%E7%AE%80%E4%BD%93%E5%AD%97%E4%BD%93%E3%80%82%E8%AF%A5%E5%AD%97%E4%BD%93%E9%9D%9E%E5%B8%B8%E7%BE%8E%E8%A7%82%EF%BC%8C%E9%80%82%E5%90%88%E5%9C%A8%E6%AD%A3%E5%BC%8F%E7%9A%84%E5%9C%BA%E5%90%88%E6%9D%A5%E8%BF%9B%E8%A1%8C%E4%BD%BF%E7%94%A8%EF%BC%8C%E6%AF%94%E5%A6%82%E7%94%A8%E4%BA%8E%E6%8A%95%E5%BD%B1%E6%BC%94%E7%A4%BA%EF%BC%8C%E6%89%93%E5%8D%B0%E5%90%88%E5%90%8C%E6%96%87%E6%9C%AC%EF%BC%8C%E8%AF%B4%E6%98%8E%E6%96%87%E6%9C%AC%E7%AD%89%E3%80%82%E6%9C%AC%E7%AB%99%E6%8F%90%E4%BE%9B%E6%96%B9%E6%AD%A3\u0026dbv=0\u0026drs=3\u0026pcs=1280x1024\u0026pss=1280x3801\u0026cfv=0\u0026cpl=5\u0026chi=2\u0026cce=true\u0026cec=UTF-8\u0026tlm=1769931685\u0026prot=2\u0026rw=1024\u0026ltu=https%3A%2F%2Fxitongtiandi.net%2Fsoft_lt%2F7017.html\u0026ecd=1\u0026dft=0\u0026uc=1280x1024\u0026pis=-1x-1\u0026sr=1280x1024\u0026tcn=1769931685\u0026qn=5fd469c31b5c2809\u0026ft=1","date":"2026-02-01T07:41:27.380Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.a.bdydns.com","organization":"北京百度网讯科技有限公司"},"issuer":{"commonName":"sslTrus (RSA) OV CA","organization":"sslTrus"},"validity":{"start":"Fri, 07 Mar 2025 00:00:00 GMT","end":"Sat, 07 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"B0:A6:2D:34:BD:DD:55:41:21:71:78:8B:43:8A:7A:51:22:5C:31:C9","sha256":"10:61:DB:D4:46:80:6A:CD:63:18:ED:40:2F:F0:02:9E:CD:37:4C:88:54:E6:A9:CF:03:50:63:B3:B1:23:63:11"}}},"request":{"raw":"GET /2022_double11/3088802844_14_600_429.jpg HTTP/1.1\r\nHost: lupic.cdn.bcebos.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pos.baidu.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 01 Feb 2026 07:41:30 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 25425\r\nexpires: Mon, 02 Feb 2026 13:21:57 GMT\r\nlast-modified: Wed, 26 Oct 2022 00:16:10 GMT\r\netag: \"8424d76a5e1edc9be6446404d0f67ec6\"\r\nage: 148465\r\naccept-ranges: bytes\r\ncontent-md5: hCTXal4e3JvmRGQE0PZ+xg==\r\nx-bce-content-crc32: 4231811856\r\nx-bce-content-crc32c: 0\r\nx-bce-debug-id: TyoiPIi8CSehgz19glfoyIyXR6rIE2WUM+qCHBtJGZJBj8h5yYdVQjqfLT5QcGUhhevE16g/DHbhK/zlpH6IuQ==\r\nx-bce-flow-control-type: -1\r\nx-bce-is-transition: false\r\nx-bce-request-id: 06ee14aa-fb87-4aa3-861d-08fd4395337b\r\nx-bce-storage-class: STANDARD\r\nohc-global-saved-time: Fri, 30 Jan 2026 13:21:57 GMT\r\nohc-cache-hit: lf6ct91 [4], fsix91 [2]\r\nohc-file-size: 25425\r\nx-cache-status: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":25425,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 600x429, components 3","md5":"8424d76a5e1edc9be6446404d0f67ec6","sha1":"5993d9c96aeabdd6e43fed4bbbcaa9da6c4b177d","sha256":"40c9ce4f027add3e3fde82ab087eacb26b46931ac3f6c8f213be3a4986dc56bf","sha512":"2a01a19b29189627cf6a3d64ab39534d8aa93dd52f418101dceb66c811349b890af5722ff521b272ee8fb49bc69c5ae7bc09b742960c8ef6af862fbe09ff1e76","ssdeep":"768:Ky14uW6ybvcnTQSb62cd1RA0RA0RA0RA0RA0RA0RA0RA0RA0RA0RA0RA0RAqEDYp:KyRyDcnTHbo1RA0RA0RA0RA0RA0RA0Rz","tlshash":"6ab24c135e1ecb01685ed3e4eb025d194d89af8ee421b4eb0d164ffe76d04e88c8d69e","first_seen":"2023-07-06T12:20:33Z","last_seen":"2026-02-01T07:42:01.652766Z","times_seen":5,"resource_available":false,"data":null}},"time_used":5745,"timings":{"blocked":2410,"dns":1647,"connect":245,"send":0,"wait":922,"receive":1,"ssl":517},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"image.xitongtiandi.net/upload/202403/112845-6600ef6ddeb2b.png","fqdn":"image.xitongtiandi.net","domain":"xitongtiandi.net","tld":"net"},"ip":{"addr":"116.153.39.131","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xitongtiandi.net/soft_lt/7017.html","date":"2026-02-01T07:41:21.747Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"image.xitongtiandi.net","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Fri, 26 Dec 2025 00:00:00 GMT","end":"Thu, 26 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"68:45:42:1A:66:A6:87:1B:03:DE:5B:E1:65:05:9A:BC:74:13:56:8C","sha256":"CD:0E:7D:D7:D9:AE:12:8F:B5:76:68:8F:82:80:8E:28:F2:30:73:19:10:FF:CE:F4:29:DC:D0:CD:5D:16:AB:2E"}}},"request":{"raw":"GET /upload/202403/112845-6600ef6ddeb2b.png HTTP/1.1\r\nHost: image.xitongtiandi.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xitongtiandi.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sun, 01 Feb 2026 07:41:26 GMT\r\nContent-Type: image/png\r\nContent-Length: 228901\r\nConnection: keep-alive\r\nServer: openresty\r\nCloudServiceDiscount: CDN\r\nx-obs-request-id: 0000019B4BAAC3BA97662171CC60F9C8\r\nETag: \"9052e6ecf5347a569d4663f3b9e359cf\"\r\nLast-Modified: Mon, 25 Mar 2024 03:28:45 GMT\r\nx-obs-id-2: 36AAAQAAEAABAAAQAAEAABAAAQAAEAABAAAaI=AAAAAAAAAAAAAAAAAAAAAAAAAA\r\nX-CCDN-Expires: 405257\r\nvia: CHN-JXnanchang-AREACUCC1-CACHE20[3],CHN-JXnanchang-AREACUCC1-CACHE56[0,TCP_HIT,0],CHN-JSwuxi-GLOBAL2-CACHE60[39],CHN-JSwuxi-GLOBAL2-CACHE64[0,TCP_HIT,38]\r\nx-hcs-proxy-type: 1\r\nX-CCDN-CacheTTL: 2592000\r\nnginx-hit: 1\r\nAge: 2186756\r\nAccept-Ranges: bytes\r\nContent-Disposition: inline\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":228901,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 420 x 352, 8-bit/color RGB, non-interlaced","md5":"9052e6ecf5347a569d4663f3b9e359cf","sha1":"bbce0d41bce97af3145ad03fe357b1a43928e220","sha256":"6f17154eb26a5413da53d4c547125f9ad210c32643e8d0a1123416ad692b9bdb","sha512":"f60367579d4a49086ab8374874e896ddd61ff0f23c8d0095a5e1b9fa87f952efdd5063c4d1e05136f9362bccfe41c7391f47d502e699b1920bd1dfbf8164df00","ssdeep":"6144:+/CWAHWT4om68b+FZ6UADTzQY11DvC3usropy6A:+/UHWT4hvKqUADwUjC+sUpxA","tlshash":"cc242316fb6a7c22f045ea4a8427e73ddf8a069dedd18f11679390584e1fa1804f3739","first_seen":"2026-02-01T07:42:01.654287Z","last_seen":"2026-02-01T07:42:01.654287Z","times_seen":1,"resource_available":false,"data":null}},"time_used":5831,"timings":{"blocked":4730,"dns":0,"connect":0,"send":0,"wait":342,"receive":759,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"image.xitongtiandi.net/upload/202507/154437-688335e5230bd.jpg","fqdn":"image.xitongtiandi.net","domain":"xitongtiandi.net","tld":"net"},"ip":{"addr":"116.153.39.131","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xitongtiandi.net/soft_lt/7017.html","date":"2026-02-01T07:41:21.750Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"image.xitongtiandi.net","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Fri, 26 Dec 2025 00:00:00 GMT","end":"Thu, 26 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"68:45:42:1A:66:A6:87:1B:03:DE:5B:E1:65:05:9A:BC:74:13:56:8C","sha256":"CD:0E:7D:D7:D9:AE:12:8F:B5:76:68:8F:82:80:8E:28:F2:30:73:19:10:FF:CE:F4:29:DC:D0:CD:5D:16:AB:2E"}}},"request":{"raw":"GET /upload/202507/154437-688335e5230bd.jpg HTTP/1.1\r\nHost: image.xitongtiandi.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xitongtiandi.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sun, 01 Feb 2026 07:41:25 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 17358\r\nConnection: keep-alive\r\nServer: openresty\r\nCloudServiceDiscount: CDN\r\nx-obs-request-id: 0000019B376216DC97A9F6A580D3DEB4\r\nETag: \"e3d1db6f8132855e95b44d6670148e5d\"\r\nLast-Modified: Fri, 25 Jul 2025 07:44:37 GMT\r\nx-obs-id-2: 36AAAQAAEAABAAAQAAEAABAAAQAAEAABAAAaI=AAAAAAAAAAAAAAAAAAAAAAAAAA\r\nX-CCDN-Expires: 517647\r\nvia: CHN-JXnanchang-AREACUCC1-CACHE33[2],CHN-JXnanchang-AREACUCC1-CACHE26[0,TCP_HIT,0],CHN-JSwuxi-GLOBAL2-CACHE50[15],CHN-JSwuxi-GLOBAL2-CACHE89[0,TCP_HIT,8]\r\nx-hcs-proxy-type: 1\r\nX-CCDN-CacheTTL: 2592000\r\nnginx-hit: 1\r\nAge: 2074365\r\nAccept-Ranges: bytes\r\nContent-Disposition: inline\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":17358,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1, software=www.meitu.com], baseline, precision 8, 200x200, components 3","md5":"e3d1db6f8132855e95b44d6670148e5d","sha1":"1432ae61c1efe25fcf2df5db75fdcf1026a02e60","sha256":"5935194ec18230421a497db9497076ddc77f8c8f6bd6e139d3e8a875db55a2c5","sha512":"ab34ed381a362cba423d0208f3aa1c0d65ceb44720fa112131f95192660839b47cb06af2274ae2fd1e7f99d3f6e44418585b7b4eb05f26db2c2812b8d2d47969","ssdeep":"384:7X6hCrw3VM2p3y+98ZqH3RQlX/K84uUZXnsKWz1X7XOR+ZcKn:7XICsvp3y+9lXqN/D4u8nsKC7ekcM","tlshash":"6b72c07a35e76350dfd352fea43d3e7b632682569ce0470179230d68c078676e62d09c","first_seen":"2026-02-01T07:42:01.6554Z","last_seen":"2026-02-01T07:42:01.6554Z","times_seen":1,"resource_available":false,"data":null}},"time_used":4483,"timings":{"blocked":3326,"dns":0,"connect":282,"send":0,"wait":384,"receive":10,"ssl":477},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sp0.baidu.com/9_Q4simg2RQJ8t7jm9iCKT-xh_/s.gif?l=https://xitongtiandi.net/soft_lt/7017.html","fqdn":"sp0.baidu.com","domain":"baidu.com","tld":"com"},"ip":{"addr":"103.235.46.102","port":443,"asn":55967,"as":"Beijing Baidu Netcom Science and Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xitongtiandi.net/soft_lt/7017.html","date":"2026-02-01T07:41:26.312Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"baidu.com","organization":"Beijing Baidu Netcom Science Technology Co., Ltd"},"issuer":{"commonName":"GlobalSign RSA OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 09 Jul 2025 07:01:02 GMT","end":"Mon, 10 Aug 2026 07:01:01 GMT"},"fingerprint":{"sha1":"21:BF:66:0D:67:BE:7A:7F:49:48:05:30:F4:7F:09:F2:30:36:CA:63","sha256":"0D:82:2C:9A:90:5A:EF:E9:8F:37:12:C0:E0:26:30:EE:95:33:2C:45:5F:E7:74:5D:F0:8D:BC:79:F4:B0:A1:49"}}},"request":{"raw":"GET /9_Q4simg2RQJ8t7jm9iCKT-xh_/s.gif?l=https://xitongtiandi.net/soft_lt/7017.html HTTP/1.1\r\nHost: sp0.baidu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xitongtiandi.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Length: 0\r\nContent-Type: text/plain; charset=utf-8\r\nDate: Sun, 01 Feb 2026 07:41:27 GMT\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-02T18:08:06.981696Z","times_seen":16047564,"resource_available":true,"data":null}},"time_used":1945,"timings":{"blocked":807,"dns":3,"connect":261,"send":0,"wait":331,"receive":0,"ssl":539},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pos.baidu.com/scvm?conwid=370\u0026conhei=180\u0026rdid=7002770\u0026dc=3\u0026di=u7002770\u0026s1=4034329033\u0026s2=2872728590\u0026dri=0\u0026dis=0\u0026dai=1\u0026ps=3402x60\u0026enu=encoding\u0026exps=110277,110275,110261,110252,110011\u0026ant=0\u0026psi=1da7a967d3738233\u0026dcb=___adblockplus_\u0026dtm=HTML_POST\u0026dvi=0.0\u0026dci=-1\u0026dpt=none\u0026tpr=1769931685223\u0026ti=%E6%96%B9%E6%AD%A3%E5%B0%8F%E6%A0%87%E5%AE%8B%E7%AE%80%E4%BD%93%E5%AD%97%E4%BD%93%E5%85%8D%E8%B4%B9%E4%B8%8B%E8%BD%BD%EF%BD%9C%E9%99%84%E6%96%B9%E6%AD%A3%E5%B0%8F%E6%A0%87%E5%AE%8B%E7%AE%80%E4%BD%93%E5%AE%89%E8%A3%85%E4%BD%BF%E7%94%A8%E6%95%99%E7%A8%8B--%E7%B3%BB%E7%BB%9F%E4%B9%8B%E5%AE%B6\u0026ari=2\u0026ver=0620\u0026vc=%E6%99%AE%E9%80%9A%E4%B8%8B%E8%BD%BD%E5%9C%B0%E5%9D%80\u0026kws=%E6%96%B9%E6%AD%A3%E5%B0%8F%E6%A0%87%E5%AE%8B%E7%AE%80%E4%BD%93%E5%AD%97%E4%BD%93%2C%E6%96%B9%E6%AD%A3%E5%B0%8F%E6%A0%87%E5%AE%8B%E7%AE%80%E4%BD%93ttf%2C%E6%96%B9%E6%AD%A3%E5%B0%8F%E6%A0%87%E5%AE%8B%E7%AE%80%E4%BD%93%E5%AE%89%E8%A3%85\u0026dps=%E6%96%B9%E6%AD%A3%E5%B0%8F%E6%A0%87%E5%AE%8B%E7%AE%80%E4%BD%93%E5%AD%97%E4%BD%93%E3%80%82%E8%AF%A5%E5%AD%97%E4%BD%93%E9%9D%9E%E5%B8%B8%E7%BE%8E%E8%A7%82%EF%BC%8C%E9%80%82%E5%90%88%E5%9C%A8%E6%AD%A3%E5%BC%8F%E7%9A%84%E5%9C%BA%E5%90%88%E6%9D%A5%E8%BF%9B%E8%A1%8C%E4%BD%BF%E7%94%A8%EF%BC%8C%E6%AF%94%E5%A6%82%E7%94%A8%E4%BA%8E%E6%8A%95%E5%BD%B1%E6%BC%94%E7%A4%BA%EF%BC%8C%E6%89%93%E5%8D%B0%E5%90%88%E5%90%8C%E6%96%87%E6%9C%AC%EF%BC%8C%E8%AF%B4%E6%98%8E%E6%96%87%E6%9C%AC%E7%AD%89%E3%80%82%E6%9C%AC%E7%AB%99%E6%8F%90%E4%BE%9B%E6%96%B9%E6%AD%A3\u0026dbv=0\u0026drs=3\u0026pcs=1280x1024\u0026pss=1280x3801\u0026cfv=0\u0026cpl=5\u0026chi=2\u0026cce=true\u0026cec=UTF-8\u0026tlm=1769931685\u0026prot=2\u0026rw=1024\u0026ltu=https%3A%2F%2Fxitongtiandi.net%2Fsoft_lt%2F7017.html\u0026ecd=1\u0026dft=0\u0026uc=1280x1024\u0026pis=-1x-1\u0026sr=1280x1024\u0026tcn=1769931685\u0026qn=5fd469c31b5c2809\u0026ft=1","fqdn":"pos.baidu.com","domain":"baidu.com","tld":"com"},"ip":{"addr":"103.235.46.94","port":443,"asn":55967,"as":"Beijing Baidu Netcom Science and Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://xitongtiandi.net/soft_lt/7017.html","date":"2026-02-01T07:41:26.608Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"baidu.com","organization":"Beijing Baidu Netcom Science Technology Co., Ltd"},"issuer":{"commonName":"GlobalSign RSA OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 09 Jul 2025 07:01:02 GMT","end":"Mon, 10 Aug 2026 07:01:01 GMT"},"fingerprint":{"sha1":"21:BF:66:0D:67:BE:7A:7F:49:48:05:30:F4:7F:09:F2:30:36:CA:63","sha256":"0D:82:2C:9A:90:5A:EF:E9:8F:37:12:C0:E0:26:30:EE:95:33:2C:45:5F:E7:74:5D:F0:8D:BC:79:F4:B0:A1:49"}}},"request":{"raw":"GET /scvm?conwid=370\u0026conhei=180\u0026rdid=7002770\u0026dc=3\u0026di=u7002770\u0026s1=4034329033\u0026s2=2872728590\u0026dri=0\u0026dis=0\u0026dai=1\u0026ps=3402x60\u0026enu=encoding\u0026exps=110277,110275,110261,110252,110011\u0026ant=0\u0026psi=1da7a967d3738233\u0026dcb=___adblockplus_\u0026dtm=HTML_POST\u0026dvi=0.0\u0026dci=-1\u0026dpt=none\u0026tpr=1769931685223\u0026ti=%E6%96%B9%E6%AD%A3%E5%B0%8F%E6%A0%87%E5%AE%8B%E7%AE%80%E4%BD%93%E5%AD%97%E4%BD%93%E5%85%8D%E8%B4%B9%E4%B8%8B%E8%BD%BD%EF%BD%9C%E9%99%84%E6%96%B9%E6%AD%A3%E5%B0%8F%E6%A0%87%E5%AE%8B%E7%AE%80%E4%BD%93%E5%AE%89%E8%A3%85%E4%BD%BF%E7%94%A8%E6%95%99%E7%A8%8B--%E7%B3%BB%E7%BB%9F%E4%B9%8B%E5%AE%B6\u0026ari=2\u0026ver=0620\u0026vc=%E6%99%AE%E9%80%9A%E4%B8%8B%E8%BD%BD%E5%9C%B0%E5%9D%80\u0026kws=%E6%96%B9%E6%AD%A3%E5%B0%8F%E6%A0%87%E5%AE%8B%E7%AE%80%E4%BD%93%E5%AD%97%E4%BD%93%2C%E6%96%B9%E6%AD%A3%E5%B0%8F%E6%A0%87%E5%AE%8B%E7%AE%80%E4%BD%93ttf%2C%E6%96%B9%E6%AD%A3%E5%B0%8F%E6%A0%87%E5%AE%8B%E7%AE%80%E4%BD%93%E5%AE%89%E8%A3%85\u0026dps=%E6%96%B9%E6%AD%A3%E5%B0%8F%E6%A0%87%E5%AE%8B%E7%AE%80%E4%BD%93%E5%AD%97%E4%BD%93%E3%80%82%E8%AF%A5%E5%AD%97%E4%BD%93%E9%9D%9E%E5%B8%B8%E7%BE%8E%E8%A7%82%EF%BC%8C%E9%80%82%E5%90%88%E5%9C%A8%E6%AD%A3%E5%BC%8F%E7%9A%84%E5%9C%BA%E5%90%88%E6%9D%A5%E8%BF%9B%E8%A1%8C%E4%BD%BF%E7%94%A8%EF%BC%8C%E6%AF%94%E5%A6%82%E7%94%A8%E4%BA%8E%E6%8A%95%E5%BD%B1%E6%BC%94%E7%A4%BA%EF%BC%8C%E6%89%93%E5%8D%B0%E5%90%88%E5%90%8C%E6%96%87%E6%9C%AC%EF%BC%8C%E8%AF%B4%E6%98%8E%E6%96%87%E6%9C%AC%E7%AD%89%E3%80%82%E6%9C%AC%E7%AB%99%E6%8F%90%E4%BE%9B%E6%96%B9%E6%AD%A3\u0026dbv=0\u0026drs=3\u0026pcs=1280x1024\u0026pss=1280x3801\u0026cfv=0\u0026cpl=5\u0026chi=2\u0026cce=true\u0026cec=UTF-8\u0026tlm=1769931685\u0026prot=2\u0026rw=1024\u0026ltu=https%3A%2F%2Fxitongtiandi.net%2Fsoft_lt%2F7017.html\u0026ecd=1\u0026dft=0\u0026uc=1280x1024\u0026pis=-1x-1\u0026sr=1280x1024\u0026tcn=1769931685\u0026qn=5fd469c31b5c2809\u0026ft=1 HTTP/1.1\r\nHost: pos.baidu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xitongtiandi.net/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nCache-Control: post-check=0, pre-check=0\r\nConnection: keep-alive\r\nContent-Encoding: gzip\r\nContent-Length: 12826\r\nContent-Type: text/html;charset=UTF-8\r\nDate: Sun, 01 Feb 2026 07:41:26 GMT\r\nExpires: Mon, 26 Jul 1997 05:00:00 GMT\r\nLast-Modified: Sun Feb  1 15:41:26 2026\r\nP3p: CP=\" OTI DSP COR IVA OUR IND COM \", CP=\" OTI DSP COR IVA OUR IND COM \"\r\nPragma: no-cache\r\nServer: nginx\r\nSet-Cookie: BAIDUID=7700EBDD10BE59CE52E3DCB5FA67E40E:FG=1; expires=Mon, 01-Feb-57 07:41:26 GMT; max-age=31536000; path=/; domain=.baidu.com; version=1\r\nX-Xss-Protection: 0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":56350,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (3633)","md5":"913c936279aabe106ba031e873bb2ef4","sha1":"1ef7eab34c2c5fbca1a3283c758b92a5d57894f3","sha256":"dd3eafffc35f9e177fda130092abe1c52bff79e31ff4c59326657bd6d19bb689","sha512":"31c2e7a58516acb4c963c805424ba721a71f56be6945bfaa8945d5910a3268acbcfa3b6e59297288b159223af5af9ed4dbb91157a08a2d307fd12f58309e5285","ssdeep":"1536:3bAu5oyMGbO3ry1IpFN/k5UW032bOts7oM5N3MqiMLyMq+:MwoyMGbO082bOOsKNT","tlshash":"4a43f8164aeb0867f9273068afcf26143c78d543ce45ce18beac7a945f5096a0177fe8","first_seen":"2026-02-01T07:42:01.657084Z","last_seen":"2026-02-01T07:42:01.657084Z","times_seen":1,"resource_available":false,"data":null}},"time_used":371,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":370,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cpro.baidustatic.com/js/logo/css/logo-sm.css","fqdn":"cpro.baidustatic.com","domain":"baidustatic.com","tld":"com"},"ip":{"addr":"112.82.180.38","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://pos.baidu.com/scvm?conwid=370\u0026conhei=180\u0026rdid=7002770\u0026dc=3\u0026di=u7002770\u0026s1=4034329033\u0026s2=2872728590\u0026dri=0\u0026dis=0\u0026dai=1\u0026ps=3402x60\u0026enu=encoding\u0026exps=110277,110275,110261,110252,110011\u0026ant=0\u0026psi=1da7a967d3738233\u0026dcb=___adblockplus_\u0026dtm=HTML_POST\u0026dvi=0.0\u0026dci=-1\u0026dpt=none\u0026tpr=1769931685223\u0026ti=%E6%96%B9%E6%AD%A3%E5%B0%8F%E6%A0%87%E5%AE%8B%E7%AE%80%E4%BD%93%E5%AD%97%E4%BD%93%E5%85%8D%E8%B4%B9%E4%B8%8B%E8%BD%BD%EF%BD%9C%E9%99%84%E6%96%B9%E6%AD%A3%E5%B0%8F%E6%A0%87%E5%AE%8B%E7%AE%80%E4%BD%93%E5%AE%89%E8%A3%85%E4%BD%BF%E7%94%A8%E6%95%99%E7%A8%8B--%E7%B3%BB%E7%BB%9F%E4%B9%8B%E5%AE%B6\u0026ari=2\u0026ver=0620\u0026vc=%E6%99%AE%E9%80%9A%E4%B8%8B%E8%BD%BD%E5%9C%B0%E5%9D%80\u0026kws=%E6%96%B9%E6%AD%A3%E5%B0%8F%E6%A0%87%E5%AE%8B%E7%AE%80%E4%BD%93%E5%AD%97%E4%BD%93%2C%E6%96%B9%E6%AD%A3%E5%B0%8F%E6%A0%87%E5%AE%8B%E7%AE%80%E4%BD%93ttf%2C%E6%96%B9%E6%AD%A3%E5%B0%8F%E6%A0%87%E5%AE%8B%E7%AE%80%E4%BD%93%E5%AE%89%E8%A3%85\u0026dps=%E6%96%B9%E6%AD%A3%E5%B0%8F%E6%A0%87%E5%AE%8B%E7%AE%80%E4%BD%93%E5%AD%97%E4%BD%93%E3%80%82%E8%AF%A5%E5%AD%97%E4%BD%93%E9%9D%9E%E5%B8%B8%E7%BE%8E%E8%A7%82%EF%BC%8C%E9%80%82%E5%90%88%E5%9C%A8%E6%AD%A3%E5%BC%8F%E7%9A%84%E5%9C%BA%E5%90%88%E6%9D%A5%E8%BF%9B%E8%A1%8C%E4%BD%BF%E7%94%A8%EF%BC%8C%E6%AF%94%E5%A6%82%E7%94%A8%E4%BA%8E%E6%8A%95%E5%BD%B1%E6%BC%94%E7%A4%BA%EF%BC%8C%E6%89%93%E5%8D%B0%E5%90%88%E5%90%8C%E6%96%87%E6%9C%AC%EF%BC%8C%E8%AF%B4%E6%98%8E%E6%96%87%E6%9C%AC%E7%AD%89%E3%80%82%E6%9C%AC%E7%AB%99%E6%8F%90%E4%BE%9B%E6%96%B9%E6%AD%A3\u0026dbv=0\u0026drs=3\u0026pcs=1280x1024\u0026pss=1280x3801\u0026cfv=0\u0026cpl=5\u0026chi=2\u0026cce=true\u0026cec=UTF-8\u0026tlm=1769931685\u0026prot=2\u0026rw=1024\u0026ltu=https%3A%2F%2Fxitongtiandi.net%2Fsoft_lt%2F7017.html\u0026ecd=1\u0026dft=0\u0026uc=1280x1024\u0026pis=-1x-1\u0026sr=1280x1024\u0026tcn=1769931685\u0026qn=5fd469c31b5c2809\u0026ft=1","date":"2026-02-01T07:41:27.044Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"baidu.com","organization":"Beijing Baidu Netcom Science Technology Co., Ltd"},"issuer":{"commonName":"GlobalSign RSA OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 09 Jul 2025 07:01:02 GMT","end":"Mon, 10 Aug 2026 07:01:01 GMT"},"fingerprint":{"sha1":"21:BF:66:0D:67:BE:7A:7F:49:48:05:30:F4:7F:09:F2:30:36:CA:63","sha256":"0D:82:2C:9A:90:5A:EF:E9:8F:37:12:C0:E0:26:30:EE:95:33:2C:45:5F:E7:74:5D:F0:8D:BC:79:F4:B0:A1:49"}}},"request":{"raw":"GET /js/logo/css/logo-sm.css HTTP/1.1\r\nHost: cpro.baidustatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pos.baidu.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: JSP3/2.0.14\r\ndate: Sun, 01 Feb 2026 07:41:27 GMT\r\ncontent-type: text/css\r\nexpires: Sun, 01 Feb 2026 08:04:18 GMT\r\nlast-modified: Tue, 09 Apr 2024 10:40:33 GMT\r\netag: \"66151b21-850\"\r\ncache-control: max-age=3600\r\ncontent-encoding: br\r\nage: 2229\r\naccept-ranges: bytes\r\nohc-global-saved-time: Sun, 01 Feb 2026 07:04:18 GMT\r\nohc-cache-hit: cz2un50 [2], tz2ix112 [2]\r\nohc-file-size: 671\r\nx-cache-status: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":2128,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (2128), with no line terminators","md5":"1a332d38883827c74e6ba3dddb9a19b5","sha1":"0f8407d02e55d03540f61867572f490ce2707ebd","sha256":"503aeafa6ff32a486168dec325ef89dc41f381745150e807a911009b5ea422b7","sha512":"1da8a143d51234db79776f08742b3ac57f9572678bafd454ddd0c1988915e25275a96d02ee1670101a0702d5dba0e9aa650e7d6950d30430105399a501c8f09d","ssdeep":"","tlshash":"4a41210982ac1269b2bfe215b5d277db3214a653e1335bbede15d534c2cb9693233304","first_seen":"2023-04-05T05:14:31Z","last_seen":"2026-06-02T04:53:51.089581Z","times_seen":1030,"resource_available":false,"data":null}},"time_used":301,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":301,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xitongtiandi.net/soft_lt/7017.html","fqdn":"xitongtiandi.net","domain":"xitongtiandi.net","tld":"net"},"ip":{"addr":"116.153.39.131","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-02-01T07:41:16.076Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xitongtiandi.net","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Fri, 26 Dec 2025 00:00:00 GMT","end":"Thu, 26 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"F4:52:D9:82:75:C2:6A:EF:2C:47:B9:F7:15:DB:5C:D6:A9:8B:47:35","sha256":"02:12:35:D1:65:13:37:64:B1:C0:2C:97:7A:6C:55:81:55:B4:90:6D:94:B8:97:FF:79:EB:C8:CB:50:69:0A:F6"}}},"request":{"raw":"GET /soft_lt/7017.html HTTP/1.1\r\nHost: xitongtiandi.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sun, 01 Feb 2026 07:41:21 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nContent-Length: 9141\r\nConnection: keep-alive\r\nServer: openresty\r\nVary: Accept-Encoding\r\nX-Powered-By: PHP/7.4.30\r\nContent-Encoding: gzip\r\nvia: CHN-JXnanchang-AREACUCC1-CACHE8[19],CHN-JXnanchang-AREACUCC1-CACHE21[0,TCP_HIT,15],CHN-JSwuxi-GLOBAL2-CACHE20[50],CHN-JSwuxi-GLOBAL2-CACHE57[46,TCP_MISS,49],CHN-JSwuxi-GLOBAL2-CACHE57[34,TCP_MISS,47]\r\nx-hcs-proxy-type: 1\r\nX-CCDN-CacheTTL: 43200\r\nX-CCDN-REQ-ID-46B1: 327186c90eb9385a3bd162dc6d5fe86b\r\nnginx-hit: 1\r\nCache-Control: no-cache, private\r\nAge: 281\r\nX-CCDN-Expires: 42919\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP:7.4.30","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"jQuery:1.8.3","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}],"data":{"size":36948,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with CRLF, LF line terminators","md5":"286708e767b79137ce4f03aebcf4fa45","sha1":"b22f1ba9219a6b567d6ad7405ad2d9f1a4d8c045","sha256":"b06b101d837fbe444385866fea4912514373979e69802e0ceded1b8f1e7e1735","sha512":"91b3cd501d557f28c106769fdd149e5428e4dbae7850053110784104b880d7a213049a75bf04ed63e4c069f155f2134b644432bc55419e85299b3ddccf47c581","ssdeep":"768:hcQcXD6c00zPBpJcoUQUhkH1yhCIK9yeZQ/s3il6+XtLZmVL:eJXv3PBpJcoUnhXK9yeO/sSl6WtLZEL","tlshash":"57f2b7e249f241b712a3c0e57779273fee92004be402ba45f9ac2b89ef84d574c5324d","first_seen":"2026-02-01T07:42:01.658531Z","last_seen":"2026-02-01T07:42:01.658531Z","times_seen":1,"resource_available":false,"data":null}},"time_used":10489,"timings":{"blocked":5064,"dns":3951,"connect":551,"send":0,"wait":360,"receive":1,"ssl":558},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.xitongtiandi.net/d/file/20210724/d60ad7680abee819aa0e524d1a520c0d.png","fqdn":"img.xitongtiandi.net","domain":"xitongtiandi.net","tld":"net"},"ip":{"addr":"120.52.95.238","port":443,"asn":133119,"as":"China Unicom IP network","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xitongtiandi.net/soft_lt/7017.html","date":"2026-02-01T07:41:21.740Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.xitongtiandi.net","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Fri, 26 Dec 2025 00:00:00 GMT","end":"Thu, 26 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"76:AE:74:5D:DA:22:6F:75:FF:B8:99:47:85:9F:B9:1D:12:D7:B2:E0","sha256":"7E:AA:16:44:B1:24:13:58:14:68:DE:F8:07:07:9D:F6:FF:DB:FE:1B:17:14:79:E9:F9:47:14:8C:63:F0:C7:08"}}},"request":{"raw":"GET /d/file/20210724/d60ad7680abee819aa0e524d1a520c0d.png HTTP/1.1\r\nHost: img.xitongtiandi.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xitongtiandi.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sun, 01 Feb 2026 07:41:26 GMT\r\nContent-Type: image/png\r\nContent-Length: 13997\r\nConnection: keep-alive\r\nServer: openresty\r\nCloudServiceDiscount: CDN\r\nx-obs-request-id: 00000199BDCA95C497479EEA1AFC0D09\r\nETag: \"0ad93a1b1ecd259ed44ef0cb7a403dfd\"\r\nLast-Modified: Wed, 30 Oct 2024 03:07:35 GMT\r\nContent-Disposition: attachment\r\nx-obs-id-2: 36AAAQAAEAABAAAQAAEAABAAAQAAEAABAAAaI=AAAAAAAAAAAAAAAAAAAAAAAAAA\r\nX-CCDN-Expires: 2452549\r\nvia: CHN-HElangfang-AREACUCC1-CACHE46[2],CHN-HElangfang-AREACUCC1-CACHE24[0,TCP_HIT,0],CHN-TJ-GLOBAL6-CACHE34[4],CHN-TJ-GLOBAL6-CACHE105[0,TCP_HIT,2]\r\nx-hcs-proxy-type: 1\r\nX-CCDN-CacheTTL: 2592000\r\nnginx-hit: 1\r\nAge: 139465\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":13997,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 383 x 178, 8-bit/color RGB, non-interlaced","md5":"0ad93a1b1ecd259ed44ef0cb7a403dfd","sha1":"e11f7b4338a137387ef699e7a7573fa1a6fb8bf0","sha256":"0fe4875c7997695ff7b7866a6701ff5502294a7ba5a7de837c7aa1c3893790bd","sha512":"ed227e6722d3c3ae4792f472de0eaa8df4c4679d9e2395ef8cee63ca763dc1b00d923b83100d9e2e52f37164c6fe3bd23938176572d7c868a4fbff6adb8cc87c","ssdeep":"384:N2NeV0YYkQCxGsZ9l5yFxZ+ZWxO96VPhVC6CVow:UBNkB9b/WxO9Iy60","tlshash":"9152d02eaa7cb9b48b94ff473ef4261de33940acb81a6c012c158055b9e9c912130cb8","first_seen":"2026-02-01T07:42:01.659608Z","last_seen":"2026-02-01T07:42:01.659608Z","times_seen":1,"resource_available":false,"data":null}},"time_used":5278,"timings":{"blocked":4979,"dns":0,"connect":0,"send":0,"wait":298,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"res.xitongtiandi.net/downza/pc/v2023/images/gwba.png","fqdn":"res.xitongtiandi.net","domain":"xitongtiandi.net","tld":"net"},"ip":{"addr":"121.22.232.168","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xitongtiandi.net/soft_lt/7017.html","date":"2026-02-01T07:41:21.756Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"res.xitongtiandi.net","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Fri, 26 Dec 2025 00:00:00 GMT","end":"Thu, 26 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"1F:66:E3:A4:D8:97:BC:27:31:E3:7E:C0:E9:87:F8:8A:BD:5F:78:50","sha256":"9B:66:75:12:D8:16:0B:05:6B:AE:85:41:94:BC:0E:10:20:C6:42:E3:74:BA:E9:1E:EB:1B:6F:DA:FC:A1:3F:1B"}}},"request":{"raw":"GET /downza/pc/v2023/images/gwba.png HTTP/1.1\r\nHost: res.xitongtiandi.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xitongtiandi.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sun, 01 Feb 2026 07:41:25 GMT\r\nContent-Type: image/png\r\nContent-Length: 19256\r\nConnection: keep-alive\r\nServer: openresty\r\nx-reserved: amazon, aws and amazon web services are trademarks or registered trademarks of Amazon Technologies, Inc\r\nCloudServiceDiscount: CDN\r\nx-amz-request-id: 0000019BCAA81AC297688BB8245FF6C1\r\nETag: \"d0289dc0a46fc5b15b3363ffa78cf6c7\"\r\nLast-Modified: Thu, 30 Oct 2025 09:32:38 GMT\r\nx-amz-id-2: 36AAAQAAEAABAAAQAAEAABAAAQAAEAABAAAaI=AAAAAAAAAAAAAAAAAAAAAAAAAA\r\nX-CCDN-Expires: 1532704\r\nvia: CHN-HEqinhuangdao-AREACUCC1-CACHE4[5],CHN-HEqinhuangdao-AREACUCC1-CACHE3[0,TCP_HIT,3],CHN-TJ-GLOBAL6-CACHE76[7],CHN-TJ-GLOBAL6-CACHE50[0,TCP_HIT,2]\r\nx-hcs-proxy-type: 1\r\nX-CCDN-CacheTTL: 2592000\r\nnginx-hit: 1\r\nAge: 1059296\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":19256,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 20 x 20, 8-bit/color RGBA, non-interlaced","md5":"d0289dc0a46fc5b15b3363ffa78cf6c7","sha1":"29c400bc3b89f6085766dac4e0330ded5cb73d52","sha256":"a20583c81805fe64f7fa210851ce29754af9d25fd6aa5a3225a9557529602513","sha512":"10a9cd6fd64b8107db8b058eb8c4cc0fe23bb5c13a91d40caf93d323f4a15f1b34463bf0eacb0239c6dbd699ec6c49a8625e86cec674cc7b351509155b889e7f","ssdeep":"96:VSMllcHitlIxv9vk7C1+I4wWHLihk/xGWvki7rxmVKXUsDEVWvdNGthls+GfNXrL:VSHIIHUCD4wabkijpso15909rfEx","tlshash":"1c823928fcf0b125548993393de674095c779bc3c681ac45badc8a0b6f00fa95d6b183","first_seen":"2023-04-16T20:03:19Z","last_seen":"2026-06-02T16:20:39.872682Z","times_seen":10053,"resource_available":false,"data":null}},"time_used":3643,"timings":{"blocked":3319,"dns":0,"connect":0,"send":0,"wait":307,"receive":17,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"res.xitongtiandi.net/xttd/images/logo.png","fqdn":"res.xitongtiandi.net","domain":"xitongtiandi.net","tld":"net"},"ip":{"addr":"121.22.232.168","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xitongtiandi.net/soft_lt/7017.html","date":"2026-02-01T07:41:25.152Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"res.xitongtiandi.net","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Fri, 26 Dec 2025 00:00:00 GMT","end":"Thu, 26 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"1F:66:E3:A4:D8:97:BC:27:31:E3:7E:C0:E9:87:F8:8A:BD:5F:78:50","sha256":"9B:66:75:12:D8:16:0B:05:6B:AE:85:41:94:BC:0E:10:20:C6:42:E3:74:BA:E9:1E:EB:1B:6F:DA:FC:A1:3F:1B"}}},"request":{"raw":"GET /xttd/images/logo.png HTTP/1.1\r\nHost: res.xitongtiandi.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://res.xitongtiandi.net/xttd/css/public.css?2026020107\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sun, 01 Feb 2026 07:41:25 GMT\r\nContent-Type: image/png\r\nContent-Length: 24375\r\nConnection: keep-alive\r\nServer: openresty\r\nx-reserved: amazon, aws and amazon web services are trademarks or registered trademarks of Amazon Technologies, Inc\r\nCloudServiceDiscount: CDN\r\nx-amz-request-id: 0000019BBB0310069744E2DB4EB47983\r\nETag: \"a5b3e7ae7e55fa62998682e9b67db764\"\r\nLast-Modified: Thu, 31 Jul 2025 10:20:36 GMT\r\nx-amz-id-2: 36AAAQAAEAABAAAQAAEAABAAAQAAEAABAAAaI=AAAAAAAAAAAAAAAAAAAAAAAAAA\r\nX-CCDN-Expires: 1443398\r\nvia: CHN-HEqinhuangdao-AREACUCC1-CACHE20[3],CHN-HEqinhuangdao-AREACUCC1-CACHE11[0,TCP_HIT,1],CHN-TJ-GLOBAL6-CACHE140[7],CHN-TJ-GLOBAL6-CACHE67[0,TCP_HIT,3]\r\nx-hcs-proxy-type: 1\r\nX-CCDN-CacheTTL: 2592000\r\nnginx-hit: 1\r\nAge: 1148602\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":24375,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 480 x 100, 8-bit/color RGBA, non-interlaced","md5":"a5b3e7ae7e55fa62998682e9b67db764","sha1":"968d2739e5e1988abd912f6eaa84daea29a2754b","sha256":"779eef0f3128ce677be435c82436753da33a8d2c05e39871bdac6b48280d1851","sha512":"9bfb26bac5033360bf09e19208b3c58ee61fd01a42dc8d26989c1f16a893d6626e0da1bf70987d64b054f41f3126f61e51ea7847cd8cab3606be69cfb2d0a57a","ssdeep":"384:J50wVhh+++Ht1CsgWmjecD6qq76gMDGzj2m72SkvJa+vCta1ovgMamZ5xlvBP:bDhh+++HtmWmj7E7/f72S+v4a1oYDyx3","tlshash":"59b2e1ba40d54c1e806e0c4e074fcda6f3bea1e247d915b079e9c711b65cae0383257a","first_seen":"2026-02-01T07:42:01.661547Z","last_seen":"2026-02-01T07:42:01.661547Z","times_seen":1,"resource_available":false,"data":null}},"time_used":293,"timings":{"blocked":37,"dns":0,"connect":0,"send":0,"wait":243,"receive":13,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"eclick.baidu.com/se.jpg?type=baiduDomShowMonitor\u0026tuidIndex=u7002770_0\u0026ver=0620\u0026rdm=1769931691117","fqdn":"eclick.baidu.com","domain":"baidu.com","tld":"com"},"ip":{"addr":"110.242.68.137","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xitongtiandi.net/soft_lt/7017.html","date":"2026-02-01T07:41:31.122Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"baidu.com","organization":"Beijing Baidu Netcom Science Technology Co., Ltd"},"issuer":{"commonName":"GlobalSign RSA OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 09 Jul 2025 07:01:02 GMT","end":"Mon, 10 Aug 2026 07:01:01 GMT"},"fingerprint":{"sha1":"21:BF:66:0D:67:BE:7A:7F:49:48:05:30:F4:7F:09:F2:30:36:CA:63","sha256":"0D:82:2C:9A:90:5A:EF:E9:8F:37:12:C0:E0:26:30:EE:95:33:2C:45:5F:E7:74:5D:F0:8D:BC:79:F4:B0:A1:49"}}},"request":{"raw":"GET /se.jpg?type=baiduDomShowMonitor\u0026tuidIndex=u7002770_0\u0026ver=0620\u0026rdm=1769931691117 HTTP/1.1\r\nHost: eclick.baidu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xitongtiandi.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nCache-Control: max-age=0\r\nConnection: keep-alive\r\nContent-Length: 43\r\nContent-Type: image/gif\r\nDate: Sun, 01 Feb 2026 07:41:31 GMT\r\nExpires: Sun, 01 Feb 2026 07:41:31 GMT\r\nLast-Modified: Mon, 28 Sep 1970 06:00:00 GMT\r\nServer: nginx\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"ad4b0f606e0f8465bc4c4c170b37e1a3","sha1":"50b30fd5f87c85fe5cba2635cb83316ca71250d7","sha256":"cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda","sha512":"ebfe0c0df4bcc167d5cb6ebdd379f9083df62bef63a23818e1c6adf0f64b65467ea58b7cd4d03cf0a1b1a2b07fb7b969bf35f25f1f8538cc65cf3eebdf8a0910","ssdeep":"","tlshash":"15900003fbc08002c2b2e0300b3b0380238ce2200aa8030b80aeb0acecaa3a20c03020","first_seen":"2023-04-05T02:54:03Z","last_seen":"2026-06-02T18:08:36.74522Z","times_seen":364205,"resource_available":true,"data":null}},"time_used":255,"timings":{"blocked":2,"dns":0,"connect":0,"send":0,"wait":253,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.xitongtiandi.net/d/file/20210724/1f088c4ee6f8228511b8162233f8f5cb.png","fqdn":"img.xitongtiandi.net","domain":"xitongtiandi.net","tld":"net"},"ip":{"addr":"120.52.95.238","port":443,"asn":133119,"as":"China Unicom IP network","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xitongtiandi.net/soft_lt/7017.html","date":"2026-02-01T07:41:21.738Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.xitongtiandi.net","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Fri, 26 Dec 2025 00:00:00 GMT","end":"Thu, 26 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"76:AE:74:5D:DA:22:6F:75:FF:B8:99:47:85:9F:B9:1D:12:D7:B2:E0","sha256":"7E:AA:16:44:B1:24:13:58:14:68:DE:F8:07:07:9D:F6:FF:DB:FE:1B:17:14:79:E9:F9:47:14:8C:63:F0:C7:08"}}},"request":{"raw":"GET /d/file/20210724/1f088c4ee6f8228511b8162233f8f5cb.png HTTP/1.1\r\nHost: img.xitongtiandi.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xitongtiandi.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sun, 01 Feb 2026 07:41:25 GMT\r\nContent-Type: image/png\r\nContent-Length: 5908\r\nConnection: keep-alive\r\nServer: openresty\r\nCloudServiceDiscount: CDN\r\nx-obs-request-id: 0000019BE041AD0B97A87F1094CD80EF\r\nETag: \"9ce56568393627c3477dc7f169386324\"\r\nLast-Modified: Wed, 30 Oct 2024 03:07:22 GMT\r\nContent-Disposition: attachment\r\nx-obs-id-2: 36AAAQAAEAABAAAQAAEAABAAAQAAEAABAAAaI=AAAAAAAAAAAAAAAAAAAAAAAAAA\r\nvia: CHN-HElangfang-AREACUCC1-CACHE28[2],CHN-HElangfang-AREACUCC1-CACHE11[0,TCP_HIT,0],CHN-TJ-GLOBAL6-CACHE104[158],CHN-TJ-GLOBAL6-CACHE85[148,TCP_MISS,155],CHN-TJ-GLOBAL6-CACHE85[131,TCP_MISS,146]\r\nx-hcs-proxy-type: 1\r\nX-CCDN-CacheTTL: 2592000\r\nnginx-hit: 1\r\nAge: 937726\r\nX-CCDN-Expires: 1654287\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5908,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 83 x 91, 8-bit/color RGBA, non-interlaced","md5":"9ce56568393627c3477dc7f169386324","sha1":"8a99a1b1672e2e5253eaa1e60b7aae4aa57e1f12","sha256":"d7db75dbf683d584aa2720179fd3189984103c0b680a9e7930992977cb1693d1","sha512":"76e90d10a7ab7e6a4d03f2ba09b288b6fdff5384ad02a85bcc3af926be36347fa532d974c4458828a4bda596f5c0ee4441b8fe7260cdeda63ce3569e6a300813","ssdeep":"96:5GGOvpg3oEvqeI+HgLdkhd/TclLHdflYwDrbl8weW/oW2r57YAzgRRp:VTITkHAlxfP2bYBUup","tlshash":"e1c19fd3cd1e326bf1093317dc09b6a9606532362ceb910d686fc9393c54b6147d85f0","first_seen":"2026-02-01T07:42:01.662905Z","last_seen":"2026-02-01T07:42:01.662905Z","times_seen":1,"resource_available":false,"data":null}},"time_used":4316,"timings":{"blocked":3337,"dns":1,"connect":243,"send":0,"wait":262,"receive":0,"ssl":473},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zz.bdstatic.com/linksubmit/push.js","fqdn":"zz.bdstatic.com","domain":"bdstatic.com","tld":"com"},"ip":{"addr":"157.255.63.48","port":443,"asn":136958,"as":"China Unicom Guangdong IP network","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xitongtiandi.net/soft_lt/7017.html","date":"2026-02-01T07:41:25.129Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"baidu.com","organization":"Beijing Baidu Netcom Science Technology Co., Ltd"},"issuer":{"commonName":"GlobalSign RSA OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 09 Jul 2025 07:01:02 GMT","end":"Mon, 10 Aug 2026 07:01:01 GMT"},"fingerprint":{"sha1":"21:BF:66:0D:67:BE:7A:7F:49:48:05:30:F4:7F:09:F2:30:36:CA:63","sha256":"0D:82:2C:9A:90:5A:EF:E9:8F:37:12:C0:E0:26:30:EE:95:33:2C:45:5F:E7:74:5D:F0:8D:BC:79:F4:B0:A1:49"}}},"request":{"raw":"GET /linksubmit/push.js HTTP/1.1\r\nHost: zz.bdstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xitongtiandi.net/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: JSP3/2.0.14\r\ndate: Sun, 01 Feb 2026 07:41:26 GMT\r\ncontent-type: application/x-javascript\r\nlast-modified: Wed, 14 Jan 2026 22:06:23 GMT\r\netag: \"6968135f-134\"\r\ncache-control: max-age=86400\r\ncontent-encoding: br\r\nage: 9624\r\naccept-ranges: bytes\r\ntracecode: 32082315590592613898020100\r\nohc-global-saved-time: Sat, 31 Jan 2026 16:53:28 GMT\r\nohc-cache-hit: gz5un53 [2], jn2uncache71 [2]\r\nohc-response-time: 1 0 0 0 0 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":308,"size_decoded":0,"mime_type":"application/x-javascript","magic":"ASCII text, with very long lines (308), with no line terminators","md5":"f9fc52ab67f035b8baf5d558714cc94d","sha1":"37062a6fb1ef410d496137d44275738ae743c747","sha256":"c31f2003f1c93ac1e34b09f376d97a65da6e110bf451cf1e0e50a7946c5e7212","sha512":"ebb0415852fbb5b964094e2e55a28b90f701dff1977c8b98c6f24d65d09067dc0c417d01492ca28a4be6747816d7c0bfac87b73a33725aee047a5d2f7ab83182","ssdeep":"","tlshash":"11e0cde86054c01c0dcb107135bb324ce7771d675a645545c04d9445396cb1f8247fe9","first_seen":"2023-03-07T01:18:58Z","last_seen":"2026-06-02T18:04:36.187622Z","times_seen":22957,"resource_available":true,"data":null}},"time_used":1180,"timings":{"blocked":-1,"dns":276,"connect":298,"send":0,"wait":299,"receive":0,"ssl":306},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hm.baidu.com/hm.js?8d3a8c2aa80b0500d1cea1a67160df2d","fqdn":"hm.baidu.com","domain":"baidu.com","tld":"com"},"ip":{"addr":"111.45.11.83","port":443,"asn":9808,"as":"China Mobile Communications Group Co., Ltd.","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xitongtiandi.net/soft_lt/7017.html","date":"2026-02-01T07:41:25.132Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"baidu.com","organization":"Beijing Baidu Netcom Science Technology Co., Ltd"},"issuer":{"commonName":"GlobalSign RSA OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 09 Jul 2025 07:01:02 GMT","end":"Mon, 10 Aug 2026 07:01:01 GMT"},"fingerprint":{"sha1":"21:BF:66:0D:67:BE:7A:7F:49:48:05:30:F4:7F:09:F2:30:36:CA:63","sha256":"0D:82:2C:9A:90:5A:EF:E9:8F:37:12:C0:E0:26:30:EE:95:33:2C:45:5F:E7:74:5D:F0:8D:BC:79:F4:B0:A1:49"}}},"request":{"raw":"GET /hm.js?8d3a8c2aa80b0500d1cea1a67160df2d HTTP/1.1\r\nHost: hm.baidu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xitongtiandi.net/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nCache-Control: max-age=0, must-revalidate\r\nContent-Encoding: gzip\r\nContent-Length: 11296\r\nContent-Type: application/javascript\r\nDate: Sun, 01 Feb 2026 07:41:25 GMT\r\nEtag: 7786486b1031f793a22a1cb9eee874d4\r\nP3p: CP=\"CURa ADMa DEVa PSAo PSDo OUR BUS UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR\"\r\nServer: apache\r\nSet-Cookie: HMACCOUNT=76E2F60399EBC20C; Path=/; Domain=hm.baidu.com; Expires=Sun, 18 Jan 2038 00:00:00 GMT\r\nStrict-Transport-Security: max-age=172800\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":29902,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (626)","md5":"3849b2edcf3bd2d6746af0fb00fd4a6b","sha1":"40f763c225b75b7f9e756e808f7f3582eef6da5f","sha256":"453fc02ea0121282e7ffe41979e3beb1c01976a0809c408674bf0b15a14c3bd5","sha512":"783d0d62e2c43bb2d9ac400b46872fa119569014e887bad666d28e425ea614cf945c589c1608d1f91d38b7d0f0f73a7c4429bd517ac995e0e1f545731a415dd2","ssdeep":"384:zYJSoLMJJTRl6s1JXFVCFI/TayvuodsZPIGm8XaR1JRwvutq1tGdc7M04gRw6:zY4VJfHgMdvussZPIx82Rwvutcto07v","tlshash":"ead2d9e9b282713293a324a5153f324af07b5a54bd4968a4f11894c07d38fbb027bfdd","first_seen":"2026-02-01T07:42:01.664594Z","last_seen":"2026-02-01T07:42:01.664594Z","times_seen":1,"resource_available":true,"data":null}},"time_used":902,"timings":{"blocked":-1,"dns":1,"connect":206,"send":0,"wait":267,"receive":1,"ssl":419},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bigdata.downza.com/1.gif?ak=6Z61\u0026aId=0c7944f6-cb91-31dd-9b9a-3965331c0677\u0026su=https%3A%2F%2Fxitongtiandi.net%2Fsoft_lt%2F7017.html\u0026da=xitongtiandi.net\u0026tt=%E6%96%B9%E6%AD%A3%E5%B0%8F%E6%A0%87%E5%AE%8B%E7%AE%80%E4%BD%93%E5%AD%97%E4%BD%93%E5%85%8D%E8%B4%B9%E4%B8%8B%E8%BD%BD%EF%BD%9C%E9%99%84%E6%96%B9%E6%AD%A3%E5%B0%8F%E6%A0%87%E5%AE%8B%E7%AE%80%E4%BD%93%E5%AE%89%E8%A3%85%E4%BD%BF%E7%94%A8%E6%95%99%E7%A8%8B--%E7%B3%BB%E7%BB%9F%E4%B9%8B%E5%AE%B6\u0026r=\u0026ds=1280x1024\u0026cd=24\u0026lt=-1769931676045\u0026ln=en-US\u0026ce=1\u0026je=0\u0026random=0.36482565611005624","fqdn":"bigdata.downza.com","domain":"downza.com","tld":"com"},"ip":{"addr":"122.112.196.83","port":443,"asn":55990,"as":"Huawei Cloud Service data center","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xitongtiandi.net/soft_lt/7017.html","date":"2026-02-01T07:41:25.146Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"bigdata.downza.com","organization":""},"issuer":{"commonName":"ZeroSSL ECC Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Mon, 12 Jan 2026 00:00:00 GMT","end":"Sun, 12 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"1D:EE:64:20:4C:E4:FF:49:A7:08:B2:93:B4:5B:F8:EB:1F:C4:F9:D2","sha256":"71:5B:06:AD:59:2A:D1:95:61:B4:50:C3:35:EE:5F:84:84:AA:DE:DB:EE:F2:DA:39:8C:02:79:E8:BE:82:44:61"}}},"request":{"raw":"GET /1.gif?ak=6Z61\u0026aId=0c7944f6-cb91-31dd-9b9a-3965331c0677\u0026su=https%3A%2F%2Fxitongtiandi.net%2Fsoft_lt%2F7017.html\u0026da=xitongtiandi.net\u0026tt=%E6%96%B9%E6%AD%A3%E5%B0%8F%E6%A0%87%E5%AE%8B%E7%AE%80%E4%BD%93%E5%AD%97%E4%BD%93%E5%85%8D%E8%B4%B9%E4%B8%8B%E8%BD%BD%EF%BD%9C%E9%99%84%E6%96%B9%E6%AD%A3%E5%B0%8F%E6%A0%87%E5%AE%8B%E7%AE%80%E4%BD%93%E5%AE%89%E8%A3%85%E4%BD%BF%E7%94%A8%E6%95%99%E7%A8%8B--%E7%B3%BB%E7%BB%9F%E4%B9%8B%E5%AE%B6\u0026r=\u0026ds=1280x1024\u0026cd=24\u0026lt=-1769931676045\u0026ln=en-US\u0026ce=1\u0026je=0\u0026random=0.36482565611005624 HTTP/1.1\r\nHost: bigdata.downza.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xitongtiandi.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 \r\nServer: nginx\r\nDate: Sun, 01 Feb 2026 07:41:25 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-02T18:08:06.981696Z","times_seen":16047564,"resource_available":true,"data":null}},"time_used":342,"timings":{"blocked":31,"dns":0,"connect":0,"send":0,"wait":311,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lupic.cdn.bcebos.com/20210629/2001314058_14.jpg","fqdn":"lupic.cdn.bcebos.com","domain":"bcebos.com","tld":"com"},"ip":{"addr":"111.225.213.35","port":443,"asn":58539,"as":"China Telecom","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://pos.baidu.com/scvm?conwid=370\u0026conhei=180\u0026rdid=7002770\u0026dc=3\u0026di=u7002770\u0026s1=4034329033\u0026s2=2872728590\u0026dri=0\u0026dis=0\u0026dai=1\u0026ps=3402x60\u0026enu=encoding\u0026exps=110277,110275,110261,110252,110011\u0026ant=0\u0026psi=1da7a967d3738233\u0026dcb=___adblockplus_\u0026dtm=HTML_POST\u0026dvi=0.0\u0026dci=-1\u0026dpt=none\u0026tpr=1769931685223\u0026ti=%E6%96%B9%E6%AD%A3%E5%B0%8F%E6%A0%87%E5%AE%8B%E7%AE%80%E4%BD%93%E5%AD%97%E4%BD%93%E5%85%8D%E8%B4%B9%E4%B8%8B%E8%BD%BD%EF%BD%9C%E9%99%84%E6%96%B9%E6%AD%A3%E5%B0%8F%E6%A0%87%E5%AE%8B%E7%AE%80%E4%BD%93%E5%AE%89%E8%A3%85%E4%BD%BF%E7%94%A8%E6%95%99%E7%A8%8B--%E7%B3%BB%E7%BB%9F%E4%B9%8B%E5%AE%B6\u0026ari=2\u0026ver=0620\u0026vc=%E6%99%AE%E9%80%9A%E4%B8%8B%E8%BD%BD%E5%9C%B0%E5%9D%80\u0026kws=%E6%96%B9%E6%AD%A3%E5%B0%8F%E6%A0%87%E5%AE%8B%E7%AE%80%E4%BD%93%E5%AD%97%E4%BD%93%2C%E6%96%B9%E6%AD%A3%E5%B0%8F%E6%A0%87%E5%AE%8B%E7%AE%80%E4%BD%93ttf%2C%E6%96%B9%E6%AD%A3%E5%B0%8F%E6%A0%87%E5%AE%8B%E7%AE%80%E4%BD%93%E5%AE%89%E8%A3%85\u0026dps=%E6%96%B9%E6%AD%A3%E5%B0%8F%E6%A0%87%E5%AE%8B%E7%AE%80%E4%BD%93%E5%AD%97%E4%BD%93%E3%80%82%E8%AF%A5%E5%AD%97%E4%BD%93%E9%9D%9E%E5%B8%B8%E7%BE%8E%E8%A7%82%EF%BC%8C%E9%80%82%E5%90%88%E5%9C%A8%E6%AD%A3%E5%BC%8F%E7%9A%84%E5%9C%BA%E5%90%88%E6%9D%A5%E8%BF%9B%E8%A1%8C%E4%BD%BF%E7%94%A8%EF%BC%8C%E6%AF%94%E5%A6%82%E7%94%A8%E4%BA%8E%E6%8A%95%E5%BD%B1%E6%BC%94%E7%A4%BA%EF%BC%8C%E6%89%93%E5%8D%B0%E5%90%88%E5%90%8C%E6%96%87%E6%9C%AC%EF%BC%8C%E8%AF%B4%E6%98%8E%E6%96%87%E6%9C%AC%E7%AD%89%E3%80%82%E6%9C%AC%E7%AB%99%E6%8F%90%E4%BE%9B%E6%96%B9%E6%AD%A3\u0026dbv=0\u0026drs=3\u0026pcs=1280x1024\u0026pss=1280x3801\u0026cfv=0\u0026cpl=5\u0026chi=2\u0026cce=true\u0026cec=UTF-8\u0026tlm=1769931685\u0026prot=2\u0026rw=1024\u0026ltu=https%3A%2F%2Fxitongtiandi.net%2Fsoft_lt%2F7017.html\u0026ecd=1\u0026dft=0\u0026uc=1280x1024\u0026pis=-1x-1\u0026sr=1280x1024\u0026tcn=1769931685\u0026qn=5fd469c31b5c2809\u0026ft=1","date":"2026-02-01T07:41:27.385Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.a.bdydns.com","organization":"北京百度网讯科技有限公司"},"issuer":{"commonName":"sslTrus (RSA) OV CA","organization":"sslTrus"},"validity":{"start":"Fri, 07 Mar 2025 00:00:00 GMT","end":"Sat, 07 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"B0:A6:2D:34:BD:DD:55:41:21:71:78:8B:43:8A:7A:51:22:5C:31:C9","sha256":"10:61:DB:D4:46:80:6A:CD:63:18:ED:40:2F:F0:02:9E:CD:37:4C:88:54:E6:A9:CF:03:50:63:B3:B1:23:63:11"}}},"request":{"raw":"GET /20210629/2001314058_14.jpg HTTP/1.1\r\nHost: lupic.cdn.bcebos.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pos.baidu.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 01 Feb 2026 07:41:30 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 9269\r\nexpires: Sun, 01 Feb 2026 12:40:39 GMT\r\nlast-modified: Thu, 01 Jul 2021 20:41:42 GMT\r\netag: \"a769466135d36ecb8c4df44e0f3f65e8\"\r\nage: 233785\r\naccept-ranges: bytes\r\ncontent-md5: p2lGYTXTbsuMTfRODz9l6A==\r\nx-bce-content-crc32: 0\r\nx-bce-debug-id: GbeDigASLDBBzl2rizd8fd3bTlFbnpR/WICiIzp1JBkEUsYhgZc7+JNyHGgA91pVorWWE3JeVuZ50IP9M63+/Q==\r\nx-bce-request-id: efe70540-777d-4824-8c6c-6452ac4db36e\r\nx-bce-storage-class: STANDARD\r\nohc-global-saved-time: Thu, 29 Jan 2026 12:40:39 GMT\r\nohc-cache-hit: lf6ct87 [4], wzix87 [4]\r\nohc-file-size: 9269\r\nx-cache-status: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":9269,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 1x1, segment length 16, baseline, precision 8, 280x200, components 3","md5":"a769466135d36ecb8c4df44e0f3f65e8","sha1":"6ecea4fcc3a8fb3864939c5d561000d3f79e7abb","sha256":"e68c56c60e2951a4123ac5b8418fc3bcf078559bf26d4c0aca6fa4599aa2b053","sha512":"b10927fde9e73a8497934d2a64e1632ccb517ffdd08291a395cd6e465a4b35dd2db18203eb860cea971654544103874e1511ff0144c6ce6c85fa9cc066dd2ef1","ssdeep":"192:OlEDs1UGRMgdrJ9GY/LRn0de6uXhhVYL9QpPsx2gZoZoQi6X7kwchH:k7drJ9GcR0dMTVKMsrZoZRXal","tlshash":"7212bf582c9ce457fff60bf0fb06a106108e5f595906e636b2a1e4031e0af70d7a8610","first_seen":"2026-02-01T07:42:01.665559Z","last_seen":"2026-02-01T07:42:01.665559Z","times_seen":1,"resource_available":false,"data":null}},"time_used":5459,"timings":{"blocked":2406,"dns":1643,"connect":262,"send":0,"wait":645,"receive":0,"ssl":499},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"eclick.baidu.com/se.jpg?type=iframeLoadStatus\u0026result=u7002770_0_1_0_0\u0026ver=0620\u0026rdm=1769931689600","fqdn":"eclick.baidu.com","domain":"baidu.com","tld":"com"},"ip":{"addr":"110.242.68.137","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xitongtiandi.net/soft_lt/7017.html","date":"2026-02-01T07:41:29.605Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"baidu.com","organization":"Beijing Baidu Netcom Science Technology Co., Ltd"},"issuer":{"commonName":"GlobalSign RSA OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 09 Jul 2025 07:01:02 GMT","end":"Mon, 10 Aug 2026 07:01:01 GMT"},"fingerprint":{"sha1":"21:BF:66:0D:67:BE:7A:7F:49:48:05:30:F4:7F:09:F2:30:36:CA:63","sha256":"0D:82:2C:9A:90:5A:EF:E9:8F:37:12:C0:E0:26:30:EE:95:33:2C:45:5F:E7:74:5D:F0:8D:BC:79:F4:B0:A1:49"}}},"request":{"raw":"GET /se.jpg?type=iframeLoadStatus\u0026result=u7002770_0_1_0_0\u0026ver=0620\u0026rdm=1769931689600 HTTP/1.1\r\nHost: eclick.baidu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xitongtiandi.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nCache-Control: max-age=0\r\nConnection: keep-alive\r\nContent-Length: 43\r\nContent-Type: image/gif\r\nDate: Sun, 01 Feb 2026 07:41:30 GMT\r\nExpires: Sun, 01 Feb 2026 07:41:30 GMT\r\nLast-Modified: Mon, 28 Sep 1970 06:00:00 GMT\r\nServer: nginx\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"ad4b0f606e0f8465bc4c4c170b37e1a3","sha1":"50b30fd5f87c85fe5cba2635cb83316ca71250d7","sha256":"cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda","sha512":"ebfe0c0df4bcc167d5cb6ebdd379f9083df62bef63a23818e1c6adf0f64b65467ea58b7cd4d03cf0a1b1a2b07fb7b969bf35f25f1f8538cc65cf3eebdf8a0910","ssdeep":"","tlshash":"15900003fbc08002c2b2e0300b3b0380238ce2200aa8030b80aeb0acecaa3a20c03020","first_seen":"2023-04-05T02:54:03Z","last_seen":"2026-06-02T18:08:36.74522Z","times_seen":364205,"resource_available":true,"data":null}},"time_used":1728,"timings":{"blocked":738,"dns":1,"connect":241,"send":0,"wait":251,"receive":0,"ssl":493},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.xitongtiandi.net/d/file/20210724/9644ec6f0bb4464435b78c73ad4c714a.jpg","fqdn":"img.xitongtiandi.net","domain":"xitongtiandi.net","tld":"net"},"ip":{"addr":"120.52.95.238","port":443,"asn":133119,"as":"China Unicom IP network","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xitongtiandi.net/soft_lt/7017.html","date":"2026-02-01T07:41:21.724Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.xitongtiandi.net","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Fri, 26 Dec 2025 00:00:00 GMT","end":"Thu, 26 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"76:AE:74:5D:DA:22:6F:75:FF:B8:99:47:85:9F:B9:1D:12:D7:B2:E0","sha256":"7E:AA:16:44:B1:24:13:58:14:68:DE:F8:07:07:9D:F6:FF:DB:FE:1B:17:14:79:E9:F9:47:14:8C:63:F0:C7:08"}}},"request":{"raw":"GET /d/file/20210724/9644ec6f0bb4464435b78c73ad4c714a.jpg HTTP/1.1\r\nHost: img.xitongtiandi.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xitongtiandi.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sun, 01 Feb 2026 07:41:26 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 29346\r\nConnection: keep-alive\r\nServer: openresty\r\nCloudServiceDiscount: CDN\r\nx-obs-request-id: 00000196BD41682F97C9BBCA1A434032\r\nETag: \"779c5e7b080af8ebdfc042e46b68f00a\"\r\nLast-Modified: Wed, 30 Oct 2024 03:07:30 GMT\r\nContent-Disposition: attachment\r\nx-obs-id-2: 32AAAQAAEAABAAAQAAEAABAAAQAAEAABCSAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA\r\nX-CCDN-Expires: 2356548\r\nvia: CHN-HElangfang-AREACUCC1-CACHE28[3],CHN-HElangfang-AREACUCC1-CACHE32[0,TCP_HIT,0],CHN-TJ-GLOBAL1-CACHE113[13],CHN-TJ-GLOBAL1-CACHE64[0,TCP_HIT,11]\r\nx-hcs-proxy-type: 1\r\nX-CCDN-CacheTTL: 2592000\r\nnginx-hit: 1\r\nAge: 235467\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":29346,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CS6 (Windows), datetime=2020:10:15 13:17:01], baseline, precision 8, 240x240, components 1","md5":"779c5e7b080af8ebdfc042e46b68f00a","sha1":"7fe60a365c2d5a867ba7b852b9ba7e24769575bf","sha256":"cc2dab4ed277b21e941201694b073c606e9de3d507ff1cc4d658a3bafa1e5e01","sha512":"ff51db6367e7ab3ee2da6f8396cb8ff5ed8992b4929bd408496c3961924ddee1dc543a89874d7292a608bde8f6892c90f86e97f2220c6c2c452847f49d806998","ssdeep":"768:UeYy7ccBs9YtygKiyPWYy7ccBs9YtygKinb9A3uCsTxkgTsfB:58vgZl8vgZnb9A3uKgTsZ","tlshash":"0ed26d39af65cfa3f0f8933c495097cea212ea358f771a41748c1de637a17c2594d282","first_seen":"2026-02-01T07:42:01.666747Z","last_seen":"2026-02-01T07:42:01.666747Z","times_seen":1,"resource_available":false,"data":null}},"time_used":4739,"timings":{"blocked":4331,"dns":0,"connect":0,"send":0,"wait":323,"receive":85,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.xitongtiandi.net/d/file/tiandi/liaotian/ltgj/2020-02-12/small7f289a288de25cc4d76a95adc46dec4d1581490039.jpg","fqdn":"img.xitongtiandi.net","domain":"xitongtiandi.net","tld":"net"},"ip":{"addr":"120.52.95.238","port":443,"asn":133119,"as":"China Unicom IP network","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xitongtiandi.net/soft_lt/7017.html","date":"2026-02-01T07:41:21.729Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.xitongtiandi.net","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Fri, 26 Dec 2025 00:00:00 GMT","end":"Thu, 26 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"76:AE:74:5D:DA:22:6F:75:FF:B8:99:47:85:9F:B9:1D:12:D7:B2:E0","sha256":"7E:AA:16:44:B1:24:13:58:14:68:DE:F8:07:07:9D:F6:FF:DB:FE:1B:17:14:79:E9:F9:47:14:8C:63:F0:C7:08"}}},"request":{"raw":"GET /d/file/tiandi/liaotian/ltgj/2020-02-12/small7f289a288de25cc4d76a95adc46dec4d1581490039.jpg HTTP/1.1\r\nHost: img.xitongtiandi.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xitongtiandi.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sun, 01 Feb 2026 07:41:26 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 2613\r\nConnection: keep-alive\r\nServer: openresty\r\nCloudServiceDiscount: CDN\r\nx-obs-request-id: 0000019341F056B0974824976B7F4F9F\r\nETag: \"79f2a23b6cf7d8f567ae6a3c1ee470e5\"\r\nLast-Modified: Wed, 30 Oct 2024 03:39:36 GMT\r\nContent-Disposition: attachment\r\nx-obs-id-2: 32AAAQAAEAABAAAQAAEAABAAAQAAEAABCSAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA\r\nX-CCDN-Expires: 1823169\r\nvia: CHN-HElangfang-AREACUCC1-CACHE57[95],CHN-HElangfang-AREACUCC1-CACHE67[0,TCP_HIT,0],CHN-HElangfang-GLOBAL6-CACHE17[14],CHN-HElangfang-GLOBAL6-CACHE137[0,TCP_HIT,10]\r\nx-hcs-proxy-type: 1\r\nX-CCDN-CacheTTL: 2592000\r\nnginx-hit: 1\r\nAge: 768845\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2613,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), default quality\", baseline, precision 8, 240x180, components 3","md5":"79f2a23b6cf7d8f567ae6a3c1ee470e5","sha1":"55328e9b7aa3f9cb8cbb53c073941b420c3b318d","sha256":"ffadb75122e83bd6611b881b7c64611752dd4d0684ae9eaf8dd11f40979e7802","sha512":"1f8810a491cff1284c14d0ef9ee50b0d56bacc7936f56121acbac46d049156c00dca7a88eabe708409069239a8d7f4450bc2e1feb23ce15a9603f2af0f09b1e9","ssdeep":"","tlshash":"8d51d907ce008743572207beae031d7a4b4e6a1ca59273fe04731c5b6924fb16c8f01e","first_seen":"2026-02-01T07:42:01.648374Z","last_seen":"2026-02-01T07:42:01.648374Z","times_seen":1,"resource_available":false,"data":null}},"time_used":5260,"timings":{"blocked":4614,"dns":0,"connect":0,"send":0,"wait":645,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.xitongtiandi.net/d/file/20210724/ff65377855046250daf51730e3742ab2.jpg","fqdn":"img.xitongtiandi.net","domain":"xitongtiandi.net","tld":"net"},"ip":{"addr":"120.52.95.238","port":443,"asn":133119,"as":"China Unicom IP network","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xitongtiandi.net/soft_lt/7017.html","date":"2026-02-01T07:41:21.737Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.xitongtiandi.net","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Fri, 26 Dec 2025 00:00:00 GMT","end":"Thu, 26 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"76:AE:74:5D:DA:22:6F:75:FF:B8:99:47:85:9F:B9:1D:12:D7:B2:E0","sha256":"7E:AA:16:44:B1:24:13:58:14:68:DE:F8:07:07:9D:F6:FF:DB:FE:1B:17:14:79:E9:F9:47:14:8C:63:F0:C7:08"}}},"request":{"raw":"GET /d/file/20210724/ff65377855046250daf51730e3742ab2.jpg HTTP/1.1\r\nHost: img.xitongtiandi.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xitongtiandi.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sun, 01 Feb 2026 07:41:25 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 87125\r\nConnection: keep-alive\r\nServer: openresty\r\nCloudServiceDiscount: CDN\r\nx-obs-request-id: 0000019BAD3DD85397A9F0DEE92F90F2\r\nETag: \"b8095549653774c1d6862565705b6604\"\r\nLast-Modified: Wed, 30 Oct 2024 03:07:38 GMT\r\nContent-Disposition: attachment\r\nx-obs-id-2: 36AAAQAAEAABAAAQAAEAABAAAQAAEAABAAAaI=AAAAAAAAAAAAAAAAAAAAAAAAAA\r\nvia: CHN-HElangfang-AREACUCC1-CACHE46[3],CHN-HElangfang-AREACUCC1-CACHE5[0,TCP_HIT,0],CHN-TJ-GLOBAL6-CACHE98[167],CHN-TJ-GLOBAL6-CACHE33[141,TCP_MISS,165]\r\nx-hcs-proxy-type: 1\r\nX-CCDN-CacheTTL: 2592000\r\nnginx-hit: 1\r\nAge: 1793615\r\nX-CCDN-Expires: 798398\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":87125,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 80\", baseline, precision 8, 806x488, components 3","md5":"b8095549653774c1d6862565705b6604","sha1":"886063c6df3109d61602c6b38d9807a3f68c84ee","sha256":"d4adcaffb4955d2e166a1373c0937c2f9b44705e20e2c8483bdfbcf2d2cf1cca","sha512":"f10b9c440b56801854e8e945347c61bfa3b45d5bbed596a093f01993a3fafc8103fbcafc13ec98e130631907769abeb532ca10a43e6cb26763118603da32adae","ssdeep":"1536:JKEHwDqWUGdH6tLrPyiaWIpSxwEklmlbgSgbnguSL/aZ0iboW4ONa2KaROW94MAZ:0EHwDqWUGdaJrPyn/SeEMPSgbn9S745Q","tlshash":"1183f10bab645ad3801dd3f8bb9f1e3d2d8d2b55e88837ad49160cd9b9e061c180f339","first_seen":"2026-02-01T07:42:01.667849Z","last_seen":"2026-02-01T07:42:01.667849Z","times_seen":1,"resource_available":false,"data":null}},"time_used":4982,"timings":{"blocked":3339,"dns":1,"connect":275,"send":0,"wait":351,"receive":562,"ssl":454},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"image.xitongtiandi.net/upload/202507/214431-68838a3f1dd43.jpg","fqdn":"image.xitongtiandi.net","domain":"xitongtiandi.net","tld":"net"},"ip":{"addr":"116.153.39.131","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xitongtiandi.net/soft_lt/7017.html","date":"2026-02-01T07:41:21.751Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"image.xitongtiandi.net","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Fri, 26 Dec 2025 00:00:00 GMT","end":"Thu, 26 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"68:45:42:1A:66:A6:87:1B:03:DE:5B:E1:65:05:9A:BC:74:13:56:8C","sha256":"CD:0E:7D:D7:D9:AE:12:8F:B5:76:68:8F:82:80:8E:28:F2:30:73:19:10:FF:CE:F4:29:DC:D0:CD:5D:16:AB:2E"}}},"request":{"raw":"GET /upload/202507/214431-68838a3f1dd43.jpg HTTP/1.1\r\nHost: image.xitongtiandi.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xitongtiandi.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sun, 01 Feb 2026 07:41:25 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 6332\r\nConnection: keep-alive\r\nServer: openresty\r\nCloudServiceDiscount: CDN\r\nx-obs-request-id: 000001993C41968D901AC20712159222\r\nETag: \"d719008e3fb5d0a871b37409a92e3f08\"\r\nLast-Modified: Fri, 25 Jul 2025 13:44:31 GMT\r\nx-obs-id-2: 36AAAQAAEAABAAAQAAEAABAAAQAAEAABAAAaI=AAAAAAAAAAAAAAAAAAAAAAAAAA\r\nX-CCDN-Expires: 884049\r\nvia: CHN-JXnanchang-AREACUCC1-CACHE56[3],CHN-JXnanchang-AREACUCC1-CACHE63[0,TCP_HIT,0],CHN-JSwuxi-GLOBAL2-CACHE54[24],CHN-JSwuxi-GLOBAL2-CACHE79[0,TCP_HIT,17]\r\nx-hcs-proxy-type: 1\r\nX-CCDN-CacheTTL: 2592000\r\nnginx-hit: 1\r\nAge: 1707963\r\nAccept-Ranges: bytes\r\nContent-Disposition: inline\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6332,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1, orientation=upper-left], baseline, precision 8, 150x150, components 3","md5":"d719008e3fb5d0a871b37409a92e3f08","sha1":"d2124eb4dc8eb36a81b16f3df615bf6c9f5cc23e","sha256":"e1385c9b7a1a513cd4e6ed21e560b523df940686bbc33cc5273ab0055d4aac1d","sha512":"05c92e05510f2d2b409293436c67e92bea6c47cf0166deb02b5c2264d1dce5bd83919e6200cce92038118e98eb130ccefa34cbbfdb5a9cd768b41e7232705c25","ssdeep":"192:rw9StG/trfgjItl1iGPZofnr81CUnA8Bc:rw9Ss/tfgyl1iAiP75Qc","tlshash":"3fd15b5b8b27de06c9e2f3f5be13e7058b895eb0414373dea8b00851b7686e118dda12","first_seen":"2026-02-01T07:42:01.669062Z","last_seen":"2026-02-01T07:42:01.669062Z","times_seen":1,"resource_available":false,"data":null}},"time_used":4379,"timings":{"blocked":3325,"dns":0,"connect":270,"send":0,"wait":297,"receive":0,"ssl":486},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"res.xitongtiandi.net/xttd/images/icon-rhot.png","fqdn":"res.xitongtiandi.net","domain":"xitongtiandi.net","tld":"net"},"ip":{"addr":"121.22.232.168","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xitongtiandi.net/soft_lt/7017.html","date":"2026-02-01T07:41:25.162Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"res.xitongtiandi.net","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Fri, 26 Dec 2025 00:00:00 GMT","end":"Thu, 26 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"1F:66:E3:A4:D8:97:BC:27:31:E3:7E:C0:E9:87:F8:8A:BD:5F:78:50","sha256":"9B:66:75:12:D8:16:0B:05:6B:AE:85:41:94:BC:0E:10:20:C6:42:E3:74:BA:E9:1E:EB:1B:6F:DA:FC:A1:3F:1B"}}},"request":{"raw":"GET /xttd/images/icon-rhot.png HTTP/1.1\r\nHost: res.xitongtiandi.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://res.xitongtiandi.net/xttd/css/r-detail.css?2026020107\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sun, 01 Feb 2026 07:41:25 GMT\r\nContent-Type: image/png\r\nContent-Length: 977\r\nConnection: keep-alive\r\nServer: openresty\r\nx-reserved: amazon, aws and amazon web services are trademarks or registered trademarks of Amazon Technologies, Inc\r\nCloudServiceDiscount: CDN\r\nx-amz-request-id: 00000191B69D5514901A7CBD3FAFDAC1\r\nETag: \"2330a31059ad7ec3912e8b5bbc782566\"\r\nLast-Modified: Fri, 19 Apr 2024 02:26:36 GMT\r\nx-amz-id-2: 32AAAQAAEAABAAAQAAEAABAAAQAAEAABCSAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA\r\nX-CCDN-Expires: 1621812\r\nvia: CHN-HEqinhuangdao-AREACUCC1-CACHE20[2],CHN-HEqinhuangdao-AREACUCC1-CACHE75[0,TCP_HIT,1],CHN-TJ-GLOBAL1-CACHE99[6],CHN-TJ-GLOBAL1-CACHE87[0,TCP_HIT,4]\r\nx-hcs-proxy-type: 1\r\nX-CCDN-CacheTTL: 2592000\r\nnginx-hit: 1\r\nAge: 970188\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":977,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced","md5":"2330a31059ad7ec3912e8b5bbc782566","sha1":"d9b2508de82f5fdcd1d931262037230ba6833f69","sha256":"4db657c90781f7706c2647bf4026892b0575553806c082833315c5c22eab6957","sha512":"8279350d0a48933aff344b18f015939c71e52b48462db6ef3a77cfae6b30344f8f6bfeac62056e49259931638298a794a90385f84c4775189d115627c1d92ec1","ssdeep":"","tlshash":"5511c4d7377613bd43ae69530361d018cca786ae48890a88ac8080ba83052eb3a167b7","first_seen":"2026-02-01T07:42:01.670382Z","last_seen":"2026-02-01T07:42:01.670382Z","times_seen":1,"resource_available":false,"data":null}},"time_used":507,"timings":{"blocked":282,"dns":0,"connect":0,"send":0,"wait":225,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"res.xitongtiandi.net/xttd/images/icon-kind.png","fqdn":"res.xitongtiandi.net","domain":"xitongtiandi.net","tld":"net"},"ip":{"addr":"121.22.232.168","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xitongtiandi.net/soft_lt/7017.html","date":"2026-02-01T07:41:25.161Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"res.xitongtiandi.net","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Fri, 26 Dec 2025 00:00:00 GMT","end":"Thu, 26 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"1F:66:E3:A4:D8:97:BC:27:31:E3:7E:C0:E9:87:F8:8A:BD:5F:78:50","sha256":"9B:66:75:12:D8:16:0B:05:6B:AE:85:41:94:BC:0E:10:20:C6:42:E3:74:BA:E9:1E:EB:1B:6F:DA:FC:A1:3F:1B"}}},"request":{"raw":"GET /xttd/images/icon-kind.png HTTP/1.1\r\nHost: res.xitongtiandi.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://res.xitongtiandi.net/xttd/css/r-detail.css?2026020107\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sun, 01 Feb 2026 07:41:25 GMT\r\nContent-Type: image/png\r\nContent-Length: 848\r\nConnection: keep-alive\r\nServer: openresty\r\nx-reserved: amazon, aws and amazon web services are trademarks or registered trademarks of Amazon Technologies, Inc\r\nCloudServiceDiscount: CDN\r\nx-amz-request-id: 00000191B69D544B97C7304A0C84FC00\r\nETag: \"2d1e94e3a2e01ec692aa8217ef757ce9\"\r\nLast-Modified: Fri, 19 Apr 2024 02:26:36 GMT\r\nx-amz-id-2: 32AAAQAAEAABAAAQAAEAABAAAQAAEAABCSAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA\r\nX-CCDN-Expires: 1621798\r\nvia: CHN-HEqinhuangdao-AREACUCC1-CACHE4[4],CHN-HEqinhuangdao-AREACUCC1-CACHE82[0,TCP_HIT,2],CHN-TJ-GLOBAL1-CACHE64[6],CHN-TJ-GLOBAL1-CACHE38[0,TCP_HIT,4]\r\nx-hcs-proxy-type: 1\r\nX-CCDN-CacheTTL: 2592000\r\nnginx-hit: 1\r\nAge: 970202\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":848,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced","md5":"2d1e94e3a2e01ec692aa8217ef757ce9","sha1":"1275c75e082f636e126b35a94baaba188e19d5eb","sha256":"003cd7885c0a153f6fe2dcb562f4cabeb0f2d940f2ad359c7be5f3f1f753d728","sha512":"71564c0a83145f42788c32953649725ad09f73b04260b8ded41525b5cf84fe08f610fa98e19d3e58d6b36a011ba669673a907cff411b7f43a7ca05c8926b6c05","ssdeep":"","tlshash":"5701e6d04c81b87e86991029832d0284389bca6cc0fedc744c13b22f93d5c708ad5ae3","first_seen":"2023-07-03T04:23:05Z","last_seen":"2026-02-01T07:42:01.671587Z","times_seen":4,"resource_available":false,"data":null}},"time_used":471,"timings":{"blocked":238,"dns":0,"connect":0,"send":0,"wait":233,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.xitongtiandi.net/d/file/tiandi/liaotian/ltgj/2018-12-22/small32b8103300234ed623ad48b48af787f61545460331.jpg","fqdn":"img.xitongtiandi.net","domain":"xitongtiandi.net","tld":"net"},"ip":{"addr":"120.52.95.238","port":443,"asn":133119,"as":"China Unicom IP network","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xitongtiandi.net/soft_lt/7017.html","date":"2026-02-01T07:41:21.731Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.xitongtiandi.net","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Fri, 26 Dec 2025 00:00:00 GMT","end":"Thu, 26 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"76:AE:74:5D:DA:22:6F:75:FF:B8:99:47:85:9F:B9:1D:12:D7:B2:E0","sha256":"7E:AA:16:44:B1:24:13:58:14:68:DE:F8:07:07:9D:F6:FF:DB:FE:1B:17:14:79:E9:F9:47:14:8C:63:F0:C7:08"}}},"request":{"raw":"GET /d/file/tiandi/liaotian/ltgj/2018-12-22/small32b8103300234ed623ad48b48af787f61545460331.jpg HTTP/1.1\r\nHost: img.xitongtiandi.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xitongtiandi.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sun, 01 Feb 2026 07:41:26 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 11393\r\nConnection: keep-alive\r\nServer: openresty\r\nCloudServiceDiscount: CDN\r\nx-obs-request-id: 000001933E11553C904B9E741D1F65D5\r\nETag: \"5bb7acbd245c604e12a995430613f237\"\r\nLast-Modified: Wed, 30 Oct 2024 03:39:07 GMT\r\nContent-Disposition: attachment\r\nx-obs-id-2: 32AAAQAAEAABAAAQAAEAABAAAQAAEAABCSAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA\r\nX-CCDN-Expires: 2153620\r\nvia: CHN-HElangfang-AREACUCC1-CACHE57[41],CHN-HElangfang-AREACUCC1-CACHE45[0,TCP_HIT,0],CHN-HElangfang-GLOBAL6-CACHE94[13],CHN-HElangfang-GLOBAL6-CACHE83[0,TCP_HIT,9]\r\nx-hcs-proxy-type: 1\r\nX-CCDN-CacheTTL: 2592000\r\nnginx-hit: 1\r\nAge: 438394\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":11393,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v90), default quality\", baseline, precision 8, 240x180, components 3","md5":"5bb7acbd245c604e12a995430613f237","sha1":"4fe9628a2b6b1dfa99c638d20eeabe8bb7b38ddd","sha256":"85df03a8a22ab78f6c2712637c2d3c9a090c591fab0bb6e9c6dc916530fbd689","sha512":"91a4ca61301637d51249bb4249ecbe61f9288c3698dd3bd48c323b1d58bac85d6513c570144f68482bd0727ca88627321714a030053c8278eb55b6458a1f89c1","ssdeep":"192:LtWetaNOXXDfb/j0eXYrmWgb1BHnvdpFCfwwyMFU18IruJZo3GaztwurfVDItLi9:LIetaNOXXDfJxWgb7dpFgrU18IrGiGaX","tlshash":"7932bf23db5ec4a8275d9410ee0c283959b5e85e0ff3d0770a67aca37981e79111ef45","first_seen":"2026-02-01T07:42:01.672844Z","last_seen":"2026-02-01T07:42:01.672844Z","times_seen":1,"resource_available":false,"data":null}},"time_used":4610,"timings":{"blocked":3344,"dns":1,"connect":301,"send":0,"wait":501,"receive":0,"ssl":463},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"image.xitongtiandi.net/upload/202507/161319-68833c9f317b9.jpg","fqdn":"image.xitongtiandi.net","domain":"xitongtiandi.net","tld":"net"},"ip":{"addr":"116.153.39.131","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xitongtiandi.net/soft_lt/7017.html","date":"2026-02-01T07:41:21.748Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"image.xitongtiandi.net","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Fri, 26 Dec 2025 00:00:00 GMT","end":"Thu, 26 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"68:45:42:1A:66:A6:87:1B:03:DE:5B:E1:65:05:9A:BC:74:13:56:8C","sha256":"CD:0E:7D:D7:D9:AE:12:8F:B5:76:68:8F:82:80:8E:28:F2:30:73:19:10:FF:CE:F4:29:DC:D0:CD:5D:16:AB:2E"}}},"request":{"raw":"GET /upload/202507/161319-68833c9f317b9.jpg HTTP/1.1\r\nHost: image.xitongtiandi.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xitongtiandi.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sun, 01 Feb 2026 07:41:26 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 5652\r\nConnection: keep-alive\r\nServer: openresty\r\nCloudServiceDiscount: CDN\r\nx-obs-request-id: 00000199935BAA1C9744E5AD28681606\r\nETag: \"5f7f9eff1760a7002e39c18241ea2c30\"\r\nLast-Modified: Fri, 25 Jul 2025 08:13:19 GMT\r\nx-obs-id-2: 36AAAQAAEAABAAAQAAEAABAAAQAAEAABAAAaI=AAAAAAAAAAAAAAAAAAAAAAAAAA\r\nX-CCDN-Expires: 517647\r\nvia: CHN-JXnanchang-AREACUCC1-CACHE15[3],CHN-JXnanchang-AREACUCC1-CACHE23[0,TCP_HIT,0],CHN-JSwuxi-GLOBAL2-CACHE86[13],CHN-JSwuxi-GLOBAL2-CACHE57[0,TCP_HIT,7]\r\nx-hcs-proxy-type: 1\r\nX-CCDN-CacheTTL: 2592000\r\nnginx-hit: 1\r\nAge: 2074366\r\nAccept-Ranges: bytes\r\nContent-Disposition: inline\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5652,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=6, xresolution=86, yresolution=94, resolutionunit=2, software=Adobe Photoshop CS6 (Windows), datetime=2018:05:22 18:48:20], baseline, precision 8, 120x120, components 3","md5":"5f7f9eff1760a7002e39c18241ea2c30","sha1":"c066ed13292de32ebfaa6180b4318378ec843fe9","sha256":"47ef6e1e160c9a80050a247de6b1910b2d2245ac2a96e2a680c138ce8830ccc1","sha512":"990c29e73490a088374789ae482d6bf39b20cd16db9fe95908ef6e3dba055a0bafd429abe4f77a64184d06dee02ceb06514156f82d4ac19d7b50d843ea0d156d","ssdeep":"96:ETUL7vVOnOgEsiEVB6DC56xlHm6IRw5opWUbQ6K2o9Q1cl:kUnUONsiJe6/zZnqF1cl","tlshash":"afc14c2e37276deaf5f143ba6616ef53a2d04ba0324f260f32d05646b8569408dec618","first_seen":"2026-02-01T07:42:01.674158Z","last_seen":"2026-02-01T07:42:01.674158Z","times_seen":1,"resource_available":false,"data":null}},"time_used":4681,"timings":{"blocked":4374,"dns":0,"connect":0,"send":0,"wait":307,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"image.xitongtiandi.net/upload/202507/190827-688365abe4571.jpg","fqdn":"image.xitongtiandi.net","domain":"xitongtiandi.net","tld":"net"},"ip":{"addr":"116.153.39.131","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xitongtiandi.net/soft_lt/7017.html","date":"2026-02-01T07:41:21.752Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"image.xitongtiandi.net","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Fri, 26 Dec 2025 00:00:00 GMT","end":"Thu, 26 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"68:45:42:1A:66:A6:87:1B:03:DE:5B:E1:65:05:9A:BC:74:13:56:8C","sha256":"CD:0E:7D:D7:D9:AE:12:8F:B5:76:68:8F:82:80:8E:28:F2:30:73:19:10:FF:CE:F4:29:DC:D0:CD:5D:16:AB:2E"}}},"request":{"raw":"GET /upload/202507/190827-688365abe4571.jpg HTTP/1.1\r\nHost: image.xitongtiandi.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xitongtiandi.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sun, 01 Feb 2026 07:41:25 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 6292\r\nConnection: keep-alive\r\nServer: openresty\r\nCloudServiceDiscount: CDN\r\nx-obs-request-id: 0000019BA0ADA4AE904B4205A11BDD09\r\nETag: \"99e6f1f7cc58e852095c51740aa2d78c\"\r\nLast-Modified: Fri, 25 Jul 2025 11:08:27 GMT\r\nx-obs-id-2: 36AAAQAAEAABAAAQAAEAABAAAQAAEAABAAAaI=AAAAAAAAAAAAAAAAAAAAAAAAAA\r\nX-CCDN-Expires: 587620\r\nvia: CHN-JXnanchang-AREACUCC1-CACHE43[4],CHN-JXnanchang-AREACUCC1-CACHE64[0,TCP_HIT,0],CHN-JSwuxi-GLOBAL2-CACHE24[6],CHN-JSwuxi-GLOBAL2-CACHE95[0,TCP_HIT,4]\r\nx-hcs-proxy-type: 1\r\nX-CCDN-CacheTTL: 2592000\r\nAge: 13\r\nAccept-Ranges: bytes\r\nContent-Disposition: inline\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":6292,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=5], baseline, precision 8, 125x125, components 3","md5":"99e6f1f7cc58e852095c51740aa2d78c","sha1":"71375b32161001fdcedeacf96f3ea3c37021aa61","sha256":"4fc0f1db25b09255948f0be65a94fdeff7362451c722a73d6de8ac1a1db665a3","sha512":"297f44c167bc795f588a1f45e015f990c3a201920c7712306dd4c12cb61e831fe06386e9a3c4559f4ab298f0dd26fc38b5b4ed2c1903ff5e7633d41b6e4cea5c","ssdeep":"96:uGELJ8HBvTgf3Mg73rrrHTyS7sPZBLYoJcBdVlzSC6H+cns0DqnwJ8jim75nka:9lHwM4TH5WLYSQdVlzSH+ms6q6sim1z","tlshash":"01d17d0fde633d046cde54b97e0ac92991a9c94ea39bb0204ab109e0f698c86fe12594","first_seen":"2026-02-01T07:42:01.67528Z","last_seen":"2026-02-01T07:42:01.67528Z","times_seen":1,"resource_available":false,"data":null}},"time_used":4359,"timings":{"blocked":3324,"dns":0,"connect":251,"send":0,"wait":286,"receive":0,"ssl":498},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"image.xitongtiandi.net/upload/202507/220938-68839022f29df.jpg","fqdn":"image.xitongtiandi.net","domain":"xitongtiandi.net","tld":"net"},"ip":{"addr":"116.153.39.131","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xitongtiandi.net/soft_lt/7017.html","date":"2026-02-01T07:41:21.755Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"image.xitongtiandi.net","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Fri, 26 Dec 2025 00:00:00 GMT","end":"Thu, 26 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"68:45:42:1A:66:A6:87:1B:03:DE:5B:E1:65:05:9A:BC:74:13:56:8C","sha256":"CD:0E:7D:D7:D9:AE:12:8F:B5:76:68:8F:82:80:8E:28:F2:30:73:19:10:FF:CE:F4:29:DC:D0:CD:5D:16:AB:2E"}}},"request":{"raw":"GET /upload/202507/220938-68839022f29df.jpg HTTP/1.1\r\nHost: image.xitongtiandi.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xitongtiandi.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sun, 01 Feb 2026 07:41:26 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 11972\r\nConnection: keep-alive\r\nServer: openresty\r\nCloudServiceDiscount: CDN\r\nx-obs-request-id: 00000198A10FF66397A748EDFB7115E3\r\nETag: \"179df4ea248aae14426e11874144eb52\"\r\nLast-Modified: Fri, 25 Jul 2025 14:09:39 GMT\r\nx-obs-id-2: 36AAAQAAEAABAAAQAAEAABAAAQAAEAABAAAaI=AAAAAAAAAAAAAAAAAAAAAAAAAA\r\nX-CCDN-Expires: 2055460\r\nvia: CHN-JXnanchang-AREACUCC1-CACHE33[4],CHN-JXnanchang-AREACUCC1-CACHE43[0,TCP_HIT,0],CHN-JSwuxi-GLOBAL2-CACHE4[17],CHN-JSwuxi-GLOBAL2-CACHE43[0,TCP_HIT,16]\r\nx-hcs-proxy-type: 1\r\nX-CCDN-CacheTTL: 2592000\r\nnginx-hit: 1\r\nAge: 536553\r\nAccept-Ranges: bytes\r\nContent-Disposition: inline\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":11972,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 144x144, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1, software=www.meitu.com], baseline, precision 8, 120x120, components 3","md5":"179df4ea248aae14426e11874144eb52","sha1":"f9395de179c5f3c7fd6f142c42f0b29acf7c810d","sha256":"3a975916f602380844b468ea2c9672b1c639709c11d998f4514f95b660b5694d","sha512":"86af8e525623767b9dc058a6a6e18f534a2d8a407a0c11bb936cc7c79ad65d0db95d72c9b7c494a2734f6b4309076b7715294c6cc942ec400a082bcdfa14efdf","ssdeep":"192:7zfbvw3ZeeTs0F90p5TjZCQJH8IQJgTWFbKP2jTa3p1HS3lqw00lZkwrY3PyjYpG:7fKeew0F943AQJH8Fbsi+HS3lqw5zFrP","tlshash":"5b32d0d0ae9bf1a94b891d7628a966813754c8993085f123bc3b50f0c384f4166ba29c","first_seen":"2026-02-01T07:42:01.676486Z","last_seen":"2026-02-01T07:42:01.676486Z","times_seen":1,"resource_available":false,"data":null}},"time_used":4830,"timings":{"blocked":4480,"dns":0,"connect":0,"send":0,"wait":350,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"res.xitongtiandi.net/xttd/images/icon-re.png","fqdn":"res.xitongtiandi.net","domain":"xitongtiandi.net","tld":"net"},"ip":{"addr":"116.153.39.131","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xitongtiandi.net/soft_lt/7017.html","date":"2026-02-01T07:41:25.157Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"res.xitongtiandi.net","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Fri, 26 Dec 2025 00:00:00 GMT","end":"Thu, 26 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"1F:66:E3:A4:D8:97:BC:27:31:E3:7E:C0:E9:87:F8:8A:BD:5F:78:50","sha256":"9B:66:75:12:D8:16:0B:05:6B:AE:85:41:94:BC:0E:10:20:C6:42:E3:74:BA:E9:1E:EB:1B:6F:DA:FC:A1:3F:1B"}}},"request":{"raw":"GET /xttd/images/icon-re.png HTTP/1.1\r\nHost: res.xitongtiandi.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://res.xitongtiandi.net/xttd/css/r-detail.css?2026020107\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sun, 01 Feb 2026 07:41:25 GMT\r\nContent-Type: image/png\r\nContent-Length: 654\r\nConnection: keep-alive\r\nServer: openresty\r\nx-reserved: amazon, aws and amazon web services are trademarks or registered trademarks of Amazon Technologies, Inc\r\nCloudServiceDiscount: CDN\r\nx-amz-request-id: 000001946DEDEE8497452516E95E8110\r\nETag: \"2a6e64ec4be9c7266ee038190ae57223\"\r\nLast-Modified: Fri, 19 Apr 2024 02:26:36 GMT\r\nx-amz-id-2: 32AAAQAAEAABAAAQAAEAABAAAQAAEAABCSAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA\r\nX-CCDN-Expires: 64883\r\nvia: CHN-JXnanchang-AREACUCC1-CACHE21[6],CHN-JXnanchang-AREACUCC1-CACHE13[0,TCP_HIT,3],CHN-JSwuxi-GLOBAL2-CACHE87[23],CHN-JSwuxi-GLOBAL2-CACHE113[0,TCP_HIT,21],CHN-SH-GLOBAL4-CACHE111[22],CHN-SH-GLOBAL4-CACHE108[0,TCP_HIT,21]\r\nx-hcs-proxy-type: 1\r\nX-CCDN-CacheTTL: 2592000\r\nnginx-hit: 1\r\nAge: 2527117\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":654,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 20 x 20, 8-bit/color RGBA, non-interlaced","md5":"2a6e64ec4be9c7266ee038190ae57223","sha1":"2d1b963384b32c2b53cecea351ad20bb9f26886c","sha256":"52b7ec632b6bcb75c63a06165bb5080025529e78e3a893201111f908afa7ed32","sha512":"129e6dd69941b895492e9354b959d7162d99a3cb7708db44b5b9db2dff339b847d9317b931abfc5da3a8501118d4b9e18a5038e7c9436e2ca3d7ea62dac7ae79","ssdeep":"","tlshash":"b9f088d0c2783d3d1206423592493e0dc66e515595c40c45d1963534c3832f4df40c4b","first_seen":"2023-07-03T04:23:05Z","last_seen":"2026-02-01T07:42:01.677747Z","times_seen":4,"resource_available":false,"data":null}},"time_used":337,"timings":{"blocked":94,"dns":0,"connect":0,"send":0,"wait":243,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"res.xitongtiandi.net/xttd/css/public.css?2026020107","fqdn":"res.xitongtiandi.net","domain":"xitongtiandi.net","tld":"net"},"ip":{"addr":"121.22.232.168","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://xitongtiandi.net/soft_lt/7017.html","date":"2026-02-01T07:41:21.715Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"res.xitongtiandi.net","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Fri, 26 Dec 2025 00:00:00 GMT","end":"Thu, 26 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"1F:66:E3:A4:D8:97:BC:27:31:E3:7E:C0:E9:87:F8:8A:BD:5F:78:50","sha256":"9B:66:75:12:D8:16:0B:05:6B:AE:85:41:94:BC:0E:10:20:C6:42:E3:74:BA:E9:1E:EB:1B:6F:DA:FC:A1:3F:1B"}}},"request":{"raw":"GET /xttd/css/public.css?2026020107 HTTP/1.1\r\nHost: res.xitongtiandi.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xitongtiandi.net/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sun, 01 Feb 2026 07:41:24 GMT\r\nContent-Type: text/css\r\nContent-Length: 4178\r\nConnection: keep-alive\r\nServer: openresty\r\nx-reserved: amazon, aws and amazon web services are trademarks or registered trademarks of Amazon Technologies, Inc\r\nCloudServiceDiscount: CDN\r\nx-amz-request-id: 0000019C1800D80497A8858D56BCA0A0\r\nETag: \"fd0144c3a02aa0d01ebc18ac1a29c6a5\"\r\nLast-Modified: Thu, 31 Jul 2025 10:20:35 GMT\r\nx-amz-id-2: 36AAAQAAEAABAAAQAAEAABAAAQAAEAABAAAaI=AAAAAAAAAAAAAAAAAAAAAAAAAA\r\nX-CCDN-Expires: 2589576\r\nvia: CHN-HEqinhuangdao-AREACUCC1-CACHE4[5],CHN-HEqinhuangdao-AREACUCC1-CACHE12[0,TCP_HIT,3],CHN-TJ-GLOBAL6-CACHE49[3],CHN-TJ-GLOBAL6-CACHE62[0,TCP_HIT,0]\r\nx-hcs-proxy-type: 1\r\nX-CCDN-CacheTTL: 2592000\r\nnginx-hit: 1\r\nAge: 2424\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4178,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with CRLF line terminators","md5":"fd0144c3a02aa0d01ebc18ac1a29c6a5","sha1":"93589d9f301b702092ad3145fbe97f29ac0e9a0e","sha256":"d14c07dc7f6efb73e8cebeac8dbdde432bfdae92c05b502f5020f8bd546fbe9e","sha512":"346a0fecfa26f18a365a4440faf4279417e8d13c6df7e81e3e8ae5f3de5b943c68d3b0bbfc87f14f7e2cedc9dc0b44d56a11b1fcf22f5ce4114852bd756ce30e","ssdeep":"48:FJtJKddUVVpt2EF7PPb9Nyv8N//HATt6ZLSGIx1i899yBIyZ7bAqXSggQNAv0Wc:7tJK8VfHb9p//HO6ZLZyF9GPl8WYhc","tlshash":"f981ff5cd7532586b23b9a78bba10755fa1420a30b02023c7fe4a7689fb507d9a65fcc","first_seen":"2026-02-01T07:42:01.678746Z","last_seen":"2026-02-01T07:42:01.678746Z","times_seen":1,"resource_available":false,"data":null}},"time_used":5458,"timings":{"blocked":2604,"dns":1958,"connect":229,"send":0,"wait":235,"receive":0,"ssl":429},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"res.xitongtiandi.net/xttd/css/r-detail.css?2026020107","fqdn":"res.xitongtiandi.net","domain":"xitongtiandi.net","tld":"net"},"ip":{"addr":"121.22.232.168","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://xitongtiandi.net/soft_lt/7017.html","date":"2026-02-01T07:41:21.717Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"res.xitongtiandi.net","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Fri, 26 Dec 2025 00:00:00 GMT","end":"Thu, 26 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"1F:66:E3:A4:D8:97:BC:27:31:E3:7E:C0:E9:87:F8:8A:BD:5F:78:50","sha256":"9B:66:75:12:D8:16:0B:05:6B:AE:85:41:94:BC:0E:10:20:C6:42:E3:74:BA:E9:1E:EB:1B:6F:DA:FC:A1:3F:1B"}}},"request":{"raw":"GET /xttd/css/r-detail.css?2026020107 HTTP/1.1\r\nHost: res.xitongtiandi.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xitongtiandi.net/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sun, 01 Feb 2026 07:41:24 GMT\r\nContent-Type: text/css\r\nContent-Length: 19374\r\nConnection: keep-alive\r\nServer: openresty\r\nx-reserved: amazon, aws and amazon web services are trademarks or registered trademarks of Amazon Technologies, Inc\r\nCloudServiceDiscount: CDN\r\nx-amz-request-id: 0000019C1800D7AB900B1A6E857C6148\r\nETag: \"94641c06cbadac383a7d1a5b07d56a31\"\r\nLast-Modified: Thu, 31 Jul 2025 10:20:35 GMT\r\nx-amz-id-2: 36AAAQAAEAABAAAQAAEAABAAAQAAEAABAAAaI=AAAAAAAAAAAAAAAAAAAAAAAAAA\r\nX-CCDN-Expires: 2591810\r\nvia: CHN-HEqinhuangdao-AREACUCC1-CACHE90[29],CHN-HEqinhuangdao-AREACUCC1-CACHE79[0,TCP_HIT,27],CHN-TJ-GLOBAL6-CACHE62[4],CHN-TJ-GLOBAL6-CACHE85[0,TCP_HIT,2]\r\nx-hcs-proxy-type: 1\r\nX-CCDN-CacheTTL: 2592000\r\nnginx-hit: 1\r\nAge: 190\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":19374,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with CRLF line terminators","md5":"290b4fed8767297a49ce60691264bc31","sha1":"5f15b65b3c040930f18fb6e5451e890ebbc59f22","sha256":"269d9da6f8a6a610619c9fd64603a766af6a494d81bc6fb98f50d37a7eeef1f5","sha512":"41bae41598d2f5a55ca3134fe742803acb21162458a844a93cf68fe84b88668c28ea02019029d690d4c0729eb5bffdb5fb72a0e1921fbc3380f45dd3b305520e","ssdeep":"192:xnOi9F5OOabJhLQY14zQNHvgdfS4YD6KoniylT3cbxrzRYnBUbQUBpb1JobK+smM:kRMsqb+","tlshash":"56921368d7120647a233cbba6fa1174afa5140335b46406cbfd4ba409fb58ac59e1fce","first_seen":"2026-02-01T07:42:01.68027Z","last_seen":"2026-02-01T07:42:01.68027Z","times_seen":1,"resource_available":false,"data":null}},"time_used":5805,"timings":{"blocked":2604,"dns":1957,"connect":291,"send":0,"wait":412,"receive":169,"ssl":370},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"res.xitongtiandi.net/xttd/images/icon-safe.png","fqdn":"res.xitongtiandi.net","domain":"xitongtiandi.net","tld":"net"},"ip":{"addr":"121.22.232.168","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xitongtiandi.net/soft_lt/7017.html","date":"2026-02-01T07:41:21.726Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"res.xitongtiandi.net","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Fri, 26 Dec 2025 00:00:00 GMT","end":"Thu, 26 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"1F:66:E3:A4:D8:97:BC:27:31:E3:7E:C0:E9:87:F8:8A:BD:5F:78:50","sha256":"9B:66:75:12:D8:16:0B:05:6B:AE:85:41:94:BC:0E:10:20:C6:42:E3:74:BA:E9:1E:EB:1B:6F:DA:FC:A1:3F:1B"}}},"request":{"raw":"GET /xttd/images/icon-safe.png HTTP/1.1\r\nHost: res.xitongtiandi.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xitongtiandi.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sun, 01 Feb 2026 07:41:25 GMT\r\nContent-Type: image/png\r\nContent-Length: 1475\r\nConnection: keep-alive\r\nServer: openresty\r\nx-reserved: amazon, aws and amazon web services are trademarks or registered trademarks of Amazon Technologies, Inc\r\nCloudServiceDiscount: CDN\r\nx-amz-request-id: 00000191B69D52509058F99380AE0367\r\nETag: \"6b49b92208712c6289d7008b79234762\"\r\nLast-Modified: Fri, 19 Apr 2024 02:26:36 GMT\r\nx-amz-id-2: 32AAAQAAEAABAAAQAAEAABAAAQAAEAABCSAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA\r\nX-CCDN-Expires: 1621798\r\nvia: CHN-HEqinhuangdao-AREACUCC1-CACHE90[5],CHN-HEqinhuangdao-AREACUCC1-CACHE84[0,TCP_HIT,2],CHN-TJ-GLOBAL1-CACHE2[15],CHN-TJ-GLOBAL1-CACHE67[0,TCP_HIT,9]\r\nx-hcs-proxy-type: 1\r\nX-CCDN-CacheTTL: 2592000\r\nnginx-hit: 1\r\nAge: 970202\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":1475,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 90 x 28, 8-bit/color RGBA, non-interlaced","md5":"6b49b92208712c6289d7008b79234762","sha1":"f5b23d8301c47954dc594c3c967334cda40a40d9","sha256":"7100b6397006896b6a556a0dd0852be84e8ccf9a60cffe3828b3e275d3cc5fc8","sha512":"9ef0784d3b12ea9965c78faf94c063c1ec44753833c1ac14015f1344c2f9e703d2e68b6ca9e53494203e1e318c781c48a945ee3dc54bcc704ec4d0842c349c6c","ssdeep":"","tlshash":"683119a3812a313407ae3dbee02dc61cfc514d484012006de83b4fe8a8cb387459ecf8","first_seen":"2023-06-17T08:16:31Z","last_seen":"2026-02-01T07:42:01.681375Z","times_seen":8,"resource_available":false,"data":null}},"time_used":3646,"timings":{"blocked":3349,"dns":0,"connect":0,"send":0,"wait":297,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"image.xitongtiandi.net/upload/202507/222018-688392a2003e9.jpg","fqdn":"image.xitongtiandi.net","domain":"xitongtiandi.net","tld":"net"},"ip":{"addr":"116.153.39.131","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xitongtiandi.net/soft_lt/7017.html","date":"2026-02-01T07:41:21.756Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"image.xitongtiandi.net","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Fri, 26 Dec 2025 00:00:00 GMT","end":"Thu, 26 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"68:45:42:1A:66:A6:87:1B:03:DE:5B:E1:65:05:9A:BC:74:13:56:8C","sha256":"CD:0E:7D:D7:D9:AE:12:8F:B5:76:68:8F:82:80:8E:28:F2:30:73:19:10:FF:CE:F4:29:DC:D0:CD:5D:16:AB:2E"}}},"request":{"raw":"GET /upload/202507/222018-688392a2003e9.jpg HTTP/1.1\r\nHost: image.xitongtiandi.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xitongtiandi.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sun, 01 Feb 2026 07:41:25 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 11180\r\nConnection: keep-alive\r\nServer: openresty\r\nCloudServiceDiscount: CDN\r\nx-obs-request-id: 0000019A50B154219765CD4065B5E1D3\r\nETag: \"0ac6538e037bfb38918abde064eadbcd\"\r\nLast-Modified: Fri, 25 Jul 2025 14:20:18 GMT\r\nx-obs-id-2: 36AAAQAAEAABAAAQAAEAABAAAQAAEAABAAAaI=AAAAAAAAAAAAAAAAAAAAAAAAAA\r\nX-CCDN-Expires: 162300\r\nvia: CHN-JXnanchang-AREACUCC1-CACHE20[4],CHN-JXnanchang-AREACUCC1-CACHE29[0,TCP_HIT,0],CHN-JSwuxi-GLOBAL2-CACHE100[18],CHN-JSwuxi-GLOBAL2-CACHE29[0,TCP_HIT,18]\r\nx-hcs-proxy-type: 1\r\nX-CCDN-CacheTTL: 2592000\r\nAge: 13\r\nAccept-Ranges: bytes\r\nContent-Disposition: inline\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":11180,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1, software=www.meitu.com], baseline, precision 8, 80x80, components 3","md5":"0ac6538e037bfb38918abde064eadbcd","sha1":"16e2035427c027fb23083bbdf2d3f91ee3a47243","sha256":"0c2f3958411b9b593bc3213043527ed69e30a20fa68a4ea7f36cb83ffe479774","sha512":"8fbd9bc3315fedafc3e82798a40ed6a5dfdf793936c386b16b39af4207c72406614edddcc3ff41bbdc34042da7a75a2c2fcea27b140174530c302586bed8a6a9","ssdeep":"192:rE69IzDoWDEryH4Pe+R3i9q+G6aVtdoWuD2I7gYYe3ZdR7pdCXj30p8mVdJO:rJ9qE26e+RyY+Hq35YDgKZd4eFO","tlshash":"f632cfa842659172bfb0c97dae6d37607201c68367e0422df179f29ac351f92e2b035d","first_seen":"2026-02-01T07:42:01.682433Z","last_seen":"2026-02-01T07:42:01.682433Z","times_seen":1,"resource_available":false,"data":null}},"time_used":4429,"timings":{"blocked":3320,"dns":0,"connect":258,"send":0,"wait":329,"receive":0,"ssl":521},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"res.xitongtiandi.net/xttd/images/icon-tj.png","fqdn":"res.xitongtiandi.net","domain":"xitongtiandi.net","tld":"net"},"ip":{"addr":"121.22.232.168","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xitongtiandi.net/soft_lt/7017.html","date":"2026-02-01T07:41:25.158Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"res.xitongtiandi.net","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Fri, 26 Dec 2025 00:00:00 GMT","end":"Thu, 26 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"1F:66:E3:A4:D8:97:BC:27:31:E3:7E:C0:E9:87:F8:8A:BD:5F:78:50","sha256":"9B:66:75:12:D8:16:0B:05:6B:AE:85:41:94:BC:0E:10:20:C6:42:E3:74:BA:E9:1E:EB:1B:6F:DA:FC:A1:3F:1B"}}},"request":{"raw":"GET /xttd/images/icon-tj.png HTTP/1.1\r\nHost: res.xitongtiandi.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://res.xitongtiandi.net/xttd/css/r-detail.css?2026020107\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sun, 01 Feb 2026 07:41:25 GMT\r\nContent-Type: image/png\r\nContent-Length: 638\r\nConnection: keep-alive\r\nServer: openresty\r\nx-reserved: amazon, aws and amazon web services are trademarks or registered trademarks of Amazon Technologies, Inc\r\nCloudServiceDiscount: CDN\r\nx-amz-request-id: 0000019BFC2E0C3997485A5A1F191E55\r\nETag: \"214aa58445127268be1e3195c668c933\"\r\nLast-Modified: Thu, 31 Jul 2025 10:20:36 GMT\r\nx-amz-id-2: 36AAAQAAEAABAAAQAAEAABAAAQAAEAABAAAaI=AAAAAAAAAAAAAAAAAAAAAAAAAA\r\nX-CCDN-Expires: 2442584\r\nvia: CHN-HEqinhuangdao-AREACUCC1-CACHE90[3],CHN-HEqinhuangdao-AREACUCC1-CACHE16[0,TCP_HIT,1],CHN-TJ-GLOBAL6-CACHE14[23],CHN-TJ-GLOBAL6-CACHE88[0,TCP_HIT,20]\r\nx-hcs-proxy-type: 1\r\nX-CCDN-CacheTTL: 2592000\r\nnginx-hit: 1\r\nAge: 149416\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":638,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 18 x 18, 8-bit/color RGBA, non-interlaced","md5":"214aa58445127268be1e3195c668c933","sha1":"a2969b3bbfceed5769d189c4c16994971f036d8a","sha256":"5662e1129763f9303beb6cdac67a68424fa3dfdf0022a284499084a88aaaf28c","sha512":"4fb82246296abfa740d2704070da8728d7b238fd18ee6a572b014c9add48038e7c518188b221e46b88f443f0863eeab77c4aeef07daf97f6b8ceec007e3c5029","ssdeep":"","tlshash":"e3f023e6b0fd7e2f588ab11a07118da49aa911009b45c98835bf492bfd6600e84a00d7","first_seen":"2023-07-03T04:23:05Z","last_seen":"2026-02-01T07:42:01.683519Z","times_seen":5,"resource_available":false,"data":null}},"time_used":508,"timings":{"blocked":214,"dns":0,"connect":0,"send":0,"wait":294,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"res.xitongtiandi.net/xttd/images/icon-down3.png","fqdn":"res.xitongtiandi.net","domain":"xitongtiandi.net","tld":"net"},"ip":{"addr":"121.22.232.168","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xitongtiandi.net/soft_lt/7017.html","date":"2026-02-01T07:41:25.159Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"res.xitongtiandi.net","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Fri, 26 Dec 2025 00:00:00 GMT","end":"Thu, 26 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"1F:66:E3:A4:D8:97:BC:27:31:E3:7E:C0:E9:87:F8:8A:BD:5F:78:50","sha256":"9B:66:75:12:D8:16:0B:05:6B:AE:85:41:94:BC:0E:10:20:C6:42:E3:74:BA:E9:1E:EB:1B:6F:DA:FC:A1:3F:1B"}}},"request":{"raw":"GET /xttd/images/icon-down3.png HTTP/1.1\r\nHost: res.xitongtiandi.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://res.xitongtiandi.net/xttd/css/r-detail.css?2026020107\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sun, 01 Feb 2026 07:41:25 GMT\r\nContent-Type: image/png\r\nContent-Length: 1101\r\nConnection: keep-alive\r\nServer: openresty\r\nx-reserved: amazon, aws and amazon web services are trademarks or registered trademarks of Amazon Technologies, Inc\r\nCloudServiceDiscount: CDN\r\nx-amz-request-id: 0000019BD40A1618904B3FAD51E07DCC\r\nETag: \"53cc3fdc4ee1f6bcf026487033306c6c\"\r\nLast-Modified: Thu, 31 Jul 2025 10:20:36 GMT\r\nx-amz-id-2: 36AAAQAAEAABAAAQAAEAABAAAQAAEAABAAAaI=AAAAAAAAAAAAAAAAAAAAAAAAAA\r\nX-CCDN-Expires: 1547400\r\nvia: CHN-HEqinhuangdao-AREACUCC1-CACHE12[3],CHN-HEqinhuangdao-AREACUCC1-CACHE3[0,TCP_HIT,1],CHN-TJ-GLOBAL6-CACHE66[25],CHN-TJ-GLOBAL6-CACHE134[0,TCP_HIT,22]\r\nx-hcs-proxy-type: 1\r\nX-CCDN-CacheTTL: 2592000\r\nnginx-hit: 1\r\nAge: 1044600\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":1101,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 26 x 26, 8-bit/color RGBA, non-interlaced","md5":"53cc3fdc4ee1f6bcf026487033306c6c","sha1":"db4d19d0902dbbc2f8c0d97f83bb93986a8f8660","sha256":"e669089b250199f1fc73cb6f341be272d72148183dc509d09d5e2a72efb74687","sha512":"773afc3f1cbb4e5e5d1aec3c26871ba4ea778fa21fb9e9b040876f09a94b60eb6fbb2458925d7b6172167e4a19a1d526da9b3acced85ee68a5d17195f164e6d1","ssdeep":"","tlshash":"4f11f9d17136809ca5b451fb4aeac0d89e8320bce45328603446d3f20493fcc271dfb2","first_seen":"2023-07-03T04:23:05Z","last_seen":"2026-06-02T12:23:57.176332Z","times_seen":38,"resource_available":false,"data":null}},"time_used":570,"timings":{"blocked":306,"dns":0,"connect":0,"send":0,"wait":264,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"image.xitongtiandi.net/upload/202504/141906-68106f5aaae9d.jpg","fqdn":"image.xitongtiandi.net","domain":"xitongtiandi.net","tld":"net"},"ip":{"addr":"116.153.39.131","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xitongtiandi.net/soft_lt/7017.html","date":"2026-02-01T07:41:21.732Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"image.xitongtiandi.net","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Fri, 26 Dec 2025 00:00:00 GMT","end":"Thu, 26 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"68:45:42:1A:66:A6:87:1B:03:DE:5B:E1:65:05:9A:BC:74:13:56:8C","sha256":"CD:0E:7D:D7:D9:AE:12:8F:B5:76:68:8F:82:80:8E:28:F2:30:73:19:10:FF:CE:F4:29:DC:D0:CD:5D:16:AB:2E"}}},"request":{"raw":"GET /upload/202504/141906-68106f5aaae9d.jpg HTTP/1.1\r\nHost: image.xitongtiandi.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xitongtiandi.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sun, 01 Feb 2026 07:41:26 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 49002\r\nConnection: keep-alive\r\nServer: openresty\r\nCloudServiceDiscount: CDN\r\nx-obs-request-id: 0000019680333AAA97449223E327642F\r\nETag: \"1a79036d930c7d1edea9d23ca6450ea9\"\r\nLast-Modified: Tue, 29 Apr 2025 06:19:06 GMT\r\nx-obs-id-2: 32AAAQAAEAABAAAQAAEAABAAAQAAEAABCSAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA\r\nX-CCDN-Expires: 1671036\r\nvia: CHN-JXnanchang-AREACUCC1-CACHE43[3],CHN-JXnanchang-AREACUCC1-CACHE46[0,TCP_HIT,0],CHN-JSwuxi-GLOBAL2-CACHE16[93],CHN-JSwuxi-GLOBAL2-CACHE102[0,TCP_HIT,33]\r\nx-hcs-proxy-type: 1\r\nX-CCDN-CacheTTL: 2592000\r\nnginx-hit: 1\r\nAge: 920977\r\nAccept-Ranges: bytes\r\nContent-Disposition: inline\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":49002,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 780x284, components 3","md5":"1a79036d930c7d1edea9d23ca6450ea9","sha1":"bcf62d9e2d48b3053007485425ca50a1b8e810fa","sha256":"8d91aa097af189dc71ae0c8777f0d0957766da2442b4ea0b3dca4c9136b05253","sha512":"90b360607e79613fe034614810e05ab2d8a0c6debc79a8a28b7b91f47913f6aa9fdc6fbb892f4bb55f8462916f88df836313d44052f4737bf7576010f76c4f47","ssdeep":"768:HcIenjiN71b8vrJ3KjkUI6mLl35nhm+VPtNKRVZvm+5pZlYVF+kL4G+DCUXc:ngc1UrNdq+VPtNWVZu+DZsFICUM","tlshash":"6623cf404976ee9da76ae7e9934957d1aec0fc2cfd62975e0ddf0438c40af083964868","first_seen":"2026-02-01T07:42:01.685764Z","last_seen":"2026-02-01T07:42:01.685764Z","times_seen":1,"resource_available":false,"data":null}},"time_used":5247,"timings":{"blocked":4661,"dns":0,"connect":0,"send":0,"wait":334,"receive":252,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.xitongtiandi.net/d/file/20210724/4c575f233fe80bcb77d5f0638795b339.jpg","fqdn":"img.xitongtiandi.net","domain":"xitongtiandi.net","tld":"net"},"ip":{"addr":"120.52.95.238","port":443,"asn":133119,"as":"China Unicom IP network","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xitongtiandi.net/soft_lt/7017.html","date":"2026-02-01T07:41:21.741Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.xitongtiandi.net","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Fri, 26 Dec 2025 00:00:00 GMT","end":"Thu, 26 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"76:AE:74:5D:DA:22:6F:75:FF:B8:99:47:85:9F:B9:1D:12:D7:B2:E0","sha256":"7E:AA:16:44:B1:24:13:58:14:68:DE:F8:07:07:9D:F6:FF:DB:FE:1B:17:14:79:E9:F9:47:14:8C:63:F0:C7:08"}}},"request":{"raw":"GET /d/file/20210724/4c575f233fe80bcb77d5f0638795b339.jpg HTTP/1.1\r\nHost: img.xitongtiandi.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xitongtiandi.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sun, 01 Feb 2026 07:41:26 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 83925\r\nConnection: keep-alive\r\nServer: openresty\r\nCloudServiceDiscount: CDN\r\nx-obs-request-id: 0000019BE041ADB397A7BA82A066774B\r\nETag: \"8e94c159f85bf15a1593a0d7ba1ea520\"\r\nLast-Modified: Wed, 30 Oct 2024 03:07:26 GMT\r\nContent-Disposition: attachment\r\nx-obs-id-2: 36AAAQAAEAABAAAQAAEAABAAAQAAEAABAAAaI=AAAAAAAAAAAAAAAAAAAAAAAAAA\r\nvia: CHN-HElangfang-AREACUCC1-CACHE28[3],CHN-HElangfang-AREACUCC1-CACHE21[0,TCP_HIT,0],CHN-TJ-GLOBAL6-CACHE42[164],CHN-TJ-GLOBAL6-CACHE120[138,TCP_MISS,161]\r\nx-hcs-proxy-type: 1\r\nX-CCDN-CacheTTL: 2592000\r\nnginx-hit: 1\r\nAge: 937727\r\nX-CCDN-Expires: 1654287\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":83925,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 80\", baseline, precision 8, 1250x717, components 3","md5":"8e94c159f85bf15a1593a0d7ba1ea520","sha1":"0ac1f8c184b71d4a12ec827d515935789f400271","sha256":"0fdb6703bcfe10fcadfcbf911ac0776bc0fff1c5a027d9a8306cb6fc8b90a960","sha512":"4e24bd7ac7bb42e0418d64608667e882d2feef9e8461b4ee7fcdf94bde24113b999354e1cf3a5b0f093dae2babc6f9fedd0e9920e53cd38ac42a22e384eb55f3","ssdeep":"1536:ICafcMsLexpG/Gb6eVbscN0QYCjcZRZxQSnO7O6yxxxxxSrQsO:JafgeaXKscN0/CjSx7nOfyxxxxIrXO","tlshash":"028327138c0d5382a62c96e4bd470e9c7f592b4ded812aff15624ecb7d106278d8e12f","first_seen":"2026-02-01T07:42:01.686797Z","last_seen":"2026-02-01T07:42:01.686797Z","times_seen":1,"resource_available":false,"data":null}},"time_used":5356,"timings":{"blocked":4723,"dns":0,"connect":0,"send":0,"wait":307,"receive":326,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.xitongtiandi.net/d/file/20210724/e75de6e6d84f5b3abab007c780bd30b3.jpg","fqdn":"img.xitongtiandi.net","domain":"xitongtiandi.net","tld":"net"},"ip":{"addr":"120.52.95.238","port":443,"asn":133119,"as":"China Unicom IP network","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xitongtiandi.net/soft_lt/7017.html","date":"2026-02-01T07:41:21.743Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.xitongtiandi.net","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Fri, 26 Dec 2025 00:00:00 GMT","end":"Thu, 26 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"76:AE:74:5D:DA:22:6F:75:FF:B8:99:47:85:9F:B9:1D:12:D7:B2:E0","sha256":"7E:AA:16:44:B1:24:13:58:14:68:DE:F8:07:07:9D:F6:FF:DB:FE:1B:17:14:79:E9:F9:47:14:8C:63:F0:C7:08"}}},"request":{"raw":"GET /d/file/20210724/e75de6e6d84f5b3abab007c780bd30b3.jpg HTTP/1.1\r\nHost: img.xitongtiandi.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xitongtiandi.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sun, 01 Feb 2026 07:41:27 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 18960\r\nConnection: keep-alive\r\nServer: openresty\r\nCloudServiceDiscount: CDN\r\nx-obs-request-id: 0000019B271C4D219766238C0018D5C9\r\nETag: \"17e520866ae43c6dadc736e801b4efc8\"\r\nLast-Modified: Wed, 30 Oct 2024 03:07:36 GMT\r\nContent-Disposition: attachment\r\nx-obs-id-2: 36AAAQAAEAABAAAQAAEAABAAAQAAEAABAAAaI=AAAAAAAAAAAAAAAAAAAAAAAAAA\r\nX-CCDN-Expires: 1858978\r\nvia: CHN-HElangfang-AREACUCC1-CACHE66[3],CHN-HElangfang-AREACUCC1-CACHE53[0,TCP_HIT,0],CHN-TJ-GLOBAL6-CACHE14[30],CHN-TJ-GLOBAL6-CACHE9[0,TCP_HIT,24]\r\nx-hcs-proxy-type: 1\r\nX-CCDN-CacheTTL: 2592000\r\nnginx-hit: 1\r\nAge: 733037\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":18960,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 80\", baseline, precision 8, 308x282, components 3","md5":"17e520866ae43c6dadc736e801b4efc8","sha1":"1c30e9e554e2c063d7c3b10deb117a6312075667","sha256":"ee5a0a91843b6bdc5e21b7081721e443b92492be21053da3ecebea2db97158bc","sha512":"73bef2e14e6ed80eb4dc1060003fbe926d2ddef557fe98dba1033535b2f0c04096b9cec35db5dfd0780d42b87f9e05819d12c3cc85d6aaf540729a51b5798500","ssdeep":"384:bt690TvDdf7CHkR99qKRNslaPSeRiexPXdsUehMjH2HiZqzrISjq/6Odn:bt690/dzT9qKRAYJlBmMjHizrIOqpdn","tlshash":"e282b01b5ab6ccc07479ca327ec7a28c684d3e45feb4768f541649913b62b243eed40e","first_seen":"2026-02-01T07:42:01.687884Z","last_seen":"2026-02-01T07:42:01.687884Z","times_seen":1,"resource_available":false,"data":null}},"time_used":5484,"timings":{"blocked":5205,"dns":0,"connect":0,"send":0,"wait":275,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"image.xitongtiandi.net/upload/202507/213927-6883890fd88e2.png","fqdn":"image.xitongtiandi.net","domain":"xitongtiandi.net","tld":"net"},"ip":{"addr":"116.153.39.131","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xitongtiandi.net/soft_lt/7017.html","date":"2026-02-01T07:41:21.754Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"image.xitongtiandi.net","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Fri, 26 Dec 2025 00:00:00 GMT","end":"Thu, 26 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"68:45:42:1A:66:A6:87:1B:03:DE:5B:E1:65:05:9A:BC:74:13:56:8C","sha256":"CD:0E:7D:D7:D9:AE:12:8F:B5:76:68:8F:82:80:8E:28:F2:30:73:19:10:FF:CE:F4:29:DC:D0:CD:5D:16:AB:2E"}}},"request":{"raw":"GET /upload/202507/213927-6883890fd88e2.png HTTP/1.1\r\nHost: image.xitongtiandi.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xitongtiandi.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sun, 01 Feb 2026 07:41:26 GMT\r\nContent-Type: image/png\r\nContent-Length: 6800\r\nConnection: keep-alive\r\nServer: openresty\r\nCloudServiceDiscount: CDN\r\nx-obs-request-id: 00000198AD32843A9056861E6161B040\r\nETag: \"b2d133b0ee53d28b45775b362a1df4cf\"\r\nLast-Modified: Fri, 25 Jul 2025 13:39:27 GMT\r\nx-obs-id-2: 36AAAQAAEAABAAAQAAEAABAAAQAAEAABAAAaI=AAAAAAAAAAAAAAAAAAAAAAAAAA\r\nX-CCDN-Expires: 2055460\r\nvia: CHN-JXnanchang-AREACUCC1-CACHE20[4],CHN-JXnanchang-AREACUCC1-CACHE34[0,TCP_HIT,0],CHN-JSwuxi-GLOBAL2-CACHE70[18],CHN-JSwuxi-GLOBAL2-CACHE112[0,TCP_HIT,16]\r\nx-hcs-proxy-type: 1\r\nX-CCDN-CacheTTL: 2592000\r\nnginx-hit: 1\r\nAge: 536553\r\nAccept-Ranges: bytes\r\nContent-Disposition: inline\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6800,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 125 x 125, 8-bit/color RGBA, non-interlaced","md5":"b2d133b0ee53d28b45775b362a1df4cf","sha1":"b94acfc74a89e82cc765cd44010c5552b40c413b","sha256":"b9d07864b67e038c92c6739f96f446f816424b14462f22d7d6a7933a22d74ed6","sha512":"c2932298ab485dcd5fe5f3998b9ae1804222b0de38e1a7c2557998c9fca38603035a969c6473115c2f7b11175da0e34ca55954120f9097fb808e3866c2105dbc","ssdeep":"192:ahay1L6QmAf8r4oiUxniqXoyxOwwtYcI/F1/KJUnmkz:ahjMQor4oiVyExtYhtNSi","tlshash":"c0e17b206c8d3aa239fb2da5dcbf5942f9ab2098fb59d7448215c0940eb9b30097f46d","first_seen":"2026-02-01T07:42:01.688905Z","last_seen":"2026-02-01T07:42:01.688905Z","times_seen":1,"resource_available":false,"data":null}},"time_used":4722,"timings":{"blocked":4433,"dns":0,"connect":0,"send":0,"wait":288,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"res.xitongtiandi.net/xttd/js/public.js?2026020107","fqdn":"res.xitongtiandi.net","domain":"xitongtiandi.net","tld":"net"},"ip":{"addr":"121.22.232.168","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xitongtiandi.net/soft_lt/7017.html","date":"2026-02-01T07:41:21.720Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"res.xitongtiandi.net","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Fri, 26 Dec 2025 00:00:00 GMT","end":"Thu, 26 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"1F:66:E3:A4:D8:97:BC:27:31:E3:7E:C0:E9:87:F8:8A:BD:5F:78:50","sha256":"9B:66:75:12:D8:16:0B:05:6B:AE:85:41:94:BC:0E:10:20:C6:42:E3:74:BA:E9:1E:EB:1B:6F:DA:FC:A1:3F:1B"}}},"request":{"raw":"GET /xttd/js/public.js?2026020107 HTTP/1.1\r\nHost: res.xitongtiandi.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xitongtiandi.net/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sun, 01 Feb 2026 07:41:24 GMT\r\nContent-Type: text/javascript\r\nContent-Length: 3984\r\nConnection: keep-alive\r\nServer: openresty\r\nx-reserved: amazon, aws and amazon web services are trademarks or registered trademarks of Amazon Technologies, Inc\r\nCloudServiceDiscount: CDN\r\nx-amz-request-id: 0000019C1800D7FE97688BC587304B58\r\nETag: \"015d02798e8adb56a3e38d337e238480\"\r\nLast-Modified: Thu, 31 Jul 2025 10:20:37 GMT\r\nx-amz-id-2: 36AAAQAAEAABAAAQAAEAABAAAQAAEAABAAAaI=AAAAAAAAAAAAAAAAAAAAAAAAAA\r\nX-CCDN-Expires: 2590733\r\nvia: CHN-HEqinhuangdao-AREACUCC1-CACHE12[3],CHN-HEqinhuangdao-AREACUCC1-CACHE11[0,TCP_HIT,2],CHN-TJ-GLOBAL6-CACHE133[8],CHN-TJ-GLOBAL6-CACHE63[0,TCP_HIT,0]\r\nx-hcs-proxy-type: 1\r\nX-CCDN-CacheTTL: 2592000\r\nnginx-hit: 1\r\nAge: 1267\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3984,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with CRLF line terminators","md5":"015d02798e8adb56a3e38d337e238480","sha1":"f409d7d40642d4fd673dbdc46c6522e99a30e939","sha256":"50b904ded33036e78acc57f101a608b16e5c6c148b3d50e9f6a14d8ea861ebc0","sha512":"e320c97607c35a83a47fa6a4d73f1dc1de86d4e01ca3521803d6bbc4c9a9023c4850ac1098a3f3319a1b503a4e759d49e85d72af40e3c9bed81c043c1b017383","ssdeep":"","tlshash":"4181c958b254169110bf737b9b2fe195ee19810bc1a18601f92eada00fb01a87737f8f","first_seen":"2026-02-01T07:42:01.690319Z","last_seen":"2026-02-01T07:42:01.690319Z","times_seen":1,"resource_available":true,"data":null}},"time_used":5479,"timings":{"blocked":2599,"dns":1955,"connect":260,"send":0,"wait":264,"receive":0,"ssl":399},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.xitongtiandi.net/d/file/20210724/86953c9f10d05e5202aad57b8a0b2883.jpg","fqdn":"img.xitongtiandi.net","domain":"xitongtiandi.net","tld":"net"},"ip":{"addr":"120.52.95.238","port":443,"asn":133119,"as":"China Unicom IP network","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xitongtiandi.net/soft_lt/7017.html","date":"2026-02-01T07:41:21.730Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.xitongtiandi.net","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Fri, 26 Dec 2025 00:00:00 GMT","end":"Thu, 26 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"76:AE:74:5D:DA:22:6F:75:FF:B8:99:47:85:9F:B9:1D:12:D7:B2:E0","sha256":"7E:AA:16:44:B1:24:13:58:14:68:DE:F8:07:07:9D:F6:FF:DB:FE:1B:17:14:79:E9:F9:47:14:8C:63:F0:C7:08"}}},"request":{"raw":"GET /d/file/20210724/86953c9f10d05e5202aad57b8a0b2883.jpg HTTP/1.1\r\nHost: img.xitongtiandi.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xitongtiandi.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sun, 01 Feb 2026 07:41:26 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 37840\r\nConnection: keep-alive\r\nServer: openresty\r\nCloudServiceDiscount: CDN\r\nx-obs-request-id: 000001936653CAB69058C29DEFEBC060\r\nETag: \"a90ebd9c7723d7c4a4ff9eaea5660d1a\"\r\nLast-Modified: Wed, 30 Oct 2024 03:07:29 GMT\r\nContent-Disposition: attachment\r\nx-obs-id-2: 32AAAQAAEAABAAAQAAEAABAAAQAAEAABCSAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA\r\nX-CCDN-Expires: 2153618\r\nvia: CHN-HElangfang-AREACUCC1-CACHE2[18],CHN-HElangfang-AREACUCC1-CACHE55[0,TCP_HIT,0],CHN-HElangfang-GLOBAL6-CACHE32[6],CHN-HElangfang-GLOBAL6-CACHE138[0,TCP_HIT,5]\r\nx-hcs-proxy-type: 1\r\nX-CCDN-CacheTTL: 2592000\r\nnginx-hit: 1\r\nAge: 438396\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":37840,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1, software=www.meitu.com], baseline, precision 8, 240x240, components 3","md5":"a90ebd9c7723d7c4a4ff9eaea5660d1a","sha1":"f019fc214833ac6cb858adb748325221ebaa9d79","sha256":"5abe7bd70cf18267db899e4e88d20b7ebafdc12bac35338509fdb214ce9f9506","sha512":"96c4096eafe3e6a923ffb85895a672b3de4ffbb8cbdd5524c1f6ef5c5a0d9f8d12f89f6dbba35f10222f88230deab5a00525fd6c1066372b4c8e67fa4b752dc9","ssdeep":"768:rMZjXdbLF6DqQfjOso1MtLDwzu/5K4OqbFUGO9eVs+rf8ofA5:rMJtnF6DqQfak3BFVFnWYsIY","tlshash":"5c03d1746382b7138a5bdb5ea03c2db371f1cdc89ac965903953ec16fca8e6914618bc","first_seen":"2026-02-01T07:42:01.691485Z","last_seen":"2026-02-01T07:42:01.691485Z","times_seen":1,"resource_available":false,"data":null}},"time_used":5358,"timings":{"blocked":4727,"dns":0,"connect":0,"send":0,"wait":447,"receive":184,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.xitongtiandi.net/d/file/20210724/b29c827ebe3850e484db3669b7045a46.png","fqdn":"img.xitongtiandi.net","domain":"xitongtiandi.net","tld":"net"},"ip":{"addr":"120.52.95.238","port":443,"asn":133119,"as":"China Unicom IP network","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xitongtiandi.net/soft_lt/7017.html","date":"2026-02-01T07:41:21.744Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.xitongtiandi.net","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Fri, 26 Dec 2025 00:00:00 GMT","end":"Thu, 26 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"76:AE:74:5D:DA:22:6F:75:FF:B8:99:47:85:9F:B9:1D:12:D7:B2:E0","sha256":"7E:AA:16:44:B1:24:13:58:14:68:DE:F8:07:07:9D:F6:FF:DB:FE:1B:17:14:79:E9:F9:47:14:8C:63:F0:C7:08"}}},"request":{"raw":"GET /d/file/20210724/b29c827ebe3850e484db3669b7045a46.png HTTP/1.1\r\nHost: img.xitongtiandi.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xitongtiandi.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sun, 01 Feb 2026 07:41:27 GMT\r\nContent-Type: image/png\r\nContent-Length: 57796\r\nConnection: keep-alive\r\nServer: openresty\r\nCloudServiceDiscount: CDN\r\nx-obs-request-id: 00000199CE9942EB9058DA0326DC8BBF\r\nETag: \"c1dcbaf51530cec3851c0a2137d6dca5\"\r\nLast-Modified: Wed, 30 Oct 2024 03:07:32 GMT\r\nContent-Disposition: attachment\r\nx-obs-id-2: 36AAAQAAEAABAAAQAAEAABAAAQAAEAABAAAaI=AAAAAAAAAAAAAAAAAAAAAAAAAA\r\nX-CCDN-Expires: 2452548\r\nvia: CHN-HElangfang-AREACUCC1-CACHE57[4],CHN-HElangfang-AREACUCC1-CACHE58[0,TCP_HIT,0],CHN-TJ-GLOBAL6-CACHE149[36],CHN-TJ-GLOBAL6-CACHE37[0,TCP_HIT,33]\r\nx-hcs-proxy-type: 1\r\nX-CCDN-CacheTTL: 2592000\r\nnginx-hit: 1\r\nAge: 139466\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":57796,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 351 x 273, 8-bit/color RGB, non-interlaced","md5":"c1dcbaf51530cec3851c0a2137d6dca5","sha1":"dab5f8c3b68964fe41cd85bd9724117a2bef4f69","sha256":"6ef3a22526af200109de24b1fe107e99474cc6e09efaa7a841cfb9356b839cea","sha512":"959cdbdcc7804a355f86d0ee7e6fa10a39b06a0e37c98bdf6a1190febb4697e7782c8d3a080d4eee9990a19cc891c30c1b8e8c7023e935e725c6e32bdc600e4f","ssdeep":"1536:qDFGvwMcsFYjxFVna7AaGtKNYRiuAIlfVAiYjB:fIFA4t3KIzAiYjB","tlshash":"ce43023d40ec993818dec259f6a886dc8e83fae72c0276e7d35757c1e4402e9d1a9f60","first_seen":"2026-02-01T07:42:01.692885Z","last_seen":"2026-02-01T07:42:01.692885Z","times_seen":1,"resource_available":false,"data":null}},"time_used":6002,"timings":{"blocked":5244,"dns":0,"connect":0,"send":0,"wait":419,"receive":339,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"image.xitongtiandi.net/upload/202507/161520-68833d188da13.jpg","fqdn":"image.xitongtiandi.net","domain":"xitongtiandi.net","tld":"net"},"ip":{"addr":"116.153.39.131","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xitongtiandi.net/soft_lt/7017.html","date":"2026-02-01T07:41:21.747Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"image.xitongtiandi.net","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Fri, 26 Dec 2025 00:00:00 GMT","end":"Thu, 26 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"68:45:42:1A:66:A6:87:1B:03:DE:5B:E1:65:05:9A:BC:74:13:56:8C","sha256":"CD:0E:7D:D7:D9:AE:12:8F:B5:76:68:8F:82:80:8E:28:F2:30:73:19:10:FF:CE:F4:29:DC:D0:CD:5D:16:AB:2E"}}},"request":{"raw":"GET /upload/202507/161520-68833d188da13.jpg HTTP/1.1\r\nHost: image.xitongtiandi.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xitongtiandi.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sun, 01 Feb 2026 07:41:26 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 5289\r\nConnection: keep-alive\r\nServer: openresty\r\nCloudServiceDiscount: CDN\r\nx-obs-request-id: 00000199E098D81697676EFCA01D6B24\r\nETag: \"63836cb4ed3e33050a1a315d2f05cb74\"\r\nLast-Modified: Fri, 25 Jul 2025 08:15:20 GMT\r\nx-obs-id-2: 36AAAQAAEAABAAAQAAEAABAAAQAAEAABAAAaI=AAAAAAAAAAAAAAAAAAAAAAAAAA\r\nX-CCDN-Expires: 1715565\r\nvia: CHN-JXnanchang-AREACUCC1-CACHE43[2],CHN-JXnanchang-AREACUCC1-CACHE38[0,TCP_HIT,0],CHN-JSwuxi-GLOBAL2-CACHE35[5],CHN-JSwuxi-GLOBAL2-CACHE90[0,TCP_HIT,3]\r\nx-hcs-proxy-type: 1\r\nX-CCDN-CacheTTL: 2592000\r\nnginx-hit: 1\r\nAge: 876448\r\nAccept-Ranges: bytes\r\nContent-Disposition: inline\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":5289,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 80x80, components 3","md5":"63836cb4ed3e33050a1a315d2f05cb74","sha1":"139ee6bb8072fac92a56a79d3cb2157ba9213a8e","sha256":"2f56e928cdfa9b51bd91e51987ecb3b9e2058b83e5a29bf864a21f029c58f68d","sha512":"05d9b503e116c5dbd4602019b60df45f606f99f9e8434f018961e6cdcf3f16248435ad1b8b0ade02236e21702101d8c54dd464eaa7617bdbc25b8b180d6113e4","ssdeep":"96:CMEVW1HiOimM0+lojaDZeYoT7Kt8kRUAs:/g0PimP+lVDgYc29w","tlshash":"fcb18c2bed932174f60c8ca5a05f0c57f1ae8e735974dee51a21a4b3fb58d47422228a","first_seen":"2026-02-01T07:42:01.693978Z","last_seen":"2026-02-01T07:42:01.693978Z","times_seen":1,"resource_available":false,"data":null}},"time_used":4646,"timings":{"blocked":4366,"dns":0,"connect":0,"send":0,"wait":280,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"res.njxzwh.com/downza/pc/v2023/images/xiazai-2.png","fqdn":"res.njxzwh.com","domain":"njxzwh.com","tld":"com"},"ip":{"addr":"113.240.117.108","port":443,"asn":63835,"as":"No.293,Wanbao Avenue","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xitongtiandi.net/soft_lt/7017.html","date":"2026-02-01T07:41:25.160Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"res.njxzwh.com","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Sun, 04 Jan 2026 00:00:00 GMT","end":"Sat, 04 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"CD:91:C8:DC:75:28:A2:68:09:8B:A1:E3:80:02:F5:FA:FD:F0:C2:E6","sha256":"4D:AF:FF:F9:76:6E:B8:BD:6E:50:11:7E:3A:D1:3E:70:7D:9D:6B:2E:56:2C:34:46:80:3E:A1:C8:01:14:CB:61"}}},"request":{"raw":"GET /downza/pc/v2023/images/xiazai-2.png HTTP/1.1\r\nHost: res.njxzwh.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xitongtiandi.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sun, 01 Feb 2026 07:41:28 GMT\r\nContent-Type: image/png\r\nContent-Length: 2992\r\nConnection: keep-alive\r\nServer: openresty\r\nx-reserved: amazon, aws and amazon web services are trademarks or registered trademarks of Amazon Technologies, Inc\r\nCloudServiceDiscount: CDN\r\nx-amz-request-id: 0000019A347EB6D997A9F13A67CEF6B3\r\nETag: \"c31c63fb6529b7b36420650927449ea0\"\r\nLast-Modified: Thu, 30 Oct 2025 09:32:43 GMT\r\nx-amz-id-2: 36AAAQAAEAABAAAQAAEAABAAAQAAEAABAAAaI=AAAAAAAAAAAAAAAAAAAAAAAAAA\r\nX-CCDN-Expires: 2255646\r\nvia: CHN-HNchangsha-AREACT1-CACHE25[3],CHN-HNchangsha-AREACT1-CACHE69[0,TCP_HIT,0],CHN-JSwuxi-GLOBAL2-CACHE68[6],CHN-JSwuxi-GLOBAL2-CACHE101[0,TCP_HIT,2]\r\nx-hcs-proxy-type: 1\r\nX-CCDN-CacheTTL: 2592000\r\nnginx-hit: 1\r\nAge: 336385\r\nAccept-Ranges: bytes\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: OPTION,GET\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":2992,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 200 x 200, 8-bit/color RGBA, non-interlaced","md5":"c31c63fb6529b7b36420650927449ea0","sha1":"ede917a301f6c7ce67dbf87334fb7d328d5c54e7","sha256":"72062c5ca533c72716ce62df17ccfdc1ce55c0b8ac62a974cfd0377daaccccc3","sha512":"5e67e88fea4b09b35e740a8c23c671bbec564d78bcad510c707f95bb38b1ce924cac4b5fc0572c8a95c2dd86789f3a13bfda425e3df333f3c0ba0eec3af2d969","ssdeep":"","tlshash":"9f5176c324c59ab909adf1da09c7c746e51692af1b545c0f9a600a3be431ff9f406ec1","first_seen":"2025-06-15T16:39:48.167451Z","last_seen":"2026-06-02T12:23:57.00531Z","times_seen":92,"resource_available":false,"data":null}},"time_used":3421,"timings":{"blocked":104,"dns":2391,"connect":284,"send":0,"wait":289,"receive":0,"ssl":353},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wn.pos.baidu.com/adx.php?c=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","fqdn":"wn.pos.baidu.com","domain":"baidu.com","tld":"com"},"ip":{"addr":"182.61.200.11","port":443,"asn":38365,"as":"Beijing Baidu Netcom Science and Technology Co., Ltd.","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://pos.baidu.com/scvm?conwid=370\u0026conhei=180\u0026rdid=7002770\u0026dc=3\u0026di=u7002770\u0026s1=4034329033\u0026s2=2872728590\u0026dri=0\u0026dis=0\u0026dai=1\u0026ps=3402x60\u0026enu=encoding\u0026exps=110277,110275,110261,110252,110011\u0026ant=0\u0026psi=1da7a967d3738233\u0026dcb=___adblockplus_\u0026dtm=HTML_POST\u0026dvi=0.0\u0026dci=-1\u0026dpt=none\u0026tpr=1769931685223\u0026ti=%E6%96%B9%E6%AD%A3%E5%B0%8F%E6%A0%87%E5%AE%8B%E7%AE%80%E4%BD%93%E5%AD%97%E4%BD%93%E5%85%8D%E8%B4%B9%E4%B8%8B%E8%BD%BD%EF%BD%9C%E9%99%84%E6%96%B9%E6%AD%A3%E5%B0%8F%E6%A0%87%E5%AE%8B%E7%AE%80%E4%BD%93%E5%AE%89%E8%A3%85%E4%BD%BF%E7%94%A8%E6%95%99%E7%A8%8B--%E7%B3%BB%E7%BB%9F%E4%B9%8B%E5%AE%B6\u0026ari=2\u0026ver=0620\u0026vc=%E6%99%AE%E9%80%9A%E4%B8%8B%E8%BD%BD%E5%9C%B0%E5%9D%80\u0026kws=%E6%96%B9%E6%AD%A3%E5%B0%8F%E6%A0%87%E5%AE%8B%E7%AE%80%E4%BD%93%E5%AD%97%E4%BD%93%2C%E6%96%B9%E6%AD%A3%E5%B0%8F%E6%A0%87%E5%AE%8B%E7%AE%80%E4%BD%93ttf%2C%E6%96%B9%E6%AD%A3%E5%B0%8F%E6%A0%87%E5%AE%8B%E7%AE%80%E4%BD%93%E5%AE%89%E8%A3%85\u0026dps=%E6%96%B9%E6%AD%A3%E5%B0%8F%E6%A0%87%E5%AE%8B%E7%AE%80%E4%BD%93%E5%AD%97%E4%BD%93%E3%80%82%E8%AF%A5%E5%AD%97%E4%BD%93%E9%9D%9E%E5%B8%B8%E7%BE%8E%E8%A7%82%EF%BC%8C%E9%80%82%E5%90%88%E5%9C%A8%E6%AD%A3%E5%BC%8F%E7%9A%84%E5%9C%BA%E5%90%88%E6%9D%A5%E8%BF%9B%E8%A1%8C%E4%BD%BF%E7%94%A8%EF%BC%8C%E6%AF%94%E5%A6%82%E7%94%A8%E4%BA%8E%E6%8A%95%E5%BD%B1%E6%BC%94%E7%A4%BA%EF%BC%8C%E6%89%93%E5%8D%B0%E5%90%88%E5%90%8C%E6%96%87%E6%9C%AC%EF%BC%8C%E8%AF%B4%E6%98%8E%E6%96%87%E6%9C%AC%E7%AD%89%E3%80%82%E6%9C%AC%E7%AB%99%E6%8F%90%E4%BE%9B%E6%96%B9%E6%AD%A3\u0026dbv=0\u0026drs=3\u0026pcs=1280x1024\u0026pss=1280x3801\u0026cfv=0\u0026cpl=5\u0026chi=2\u0026cce=true\u0026cec=UTF-8\u0026tlm=1769931685\u0026prot=2\u0026rw=1024\u0026ltu=https%3A%2F%2Fxitongtiandi.net%2Fsoft_lt%2F7017.html\u0026ecd=1\u0026dft=0\u0026uc=1280x1024\u0026pis=-1x-1\u0026sr=1280x1024\u0026tcn=1769931685\u0026qn=5fd469c31b5c2809\u0026ft=1","date":"2026-02-01T07:41:27.051Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"baidu.com","organization":"Beijing Baidu Netcom Science Technology Co., Ltd"},"issuer":{"commonName":"GlobalSign RSA OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 09 Jul 2025 07:01:02 GMT","end":"Mon, 10 Aug 2026 07:01:01 GMT"},"fingerprint":{"sha1":"21:BF:66:0D:67:BE:7A:7F:49:48:05:30:F4:7F:09:F2:30:36:CA:63","sha256":"0D:82:2C:9A:90:5A:EF:E9:8F:37:12:C0:E0:26:30:EE:95:33:2C:45:5F:E7:74:5D:F0:8D:BC:79:F4:B0:A1:49"}}},"request":{"raw":"GET /adx.php?c=d25pZD0xNzgzMzkyMmFiYmM0NTkwAHM9MTc4MzM5MjJhYmJjNDU5MAB0PTE3Njk5MzE2ODYAc2U9MQBidT00AHByaWNlPWFYOERwZ0FMT0d4N2pFcGdXNUlBOHY1YjVCUl9LNnQtVkNYR1BRAGNoYXJnZV9wcmljZT0zAHNoYXJpbmdfcHJpY2U9MzAwMAB3aW5fZHNwPTQAY2htZD0xAGJkaWQ9AGNwcm9pZD0Ad2Q9NzM2NTc3NzE4AHR1PXU3MDAyNzcwAGFkY2xhc3M9MABzcmN0PTAAcG9zPTAAbG9jPTUAZWlkPTAAY2JpZD1hWDhEcGdBTE9HeDdqRXBnVzVJQTh2NWI1QlJfSzZ0LVZDWEdQUQBleHBpZD0wAGV4cGlkX3YyPTAAYWRjcG1fcmF0aW89MS4wMDAwMDAAcGRfbWluY3BtPTAAc3M9AHVpZD0wAGRldmk9Y2U4Y2NiYjY1YTljZmVjZgBtZWRnPQBkYV90eXBlPTIAYmlkX3R5cGU9MABtY2x2PTAAcmNsPTAAYWNiX3Rocj0wAHRfZWNwbT0wAHB2X3R5cGU9MwBhZF9zcmM9MQBsdV9vcmlfY3BtPTAAdW5pb25fY3BtPTAAdHNfbXM9MTc2OTkzMTY4NjAwMABpcD05MS45MC40Mi4xNTQAY3VpZD0AcGxhY2VpZD0xNTMyNjkwMDA3NzM4AHF1aWNrYXBwX3RjdHI9MABwa2c9AGJjaG1kPTAAdG09Mjc1Nzk0OTQyAHRyYW5zX3R5cGU9MAB2PTEAaT1hOGVmYzZkMw HTTP/1.1\r\nHost: wn.pos.baidu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pos.baidu.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nConnection: keep-alive\r\nContent-Length: 49\r\nContent-Type: image/gif\r\nDate: Sun, 01 Feb 2026 07:41:28 GMT\r\nExpires: Mon, 26 Jul 1997 05:00:00 GMT\r\nP3p: CP=\" OTI DSP COR IVA OUR IND COM \"\r\nServer: nginx\r\nSet-Cookie: BAIDUID=6BAC8716DE29F57758546A1312890656:FG=1; expires=Mon, 01-Feb-27 07:41:28 GMT; max-age=31536000; path=/; domain=.baidu.com; version=1\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":49,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"ed280a0ea3cc38f3cbbc747acfbef47d","sha1":"6bdcb32ee75e957a5085c010f4dfd0c716bfdadc","sha256":"8f69e10876805b747a3ad08a818d46ac7e731b1af417ea6e259d9b6b7deb65c5","sha512":"4248e293bb759c3ac0ea71f545e10e85d0c3c7f1237ce8b18c6a3fd00499a11bdc0252c938be87359fa673c8e7a83c7cc6fc5d12718a68844c2615e5dca3527b","ssdeep":"","tlshash":"78900247b580c001c551c0301c0493541290a9604905134f6498336d9d761a10811404","first_seen":"2023-04-05T11:17:29Z","last_seen":"2026-06-02T15:54:30.5126Z","times_seen":3788,"resource_available":true,"data":null}},"time_used":2422,"timings":{"blocked":722,"dns":1,"connect":240,"send":0,"wait":973,"receive":0,"ssl":481},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lupic.cdn.bcebos.com/20210629/2004944460_14.jpg","fqdn":"lupic.cdn.bcebos.com","domain":"bcebos.com","tld":"com"},"ip":{"addr":"111.225.213.35","port":443,"asn":58539,"as":"China Telecom","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://pos.baidu.com/scvm?conwid=370\u0026conhei=180\u0026rdid=7002770\u0026dc=3\u0026di=u7002770\u0026s1=4034329033\u0026s2=2872728590\u0026dri=0\u0026dis=0\u0026dai=1\u0026ps=3402x60\u0026enu=encoding\u0026exps=110277,110275,110261,110252,110011\u0026ant=0\u0026psi=1da7a967d3738233\u0026dcb=___adblockplus_\u0026dtm=HTML_POST\u0026dvi=0.0\u0026dci=-1\u0026dpt=none\u0026tpr=1769931685223\u0026ti=%E6%96%B9%E6%AD%A3%E5%B0%8F%E6%A0%87%E5%AE%8B%E7%AE%80%E4%BD%93%E5%AD%97%E4%BD%93%E5%85%8D%E8%B4%B9%E4%B8%8B%E8%BD%BD%EF%BD%9C%E9%99%84%E6%96%B9%E6%AD%A3%E5%B0%8F%E6%A0%87%E5%AE%8B%E7%AE%80%E4%BD%93%E5%AE%89%E8%A3%85%E4%BD%BF%E7%94%A8%E6%95%99%E7%A8%8B--%E7%B3%BB%E7%BB%9F%E4%B9%8B%E5%AE%B6\u0026ari=2\u0026ver=0620\u0026vc=%E6%99%AE%E9%80%9A%E4%B8%8B%E8%BD%BD%E5%9C%B0%E5%9D%80\u0026kws=%E6%96%B9%E6%AD%A3%E5%B0%8F%E6%A0%87%E5%AE%8B%E7%AE%80%E4%BD%93%E5%AD%97%E4%BD%93%2C%E6%96%B9%E6%AD%A3%E5%B0%8F%E6%A0%87%E5%AE%8B%E7%AE%80%E4%BD%93ttf%2C%E6%96%B9%E6%AD%A3%E5%B0%8F%E6%A0%87%E5%AE%8B%E7%AE%80%E4%BD%93%E5%AE%89%E8%A3%85\u0026dps=%E6%96%B9%E6%AD%A3%E5%B0%8F%E6%A0%87%E5%AE%8B%E7%AE%80%E4%BD%93%E5%AD%97%E4%BD%93%E3%80%82%E8%AF%A5%E5%AD%97%E4%BD%93%E9%9D%9E%E5%B8%B8%E7%BE%8E%E8%A7%82%EF%BC%8C%E9%80%82%E5%90%88%E5%9C%A8%E6%AD%A3%E5%BC%8F%E7%9A%84%E5%9C%BA%E5%90%88%E6%9D%A5%E8%BF%9B%E8%A1%8C%E4%BD%BF%E7%94%A8%EF%BC%8C%E6%AF%94%E5%A6%82%E7%94%A8%E4%BA%8E%E6%8A%95%E5%BD%B1%E6%BC%94%E7%A4%BA%EF%BC%8C%E6%89%93%E5%8D%B0%E5%90%88%E5%90%8C%E6%96%87%E6%9C%AC%EF%BC%8C%E8%AF%B4%E6%98%8E%E6%96%87%E6%9C%AC%E7%AD%89%E3%80%82%E6%9C%AC%E7%AB%99%E6%8F%90%E4%BE%9B%E6%96%B9%E6%AD%A3\u0026dbv=0\u0026drs=3\u0026pcs=1280x1024\u0026pss=1280x3801\u0026cfv=0\u0026cpl=5\u0026chi=2\u0026cce=true\u0026cec=UTF-8\u0026tlm=1769931685\u0026prot=2\u0026rw=1024\u0026ltu=https%3A%2F%2Fxitongtiandi.net%2Fsoft_lt%2F7017.html\u0026ecd=1\u0026dft=0\u0026uc=1280x1024\u0026pis=-1x-1\u0026sr=1280x1024\u0026tcn=1769931685\u0026qn=5fd469c31b5c2809\u0026ft=1","date":"2026-02-01T07:41:27.382Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.a.bdydns.com","organization":"北京百度网讯科技有限公司"},"issuer":{"commonName":"sslTrus (RSA) OV CA","organization":"sslTrus"},"validity":{"start":"Fri, 07 Mar 2025 00:00:00 GMT","end":"Sat, 07 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"B0:A6:2D:34:BD:DD:55:41:21:71:78:8B:43:8A:7A:51:22:5C:31:C9","sha256":"10:61:DB:D4:46:80:6A:CD:63:18:ED:40:2F:F0:02:9E:CD:37:4C:88:54:E6:A9:CF:03:50:63:B3:B1:23:63:11"}}},"request":{"raw":"GET /20210629/2004944460_14.jpg HTTP/1.1\r\nHost: lupic.cdn.bcebos.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pos.baidu.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 01 Feb 2026 07:41:30 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 4370\r\nexpires: Sun, 01 Feb 2026 11:33:55 GMT\r\nlast-modified: Wed, 30 Jun 2021 16:55:25 GMT\r\netag: \"c1dd26a6a05e9a3940aeae7b0cc2ade1\"\r\nage: 244847\r\naccept-ranges: bytes\r\ncontent-md5: wd0mpqBemjlArq57DMKt4Q==\r\nx-bce-content-crc32: 0\r\nx-bce-content-crc32c: 0\r\nx-bce-debug-id: Ju9yMoUrV3a6ugpj4W+bN+goJzjCuo1dE7MrW6KFPLvWbz8mWLYKbbmW57gsMfHET++RQ8hj/4/9Vknypctz9w==\r\nx-bce-flow-control-type: -1\r\nx-bce-is-transition: false\r\nx-bce-request-id: bdfbba7d-2d41-458b-ae87-0291795966ef\r\nx-bce-storage-class: STANDARD\r\nohc-global-saved-time: Thu, 29 Jan 2026 11:33:55 GMT\r\nohc-cache-hit: lf6ct95 [2], wzix95 [4]\r\nohc-file-size: 4370\r\nx-cache-status: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4370,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 1x1, segment length 16, baseline, precision 8, 280x200, components 3","md5":"c1dd26a6a05e9a3940aeae7b0cc2ade1","sha1":"fdc95fd91cc268458f7e6b80265701327c89320a","sha256":"89c25dc3bd769b354beb033aac564e452919b3e0a84af07edfd3e1137c3bca75","sha512":"703853472964055acba51a0ef23be644141b968479b76e741d09084c13e6d8a573f77262f5f86438b00d8613733c72ee424e5aa0c6b075f0b44ea490f074158f","ssdeep":"96:ohVLj2ikMwK/pWf1DdmV7RTaTfhcbArDCUhDlIzCYWGIEcOOhYiyNsu:O9nNpWdCRTqibArRYZvcOOhnw/","tlshash":"f5916d36fa436a54f7fd60b8f397aa26c776961cfd668bb4e75040865008c31c7b046c","first_seen":"2026-02-01T07:42:01.697486Z","last_seen":"2026-02-01T07:42:01.697486Z","times_seen":1,"resource_available":false,"data":null}},"time_used":5459,"timings":{"blocked":2404,"dns":1646,"connect":287,"send":0,"wait":647,"receive":1,"ssl":470},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"res.xitongtiandi.net/xttd/js/jquery-1.8.3.min.js","fqdn":"res.xitongtiandi.net","domain":"xitongtiandi.net","tld":"net"},"ip":{"addr":"121.22.232.168","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xitongtiandi.net/soft_lt/7017.html","date":"2026-02-01T07:41:21.719Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"res.xitongtiandi.net","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Fri, 26 Dec 2025 00:00:00 GMT","end":"Thu, 26 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"1F:66:E3:A4:D8:97:BC:27:31:E3:7E:C0:E9:87:F8:8A:BD:5F:78:50","sha256":"9B:66:75:12:D8:16:0B:05:6B:AE:85:41:94:BC:0E:10:20:C6:42:E3:74:BA:E9:1E:EB:1B:6F:DA:FC:A1:3F:1B"}}},"request":{"raw":"GET /xttd/js/jquery-1.8.3.min.js HTTP/1.1\r\nHost: res.xitongtiandi.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xitongtiandi.net/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sun, 01 Feb 2026 07:41:24 GMT\r\nContent-Type: text/javascript\r\nContent-Length: 93637\r\nConnection: keep-alive\r\nServer: openresty\r\nx-reserved: amazon, aws and amazon web services are trademarks or registered trademarks of Amazon Technologies, Inc\r\nCloudServiceDiscount: CDN\r\nx-amz-request-id: 0000019BE5F3710897C9991784CF2C7E\r\nETag: \"e1288116312e4728f98923c79b034b67\"\r\nLast-Modified: Thu, 31 Jul 2025 10:20:37 GMT\r\nx-amz-id-2: 36AAAQAAEAABAAAQAAEAABAAAQAAEAABAAAaI=AAAAAAAAAAAAAAAAAAAAAAAAAA\r\nX-CCDN-Expires: 2009796\r\nvia: CHN-HEqinhuangdao-AREACUCC1-CACHE20[11],CHN-HEqinhuangdao-AREACUCC1-CACHE2[0,TCP_HIT,10],CHN-TJ-GLOBAL6-CACHE63[38],CHN-TJ-GLOBAL6-CACHE84[0,TCP_HIT,35]\r\nx-hcs-proxy-type: 1\r\nX-CCDN-CacheTTL: 2592000\r\nnginx-hit: 1\r\nAge: 582204\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":93637,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65482), with CRLF line terminators","md5":"e1288116312e4728f98923c79b034b67","sha1":"8b6babff47b8a9793f37036fd1b1a3ad41d38423","sha256":"ba6eda7945ab8d7e57b34cc5a3dd292fa2e4c60a5ced79236ecf1a9e0f0c2d32","sha512":"bf28a9a446e50639a9592d7651f89511fc4e583e213f20a0dff3a44e1a7d73ceefdb6597db121c7742bde92410a27d83d92e2e86466858a19803e72a168e5656","ssdeep":"1536:96IzxETpavYSGaW4snuHEk/yosnSFngC/VEEG0vd0KO4emAp2LSEMBoviR+I1z5T:v+vIklosn/BLXjxzMhsSQ","tlshash":"f793f8ed73c6717243ab30ae40af610ef1365869280d8410f129e8f9bc79a499277f7d","first_seen":"2023-03-07T01:02:21Z","last_seen":"2026-06-02T16:10:32.708402Z","times_seen":21534,"resource_available":true,"data":null}},"time_used":5971,"timings":{"blocked":2599,"dns":1956,"connect":220,"send":0,"wait":293,"receive":463,"ssl":437},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.xitongtiandi.net/d/file/20210724/bda1f21d66af942c77b1ae1912caaedd.png","fqdn":"img.xitongtiandi.net","domain":"xitongtiandi.net","tld":"net"},"ip":{"addr":"120.52.95.238","port":443,"asn":133119,"as":"China Unicom IP network","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xitongtiandi.net/soft_lt/7017.html","date":"2026-02-01T07:41:21.738Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.xitongtiandi.net","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Fri, 26 Dec 2025 00:00:00 GMT","end":"Thu, 26 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"76:AE:74:5D:DA:22:6F:75:FF:B8:99:47:85:9F:B9:1D:12:D7:B2:E0","sha256":"7E:AA:16:44:B1:24:13:58:14:68:DE:F8:07:07:9D:F6:FF:DB:FE:1B:17:14:79:E9:F9:47:14:8C:63:F0:C7:08"}}},"request":{"raw":"GET /d/file/20210724/bda1f21d66af942c77b1ae1912caaedd.png HTTP/1.1\r\nHost: img.xitongtiandi.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xitongtiandi.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sun, 01 Feb 2026 07:41:25 GMT\r\nContent-Type: image/png\r\nContent-Length: 7952\r\nConnection: keep-alive\r\nServer: openresty\r\nCloudServiceDiscount: CDN\r\nx-obs-request-id: 0000019BAD3DD8B390077F3B95884917\r\nETag: \"3352b5da48fb8b91c277a032d936cc12\"\r\nLast-Modified: Wed, 30 Oct 2024 03:07:33 GMT\r\nContent-Disposition: attachment\r\nx-obs-id-2: 36AAAQAAEAABAAAQAAEAABAAAQAAEAABAAAaI=AAAAAAAAAAAAAAAAAAAAAAAAAA\r\nvia: CHN-HElangfang-AREACUCC1-CACHE2[5],CHN-HElangfang-AREACUCC1-CACHE42[0,TCP_HIT,0],CHN-TJ-GLOBAL6-CACHE136[124],CHN-TJ-GLOBAL6-CACHE47[115,TCP_MISS,118],CHN-TJ-GLOBAL6-CACHE47[113,TCP_MISS,115]\r\nx-hcs-proxy-type: 1\r\nX-CCDN-CacheTTL: 2592000\r\nnginx-hit: 1\r\nAge: 1793615\r\nX-CCDN-Expires: 798398\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":7952,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 66 x 85, 8-bit/color RGBA, non-interlaced","md5":"3352b5da48fb8b91c277a032d936cc12","sha1":"33b30ae7bb9cc180ecebcaf6d0132e20b27af292","sha256":"a4f91e9e962d69e6b4e6080601cac83e7e8750400df40e583b3ab51fe68bfd69","sha512":"991cfb4dcf52526c4c99dbbfef16fce188f67ed0f92a90e1189b67a1eae0e5e6c5edb9bda61b17476dfe0438999d0932df6c8a60c5aab8f30ae93be2da703acc","ssdeep":"192:4jnGAn3RWlYwzwyExqh3U4B18t2jJ0UpwB6S15601OutA:4jnvn3RdwUkU618Ml0UpwjbR1hq","tlshash":"7ff190c6f1493a3444ff337568cd8a9be14de02e3a9c1dec4e32f3801b99a1e91a9415","first_seen":"2026-02-01T07:42:01.699581Z","last_seen":"2026-02-01T07:42:01.699581Z","times_seen":1,"resource_available":false,"data":null}},"time_used":4423,"timings":{"blocked":3338,"dns":1,"connect":283,"send":0,"wait":326,"receive":0,"ssl":473},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"image.xitongtiandi.net/upload/202507/214651-68838acb150fb.jpg","fqdn":"image.xitongtiandi.net","domain":"xitongtiandi.net","tld":"net"},"ip":{"addr":"116.153.39.131","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xitongtiandi.net/soft_lt/7017.html","date":"2026-02-01T07:41:21.752Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"image.xitongtiandi.net","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Fri, 26 Dec 2025 00:00:00 GMT","end":"Thu, 26 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"68:45:42:1A:66:A6:87:1B:03:DE:5B:E1:65:05:9A:BC:74:13:56:8C","sha256":"CD:0E:7D:D7:D9:AE:12:8F:B5:76:68:8F:82:80:8E:28:F2:30:73:19:10:FF:CE:F4:29:DC:D0:CD:5D:16:AB:2E"}}},"request":{"raw":"GET /upload/202507/214651-68838acb150fb.jpg HTTP/1.1\r\nHost: image.xitongtiandi.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xitongtiandi.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sun, 01 Feb 2026 07:41:26 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 18230\r\nConnection: keep-alive\r\nServer: openresty\r\nCloudServiceDiscount: CDN\r\nx-obs-request-id: 00000198CFCDC05C9019B1C3472920D7\r\nETag: \"309a76d46d85581ad1386a81b26d4b73\"\r\nLast-Modified: Fri, 25 Jul 2025 13:46:51 GMT\r\nx-obs-id-2: 36AAAQAAEAABAAAQAAEAABAAAQAAEAABAAAaI=AAAAAAAAAAAAAAAAAAAAAAAAAA\r\nX-CCDN-Expires: 517647\r\nvia: CHN-JXnanchang-AREACUCC1-CACHE56[3],CHN-JXnanchang-AREACUCC1-CACHE7[0,TCP_HIT,0],CHN-JSwuxi-GLOBAL2-CACHE11[7],CHN-JSwuxi-GLOBAL2-CACHE88[0,TCP_HIT,6]\r\nx-hcs-proxy-type: 1\r\nX-CCDN-CacheTTL: 2592000\r\nnginx-hit: 1\r\nAge: 2074366\r\nAccept-Ranges: bytes\r\nContent-Disposition: inline\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":18230,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=1, software=www.meitu.com], baseline, precision 8, 120x120, components 3","md5":"309a76d46d85581ad1386a81b26d4b73","sha1":"c15e21e0addea07ce4354ca5dcfbd2072b98b87a","sha256":"763bdc808a325f6974d19eb0b56ee0b83aa7c832122cf80b3d6b5a7e219fb0b5","sha512":"803dd266fd03a09e0880c6798762dd58bedfbe9f489db815ecbb6eb19751a1875d656b0359b4b216a419014361add8130cb5fe783642151074644c26311facf1","ssdeep":"384:sNsNVFhvc5/wne2pdLsd6Epjeu8ciEMnC+8uXNxLuzrP:sGp7p6d68bulNxLErP","tlshash":"8582f17ad54b073a2b071eb5082837e75ff08a97715602235993a6b7d3f8e2ad003831","first_seen":"2026-02-01T07:42:01.700794Z","last_seen":"2026-02-01T07:42:01.700794Z","times_seen":1,"resource_available":false,"data":null}},"time_used":4745,"timings":{"blocked":4379,"dns":0,"connect":0,"send":0,"wait":347,"receive":19,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"image.xitongtiandi.net/upload/202507/214629-68838ab517e33.jpg","fqdn":"image.xitongtiandi.net","domain":"xitongtiandi.net","tld":"net"},"ip":{"addr":"116.153.39.131","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xitongtiandi.net/soft_lt/7017.html","date":"2026-02-01T07:41:21.753Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"image.xitongtiandi.net","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Fri, 26 Dec 2025 00:00:00 GMT","end":"Thu, 26 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"68:45:42:1A:66:A6:87:1B:03:DE:5B:E1:65:05:9A:BC:74:13:56:8C","sha256":"CD:0E:7D:D7:D9:AE:12:8F:B5:76:68:8F:82:80:8E:28:F2:30:73:19:10:FF:CE:F4:29:DC:D0:CD:5D:16:AB:2E"}}},"request":{"raw":"GET /upload/202507/214629-68838ab517e33.jpg HTTP/1.1\r\nHost: image.xitongtiandi.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xitongtiandi.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sun, 01 Feb 2026 07:41:26 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 3058\r\nConnection: keep-alive\r\nServer: openresty\r\nCloudServiceDiscount: CDN\r\nx-obs-request-id: 00000198A13D75C197A6558BB0DA5B9C\r\nETag: \"038df3b8cd5787c920a2eb4d3d732e2f\"\r\nLast-Modified: Fri, 25 Jul 2025 13:46:29 GMT\r\nx-obs-id-2: 36AAAQAAEAABAAAQAAEAABAAAQAAEAABAAAaI=AAAAAAAAAAAAAAAAAAAAAAAAAA\r\nX-CCDN-Expires: 845467\r\nvia: CHN-JXnanchang-AREACUCC1-CACHE60[4],CHN-JXnanchang-AREACUCC1-CACHE66[0,TCP_HIT,0],CHN-JSwuxi-GLOBAL2-CACHE46[7],CHN-JSwuxi-GLOBAL2-CACHE105[0,TCP_HIT,3]\r\nx-hcs-proxy-type: 1\r\nX-CCDN-CacheTTL: 2592000\r\nAge: 14\r\nAccept-Ranges: bytes\r\nContent-Disposition: inline\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3058,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=3], baseline, precision 8, 80x80, components 3","md5":"038df3b8cd5787c920a2eb4d3d732e2f","sha1":"353a548e248d71ad8cb6a08af0f433dee27dab17","sha256":"7b6cae944eca9694e83ac52c60825cf3cb3cd536292925cafa1d29cf5b13374a","sha512":"931b1a883a98f2956c48008c0c6010df5db262bbc1e6219b02f5d475097784a46477eb707114f9aa0dc970f2c6d516322a412f0f4031b455b6b11aa3173bdb3f","ssdeep":"","tlshash":"71515d0e1a8bae73eefd88f19801c221635717d4be53519c7870498bf4407cd4a4db58","first_seen":"2026-02-01T07:42:01.702267Z","last_seen":"2026-02-01T07:42:01.702267Z","times_seen":1,"resource_available":false,"data":null}},"time_used":4762,"timings":{"blocked":4430,"dns":0,"connect":0,"send":0,"wait":332,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"res.xitongtiandi.net/xttd/images/icon-star.png","fqdn":"res.xitongtiandi.net","domain":"xitongtiandi.net","tld":"net"},"ip":{"addr":"116.153.39.131","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xitongtiandi.net/soft_lt/7017.html","date":"2026-02-01T07:41:25.156Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"res.xitongtiandi.net","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Fri, 26 Dec 2025 00:00:00 GMT","end":"Thu, 26 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"1F:66:E3:A4:D8:97:BC:27:31:E3:7E:C0:E9:87:F8:8A:BD:5F:78:50","sha256":"9B:66:75:12:D8:16:0B:05:6B:AE:85:41:94:BC:0E:10:20:C6:42:E3:74:BA:E9:1E:EB:1B:6F:DA:FC:A1:3F:1B"}}},"request":{"raw":"GET /xttd/images/icon-star.png HTTP/1.1\r\nHost: res.xitongtiandi.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://res.xitongtiandi.net/xttd/css/r-detail.css?2026020107\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sun, 01 Feb 2026 07:41:25 GMT\r\nContent-Type: image/png\r\nContent-Length: 1574\r\nConnection: keep-alive\r\nServer: openresty\r\nx-reserved: amazon, aws and amazon web services are trademarks or registered trademarks of Amazon Technologies, Inc\r\nCloudServiceDiscount: CDN\r\nx-amz-request-id: 00000194160F96F997C8469BF6F03F2D\r\nETag: \"f539bbfa3dc84d8cd387a95854aacea5\"\r\nLast-Modified: Fri, 19 Apr 2024 02:26:36 GMT\r\nx-amz-id-2: 32AAAQAAEAABAAAQAAEAABAAAQAAEAABCSAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA\r\nX-CCDN-Expires: 87830\r\nvia: CHN-JXnanchang-AREACUCC1-CACHE59[5],CHN-JXnanchang-AREACUCC1-CACHE13[0,TCP_HIT,3],CHN-JSwuxi-GLOBAL2-CACHE40[35],CHN-JSwuxi-GLOBAL2-CACHE87[0,TCP_HIT,24],CHN-SH-GLOBAL4-CACHE87[16],CHN-SH-GLOBAL4-CACHE22[0,TCP_HIT,11]\r\nx-hcs-proxy-type: 1\r\nX-CCDN-CacheTTL: 2592000\r\nnginx-hit: 1\r\nAge: 2504170\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1574,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 17 x 31, 8-bit/color RGBA, non-interlaced","md5":"f539bbfa3dc84d8cd387a95854aacea5","sha1":"d8bcab50d8a5a9372060b5148bb23f616197a841","sha256":"0a68c926965cb332664a9a54e57c5cc5d8682b52232913df6999f157de34d4e1","sha512":"84a14a500a2fe662fa9b6c09f67cc403c984096b15abb6149380dedc768e12919a93df38ecb1090644dd41466fdcb367cefc758efedf97d660d062f0aa08e793","ssdeep":"","tlshash":"fc31dac8f7987411839487c935fbc827da9b0dc14ad4e57eb589e45b49781fa0d3c0ca","first_seen":"2023-05-26T03:28:21Z","last_seen":"2026-06-02T12:23:57.128445Z","times_seen":51,"resource_available":false,"data":null}},"time_used":331,"timings":{"blocked":82,"dns":0,"connect":0,"send":0,"wait":249,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.xitongtiandi.net/d/file/20210724/49b8388181bcab2f68d5081ec1b17a89.png","fqdn":"img.xitongtiandi.net","domain":"xitongtiandi.net","tld":"net"},"ip":{"addr":"120.52.95.238","port":443,"asn":133119,"as":"China Unicom IP network","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xitongtiandi.net/soft_lt/7017.html","date":"2026-02-01T07:41:21.739Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.xitongtiandi.net","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Fri, 26 Dec 2025 00:00:00 GMT","end":"Thu, 26 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"76:AE:74:5D:DA:22:6F:75:FF:B8:99:47:85:9F:B9:1D:12:D7:B2:E0","sha256":"7E:AA:16:44:B1:24:13:58:14:68:DE:F8:07:07:9D:F6:FF:DB:FE:1B:17:14:79:E9:F9:47:14:8C:63:F0:C7:08"}}},"request":{"raw":"GET /d/file/20210724/49b8388181bcab2f68d5081ec1b17a89.png HTTP/1.1\r\nHost: img.xitongtiandi.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xitongtiandi.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sun, 01 Feb 2026 07:41:25 GMT\r\nContent-Type: image/png\r\nContent-Length: 150168\r\nConnection: keep-alive\r\nServer: openresty\r\nCloudServiceDiscount: CDN\r\nx-obs-request-id: 0000019BAD3DD98097676F54B81455A5\r\nETag: \"a0903dcb98a2cc218eaf15ece7ef6fdb\"\r\nLast-Modified: Wed, 30 Oct 2024 03:07:25 GMT\r\nContent-Disposition: attachment\r\nx-obs-id-2: 36AAAQAAEAABAAAQAAEAABAAAQAAEAABAAAaI=AAAAAAAAAAAAAAAAAAAAAAAAAA\r\nvia: CHN-HElangfang-AREACUCC1-CACHE17[2],CHN-HElangfang-AREACUCC1-CACHE7[0,TCP_HIT,0],CHN-TJ-GLOBAL6-CACHE36[146],CHN-TJ-GLOBAL6-CACHE122[125,TCP_MISS,143]\r\nx-hcs-proxy-type: 1\r\nX-CCDN-CacheTTL: 2592000\r\nnginx-hit: 1\r\nAge: 1793615\r\nX-CCDN-Expires: 798398\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":150168,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 500 x 375, 8-bit/color RGB, non-interlaced","md5":"a0903dcb98a2cc218eaf15ece7ef6fdb","sha1":"b0a00938271c6c447f189a233c208f222ac99f42","sha256":"7a48ca87b3cf3b259c025a920ffc16a9cb79a17bf5f3ec1195e124301bb11f0d","sha512":"16ad2418ae92ec3e60fa2ace0a42914eefd0fc2e589cbb8f12da77fe2649b4687e94f9a7681476ea82981e48edffce3bb8d322f821edfd092c0f10bfcd5bd6b3","ssdeep":"3072:YLbDBZ/Go8suzfm4XAeZ+C5nzMLf7RZkgZaP7snbliH5If+Td:YPDBZEsUf3XTZ5zqf7LkgMgRiZ7Td","tlshash":"abe31241f6c6cf3b9fe652201cb5a905fb87310910898af5b66c79384693db50938a5f","first_seen":"2026-02-01T07:42:01.704844Z","last_seen":"2026-02-01T07:42:01.704844Z","times_seen":1,"resource_available":false,"data":null}},"time_used":5326,"timings":{"blocked":3336,"dns":1,"connect":292,"send":0,"wait":384,"receive":848,"ssl":464},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.xitongtiandi.net/d/file/20210724/78d3362ea1a27f375ac5f99f7b80b58a.png","fqdn":"img.xitongtiandi.net","domain":"xitongtiandi.net","tld":"net"},"ip":{"addr":"120.52.95.238","port":443,"asn":133119,"as":"China Unicom IP network","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xitongtiandi.net/soft_lt/7017.html","date":"2026-02-01T07:41:21.745Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.xitongtiandi.net","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Fri, 26 Dec 2025 00:00:00 GMT","end":"Thu, 26 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"76:AE:74:5D:DA:22:6F:75:FF:B8:99:47:85:9F:B9:1D:12:D7:B2:E0","sha256":"7E:AA:16:44:B1:24:13:58:14:68:DE:F8:07:07:9D:F6:FF:DB:FE:1B:17:14:79:E9:F9:47:14:8C:63:F0:C7:08"}}},"request":{"raw":"GET /d/file/20210724/78d3362ea1a27f375ac5f99f7b80b58a.png HTTP/1.1\r\nHost: img.xitongtiandi.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xitongtiandi.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sun, 01 Feb 2026 07:41:25 GMT\r\nContent-Type: image/png\r\nContent-Length: 158279\r\nConnection: keep-alive\r\nServer: openresty\r\nCloudServiceDiscount: CDN\r\nx-obs-request-id: 000001941F72D08397A84374A13DFED4\r\nETag: \"d2926a29db9e78527484aa0a73cf4712\"\r\nLast-Modified: Wed, 30 Oct 2024 03:07:28 GMT\r\nContent-Disposition: attachment\r\nx-obs-id-2: 32AAAQAAEAABAAAQAAEAABAAAQAAEAABCSAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA\r\nX-CCDN-Expires: 798397\r\nvia: CHN-HElangfang-AREACUCC1-CACHE66[10],CHN-HElangfang-AREACUCC1-CACHE29[0,TCP_HIT,0],CHN-TJ-GLOBAL1-CACHE78[4],CHN-TJ-GLOBAL1-CACHE69[0,TCP_HIT,3]\r\nx-hcs-proxy-type: 1\r\nX-CCDN-CacheTTL: 2592000\r\nnginx-hit: 1\r\nAge: 1793615\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":158279,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 725 x 359, 8-bit/color RGB, non-interlaced","md5":"d2926a29db9e78527484aa0a73cf4712","sha1":"fa98ac7123dc67c10d5e14f42091a63cb70398f3","sha256":"45836787fb9668555de30cffef46bc59056aec88a252143909bf4d5f64365e43","sha512":"1358c66473d05a440dacdfa9d4b981c26f8f19dbcabffaff85f06fa61a12bc659d06ba6ba9f3115c727aceee94cf77f924a086caaa5388fde8a5a26dc9c31bbd","ssdeep":"3072:tybr8478PpQKBgjfKNdGa85pFE7t/JJtCTR+Rk4ywygHxH/6qYR2:ty/8aUuKoKNdGa8TeZJnCTR+hywygHx7","tlshash":"cff312cec88cd828fc97dc71dd087360b4ba92a818db599972dfb174365d61a1063b2b","first_seen":"2026-02-01T07:42:01.705851Z","last_seen":"2026-02-01T07:42:01.705851Z","times_seen":1,"resource_available":false,"data":null}},"time_used":5201,"timings":{"blocked":3330,"dns":1,"connect":259,"send":0,"wait":338,"receive":746,"ssl":523},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}