{"report_id":"a0db3923-4891-4fa1-b27a-26f6d892afc0","version":6,"status":"done","tags":[],"date":"2025-09-03T11:43:28Z","url":{"schema":"http","addr":"none309.xyz/","fqdn":"none309.xyz","domain":"none309.xyz","tld":"xyz"},"ip":{"addr":"104.21.88.135","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"78se.xyz/","fqdn":"78se.xyz","domain":"78se.xyz","tld":"xyz"},"title":"新型的成人网站,黄色网站 - 78色"},"submit":{"url":{"schema":"http","addr":"none309.xyz/","fqdn":"none309.xyz","domain":"none309.xyz","tld":"xyz"},"ip":{"addr":"104.21.88.135","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-10-08T11:43:28Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":7,"urlquery":0,"analyzer":0}},"detection":{"ids":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-09-03T11:43:06Z","timestamp":1756899786,"ip_dst":{"addr":"47.254.187.92","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Germany","country_code":"DE"},"ip_src":{"addr":"172.18.0.23","port":38354,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2025-09-03T11:43:06.875157+0000\",\"flow_id\":689061631798668,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.23\",\"src_port\":38354,\"dest_ip\":\"47.254.187.92\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"5454ylylgh.oss-accelerate.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":7,\"bytes_toserver\":904,\"bytes_toclient\":6873,\"start\":\"2025-09-03T11:43:06.830860+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-09-03T11:43:06Z","timestamp":1756899786,"ip_dst":{"addr":"47.254.187.92","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Germany","country_code":"DE"},"ip_src":{"addr":"172.18.0.23","port":38366,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2025-09-03T11:43:06.879731+0000\",\"flow_id\":1227300490882781,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.23\",\"src_port\":38366,\"dest_ip\":\"47.254.187.92\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"xpj46-xz.oss-accelerate.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":7,\"bytes_toserver\":753,\"bytes_toclient\":6873,\"start\":\"2025-09-03T11:43:06.831197+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-09-03T11:43:07Z","timestamp":1756899787,"ip_dst":{"addr":"47.79.65.168","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"ip_src":{"addr":"172.18.0.23","port":43818,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2025-09-03T11:43:07.178290+0000\",\"flow_id\":276901537666943,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.23\",\"src_port\":43818,\"dest_ip\":\"47.79.65.168\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"768tup.oss-cn-hongkong.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":3,\"bytes_toserver\":789,\"bytes_toclient\":1654,\"start\":\"2025-09-03T11:43:06.612223+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-09-03T11:43:07Z","timestamp":1756899787,"ip_dst":{"addr":"47.79.64.191","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"ip_src":{"addr":"172.18.0.23","port":53490,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2025-09-03T11:43:07.220641+0000\",\"flow_id\":1504177705106437,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.23\",\"src_port\":53490,\"dest_ip\":\"47.79.64.191\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"365t.oss-cn-hongkong.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":3,\"bytes_toserver\":753,\"bytes_toclient\":1634,\"start\":\"2025-09-03T11:43:06.637957+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-09-03T11:43:07Z","timestamp":1756899787,"ip_dst":{"addr":"47.253.28.37","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"United States","country_code":"US"},"ip_src":{"addr":"172.18.0.23","port":56136,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2025-09-03T11:43:07.328333+0000\",\"flow_id\":45110742705319,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.23\",\"src_port\":56136,\"dest_ip\":\"47.253.28.37\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"5845-xxpp.oss-accelerate.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":5,\"bytes_toserver\":753,\"bytes_toclient\":4662,\"start\":\"2025-09-03T11:43:07.091303+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-09-03T11:43:07Z","timestamp":1756899787,"ip_dst":{"addr":"47.79.64.191","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"ip_src":{"addr":"172.18.0.23","port":53502,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2025-09-03T11:43:07.431417+0000\",\"flow_id\":962676818353207,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.23\",\"src_port\":53502,\"dest_ip\":\"47.79.64.191\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"365t.oss-cn-hongkong.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":6,\"bytes_toserver\":753,\"bytes_toclient\":5918,\"start\":\"2025-09-03T11:43:06.891959+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-09-03T11:43:07Z","timestamp":1756899787,"ip_dst":{"addr":"47.79.65.168","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"ip_src":{"addr":"172.18.0.23","port":43830,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2025-09-03T11:43:07.446726+0000\",\"flow_id\":176942616292911,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.23\",\"src_port\":43830,\"dest_ip\":\"47.79.65.168\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"768tup.oss-cn-hongkong.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":6,\"bytes_toserver\":937,\"bytes_toclient\":5986,\"start\":\"2025-09-03T11:43:06.863791+0000\"}}"}],"analyzer":null,"urlquery":null},"summary":[{"fqdn":"zz.bdstatic.com","ip":{"addr":"157.255.63.48","port":443,"asn":136958,"as":"China Unicom Guangdong IP network","country":"China","country_code":"CN"},"domain_registered":"2011-12-26","domain_rank":365334,"first_seen":"2017-01-30T07:45:48Z","last_seen":"2025-08-31T18:05:01.318354Z","alert_count":0,"request_count":1,"received_data":769,"sent_data":415,"comment":"","tags":null,"fingerprints":null},{"fqdn":"5454ylylgh.oss-accelerate.aliyuncs.com","ip":{"addr":"47.254.187.92","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Germany","country_code":"DE"},"domain_registered":"2012-04-01","domain_rank":6988996,"first_seen":"2024-07-25T07:33:23Z","last_seen":"2025-08-27T20:11:26.903241Z","alert_count":0,"request_count":1,"received_data":523986,"sent_data":446,"comment":"","tags":null,"fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}]},{"fqdn":"none309.xyz","ip":{"addr":"172.67.180.20","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-07-28","domain_rank":0,"first_seen":"2025-09-03T11:43:30.845237Z","last_seen":"2025-09-03T11:43:30.845237Z","alert_count":0,"request_count":1,"received_data":88440,"sent_data":480,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"yj777111.img5811783201.com","ip":{"addr":"45.8.115.31","port":8686,"asn":4785,"as":"xTom","country":"Japan","country_code":"JP"},"domain_registered":"2025-05-17","domain_rank":0,"first_seen":"2025-07-07T02:29:58.458671Z","last_seen":"2025-08-27T18:04:41.082315Z","alert_count":0,"request_count":1,"received_data":348302,"sent_data":449,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"768tup.oss-cn-hongkong.aliyuncs.com","ip":{"addr":"47.79.65.168","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"domain_registered":"2012-04-01","domain_rank":4111567,"first_seen":"2025-06-22T10:55:18.203925Z","last_seen":"2025-08-27T20:11:27.266605Z","alert_count":0,"request_count":1,"received_data":202276,"sent_data":457,"comment":"","tags":null,"fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}]},{"fqdn":"vip.helloimg.com","ip":{"addr":"192.140.169.63","port":443,"asn":0,"as":"","country":"China","country_code":"CN"},"domain_registered":"2020-04-15","domain_rank":0,"first_seen":"2023-12-17T09:56:57Z","last_seen":"2025-09-02T00:09:13.781874Z","alert_count":0,"request_count":1,"received_data":774,"sent_data":426,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"timg216.top","ip":{"addr":"172.66.155.86","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-04-04","domain_rank":157563,"first_seen":"2025-05-11T16:24:46.418762Z","last_seen":"2025-08-27T20:11:27.063857Z","alert_count":0,"request_count":8,"received_data":653327,"sent_data":4088,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"zgnzw.xyz","ip":{"addr":"104.21.64.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-02-24","domain_rank":417621,"first_seen":"2025-03-06T03:09:27.561462Z","last_seen":"2025-09-01T18:27:51.628688Z","alert_count":0,"request_count":7,"received_data":2045630,"sent_data":3045,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"sp0.baidu.com","ip":{"addr":"103.235.46.115","port":443,"asn":55967,"as":"Beijing Baidu Netcom Science and Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"domain_registered":"1999-10-11","domain_rank":220073,"first_seen":"2014-12-05T23:12:12Z","last_seen":"2025-08-28T05:29:50.237238Z","alert_count":0,"request_count":1,"received_data":116,"sent_data":468,"comment":"","tags":null,"fingerprints":null},{"fqdn":"5845-xxpp.oss-accelerate.aliyuncs.com","ip":{"addr":"47.253.28.37","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"United States","country_code":"US"},"domain_registered":"2012-04-01","domain_rank":6283351,"first_seen":"2023-11-14T16:55:03Z","last_seen":"2025-08-27T20:11:27.76533Z","alert_count":0,"request_count":1,"received_data":324850,"sent_data":448,"comment":"","tags":null,"fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}]},{"fqdn":"xxtututu.0olut8.com","ip":{"addr":"123.6.18.114","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"domain_registered":"2024-08-29","domain_rank":0,"first_seen":"2025-08-26T15:00:37.045734Z","last_seen":"2025-09-03T00:52:26.017838Z","alert_count":0,"request_count":2,"received_data":910141,"sent_data":857,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"xm777111.img8822437445.com","ip":{"addr":"45.8.115.31","port":8686,"asn":4785,"as":"xTom","country":"Japan","country_code":"JP"},"domain_registered":"2025-05-17","domain_rank":2219460,"first_seen":"2025-07-07T02:29:58.468493Z","last_seen":"2025-08-27T15:37:51.803203Z","alert_count":0,"request_count":1,"received_data":322314,"sent_data":452,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"365t.oss-cn-hongkong.aliyuncs.com","ip":{"addr":"47.79.64.191","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"domain_registered":"2012-04-01","domain_rank":5041190,"first_seen":"2025-07-17T06:33:04.342854Z","last_seen":"2025-08-30T13:41:37.331076Z","alert_count":0,"request_count":1,"received_data":266922,"sent_data":451,"comment":"","tags":null,"fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}]},{"fqdn":"78se.xyz","ip":{"addr":"104.21.31.3","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2019-06-15","domain_rank":4802844,"first_seen":"2025-04-19T06:11:07.651293Z","last_seen":"2025-08-22T05:40:24.882626Z","alert_count":0,"request_count":4,"received_data":263176,"sent_data":1878,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]}]},{"fqdn":"www.googletagmanager.com","ip":{"addr":"142.250.74.72","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2011-11-11","domain_rank":283,"first_seen":"2012-10-04T01:07:32Z","last_seen":"2025-08-27T15:12:56.836113Z","alert_count":0,"request_count":1,"received_data":414872,"sent_data":429,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"xpj46-xz.oss-accelerate.aliyuncs.com","ip":{"addr":"47.254.187.92","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Germany","country_code":"DE"},"domain_registered":"2012-04-01","domain_rank":6319127,"first_seen":"2023-10-26T16:53:01Z","last_seen":"2025-08-27T20:11:27.764443Z","alert_count":0,"request_count":1,"received_data":385874,"sent_data":446,"comment":"","tags":null,"fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}]},{"fqdn":"www.helloimg.com","ip":{"addr":"43.159.98.20","port":443,"asn":139341,"as":"ACE","country":"Singapore","country_code":"SG"},"domain_registered":"2020-04-15","domain_rank":6072025,"first_seen":"2020-05-04T16:35:09Z","last_seen":"2025-08-30T22:56:44.2672Z","alert_count":0,"request_count":2,"received_data":107334,"sent_data":898,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-09-03T11:43:06Z","timestamp":1756899786,"ip_dst":{"addr":"47.254.187.92","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Germany","country_code":"DE"},"ip_src":{"addr":"172.18.0.23","port":38354,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2025-09-03T11:43:06.875157+0000\",\"flow_id\":689061631798668,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.23\",\"src_port\":38354,\"dest_ip\":\"47.254.187.92\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"5454ylylgh.oss-accelerate.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":7,\"bytes_toserver\":904,\"bytes_toclient\":6873,\"start\":\"2025-09-03T11:43:06.830860+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-09-03T11:43:06Z","timestamp":1756899786,"ip_dst":{"addr":"47.254.187.92","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Germany","country_code":"DE"},"ip_src":{"addr":"172.18.0.23","port":38366,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2025-09-03T11:43:06.879731+0000\",\"flow_id\":1227300490882781,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.23\",\"src_port\":38366,\"dest_ip\":\"47.254.187.92\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"xpj46-xz.oss-accelerate.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":7,\"bytes_toserver\":753,\"bytes_toclient\":6873,\"start\":\"2025-09-03T11:43:06.831197+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-09-03T11:43:07Z","timestamp":1756899787,"ip_dst":{"addr":"47.79.65.168","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"ip_src":{"addr":"172.18.0.23","port":43818,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2025-09-03T11:43:07.178290+0000\",\"flow_id\":276901537666943,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.23\",\"src_port\":43818,\"dest_ip\":\"47.79.65.168\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"768tup.oss-cn-hongkong.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":3,\"bytes_toserver\":789,\"bytes_toclient\":1654,\"start\":\"2025-09-03T11:43:06.612223+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-09-03T11:43:07Z","timestamp":1756899787,"ip_dst":{"addr":"47.79.64.191","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"ip_src":{"addr":"172.18.0.23","port":53490,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2025-09-03T11:43:07.220641+0000\",\"flow_id\":1504177705106437,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.23\",\"src_port\":53490,\"dest_ip\":\"47.79.64.191\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"365t.oss-cn-hongkong.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":3,\"bytes_toserver\":753,\"bytes_toclient\":1634,\"start\":\"2025-09-03T11:43:06.637957+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-09-03T11:43:07Z","timestamp":1756899787,"ip_dst":{"addr":"47.253.28.37","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"United States","country_code":"US"},"ip_src":{"addr":"172.18.0.23","port":56136,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2025-09-03T11:43:07.328333+0000\",\"flow_id\":45110742705319,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.23\",\"src_port\":56136,\"dest_ip\":\"47.253.28.37\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"5845-xxpp.oss-accelerate.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":5,\"bytes_toserver\":753,\"bytes_toclient\":4662,\"start\":\"2025-09-03T11:43:07.091303+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-09-03T11:43:07Z","timestamp":1756899787,"ip_dst":{"addr":"47.79.64.191","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"ip_src":{"addr":"172.18.0.23","port":53502,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2025-09-03T11:43:07.431417+0000\",\"flow_id\":962676818353207,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.23\",\"src_port\":53502,\"dest_ip\":\"47.79.64.191\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"365t.oss-cn-hongkong.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":6,\"bytes_toserver\":753,\"bytes_toclient\":5918,\"start\":\"2025-09-03T11:43:06.891959+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-09-03T11:43:07Z","timestamp":1756899787,"ip_dst":{"addr":"47.79.65.168","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"ip_src":{"addr":"172.18.0.23","port":43830,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2025-09-03T11:43:07.446726+0000\",\"flow_id\":176942616292911,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.23\",\"src_port\":43830,\"dest_ip\":\"47.79.65.168\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"768tup.oss-cn-hongkong.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":6,\"bytes_toserver\":937,\"bytes_toclient\":5986,\"start\":\"2025-09-03T11:43:06.863791+0000\"}}"}]}],"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"78se.xyz/","fqdn":"78se.xyz","domain":"78se.xyz","tld":"xyz"},"ip":{"addr":"104.21.31.3","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"b4fd6cffde1db2f92e68391e1f03df20","sha1":"8a349ea46e6b72ecdd169d4b1597d7e391b82429","sha256":"8bdee89796abf40a99cd411f6d1f11a8fee5320529de14bbb808e8ffa7325217","sha512":"e3532928a3a36c6419d80c6de48dcb62e45f57183096723bb1502b3a25188b794f58d98feca1f656fe7640daedc1af65f72d0223da4269b5881007fbd96103e9","ssdeep":"","tlshash":"5180045034c1104374fc1073f34137f7041543110455300743707104111004341f0144","size":38,"data":"","first_seen":"2024-07-25T06:40:40Z","last_seen":"2026-01-28T00:38:39.038162Z","times_seen":520,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"78se.xyz/","fqdn":"78se.xyz","domain":"78se.xyz","tld":"xyz"},"ip":{"addr":"104.21.31.3","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"9b684621c6228ed7258f3f8c0fe972df","sha1":"6c1d9e63110aabe2c5b01f89ff9ee578f172f670","sha256":"dd1c1974bdb9d97f95fc9b514b6c010ebc5a3ff6181cc5b365cfa6395bb830ca","sha512":"cf8330c7aae55b558dcde2995022ad509130d0ddb30da43921d09096e4ee6604e608d11acddec0518bc533f5ca3387dc0c37967ac8f50662d36143706cf50731","ssdeep":"","tlshash":"60d012d500afe5b18e83b035111a7eb5f0461efc94a4a9c0f1748c70c451674475d0bc","size":197,"data":"","first_seen":"2025-04-19T06:11:14.978539Z","last_seen":"2025-09-03T11:43:40.147171Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"78se.xyz/","fqdn":"78se.xyz","domain":"78se.xyz","tld":"xyz"},"ip":{"addr":"104.21.31.3","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"ce1619579da2073f878d6b23363f56da","sha1":"1d6802a285049733123558f81423f6d7e769b32d","sha256":"f68a6101262da98387863252dddaf970e479a12d1eba2a373f68ca990f763646","sha512":"9ecdfda547d1c1295785a2d727b20a09e37925d733621e1bee1baaa39eff5000f215cdf90d5e5d699cb1d889addc26371eced6e26b6db69f22dc73c6f6c5c507","ssdeep":"","tlshash":"d9d02268e6af7a910319124ac44fd00c225a2b7648a63cb3299440ced8a5851c22d873","size":201,"data":"","first_seen":"2024-12-29T01:05:40.986436Z","last_seen":"2026-02-11T00:28:12.213176Z","times_seen":136,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"78se.xyz/","fqdn":"78se.xyz","domain":"78se.xyz","tld":"xyz"},"ip":{"addr":"104.21.31.3","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"225578dd008fdb4f91e48134d9295a15","sha1":"b335a8c3e5567f45a7e129c95331d6aa07a7d189","sha256":"23f4f8697ebd03f522696fc7530d04be1f664d956f8c108470e3d4f6852de660","sha512":"e9d0d99af8e63816edad0b9ccd550262070d47117a85211fbb11e0404d388c815f11b1e676d632f2cac14e05442d5d77ca35704d70aadad3129bfe2ab2e0bbbb","ssdeep":"","tlshash":"a911c02220ed6d774d0bb473292d7ea2e06e4ed9e0418799a5f9cc024aea6705f844de","size":1093,"data":"","first_seen":"2025-04-13T06:37:08.572266Z","last_seen":"2026-07-09T03:53:57.187957Z","times_seen":1622,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"78se.xyz/","fqdn":"78se.xyz","domain":"78se.xyz","tld":"xyz"},"ip":{"addr":"104.21.31.3","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"0e22180ac0ea1561821269dd223a62f2","sha1":"100f5d6370e89e02473997ae6780afea91a21acf","sha256":"f309fdda50b70f97d15d28431e93b19ede63df847aa241648921101775fb3c77","sha512":"e010a9606bbf2947a1a7541c1ecf8e96aca392b6b9360e910a6d64ba4d66b066d00b8abac18f8ac14f7c21863295802a063efad5386cb28fd017680c65f8608d","ssdeep":"96:r8mBR++MvSYsNLmg36cirvDQ9AVV8aKEBJ:r8mBR++sSYsABbrvMs+iJ","tlshash":"a1c106b2e0efbe75de0d99050089397cf44e27af9994b0d4d529ec50e168bb42f0e85e","size":5601,"data":"","first_seen":"2025-07-29T22:23:19.342428Z","last_seen":"2025-09-03T11:43:40.149459Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zgnzw.xyz/78se/js/lib-a.js?0e915775e","fqdn":"zgnzw.xyz","domain":"zgnzw.xyz","tld":"xyz"},"ip":{"addr":"104.21.64.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"89dff06aa2719ef3ded0999181597a97","sha1":"e887aa7d5464b64811b3204e519eb8050621ccd1","sha256":"5bff16d6796815df873306b379ef092f717e59785fbb245a15719ddfda028ae2","sha512":"59d2e08bec169b5bf211ef347323e3d5668c50035a33995a22ba7263982353438d6b52c464fccaeb2905dec43007eaffe244f23afb97f5acdf62fbe10f91d5d4","ssdeep":"384:voSMtpC52MXwxymAw3uOsfxshyqDnbj4bKSGKIujecg9x+el2vgpX4FCuJ+kgnnj:wDt852M1mKkob7jAxJl2vg1uEJnklici","tlshash":"3503e88d3299b03212eb1432642f3606b1366d9f548d941c7e28e8d9fdb48cda537f79","size":40422,"data":"","first_seen":"2025-09-03T11:43:40.12668Z","last_seen":"2025-09-04T15:06:40.375348Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"78se.xyz/","fqdn":"78se.xyz","domain":"78se.xyz","tld":"xyz"},"ip":{"addr":"104.21.31.3","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"17bdd3dbec5e89eb5ea7bb8388e9e49a","sha1":"58a0d5bd0823df870ea68ede08a8ba5e0bf1836d","sha256":"8efdbd0280bc8ca9885f7e6cf2d308492fd6c943b7f5fb4929f53c38534710ad","sha512":"df413b112eeca284da8949302a64cdd500c0ad2009795a5497667f3b5ea2ae260b10e2efa26c8bf9e52efa2affed0e29a188a56ef881dba7136f0621d740c5f7","ssdeep":"","tlshash":"f4f0e1a530dee83337822172ac7fe24e34132a527890b419242490f3ef99407a72a59c","size":577,"data":"","first_seen":"2025-09-03T11:43:40.150799Z","last_seen":"2025-09-03T11:43:40.150799Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zgnzw.xyz/78se/js/lib.js?30a600c2c","fqdn":"zgnzw.xyz","domain":"zgnzw.xyz","tld":"xyz"},"ip":{"addr":"104.21.64.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"7a30a600c2c466e7919cf70d27628b68","sha1":"e8e4e73ee3d7108902f8a37594dd6f842a4f8554","sha256":"fc68db458500ca69a8eebc932adee78280bc12d8aa808f0cc655d9450e0d87d2","sha512":"ce7c64f52d1923211414fb62990f24d65bffe097932cefb1a3a1a16ee704efa641c6e46cd025960c4920859fc93983f5d60f0ab9906930b043c622cda6431870","ssdeep":"12288:eePVrDiIC0FyxYZ5VSkct7lFoFCXNy20Y5SZEfLJ/y:eeoIC0FyxKaXNJ0Y5gEfLpy","tlshash":"5ae40a8af182b06106d361a5907f1606f137399c744a409cf6b5e8ea6cbcacd916ff3d","size":699287,"data":"","first_seen":"2025-08-24T18:49:51.654603Z","last_seen":"2026-02-11T00:28:12.182227Z","times_seen":309,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"78se.xyz/","fqdn":"78se.xyz","domain":"78se.xyz","tld":"xyz"},"ip":{"addr":"104.21.31.3","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"7c60e6420554249860d62e90d6227b83","sha1":"9f2a1e77edf0624af0fc97e6d45c8f7ed2b9ed04","sha256":"6f715adafd406ce0f5d910e1b9a5980b8fd7631be47af0c7edd31e81a0a2a022","sha512":"14e08463099f22d2c4394ab959dec7fa865acba36b202f531464b7af21fa76d4bfd3d385856e4adcac647695ee0614fb35bf6f16247d5371b467c44f71563d72","ssdeep":"","tlshash":"90c02b6304fd90b3cdd67a4920243fbbf00a24f44090948cc1edc82441212304b1e47c","size":149,"data":"","first_seen":"2023-05-06T06:14:35Z","last_seen":"2026-02-11T00:28:12.219574Z","times_seen":499,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"78se.xyz/","fqdn":"78se.xyz","domain":"78se.xyz","tld":"xyz"},"ip":{"addr":"104.21.31.3","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"d66b2a07ae7d0fcb76b2fcda29f72589","sha1":"c31d6299c5a8a13ac46c1f5e0fd8df5c525a67cb","sha256":"b4baa72bb6d3bbf9fbe70cfbc2135d74aea0065a750430937ef698e2b128b355","sha512":"83a080bb23700ad4257191a06cf67506921ee33d107d9768b3813fca91efd06e9790c79b9ed6008f4a4cb32dabbb5857c3dcd929c84744a4e567aace2320cae8","ssdeep":"","tlshash":"5421512160ddae361e4360230d1bfe73e02e0cedf3689f95a6b8cc4569c02b18b480ce","size":1241,"data":"","first_seen":"2023-07-06T13:04:16Z","last_seen":"2026-02-11T02:12:47.429576Z","times_seen":2548,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"78se.xyz/","fqdn":"78se.xyz","domain":"78se.xyz","tld":"xyz"},"ip":{"addr":"104.21.31.3","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"6396b1e46b7745120456da63ff744f9a","sha1":"d19ab53371bbc712a5d75142196e6f125a5a7daf","sha256":"234546f52695d42dbfcf0df495f9e0692eeed18c63549ec7c559cc4590bc463f","sha512":"58d87ff9d9dfff2cb6db1b955ccdd6297fec81c11d421ab2a90e8b73c2736f9fcbaa018309a5f17a6835bffcbd6518609c8bbcc342b4ed9d883f3ceb46886477","ssdeep":"","tlshash":"f301152270cc8432534739421f2fdd47320f44d579608e05d3f8484e1a45336ee960de","size":739,"data":"","first_seen":"2025-09-03T11:43:40.153128Z","last_seen":"2025-09-03T11:43:40.153128Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"78se.xyz/","fqdn":"78se.xyz","domain":"78se.xyz","tld":"xyz"},"ip":{"addr":"104.21.31.3","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"5441f50e6d516564edf0a533f34adf60","sha1":"22778c7e1f92175271c0f3e18b023274350f961b","sha256":"67335d9d59374d0f2a2f1cf7beefd4ed1ec705e88aea43a0a2ec7b42fb009c3f","sha512":"7380e386fa4d10bdfb3d538dc24290e29fedc955b8ab88e5b9776b09b9d4060dbd905f0ab24520c04eec7843528d2127f386cfeb50a995970d51bc9915442e27","ssdeep":"","tlshash":"1ff0c2f251efb276de0a7c10001a3d96a08a74ae9410a4c9952498e495297306f0b17e","size":566,"data":"","first_seen":"2023-05-06T06:14:35Z","last_seen":"2026-02-11T00:28:12.243374Z","times_seen":458,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"78se.xyz/","fqdn":"78se.xyz","domain":"78se.xyz","tld":"xyz"},"ip":{"addr":"104.21.31.3","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"dbf56d92007c46d2b2cc71548c503c54","sha1":"4b66d311702086ba0f4c00f5b084d20a649a5e84","sha256":"836d876f23b319727e9956a41f25f1829f6380af5abfd91ef091254cbb937004","sha512":"6f25f8d510cdd36982c192bc5db5089ee337a47f0d03fd75e02fff601af0c206ffdbf1b5dab1d667ca2228982d73fd3392be651195ad62d828d57c5d4e1a5a88","ssdeep":"","tlshash":"a7c0228020acf5784d8351ab84289eb5e02a08b0a8a50080f5b0c889132a4f1530803e","size":182,"data":"","first_seen":"2025-04-19T06:11:14.987114Z","last_seen":"2026-01-26T15:16:20.662077Z","times_seen":11,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"78se.xyz/","fqdn":"78se.xyz","domain":"78se.xyz","tld":"xyz"},"ip":{"addr":"104.21.31.3","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"8afc83d72e4cd440cba35f77b915b9db","sha1":"062c91891a4f34cfcd6ded4279f46bd8f357c477","sha256":"f89213c596b7a6a089ab7c8c06a5a6263a6ad0c15c7bbc7c1789a9aef46aef23","sha512":"2f0d6008e346fe2637f88faaf7e8877b028872da02f8202f864a6e67f087aa8e77bdb80b2e84c0be3ae018e92d18a7dce5eaabca589fded1795da6f58cd58000","ssdeep":"","tlshash":"e911ad05a848cc3c66f5133e4e4fb357a3215e66613bae56e8b0d08eb9a090796a14e3","size":1083,"data":"","first_seen":"2024-07-03T01:45:41Z","last_seen":"2026-02-11T02:12:47.376059Z","times_seen":2439,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"78se.xyz/","fqdn":"78se.xyz","domain":"78se.xyz","tld":"xyz"},"ip":{"addr":"104.21.31.3","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"d8b776fef1b554e093c9c3ed9c1e1e27","sha1":"838244e76f03ea75b79f2f46d53a3d157df8bf9b","sha256":"10594e1eb0618408a1682ca862ed5f87e9fb78237662cd357703f76f570f9729","sha512":"510982ce85738201bd5d1c4005b41082db5411afc5b0e7bcd797b1679cc979cca3c3ac2bf7f95b69ad4909a7594069454e0197787392bed6fdaafdc4e6b4eafa","ssdeep":"","tlshash":"b7e0ed22d64a6039db0261b48d2bff0742344a553612fca2783af086ab98d8037188e3","size":407,"data":"","first_seen":"2024-06-29T09:06:14Z","last_seen":"2026-02-11T00:28:12.224137Z","times_seen":1476,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zz.bdstatic.com/linksubmit/push.js","fqdn":"zz.bdstatic.com","domain":"bdstatic.com","tld":"com"},"ip":{"addr":"157.255.63.48","port":443,"asn":136958,"as":"China Unicom Guangdong IP network","country":"China","country_code":"CN"},"introduction_type":"scriptElement","is_inline":false,"md5":"f9fc52ab67f035b8baf5d558714cc94d","sha1":"37062a6fb1ef410d496137d44275738ae743c747","sha256":"c31f2003f1c93ac1e34b09f376d97a65da6e110bf451cf1e0e50a7946c5e7212","sha512":"ebb0415852fbb5b964094e2e55a28b90f701dff1977c8b98c6f24d65d09067dc0c417d01492ca28a4be6747816d7c0bfac87b73a33725aee047a5d2f7ab83182","ssdeep":"","tlshash":"11e0cde86054c01c0dcb107135bb324ce7771d675a645545c04d9445396cb1f8247fe9","size":308,"data":"","first_seen":"2023-03-07T01:18:58Z","last_seen":"2026-09-22T10:40:07.18577Z","times_seen":23654,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"78se.xyz/","fqdn":"78se.xyz","domain":"78se.xyz","tld":"xyz"},"ip":{"addr":"104.21.31.3","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"de1d9d2675b55b30af57b040d7f2b856","sha1":"950ab7a50e8b05eb61c45b82d74647db661a1999","sha256":"cd4f3bd41e78fe7e32f49001302e69184dd608dfad821f3aac5d8e75938d6f70","sha512":"61d02b278cb401a510d6562a4aab0d7ae194fc8fa8f2045a8f573d8356e3e7115a18f6fa07fae14906a4b9f72d1a47bfaeb45f758b2792c697b44dabde2a205f","ssdeep":"","tlshash":"9f01cb51c458e8b0ce8366742d37ef23d73608e6b658ec8cf825ed017e69dc0178528d","size":696,"data":"","first_seen":"2023-04-18T01:32:18Z","last_seen":"2026-07-06T22:19:21.023388Z","times_seen":1786,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"78se.xyz/","fqdn":"78se.xyz","domain":"78se.xyz","tld":"xyz"},"ip":{"addr":"104.21.31.3","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"f67c27347d821e4f626848d678458d16","sha1":"0cc4e3d0b0a4bc031160c4869f344f1e0e21a1e7","sha256":"92e8aa0fa734ee4dd5814c7e4125743f9d2d664cc211b49f97639f563273322b","sha512":"030bedd44b91bdc1300e3ee9ae0708fea7f3e944ae01184e3429d8401d0ac8a0bee0d4e7933ece51d3e643036c887051147b13aa3116d7cc8510624ea7a03d4a","ssdeep":"","tlshash":"1c01dcc0b6ac5866730a00bc5e0bf007c4a06fe87c7ca519f6f06cc3a89b14693d98b2","size":747,"data":"","first_seen":"2025-04-13T06:37:08.571365Z","last_seen":"2025-12-05T09:37:09.366874Z","times_seen":1060,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"78se.xyz/","fqdn":"78se.xyz","domain":"78se.xyz","tld":"xyz"},"ip":{"addr":"104.21.31.3","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"aa98438a71a7ff9cffc1194643281ac2","sha1":"523c79859929fa7e10cf6e045979673b2d30a1a9","sha256":"0d461ba2830cbcfe242e1223c825d4ac8d75f789676ec895c5af419e6d84136e","sha512":"1f5295c60a85827a832219c5bb375f5a17b2d42f6a8f327b2258793f61eee2820cbf78f2a5d6e45b6894df2ac9a9cceebf3f1987f2ae7866cf6170e5221564a2","ssdeep":"","tlshash":"adc02b0860bcf4b04c57603d113e5773e52608f084404084b8f4cc0d038f2a0430c06c","size":137,"data":"","first_seen":"2023-04-18T18:51:54Z","last_seen":"2026-02-11T00:28:12.256563Z","times_seen":528,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"78se.xyz/","fqdn":"78se.xyz","domain":"78se.xyz","tld":"xyz"},"ip":{"addr":"104.21.31.3","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"e9130ee3214c3e35d2d033824c4ffafc","sha1":"bdbc5b028471a41ab7b8646236d4983bb0f84d2f","sha256":"915d4c25cb14b16a9d40e76cd7f774d895f30471e68304c0b3d1c94b24823d83","sha512":"f83885d9b1707768db99d52d2a0d335965604720027921865d233ce2a0edeb1f03b250a8b1829348ee73bd857e5c6bf73aa1c102d84dd49c74b9b48a0bab727a","ssdeep":"","tlshash":"44c0c060fb8c12180305030aa49f8008112517304db6a83224ac00ce48579154127817","size":162,"data":"","first_seen":"2025-08-17T08:52:00.575405Z","last_seen":"2026-02-11T00:28:12.233949Z","times_seen":110,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"78se.xyz/","fqdn":"78se.xyz","domain":"78se.xyz","tld":"xyz"},"ip":{"addr":"104.21.31.3","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"4c712c025176d329378d3d1b7d1030eb","sha1":"fb211756bd7ddbb4d66b0b66967c473f66648d7b","sha256":"cf5618ec1d2480025462cd8bda98726ba159f59583c59752b44dfc6fa558caf4","sha512":"212cf817299ae5ceee844aa51b2a774bd46845ba6a6fd098b9df5ed7d5155a2d7371be090a08186c7280f1e4989b86b37573bae8e567bd939ea77ea561259bf7","ssdeep":"96:r2mtmGmyWvUkuebsuBiheGTWvgkMBzmkmOWsksVMexpiljN8lL+utAC7OEx:r2mtmGmhnvnaeGTYgkSzmkmOWsk8Me3L","tlshash":"74a1f115907ef9b98c7bf026440df9b0f02619f2d6a196fcb874cc644ae9e904f6c12e","size":4890,"data":"","first_seen":"2023-07-11T15:33:08Z","last_seen":"2025-09-06T02:30:32.887685Z","times_seen":404,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"78se.xyz/","fqdn":"78se.xyz","domain":"78se.xyz","tld":"xyz"},"ip":{"addr":"104.21.31.3","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"3ca861d2b25f4badf3a049646ff82626","sha1":"1968b32db12d7f732dea73dfc8d0070c78c100f6","sha256":"c6bb85c10478069806e4de7a600e7924748f2d1b36a72f3bfca7ba2813ef30d4","sha512":"f604d25d607c848e568450dc72d47653d5a5b8ee4499e18472e448925de429cc9a3f59912ebbf0332d272c63737154ccbc0ed115aceb0ecb1e090bc74e17cc9c","ssdeep":"","tlshash":"57e0d86354fda4b68d86b45d84147f76e14b58e5d4209889c47cc97886247714b0987d","size":370,"data":"","first_seen":"2025-09-02T00:09:25.44112Z","last_seen":"2025-09-03T11:43:40.159669Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zgnzw.xyz/78se/js/t.js?ef75a608ba96411","fqdn":"zgnzw.xyz","domain":"zgnzw.xyz","tld":"xyz"},"ip":{"addr":"104.21.64.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"15f6f752e525883a9d573725291c03d6","sha1":"8d102a65cf363e0d745c200b68c0679c58cf7785","sha256":"ecdb9a187f4dc78f0a80edd52b285fd2e45fe2e25c13c08992af83b594986016","sha512":"134e8cd58ffa739bd88320b152c2ea4d001c1abcce80d265f706854c11565d8505d7ecf6e1d58ec39f7bcf1b238c2cb4fa06367885e675076290eefde0edc1ca","ssdeep":"1536:tW9OTFb2x4G18Mccbr8bK9xv8LLVW1sXE1:tqOTFb2x4GmMcA4OLQVfM","tlshash":"0233f95fb4c4f15e026224f8387f7648b1362f89ee18c315b266c4a4adbca961427f7c","size":53450,"data":"","first_seen":"2025-09-03T11:43:40.122685Z","last_seen":"2025-09-03T11:43:40.122685Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"78se.xyz/","fqdn":"78se.xyz","domain":"78se.xyz","tld":"xyz"},"ip":{"addr":"104.21.31.3","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"c45a4d97b9f69c6b8f748066f4b6a229","sha1":"55de315397a4f4c2ef97dfc18be32554966560f1","sha256":"26b94b01cfdb84083eed5ce81c16343953d9660c8f8aede22357bc007e3907ab","sha512":"21cd49629ad3a2a38ce542655f7a3a5ad111137154a538a479bb6197b10a4ce58909851df6527d651178d623a0f7aafa7c3ba513d7ca7c89914132842c2d36a0","ssdeep":"","tlshash":"22c02bcc21024d7001df0741075fb3006102301049c00c31084573442511c53a241c50","size":134,"data":"","first_seen":"2025-08-20T18:00:01.737338Z","last_seen":"2026-05-17T04:38:08.088476Z","times_seen":682,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"78se.xyz/","fqdn":"78se.xyz","domain":"78se.xyz","tld":"xyz"},"ip":{"addr":"104.21.31.3","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"3631207735133a3f9c7da5e4966cc647","sha1":"64eab7303bea3bd558a31056c5a4f2bfc7a10f9c","sha256":"dbe49f6b6fd90ee81da540cde468bcee2651db0caf6777bd07fa091467f8f084","sha512":"5791b5f4692a4963d2dff098b2f952ce1424ec6cbac94e6f55b23ef592ee7c4cc98f11b164097821851be43f82a6658417e8037509c36d79d0b972603081e68f","ssdeep":"","tlshash":"b6f0262152bef5b3dc5aa02c8a5e7ef6d46b19b9c550509ce8a8cc1c135c7f4470912c","size":647,"data":"","first_seen":"2023-05-06T06:14:35Z","last_seen":"2026-02-11T00:28:12.227347Z","times_seen":501,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"78se.xyz/","fqdn":"78se.xyz","domain":"78se.xyz","tld":"xyz"},"ip":{"addr":"104.21.31.3","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"0096467083ae80eaa899d29f9c9f0395","sha1":"bb82ab0731c448e29aa17f17f1de1b1cbc4f05a5","sha256":"9e161a5d5fde27dfc9a9eb445d5e3e6bf441f9fc2360341764e22f8ccac70eec","sha512":"3619f36caf8e4a4c8f8e84cc1628183e71ad72fe6dfa3a217eed6093ee451b20d9304b595f7f29a0036ebce9a07dfe23f84cb17a07163c12dcc4ebe59a002fc1","ssdeep":"","tlshash":"a0e0611e2957863c0cd47e0150bdd57d30f4349459738056b25dc86cc42dfc50c215dd","size":403,"data":"","first_seen":"2025-07-21T11:25:06.428577Z","last_seen":"2026-01-26T15:16:20.670852Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zgnzw.xyz/78se/js/b.js?5827b9b1d","fqdn":"zgnzw.xyz","domain":"zgnzw.xyz","tld":"xyz"},"ip":{"addr":"104.21.64.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"406e7b2b7cc58150add425a093e84481","sha1":"7d36cc11c3cfc2e6d51fe0a0d1e15739511059f6","sha256":"fbf197540865de8a17902a8007eedb273aca0c0ea0ddcb4d08b7bb239081c321","sha512":"5301b4a6767a743c294c02b1d02699559a27375ed70835e05349084dbfeb6289d9c0c3adae402199700bfdc019b513cb859fa2ce24ec8fd4b10fc486f7141e65","ssdeep":"6144:JmM1A16TJ6WCY6WChEivI9rIFMWF0e3K374zhgEnYZ3ABMQM8KGC1krDsGwubW:W1wh+zHKRkhBbW","tlshash":"f6642b89f591316217ab217690af300eb3360965ae0ac054b93dc1e87eb5e8c1377f7e","size":319248,"data":"","first_seen":"2025-09-03T11:43:40.140719Z","last_seen":"2025-09-04T15:06:40.356815Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-D67YNPCKN8","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.72","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"7a5600f3625931da11bf88bb979a7be9","sha1":"fc7741a27b2072398e5aeec6d8f9fb3c5c1ea2d2","sha256":"070680667ec2e70cd6fc8ad62aa8b11149ad95727bd459e8c71bb6c071849a91","sha512":"d3e174868e11bbd9adb42b4ad94eecf317ad6867687c75dffd3793055df86dd2be8c61c98b7a0b80f115323be59203e43fb1ad82e29e8d5295ec38b9f48440da","ssdeep":"6144:T6RtZl+/A35idBwqOUDpcttA00nb5rIVL4cZota38wH5iH:TmtZM/+wdBwqOUDpcXA99kj8H","tlshash":"019408ce73d674269396f478503f018ba57b29a2b44cc899f189cce42e34a9a4177f7c","size":413871,"data":"","first_seen":"2025-09-03T11:43:40.132537Z","last_seen":"2025-09-03T11:43:40.132537Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"78se.xyz/","fqdn":"78se.xyz","domain":"78se.xyz","tld":"xyz"},"ip":{"addr":"104.21.31.3","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"746e2fda6a261a2789fed211bc2d41cd","sha1":"5805ad710f70644ca0b72cddb389e91d775715a4","sha256":"e9c586866a68db9c6f5ac1c25d8d0a6c14408c75aeee1961ad84294cff8034a8","sha512":"2911a2e4609a1fb65d7e7e3abf91230a6b25e898a73c30bbac0973e56e65d12541a6a919a2d7e48d56b58aa4597caf26f2a9366a6397bc7be8760901044b0ee6","ssdeep":"","tlshash":"84c08c6204da90b28e86350010292eaab00a24b044808498c0acc82490116300b2a46c","size":140,"data":"","first_seen":"2023-05-06T06:14:35Z","last_seen":"2026-02-11T00:28:12.247741Z","times_seen":502,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"78se.xyz/","fqdn":"78se.xyz","domain":"78se.xyz","tld":"xyz"},"ip":{"addr":"104.21.31.3","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"9d02fbaf87382390a2af48e18a21a3b7","sha1":"10fd4d100e94684595d644f29267f1b8fd45550e","sha256":"2a28caacc7f4e2a738fdd623806956e65de626de2e1e096480cfc677d62f1e60","sha512":"f17f12e2076a4e9f9e8a74a55e3034d987e037ec31bc4349baab9d42cff649af6ec66ef69a7b1f9c02c4a072897fc8e8a395ecc1f29637f051243a6c5815e2c1","ssdeep":"","tlshash":"4031d37358dfa5badd42bc9a40183ab5a00f38bdc42098dde6bdc934d1247701f0e96e","size":1729,"data":"","first_seen":"2025-09-03T11:43:40.163545Z","last_seen":"2025-09-03T11:43:40.163545Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"78se.xyz/","fqdn":"78se.xyz","domain":"78se.xyz","tld":"xyz"},"ip":{"addr":"104.21.31.3","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"aeb82009d5a6770c01dc5dc2000d9d80","sha1":"c326a9f6b4f3943e373ae33f2f6fea5882f2cfb9","sha256":"2aab3829a0f4701e7525a2cc24106c318d9db90c10712a646e6ed8241f360e54","sha512":"30ead322da967c6bc23adaf405bb86192b8517b930dea5e99a34ef5d1540c0da897e8d2576f1d06199986a42241bc9bc210dfb4979ebc215a8aa8c55f3c8ffd2","ssdeep":"192:r8uixLTSOG9t2d8PsAGMOpTplYFz6TT4ZA8:rCTSzt+rpF4GU28","tlshash":"ae0396a364eff7b5ce26750b14097ce4e11aa96be810e5c9966dc820c424fb01f0f5be","size":37971,"data":"","first_seen":"2024-12-01T01:06:57.058337Z","last_seen":"2026-02-04T07:15:49.841096Z","times_seen":1442,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"timg216.top/videos/1b7c55af73699a2ef8725a2dc4eef6d12f96d3d4f8201f1a85b805b2fc95ae79/cover/5_505_259.webp?ih=1","fqdn":"timg216.top","domain":"timg216.top","tld":"top"},"ip":{"addr":"172.66.155.86","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://78se.xyz/","date":"2025-09-03T11:43:06.824Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"timg216.top","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Mon, 04 Aug 2025 04:37:13 GMT","end":"Sun, 02 Nov 2025 05:13:46 GMT"},"fingerprint":{"sha1":"09:98:82:E6:F6:CE:3A:0B:34:CA:7C:64:95:7C:21:B9:C3:D6:F3:7F","sha256":"2C:38:55:11:E8:93:E4:92:AF:46:8F:B3:8C:65:8E:0B:7C:53:7B:05:49:81:6B:17:A8:A7:13:D1:FA:7A:43:7E"}}},"request":{"raw":"GET /videos/1b7c55af73699a2ef8725a2dc4eef6d12f96d3d4f8201f1a85b805b2fc95ae79/cover/5_505_259.webp?ih=1 HTTP/1.1\r\nHost: timg216.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://78se.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 03 Sep 2025 11:43:07 GMT\r\ncontent-type: image/webp\r\ncontent-length: 93514\r\nserver: cloudflare\r\nlast-modified: Sun, 18 May 2025 11:55:27 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"6829caaf-16d4a\"\r\nexpires: Sun, 20 Jul 2025 22:48:53 GMT\r\ncache-control: public, max-age=31536000, stale-if-error=7200\r\nt-cache: LHIT\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=e7MaiYQSIb0%2FAEfFCd%2F6oRNtTWq6IJgBFi%2FvHpHeTjnYbKWUTuhCc3aLgwRCxQBiRcdUjc30lJmwRr8nTbqvi%2BAWof6DXNXXtK3t\"}]}\r\ncf-ray: 9794fcd648f58deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":93514,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 505x259, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"f1ddde5888cdc13b604f4f36487e5a1e","sha1":"85186ef8132546673c7f02dde5cda5f811b4c835","sha256":"5f51115772508c34b69027ef36e115aa61c51ca696208b751d43d280b542bc1d","sha512":"5d56adbcae81fc17c2c38cec9789f90cef4bd0eca5c95ecd0840ed624bbe050aa6ef969174fbe0423496caae21a488a16effbc152bae4b5998aeb6690f47fbd4","ssdeep":"1536:J5unHNctMkzPFJh2lfLtZBCfZpeNy2a/ZZ6o+2z3inKeBobcaxfL0ScN4Y8T96XS:CtrkzHh2lfLteeuRZ6onz3inALxDKgT1","tlshash":"c9930241113e62fd8d30d58581999c692cf34fe1ee4ecf854daa97682f3e426bc6e1e0","first_seen":"2025-09-03T11:43:40.120711Z","last_seen":"2025-10-26T17:03:37.063185Z","times_seen":2,"resource_available":false,"data":null}},"time_used":480,"timings":{"blocked":-1,"dns":370,"connect":1,"send":0,"wait":47,"receive":3,"ssl":50},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zz.bdstatic.com/linksubmit/push.js","fqdn":"zz.bdstatic.com","domain":"bdstatic.com","tld":"com"},"ip":{"addr":"157.255.63.48","port":443,"asn":136958,"as":"China Unicom Guangdong IP network","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://78se.xyz/","date":"2025-09-03T11:43:07.530Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"baidu.com","organization":"Beijing Baidu Netcom Science Technology Co., Ltd"},"issuer":{"commonName":"GlobalSign RSA OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 09 Jul 2025 07:01:02 GMT","end":"Mon, 10 Aug 2026 07:01:01 GMT"},"fingerprint":{"sha1":"21:BF:66:0D:67:BE:7A:7F:49:48:05:30:F4:7F:09:F2:30:36:CA:63","sha256":"0D:82:2C:9A:90:5A:EF:E9:8F:37:12:C0:E0:26:30:EE:95:33:2C:45:5F:E7:74:5D:F0:8D:BC:79:F4:B0:A1:49"}}},"request":{"raw":"GET /linksubmit/push.js HTTP/1.1\r\nHost: zz.bdstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://78se.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: JSP3/2.0.14\r\ndate: Wed, 03 Sep 2025 11:43:08 GMT\r\ncontent-type: application/x-javascript\r\nlast-modified: Tue, 15 Jul 2025 09:58:18 GMT\r\netag: \"6876263a-134\"\r\ncache-control: max-age=86400\r\ncontent-encoding: br\r\nage: 30117\r\naccept-ranges: bytes\r\ntracecode: 04151469580473927434090311\r\nohc-global-saved-time: Wed, 03 Sep 2025 03:06:55 GMT\r\nohc-cache-hit: gz5un69 [2], zhuzuncache53 [2]\r\nohc-response-time: 1 0 0 0 0 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":308,"size_decoded":0,"mime_type":"application/x-javascript","magic":"ASCII text, with very long lines (308), with no line terminators","md5":"f9fc52ab67f035b8baf5d558714cc94d","sha1":"37062a6fb1ef410d496137d44275738ae743c747","sha256":"c31f2003f1c93ac1e34b09f376d97a65da6e110bf451cf1e0e50a7946c5e7212","sha512":"ebb0415852fbb5b964094e2e55a28b90f701dff1977c8b98c6f24d65d09067dc0c417d01492ca28a4be6747816d7c0bfac87b73a33725aee047a5d2f7ab83182","ssdeep":"","tlshash":"11e0cde86054c01c0dcb107135bb324ce7771d675a645545c04d9445396cb1f8247fe9","first_seen":"2023-03-07T01:18:58Z","last_seen":"2026-09-22T10:40:07.18577Z","times_seen":23654,"resource_available":true,"data":null}},"time_used":1298,"timings":{"blocked":0,"dns":375,"connect":295,"send":0,"wait":295,"receive":0,"ssl":327},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zgnzw.xyz/78se/js/t.js?ef75a608ba96411","fqdn":"zgnzw.xyz","domain":"zgnzw.xyz","tld":"xyz"},"ip":{"addr":"104.21.64.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://78se.xyz/","date":"2025-09-03T11:43:04.959Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zgnzw.xyz","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Thu, 28 Aug 2025 19:07:46 GMT","end":"Wed, 26 Nov 2025 19:26:43 GMT"},"fingerprint":{"sha1":"E6:8E:E7:2D:37:3A:1B:47:14:0D:E1:AE:88:88:61:4A:D7:91:FD:43","sha256":"EA:DF:AD:0B:9B:AF:51:50:79:41:88:6D:1A:5F:87:3F:4E:C3:02:AD:43:AD:11:1A:49:BE:7C:46:30:D9:7C:F9"}}},"request":{"raw":"GET /78se/js/t.js?ef75a608ba96411 HTTP/1.1\r\nHost: zgnzw.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://78se.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 03 Sep 2025 11:43:05 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Wed, 03 Sep 2025 05:56:12 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\netag: \"68b7d87c-d14e\"\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: gzip\r\ncache-control: max-age=2073600\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3kPnLyy97xBeTNERmneU6EqG0zA2pflnYNuVSQNGr4KRz76m3oysnN2IxrI2xAoRMeXbwP71iUkIGwOEdwNJ3HiUtD4pwig%3D\"}]}\r\ncf-ray: 9794fccaa84bb4f1-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":53582,"size_decoded":0,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text, with very long lines (52844), with no line terminators","md5":"15f6f752e525883a9d573725291c03d6","sha1":"8d102a65cf363e0d745c200b68c0679c58cf7785","sha256":"ecdb9a187f4dc78f0a80edd52b285fd2e45fe2e25c13c08992af83b594986016","sha512":"134e8cd58ffa739bd88320b152c2ea4d001c1abcce80d265f706854c11565d8505d7ecf6e1d58ec39f7bcf1b238c2cb4fa06367885e675076290eefde0edc1ca","ssdeep":"1536:tW9OTFb2x4G18Mccbr8bK9xv8LLVW1sXE1:tqOTFb2x4GmMcA4OLQVfM","tlshash":"0233f95fb4c4f15e026224f8387f7648b1362f89ee18c315b266c4a4adbca961427f7c","first_seen":"2025-09-03T11:43:40.122685Z","last_seen":"2025-09-03T11:43:40.122685Z","times_seen":1,"resource_available":true,"data":null}},"time_used":1041,"timings":{"blocked":427,"dns":403,"connect":3,"send":0,"wait":179,"receive":0,"ssl":26},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"78se.xyz/static/images/placeholder.png?v=1","fqdn":"78se.xyz","domain":"78se.xyz","tld":"xyz"},"ip":{"addr":"104.21.31.3","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://78se.xyz/","date":"2025-09-03T11:43:04.962Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"78se.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 04 Aug 2025 09:35:11 GMT","end":"Sun, 02 Nov 2025 10:33:51 GMT"},"fingerprint":{"sha1":"A6:6D:59:C7:59:39:9A:71:85:FD:DB:95:F7:49:09:76:4A:BF:85:3D","sha256":"2E:00:71:1F:94:DD:4E:97:59:9C:25:76:C0:B0:7A:66:D1:67:40:2E:3E:56:46:82:8B:F2:B8:C4:F8:88:87:9A"}}},"request":{"raw":"GET /static/images/placeholder.png?v=1 HTTP/1.1\r\nHost: 78se.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://78se.xyz/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 03 Sep 2025 11:43:05 GMT\r\ncontent-type: image/png\r\ncontent-length: 1126\r\nlast-modified: Sat, 14 Jun 2025 04:32:40 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\netag: \"684cfb68-466\"\r\naccept-ranges: bytes\r\ncache-control: max-age=31536000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0dVN3mnYcCIcs0rCdhkUrwZe8m3fH4cd3wACJhYyLBqjM9avTIFstHu19qK3U%2BKPLtCWqyMmIKCuNlEYeynljNYKmhs6DsLD\"}]}\r\ncf-ray: 9794fcc7fa942efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1126,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 505 x 259, 8-bit/color RGBA, non-interlaced","md5":"1f5665f8bdc8aed6cf6f2aa10e48ac18","sha1":"e44c3c49bd2f14eaadef5b3775fc3f5da039288e","sha256":"9a66cac0788d315c4909b62c9290287c0ff9db72ea53bed8754661ca423c2014","sha512":"44229477b6613f7a1a11e5aa9ce5e437611204b3ad63426b31e7fcf8094feed44d7eeb71a2bb2aa6a4a92d0f7ba090a4328b17a6c3a39bfa56a6ed4956171241","ssdeep":"","tlshash":"cd2114c77354cc3055350551033d5573f57f30d40551404f050d5453045175441771f7","first_seen":"2023-05-05T00:33:54Z","last_seen":"2026-07-09T03:53:57.104289Z","times_seen":1675,"resource_available":false,"data":null}},"time_used":69,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":69,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"timg216.top/videos/08e3f3382955df0c5fe551dcddab1cd33d911ed69c6d18f984f03ccca3e12a01/cover/5_505_259.webp?ih=1","fqdn":"timg216.top","domain":"timg216.top","tld":"top"},"ip":{"addr":"172.66.155.86","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://78se.xyz/","date":"2025-09-03T11:43:06.872Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"timg216.top","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Mon, 04 Aug 2025 04:37:13 GMT","end":"Sun, 02 Nov 2025 05:13:46 GMT"},"fingerprint":{"sha1":"09:98:82:E6:F6:CE:3A:0B:34:CA:7C:64:95:7C:21:B9:C3:D6:F3:7F","sha256":"2C:38:55:11:E8:93:E4:92:AF:46:8F:B3:8C:65:8E:0B:7C:53:7B:05:49:81:6B:17:A8:A7:13:D1:FA:7A:43:7E"}}},"request":{"raw":"GET /videos/08e3f3382955df0c5fe551dcddab1cd33d911ed69c6d18f984f03ccca3e12a01/cover/5_505_259.webp?ih=1 HTTP/1.1\r\nHost: timg216.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://78se.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 03 Sep 2025 11:43:07 GMT\r\ncontent-type: image/webp\r\ncontent-length: 82742\r\nserver: cloudflare\r\nlast-modified: Sun, 18 May 2025 12:59:03 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"6829d997-14336\"\r\nexpires: Wed, 03 Sep 2025 21:50:49 GMT\r\ncache-control: public, max-age=31536000, stale-if-error=7200\r\nt-cache: LHIT\r\naccept-ranges: bytes\r\nage: 17747\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=c7AZwRnuArhoY8HXwIMRlsa7gPQmwzRDx4BI%2FBcPExakebtrj4BPOMwqsF%2F6lmZmJL4k%2Bgnu%2FZcyXFfkAJLBQrW3wafy7HBaFkFE\"}]}\r\ncf-ray: 9794fcd638c88deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":82742,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 505x259, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"3617a5e97c6e7d9280a8ccfe970b1dc9","sha1":"a3e954b564c8555a18bbafaee42ecc571e3f44ce","sha256":"9ef15ff105bed87b8500a61c61997066b1f8db6102e801c6a7115d3333aee004","sha512":"beb3d58b429a4df720a4fac60b9dc77487fefe6034d9123cfb4d897b89330d72996dab20bdcaebbdb2d4abefb3ffb9af2a6826fb26ea3966e70a6292820d7802","ssdeep":"1536:p6TO/BATI1ZCmApiUTIJ8NLJ4m6nJkDFk3BMyY7dNvNKTBUCJdoae/M0Mv51:uOX1ZCmOf4mikDbyYRNlaBUYuT/d6","tlshash":"438301f4624d7361277b023de7b34bcaa48ecb7dad93b38d01d992d582a631c538056c","first_seen":"2025-09-03T11:43:40.124489Z","last_seen":"2025-09-03T11:43:40.124489Z","times_seen":1,"resource_available":false,"data":null}},"time_used":386,"timings":{"blocked":362,"dns":0,"connect":0,"send":0,"wait":19,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sp0.baidu.com/9_Q4simg2RQJ8t7jm9iCKT-xh_/s.gif?l=https://78se.xyz/","fqdn":"sp0.baidu.com","domain":"baidu.com","tld":"com"},"ip":{"addr":"103.235.46.115","port":443,"asn":55967,"as":"Beijing Baidu Netcom Science and Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://78se.xyz/","date":"2025-09-03T11:43:08.885Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"baidu.com","organization":"Beijing Baidu Netcom Science Technology Co., Ltd"},"issuer":{"commonName":"GlobalSign RSA OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 09 Jul 2025 07:01:02 GMT","end":"Mon, 10 Aug 2026 07:01:01 GMT"},"fingerprint":{"sha1":"21:BF:66:0D:67:BE:7A:7F:49:48:05:30:F4:7F:09:F2:30:36:CA:63","sha256":"0D:82:2C:9A:90:5A:EF:E9:8F:37:12:C0:E0:26:30:EE:95:33:2C:45:5F:E7:74:5D:F0:8D:BC:79:F4:B0:A1:49"}}},"request":{"raw":"GET /9_Q4simg2RQJ8t7jm9iCKT-xh_/s.gif?l=https://78se.xyz/ HTTP/1.1\r\nHost: sp0.baidu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://78se.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Length: 0\r\nContent-Type: text/plain; charset=utf-8\r\nDate: Wed, 03 Sep 2025 11:43:10 GMT\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-22T22:48:26.020574Z","times_seen":18607473,"resource_available":true,"data":null}},"time_used":2606,"timings":{"blocked":1137,"dns":326,"connect":265,"send":0,"wait":333,"receive":0,"ssl":543},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zgnzw.xyz/78se/js/lib-a.js?0e915775e","fqdn":"zgnzw.xyz","domain":"zgnzw.xyz","tld":"xyz"},"ip":{"addr":"104.21.64.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://78se.xyz/","date":"2025-09-03T11:43:04.961Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zgnzw.xyz","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Thu, 28 Aug 2025 19:07:46 GMT","end":"Wed, 26 Nov 2025 19:26:43 GMT"},"fingerprint":{"sha1":"E6:8E:E7:2D:37:3A:1B:47:14:0D:E1:AE:88:88:61:4A:D7:91:FD:43","sha256":"EA:DF:AD:0B:9B:AF:51:50:79:41:88:6D:1A:5F:87:3F:4E:C3:02:AD:43:AD:11:1A:49:BE:7C:46:30:D9:7C:F9"}}},"request":{"raw":"GET /78se/js/lib-a.js?0e915775e HTTP/1.1\r\nHost: zgnzw.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://78se.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 03 Sep 2025 11:43:05 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Wed, 03 Sep 2025 05:56:27 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\netag: \"68b7d88b-9df2\"\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: gzip\r\ncache-control: max-age=2073600\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=g1QH%2F9VZEY9LpGqNG2AQ37mHBHWGpjPo6Owc%2FYikqdEMR4gy4mhzZCBhDiHfOp7%2F296Uim1i%2Byka3Azow7JOt4GFWM3UJ6g%3D\"}]}\r\ncf-ray: 9794fccaa851b4f1-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":40434,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (39776), with no line terminators","md5":"89dff06aa2719ef3ded0999181597a97","sha1":"e887aa7d5464b64811b3204e519eb8050621ccd1","sha256":"5bff16d6796815df873306b379ef092f717e59785fbb245a15719ddfda028ae2","sha512":"59d2e08bec169b5bf211ef347323e3d5668c50035a33995a22ba7263982353438d6b52c464fccaeb2905dec43007eaffe244f23afb97f5acdf62fbe10f91d5d4","ssdeep":"384:voSMtpC52MXwxymAw3uOsfxshyqDnbj4bKSGKIujecg9x+el2vgpX4FCuJ+kgnnj:wDt852M1mKkob7jAxJl2vg1uEJnklici","tlshash":"3503e88d3299b03212eb1432642f3606b1366d9f548d941c7e28e8d9fdb48cda537f79","first_seen":"2025-09-03T11:43:40.12668Z","last_seen":"2025-09-04T15:06:40.375348Z","times_seen":3,"resource_available":true,"data":null}},"time_used":1041,"timings":{"blocked":427,"dns":401,"connect":3,"send":0,"wait":179,"receive":0,"ssl":22},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"5454ylylgh.oss-accelerate.aliyuncs.com/1.gif","fqdn":"5454ylylgh.oss-accelerate.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.254.187.92","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://78se.xyz/","date":"2025-09-03T11:43:06.607Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.oss-eu-central-1.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 22 Jul 2025 07:01:19 GMT","end":"Tue, 03 Feb 2026 06:31:07 GMT"},"fingerprint":{"sha1":"6C:EE:57:9F:65:29:D7:D3:C1:99:78:B2:75:63:E0:EE:44:D4:84:F4","sha256":"B7:0E:2A:7E:2D:89:E5:97:44:5D:54:7F:D1:95:50:EF:72:09:42:B9:A8:8C:B3:A7:B6:8B:3D:24:9B:AF:45:C6"}}},"request":{"raw":"GET /1.gif HTTP/1.1\r\nHost: 5454ylylgh.oss-accelerate.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://78se.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 301 Moved Permanently\r\nServer: AliyunOSS\r\nDate: Wed, 03 Sep 2025 11:43:07 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\nx-oss-request-id: 68B829CBC78E72645FE5A95F\r\nLocation: https://xxtututu.0olut8.com/1.gif\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":523764,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-22T22:48:26.020574Z","times_seen":18607473,"resource_available":true,"data":null}},"time_used":829,"timings":{"blocked":334,"dns":243,"connect":20,"send":0,"wait":141,"receive":0,"ssl":87},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"none309.xyz/","fqdn":"none309.xyz","domain":"none309.xyz","tld":"xyz"},"ip":{"addr":"172.67.180.20","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-09-03T11:43:04.468Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"none309.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 28 Jul 2025 20:44:53 GMT","end":"Sun, 26 Oct 2025 21:38:40 GMT"},"fingerprint":{"sha1":"4C:99:01:27:02:B9:F3:A0:E4:96:B4:D4:D9:E8:20:0E:56:26:BA:AA","sha256":"F1:C8:56:77:22:54:E3:2A:F9:C0:18:DC:F6:70:3D:43:9F:ED:AB:C4:F0:59:B3:0E:3F:86:03:33:A8:DE:95:E0"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: none309.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 Moved Permanently\r\ndate: Wed, 03 Sep 2025 11:43:04 GMT\r\nlocation: https://78se.xyz/\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=s0cUB12MtXc927UolTWixFSHw8PMmhzuG0smb%2FPUeD%2BsTQ%2FmLPq70pn1PSHmS27mPYVpw5if0S60k5SDzFi%2BhOSfPxvv2mnuZw%2Bj\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 9794fcc51ed98be6-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":87956,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-22T22:48:26.020574Z","times_seen":18607473,"resource_available":true,"data":null}},"time_used":70,"timings":{"blocked":33,"dns":14,"connect":1,"send":0,"wait":3,"receive":0,"ssl":16},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"78se.xyz/","fqdn":"78se.xyz","domain":"78se.xyz","tld":"xyz"},"ip":{"addr":"104.21.31.3","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-09-03T11:43:04.508Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"78se.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 04 Aug 2025 09:35:11 GMT","end":"Sun, 02 Nov 2025 10:33:51 GMT"},"fingerprint":{"sha1":"A6:6D:59:C7:59:39:9A:71:85:FD:DB:95:F7:49:09:76:4A:BF:85:3D","sha256":"2E:00:71:1F:94:DD:4E:97:59:9C:25:76:C0:B0:7A:66:D1:67:40:2E:3E:56:46:82:8B:F2:B8:C4:F8:88:87:9A"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: 78se.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 03 Sep 2025 11:43:04 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\nghash: _bf24dfb1531\r\nt-ray: ws9\r\nipcountry: US\r\ncache-key: 78se:_bf24dfb1531:/\r\nserver: cloudflare\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gjDPEpb%2BOBeAU3RwWBzPa%2B26jEhtAqFUwyKCJDnM2ov7Su254kuxvyRowQN8dKPH5eC8d2BOBK2EFcDeXlaWsSnRrv6gSOuL\"}]}\r\nw-cache: MISS\r\nexpires: Sun, 02 Nov 2025 06:05:21 GMT\r\ncache-control: public, max-age=31536000, stale-if-error=1209600\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,HEAD,OPTIONS\r\ncf-cache-status: HIT\r\ncontent-encoding: br\r\ncf-ray: 9794fcc5a81edfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]}],"data":{"size":87956,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (28490)","md5":"ef2b54a2337f66f2b06e54b7d12a4100","sha1":"dd0b8950162c828dbf0ed4f647acaeb270e808cb","sha256":"1a6a33f08b392b2ace164056aed64c140f603d0b7c67ab86133480c8b866ea5c","sha512":"026bcd896ace4718e5cd414724f506efc11e08eb875c9e9801ad7d4862e879880012041f5fcb1cea75df2fbd7e2f0caa914e516a9d1ff8249a0b37a224a38325","ssdeep":"1536:EdICJONxax08ln1+E5AsUhl1LJVdtQL8P9L4FVdi/OUO47+LA1IfmLL2nkqQA0yD:1aW8ln1+E5AsUhl1LJVdtQL8P9L4FV8m","tlshash":"b1835613d546713b137390df2e26bf6eb7d3805dcf6759126afc19aa87c5e0068032aa","first_seen":"2025-09-03T11:43:40.127796Z","last_seen":"2025-09-03T11:43:40.127796Z","times_seen":1,"resource_available":false,"data":null}},"time_used":215,"timings":{"blocked":78,"dns":57,"connect":1,"send":0,"wait":59,"receive":0,"ssl":17},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"78se.xyz/app/user/info?reactive=true","fqdn":"78se.xyz","domain":"78se.xyz","tld":"xyz"},"ip":{"addr":"104.21.31.3","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://78se.xyz/","date":"2025-09-03T11:43:05.884Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"78se.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 04 Aug 2025 09:35:11 GMT","end":"Sun, 02 Nov 2025 10:33:51 GMT"},"fingerprint":{"sha1":"A6:6D:59:C7:59:39:9A:71:85:FD:DB:95:F7:49:09:76:4A:BF:85:3D","sha256":"2E:00:71:1F:94:DD:4E:97:59:9C:25:76:C0:B0:7A:66:D1:67:40:2E:3E:56:46:82:8B:F2:B8:C4:F8:88:87:9A"}}},"request":{"raw":"GET /app/user/info?reactive=true HTTP/1.1\r\nHost: 78se.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://78se.xyz/\r\nwebhash: _bf24dfb1531\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 03 Sep 2025 11:43:06 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sRVNy0yMnbqVTsIJ2U5qMpzF9qfPymY%2BbU43Ng3tMJSyrrSTxQvnc9XM4380SaX0ODwxc73IQyJ1OPdfeaMWeU3HCmLYG2v0\"}]}\r\nset-cookie: tguest=guestd2e92eb2c8374ae6bafca2959e6737b9; Path=/\r\nghash: _bf24dfb1531\r\nt-ray: ws9\r\nserver: cloudflare\r\naccess-control-allow-credentials: True\r\naccess-control-allow-origin: *, *\r\naccess-control-allow-headers: x-requested-with,content-type,Authorization,token,app-lang,uuid,version\r\naccess-control-allow-methods: POST, GET, OPTIONS, GET,HEAD,OPTIONS\r\nx-ray: unkown-unkown\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncache-control: public, max-age=31536000, stale-if-error=1209600\r\ncf-cache-status: DYNAMIC\r\netag: W/\"ac13270ebe20c6a6bdf5d71e8d8548b14e71661a\"\r\ncf-ray: 9794fccdcb6d2efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":182,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"JSON text data","md5":"e14208b2f8543a17ef5903ae5fa18d4e","sha1":"ac13270ebe20c6a6bdf5d71e8d8548b14e71661a","sha256":"389eb9f77498cbef705597447461586bd4bd968b8516d4c45c973cb145354d07","sha512":"6b2c35f17673b7aa0c629de3c4ae54ee0e5e385c1ab2c316ce2f2d96d31cf3b578b816df27055b1717d315882a383668362f958548ae6528baca683de601d025","ssdeep":"","tlshash":"f5c0c00a1c6846207c41410c584f834883fc900490479224ceeb2b3c88553fbfb424b8","first_seen":"2025-09-03T11:43:40.128832Z","last_seen":"2025-09-03T11:43:40.128832Z","times_seen":1,"resource_available":false,"data":null}},"time_used":343,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":343,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xm777111.img8822437445.com:8686/8888/xm/508/80.gif","fqdn":"xm777111.img8822437445.com","domain":"img8822437445.com","tld":"com"},"ip":{"addr":"45.8.115.31","port":8686,"asn":4785,"as":"xTom","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://78se.xyz/","date":"2025-09-03T11:43:06.616Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xm777111.img8822437445.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 02 Sep 2025 06:59:29 GMT","end":"Mon, 01 Dec 2025 06:59:28 GMT"},"fingerprint":{"sha1":"60:C3:F6:09:E6:66:39:8E:1A:1F:F4:0D:9D:8F:D9:0F:A1:14:47:99","sha256":"05:C2:FE:E3:C3:56:74:B6:CF:ED:5C:51:FC:C8:B7:AC:5F:B0:CC:4F:CB:0E:09:A4:DD:D3:81:72:CA:98:64:0C"}}},"request":{"raw":"GET /8888/xm/508/80.gif HTTP/1.1\r\nHost: xm777111.img8822437445.com:8686\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://78se.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 03 Sep 2025 11:43:07 GMT\r\ncontent-type: image/gif\r\ncontent-length: 321991\r\nlast-modified: Wed, 07 Aug 2024 12:28:58 GMT\r\netag: \"66b3688a-4e9c7\"\r\nexpires: Fri, 03 Oct 2025 07:58:10 GMT\r\ncache-control: max-age=2592000\r\nserver: nginx\r\nx-cache-status: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":321991,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 960 x 80","md5":"8eb97ba562904f64f2af2389f0d3eda9","sha1":"d484a2e519bf260b9eb53cfa5605220cd47879f2","sha256":"e1d1188c5ea2f2e00d0bb7212087e87ab63c898e2795c95bd1ca8ee0d09725fc","sha512":"3dc76ebf8c5b24a977ccdfae07d5e12b91d2ca2e4a08d4db2f5f9278e83417e27b3c738bf15b18597b3eca766d2766df81c4e99c3435004c6aa2d888efff49b0","ssdeep":"6144:GYfxY0XuOEXuOEXuOEXuYA24yAiwYpsv92JDiq85S92JDiq85S92JDiq85S92JDH:PzNaNaNaDAOAfYvmfDmfDmfDhMDeMDep","tlshash":"e86402bb13074bc9dafa4dc519289bd6af0524642cb39c37408d746e132673faba1f94","first_seen":"2024-08-13T16:44:54Z","last_seen":"2026-09-20T07:05:03.158017Z","times_seen":3095,"resource_available":false,"data":null}},"time_used":3171,"timings":{"blocked":764,"dns":190,"connect":290,"send":0,"wait":595,"receive":1031,"ssl":297},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"5845-xxpp.oss-accelerate.aliyuncs.com/5845.gif","fqdn":"5845-xxpp.oss-accelerate.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.253.28.37","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://78se.xyz/","date":"2025-09-03T11:43:06.611Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-us-east-1.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 22 Jul 2025 07:00:51 GMT","end":"Sat, 21 Mar 2026 02:06:18 GMT"},"fingerprint":{"sha1":"06:EA:AD:0E:60:05:28:B3:AC:E0:38:73:8B:45:F2:D6:47:B7:26:E5","sha256":"39:23:CA:F7:4A:3B:68:8A:0F:80:33:95:BA:3E:E7:C7:5F:C8:94:21:6E:0F:75:F9:BB:A6:6E:BF:14:E5:72:D2"}}},"request":{"raw":"GET /5845.gif HTTP/1.1\r\nHost: 5845-xxpp.oss-accelerate.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://78se.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Wed, 03 Sep 2025 11:43:07 GMT\r\nContent-Type: image/gif\r\nContent-Length: 324299\r\nConnection: keep-alive\r\nx-oss-request-id: 68B829CBFCBA354D78DC7351\r\nAccept-Ranges: bytes\r\nETag: \"4B824F5452A8379A4BB6FA2FB82E8F45\"\r\nLast-Modified: Sat, 16 Aug 2025 12:43:43 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 12781593188817417989\r\nx-oss-storage-class: Standard\r\nx-oss-ec: 0048-00000104\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: S4JPVFKoN5pLtvovuC6PRQ==\r\nx-oss-server-time: 3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":324299,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 960 x 80","md5":"4b824f5452a8379a4bb6fa2fb82e8f45","sha1":"0f97bfec583629d21f1737c3c806ba51ab7c9293","sha256":"92ba0c5c9930dc38fbd04c327b93437aba42e38f4fcc846b87a16b4df7ebfd45","sha512":"63850000d20788adb9bc6e6717361f4fb5595fb088a8f03117330ae1ffa548c35520b8a55ff5c5f3233f4872c8865fb5053b10ef7048b20ac89be1926fbbe180","ssdeep":"6144:SaYYr01IgV9vpSy5a0OEJNRflIGIxltJczWpokkkf30akgUJyJm5q8nrx6OJ3:Lr01I6vvNOEJrGGcmzW2kP0akgUJL5qY","tlshash":"146423d208acd8c13702b3de1ead15970ebe84526f712b285e9b9094a75c2bb707df74","first_seen":"2023-08-25T22:48:22Z","last_seen":"2026-06-10T07:47:35.585542Z","times_seen":1913,"resource_available":false,"data":null}},"time_used":2557,"timings":{"blocked":877,"dns":501,"connect":118,"send":0,"wait":364,"receive":418,"ssl":266},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yj777111.img5811783201.com:8686/8888/bmw/80.gif","fqdn":"yj777111.img5811783201.com","domain":"img5811783201.com","tld":"com"},"ip":{"addr":"45.8.115.31","port":8686,"asn":4785,"as":"xTom","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://78se.xyz/","date":"2025-09-03T11:43:06.613Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yj777111.img5811783201.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 02 Sep 2025 06:59:34 GMT","end":"Mon, 01 Dec 2025 06:59:33 GMT"},"fingerprint":{"sha1":"CE:D4:56:A1:5A:82:BE:8C:2D:0E:C0:DB:D2:13:66:55:89:0B:08:86","sha256":"3C:33:3F:CD:F9:AC:A6:AA:49:CA:66:A9:CB:21:3A:BA:BA:9F:94:49:93:88:0E:0B:77:E0:59:DE:40:2A:58:C9"}}},"request":{"raw":"GET /8888/bmw/80.gif HTTP/1.1\r\nHost: yj777111.img5811783201.com:8686\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://78se.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 03 Sep 2025 11:43:07 GMT\r\ncontent-type: image/gif\r\ncontent-length: 347979\r\nlast-modified: Sat, 12 Jul 2025 14:04:53 GMT\r\netag: \"68726b85-54f4b\"\r\nexpires: Fri, 03 Oct 2025 07:58:11 GMT\r\ncache-control: max-age=2592000\r\nserver: nginx\r\nx-cache-status: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":347979,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 960 x 80","md5":"90bdc09a6a9709d8c50c9d56e0655ac4","sha1":"fa7c36cb4fb947091e342864d5f48d9d414be187","sha256":"b62e4139f82c390023993578b8936726e370aefb6ceee25fa7d9440850d7a698","sha512":"aa499b587ea61f846187b64aae2e576f595ddce17d6c082651f5e27077675db72723c7c9386be26e7b8d17935a88a518905739168a701a3ab5cdec72493e2245","ssdeep":"6144:SQDmjQDmjQDmjQDmjeV8aODtqyaODtqyaODtqyaODtqBdAxUuECBdAxUuECBdAxQ:hzzzHV8555nMMMl","tlshash":"57740263c3724c6c82deb3d19f2750143b892571adea0532dacba59b044333fa6afe15","first_seen":"2025-07-31T06:22:34.522761Z","last_seen":"2026-05-20T19:57:43.679577Z","times_seen":202,"resource_available":false,"data":null}},"time_used":3022,"timings":{"blocked":738,"dns":198,"connect":265,"send":0,"wait":265,"receive":1259,"ssl":293},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xxtututu.0olut8.com/1.gif","fqdn":"xxtututu.0olut8.com","domain":"0olut8.com","tld":"com"},"ip":{"addr":"123.6.18.114","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://78se.xyz/","date":"2025-09-03T11:43:07.205Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xxtututu.0olut8.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 Aug 2025 10:10:56 GMT","end":"Mon, 24 Nov 2025 10:10:55 GMT"},"fingerprint":{"sha1":"D2:48:02:01:F7:CA:B7:42:87:77:7B:61:04:D3:DB:8C:41:FA:78:AA","sha256":"F8:9C:6A:77:9F:B4:48:FD:9E:92:B1:D6:DB:C2:21:65:13:D9:C6:2D:74:E0:AA:B7:F0:EB:C2:63:D2:FF:10:E1"}}},"request":{"raw":"GET /1.gif HTTP/1.1\r\nHost: xxtututu.0olut8.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://78se.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: NgxFence\r\ndate: Wed, 03 Sep 2025 11:43:08 GMT\r\ncontent-type: image/gif\r\ncontent-length: 523764\r\nlast-modified: Wed, 25 Dec 2024 12:48:17 GMT\r\netag: \"676bff11-7fdf4\"\r\nexpires: Thu, 25 Sep 2025 11:17:58 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nx-cache: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":523764,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 960 x 80","md5":"8102b307619a90c2245da75bc7445fd9","sha1":"21ed3095f76e34fe8134cf4575c75b785616c4a7","sha256":"c2e316430822c76ff6bb32ba2b68876d2d930398f8e3f88cb70578c0b8fe03d7","sha512":"626b85d75d51b59fe4bf33528dfcf5290034db68b4746a9e7f5492f61ab43899d5f63c8efa6933ecaf2afdedf086127cb33cef2ff2d70aa405c2b3b0c0d7d3e4","ssdeep":"12288:uRM7hlTdJE/o5galslzMF7ZnxwWgwirPr:uRgx6/oizM1Jxw9wWPr","tlshash":"46b423ef842de8291f06b8b154610ee5658b9d87f8d5d329f7a4ccb6cac4ce8508473b","first_seen":"2024-12-26T06:54:57.165453Z","last_seen":"2026-09-22T21:34:02.312578Z","times_seen":2633,"resource_available":false,"data":null}},"time_used":3083,"timings":{"blocked":4,"dns":1015,"connect":273,"send":0,"wait":936,"receive":571,"ssl":283},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"768tup.oss-cn-hongkong.aliyuncs.com/ggt/768-1960x80.gif","fqdn":"768tup.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.65.168","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://78se.xyz/","date":"2025-09-03T11:43:06.606Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 22 Jul 2025 07:02:09 GMT","end":"Sat, 21 Mar 2026 02:06:13 GMT"},"fingerprint":{"sha1":"B2:57:E9:B4:DF:20:94:4D:E2:85:59:20:BE:D8:5D:70:63:65:02:7A","sha256":"05:17:EA:27:D0:4C:D8:5D:6B:2C:A8:32:D5:A2:DD:E4:47:EC:4D:DC:E7:7B:33:67:F5:F7:4F:C1:73:01:01:19"}}},"request":{"raw":"GET /ggt/768-1960x80.gif HTTP/1.1\r\nHost: 768tup.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://78se.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Wed, 03 Sep 2025 11:43:07 GMT\r\nContent-Type: image/gif\r\nContent-Length: 201726\r\nConnection: keep-alive\r\nx-oss-request-id: 68B829CB300C863234D360CB\r\nAccept-Ranges: bytes\r\nETag: \"C6C54A7EE15C07BE38E3613F3CE8783D\"\r\nLast-Modified: Sat, 21 Jun 2025 03:22:02 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 7084945504932346765\r\nx-oss-storage-class: Standard\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: xsVKfuFcB74442E/POh4PQ==\r\nx-oss-server-time: 2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":201726,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 960 x 80","md5":"c6c54a7ee15c07be38e3613f3ce8783d","sha1":"61c4b74dc3caa6a585ce8bcc4ad753609f124a94","sha256":"c8c41978318135faaf588755a3899a3400f071d817b2d4f59c2f9eb6b4fe16cd","sha512":"da9245df50275aec0fa2fa87d895733caff96051e3095f8bbbb2ab69e3d59696ca342fbfb18d4e63cfe52b88025c58a8281e2281c8eed03c0db09328802db8d0","ssdeep":"6144:SLsefhvklJBBYmGgMHNaDrAXjj6999IMO:SL/kbBNGgE0w2rIMO","tlshash":"4114138ef1376670893578b4fafac75da37a0377c95239a0e83e13e5746470570a8da0","first_seen":"2024-05-06T13:48:10Z","last_seen":"2026-05-17T12:21:32.897797Z","times_seen":2684,"resource_available":false,"data":null}},"time_used":2641,"timings":{"blocked":856,"dns":25,"connect":281,"send":0,"wait":290,"receive":620,"ssl":565},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-D67YNPCKN8","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.72","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://78se.xyz/","date":"2025-09-03T11:43:04.966Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 11 Aug 2025 19:21:11 GMT","end":"Mon, 03 Nov 2025 19:21:10 GMT"},"fingerprint":{"sha1":"07:D4:DA:62:23:19:DE:C6:08:D3:6A:78:15:9D:A5:07:00:39:48:12","sha256":"B1:A9:08:B9:66:58:87:B4:23:94:8F:68:98:E7:F0:EE:8F:DA:A7:88:CC:7A:04:0E:80:74:B0:58:9E:A9:3E:D5"}}},"request":{"raw":"GET /gtag/js?id=G-D67YNPCKN8 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://78se.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Wed, 03 Sep 2025 11:43:05 GMT\r\nexpires: Wed, 03 Sep 2025 11:43:05 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\ncontent-security-policy-report-only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascgcycc:1106:0\r\ncross-origin-opener-policy-report-only: same-origin; report-to=ascgcycc:1106:0\r\nreport-to: {\"group\":\"ascgcycc:1106:0\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/scaffolding/ascgcycc:1106:0\"}],}\r\nserver: Google Tag Manager\r\ncontent-length: 137367\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":413871,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (6006)","md5":"7a5600f3625931da11bf88bb979a7be9","sha1":"fc7741a27b2072398e5aeec6d8f9fb3c5c1ea2d2","sha256":"070680667ec2e70cd6fc8ad62aa8b11149ad95727bd459e8c71bb6c071849a91","sha512":"d3e174868e11bbd9adb42b4ad94eecf317ad6867687c75dffd3793055df86dd2be8c61c98b7a0b80f115323be59203e43fb1ad82e29e8d5295ec38b9f48440da","ssdeep":"6144:T6RtZl+/A35idBwqOUDpcttA00nb5rIVL4cZota38wH5iH:TmtZM/+wdBwqOUDpcXA99kj8H","tlshash":"019408ce73d674269396f478503f018ba57b29a2b44cc899f189cce42e34a9a4177f7c","first_seen":"2025-09-03T11:43:40.132537Z","last_seen":"2025-09-03T11:43:40.132537Z","times_seen":1,"resource_available":true,"data":null}},"time_used":225,"timings":{"blocked":-1,"dns":0,"connect":21,"send":0,"wait":41,"receive":61,"ssl":102},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xpj46-xz.oss-accelerate.aliyuncs.com/xpj.gif","fqdn":"xpj46-xz.oss-accelerate.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.254.187.92","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://78se.xyz/","date":"2025-09-03T11:43:06.619Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.oss-eu-central-1.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 22 Jul 2025 07:01:19 GMT","end":"Tue, 03 Feb 2026 06:31:07 GMT"},"fingerprint":{"sha1":"6C:EE:57:9F:65:29:D7:D3:C1:99:78:B2:75:63:E0:EE:44:D4:84:F4","sha256":"B7:0E:2A:7E:2D:89:E5:97:44:5D:54:7F:D1:95:50:EF:72:09:42:B9:A8:8C:B3:A7:B6:8B:3D:24:9B:AF:45:C6"}}},"request":{"raw":"GET /xpj.gif HTTP/1.1\r\nHost: xpj46-xz.oss-accelerate.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://78se.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 301 Moved Permanently\r\nServer: AliyunOSS\r\nDate: Wed, 03 Sep 2025 11:43:07 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\nx-oss-request-id: 68B829CB797B2AB737EB5E4F\r\nLocation: https://xxtututu.0olut8.com/1372.gif\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":385649,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-22T22:48:26.020574Z","times_seen":18607473,"resource_available":true,"data":null}},"time_used":818,"timings":{"blocked":306,"dns":229,"connect":24,"send":0,"wait":189,"receive":0,"ssl":66},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zgnzw.xyz/78se/js/lib.js?30a600c2c","fqdn":"zgnzw.xyz","domain":"zgnzw.xyz","tld":"xyz"},"ip":{"addr":"104.21.64.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://78se.xyz/","date":"2025-09-03T11:43:04.957Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zgnzw.xyz","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Thu, 28 Aug 2025 19:07:46 GMT","end":"Wed, 26 Nov 2025 19:26:43 GMT"},"fingerprint":{"sha1":"E6:8E:E7:2D:37:3A:1B:47:14:0D:E1:AE:88:88:61:4A:D7:91:FD:43","sha256":"EA:DF:AD:0B:9B:AF:51:50:79:41:88:6D:1A:5F:87:3F:4E:C3:02:AD:43:AD:11:1A:49:BE:7C:46:30:D9:7C:F9"}}},"request":{"raw":"GET /78se/js/lib.js?30a600c2c HTTP/1.1\r\nHost: zgnzw.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://78se.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 03 Sep 2025 11:43:05 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Wed, 03 Sep 2025 05:56:26 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\netag: \"68b7d88a-aab97\"\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: gzip\r\ncache-control: max-age=2073600\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TN18B47sxOezSWiCgB0BA27oSHSCHv1c6UIJSBMLW9ruAMfSO2fa%2B3aOLbIdq5ekrjfyIDz65ia9Mt6St2EOOz1Fb%2F93mww%3D\"}]}\r\ncf-ray: 9794fccaa84fb4f1-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":699287,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65534), with no line terminators","md5":"7a30a600c2c466e7919cf70d27628b68","sha1":"e8e4e73ee3d7108902f8a37594dd6f842a4f8554","sha256":"fc68db458500ca69a8eebc932adee78280bc12d8aa808f0cc655d9450e0d87d2","sha512":"ce7c64f52d1923211414fb62990f24d65bffe097932cefb1a3a1a16ee704efa641c6e46cd025960c4920859fc93983f5d60f0ab9906930b043c622cda6431870","ssdeep":"12288:eePVrDiIC0FyxYZ5VSkct7lFoFCXNy20Y5SZEfLJ/y:eeoIC0FyxKaXNJ0Y5gEfLpy","tlshash":"5ae40a8af182b06106d361a5907f1606f137399c744a409cf6b5e8ea6cbcacd916ff3d","first_seen":"2025-08-24T18:49:51.654603Z","last_seen":"2026-02-11T00:28:12.182227Z","times_seen":309,"resource_available":true,"data":null}},"time_used":1053,"timings":{"blocked":430,"dns":403,"connect":1,"send":0,"wait":185,"receive":0,"ssl":29},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"timg216.top/videos/fecd756886f8f390d73355e99ccead5520f8daf0107f88969486bb1973fd9d07/cover/5_505_259.webp?ih=1","fqdn":"timg216.top","domain":"timg216.top","tld":"top"},"ip":{"addr":"172.66.155.86","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://78se.xyz/","date":"2025-09-03T11:43:06.815Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"timg216.top","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Mon, 04 Aug 2025 04:37:13 GMT","end":"Sun, 02 Nov 2025 05:13:46 GMT"},"fingerprint":{"sha1":"09:98:82:E6:F6:CE:3A:0B:34:CA:7C:64:95:7C:21:B9:C3:D6:F3:7F","sha256":"2C:38:55:11:E8:93:E4:92:AF:46:8F:B3:8C:65:8E:0B:7C:53:7B:05:49:81:6B:17:A8:A7:13:D1:FA:7A:43:7E"}}},"request":{"raw":"GET /videos/fecd756886f8f390d73355e99ccead5520f8daf0107f88969486bb1973fd9d07/cover/5_505_259.webp?ih=1 HTTP/1.1\r\nHost: timg216.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://78se.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 03 Sep 2025 11:43:07 GMT\r\ncontent-type: image/webp\r\ncontent-length: 83718\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nt-cache: MISS\r\nlast-modified: Sun, 18 May 2025 10:40:03 GMT\r\nalt-svc: h3=\":443\"; ma=86400\r\naccept-ranges: bytes\r\nx-xss-protection: 1; mode=block\r\ncache-control: max-age=31536000\r\ncf-cache-status: HIT\r\nvary: Accept-Encoding, Origin\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: *\r\ne2-id: 1dc14b9\r\nserver: cloudflare\r\netag: \"df85921efde60564591a45bba47f6a63\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cX3IgAosaTZPsKStIvHgp9ngkJcAZgnpPNVhVR4EiOGwbOFOEkrrAjLIrP3z5CoPxb9R4zXCBODdvISAk0mtIrS6VPOJyBYylj8n\"}]}\r\ncf-ray: 9794fcd669608deb-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":83718,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 505x259, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"df85921efde60564591a45bba47f6a63","sha1":"260bebcdf2ead34c9408496a519a55123b21e00e","sha256":"4f2feb0c5d484a7b26ab26f513f303b1af878d5fc5d44de96a8ce103ff8fc427","sha512":"888ef451c50fd31b89a39483cce46eadd31f38f97241f4a7db3aac54892f83aa5083ffeef04600f75c998a9316e6cc9a50342b5ab11170b934c7976c87347541","ssdeep":"1536:nuAUyBHKWVnGg8426EMLdl16cXZjdJUDv6yXCwrZFpuqvIGvpN2ht:ufyBqWVGgxv1jXZjXMjrdb+H","tlshash":"4c8312ae06f6270758a43aac35cc84ded38c5643be978185bfa7609850f13c2e55aecd","first_seen":"2025-09-03T11:43:40.134331Z","last_seen":"2025-09-03T11:43:40.134331Z","times_seen":1,"resource_available":false,"data":null}},"time_used":510,"timings":{"blocked":-1,"dns":380,"connect":1,"send":0,"wait":40,"receive":8,"ssl":47},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"365t.oss-cn-hongkong.aliyuncs.com/bet-960x100.gif","fqdn":"365t.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.191","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://78se.xyz/","date":"2025-09-03T11:43:06.624Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 22 Jul 2025 07:02:09 GMT","end":"Sat, 21 Mar 2026 02:06:13 GMT"},"fingerprint":{"sha1":"B2:57:E9:B4:DF:20:94:4D:E2:85:59:20:BE:D8:5D:70:63:65:02:7A","sha256":"05:17:EA:27:D0:4C:D8:5D:6B:2C:A8:32:D5:A2:DD:E4:47:EC:4D:DC:E7:7B:33:67:F5:F7:4F:C1:73:01:01:19"}}},"request":{"raw":"GET /bet-960x100.gif HTTP/1.1\r\nHost: 365t.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://78se.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Wed, 03 Sep 2025 11:43:07 GMT\r\nContent-Type: image/gif\r\nContent-Length: 266371\r\nConnection: keep-alive\r\nx-oss-request-id: 68B829CB4C8B3736329521B3\r\nAccept-Ranges: bytes\r\nETag: \"08305BEBED9D70A4CF2D8F62FBD70C65\"\r\nLast-Modified: Wed, 16 Jul 2025 07:04:44 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 11145254002049399420\r\nx-oss-storage-class: Standard\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: CDBb6+2dcKTPLY9i+9cMZQ==\r\nx-oss-server-time: 2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":266371,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 960 x 100","md5":"08305bebed9d70a4cf2d8f62fbd70c65","sha1":"afbe4be0f9f1dd38e93a5c2454ee9c14a4e63933","sha256":"651740b257a46d256039488a4c52bd4e6a8a5457c2fb01b340b563b745aabadc","sha512":"f0911ef157df1d325c2bd4c4d464f7e7206228aea0a3ba448a246221841f3fb5929677842030090a1c8d428ab50c5a08baf5940d34311585d96e08a676b8b616","ssdeep":"6144:wXprDLEdfmqROge5sU3y8J6mgoQZmu5ZVfrvJk9NdjEYd2/S7:8ZAdHa5s8y8oP/mu5ZV7oNaYdyS7","tlshash":"c6442339b3732e00658eb7608ba095f4120c947056fdb946b622d27b30e61e9f878f7d","first_seen":"2025-05-21T09:36:36.608152Z","last_seen":"2025-09-06T05:09:06.921387Z","times_seen":807,"resource_available":false,"data":null}},"time_used":1896,"timings":{"blocked":-1,"dns":27,"connect":287,"send":0,"wait":290,"receive":703,"ssl":586},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"timg216.top/videos/b56d57b1021a627ce7d7883117c614720ea79918b64a5f5812d35128ab4554ad/cover/5_505_259.webp?ih=1","fqdn":"timg216.top","domain":"timg216.top","tld":"top"},"ip":{"addr":"172.66.155.86","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://78se.xyz/","date":"2025-09-03T11:43:06.827Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"timg216.top","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Mon, 04 Aug 2025 04:37:13 GMT","end":"Sun, 02 Nov 2025 05:13:46 GMT"},"fingerprint":{"sha1":"09:98:82:E6:F6:CE:3A:0B:34:CA:7C:64:95:7C:21:B9:C3:D6:F3:7F","sha256":"2C:38:55:11:E8:93:E4:92:AF:46:8F:B3:8C:65:8E:0B:7C:53:7B:05:49:81:6B:17:A8:A7:13:D1:FA:7A:43:7E"}}},"request":{"raw":"GET /videos/b56d57b1021a627ce7d7883117c614720ea79918b64a5f5812d35128ab4554ad/cover/5_505_259.webp?ih=1 HTTP/1.1\r\nHost: timg216.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://78se.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 03 Sep 2025 11:43:07 GMT\r\ncontent-type: image/webp\r\ncontent-length: 83766\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nt-cache: MISS\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: *\r\nserver: cloudflare\r\ncache-control: max-age=31536000\r\nvary: Accept-Encoding, Origin\r\ne2-id: 1dc0c50\r\netag: \"fdec2593110808fcf72b6890569a9e04\"\r\nalt-svc: h3=\":443\"; ma=86400\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nlast-modified: Sun, 18 May 2025 10:31:33 GMT\r\nage: 17747\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7uZBnUvufyN0Dvsj18RYP0U%2FPwMVVZMFajE5Q5jviJ4ExpT0QS50Mfz6ZAWk5sXSEYi4L2UvzwI9X4UJuuYI2cGCzTdXq%2FDm2vrI\"}]}\r\ncf-ray: 9794fcd638d28deb-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":83766,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 505x259, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"fdec2593110808fcf72b6890569a9e04","sha1":"605adcb2566ffa45a3bd3ebd19facf28adf44f79","sha256":"229ecf99d8fc17bbeb739b54d56850c07ebb1ec94ffd9e54573a9b41eecb4d78","sha512":"99cb5339d4e2a4e4b8d84945123b7ad8199c6e978b8b07a555d7b3d24f0bdbff246917fb0994ef9f5f7d9eaa3e0ca114753909dd39ce3e862d45e71b272cc72e","ssdeep":"1536:F+WK6tVVLsxWZNLK76k/J6sS75oqfgle0GGugV46cU+woXdRXaU:FPpVLsxvObOg0Gl/2oNJaU","tlshash":"4c83028713c4f2d896dd62d0d90b6a992c131852a767e491f3a06dbeb8b1710fd4bcb1","first_seen":"2025-09-03T11:43:40.136147Z","last_seen":"2025-09-03T11:43:40.136147Z","times_seen":1,"resource_available":false,"data":null}},"time_used":444,"timings":{"blocked":-1,"dns":367,"connect":1,"send":0,"wait":17,"receive":7,"ssl":45},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zgnzw.xyz/78se/css/g.css?ee85bc219","fqdn":"zgnzw.xyz","domain":"zgnzw.xyz","tld":"xyz"},"ip":{"addr":"104.21.64.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://78se.xyz/","date":"2025-09-03T11:43:04.960Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zgnzw.xyz","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Thu, 28 Aug 2025 19:07:46 GMT","end":"Wed, 26 Nov 2025 19:26:43 GMT"},"fingerprint":{"sha1":"E6:8E:E7:2D:37:3A:1B:47:14:0D:E1:AE:88:88:61:4A:D7:91:FD:43","sha256":"EA:DF:AD:0B:9B:AF:51:50:79:41:88:6D:1A:5F:87:3F:4E:C3:02:AD:43:AD:11:1A:49:BE:7C:46:30:D9:7C:F9"}}},"request":{"raw":"GET /78se/css/g.css?ee85bc219 HTTP/1.1\r\nHost: zgnzw.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://78se.xyz/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 03 Sep 2025 11:43:05 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Wed, 03 Sep 2025 05:57:41 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\netag: \"68b7d8d5-b0f60\"\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: gzip\r\ncache-control: max-age=2073600\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KQju9Eo%2FEF2VqnBeUpXqq2j425%2Bdy%2FaIPpH4BUBR%2BIN6vL38L5I1jdn87O3uyxtcN%2B7b1IZFkri16j8Bk9cBrC7L1jKWf8Q%3D\"}]}\r\ncf-ray: 9794fccaa84cb4f1-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":724832,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"40ee85bc219dae77850fe374c67f6ab2","sha1":"4ffe139df6cb4fe2422340dca65cc3a7a3d9da0d","sha256":"468098ec9de6281b9361d2fd1d39ecc25ddbb6ba5250facce2b6ef54b002422e","sha512":"c6365ec41d3c751ec59cccc9022755770b7075f488b60c510a41c5c3f47f99fd604320f982b6c36a6af1520fb9697b5d6d65d48ad4a639e3b622dfbab9325e25","ssdeep":"3072:dfELeaMKrbyt1PEL4BBxzJ60ipgil5emuqRJ6213upSoxGlacKYAZ+fuwaSZs+Yq:dueaMEws0Lxz9gKyuKt8/QEi4MBZ","tlshash":"bef408b2e584248d5723c186a7c076e87b7d9050fa228fa7f067bab44bc25d71cb3716","first_seen":"2025-09-02T02:20:52.603917Z","last_seen":"2025-09-06T02:30:32.835265Z","times_seen":4,"resource_available":false,"data":null}},"time_used":1053,"timings":{"blocked":427,"dns":402,"connect":3,"send":0,"wait":191,"receive":0,"ssl":23},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zgnzw.xyz/static/css/themes/default/assets/fonts/icons.woff2?afw11","fqdn":"zgnzw.xyz","domain":"zgnzw.xyz","tld":"xyz"},"ip":{"addr":"104.21.64.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://78se.xyz/","date":"2025-09-03T11:43:06.004Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zgnzw.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 28 Aug 2025 19:08:04 GMT","end":"Wed, 26 Nov 2025 20:07:54 GMT"},"fingerprint":{"sha1":"9C:1B:FB:E6:A6:2F:38:CA:DE:4E:84:16:4F:FF:E0:FB:C1:68:D2:B9","sha256":"06:AD:14:71:0B:F8:33:37:95:10:8D:E2:71:7B:B1:5F:C1:A1:6B:70:FC:AB:9C:0A:BA:CD:78:94:5B:C9:3A:10"}}},"request":{"raw":"GET /static/css/themes/default/assets/fonts/icons.woff2?afw11 HTTP/1.1\r\nHost: zgnzw.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://78se.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zgnzw.xyz/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 03 Sep 2025 11:43:06 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 40148\r\nlast-modified: Sun, 29 Jun 2025 15:30:22 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"68615c0e-9cd4\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: *\r\ncache-control: public, max-age=2073600, stale-if-error=7200\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=N2vOMmowpAQgvba628QrvPjHIax6KuJa6hkUl6F9nyv0FbUVe6TkMDhJZXSD3X7eJEM3R8mspN5CpV2iLBDn5YZX0ZAXXqs%3D\"}]}\r\nvary: accept-encoding\r\ncf-ray: 9794fcce9d6bb4f7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":40148,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 40148, version 1.0","md5":"0ab54153eeeca0ce03978cc463b257f7","sha1":"6ec6d36cb2464b4e821cfabb532f310bd342601c","sha256":"434466b59545a8a1cac6ddb38197cdc6b35995a98c3f3812fb88d61b1c300dd3","sha512":"f4b03963386fc05a28adc3905cdd361905bdbad1386ec8d1e8a4440af778e311bb46b41da4b46288291ac3c174d727addd62ab7c27513bca34079c6a2c3cadc2","ssdeep":"768:Ne7m/za8SSvlojVj1lmEpnBxR+ug6bwKoAEjg7guFL/UFd9nwXk8M8Mgs6L:ymzRojVjmOBxRHtsg58PhB83","tlshash":"0503f1ae90ece50b926c4afd7adb0ffc7211914ed87ac2f1c8f4b5970f2aa028451255","first_seen":"2023-04-13T18:56:12Z","last_seen":"2026-09-22T21:44:23.559966Z","times_seen":5936,"resource_available":false,"data":null}},"time_used":219,"timings":{"blocked":16,"dns":1,"connect":0,"send":0,"wait":197,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"timg216.top/videos/27f745dbd60bc0720042d119e2baef79f588b0a8757ae2aa67d19da3ab0009df/cover/5_505_259.webp?ih=1","fqdn":"timg216.top","domain":"timg216.top","tld":"top"},"ip":{"addr":"172.66.155.86","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://78se.xyz/","date":"2025-09-03T11:43:06.802Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"timg216.top","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Mon, 04 Aug 2025 04:37:13 GMT","end":"Sun, 02 Nov 2025 05:13:46 GMT"},"fingerprint":{"sha1":"09:98:82:E6:F6:CE:3A:0B:34:CA:7C:64:95:7C:21:B9:C3:D6:F3:7F","sha256":"2C:38:55:11:E8:93:E4:92:AF:46:8F:B3:8C:65:8E:0B:7C:53:7B:05:49:81:6B:17:A8:A7:13:D1:FA:7A:43:7E"}}},"request":{"raw":"GET /videos/27f745dbd60bc0720042d119e2baef79f588b0a8757ae2aa67d19da3ab0009df/cover/5_505_259.webp?ih=1 HTTP/1.1\r\nHost: timg216.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://78se.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 03 Sep 2025 11:43:07 GMT\r\ncontent-type: image/webp\r\ncontent-length: 85606\r\nserver: cloudflare\r\nlast-modified: Sun, 18 May 2025 23:55:32 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"682a7374-14e66\"\r\nexpires: Fri, 01 Aug 2025 16:58:58 GMT\r\ncache-control: public, max-age=31536000, stale-if-error=7200\r\nt-cache: LHIT\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UwvGdwyqVPZMpm5Ltss8qcrrYlVQaLkLVbQdeIZZckem3iO8zqVOdta7AIN7HSSfeBLG3PTRrSMo4A79HxglT6wQ%2Brkz2QdsjTPO\"}]}\r\ncf-ray: 9794fcd689c08deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":85606,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 505x259, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"5cb21585b74a6bf0c81575c94c7a5392","sha1":"eee238f785d90af9b29a6894eab8b773a20088e6","sha256":"fbb2b6970a0d6858ac4d0bc90eb35da78014f870fa80a00d49868efe8e0a1bed","sha512":"22b7e8a19a0f955e11105b69527c0a393798d21c2ea4f6408c4473c190df731ab5af47ccd9ac101994b19d9b1873bd395b42afb7815d8333019f7743783d48ff","ssdeep":"1536:Grf8ncIMLNf7McGND2vnxAoF37QFwclQM9UzWHBm8xsSUcFV5wWVHycfSt2HMfTJ:GrkpMp702vnCoFUFwHKUz0Bm8xslhWVe","tlshash":"4e83023ca1bacd650dac2b18a5347704fe7012d471b97a1c5ba54fb9cce5c1e26ec28b","first_seen":"2025-09-03T11:43:40.138387Z","last_seen":"2025-09-03T11:43:40.138387Z","times_seen":1,"resource_available":false,"data":null}},"time_used":544,"timings":{"blocked":-1,"dns":383,"connect":1,"send":0,"wait":58,"receive":2,"ssl":78},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vip.helloimg.com/404.png","fqdn":"vip.helloimg.com","domain":"helloimg.com","tld":"com"},"ip":{"addr":"192.140.169.63","port":443,"asn":0,"as":"","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://78se.xyz/","date":"2025-09-03T11:43:08.210Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.helloimg.com","organization":""},"issuer":{"commonName":"Certum Domain Validation CA SHA2","organization":"Unizeto Technologies S.A."},"validity":{"start":"Mon, 02 Jun 2025 02:46:42 GMT","end":"Tue, 02 Jun 2026 02:46:41 GMT"},"fingerprint":{"sha1":"B6:81:DB:4A:DF:77:5A:62:7B:51:93:18:DB:A4:C8:07:35:F5:C2:8A","sha256":"F3:D4:F3:60:57:8F:4F:11:43:49:92:DA:3D:C6:44:26:43:D2:44:D3:9B:42:F8:0E:F8:D2:22:42:B3:E1:A2:95"}}},"request":{"raw":"GET /404.png HTTP/1.1\r\nHost: vip.helloimg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://78se.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 418 \r\nDate: Wed, 03 Sep 2025 11:43:09 GMT\r\nContent-Type: text/html;charset=utf8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nX-BLOCK: CC-Guardian\r\nCache-Control: no-cache\r\nServer: Nginx\r\nX-Safe: 1756899789=mK9zR+T9y5Lx9s7SSYY2JvgLSDbnKBjS1t+2lK48XFXaPvMlZSG/c73az5cNAhnI2zGVvRLJmVR0SxFWBG1ts37cb7Wu2mRtUo6i9ZUhZ1d3SJuSeR/6zYXi6nT7jWOgLI0BBQLfx52hl7g2OAxkjvOUVTlmE0QwROKNYhJ6fraMAAIfDSMUqx9fH3gAghJL\r\nAccess-Control-Allow-Headers: *\r\nAccess-Control-Allow-Methods: POST, GET, OPTIONS, PUT, DELETE\r\nAccess-Control-Allow-Credentials: true\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Expose-Headers: Content-Length,Content-Range\r\nX-VIA: l1=giP46yMUiFJJ02LQ\r\nX-BLOCK-Backend: true\r\nX-VERSION: 1755418165\r\nX-Request-Id: 0A283731-CCF7-4463-BEC7-A45843857C70\r\n\r\n","headers":null,"cookies":null,"status_code":"418","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-22T22:48:26.020574Z","times_seen":18607473,"resource_available":true,"data":null}},"time_used":1188,"timings":{"blocked":0,"dns":347,"connect":277,"send":0,"wait":278,"receive":0,"ssl":285},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zgnzw.xyz/78se/css/b.css?a6287bd64","fqdn":"zgnzw.xyz","domain":"zgnzw.xyz","tld":"xyz"},"ip":{"addr":"104.21.64.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://78se.xyz/","date":"2025-09-03T11:43:04.964Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zgnzw.xyz","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Thu, 28 Aug 2025 19:07:46 GMT","end":"Wed, 26 Nov 2025 19:26:43 GMT"},"fingerprint":{"sha1":"E6:8E:E7:2D:37:3A:1B:47:14:0D:E1:AE:88:88:61:4A:D7:91:FD:43","sha256":"EA:DF:AD:0B:9B:AF:51:50:79:41:88:6D:1A:5F:87:3F:4E:C3:02:AD:43:AD:11:1A:49:BE:7C:46:30:D9:7C:F9"}}},"request":{"raw":"GET /78se/css/b.css?a6287bd64 HTTP/1.1\r\nHost: zgnzw.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://78se.xyz/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 03 Sep 2025 11:43:05 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Wed, 03 Sep 2025 05:57:47 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\netag: \"68b7d8db-27c00\"\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: gzip\r\ncache-control: max-age=2073600\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PJUn%2B%2FZxhS5NvTSKXvdsW2UUKtshl0X6SN7D%2FZlUJoVlyxRmSbwcoe2zN%2FR9M4SerXy5cbMP7ivqNynrAg72CPxW30gkfRA%3D\"}]}\r\ncf-ray: 9794fccab85bb4f1-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":162816,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"f9897e80ab36ba6ced90cbd8d513d4db","sha1":"ad2c101e5a3f11b93d174b38147c57e8d6e1620b","sha256":"d4df1748f1461b43d64bbb487ad9c0964d941333c51075ddbdae06429e871158","sha512":"7659336a2eecf98828b77e6aae13df54db328364aa4c29b700a10b24253a5503a3512d3364bf143fe591d7758cbfe1e06383dc2f9bcb4e9762fc4b716d43b210","ssdeep":"1536:vSagqcNKMIz2jDnHcABS4J8C3+iCpdrGHd2r/kuf2NYzfgwE3sozKPBUkHtKt696:qnHcpcOGZwE3srM","tlshash":"f3f3e83ed981216d40378a55c6c85fe82b2dd523a5924edff305350a87cabee23d670b","first_seen":"2025-09-03T11:43:40.139544Z","last_seen":"2025-09-03T11:43:40.139544Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1052,"timings":{"blocked":429,"dns":399,"connect":3,"send":0,"wait":184,"receive":0,"ssl":23},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zgnzw.xyz/78se/js/b.js?5827b9b1d","fqdn":"zgnzw.xyz","domain":"zgnzw.xyz","tld":"xyz"},"ip":{"addr":"104.21.64.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://78se.xyz/","date":"2025-09-03T11:43:04.963Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zgnzw.xyz","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Thu, 28 Aug 2025 19:07:46 GMT","end":"Wed, 26 Nov 2025 19:26:43 GMT"},"fingerprint":{"sha1":"E6:8E:E7:2D:37:3A:1B:47:14:0D:E1:AE:88:88:61:4A:D7:91:FD:43","sha256":"EA:DF:AD:0B:9B:AF:51:50:79:41:88:6D:1A:5F:87:3F:4E:C3:02:AD:43:AD:11:1A:49:BE:7C:46:30:D9:7C:F9"}}},"request":{"raw":"GET /78se/js/b.js?5827b9b1d HTTP/1.1\r\nHost: zgnzw.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://78se.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 03 Sep 2025 11:43:05 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Wed, 03 Sep 2025 05:56:34 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\netag: \"68b7d892-4df61\"\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: gzip\r\ncache-control: max-age=2073600\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Sx2OGQReviAqcMokQcARjM6a8hNuAsqDpKJ3cUDRo0Sc%2BFWqchMPRUe9bQCQ6D7OE2WSYzGefl4xYYkr7SwVMZ8s92JsBlI%3D\"}]}\r\ncf-ray: 9794fccaa858b4f1-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":319329,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65265), with no line terminators","md5":"406e7b2b7cc58150add425a093e84481","sha1":"7d36cc11c3cfc2e6d51fe0a0d1e15739511059f6","sha256":"fbf197540865de8a17902a8007eedb273aca0c0ea0ddcb4d08b7bb239081c321","sha512":"5301b4a6767a743c294c02b1d02699559a27375ed70835e05349084dbfeb6289d9c0c3adae402199700bfdc019b513cb859fa2ce24ec8fd4b10fc486f7141e65","ssdeep":"6144:JmM1A16TJ6WCY6WChEivI9rIFMWF0e3K374zhgEnYZ3ABMQM8KGC1krDsGwubW:W1wh+zHKRkhBbW","tlshash":"f6642b89f591316217ab217690af300eb3360965ae0ac054b93dc1e87eb5e8c1377f7e","first_seen":"2025-09-03T11:43:40.140719Z","last_seen":"2025-09-04T15:06:40.356815Z","times_seen":3,"resource_available":true,"data":null}},"time_used":1039,"timings":{"blocked":426,"dns":400,"connect":3,"send":0,"wait":177,"receive":0,"ssl":20},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"timg216.top/videos/c408014041b9c2250f0bfda46c6b8954e8c3d41a80ebc9d5f80b4ff7e0ce697c/cover/5_505_259.webp?ih=1","fqdn":"timg216.top","domain":"timg216.top","tld":"top"},"ip":{"addr":"172.66.155.86","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://78se.xyz/","date":"2025-09-03T11:43:06.869Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"timg216.top","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Mon, 04 Aug 2025 04:37:13 GMT","end":"Sun, 02 Nov 2025 05:13:46 GMT"},"fingerprint":{"sha1":"09:98:82:E6:F6:CE:3A:0B:34:CA:7C:64:95:7C:21:B9:C3:D6:F3:7F","sha256":"2C:38:55:11:E8:93:E4:92:AF:46:8F:B3:8C:65:8E:0B:7C:53:7B:05:49:81:6B:17:A8:A7:13:D1:FA:7A:43:7E"}}},"request":{"raw":"GET /videos/c408014041b9c2250f0bfda46c6b8954e8c3d41a80ebc9d5f80b4ff7e0ce697c/cover/5_505_259.webp?ih=1 HTTP/1.1\r\nHost: timg216.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://78se.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 03 Sep 2025 11:43:07 GMT\r\ncontent-type: image/webp\r\ncontent-length: 86966\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nt-cache: MISS\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nlast-modified: Sun, 18 May 2025 10:31:30 GMT\r\naccess-control-allow-origin: *\r\nserver: cloudflare\r\naccept-ranges: bytes\r\nvary: Accept-Encoding, Origin\r\nalt-svc: h3=\":443\"; ma=86400\r\netag: \"e713525c989ca2435501acffe5e43cfd\"\r\ne2-id: 1dc0c48\r\ncache-control: max-age=31536000\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncf-cache-status: HIT\r\nage: 125018\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qyNpQgJC3rUhUwMZA9YOQWJiZCaZ%2F7h6mlVoN6FFMnFrE31wgxAnsUjJIppqZRXBqOd7PwAhUUbs%2B37ow1oJDiiJOp5xMVA7yX%2Bm\"}]}\r\ncf-ray: 9794fcd638c38deb-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":86966,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 505x259, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"e713525c989ca2435501acffe5e43cfd","sha1":"6011458e08493806ea5a27e6717f34e068231743","sha256":"bfe81ad929f4dd9865113db94ac0826ff37878b9dc37f1c8efc8cf15ebd3dabc","sha512":"23dbdc1263f41b6b2f602c450338fa7f54737ecac0c786dc4b1b01c56a41ddef8bb3235839ae1d6502cdf04d17f67cfc811701da37fec206dbf9c9cf47b07d5b","ssdeep":"1536:EiNCWw1KuSx43vZxiLO6wkupYYc6kaCuo0lsFoNcH6XxhQIW515kX3s:dVwnSxKZEO6wkpHuo0lsFoUKzi515C3s","tlshash":"76831240963af0a7097d6903f5729346b22b20c5629a92f474ebc616f1bc33ef6d1c75","first_seen":"2025-09-03T11:43:40.141935Z","last_seen":"2025-09-03T11:43:40.141935Z","times_seen":1,"resource_available":false,"data":null}},"time_used":427,"timings":{"blocked":-1,"dns":362,"connect":1,"send":0,"wait":11,"receive":5,"ssl":48},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.helloimg.com/i/2025/07/23/687fcabd79317.gif","fqdn":"www.helloimg.com","domain":"helloimg.com","tld":"com"},"ip":{"addr":"43.159.98.20","port":443,"asn":139341,"as":"ACE","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://78se.xyz/","date":"2025-09-03T11:43:06.629Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.helloimg.com","organization":""},"issuer":{"commonName":"Certum Domain Validation CA SHA2","organization":"Unizeto Technologies S.A."},"validity":{"start":"Mon, 02 Jun 2025 02:46:42 GMT","end":"Tue, 02 Jun 2026 02:46:41 GMT"},"fingerprint":{"sha1":"B6:81:DB:4A:DF:77:5A:62:7B:51:93:18:DB:A4:C8:07:35:F5:C2:8A","sha256":"F3:D4:F3:60:57:8F:4F:11:43:49:92:DA:3D:C6:44:26:43:D2:44:D3:9B:42:F8:0E:F8:D2:22:42:B3:E1:A2:95"}}},"request":{"raw":"GET /i/2025/07/23/687fcabd79317.gif HTTP/1.1\r\nHost: www.helloimg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://78se.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 Moved Permanently\r\nserver: nginx\r\ncontent-type: text/html\r\nlocation: https://vip.helloimg.com/404.png\r\nstrict-transport-security: max-age=31536000\r\ncontent-length: 162\r\ndate: Wed, 03 Sep 2025 11:43:07 GMT\r\neo-log-uuid: 3540700674529173339\r\neo-cache-status: MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-22T22:48:26.020574Z","times_seen":18607473,"resource_available":true,"data":null}},"time_used":1578,"timings":{"blocked":-1,"dns":451,"connect":19,"send":0,"wait":839,"receive":5,"ssl":262},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"timg216.top/videos/6e2f1a1b04e19524882fa0264caea9886f28545fe94c178d081eaaea50917937/cover/5_505_259.webp?ih=1","fqdn":"timg216.top","domain":"timg216.top","tld":"top"},"ip":{"addr":"172.66.155.86","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://78se.xyz/","date":"2025-09-03T11:43:06.812Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"timg216.top","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Mon, 04 Aug 2025 04:37:13 GMT","end":"Sun, 02 Nov 2025 05:13:46 GMT"},"fingerprint":{"sha1":"09:98:82:E6:F6:CE:3A:0B:34:CA:7C:64:95:7C:21:B9:C3:D6:F3:7F","sha256":"2C:38:55:11:E8:93:E4:92:AF:46:8F:B3:8C:65:8E:0B:7C:53:7B:05:49:81:6B:17:A8:A7:13:D1:FA:7A:43:7E"}}},"request":{"raw":"GET /videos/6e2f1a1b04e19524882fa0264caea9886f28545fe94c178d081eaaea50917937/cover/5_505_259.webp?ih=1 HTTP/1.1\r\nHost: timg216.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://78se.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 03 Sep 2025 11:43:07 GMT\r\ncontent-type: image/webp\r\ncontent-length: 34978\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nt-cache: MISS\r\ncf-cache-status: HIT\r\ne2-id: 144951a\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nserver: cloudflare\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nalt-svc: h3=\":443\"; ma=86400\r\netag: \"6034c957f6d8163e20e7d8ac22eb39e9\"\r\nlast-modified: Sat, 26 Apr 2025 16:18:51 GMT\r\ncache-control: max-age=31536000\r\nvary: Accept-Encoding, Origin\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3wnXyhmO207WFnsGCkdhVJykeLCOsA0uU1YuLc6ZCcUKGFnF8T8XR7ik3zrEk5vh8VOdCxOWY9yM2ORUM%2F7wqYs3hLzaWC9ke4%2Bl\"}]}\r\ncf-ray: 9794fcd679988deb-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":34978,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 505x259, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"6034c957f6d8163e20e7d8ac22eb39e9","sha1":"f735f9699f5457b3b7b1a96030defa949c803704","sha256":"97de55ce30a9297553e687319656e0aa28de130d81b3ce638e80c3c642b58e42","sha512":"33945c724cd4b4ccb0747182b481871e35b9d65cc37a31c55d063c2e3a3810d3766d451a84e6db32a72ce588531969121be65cf834a766aa78a5ead491443a96","ssdeep":"768:PSzEwSYs0pS2NU56VdMSwCNMzsA0roMxsWmgM0/7hD:PS/EylNU56aCaorxsWl3ND","tlshash":"c2f2e1834a267d5faa0518bc951a9d36f923d4b08f80cc45e3e52739b173bcd295a70b","first_seen":"2025-05-20T08:13:07.912014Z","last_seen":"2025-09-03T11:43:40.143115Z","times_seen":2,"resource_available":false,"data":null}},"time_used":517,"timings":{"blocked":-1,"dns":382,"connect":1,"send":0,"wait":42,"receive":1,"ssl":74},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xxtututu.0olut8.com/1372.gif","fqdn":"xxtututu.0olut8.com","domain":"0olut8.com","tld":"com"},"ip":{"addr":"123.6.18.114","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://78se.xyz/","date":"2025-09-03T11:43:07.206Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xxtututu.0olut8.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 Aug 2025 10:10:56 GMT","end":"Mon, 24 Nov 2025 10:10:55 GMT"},"fingerprint":{"sha1":"D2:48:02:01:F7:CA:B7:42:87:77:7B:61:04:D3:DB:8C:41:FA:78:AA","sha256":"F8:9C:6A:77:9F:B4:48:FD:9E:92:B1:D6:DB:C2:21:65:13:D9:C6:2D:74:E0:AA:B7:F0:EB:C2:63:D2:FF:10:E1"}}},"request":{"raw":"GET /1372.gif HTTP/1.1\r\nHost: xxtututu.0olut8.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://78se.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: NgxFence\r\ndate: Wed, 03 Sep 2025 11:43:08 GMT\r\ncontent-type: image/gif\r\ncontent-length: 385649\r\nlast-modified: Tue, 04 Feb 2025 08:08:31 GMT\r\netag: \"67a1caff-5e271\"\r\nexpires: Thu, 25 Sep 2025 11:40:59 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nx-cache: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":385649,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 960 x 80","md5":"99420771ab574e6197a995c28a8e22fb","sha1":"eb51cd497134b44e1c957b10caf4d2c9569668a5","sha256":"e0f9613ae55c18751ed65c2b466290eec01e4d71bc4881c52d71578456582d8a","sha512":"f2bed60584e1307fdff179ecb6be097cf285fb3a59d8cec05d20b695c58ad1e0ca2836abfa38e9da00ff4d56affe5b108259811b1150ec35648aa73afcc260e6","ssdeep":"6144:PnRDG1hP90xJ2rBHVOgsGOnWeDLBWo5mrONv5ARJU5yx4j7E+BhniaILOXpQRd2I:PdG1h1KJyBHVOIOnFFWomONvYUcxOX8b","tlshash":"c284230c8a584826169788fc19f67f2e615e0c12912aa13dc9cff7427ecb1f6745aed3","first_seen":"2025-01-26T00:52:56.462418Z","last_seen":"2025-12-29T03:34:17.287286Z","times_seen":1695,"resource_available":false,"data":null}},"time_used":2935,"timings":{"blocked":2,"dns":1014,"connect":231,"send":0,"wait":464,"receive":985,"ssl":238},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"78se.xyz/static/favicon.ico?aaff","fqdn":"78se.xyz","domain":"78se.xyz","tld":"xyz"},"ip":{"addr":"104.21.31.3","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://78se.xyz/","date":"2025-09-03T11:43:06.400Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"78se.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 04 Aug 2025 09:35:11 GMT","end":"Sun, 02 Nov 2025 10:33:51 GMT"},"fingerprint":{"sha1":"A6:6D:59:C7:59:39:9A:71:85:FD:DB:95:F7:49:09:76:4A:BF:85:3D","sha256":"2E:00:71:1F:94:DD:4E:97:59:9C:25:76:C0:B0:7A:66:D1:67:40:2E:3E:56:46:82:8B:F2:B8:C4:F8:88:87:9A"}}},"request":{"raw":"GET /static/favicon.ico?aaff HTTP/1.1\r\nHost: 78se.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://78se.xyz/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: tguest=guestd2e92eb2c8374ae6bafca2959e6737b9\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 03 Sep 2025 11:43:06 GMT\r\ncontent-type: image/x-icon\r\nvary: accept-encoding\r\nlast-modified: Sat, 14 Jun 2025 04:33:00 GMT\r\ncontent-encoding: br\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6vOGiEJS0MO3gJqzPGUsd%2FKduJSaGHhqOQT4viR2SrESjHVfbRl4FcdchJEKSOOXFAAc9RJ0Nj39%2BsTi7OubnEB6pbwlK7Qn\"}]}\r\nx-served-from: fallback\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=31536000\r\ncf-cache-status: HIT\r\netag: W/\"684cfb7c-29b4d\"\r\ncf-ray: 9794fcd0fb9f2efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":170829,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 9 icons, 16x16, 32 bits/pixel, 24x24, 32 bits/pixel","md5":"ba5dc22b94fcfd6dbea3f9971aed5ad8","sha1":"7a6d51e8a607928f2cedf9e2bf7937ab99e39c8b","sha256":"e6f5d64eef5a96707d2df978ddce9fc81065a37ee0b1fb17c4e4723c2d938324","sha512":"9f2e05c270c465d3219717fe82609589c63894bbb81db8965d88a25972ce85004a306dc981e2a00fd09d60db095473855a31a4c8510014eb9a6bb006ba247aca","ssdeep":"384:haz59+GNOlZggggriey76IjReZqYehbcnDydkJROJfDCaGoyC+/s66xD:hKWdlcey76NZMhAnelJlqWD","tlshash":"2af32da3d336c598d2a047fc069065754bdbcd2494a4699b8d3eb8f1de335c224bec8b","first_seen":"2024-06-28T14:46:02Z","last_seen":"2026-02-11T00:28:12.177269Z","times_seen":481,"resource_available":false,"data":null}},"time_used":62,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":55,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.helloimg.com/i/2025/07/23/687fcadef04f5.gif","fqdn":"www.helloimg.com","domain":"helloimg.com","tld":"com"},"ip":{"addr":"43.159.98.20","port":443,"asn":139341,"as":"ACE","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://78se.xyz/","date":"2025-09-03T11:43:06.631Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.helloimg.com","organization":""},"issuer":{"commonName":"Certum Domain Validation CA SHA2","organization":"Unizeto Technologies S.A."},"validity":{"start":"Mon, 02 Jun 2025 02:46:42 GMT","end":"Tue, 02 Jun 2026 02:46:41 GMT"},"fingerprint":{"sha1":"B6:81:DB:4A:DF:77:5A:62:7B:51:93:18:DB:A4:C8:07:35:F5:C2:8A","sha256":"F3:D4:F3:60:57:8F:4F:11:43:49:92:DA:3D:C6:44:26:43:D2:44:D3:9B:42:F8:0E:F8:D2:22:42:B3:E1:A2:95"}}},"request":{"raw":"GET /i/2025/07/23/687fcadef04f5.gif HTTP/1.1\r\nHost: www.helloimg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://78se.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Tue, 22 Jul 2025 17:31:12 GMT\r\netag: \"687fcae0-1a08c\"\r\nserver: nginx\r\ncontent-type: image/gif\r\nexpires: Thu, 21 Aug 2025 17:31:19 GMT\r\nstrict-transport-security: max-age=31536000\r\ncontent-length: 106636\r\naccept-ranges: bytes\r\ndate: Wed, 03 Sep 2025 11:43:07 GMT\r\neo-log-uuid: 12209053798072348127\r\neo-cache-status: HIT\r\ncache-control: max-age=21600\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":106636,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 960 x 80","md5":"f2c62cf1e17119216797b8f03047cba7","sha1":"f3bb5c1e66488753301e78cd9989d6e931c4801f","sha256":"14610c2d7324e60d359a3982e6b06292e91e09603ab7c5691d0e3575ba9ab533","sha512":"c42d451aaeec3205dfbd71ba8767cd6cbd0a5f958a4bd84d1ac33493c745dd0848a4e89e22da9cca9c07aee6c769e4a09d9fe49d040679912899bf8be9efc64c","ssdeep":"3072:/pryvA0S3TZK/greo8xodQWIspnVB/nyEw0zNHHa:p39DMceokPFanLjTNHHa","tlshash":"c0a31221fe366676ecb580e4533ccbc7e0abb4569660caf248435909dda28781ce33dc","first_seen":"2025-02-06T08:44:40.489214Z","last_seen":"2025-11-30T13:38:16.251207Z","times_seen":307,"resource_available":false,"data":null}},"time_used":794,"timings":{"blocked":-1,"dns":449,"connect":23,"send":0,"wait":37,"receive":27,"ssl":258},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"timg216.top/videos/eab17b9bdcce9f06bb93dbba2f80edb3be825e858bb53be2b7bf943eba08e595/cover/5_505_259.webp?ih=1","fqdn":"timg216.top","domain":"timg216.top","tld":"top"},"ip":{"addr":"172.66.155.86","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://78se.xyz/","date":"2025-09-03T11:43:06.874Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"timg216.top","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Mon, 04 Aug 2025 04:37:13 GMT","end":"Sun, 02 Nov 2025 05:13:46 GMT"},"fingerprint":{"sha1":"09:98:82:E6:F6:CE:3A:0B:34:CA:7C:64:95:7C:21:B9:C3:D6:F3:7F","sha256":"2C:38:55:11:E8:93:E4:92:AF:46:8F:B3:8C:65:8E:0B:7C:53:7B:05:49:81:6B:17:A8:A7:13:D1:FA:7A:43:7E"}}},"request":{"raw":"GET /videos/eab17b9bdcce9f06bb93dbba2f80edb3be825e858bb53be2b7bf943eba08e595/cover/5_505_259.webp?ih=1 HTTP/1.1\r\nHost: timg216.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://78se.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 03 Sep 2025 11:43:07 GMT\r\ncontent-type: image/webp\r\ncontent-length: 95488\r\nserver: cloudflare\r\nlast-modified: Sun, 18 May 2025 14:20:54 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"6829ecc6-17500\"\r\nexpires: Fri, 01 Aug 2025 16:59:44 GMT\r\ncache-control: public, max-age=31536000, stale-if-error=7200\r\nt-cache: LHIT\r\naccept-ranges: bytes\r\nage: 17747\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gV%2BJIcnkb%2FeMQwWM9729NwHoDY%2BpYNBPvFHd0TthxHnJpyPw5ga4f1QNb1VnZ9A31fUbbVk8Zo3oTAdLN4TjCWaj5dq7%2F1eBtlGW\"}]}\r\ncf-ray: 9794fcd638cf8deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":95488,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 505x259, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"eb3b814f6baa767797f3ef8c71add1d2","sha1":"998709a0060ea9f8acf59797a718cf9a4accde9f","sha256":"d2a322f574ef7826c489cd60c16a73423780e9dd939c3fa8e3685145998c6d4a","sha512":"d343e8cc5dde9ab7ec307260a6b503cf8e6d91baaf86bbed43abe89073fc972e082ae2e7096f662c3cac19b772f1363df580402127948a79a5339a7b1ff841c9","ssdeep":"1536:8DBHUhPm6XkfdlXBmQJTkOQcPl7RskXQ5fwoW2xRLh4X6SreInCBleQuEb:imrXkfdlXMsk2Ww7EVh4XLrNCBIgb","tlshash":"47930235345b739d5a0b1cbf6a26cb0039f9f1dbab02c88d42bd43c626f89bdc655198","first_seen":"2025-09-03T11:43:40.145434Z","last_seen":"2025-09-05T08:08:05.354553Z","times_seen":2,"resource_available":false,"data":null}},"time_used":386,"timings":{"blocked":363,"dns":0,"connect":0,"send":0,"wait":17,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}