{"report_id":"a1afa8af-a10e-4316-a5a7-8dff7345ca67","version":6,"status":"done","tags":[],"date":"2026-04-04T14:26:51Z","url":{"schema":"http","addr":"www.downza.cn/soft/360885.html","fqdn":"www.downza.cn","domain":"downza.cn","tld":"cn"},"ip":{"addr":"36.41.168.164","port":0,"asn":134768,"as":"CHINANET SHAANXI province Cloud Base network","country":"China","country_code":"CN"},"final":{"url":{"schema":"https","addr":"www.downza.cn/soft/360885.html","fqdn":"www.downza.cn","domain":"downza.cn","tld":"cn"},"title":"优路教育下载_优路教育电脑版下载[官方版]-下载之家","dom":{"size":1730,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (1579)","md5":"39033a6b2dc1fa57e0974fb4d477aa96","sha1":"05112953e6c3c89c60a8d96434abdf044401ec46","sha256":"4c5a71f4f0364e1946e62df0435ec46c9214a0f59524747d766095d3e4fbcdb3","sha512":"98a866971c14228155c318a50f68e0d4936f810579c651263467e27f90827e2539fc039e057ca8b16112eb1bb1c6d745c2cef80785c502673ab169c1db404325","ssdeep":"","tlshash":"dd31969fa1faa92100a6143020fe764537f9651977028cd4d6bad0313b3caaf6b45eec","dom_hash":"domhashb1f05b34bb3cdc72adb99ad8fc515543","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"www.downza.cn/soft/360885.html","fqdn":"www.downza.cn","domain":"downza.cn","tld":"cn"},"ip":{"addr":"36.41.168.164","port":0,"asn":134768,"as":"CHINANET SHAANXI province Cloud Base network","country":"China","country_code":"CN"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-05-09T14:26:51Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":2,"urlquery":0,"analyzer":3}},"detection":{"ids":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-04-04T14:26:29Z","timestamp":1775312789,"ip_dst":{"addr":"Client IP","port":34336,"asn":0,"as":"","country":"","country_code":"zz"},"ip_src":{"addr":"122.112.196.83","port":443,"asn":55990,"as":"Huawei Cloud Service data center","country":"China","country_code":"CN"},"severity":"low","alert":"ET INFO Observed ZeroSSL SSL/TLS Certificate","source":"{\"timestamp\":\"2026-04-04T14:26:29.218322+0000\",\"flow_id\":54499369833930,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"122.112.196.83\",\"src_port\":443,\"dest_ip\":\"172.18.0.5\",\"dest_port\":34336,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2031231,\"rev\":3,\"signature\":\"ET INFO Observed ZeroSSL SSL/TLS Certificate\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"confidence\":[\"High\"],\"created_at\":[\"2020_11_23\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2022_12_01\"]}},\"tls\":{\"subject\":\"CN=bigdata.downza.com\",\"issuerdn\":\"C=AT, O=ZeroSSL, CN=ZeroSSL ECC Domain Secure Site CA\",\"serial\":\"00:83:C4:4B:3F:EF:90:71:88:7A:29:1E:35:BC:6B:CA:2C\",\"fingerprint\":\"c0:fa:d0:1d:93:6d:cf:29:23:a2:0b:27:b7:67:a4:43:ea:b2:e5:58\",\"sni\":\"bigdata.downza.com\",\"version\":\"TLS 1.2\",\"notbefore\":\"2026-03-13T00:00:00\",\"notafter\":\"2026-06-11T23:59:59\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"fe0146829eef1917ba6c2dd4f5c08905\",\"string\":\"771,49196,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":7,\"pkts_toclient\":6,\"bytes_toserver\":1092,\"bytes_toclient\":3638,\"start\":\"2026-04-04T14:26:28.284106+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-04-04T14:26:29Z","timestamp":1775312789,"ip_dst":{"addr":"Client IP","port":34342,"asn":0,"as":"","country":"","country_code":"zz"},"ip_src":{"addr":"122.112.196.83","port":443,"asn":55990,"as":"Huawei Cloud Service data center","country":"China","country_code":"CN"},"severity":"low","alert":"ET INFO Observed ZeroSSL SSL/TLS Certificate","source":"{\"timestamp\":\"2026-04-04T14:26:29.413924+0000\",\"flow_id\":697668574915309,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"122.112.196.83\",\"src_port\":443,\"dest_ip\":\"172.18.0.5\",\"dest_port\":34342,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2031231,\"rev\":3,\"signature\":\"ET INFO Observed ZeroSSL SSL/TLS Certificate\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"confidence\":[\"High\"],\"created_at\":[\"2020_11_23\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2022_12_01\"]}},\"tls\":{\"subject\":\"CN=bigdata.downza.com\",\"issuerdn\":\"C=AT, O=ZeroSSL, CN=ZeroSSL ECC Domain Secure Site CA\",\"serial\":\"00:83:C4:4B:3F:EF:90:71:88:7A:29:1E:35:BC:6B:CA:2C\",\"fingerprint\":\"c0:fa:d0:1d:93:6d:cf:29:23:a2:0b:27:b7:67:a4:43:ea:b2:e5:58\",\"sni\":\"bigdata.downza.com\",\"version\":\"TLS 1.2\",\"notbefore\":\"2026-03-13T00:00:00\",\"notafter\":\"2026-06-11T23:59:59\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"fe0146829eef1917ba6c2dd4f5c08905\",\"string\":\"771,49196,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":7,\"pkts_toclient\":6,\"bytes_toserver\":1211,\"bytes_toclient\":3638,\"start\":\"2026-04-04T14:26:28.535277+0000\"}}"}],"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"etl-xlmc-ssl.xunlei.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"api-shoulei-ssl.xunlei.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"res-etl-ssl.xunlei.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null},"summary":[{"fqdn":"360fenxi.mediav.com","ip":{"addr":"112.65.69.71","port":443,"asn":17621,"as":"China Unicom Shanghai network","country":"China","country_code":"CN"},"domain_registered":"2003-08-25","domain_rank":1972775,"first_seen":"2017-01-29T17:08:29Z","last_seen":"2026-04-04T06:00:43.072866Z","alert_count":0,"request_count":1,"received_data":2071,"sent_data":534,"comment":"","tags":null,"fingerprints":[{"name":"OpenResty:1.9.15.1","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"97233e.yzhy20.cn","ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2020-01-09","domain_rank":0,"first_seen":"2026-04-04T14:26:53.356829Z","last_seen":"2026-04-04T14:26:53.356829Z","alert_count":0,"request_count":1,"received_data":0,"sent_data":437,"comment":"","tags":null,"fingerprints":null},{"fqdn":"bigdata.downza.com","ip":{"addr":"122.112.196.83","port":443,"asn":55990,"as":"Huawei Cloud Service data center","country":"China","country_code":"CN"},"domain_registered":"2011-03-27","domain_rank":0,"first_seen":"2021-06-08T10:16:41Z","last_seen":"2026-04-03T20:46:02.267196Z","alert_count":0,"request_count":2,"received_data":3690,"sent_data":1293,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"res-etl-ssl.xunlei.com","ip":{"addr":"101.133.169.157","port":443,"asn":37963,"as":"Hangzhou Alibaba Advertising Co.,Ltd.","country":"China","country_code":"CN"},"domain_registered":"2004-01-13","domain_rank":2017599,"first_seen":"2016-11-18T02:24:15Z","last_seen":"2026-03-30T19:13:14.627653Z","alert_count":1,"request_count":1,"received_data":14627,"sent_data":426,"comment":"","tags":null,"fingerprints":null},{"fqdn":"e.so.com","ip":{"addr":"36.99.171.172","port":443,"asn":137687,"as":"Luoyang, Henan Province, P.R.China.","country":"China","country_code":"CN"},"domain_registered":"1999-04-15","domain_rank":684878,"first_seen":"2017-04-12T07:49:55Z","last_seen":"2026-04-02T19:09:47.064902Z","alert_count":0,"request_count":1,"received_data":219,"sent_data":435,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"at.alicdn.com","ip":{"addr":"47.246.44.178","port":443,"asn":24429,"as":"Zhejiang Taobao Network Co.,Ltd","country":"Sweden","country_code":"SE"},"domain_registered":"2008-06-25","domain_rank":96084,"first_seen":"2013-11-28T05:03:29Z","last_seen":"2026-04-01T19:59:28.643467Z","alert_count":0,"request_count":1,"received_data":22371,"sent_data":448,"comment":"","tags":null,"fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]},{"name":"Tengine","description":"Tengine is a web server which is based on the Nginx HTTP server.","website":"https://tengine.taobao.org","common_platform_enumeration":"","icon":"Tengine.png","categories":["Web servers"]}]},{"fqdn":"pos.baidu.com","ip":{"addr":"103.235.46.94","port":443,"asn":55967,"as":"Beijing Baidu Netcom Science and Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"domain_registered":"1999-10-11","domain_rank":155213,"first_seen":"2012-05-24T21:17:49Z","last_seen":"2026-04-02T02:04:23.806267Z","alert_count":0,"request_count":1,"received_data":1648,"sent_data":1820,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"push.zhanzhang.baidu.com","ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"1999-10-11","domain_rank":1485849,"first_seen":"2015-07-22T05:44:02Z","last_seen":"2026-04-02T02:36:43.602361Z","alert_count":0,"request_count":1,"received_data":0,"sent_data":418,"comment":"","tags":null,"fingerprints":null},{"fqdn":"dup.baidustatic.com","ip":{"addr":"119.188.176.49","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"domain_registered":"2012-03-28","domain_rank":643308,"first_seen":"2013-08-22T22:41:21Z","last_seen":"2026-04-03T20:46:02.184625Z","alert_count":0,"request_count":1,"received_data":117733,"sent_data":414,"comment":"","tags":null,"fingerprints":null},{"fqdn":"zz.bdstatic.com","ip":{"addr":"157.255.63.48","port":443,"asn":136958,"as":"China Unicom Guangdong IP network","country":"China","country_code":"CN"},"domain_registered":"2011-12-26","domain_rank":365334,"first_seen":"2017-01-30T07:45:48Z","last_seen":"2026-04-01T20:04:38.048054Z","alert_count":0,"request_count":1,"received_data":767,"sent_data":420,"comment":"","tags":null,"fingerprints":null},{"fqdn":"s.union.360.cn","ip":{"addr":"123.125.81.172","port":443,"asn":4808,"as":"China Unicom Beijing Province Network","country":"China","country_code":"CN"},"domain_registered":"2003-03-17","domain_rank":1507248,"first_seen":"2015-09-25T05:40:38Z","last_seen":"2026-04-04T01:22:48.158147Z","alert_count":0,"request_count":3,"received_data":3020,"sent_data":1896,"comment":"","tags":null,"fingerprints":[{"name":"OpenResty:1.9.15.1","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"www.downza.cn","ip":{"addr":"218.11.0.74","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"domain_registered":"2007-12-10","domain_rank":539636,"first_seen":"2012-08-25T15:49:53Z","last_seen":"2026-03-12T22:09:45.025652Z","alert_count":0,"request_count":2,"received_data":81480,"sent_data":947,"comment":"","tags":null,"fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"jQuery:1.12.4","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}]},{"fqdn":"api-shoulei-ssl.xunlei.com","ip":{"addr":"106.15.105.54","port":443,"asn":37963,"as":"Hangzhou Alibaba Advertising Co.,Ltd.","country":"China","country_code":"CN"},"domain_registered":"2004-01-13","domain_rank":739502,"first_seen":"2017-01-31T22:36:21Z","last_seen":"2026-03-30T19:13:14.211859Z","alert_count":1,"request_count":1,"received_data":527,"sent_data":509,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"www.360.cn","ip":{"addr":"47.89.195.194","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"United States","country_code":"US"},"domain_registered":"2003-03-17","domain_rank":730033,"first_seen":"2013-01-19T20:06:14Z","last_seen":"2026-04-04T01:22:47.857158Z","alert_count":0,"request_count":1,"received_data":226,"sent_data":521,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"local.info.g9hc4.cn","ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2018-01-29","domain_rank":675470,"first_seen":"2020-06-09T11:12:49Z","last_seen":"2026-04-01T10:26:05.967334Z","alert_count":0,"request_count":2,"received_data":0,"sent_data":908,"comment":"","tags":null,"fingerprints":null},{"fqdn":"open.thunderurl.com","ip":{"addr":"218.12.76.168","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"domain_registered":"2018-03-13","domain_rank":4948650,"first_seen":"2018-11-02T14:05:19Z","last_seen":"2026-03-28T10:26:19.611903Z","alert_count":0,"request_count":1,"received_data":357007,"sent_data":421,"comment":"","tags":null,"fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"bigdata.onlinedown.net","ip":{"addr":"115.223.9.117","port":443,"asn":134771,"as":"WENZHOU, ZHEJIANG Province, P.R.China.","country":"China","country_code":"CN"},"domain_registered":"2001-03-01","domain_rank":0,"first_seen":"2025-07-05T15:46:28.799932Z","last_seen":"2026-04-03T20:46:01.110661Z","alert_count":0,"request_count":1,"received_data":5785,"sent_data":441,"comment":"","tags":null,"fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"hm.baidu.com","ip":{"addr":"14.215.182.140","port":443,"asn":4134,"as":"Chinanet","country":"China","country_code":"CN"},"domain_registered":"1999-10-11","domain_rank":54491,"first_seen":"2012-05-26T08:38:45Z","last_seen":"2026-03-30T04:31:31.043385Z","alert_count":0,"request_count":2,"received_data":31198,"sent_data":1294,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}]},{"fqdn":"cbjs.baidu.com","ip":{"addr":"119.188.176.49","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"domain_registered":"1999-10-11","domain_rank":2850591,"first_seen":"2012-05-23T12:16:29Z","last_seen":"2026-03-29T14:51:06.125936Z","alert_count":0,"request_count":1,"received_data":117733,"sent_data":408,"comment":"","tags":null,"fingerprints":null},{"fqdn":"etl-xlmc-ssl.xunlei.com","ip":{"addr":"106.14.2.169","port":443,"asn":37963,"as":"Hangzhou Alibaba Advertising Co.,Ltd.","country":"China","country_code":"CN"},"domain_registered":"2004-01-13","domain_rank":1362145,"first_seen":"2017-05-20T13:39:08Z","last_seen":"2026-03-30T19:13:14.301627Z","alert_count":2,"request_count":2,"received_data":352,"sent_data":2694,"comment":"","tags":null,"fingerprints":null},{"fqdn":"img3.downza.cn","ip":{"addr":"113.240.117.108","port":443,"asn":63835,"as":"No.293,Wanbao Avenue","country":"China","country_code":"CN"},"domain_registered":"2007-12-10","domain_rank":6189449,"first_seen":"2016-04-30T23:51:45Z","last_seen":"2026-03-22T21:56:44.000184Z","alert_count":0,"request_count":26,"received_data":487196,"sent_data":11871,"comment":"","tags":null,"fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}]},{"fqdn":"res.njxzwh.com","ip":{"addr":"121.22.232.170","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"domain_registered":"2016-03-02","domain_rank":0,"first_seen":"2016-11-14T20:56:28Z","last_seen":"2026-04-03T20:46:01.470629Z","alert_count":0,"request_count":22,"received_data":330406,"sent_data":10343,"comment":"","tags":null,"fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"127.0.0.1","ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":1,"received_data":0,"sent_data":555,"comment":"","tags":null,"fingerprints":null},{"fqdn":"api.oss.downza.com","ip":{"addr":"115.223.9.119","port":443,"asn":134771,"as":"WENZHOU, ZHEJIANG Province, P.R.China.","country":"China","country_code":"CN"},"domain_registered":"2011-03-27","domain_rank":0,"first_seen":"2022-10-21T16:46:02Z","last_seen":"2026-03-12T22:09:45.793036Z","alert_count":0,"request_count":3,"received_data":2554,"sent_data":1584,"comment":"","tags":null,"fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"sp0.baidu.com","ip":{"addr":"103.235.46.102","port":443,"asn":55967,"as":"Beijing Baidu Netcom Science and Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"domain_registered":"1999-10-11","domain_rank":220073,"first_seen":"2014-12-05T23:12:12Z","last_seen":"2026-04-01T19:18:16.992959Z","alert_count":0,"request_count":1,"received_data":116,"sent_data":494,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"www.downza.cn/soft/360885.html","fqdn":"www.downza.cn","domain":"downza.cn","tld":"cn"},"ip":{"addr":"218.11.0.74","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"introduction_type":"scriptElement","is_inline":true,"md5":"6ffe0cc0f9f5338397d935ffe54cf88d","sha1":"df92e88cd3a3ee2ab604b70169df78b0a5cdbe76","sha256":"0d74275033f034b07a7f44b910ac8e9239475ab5308eb8135904908860b6c3a4","sha512":"83c9b7d295f2e1d1b0e461f1560b2b6a3edf7a4d8ce269f5cebfafc3638ab186e20a59cbe647e7442d93b076675690c3cdce0bde8a15f7e7b2e3b9a2c13aa96f","ssdeep":"","tlshash":"7770000020220a00080c8a008282e000280222b20028800208ac20c208c238a22220a2","size":22,"data":"","first_seen":"2026-04-04T14:27:36.516119Z","last_seen":"2026-04-04T14:27:36.516119Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.downza.cn/soft/360885.html","fqdn":"www.downza.cn","domain":"downza.cn","tld":"cn"},"ip":{"addr":"218.11.0.74","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"introduction_type":"scriptElement","is_inline":true,"md5":"482e17ffa611640df27dcd8bffd70b10","sha1":"2e10922994bd13291ce2dc1ec8c1bca98a6135f4","sha256":"bc73c2fd7fa601897501b408f5eed4786d20dbcdb724d99e836e98d0f4c48315","sha512":"8c2c2953f02c248314170b984f473cb9abd5027fe75417faa70c6b9e3eb19abea7d1bf05d3d6d917fb63fe07445bcbb671f4526f45c57f6ed45c6f198f86c457","ssdeep":"","tlshash":"37e07d5d244e108442abb4e67bb382083682234ea0348470bead40905f38dcd148141c","size":333,"data":"","first_seen":"2025-02-11T04:22:14.279823Z","last_seen":"2026-06-06T23:56:38.358814Z","times_seen":53,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.downza.cn/soft/sandbox%20eval%20code","fqdn":"www.downza.cn","domain":"downza.cn","tld":"cn"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"","is_inline":false,"md5":"92b651082ce234f66bb544e678befda3","sha1":"14c21c55ddce43b6f677caadf51d4ab98c6a3df8","sha256":"25d57d1d97abeb84531d3d3e5754dd5cb19a2c115edfa7cfc7af8247084faded","sha512":"b4fcbc037e0a3d91db2a624921e96b878e9e18dd998ad5649d77d7d053faf28b09c8725a0542aef702310bf85f3037b70985c274db8acabd021efb171d41f361","ssdeep":"","tlshash":"34c08ca3e74026ae2a1166b2b810e003a2866b015aa78402b00a003b1441fe21aaa1a8","size":147,"data":"","first_seen":"2023-04-11T21:07:53Z","last_seen":"2026-06-07T08:18:38.896325Z","times_seen":921522,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.downza.cn/soft/360885.html","fqdn":"www.downza.cn","domain":"downza.cn","tld":"cn"},"ip":{"addr":"218.11.0.74","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"introduction_type":"Function","is_inline":false,"md5":"e89eef76ec0f886241f38b3c198aca0f","sha1":"de2eba5ad3c2fecf963d4dc8df8be1db5d4bbe18","sha256":"369aac8e3f1e9c9fdea788b455321bd6bd833c02e82f3382df42d803617c199c","sha512":"3783db731380d7d5182aa61290b5726b215c76bef4fbf9fa3b7cf31f13f9d0dd4d203a60b9259b1e3f1d0c0f083e9c8249f44198e290cedfccf26d8f82cea115","ssdeep":"","tlshash":"37f027cd5345c0d879d229b9b5567a0870c82d298cfa4c19dc00b0813bdaa6701e1adf","size":489,"data":"","first_seen":"2026-04-04T14:27:36.518993Z","last_seen":"2026-04-04T14:27:36.518993Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"res.njxzwh.com/downza/pc/v2023/js/jquery-1.12.4.min.js","fqdn":"res.njxzwh.com","domain":"njxzwh.com","tld":"com"},"ip":{"addr":"113.240.117.107","port":443,"asn":63835,"as":"No.293,Wanbao Avenue","country":"China","country_code":"CN"},"introduction_type":"scriptElement","is_inline":false,"md5":"618538b4ab9639d444e962729a927f15","sha1":"dacc1f76630a9708add066819b1aabf8dce01056","sha256":"27d92130c0321dad5a03760fd5ac98a3d04ed4c94d88418fe6d50da1f7fc5cbe","sha512":"bcb6754ea246939a19a917cc0b810e1753c1b0f1a8b1b7e652128ef15dee4fc79111e4d88fe12f9188449a307e82240d0261af402d783428edfe5785c860372d","ssdeep":"1536:jYE1JVoiB9JqZdXXe2pD3PgoIiulrUdTJ5Fk/zkZ4HjL5o8srOaS9TwDhb7/Jp96:y4J+03jL5TCOauTwDhFdnCVQNLa98Hrc","tlshash":"9693d7d9b6d6706287b734a851bf410bb17aa8eab40c4c60f058c8e47e74e9d507bf2d","size":97168,"data":"","first_seen":"2023-03-07T01:12:12Z","last_seen":"2026-06-17T17:20:45.274998Z","times_seen":5353,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bigdata.onlinedown.net/win_heartbeat_tool.js?2026040412","fqdn":"bigdata.onlinedown.net","domain":"onlinedown.net","tld":"net"},"ip":{"addr":"115.223.9.117","port":443,"asn":134771,"as":"WENZHOU, ZHEJIANG Province, P.R.China.","country":"China","country_code":"CN"},"introduction_type":"scriptElement","is_inline":false,"md5":"4e979ccfd61b1b2edd7c35c38e983d65","sha1":"42e9c12a32f3d71d4dd1f54218d109eaa4ed225a","sha256":"c3d3ad3880a8c5c7ff719b98acadbbb2127bc2bd2796dea8f535f1b503320887","sha512":"c6cb9f8906181aab8afb067ecf46e79951130d50ce1a898053814201e247d07d11f5260871b012892f81e9e0e651e1040203d3afc8408663b8951a21383b48fd","ssdeep":"96:Q6WIKZ7Wk+mj/hCP4C1wZD1ZD5BnX+B68pkO967zE/DCKlQ1mxp6wti:Q6WI3obP3XBnOBdto74m1mbPI","tlshash":"9ab1959425d970aa45bbbb705f63e08af3305a131940e198bddd87160f33bf89245fd9","size":5222,"data":"","first_seen":"2025-12-19T23:36:25.989321Z","last_seen":"2026-06-06T22:27:36.490719Z","times_seen":82,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.downza.cn/soft/360885.html","fqdn":"www.downza.cn","domain":"downza.cn","tld":"cn"},"ip":{"addr":"218.11.0.74","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"introduction_type":"scriptElement","is_inline":false,"md5":"6c5e8abb80fe9b76c840e78402d56d0a","sha1":"4ebc9f169f30a39240cc7415ad1c87cb88284963","sha256":"3a64e46e6e8fbfe5df1c02c61d4e11f009f39292ee62eaeec3f53fabd8b26452","sha512":"74ef1a9dae5a7a8381c363a7c4e25e0fde30b7846300de5b11d1b3c92602434f26db8dfed05ba25506b66b6f2d47b2defcf99c9999f560fa01c1132a5aa55efe","ssdeep":"","tlshash":"9a800000ac0e888202aa03222222e20ca82000803ac8b0c03aa00a003028aab3800088","size":29,"data":"","first_seen":"2026-04-04T14:27:36.520084Z","last_seen":"2026-04-04T14:27:36.520084Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"res.njxzwh.com/w2/js/app/tongji.js","fqdn":"res.njxzwh.com","domain":"njxzwh.com","tld":"com"},"ip":{"addr":"113.240.117.107","port":443,"asn":63835,"as":"No.293,Wanbao Avenue","country":"China","country_code":"CN"},"introduction_type":"scriptElement","is_inline":false,"md5":"98e4c22ce59e9effa9bde2788477fceb","sha1":"ee3517ea667977f21e09e8355591c46d5e7cad96","sha256":"5515312c90eca191e9c7ba662587459b5f746dc4372e6237416be4f63a75a4b6","sha512":"b87d693fb7b6f493ac7763f870f490325f3744aef1f41bef7f45ee86e27fa36d846fd6270f5fcc21adcf94f6a92af0b0716e048d9737049e325fd0c4ae2718d1","ssdeep":"","tlshash":"b611309b2c7b6834176c08f650bdf508b2b8101ca486d603a8acd9050ab0fed1c0d998","size":1108,"data":"","first_seen":"2025-02-11T04:22:13.827294Z","last_seen":"2026-06-06T23:56:38.295545Z","times_seen":63,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bigdata.downza.com/js/xingzhi.js?6bd0","fqdn":"bigdata.downza.com","domain":"downza.com","tld":"com"},"ip":{"addr":"122.112.196.83","port":443,"asn":55990,"as":"Huawei Cloud Service data center","country":"China","country_code":"CN"},"introduction_type":"scriptElement","is_inline":false,"md5":"20cfe5a66ceaa704c9134202b3197360","sha1":"1465772bfe2402479f12f67574cde3e4515b77f7","sha256":"df9d37d34bbd878277d92fa3633976f3a4f61a076c86a76bdbf51c350e928e0a","sha512":"4c93a2504530954a3e0f5535cc2ac214c94d14540af20fec2e8d2aa6f54aed586045d9e5ce92d93224a845dfe08e7c0bf04c892369f134faef9797e762201cee","ssdeep":"","tlshash":"57612274b294247540a12069672b734b63365146b84f6491a43eeef0bd74f47a123fbf","size":3300,"data":"","first_seen":"2023-03-09T21:13:51Z","last_seen":"2026-06-06T23:56:38.253001Z","times_seen":169,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.downza.cn/soft/360885.html","fqdn":"www.downza.cn","domain":"downza.cn","tld":"cn"},"ip":{"addr":"218.11.0.74","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"introduction_type":"scriptElement","is_inline":true,"md5":"c8528a250cdb5a1f96cee1d9f436a8ca","sha1":"8ce864d207b66a60fd9eef60d3022a65e663dcef","sha256":"2f163ad8d3545825981814b6ac2fbe162c9222f8f35d5c1462f25ca76d121a50","sha512":"d6fdb19e03cbe729b31558d9356469ba471b6ea43cbc13bab8791f7e33fa47a4b462e004cfabcab0b89b0c8a0976f3c56a0c7b344c1527a9bb517442353869c8","ssdeep":"","tlshash":"f311386ad95540f8bc5730155b2e820aa675352f9318c8657f2c5c8a3fd0a395f8aec8","size":1006,"data":"","first_seen":"2026-04-04T14:27:36.521037Z","last_seen":"2026-04-04T14:27:36.521037Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.downza.cn/soft/360885.html","fqdn":"www.downza.cn","domain":"downza.cn","tld":"cn"},"ip":{"addr":"218.11.0.74","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"introduction_type":"scriptElement","is_inline":true,"md5":"5c3351df4a0fe442354c68d8f9c4e7d6","sha1":"e3925edc5f093c9e5a8ee20cff9d981f718718dc","sha256":"f83ace60610d35de1776953bdab14b8d6e39f3cc3a8fda3cebd1bb0db0cd780d","sha512":"5a818aacb1e400a0d2bed063e3125a6bb6e849f4fc87bf01b56661a6b9ea7d7d9677ea64375a573ac79e561e750b33beceac4f460754bc0bf4f5004b6d31e07f","ssdeep":"","tlshash":"e0115b6ad95264ec2d5738262b2e8200ba352457e108cc057e3c6a496fd0775a9b9fd8","size":1006,"data":"","first_seen":"2026-04-04T14:27:36.52193Z","last_seen":"2026-04-04T14:27:36.52193Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.downza.cn/soft/360885.html","fqdn":"www.downza.cn","domain":"downza.cn","tld":"cn"},"ip":{"addr":"218.11.0.74","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"introduction_type":"scriptElement","is_inline":true,"md5":"9991cde6748a724843ba9f4f001c270c","sha1":"2dff9064a08b47be71e675fcc6064f1a72fe14b7","sha256":"3e3e2c540809b902088c300610ebba95a105d4403bfd271455f5a176982f2e0f","sha512":"ea6a81439b70fcb620924fb24a20093faaee6122c3613781691c6c407ae5649baf387af58c047d6468f3ce4a9feb95690e0abfec6d809f1ab18b280a3b8fc6d8","ssdeep":"","tlshash":"17117a69a85241b02957781d2b2dc304b6753b97d118ce467e2cb8862fe3afa558cfc8","size":1006,"data":"","first_seen":"2026-04-04T14:27:36.52285Z","last_seen":"2026-04-04T14:27:36.52285Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"res.njxzwh.com/redirect/dist/bundle.js?2026040412","fqdn":"res.njxzwh.com","domain":"njxzwh.com","tld":"com"},"ip":{"addr":"113.240.117.107","port":443,"asn":63835,"as":"No.293,Wanbao Avenue","country":"China","country_code":"CN"},"introduction_type":"scriptElement","is_inline":false,"md5":"a15b12ecfca4ad041ce999d9739fcff0","sha1":"9543940c6f82d897bc5b6fb9f149303fbc3c8fa0","sha256":"bb245e02ce438ad0655fefc83d386cc5a24dfede2fa9a16176e05b0da6e55d51","sha512":"a831c09652bbbfb50d8396d51f004391a08e28c79bf526a22ee26f050e8d37b31bc78a3f09ae24f95fd61969dea0aabab447fd25f9421bc2a50ffcbac7f7a169","ssdeep":"192:IX+hkzcGGB/qrc2T+tgdiz2PhfN793/uQrbO++ljrxFVD4yggOyz:IX+esGc2OzYDuQrijrxFFz","tlshash":"2ce286ddabce4d649a48dbccb2fd660cb6031ed3d5c5589bc20dac9967322e02b1435e","size":34130,"data":"","first_seen":"2024-12-25T04:18:22.998709Z","last_seen":"2026-06-06T23:56:38.288349Z","times_seen":144,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"res.njxzwh.com/downza/pc/v2023/js/detail.js?2026040412","fqdn":"res.njxzwh.com","domain":"njxzwh.com","tld":"com"},"ip":{"addr":"113.240.117.107","port":443,"asn":63835,"as":"No.293,Wanbao Avenue","country":"China","country_code":"CN"},"introduction_type":"scriptElement","is_inline":false,"md5":"b9df3fe2e7265ce4938428ed4f20f03c","sha1":"bf8d062485b95aaf40898508172256dca7b051ee","sha256":"51c50d7e774b5ffdcf1f84fd2349932ae5a3e2527551bb05d43b499435232938","sha512":"41ed7dde17f83cc0724a3194174b24f11ac3d226add096539d042fb82ace14184dc8418c60d9b0d1434ae0dd8e218a10c3ee4bb6a317f7531afd3e929669fb15","ssdeep":"96:w4zYnZ4z8nDV4zYn44wMmwHW6nk27ENACWIvAK2L4:w4zYZ4z8R4zY44wMmwR3XL4","tlshash":"af912f49b9002a6468bfa73f6a7b6404db1a5513c161e200f09e48e61f701a477f3ede","size":4413,"data":"","first_seen":"2025-11-02T09:13:30.168288Z","last_seen":"2026-06-06T23:56:38.286398Z","times_seen":37,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.downza.cn/soft/360885.html","fqdn":"www.downza.cn","domain":"downza.cn","tld":"cn"},"ip":{"addr":"218.11.0.74","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"introduction_type":"scriptElement","is_inline":true,"md5":"26780c68753983b8eab3d268a721cd27","sha1":"df2b85d22116134533701da730e94d0c7e6b7749","sha256":"a9d62077f87e4be7c7e1f201ca27719d96f6b2c4ebc9d84421e3a39129f63b64","sha512":"61b16bb0a1c056e25ab3163226710bc06f58f6d2a96733c2742752b8bc758fa47c89b4d3998233dfbfd9fdebad1310266f7930a2e08ff8f423995c3f9c2ad38f","ssdeep":"","tlshash":"7de0614e346854e595e3a1f737b3491c7412370c6550f9a349ad854c2400551409b1dc","size":395,"data":"","first_seen":"2025-02-11T04:22:14.282922Z","last_seen":"2026-06-06T23:56:38.372137Z","times_seen":54,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.downza.cn/soft/360885.html","fqdn":"www.downza.cn","domain":"downza.cn","tld":"cn"},"ip":{"addr":"218.11.0.74","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"introduction_type":"scriptElement","is_inline":true,"md5":"31ad09a6b8c023d6859359192faa3a03","sha1":"514998f969905c270617559147c06f6b61fbeb8c","sha256":"a65da6537e8251365e84f783332c683d0298ef086b57383c5d0ae0a72856b4b3","sha512":"a06dcabf8892780aea310a9624e9e9adde6873c19cc5265500b5ad9556f23a4792786d6fd371b31cb385cd7fef75d2ba46ad51dd960df6fe0194f0665aeb4f42","ssdeep":"","tlshash":"41d02b1b5c2b5cb4bbaa082d12bed44cf1a1554f10b9c01175cce8508f94ec1082f7c8","size":289,"data":"","first_seen":"2025-06-27T02:41:15.219016Z","last_seen":"2026-06-06T22:27:36.508013Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.downza.cn/soft/360885.html","fqdn":"www.downza.cn","domain":"downza.cn","tld":"cn"},"ip":{"addr":"218.11.0.74","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"introduction_type":"eval","is_inline":false,"md5":"0d2607f6b4f6858a4f8586fd297a7613","sha1":"f5f213ae92984c5f62d8f5840f0b8e80fcaf2055","sha256":"f3f0d6792f0cdf0fd92acc6c9229aa9e1e626808993ab9d6b146c463f0b8bde0","sha512":"89a1a49a6a1e8e5896092a39da0c98194287460364b1643b0b830dec6fb6318600a168bb43f047ae851308220d7006b5649769c90a31ff072df237c2bb6e19b9","ssdeep":"","tlshash":"1cc02b07022b44211031181a0ae721043c0002079c4438303ffc82702f0860fcc600f8","size":167,"data":"","first_seen":"2025-06-21T17:27:26.897495Z","last_seen":"2026-04-04T14:27:36.525278Z","times_seen":13,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"360fenxi.mediav.com/mediav1130.html","fqdn":"360fenxi.mediav.com","domain":"mediav.com","tld":"com"},"ip":{"addr":"112.65.69.71","port":443,"asn":17621,"as":"China Unicom Shanghai network","country":"China","country_code":"CN"},"introduction_type":"scriptElement","is_inline":true,"md5":"8b2a0f98ad150eb07ade4521e4f45d8f","sha1":"80482ff1ec88cd1a00430b6f22fd819d34bec075","sha256":"5f51a8922ad788b2695fd22f3616d6a2a632c1bfd8913ea0dc1590530237df4a","sha512":"de30ea98f80b54f7b25d693ad8d5578cff9f6e917264a17f128cea4d0ed5ef3a823ed93ee608965381de6d23751d95eccbd5bd76105973a943b84b217a31eb59","ssdeep":"","tlshash":"c631a7cfa2ba682501a6003021ee378537ba255c77024c90d67ad4313b38a6f7758efd","size":1496,"data":"","first_seen":"2025-03-02T07:00:46.161784Z","last_seen":"2026-06-06T23:56:38.393712Z","times_seen":759,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"open.thunderurl.com/thunder-link.js","fqdn":"open.thunderurl.com","domain":"thunderurl.com","tld":"com"},"ip":{"addr":"218.12.76.168","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"introduction_type":"scriptElement","is_inline":false,"md5":"366976acad16241ce359322cea8d383e","sha1":"be007f54dd8164cfe0b3d69a7a8168014647a89f","sha256":"2f61ea9513085af46cebce1fd02111cf41148953fe58ba0822b5160818fdfcf4","sha512":"b1899080a2c015d60e60725760faa488a3c677a9fe9390720e62d4bf5061eb1d3df64ce77fd3f9b1ac9c6bfb43000f48dafb7bbcbb08ef53c5a8c22e941b614d","ssdeep":"3072:r+AXJCaTlvK3boCD0stnW+/vnu0srcRwEZ2CVGv6bNwRuLsl6Ab9rCE4c/VhI:rnBbssQvnGAIpb9rCE4T","tlshash":"78747e8fb246b1664baa2ef6c4bf590ff176111428488c60f269d8d5ac7cb9c411bf7c","size":356371,"data":"","first_seen":"2026-03-19T17:00:24.439046Z","last_seen":"2026-06-06T23:56:38.324798Z","times_seen":87,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dup.baidustatic.com/js/ds.js","fqdn":"dup.baidustatic.com","domain":"baidustatic.com","tld":"com"},"ip":{"addr":"119.188.176.49","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"introduction_type":"scriptElement","is_inline":false,"md5":"b543dbe074718c21f7f5e7cbf1aff034","sha1":"99ef1caf9c69e99a60c2f0ee33720cb40cdf1cc8","sha256":"b6a34b928d00909e40ec7edfadd89ac0cfa1fcc5892bdf3168b60b28a5bfe1f6","sha512":"56d74637e8023b8983c240ec595528c56ed7d84f461fd4a1e16d329906a2dbfd023a8d519a68b1458a48f9cd19176df60dc099102640f0c3589c3bddd69221b7","ssdeep":"3072:GpOyaTRXqCpCOjwlfbitfD9mxf1W4OwYsRQD+fgpNCpIdlw:GpBApCO0fyfDcTQD+fgXRdlw","tlshash":"f4b3e899f6d2742546a220a4162f2609b2375548748b8480f67ee8d1fdbcf4f607bfbc","size":117379,"data":"","first_seen":"2025-06-30T07:43:55.721259Z","last_seen":"2026-06-15T10:15:23.743114Z","times_seen":1044,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google-analytics.com/analytics.js","fqdn":"www.google-analytics.com","domain":"google-analytics.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"f24128d0c9cba7be2916c693427a3483","sha1":"1b6397d496ea896ebc2018b01b995cee4f166029","sha256":"58173de4697da1a218f04c3a783a733bab4e769ceabc37cd42da9dc3e036a7e8","sha512":"c4950733b44e258bbc817ce6396f002caec1e11a6413fd0038c9baef2d5f1d992b1fd0ec52515aba52faedb52c28b996a7fc063f28a0f45f3aab5e2f91bf5be5","ssdeep":"96:A1VdZYqhPnjpWx4/eTe8qSMbqaQd6VL2Jyt9LdJoyayCVPVD5wdBfQPfCHiUr3:AXdZYqNjpU4yPqSMbqaQGL2QfdDayCZC","tlshash":"a6a1dc9939fb50210233b1bd1bafa918b23895236208dd61b98c9364bf94437d7f1fc9","size":4691,"data":"","first_seen":"2023-04-11T21:07:53Z","last_seen":"2026-06-07T08:18:38.899011Z","times_seen":919823,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"res.njxzwh.com/downza/pc/v2023/js/jquery.SuperSlide.2.1.1.js?2026040412","fqdn":"res.njxzwh.com","domain":"njxzwh.com","tld":"com"},"ip":{"addr":"113.240.117.107","port":443,"asn":63835,"as":"No.293,Wanbao Avenue","country":"China","country_code":"CN"},"introduction_type":"scriptElement","is_inline":false,"md5":"0b9bc63ab05e21e3830da5bbb4ccee67","sha1":"d162156bdaf14217d76d920e0e57b86d8feb1d97","sha256":"349e46b2c65028736d0bbff7b829c7fc6fbdebc1fb1e8b12365a0ca2e6e9e848","sha512":"bdfa220da1f08e29f05a9984c4999d7e742bea10ad86b7e497a0d112c7992cc52b7f1e9f5430b4286f14bb2336110f85cbdc3164a92121caaf5c91961f7e69c9","ssdeep":"192:j+K3bxH+nqfhD9VUVjIItpfg5uXG3+1tSCl+7flvSXwaHxImISLTNSfYXH7Le2HE:jNcnqflKFgEWulE8REcS3j/CkR1Xh3","tlshash":"9532c65fb66635ca4597b3f1107f940d222b5965fc8a8ca0b17082c0adb9a1c243bfed","size":11264,"data":"","first_seen":"2023-04-05T11:06:31Z","last_seen":"2026-06-17T23:54:24.234926Z","times_seen":13913,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"res.njxzwh.com/downza/pc/v2023/js/layer/layer.js?2026040412","fqdn":"res.njxzwh.com","domain":"njxzwh.com","tld":"com"},"ip":{"addr":"121.22.232.170","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"introduction_type":"scriptElement","is_inline":false,"md5":"47db0e57d73194c6a41bab5b4d55e860","sha1":"9db378fa8d56979e86519f483993486dc476902b","sha256":"69025fc1818313fb94c9ca4975c6a45e8385a6fd0ab9d0c60c0ac93cd997566e","sha512":"851e8630a4e631b332027850905245cb68ea56fddab22a8b7504bb4689c1a26b955ddf1b0ef23d1b1a0ecd83d668e115c9e10caf823029046a97a9f7b5c858b7","ssdeep":"384:N1xCih92A3igrLXSt/SdMrXqE6tGLxzAOTElH0jjhtjfs8:N1EiV3i+WtXItqF13k8","tlshash":"85a2b66a754034976323906ad11fba0b31f21d24d7078128f22bb4ae1dbcd95a2b7f5f","size":22105,"data":"","first_seen":"2023-04-07T19:23:28Z","last_seen":"2026-06-15T09:17:33.745008Z","times_seen":1194,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.downza.cn/soft/360885.html","fqdn":"www.downza.cn","domain":"downza.cn","tld":"cn"},"ip":{"addr":"218.11.0.74","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"introduction_type":"scriptElement","is_inline":true,"md5":"02f078ff88a01b91735bf8481ff4153f","sha1":"68c60327688da7f043bc1370fb77748eef2f5764","sha256":"282c157729661c8bb551f5789ba53ceffe6907075bcf1d15cdb38873f2acfbe5","sha512":"a38bc6f7c6d37dc578f5f1754e966bba275e32e7ef4e71a26a4cd41d89138eede758e55fb93d8f4048753eafd09f4c9c1f2ac51babe8c650a021997033933e41","ssdeep":"","tlshash":"5ee0721a30c2003a12b384ba23f7810a2622370fc48e8b12ba6fc9a66f24ca5040a60c","size":309,"data":"","first_seen":"2025-02-11T04:22:14.285457Z","last_seen":"2026-06-06T23:56:38.373288Z","times_seen":53,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.downza.cn/soft/360885.html","fqdn":"www.downza.cn","domain":"downza.cn","tld":"cn"},"ip":{"addr":"218.11.0.74","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"introduction_type":"scriptElement","is_inline":true,"md5":"81a9982fc04f379107e855281333d240","sha1":"4cc29ca88916c5c7dd41494ce6b380da49b253f3","sha256":"fffa4774be1e14dd8a8d4d50ce6e358b8c400aaf8b0b6320f7db7d018c17cf2a","sha512":"3d2f5875cb88f50be1bb0d6e45d40aa6e38b0038adddc8114e5e78f8d51a08cd486b0531d77d6defe517a5b474844ff8d8f786a0efec786dbf7ab301a95e3832","ssdeep":"","tlshash":"6ee0206ebc7746b43b5100bf453fa51cf1da103d5058d0127488e8114e20ed64b1ead5","size":346,"data":"","first_seen":"2025-11-02T09:13:30.312984Z","last_seen":"2026-06-06T23:56:38.382331Z","times_seen":40,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.downza.cn/soft/360885.html","fqdn":"www.downza.cn","domain":"downza.cn","tld":"cn"},"ip":{"addr":"218.11.0.74","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"introduction_type":"scriptElement","is_inline":true,"md5":"541e8be001048ad2990340ceb06bb6c7","sha1":"62be40579c8677e5dbefa6e6b697513c58c5567c","sha256":"b4f2b9494e03c629c97c1d115f46b6d786dc695662a3f62fab6b418996b0fbb0","sha512":"05835c0eb3fc97b508511cf815e687775d3e2c57f76a3bcae819fefa210faa78460b15537db628146a0a5de781b92c244a05d2f3a5494dbd3d914a39223b69bb","ssdeep":"","tlshash":"193112dda6ab6d15887730ab5b3f54047899543f9618dd08f80c15c42fab485d4da34e","size":1669,"data":"","first_seen":"2026-04-04T14:27:36.529384Z","last_seen":"2026-04-04T14:27:36.529384Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.downza.cn/soft/360885.html","fqdn":"www.downza.cn","domain":"downza.cn","tld":"cn"},"ip":{"addr":"218.11.0.74","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"introduction_type":"scriptElement","is_inline":true,"md5":"93b8913ef05155834fce29ae97fe4cee","sha1":"cb6cbe6da7db3b71eabf8aeeb9bf989a96e41e0e","sha256":"b1531e62d4fa6a3a0f2e3af910297bc475c813d91e72d5ca23553a42f7282387","sha512":"a3752c7a53c2f85a8b9c432cc8ca9c3e150e9fdb1378140aa35f26b9b342bd564bb1ac55ec803e666847728e55657735d924c9b354009949d3d25ecb8fa6fa00","ssdeep":"","tlshash":"911125286aa36021d6b730fa072fa2943277000b7204df5c784c5a926fbda4c99d768a","size":1031,"data":"","first_seen":"2026-04-04T14:27:36.530634Z","last_seen":"2026-04-04T14:27:36.530634Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hm.baidu.com/hm.js?38823771752fde0027cab9a4bbd6d13f","fqdn":"hm.baidu.com","domain":"baidu.com","tld":"com"},"ip":{"addr":"14.215.182.140","port":443,"asn":4134,"as":"Chinanet","country":"China","country_code":"CN"},"introduction_type":"scriptElement","is_inline":false,"md5":"4de3f95f0bdd5f3c78bbdfcda1006114","sha1":"af9eb920137e03bf90786b35d99017cb5ece1ffb","sha256":"93560cf1b1f1112909f03dc59d6cb60377bea1414f09c0b886cea8c06d60cc39","sha512":"932e397954201059f7ec37244ce6b332f3a4668f193c1a91c419a982b4c1a34815a0cbd0bf51b34eed9e2874b884a7c673c72108546bd40477208fc9df17d309","ssdeep":"384:GJSoLMJJTRl6s1JXFVCFI/TayvuodsZPIGm8XaR1JRwvutq1tGdc7M04gRw6:G4VJfHgMdvussZPIx82Rwvutcto07v","tlshash":"add2c8a9b282713293a324a5157f324af07b5e54bd4968a4f11894c07d38fbb027bfdd","size":30216,"data":"","first_seen":"2026-04-04T14:27:36.492181Z","last_seen":"2026-04-04T14:27:36.492181Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s.union.360.cn/proxy.html","fqdn":"s.union.360.cn","domain":"360.cn","tld":"cn"},"ip":{"addr":"123.125.81.172","port":443,"asn":4808,"as":"China Unicom Beijing Province Network","country":"China","country_code":"CN"},"introduction_type":"scriptElement","is_inline":true,"md5":"555c36219d4234ecf3edb2e8a71c7a6b","sha1":"f4200b6dffb233dee4d864477412388073b3945c","sha256":"8751a80fa876d7f2aa7001e26fc071fa7f77e5a9f1e1fa0668dcb2544a25fb75","sha512":"4d42d8341e01994c9e3af535ec859e4fa049089874f953f97725d8113f696150425e5eaa833b3bfa7380d8791b0cdc017706df2e681cf5b4bd1cc9c83ba28514","ssdeep":"","tlshash":"4341a8ad320970b900664e2136af370e7238122658478ca42f26f9f37cb574f8312ded","size":1881,"data":"","first_seen":"2025-03-02T07:00:46.154522Z","last_seen":"2026-06-06T23:56:38.367261Z","times_seen":768,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.downza.cn/soft/360885.html","fqdn":"www.downza.cn","domain":"downza.cn","tld":"cn"},"ip":{"addr":"218.11.0.74","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"introduction_type":"scriptElement","is_inline":true,"md5":"9c00c1461aa8ef6828e9584e2229962c","sha1":"186b920379a8a756a0382fd8e52bb3dd4212af96","sha256":"483b519d08a436a686615d5258054c9cd4989745131af56f5bf236d88c779fe1","sha512":"b25b641fcb38640fdca3ea88a0ab1c6149e6ef9180c88fe411d15bc1a9c6f7f5b6128c2e7810ecf884714adc5784939507ccccef6ec1cb8e5d2b0b666ec1bcd2","ssdeep":"","tlshash":"ece07d0bd0a684105a23d5943ff35700554670076f00d871baae43546fd89a483c131c","size":343,"data":"","first_seen":"2026-04-04T14:27:36.540951Z","last_seen":"2026-04-04T14:27:36.540951Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.downza.cn/soft/360885.html","fqdn":"www.downza.cn","domain":"downza.cn","tld":"cn"},"ip":{"addr":"218.11.0.74","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"introduction_type":"scriptElement","is_inline":true,"md5":"bedb644aa0729847d665e111e552777f","sha1":"2aa897307f63f0cc574d5ed6a566d609ad669942","sha256":"119d483617bcc712fee8f5912041e212e16ecfa423b78a16fb27edc0bf17fce8","sha512":"8e9da29e8757f53422e419a8633f7af71d42233d6beccd13e3bc9375a35df22ed3af22d28c46aff9f40c63a064a575bcb0377ec21172746a4ceb836cda3ede2c","ssdeep":"","tlshash":"ad214e4fb590f078074752f5a2bfa40ef636206611db20c1a72ac8b4bd394ca7121f9d","size":1350,"data":"","first_seen":"2025-06-15T16:39:48.461548Z","last_seen":"2026-06-06T23:56:38.393106Z","times_seen":106,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"res-etl-ssl.xunlei.com/v1.0.0/xla.min.js","fqdn":"res-etl-ssl.xunlei.com","domain":"xunlei.com","tld":"com"},"ip":{"addr":"101.133.169.157","port":443,"asn":37963,"as":"Hangzhou Alibaba Advertising Co.,Ltd.","country":"China","country_code":"CN"},"introduction_type":"scriptElement","is_inline":false,"md5":"80b7b16ffa8b5d8f91a66841b3c572b6","sha1":"c90f3805a1f71be10f8e975db44722db5be34915","sha256":"f1a0b5c230e0005dc4f672cdb642e09b3323d1e3024b9979a3d4441b5e53942a","sha512":"b48170401a2205f335631d33783f7ec9aa01abddc97d6d32986958b4f95197dea875f0b268007a3ce7ff91dcad41e02c9fb95976ed3fbdba8da74bd535501a27","ssdeep":"192:fxWB6UHJsio0sFYPvCmzHK096O+aTtfHO9Gda6xw4L4fafp26Lr4T4S139AxPcqv:fxWBA0s6HB9HlqIa6xRM7EPc/PDNu","tlshash":"3f52c99a3364b49683a73ce41d6f3946e0b58c156858d490fb74c8e26874e6f833be3c","size":14341,"data":"","first_seen":"2023-03-10T11:33:41Z","last_seen":"2026-06-06T23:56:38.340739Z","times_seen":332,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.downza.cn/soft/360885.html","fqdn":"www.downza.cn","domain":"downza.cn","tld":"cn"},"ip":{"addr":"218.11.0.74","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"introduction_type":"Function","is_inline":false,"md5":"1c5c9160600df2d96d69a4ea16cec7ed","sha1":"3cf678c9135cc952ba6970ef545035bb757a443f","sha256":"a3520fe88e248d2b6c9c6db93309a037ef969fe297208e5bd7e49a55bb32c808","sha512":"2a298a8c2552c6a6c6f8d3f7327d2e9abfa87a0dbb27e9e528a8539b416155c0860f54f46464dfe7e5d49c7906a9eacdac7e5181b86ef15a83276a8f4fee0546","ssdeep":"","tlshash":"078004d531c35040475331d400571cd4503444f014444d544040d4511c55030d1154dc","size":37,"data":"","first_seen":"2023-04-11T21:49:14Z","last_seen":"2026-06-17T22:48:40.926259Z","times_seen":121600,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pos.baidu.com/ucdm?di=u6814436\u0026uuid=063bd72570941e38\u0026dri=0\u0026dis=0\u0026dai=1\u0026ps=2670x349\u0026enu=encoding\u0026exps=110011\u0026ant=0\u0026psi=5b36f82e39656d4e\u0026dcb=___adblockplus_\u0026dtm=SSP_JSONP\u0026dvi=0.0\u0026dci=-1\u0026dpt=none\u0026tpr=1775312801955\u0026ti=%E4%BC%98%E8%B7%AF%E6%95%99%E8%82%B2%E4%B8%8B%E8%BD%BD_%E4%BC%98%E8%B7%AF%E6%95%99%E8%82%B2%E7%94%B5%E8%84%91%E7%89%88%E4%B8%8B%E8%BD%BD%5B%E5%AE%98%E6%96%B9%E7%89%88%5D-%E4%B8%8B%E8%BD%BD%E4%B9%8B%E5%AE%B6\u0026ari=2\u0026ver=0620\u0026vc=%E4%BC%98%E8%B7%AF%E6%95%99%E8%82%B2%E7%94%B5%E8%84%91%E7%89%88%E7%9B%B8%E5%85%B3%E7%89%88%E6%9C%AC\u0026kws=%E4%BC%98%E8%B7%AF%E6%95%99%E8%82%B2%E7%94%B5%E8%84%91%E7%89%88%2C%E4%BC%98%E8%B7%AF%E6%95%99%E8%82%B2%E7%94%B5%E8%84%91%E7%89%88%E4%B8%8B%E8%BD%BD\u0026dps=%E4%BC%98%E8%B7%AF%E6%95%99%E8%82%B2APP%E7%94%B5%E8%84%91%E7%89%88%E6%98%AF%E5%AE%98%E6%96%B9%E5%AD%A6%E4%B9%A0%E5%B9%B3%E5%8F%B0%EF%BC%8C%E6%9C%8D%E5%8A%A1%E7%99%BE%E4%B8%87%E7%94%A8%E6%88%B7%EF%BC%8C%E8%81%9A%E7%84%A6%E8%81%8C%E4%B8%9A%E8%80%83%E8%AF%95%E4%B8%8E%E6%8A%80%E8%83%BD%E6%8F%90%E5%8D%87%EF%BC%8C%E8%A6%86%E7%9B%96%E5%BB%BA%E7%AD%91%E3%80%81%E5%AE%89%E5%85%A8%E3%80%81%E5%8C%BB%E5%8D%AB%E3%80%81%E8%B4%A2%E7%A8%8E%E7%AD%89%E5%A4%9A%E4%B8%AA%E9%A2%86%E5%9F%9F%E3%80%82%E6%8F%90%E4%BE%9B%E6%B5%B7%E9%87%8F\u0026dbv=0\u0026drs=3\u0026pcs=1280x1024\u0026pss=1280x3338\u0026cfv=0\u0026cpl=5\u0026chi=2\u0026cce=true\u0026cec=UTF-8\u0026tlm=1775312804\u0026prot=2\u0026rw=1024\u0026ltu=https%3A%2F%2Fwww.downza.cn%2Fsoft%2F360885.html\u0026ecd=1\u0026dft=0\u0026uc=1280x1024\u0026pis=-1x-1\u0026sr=1280x1024\u0026tcn=1775312804","fqdn":"pos.baidu.com","domain":"baidu.com","tld":"com"},"ip":{"addr":"103.235.46.94","port":443,"asn":55967,"as":"Beijing Baidu Netcom Science and Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"c224e7dfd27463f386fa379d291fce10","sha1":"ecd47ed1e9f14ce6e9fca63a54fc8b052a85579b","sha256":"398273f9aa28b155294272300c0ed97f6453e5b88db8cadd2e5b32c0249cec2e","sha512":"abf7e12f4fc3f8fb24d09c88416dd807e026d0d1b7b465be7a6a1acaf5e653d56211dfdd54a2e2d7c04fc298653cf800e81a39c4e921a35c39180228b092545b","ssdeep":"","tlshash":"7c11e255ea37eeb7a664e41a74f9318e843faf167b080ac1c1788f34022c006335d6e3","size":1065,"data":"","first_seen":"2026-04-04T14:27:36.457738Z","last_seen":"2026-04-04T14:27:36.457738Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cbjs.baidu.com/js/m.js","fqdn":"cbjs.baidu.com","domain":"baidu.com","tld":"com"},"ip":{"addr":"119.188.176.49","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"introduction_type":"scriptElement","is_inline":false,"md5":"b543dbe074718c21f7f5e7cbf1aff034","sha1":"99ef1caf9c69e99a60c2f0ee33720cb40cdf1cc8","sha256":"b6a34b928d00909e40ec7edfadd89ac0cfa1fcc5892bdf3168b60b28a5bfe1f6","sha512":"56d74637e8023b8983c240ec595528c56ed7d84f461fd4a1e16d329906a2dbfd023a8d519a68b1458a48f9cd19176df60dc099102640f0c3589c3bddd69221b7","ssdeep":"3072:GpOyaTRXqCpCOjwlfbitfD9mxf1W4OwYsRQD+fgpNCpIdlw:GpBApCO0fyfDcTQD+fgXRdlw","tlshash":"f4b3e899f6d2742546a220a4162f2609b2375548748b8480f67ee8d1fdbcf4f607bfbc","size":117379,"data":"","first_seen":"2025-06-30T07:43:55.721259Z","last_seen":"2026-06-15T10:15:23.743114Z","times_seen":1044,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.downza.cn/soft/360885.html","fqdn":"www.downza.cn","domain":"downza.cn","tld":"cn"},"ip":{"addr":"218.11.0.74","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"introduction_type":"scriptElement","is_inline":true,"md5":"c1e8ff8db76275d902dd5f8fddbe32f5","sha1":"283466dbb86ba7bea7ced4451b1b3e3217944371","sha256":"2a9e47027c715c43b69a86bd6236a220bb4fac226abf17b580d7c8c97a209e8a","sha512":"ffbc2515a959f87608999bf2eb46f9be14ffbcce35231fe61557bfc96869888b16a21f357ba71c83baf2ebb93287307d233c09fd38ab59254d83532095c22066","ssdeep":"","tlshash":"d6d02e2a82238025bc7a21f08b2b55402a78411b1335582939ce00832b274cac183202","size":245,"data":"","first_seen":"2026-04-04T14:27:36.548621Z","last_seen":"2026-04-04T14:27:36.548621Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"res.njxzwh.com/downza/pc/v2023/js/public.js?2026040412","fqdn":"res.njxzwh.com","domain":"njxzwh.com","tld":"com"},"ip":{"addr":"113.240.117.107","port":443,"asn":63835,"as":"No.293,Wanbao Avenue","country":"China","country_code":"CN"},"introduction_type":"scriptElement","is_inline":false,"md5":"eda88714ebfd43d4e934a0a8cec072ac","sha1":"699b3f74fb9d75b838c54ae9327a06638714597b","sha256":"5b431ed61701ed4718f82518a545c5530bd00e6150d9bf2b2b57874362218800","sha512":"2349334d1427db374cb46e85c6794a31fc4e9560a70800206e4b9b501ce5e7f73ca61cb235ad841dd5d8a41cfabf089d5bb188be8e5af6355ab3ea76f14bfde8","ssdeep":"","tlshash":"8921c458e8a20295897fb3b1873f5204ff7a2837510347083deea4c40f70929a392eec","size":1253,"data":"","first_seen":"2025-02-11T04:22:13.832274Z","last_seen":"2026-06-06T23:56:38.320935Z","times_seen":64,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.downza.cn/soft/360885.html","fqdn":"www.downza.cn","domain":"downza.cn","tld":"cn"},"ip":{"addr":"218.11.0.74","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"introduction_type":"scriptElement","is_inline":true,"md5":"d76670491e5c49aedca09065fa75fa07","sha1":"9b2059b44753b0b2c1125144cc4e7907a7deed8f","sha256":"5280bbeaa5a727640b7f841635b148b877b0fe4fe99953d4af5146cfb8277fc1","sha512":"b506f54040f0901e4a8a282979017e2b0b40ae6ce3f5e365932ac26fd0956e27388e13666896c60d77c2a6527fe585ad0c2f414e9d7bbf0366a7358d306c2c70","ssdeep":"","tlshash":"69f0d5ce801a72a18b903218139d3f980802000b4830ea10fd2ea32cff27eb8ca91687","size":533,"data":"","first_seen":"2026-02-09T10:41:32.127442Z","last_seen":"2026-04-04T14:27:36.549531Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s.union.360.cn/336149.js","fqdn":"s.union.360.cn","domain":"360.cn","tld":"cn"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"9c076d3b7f954b0b9e74b59b113f10de","sha1":"99d457b7e33af594445253ee187df64c7e004e01","sha256":"d572d3c6f792fab4d41b456d77c66b84055014d5196653610b2e1179cf3ac1aa","sha512":"f9dd339a69792ff510833a0c55db827809015381c0fe8295817ab5f3566f3a4ba0c747210ce9f5e69cfc7523fac460e637997d8b9a813f21bce7c50a5c9dcbd0","ssdeep":"384:ACZnrogINt+Mg8Jl95M5ce2QcLgjsKZSSDnyZWyqwS5ThvC4Sh+7LD2qwza/aWDL:AKnmE8JNNLueLql5Tu+8WGeX","tlshash":"5ac2b3ccb6d2b06183d73439827f600af23fad09781e8454e256e9d56c38a5a9237f6c","size":26367,"data":"","first_seen":"2026-04-04T14:27:36.550397Z","last_seen":"2026-04-04T14:27:36.550397Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zz.bdstatic.com/linksubmit/push.js","fqdn":"zz.bdstatic.com","domain":"bdstatic.com","tld":"com"},"ip":{"addr":"157.255.63.48","port":443,"asn":136958,"as":"China Unicom Guangdong IP network","country":"China","country_code":"CN"},"introduction_type":"scriptElement","is_inline":false,"md5":"f9fc52ab67f035b8baf5d558714cc94d","sha1":"37062a6fb1ef410d496137d44275738ae743c747","sha256":"c31f2003f1c93ac1e34b09f376d97a65da6e110bf451cf1e0e50a7946c5e7212","sha512":"ebb0415852fbb5b964094e2e55a28b90f701dff1977c8b98c6f24d65d09067dc0c417d01492ca28a4be6747816d7c0bfac87b73a33725aee047a5d2f7ab83182","ssdeep":"","tlshash":"11e0cde86054c01c0dcb107135bb324ce7771d675a645545c04d9445396cb1f8247fe9","size":308,"data":"","first_seen":"2023-03-07T01:18:58Z","last_seen":"2026-06-15T02:27:31.015338Z","times_seen":23342,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.downza.cn/soft/360885.html","fqdn":"www.downza.cn","domain":"downza.cn","tld":"cn"},"ip":{"addr":"218.11.0.74","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"introduction_type":"Function","is_inline":false,"md5":"1c5c9160600df2d96d69a4ea16cec7ed","sha1":"3cf678c9135cc952ba6970ef545035bb757a443f","sha256":"a3520fe88e248d2b6c9c6db93309a037ef969fe297208e5bd7e49a55bb32c808","sha512":"2a298a8c2552c6a6c6f8d3f7327d2e9abfa87a0dbb27e9e528a8539b416155c0860f54f46464dfe7e5d49c7906a9eacdac7e5181b86ef15a83276a8f4fee0546","ssdeep":"","tlshash":"078004d531c35040475331d400571cd4503444f014444d544040d4511c55030d1154dc","size":37,"data":"","first_seen":"2023-04-11T21:49:14Z","last_seen":"2026-06-17T22:48:40.926259Z","times_seen":121600,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":[{"md5":"904fe3d893ac56d0d471605049f9daf0","sha1":"45aaa2b2f2588b6901e997122ac07246fe88c94e","sha256":"58b10ecfe7dccb5318ed7e6699706fadd6f86eac1ee559dcde77ae984761a4ff","sha512":"7d151e6e94c98ca9fb0d9013303dbbe30b386c4f92fa68715b5952da96583a86709a07427684540cf2b63e684b747bcb58cde3255d629a4339350c52bb6a6936","ssdeep":"","tlshash":"48c02b833e6fe5d807384ec0e9e0f23c80d8101125c0cc9484cd1410017c65c5d08115","size":139,"data":"","first_seen":"2025-02-11T04:22:14.294555Z","last_seen":"2026-06-06T23:56:38.397663Z","times_seen":53,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"console":null},"http":[{"url":{"schema":"https","addr":"etl-xlmc-ssl.xunlei.com/api/stat/rt/js?appId=20021\u0026log=%7B%22ai%22%3A20021%2C%22dm%22%3A%22www.downza.cn%22%2C%22ul%22%3A%22https%3A%2F%2Fwww.downza.cn%2Fsoft%2F360885.html%22%2C%22tt%22%3A%22%E4%BC%98%E8%B7%AF%E6%95%99%E8%82%B2%E4%B8%8B%E8%BD%BD_%E4%BC%98%E8%B7%AF%E6%95%99%E8%82%B2%E7%94%B5%E8%84%91%E7%89%88%E4%B8%8B%E8%BD%BD%5B%E5%AE%98%E6%96%B9%E7%89%88%5D-%E4%B8%8B%E8%BD%BD%E4%B9%8B%E5%AE%B6%22%2C%22sn%22%3A%221280x1024%22%2C%22cd%22%3A24%2C%22rr%22%3A%22%22%2C%22rf%22%3A%22%22%2C%22ua%22%3A%22Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0%22%2C%22lg%22%3A%22en-US%22%2C%22ci%22%3A%223bcfe08da3f8e28d44a7af7ef0ae921b%22%2C%22clientType%22%3A%22pc%22%2C%22sourceType%22%3A%22lianmeng%22%2C%22ii%22%3A%22event%22%2C%22cg%22%3A%22page_event%22%2C%22at%22%3A%22page_show%22%2C%22ed%22%3A%7B%22sPid%22%3A%2211111%22%7D%2C%22tm%22%3A1775312804%7D\u0026v=1.0.1\u0026sig=0a5998960d8b277a03de20c8f956a4bc","fqdn":"etl-xlmc-ssl.xunlei.com","domain":"xunlei.com","tld":"com"},"ip":{"addr":"106.14.2.169","port":443,"asn":37963,"as":"Hangzhou Alibaba Advertising Co.,Ltd.","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.downza.cn/soft/360885.html","date":"2026-04-04T14:26:43.949Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.xunlei.com","organization":"Shenzhen Xunlei Networking Technologies Co., Ltd."},"issuer":{"commonName":"GlobalSign RSA OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 14 May 2025 07:30:49 GMT","end":"Mon, 15 Jun 2026 07:30:48 GMT"},"fingerprint":{"sha1":"BA:01:25:07:4E:8B:85:C9:0E:27:3E:A0:F8:CF:0A:2D:B8:75:24:81","sha256":"9D:CE:53:1C:87:46:BA:05:F3:28:6D:D0:99:B2:26:FB:59:C4:50:9C:A7:8D:5A:BA:5D:14:F7:17:30:4D:10:46"}}},"request":{"raw":"GET /api/stat/rt/js?appId=20021\u0026log=%7B%22ai%22%3A20021%2C%22dm%22%3A%22www.downza.cn%22%2C%22ul%22%3A%22https%3A%2F%2Fwww.downza.cn%2Fsoft%2F360885.html%22%2C%22tt%22%3A%22%E4%BC%98%E8%B7%AF%E6%95%99%E8%82%B2%E4%B8%8B%E8%BD%BD_%E4%BC%98%E8%B7%AF%E6%95%99%E8%82%B2%E7%94%B5%E8%84%91%E7%89%88%E4%B8%8B%E8%BD%BD%5B%E5%AE%98%E6%96%B9%E7%89%88%5D-%E4%B8%8B%E8%BD%BD%E4%B9%8B%E5%AE%B6%22%2C%22sn%22%3A%221280x1024%22%2C%22cd%22%3A24%2C%22rr%22%3A%22%22%2C%22rf%22%3A%22%22%2C%22ua%22%3A%22Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0%22%2C%22lg%22%3A%22en-US%22%2C%22ci%22%3A%223bcfe08da3f8e28d44a7af7ef0ae921b%22%2C%22clientType%22%3A%22pc%22%2C%22sourceType%22%3A%22lianmeng%22%2C%22ii%22%3A%22event%22%2C%22cg%22%3A%22page_event%22%2C%22at%22%3A%22page_show%22%2C%22ed%22%3A%7B%22sPid%22%3A%2211111%22%7D%2C%22tm%22%3A1775312804%7D\u0026v=1.0.1\u0026sig=0a5998960d8b277a03de20c8f956a4bc HTTP/1.1\r\nHost: etl-xlmc-ssl.xunlei.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.downza.cn/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 04 Apr 2026 14:26:44 GMT\r\ncontent-type: image/gif;charset=UTF-8\r\ncontent-length: 43\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":43,"size_decoded":0,"mime_type":"image/gif; charset=UTF-8","magic":"GIF image data, version 89a, 1 x 1","md5":"ad4b0f606e0f8465bc4c4c170b37e1a3","sha1":"50b30fd5f87c85fe5cba2635cb83316ca71250d7","sha256":"cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda","sha512":"ebfe0c0df4bcc167d5cb6ebdd379f9083df62bef63a23818e1c6adf0f64b65467ea58b7cd4d03cf0a1b1a2b07fb7b969bf35f25f1f8538cc65cf3eebdf8a0910","ssdeep":"","tlshash":"15900003fbc08002c2b2e0300b3b0380238ce2200aa8030b80aeb0acecaa3a20c03020","first_seen":"2023-04-05T02:54:03Z","last_seen":"2026-06-18T00:56:47.4063Z","times_seen":368294,"resource_available":true,"data":null}},"time_used":1102,"timings":{"blocked":-1,"dns":39,"connect":251,"send":0,"wait":258,"receive":0,"ssl":554},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"etl-xlmc-ssl.xunlei.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pos.baidu.com/ucdm?di=u6814436\u0026uuid=063bd72570941e38\u0026dri=0\u0026dis=0\u0026dai=1\u0026ps=2670x349\u0026enu=encoding\u0026exps=110011\u0026ant=0\u0026psi=5b36f82e39656d4e\u0026dcb=___adblockplus_\u0026dtm=SSP_JSONP\u0026dvi=0.0\u0026dci=-1\u0026dpt=none\u0026tpr=1775312801955\u0026ti=%E4%BC%98%E8%B7%AF%E6%95%99%E8%82%B2%E4%B8%8B%E8%BD%BD_%E4%BC%98%E8%B7%AF%E6%95%99%E8%82%B2%E7%94%B5%E8%84%91%E7%89%88%E4%B8%8B%E8%BD%BD%5B%E5%AE%98%E6%96%B9%E7%89%88%5D-%E4%B8%8B%E8%BD%BD%E4%B9%8B%E5%AE%B6\u0026ari=2\u0026ver=0620\u0026vc=%E4%BC%98%E8%B7%AF%E6%95%99%E8%82%B2%E7%94%B5%E8%84%91%E7%89%88%E7%9B%B8%E5%85%B3%E7%89%88%E6%9C%AC\u0026kws=%E4%BC%98%E8%B7%AF%E6%95%99%E8%82%B2%E7%94%B5%E8%84%91%E7%89%88%2C%E4%BC%98%E8%B7%AF%E6%95%99%E8%82%B2%E7%94%B5%E8%84%91%E7%89%88%E4%B8%8B%E8%BD%BD\u0026dps=%E4%BC%98%E8%B7%AF%E6%95%99%E8%82%B2APP%E7%94%B5%E8%84%91%E7%89%88%E6%98%AF%E5%AE%98%E6%96%B9%E5%AD%A6%E4%B9%A0%E5%B9%B3%E5%8F%B0%EF%BC%8C%E6%9C%8D%E5%8A%A1%E7%99%BE%E4%B8%87%E7%94%A8%E6%88%B7%EF%BC%8C%E8%81%9A%E7%84%A6%E8%81%8C%E4%B8%9A%E8%80%83%E8%AF%95%E4%B8%8E%E6%8A%80%E8%83%BD%E6%8F%90%E5%8D%87%EF%BC%8C%E8%A6%86%E7%9B%96%E5%BB%BA%E7%AD%91%E3%80%81%E5%AE%89%E5%85%A8%E3%80%81%E5%8C%BB%E5%8D%AB%E3%80%81%E8%B4%A2%E7%A8%8E%E7%AD%89%E5%A4%9A%E4%B8%AA%E9%A2%86%E5%9F%9F%E3%80%82%E6%8F%90%E4%BE%9B%E6%B5%B7%E9%87%8F\u0026dbv=0\u0026drs=3\u0026pcs=1280x1024\u0026pss=1280x3338\u0026cfv=0\u0026cpl=5\u0026chi=2\u0026cce=true\u0026cec=UTF-8\u0026tlm=1775312804\u0026prot=2\u0026rw=1024\u0026ltu=https%3A%2F%2Fwww.downza.cn%2Fsoft%2F360885.html\u0026ecd=1\u0026dft=0\u0026uc=1280x1024\u0026pis=-1x-1\u0026sr=1280x1024\u0026tcn=1775312804","fqdn":"pos.baidu.com","domain":"baidu.com","tld":"com"},"ip":{"addr":"103.235.46.94","port":443,"asn":55967,"as":"Beijing Baidu Netcom Science and Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.downza.cn/soft/360885.html","date":"2026-04-04T14:26:44.349Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"baidu.com","organization":"Beijing Baidu Netcom Science Technology Co., Ltd"},"issuer":{"commonName":"GlobalSign RSA OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 09 Jul 2025 07:01:02 GMT","end":"Mon, 10 Aug 2026 07:01:01 GMT"},"fingerprint":{"sha1":"21:BF:66:0D:67:BE:7A:7F:49:48:05:30:F4:7F:09:F2:30:36:CA:63","sha256":"0D:82:2C:9A:90:5A:EF:E9:8F:37:12:C0:E0:26:30:EE:95:33:2C:45:5F:E7:74:5D:F0:8D:BC:79:F4:B0:A1:49"}}},"request":{"raw":"GET /ucdm?di=u6814436\u0026uuid=063bd72570941e38\u0026dri=0\u0026dis=0\u0026dai=1\u0026ps=2670x349\u0026enu=encoding\u0026exps=110011\u0026ant=0\u0026psi=5b36f82e39656d4e\u0026dcb=___adblockplus_\u0026dtm=SSP_JSONP\u0026dvi=0.0\u0026dci=-1\u0026dpt=none\u0026tpr=1775312801955\u0026ti=%E4%BC%98%E8%B7%AF%E6%95%99%E8%82%B2%E4%B8%8B%E8%BD%BD_%E4%BC%98%E8%B7%AF%E6%95%99%E8%82%B2%E7%94%B5%E8%84%91%E7%89%88%E4%B8%8B%E8%BD%BD%5B%E5%AE%98%E6%96%B9%E7%89%88%5D-%E4%B8%8B%E8%BD%BD%E4%B9%8B%E5%AE%B6\u0026ari=2\u0026ver=0620\u0026vc=%E4%BC%98%E8%B7%AF%E6%95%99%E8%82%B2%E7%94%B5%E8%84%91%E7%89%88%E7%9B%B8%E5%85%B3%E7%89%88%E6%9C%AC\u0026kws=%E4%BC%98%E8%B7%AF%E6%95%99%E8%82%B2%E7%94%B5%E8%84%91%E7%89%88%2C%E4%BC%98%E8%B7%AF%E6%95%99%E8%82%B2%E7%94%B5%E8%84%91%E7%89%88%E4%B8%8B%E8%BD%BD\u0026dps=%E4%BC%98%E8%B7%AF%E6%95%99%E8%82%B2APP%E7%94%B5%E8%84%91%E7%89%88%E6%98%AF%E5%AE%98%E6%96%B9%E5%AD%A6%E4%B9%A0%E5%B9%B3%E5%8F%B0%EF%BC%8C%E6%9C%8D%E5%8A%A1%E7%99%BE%E4%B8%87%E7%94%A8%E6%88%B7%EF%BC%8C%E8%81%9A%E7%84%A6%E8%81%8C%E4%B8%9A%E8%80%83%E8%AF%95%E4%B8%8E%E6%8A%80%E8%83%BD%E6%8F%90%E5%8D%87%EF%BC%8C%E8%A6%86%E7%9B%96%E5%BB%BA%E7%AD%91%E3%80%81%E5%AE%89%E5%85%A8%E3%80%81%E5%8C%BB%E5%8D%AB%E3%80%81%E8%B4%A2%E7%A8%8E%E7%AD%89%E5%A4%9A%E4%B8%AA%E9%A2%86%E5%9F%9F%E3%80%82%E6%8F%90%E4%BE%9B%E6%B5%B7%E9%87%8F\u0026dbv=0\u0026drs=3\u0026pcs=1280x1024\u0026pss=1280x3338\u0026cfv=0\u0026cpl=5\u0026chi=2\u0026cce=true\u0026cec=UTF-8\u0026tlm=1775312804\u0026prot=2\u0026rw=1024\u0026ltu=https%3A%2F%2Fwww.downza.cn%2Fsoft%2F360885.html\u0026ecd=1\u0026dft=0\u0026uc=1280x1024\u0026pis=-1x-1\u0026sr=1280x1024\u0026tcn=1775312804 HTTP/1.1\r\nHost: pos.baidu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.downza.cn/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nCache-Control: post-check=0, pre-check=0\r\nConnection: keep-alive\r\nContent-Encoding: gzip\r\nContent-Length: 598\r\nContent-Type: application/javascript;charset=UTF-8\r\nDate: Sat, 04 Apr 2026 14:26:45 GMT\r\nExpires: Mon, 26 Jul 1997 05:00:00 GMT\r\nLast-Modified: Sat Apr  4 22:26:45 2026\r\nP3p: CP=\" OTI DSP COR IVA OUR IND COM \", CP=\" OTI DSP COR IVA OUR IND COM \"\r\nPragma: no-cache\r\nServer: nginx\r\nSet-Cookie: BAIDUID=DF282A72D4F92616C056AB8E23233D9B:FG=1; expires=Sun, 04-Apr-57 14:26:45 GMT; max-age=31536000; path=/; domain=.baidu.com; version=1\r\nX-Xss-Protection: 0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1065,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"ASCII text, with very long lines (866)","md5":"c224e7dfd27463f386fa379d291fce10","sha1":"ecd47ed1e9f14ce6e9fca63a54fc8b052a85579b","sha256":"398273f9aa28b155294272300c0ed97f6453e5b88db8cadd2e5b32c0249cec2e","sha512":"abf7e12f4fc3f8fb24d09c88416dd807e026d0d1b7b465be7a6a1acaf5e653d56211dfdd54a2e2d7c04fc298653cf800e81a39c4e921a35c39180228b092545b","ssdeep":"","tlshash":"7c11e255ea37eeb7a664e41a74f9318e843faf167b080ac1c1788f34022c006335d6e3","first_seen":"2026-04-04T14:27:36.457738Z","last_seen":"2026-04-04T14:27:36.457738Z","times_seen":1,"resource_available":true,"data":null}},"time_used":1645,"timings":{"blocked":-1,"dns":592,"connect":253,"send":0,"wait":275,"receive":0,"ssl":524},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img3.downza.cn/download/202507/180127-68820477bf980.jpg","fqdn":"img3.downza.cn","domain":"downza.cn","tld":"cn"},"ip":{"addr":"113.240.117.108","port":443,"asn":63835,"as":"No.293,Wanbao Avenue","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.downza.cn/soft/360885.html","date":"2026-04-04T14:26:45.110Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img3.downza.cn","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Mon, 02 Mar 2026 00:00:00 GMT","end":"Sun, 31 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"55:2F:FB:08:6F:B4:C5:C2:09:87:88:75:54:0F:B8:93:BD:40:45:BC","sha256":"2C:BA:99:7E:59:AC:83:1E:DE:33:00:2E:51:95:4B:C4:18:0F:62:0D:8D:C4:BD:57:E4:43:A7:70:9C:65:8B:7D"}}},"request":{"raw":"GET /download/202507/180127-68820477bf980.jpg HTTP/1.1\r\nHost: img3.downza.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.downza.cn/\r\nCookie: Qs_lvt_336149=1775312803; Qs_pv_336149=449177311070676800; Hm_lvt_38823771752fde0027cab9a4bbd6d13f=1775312804; Hm_lpvt_38823771752fde0027cab9a4bbd6d13f=1775312804; HMACCOUNT=DAB08768E596F9BC\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sat, 04 Apr 2026 14:26:45 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 64905\r\nConnection: keep-alive\r\nServer: openresty\r\nx-reserved: amazon, aws and amazon web services are trademarks or registered trademarks of Amazon Technologies, Inc\r\nCloudServiceDiscount: CDN\r\nx-amz-request-id: 000001983BE174B8901A079CE531778A\r\nETag: \"6c86dabb2a201597b007bfce9738933b\"\r\nLast-Modified: Thu, 24 Jul 2025 10:01:27 GMT\r\nx-amz-id-2: 36AAAQAAEAABAAAQAAEAABAAAQAAEAABAAAaI=AAAAAAAAAAAAAAAAAAAAAAAAAA\r\nvia: CHN-HNchangsha-AREACT1-CACHE21[4],CHN-HNchangsha-AREACT1-CACHE12[0,TCP_HIT,2],CHN-JSwuxi-GLOBAL2-CACHE69[7],CHN-JSwuxi-GLOBAL2-CACHE12[0,TCP_HIT,5]\r\nx-hcs-proxy-type: 1\r\nX-CCDN-CacheTTL: 31536000\r\nnginx-hit: 1\r\nAge: 854405\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":64905,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 144x144, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1, orientation=upper-left], baseline, precision 8, 700x565, components 3","md5":"6c86dabb2a201597b007bfce9738933b","sha1":"610df03fe7e75760bda0f459aa93af825e3a1da2","sha256":"47c25ec89fff783c528b8cf7464696f959f79e6e1d8e6d5128e0879cfc242bc5","sha512":"f160f290bf6b788703814a9cc0fe6549de6c2616c5b3b150562407e795c4ae39e9d0f4b44e17f145681e8ee88ba5c620efed231e8e129288c0823a79beb6d15f","ssdeep":"1536:6xnaMqVXf9TR5xMurklGmwU5adyRZsij5lSNnWJjDq+ExlO:jXVTRxkqmad+sillEWJmbxlO","tlshash":"5e53020e751d8e01c8ca7f2199f771589b26239517a23961f4d72e26b80c972d8c38fd","first_seen":"2025-08-18T23:56:19.260784Z","last_seen":"2026-04-04T14:27:36.458561Z","times_seen":11,"resource_available":false,"data":null}},"time_used":808,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":379,"receive":429,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"res.njxzwh.com/downza/pc/v2023/css/list.css?2026040412","fqdn":"res.njxzwh.com","domain":"njxzwh.com","tld":"com"},"ip":{"addr":"121.22.232.170","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.downza.cn/soft/360885.html","date":"2026-04-04T14:26:27.889Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"res.njxzwh.com","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Thu, 19 Feb 2026 00:00:00 GMT","end":"Wed, 20 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"BF:F9:0C:9F:DA:C1:19:17:44:6C:7F:14:F0:08:EE:C7:99:CB:76:4C","sha256":"9E:13:1A:33:49:E6:F7:8B:29:45:3C:6B:D3:41:4A:A5:B6:45:DD:0A:0B:C4:36:10:64:FD:EF:64:9D:7A:C2:69"}}},"request":{"raw":"GET /downza/pc/v2023/css/list.css?2026040412 HTTP/1.1\r\nHost: res.njxzwh.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.downza.cn/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sat, 04 Apr 2026 14:26:29 GMT\r\nContent-Type: text/css\r\nContent-Length: 6672\r\nConnection: keep-alive\r\nServer: openresty\r\nx-reserved: amazon, aws and amazon web services are trademarks or registered trademarks of Amazon Technologies, Inc\r\nCloudServiceDiscount: CDN\r\nx-amz-request-id: 0000019D56A5EFE390573CC459BE20A0\r\nETag: \"5c1622b93334ffb83b72f35d29442abc\"\r\nLast-Modified: Thu, 30 Oct 2025 09:32:36 GMT\r\nx-amz-id-2: 36AAAQAAEAABAAAQAAEAABAAAQAAEAABAAAaI=AAAAAAAAAAAAAAAAAAAAAAAAAA\r\nX-CCDN-Expires: 50602\r\nvia: CHN-HEqinhuangdao-AREACUCC1-CACHE13[23],CHN-HEqinhuangdao-AREACUCC1-CACHE21[0,TCP_HIT,21],CHN-TJ-GLOBAL6-CACHE142[20],CHN-TJ-GLOBAL6-CACHE10[0,TCP_HIT,8]\r\nx-hcs-proxy-type: 1\r\nX-CCDN-CacheTTL: 86400\r\nnginx-hit: 1\r\nAge: 35798\r\nAccept-Ranges: bytes\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: OPTION,GET\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6672,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"5c1622b93334ffb83b72f35d29442abc","sha1":"e3d2f36c7bb699c0d447a72c2387c05450faaa08","sha256":"6f662535140215f16b3ccb145d91a673b412c4dcb198cf3db71e75ab4bad4907","sha512":"8c941e67101570ff7fecc7a889f834a6cdcad5306e00ff8c24854c35f7494cb8cb0b51f2635687dbc860cde612622c2eedf2144cb86accdeba22f478453cca72","ssdeep":"96:UXiT3EhZqNpU20VFtUHzWVYFTuzUmeK2uKkeZXNtSxJ1t+A1CGvF+zA7HrpG9Rnr:4fZqk7k0/jy2Oj8rhlC","tlshash":"7dd1ef6cfb0d4a223172e76b67109be2775362a1c35102edbef4b614ad48efc5532d88","first_seen":"2025-06-15T16:39:48.411752Z","last_seen":"2026-06-06T23:56:38.264418Z","times_seen":49,"resource_available":false,"data":null}},"time_used":4283,"timings":{"blocked":1990,"dns":1224,"connect":522,"send":0,"wait":288,"receive":1,"ssl":256},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"res.njxzwh.com/downza/pc/v2023/js/layer/layer.js?2026040412","fqdn":"res.njxzwh.com","domain":"njxzwh.com","tld":"com"},"ip":{"addr":"121.22.232.170","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.downza.cn/soft/360885.html","date":"2026-04-04T14:26:28.198Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"res.njxzwh.com","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Thu, 19 Feb 2026 00:00:00 GMT","end":"Wed, 20 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"BF:F9:0C:9F:DA:C1:19:17:44:6C:7F:14:F0:08:EE:C7:99:CB:76:4C","sha256":"9E:13:1A:33:49:E6:F7:8B:29:45:3C:6B:D3:41:4A:A5:B6:45:DD:0A:0B:C4:36:10:64:FD:EF:64:9D:7A:C2:69"}}},"request":{"raw":"GET /downza/pc/v2023/js/layer/layer.js?2026040412 HTTP/1.1\r\nHost: res.njxzwh.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.downza.cn/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sat, 04 Apr 2026 14:26:30 GMT\r\nContent-Type: text/javascript\r\nContent-Length: 22117\r\nConnection: keep-alive\r\nServer: openresty\r\nx-reserved: amazon, aws and amazon web services are trademarks or registered trademarks of Amazon Technologies, Inc\r\nCloudServiceDiscount: CDN\r\nx-amz-request-id: 0000019D56A5F11A9052EADEB8E2F1CD\r\nETag: \"b4b722614d6d4b6b5f345361b8e5355f\"\r\nLast-Modified: Thu, 30 Oct 2025 09:32:46 GMT\r\nx-amz-id-2: 36AAAQAAEAABAAAQAAEAABAAAQAAEAABAAAaI=AAAAAAAAAAAAAAAAAAAAAAAAAA\r\nX-CCDN-Expires: 50404\r\nvia: CHN-HEqinhuangdao-AREACUCC1-CACHE13[5],CHN-HEqinhuangdao-AREACUCC1-CACHE23[0,TCP_HIT,3],CHN-TJ-GLOBAL6-CACHE31[4],CHN-TJ-GLOBAL6-CACHE41[0,TCP_HIT,3]\r\nx-hcs-proxy-type: 1\r\nX-CCDN-CacheTTL: 86400\r\nnginx-hit: 1\r\nAge: 35996\r\nAccept-Ranges: bytes\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: OPTION,GET\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":22117,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (22020), with CRLF line terminators","md5":"47db0e57d73194c6a41bab5b4d55e860","sha1":"9db378fa8d56979e86519f483993486dc476902b","sha256":"69025fc1818313fb94c9ca4975c6a45e8385a6fd0ab9d0c60c0ac93cd997566e","sha512":"851e8630a4e631b332027850905245cb68ea56fddab22a8b7504bb4689c1a26b955ddf1b0ef23d1b1a0ecd83d668e115c9e10caf823029046a97a9f7b5c858b7","ssdeep":"384:N1xCih92A3igrLXSt/SdMrXqE6tGLxzAOTElH0jjhtjfs8:N1EiV3i+WtXItqF13k8","tlshash":"85a2b66a754034976323906ad11fba0b31f21d24d7078128f22bb4ae1dbcd95a2b7f5f","first_seen":"2023-04-07T19:23:28Z","last_seen":"2026-06-15T09:17:33.745008Z","times_seen":1194,"resource_available":true,"data":null}},"time_used":2333,"timings":{"blocked":1969,"dns":0,"connect":0,"send":0,"wait":329,"receive":35,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.downza.cn/favicon.ico","fqdn":"www.downza.cn","domain":"downza.cn","tld":"cn"},"ip":{"addr":"218.11.0.74","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.downza.cn/soft/360885.html","date":"2026-04-04T14:26:38.811Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.downza.cn","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Mon, 02 Mar 2026 00:00:00 GMT","end":"Sun, 31 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D5:BE:35:93:B1:F3:EB:E5:47:F0:FE:71:85:7E:A4:3F:0E:3A:63:D8","sha256":"72:50:D8:A9:AC:53:99:7E:52:76:4E:3A:7C:A0:D7:9B:19:42:29:EB:2E:E7:08:ED:A1:DB:8E:FD:3A:CC:C6:4A"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: www.downza.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.downza.cn/soft/360885.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sat, 04 Apr 2026 14:26:41 GMT\r\nContent-Type: image/x-icon\r\nContent-Length: 1587\r\nConnection: keep-alive\r\nServer: openresty\r\nLast-Modified: Tue, 18 Jul 2023 02:56:51 GMT\r\nETag: \"64b5ff73-633\"\r\nX-CCDN-Expires: 832172\r\nvia: CHN-HEshijiazhuang-AREACUCC8-CACHE34[3],CHN-HEshijiazhuang-AREACUCC8-CACHE12[0,TCP_HIT,2],CHN-TJ-GLOBAL6-CACHE76[5],CHN-TJ-GLOBAL6-CACHE56[0,TCP_HIT,3]\r\nx-hcs-proxy-type: 1\r\nX-CCDN-CacheTTL: 2592000\r\nnginx-hit: 1\r\nAge: 1759828\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1587,"size_decoded":0,"mime_type":"image/x-icon","magic":"PNG image data, 39 x 38, 8-bit/color RGB, non-interlaced","md5":"878b63b0fbeb5f0764294ab553cc36a7","sha1":"09a225787b4af9c60f2ac92165b933acddc4cf4c","sha256":"b66e68a8ba526564aad39ba0c72630ae005671dd2f5541716fff68fd9c85de9c","sha512":"75438f1ccd8d473c8852982d90622940a52e268190239a38a070db8eec6493ce86b6b7815cfbcef4ec3e30f6b69a1e73dec992fa2eb19b27b794c6109ca41473","ssdeep":"","tlshash":"ef312a87414d9e5d466dd47ce127288cc9532fca303b7c4805f99a98153739e13eaf93","first_seen":"2023-05-11T21:10:33Z","last_seen":"2026-06-06T23:56:38.279488Z","times_seen":68,"resource_available":false,"data":null}},"time_used":3358,"timings":{"blocked":3103,"dns":0,"connect":0,"send":0,"wait":255,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api-shoulei-ssl.xunlei.com/pss/static/config_json_fa07/thunder_page_apk_download_url_config.json","fqdn":"api-shoulei-ssl.xunlei.com","domain":"xunlei.com","tld":"com"},"ip":{"addr":"106.15.105.54","port":443,"asn":37963,"as":"Hangzhou Alibaba Advertising Co.,Ltd.","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.downza.cn/soft/360885.html","date":"2026-04-04T14:26:41.949Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.xunlei.com","organization":"Shenzhen Xunlei Networking Technologies Co., Ltd."},"issuer":{"commonName":"GlobalSign RSA OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 14 May 2025 07:30:49 GMT","end":"Mon, 15 Jun 2026 07:30:48 GMT"},"fingerprint":{"sha1":"BA:01:25:07:4E:8B:85:C9:0E:27:3E:A0:F8:CF:0A:2D:B8:75:24:81","sha256":"9D:CE:53:1C:87:46:BA:05:F3:28:6D:D0:99:B2:26:FB:59:C4:50:9C:A7:8D:5A:BA:5D:14:F7:17:30:4D:10:46"}}},"request":{"raw":"GET /pss/static/config_json_fa07/thunder_page_apk_download_url_config.json HTTP/1.1\r\nHost: api-shoulei-ssl.xunlei.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.downza.cn\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.downza.cn/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 04 Apr 2026 14:26:43 GMT\r\ncontent-type: application/json\r\ncontent-length: 0\r\nlast-modified: Wed, 23 Dec 2020 07:44:41 GMT\r\netag: \"5fe2f569-0\"\r\nexpires: Sat, 04 Apr 2026 14:26:42 GMT\r\ncache-control: no-cache\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, OPTIONS\r\naccess-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=0;\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/json","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-18T01:31:21.233037Z","times_seen":16497762,"resource_available":true,"data":null}},"time_used":1393,"timings":{"blocked":-1,"dns":14,"connect":523,"send":0,"wait":270,"receive":0,"ssl":585},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"api-shoulei-ssl.xunlei.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"push.zhanzhang.baidu.com/push.js","fqdn":"push.zhanzhang.baidu.com","domain":"baidu.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.downza.cn/soft/360885.html","date":"2026-04-04T14:26:42.070Z","timestamp":0,"http_version":"","security_state":"broken","security_info":null,"request":{"raw":"GET /push.js HTTP/1.1\r\nHost: push.zhanzhang.baidu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.downza.cn/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-18T01:31:21.233037Z","times_seen":16497762,"resource_available":true,"data":null}},"time_used":514,"timings":{"blocked":-1,"dns":1,"connect":252,"send":0,"wait":0,"receive":0,"ssl":261},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img3.downza.cn/download/202111/083609-619eda796ecc2.jpg","fqdn":"img3.downza.cn","domain":"downza.cn","tld":"cn"},"ip":{"addr":"113.240.117.108","port":443,"asn":63835,"as":"No.293,Wanbao Avenue","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.downza.cn/soft/360885.html","date":"2026-04-04T14:26:28.045Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img3.downza.cn","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Mon, 02 Mar 2026 00:00:00 GMT","end":"Sun, 31 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"55:2F:FB:08:6F:B4:C5:C2:09:87:88:75:54:0F:B8:93:BD:40:45:BC","sha256":"2C:BA:99:7E:59:AC:83:1E:DE:33:00:2E:51:95:4B:C4:18:0F:62:0D:8D:C4:BD:57:E4:43:A7:70:9C:65:8B:7D"}}},"request":{"raw":"GET /download/202111/083609-619eda796ecc2.jpg HTTP/1.1\r\nHost: img3.downza.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sat, 04 Apr 2026 14:26:46 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 3971\r\nConnection: keep-alive\r\nServer: openresty\r\nx-reserved: amazon, aws and amazon web services are trademarks or registered trademarks of Amazon Technologies, Inc\r\nCloudServiceDiscount: CDN\r\nx-amz-request-id: 00000194212DB077900BA9334F78BE4F\r\nETag: \"d1f17e82841880bfb98a0cbd880623af\"\r\nLast-Modified: Thu, 25 Nov 2021 00:36:09 GMT\r\nx-amz-id-2: 32AAAQAAEAABAAAQAAEAABAAAQAAEAABCSAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA\r\nvia: CHN-HNchangsha-AREACT1-CACHE18[6],CHN-HNchangsha-AREACT1-CACHE5[0,TCP_HIT,5],CHN-JSwuxi-GLOBAL2-CACHE99[4],CHN-JSwuxi-GLOBAL2-CACHE30[0,TCP_HIT,2],CHN-SH-GLOBAL4-CACHE33[13],CHN-SH-GLOBAL4-CACHE144[0,TCP_HIT,12]\r\nx-hcs-proxy-type: 1\r\nX-CCDN-CacheTTL: 31536000\r\nnginx-hit: 1\r\nAge: 4415267\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":3971,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, comment: \"LEAD Technologies Inc. V1.01\", baseline, precision 8, 80x80, components 3","md5":"d1f17e82841880bfb98a0cbd880623af","sha1":"aee84a459ef35d75bd319ebb125c3223054b30de","sha256":"5d4437b1e922e4ca3eb2f35cae1ca5a104d4bc8038eb5fabb94a9deb551d67a2","sha512":"cd25ab050cc695689ae6b09f4341a1d3328d91b55f1d959c2ec0aad917a78694a4effcc1208d928ddb6d4dfc46735d16279f36c137a568b3e8297ff621654a10","ssdeep":"","tlshash":"68816d8ae6721f30eec121a278dcd261efaa775930974211894095e0f401639ddc87dc","first_seen":"2025-07-22T11:13:12.13389Z","last_seen":"2026-04-04T14:27:36.462295Z","times_seen":2,"resource_available":false,"data":null}},"time_used":18309,"timings":{"blocked":17436,"dns":0,"connect":0,"send":0,"wait":873,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"res.njxzwh.com/downza/pc/v2023/images/logo_guide.png","fqdn":"res.njxzwh.com","domain":"njxzwh.com","tld":"com"},"ip":{"addr":"113.240.117.107","port":443,"asn":63835,"as":"No.293,Wanbao Avenue","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.downza.cn/soft/360885.html","date":"2026-04-04T14:26:41.996Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"res.njxzwh.com","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Thu, 19 Feb 2026 00:00:00 GMT","end":"Wed, 20 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"BF:F9:0C:9F:DA:C1:19:17:44:6C:7F:14:F0:08:EE:C7:99:CB:76:4C","sha256":"9E:13:1A:33:49:E6:F7:8B:29:45:3C:6B:D3:41:4A:A5:B6:45:DD:0A:0B:C4:36:10:64:FD:EF:64:9D:7A:C2:69"}}},"request":{"raw":"GET /downza/pc/v2023/images/logo_guide.png HTTP/1.1\r\nHost: res.njxzwh.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://res.njxzwh.com/downza/pc/v2023/css/public.css?2026040412\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sat, 04 Apr 2026 14:26:42 GMT\r\nContent-Type: image/png\r\nContent-Length: 3314\r\nConnection: keep-alive\r\nServer: openresty\r\nx-reserved: amazon, aws and amazon web services are trademarks or registered trademarks of Amazon Technologies, Inc\r\nCloudServiceDiscount: CDN\r\nx-amz-request-id: 0000019D4822A75C904672BA29DF6DA3\r\nETag: \"7f6d17cbf20ab24096f9e76fa84d127e\"\r\nLast-Modified: Thu, 30 Oct 2025 09:32:41 GMT\r\nx-amz-id-2: 36AAAQAAEAABAAAQAAEAABAAAQAAEAABAAAaI=AAAAAAAAAAAAAAAAAAAAAAAAAA\r\nX-CCDN-Expires: 2311018\r\nvia: CHN-HNchangsha-AREACT1-CACHE38[6],CHN-HNchangsha-AREACT1-CACHE53[0,TCP_HIT,6],CHN-JSwuxi-GLOBAL2-CACHE68[3],CHN-JSwuxi-GLOBAL2-CACHE106[0,TCP_HIT,1]\r\nx-hcs-proxy-type: 1\r\nX-CCDN-CacheTTL: 2592000\r\nnginx-hit: 1\r\nAge: 280982\r\nAccept-Ranges: bytes\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: OPTION,GET\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":3314,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 167 x 51, 8-bit/color RGBA, non-interlaced","md5":"7f6d17cbf20ab24096f9e76fa84d127e","sha1":"7d03e0a56d2a53085fca2d8fa6431c2652c0ce2a","sha256":"f3555d4eb97ceb8814615e62e6a0f4bac0489f4e8496b39469fd61dd020776e5","sha512":"63286862e693ca09e2bf81f86eef196fab5340293beb80b566dbe2ac7f99cc1eb622746f5506e8beed29304f2b2a2d34566271371e3ecd0b64e5a9a73caa527e","ssdeep":"","tlshash":"eb614a5360348bf927fb677d4ebe15a2201a01bd12d80eda7ab8605ac348a1dd776730","first_seen":"2025-02-11T04:22:13.845713Z","last_seen":"2026-06-06T23:56:38.297514Z","times_seen":59,"resource_available":false,"data":null}},"time_used":1067,"timings":{"blocked":42,"dns":0,"connect":0,"send":0,"wait":1021,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"res.njxzwh.com/downza/pc/v2023/images/xiazai-1.png","fqdn":"res.njxzwh.com","domain":"njxzwh.com","tld":"com"},"ip":{"addr":"113.240.117.107","port":443,"asn":63835,"as":"No.293,Wanbao Avenue","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.downza.cn/soft/360885.html","date":"2026-04-04T14:26:42.086Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"res.njxzwh.com","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Thu, 19 Feb 2026 00:00:00 GMT","end":"Wed, 20 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"BF:F9:0C:9F:DA:C1:19:17:44:6C:7F:14:F0:08:EE:C7:99:CB:76:4C","sha256":"9E:13:1A:33:49:E6:F7:8B:29:45:3C:6B:D3:41:4A:A5:B6:45:DD:0A:0B:C4:36:10:64:FD:EF:64:9D:7A:C2:69"}}},"request":{"raw":"GET /downza/pc/v2023/images/xiazai-1.png HTTP/1.1\r\nHost: res.njxzwh.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://res.njxzwh.com/downza/pc/v2023/css/detail.css?2026040412\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sat, 04 Apr 2026 14:26:42 GMT\r\nContent-Type: image/png\r\nContent-Length: 3867\r\nConnection: keep-alive\r\nServer: openresty\r\nx-reserved: amazon, aws and amazon web services are trademarks or registered trademarks of Amazon Technologies, Inc\r\nCloudServiceDiscount: CDN\r\nx-amz-request-id: 0000019D4822A815900609825E4F611D\r\nETag: \"ed963ecabf5e24e322b15fe4da860928\"\r\nLast-Modified: Thu, 30 Oct 2025 09:32:43 GMT\r\nx-amz-id-2: 36AAAQAAEAABAAAQAAEAABAAAQAAEAABAAAaI=AAAAAAAAAAAAAAAAAAAAAAAAAA\r\nX-CCDN-Expires: 2311028\r\nvia: CHN-HNchangsha-AREACT1-CACHE6[15],CHN-HNchangsha-AREACT1-CACHE60[0,TCP_HIT,15],CHN-JSwuxi-GLOBAL2-CACHE19[8],CHN-JSwuxi-GLOBAL2-CACHE95[0,TCP_HIT,1]\r\nx-hcs-proxy-type: 1\r\nX-CCDN-CacheTTL: 2592000\r\nnginx-hit: 1\r\nAge: 280972\r\nAccept-Ranges: bytes\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: OPTION,GET\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":3867,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 201 x 200, 8-bit/color RGBA, non-interlaced","md5":"ed963ecabf5e24e322b15fe4da860928","sha1":"6e93a190a437fed5c5e2827af21042486eb2b2ee","sha256":"906467c5d896dbe87749d74f950162a0de1511befb540f07aa031ec1f24d210e","sha512":"20b7af3047e61067da169942ca735005e0f259db5ed7aba7e444aa43f5f67b3965229b455895e79cdd6832fc18d5b28314a8c33627302903177e9e0b7d595619","ssdeep":"","tlshash":"8c816de995d0de0241b99fbc8eb56962f5298df5892cd061ee057071550a84390ff788","first_seen":"2025-06-15T16:39:48.208799Z","last_seen":"2026-06-06T23:56:38.296017Z","times_seen":104,"resource_available":false,"data":null}},"time_used":768,"timings":{"blocked":464,"dns":0,"connect":0,"send":0,"wait":303,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"res.njxzwh.com/downza/pc/v2023/images/xiazai-2.png","fqdn":"res.njxzwh.com","domain":"njxzwh.com","tld":"com"},"ip":{"addr":"121.22.232.170","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.downza.cn/soft/360885.html","date":"2026-04-04T14:26:42.084Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"res.njxzwh.com","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Thu, 19 Feb 2026 00:00:00 GMT","end":"Wed, 20 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"BF:F9:0C:9F:DA:C1:19:17:44:6C:7F:14:F0:08:EE:C7:99:CB:76:4C","sha256":"9E:13:1A:33:49:E6:F7:8B:29:45:3C:6B:D3:41:4A:A5:B6:45:DD:0A:0B:C4:36:10:64:FD:EF:64:9D:7A:C2:69"}}},"request":{"raw":"GET /downza/pc/v2023/images/xiazai-2.png HTTP/1.1\r\nHost: res.njxzwh.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://res.njxzwh.com/downza/pc/v2023/css/detail.css?2026040412\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sat, 04 Apr 2026 14:26:42 GMT\r\nContent-Type: image/png\r\nContent-Length: 2992\r\nConnection: keep-alive\r\nServer: openresty\r\nx-reserved: amazon, aws and amazon web services are trademarks or registered trademarks of Amazon Technologies, Inc\r\nCloudServiceDiscount: CDN\r\nx-amz-request-id: 0000019D4822AE3397AAC4924ACDBFB5\r\nETag: \"c31c63fb6529b7b36420650927449ea0\"\r\nLast-Modified: Thu, 30 Oct 2025 09:32:43 GMT\r\nx-amz-id-2: 36AAAQAAEAABAAAQAAEAABAAAQAAEAABAAAaI=AAAAAAAAAAAAAAAAAAAAAAAAAA\r\nX-CCDN-Expires: 2312674\r\nvia: CHN-HEqinhuangdao-AREACUCC1-CACHE13[5],CHN-HEqinhuangdao-AREACUCC1-CACHE89[0,TCP_HIT,4],CHN-TJ-GLOBAL6-CACHE36[3],CHN-TJ-GLOBAL6-CACHE129[0,TCP_HIT,3]\r\nx-hcs-proxy-type: 1\r\nX-CCDN-CacheTTL: 2592000\r\nnginx-hit: 1\r\nAge: 279326\r\nAccept-Ranges: bytes\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: OPTION,GET\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":2992,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 200 x 200, 8-bit/color RGBA, non-interlaced","md5":"c31c63fb6529b7b36420650927449ea0","sha1":"ede917a301f6c7ce67dbf87334fb7d328d5c54e7","sha256":"72062c5ca533c72716ce62df17ccfdc1ce55c0b8ac62a974cfd0377daaccccc3","sha512":"5e67e88fea4b09b35e740a8c23c671bbec564d78bcad510c707f95bb38b1ce924cac4b5fc0572c8a95c2dd86789f3a13bfda425e3df333f3c0ba0eec3af2d969","ssdeep":"","tlshash":"9f5176c324c59ab909adf1da09c7c746e51692af1b545c0f9a600a3be431ff9f406ec1","first_seen":"2025-06-15T16:39:48.167451Z","last_seen":"2026-06-06T23:56:38.321533Z","times_seen":98,"resource_available":false,"data":null}},"time_used":982,"timings":{"blocked":720,"dns":0,"connect":0,"send":0,"wait":261,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.360.cn/isinst.html","fqdn":"www.360.cn","domain":"360.cn","tld":"cn"},"ip":{"addr":"47.89.195.194","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://www.downza.cn/soft/360885.html","date":"2026-04-04T14:26:42.139Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.360.cn","organization":"北京奇虎科技有限公司"},"issuer":{"commonName":"WoTrus OV Server CA  [Run by the Issuer]","organization":"WoTrus CA Limited"},"validity":{"start":"Tue, 20 Jan 2026 00:00:00 GMT","end":"Sat, 20 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"DC:B3:36:24:23:BC:D0:30:25:4F:C5:FE:98:5F:BE:61:17:A7:FF:CC","sha256":"D3:D3:52:E6:B2:61:22:A0:1B:93:F1:61:6F:4E:C0:F8:E8:AF:79:C8:F5:68:9E:02:88:43:7F:80:13:9F:B9:01"}}},"request":{"raw":"GET /isinst.html HTTP/1.1\r\nHost: www.360.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.downza.cn/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 301 Moved Permanently\r\nServer: nginx\r\nDate: Sat, 04 Apr 2026 14:26:43 GMT\r\nContent-Type: text/html\r\nContent-Length: 162\r\nConnection: keep-alive\r\nLocation: http://www.360.cn/isinst.html\r\nX-Frame-Options: sameorigin\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-18T01:31:21.233037Z","times_seen":16497762,"resource_available":true,"data":null}},"time_used":1084,"timings":{"blocked":87,"dns":90,"connect":163,"send":0,"wait":165,"receive":0,"ssl":578},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"etl-xlmc-ssl.xunlei.com/api/stat/rt/js?appId=20021\u0026log=%7B%22ai%22%3A20021%2C%22dm%22%3A%22www.downza.cn%22%2C%22ul%22%3A%22https%3A%2F%2Fwww.downza.cn%2Fsoft%2F360885.html%22%2C%22tt%22%3A%22%E4%BC%98%E8%B7%AF%E6%95%99%E8%82%B2%E4%B8%8B%E8%BD%BD_%E4%BC%98%E8%B7%AF%E6%95%99%E8%82%B2%E7%94%B5%E8%84%91%E7%89%88%E4%B8%8B%E8%BD%BD%5B%E5%AE%98%E6%96%B9%E7%89%88%5D-%E4%B8%8B%E8%BD%BD%E4%B9%8B%E5%AE%B6%22%2C%22sn%22%3A%221280x1024%22%2C%22cd%22%3A24%2C%22rr%22%3A%22%22%2C%22rf%22%3A%22%22%2C%22ua%22%3A%22Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0%22%2C%22lg%22%3A%22en-US%22%2C%22ci%22%3A%223bcfe08da3f8e28d44a7af7ef0ae921b%22%2C%22clientType%22%3A%22pc%22%2C%22sourceType%22%3A%22lianmeng%22%2C%22ii%22%3A%22pv%22%2C%22pu%22%3A%22https%3A%2F%2Fwww.downza.cn%2Fsoft%2F360885.html%22%2C%22tm%22%3A1775312804%7D\u0026v=1.0.1\u0026sig=e028697efa074893662b18dff663304e","fqdn":"etl-xlmc-ssl.xunlei.com","domain":"xunlei.com","tld":"com"},"ip":{"addr":"106.14.2.169","port":443,"asn":37963,"as":"Hangzhou Alibaba Advertising Co.,Ltd.","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.downza.cn/soft/360885.html","date":"2026-04-04T14:26:43.950Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.xunlei.com","organization":"Shenzhen Xunlei Networking Technologies Co., Ltd."},"issuer":{"commonName":"GlobalSign RSA OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 14 May 2025 07:30:49 GMT","end":"Mon, 15 Jun 2026 07:30:48 GMT"},"fingerprint":{"sha1":"BA:01:25:07:4E:8B:85:C9:0E:27:3E:A0:F8:CF:0A:2D:B8:75:24:81","sha256":"9D:CE:53:1C:87:46:BA:05:F3:28:6D:D0:99:B2:26:FB:59:C4:50:9C:A7:8D:5A:BA:5D:14:F7:17:30:4D:10:46"}}},"request":{"raw":"GET /api/stat/rt/js?appId=20021\u0026log=%7B%22ai%22%3A20021%2C%22dm%22%3A%22www.downza.cn%22%2C%22ul%22%3A%22https%3A%2F%2Fwww.downza.cn%2Fsoft%2F360885.html%22%2C%22tt%22%3A%22%E4%BC%98%E8%B7%AF%E6%95%99%E8%82%B2%E4%B8%8B%E8%BD%BD_%E4%BC%98%E8%B7%AF%E6%95%99%E8%82%B2%E7%94%B5%E8%84%91%E7%89%88%E4%B8%8B%E8%BD%BD%5B%E5%AE%98%E6%96%B9%E7%89%88%5D-%E4%B8%8B%E8%BD%BD%E4%B9%8B%E5%AE%B6%22%2C%22sn%22%3A%221280x1024%22%2C%22cd%22%3A24%2C%22rr%22%3A%22%22%2C%22rf%22%3A%22%22%2C%22ua%22%3A%22Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0%22%2C%22lg%22%3A%22en-US%22%2C%22ci%22%3A%223bcfe08da3f8e28d44a7af7ef0ae921b%22%2C%22clientType%22%3A%22pc%22%2C%22sourceType%22%3A%22lianmeng%22%2C%22ii%22%3A%22pv%22%2C%22pu%22%3A%22https%3A%2F%2Fwww.downza.cn%2Fsoft%2F360885.html%22%2C%22tm%22%3A1775312804%7D\u0026v=1.0.1\u0026sig=e028697efa074893662b18dff663304e HTTP/1.1\r\nHost: etl-xlmc-ssl.xunlei.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.downza.cn/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 04 Apr 2026 14:26:45 GMT\r\ncontent-type: image/gif;charset=UTF-8\r\ncontent-length: 43\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":43,"size_decoded":0,"mime_type":"image/gif; charset=UTF-8","magic":"GIF image data, version 89a, 1 x 1","md5":"ad4b0f606e0f8465bc4c4c170b37e1a3","sha1":"50b30fd5f87c85fe5cba2635cb83316ca71250d7","sha256":"cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda","sha512":"ebfe0c0df4bcc167d5cb6ebdd379f9083df62bef63a23818e1c6adf0f64b65467ea58b7cd4d03cf0a1b1a2b07fb7b969bf35f25f1f8538cc65cf3eebdf8a0910","ssdeep":"","tlshash":"15900003fbc08002c2b2e0300b3b0380238ce2200aa8030b80aeb0acecaa3a20c03020","first_seen":"2023-04-05T02:54:03Z","last_seen":"2026-06-18T00:56:47.4063Z","times_seen":368294,"resource_available":true,"data":null}},"time_used":1417,"timings":{"blocked":-1,"dns":37,"connect":0,"send":0,"wait":255,"receive":0,"ssl":593},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"etl-xlmc-ssl.xunlei.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"res.njxzwh.com/downza/pc/v2023/css/public.css?2026040412","fqdn":"res.njxzwh.com","domain":"njxzwh.com","tld":"com"},"ip":{"addr":"113.240.117.107","port":443,"asn":63835,"as":"No.293,Wanbao Avenue","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.downza.cn/soft/360885.html","date":"2026-04-04T14:26:27.884Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"res.njxzwh.com","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Thu, 19 Feb 2026 00:00:00 GMT","end":"Wed, 20 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"BF:F9:0C:9F:DA:C1:19:17:44:6C:7F:14:F0:08:EE:C7:99:CB:76:4C","sha256":"9E:13:1A:33:49:E6:F7:8B:29:45:3C:6B:D3:41:4A:A5:B6:45:DD:0A:0B:C4:36:10:64:FD:EF:64:9D:7A:C2:69"}}},"request":{"raw":"GET /downza/pc/v2023/css/public.css?2026040412 HTTP/1.1\r\nHost: res.njxzwh.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.downza.cn/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sat, 04 Apr 2026 14:26:29 GMT\r\nContent-Type: text/css\r\nContent-Length: 20223\r\nConnection: keep-alive\r\nServer: openresty\r\nx-reserved: amazon, aws and amazon web services are trademarks or registered trademarks of Amazon Technologies, Inc\r\nCloudServiceDiscount: CDN\r\nx-amz-request-id: 0000019D56A5D06F97688DA0528A77C2\r\nETag: \"e1598075249dad0417ab0baa81dcc47a\"\r\nLast-Modified: Thu, 30 Oct 2025 09:32:36 GMT\r\nx-amz-id-2: 36AAAQAAEAABAAAQAAEAABAAAQAAEAABAAAaI=AAAAAAAAAAAAAAAAAAAAAAAAAA\r\nX-CCDN-Expires: 49220\r\nvia: CHN-HNchangsha-AREACT1-CACHE66[3],CHN-HNchangsha-AREACT1-CACHE6[0,TCP_HIT,2],CHN-JSwuxi-GLOBAL2-CACHE116[8],CHN-JSwuxi-GLOBAL2-CACHE6[0,TCP_HIT,2]\r\nx-hcs-proxy-type: 1\r\nX-CCDN-CacheTTL: 86400\r\nnginx-hit: 1\r\nAge: 37180\r\nAccept-Ranges: bytes\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: OPTION,GET\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":20223,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with CRLF, LF line terminators","md5":"e7df0a79476b058c9da2bc4439537420","sha1":"7d9504ec84eb1774f1136ae3ff6a5d52d04a9971","sha256":"60052fea0c062f7e22b2394a89a04f753214d34e4a06074732233a3865b05d3d","sha512":"5a4fd40038d62bd21f0693f6e0074d424ebc6eb9e437c1199d41d9a61dafe65688be23d419bc0c763349ba4170f318400dc599a5b11753f8320ae7f1afd06ba9","ssdeep":"192:qRMQySejzVRLQ2uAREpgHJrehwjxmkHdR0n9QMutNqT7Wsdc:Xj95mZOB","tlshash":"b692416ed75641067233da7a7b016fa67b6901328b020368bff4a514b688fbc5172fdc","first_seen":"2025-06-15T16:39:48.335299Z","last_seen":"2026-06-06T23:56:38.298536Z","times_seen":60,"resource_available":false,"data":null}},"time_used":4486,"timings":{"blocked":1970,"dns":1226,"connect":268,"send":0,"wait":346,"receive":189,"ssl":483},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"res.njxzwh.com/downza/pc/v2023/js/jquery-1.12.4.min.js","fqdn":"res.njxzwh.com","domain":"njxzwh.com","tld":"com"},"ip":{"addr":"113.240.117.107","port":443,"asn":63835,"as":"No.293,Wanbao Avenue","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.downza.cn/soft/360885.html","date":"2026-04-04T14:26:27.886Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"res.njxzwh.com","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Thu, 19 Feb 2026 00:00:00 GMT","end":"Wed, 20 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"BF:F9:0C:9F:DA:C1:19:17:44:6C:7F:14:F0:08:EE:C7:99:CB:76:4C","sha256":"9E:13:1A:33:49:E6:F7:8B:29:45:3C:6B:D3:41:4A:A5:B6:45:DD:0A:0B:C4:36:10:64:FD:EF:64:9D:7A:C2:69"}}},"request":{"raw":"GET /downza/pc/v2023/js/jquery-1.12.4.min.js HTTP/1.1\r\nHost: res.njxzwh.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.downza.cn/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sat, 04 Apr 2026 14:26:30 GMT\r\nContent-Type: text/javascript\r\nContent-Length: 97168\r\nConnection: keep-alive\r\nServer: openresty\r\nx-reserved: amazon, aws and amazon web services are trademarks or registered trademarks of Amazon Technologies, Inc\r\nCloudServiceDiscount: CDN\r\nx-amz-request-id: 0000019D4822A8959748606EF826C84D\r\nETag: \"618538b4ab9639d444e962729a927f15\"\r\nLast-Modified: Thu, 30 Oct 2025 09:32:43 GMT\r\nx-amz-id-2: 36AAAQAAEAABAAAQAAEAABAAAQAAEAABAAAaI=AAAAAAAAAAAAAAAAAAAAAAAAAA\r\nX-CCDN-Expires: 65935\r\nvia: CHN-HNchangsha-AREACT1-CACHE6[3],CHN-HNchangsha-AREACT1-CACHE78[0,TCP_HIT,2],CHN-JSwuxi-GLOBAL2-CACHE95[4],CHN-JSwuxi-GLOBAL2-CACHE101[0,TCP_HIT,1]\r\nx-hcs-proxy-type: 1\r\nX-CCDN-CacheTTL: 86400\r\nnginx-hit: 1\r\nAge: 20465\r\nAccept-Ranges: bytes\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: OPTION,GET\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":97168,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (32077), with CRLF line terminators","md5":"618538b4ab9639d444e962729a927f15","sha1":"dacc1f76630a9708add066819b1aabf8dce01056","sha256":"27d92130c0321dad5a03760fd5ac98a3d04ed4c94d88418fe6d50da1f7fc5cbe","sha512":"bcb6754ea246939a19a917cc0b810e1753c1b0f1a8b1b7e652128ef15dee4fc79111e4d88fe12f9188449a307e82240d0261af402d783428edfe5785c860372d","ssdeep":"1536:jYE1JVoiB9JqZdXXe2pD3PgoIiulrUdTJ5Fk/zkZ4HjL5o8srOaS9TwDhb7/Jp96:y4J+03jL5TCOauTwDhFdnCVQNLa98Hrc","tlshash":"9693d7d9b6d6706287b734a851bf410bb17aa8eab40c4c60f058c8e47e74e9d507bf2d","first_seen":"2023-03-07T01:12:12Z","last_seen":"2026-06-17T17:20:45.274998Z","times_seen":5353,"resource_available":true,"data":null}},"time_used":6207,"timings":{"blocked":2582,"dns":1225,"connect":285,"send":0,"wait":379,"receive":652,"ssl":1080},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"97233e.yzhy20.cn/res/downza/js/qrcode.js?2026040412","fqdn":"97233e.yzhy20.cn","domain":"yzhy20.cn","tld":"cn"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.downza.cn/soft/360885.html","date":"2026-04-04T14:26:27.890Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /res/downza/js/qrcode.js?2026040412 HTTP/1.1\r\nHost: 97233e.yzhy20.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.downza.cn/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-18T01:31:21.233037Z","times_seen":16497762,"resource_available":true,"data":null}},"time_used":7023,"timings":{"blocked":7022,"dns":1,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dup.baidustatic.com/js/ds.js","fqdn":"dup.baidustatic.com","domain":"baidustatic.com","tld":"com"},"ip":{"addr":"119.188.176.49","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.downza.cn/soft/360885.html","date":"2026-04-04T14:26:27.896Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"baidu.com","organization":"Beijing Baidu Netcom Science Technology Co., Ltd"},"issuer":{"commonName":"GlobalSign RSA OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 09 Jul 2025 07:01:02 GMT","end":"Mon, 10 Aug 2026 07:01:01 GMT"},"fingerprint":{"sha1":"21:BF:66:0D:67:BE:7A:7F:49:48:05:30:F4:7F:09:F2:30:36:CA:63","sha256":"0D:82:2C:9A:90:5A:EF:E9:8F:37:12:C0:E0:26:30:EE:95:33:2C:45:5F:E7:74:5D:F0:8D:BC:79:F4:B0:A1:49"}}},"request":{"raw":"GET /js/ds.js HTTP/1.1\r\nHost: dup.baidustatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.downza.cn/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: JSP3/2.0.14\r\ndate: Sat, 04 Apr 2026 14:26:29 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\nlast-modified: Fri, 20 Jun 2025 03:28:07 GMT\r\ncontent-encoding: br\r\nage: 46\r\naccept-ranges: bytes\r\nohc-global-saved-time: Sat, 04 Apr 2026 14:25:43 GMT\r\nohc-cache-hit: jn2un61 [2]\r\nohc-response-time: 1 0 0 0 0 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":117379,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65532), with no line terminators","md5":"b543dbe074718c21f7f5e7cbf1aff034","sha1":"99ef1caf9c69e99a60c2f0ee33720cb40cdf1cc8","sha256":"b6a34b928d00909e40ec7edfadd89ac0cfa1fcc5892bdf3168b60b28a5bfe1f6","sha512":"56d74637e8023b8983c240ec595528c56ed7d84f461fd4a1e16d329906a2dbfd023a8d519a68b1458a48f9cd19176df60dc099102640f0c3589c3bddd69221b7","ssdeep":"3072:GpOyaTRXqCpCOjwlfbitfD9mxf1W4OwYsRQD+fgpNCpIdlw:GpBApCO0fyfDcTQD+fgXRdlw","tlshash":"f4b3e899f6d2742546a220a4162f2609b2375548748b8480f67ee8d1fdbcf4f607bfbc","first_seen":"2025-06-30T07:43:55.721259Z","last_seen":"2026-06-15T10:15:23.743114Z","times_seen":1044,"resource_available":true,"data":null}},"time_used":1829,"timings":{"blocked":-1,"dns":580,"connect":300,"send":0,"wait":341,"receive":0,"ssl":607},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img3.downza.cn/download/202008/154753-5f44c229a5dad.jpg","fqdn":"img3.downza.cn","domain":"downza.cn","tld":"cn"},"ip":{"addr":"113.240.117.108","port":443,"asn":63835,"as":"No.293,Wanbao Avenue","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.downza.cn/soft/360885.html","date":"2026-04-04T14:26:28.044Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img3.downza.cn","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Mon, 02 Mar 2026 00:00:00 GMT","end":"Sun, 31 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"55:2F:FB:08:6F:B4:C5:C2:09:87:88:75:54:0F:B8:93:BD:40:45:BC","sha256":"2C:BA:99:7E:59:AC:83:1E:DE:33:00:2E:51:95:4B:C4:18:0F:62:0D:8D:C4:BD:57:E4:43:A7:70:9C:65:8B:7D"}}},"request":{"raw":"GET /download/202008/154753-5f44c229a5dad.jpg HTTP/1.1\r\nHost: img3.downza.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sat, 04 Apr 2026 14:26:45 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 10540\r\nConnection: keep-alive\r\nServer: openresty\r\nx-reserved: amazon, aws and amazon web services are trademarks or registered trademarks of Amazon Technologies, Inc\r\nCloudServiceDiscount: CDN\r\nx-amz-request-id: 000001942ECB17D490066295A21CFDE9\r\nETag: \"8a694fde3c3d19bdf7ffc5876ff3adcb\"\r\nLast-Modified: Tue, 25 Aug 2020 07:47:53 GMT\r\nx-amz-id-2: 32AAAQAAEAABAAAQAAEAABAAAQAAEAABCSAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA\r\nvia: CHN-HNchangsha-AREACT1-CACHE14[28],CHN-HNchangsha-AREACT1-CACHE44[0,TCP_HIT,23],CHN-JSwuxi-GLOBAL2-CACHE55[6],CHN-JSwuxi-GLOBAL2-CACHE99[0,TCP_HIT,3],CHN-SH-GLOBAL4-CACHE154[24],CHN-SH-GLOBAL4-CACHE126[0,TCP_HIT,22]\r\nx-hcs-proxy-type: 1\r\nX-CCDN-CacheTTL: 31536000\r\nnginx-hit: 1\r\nAge: 4663231\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":10540,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=1, software=www.meitu.com], baseline, precision 8, 240x240, components 3","md5":"8a694fde3c3d19bdf7ffc5876ff3adcb","sha1":"9a16811f248f3ae76248465086955a49460bb4a4","sha256":"cae992d1ebdccd79ca2fdfad2be7faecbb9ad52b43aa5cee1b3c5a378cd3b08a","sha512":"5e47e4c89c04783a014c4dc2e8001b35a446e4ab1b39bcc49b81307fbbdd31cdfb495d624e66bcd5d7916cf946c39e101c9dcd232baab5a7087e250a7238d071","ssdeep":"192:+0rlFRLn7iNHY5ZsnjH379mORJK+r95XTiQbfrKuIZ9H5Orm/fBmXSFXeG:+0jRL7iN4fyH3xmOu0ZTi8O3Z9HIK/fL","tlshash":"142229bab6c69bc83f0b135e873dbd3747c285f420d1291706d22c85b261fb11782aac","first_seen":"2025-07-22T11:13:12.15871Z","last_seen":"2026-04-04T14:27:36.466742Z","times_seen":2,"resource_available":false,"data":null}},"time_used":17762,"timings":{"blocked":17432,"dns":0,"connect":0,"send":0,"wait":329,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img3.downza.cn/capmobile/202604/163605-69ce2a75ce98c.png","fqdn":"img3.downza.cn","domain":"downza.cn","tld":"cn"},"ip":{"addr":"113.240.117.108","port":443,"asn":63835,"as":"No.293,Wanbao Avenue","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.downza.cn/soft/360885.html","date":"2026-04-04T14:26:28.135Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img3.downza.cn","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Mon, 02 Mar 2026 00:00:00 GMT","end":"Sun, 31 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"55:2F:FB:08:6F:B4:C5:C2:09:87:88:75:54:0F:B8:93:BD:40:45:BC","sha256":"2C:BA:99:7E:59:AC:83:1E:DE:33:00:2E:51:95:4B:C4:18:0F:62:0D:8D:C4:BD:57:E4:43:A7:70:9C:65:8B:7D"}}},"request":{"raw":"GET /capmobile/202604/163605-69ce2a75ce98c.png HTTP/1.1\r\nHost: img3.downza.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.downza.cn/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sat, 04 Apr 2026 14:26:45 GMT\r\nContent-Type: image/png\r\nContent-Length: 14984\r\nConnection: keep-alive\r\nServer: openresty\r\nx-reserved: amazon, aws and amazon web services are trademarks or registered trademarks of Amazon Technologies, Inc\r\nCloudServiceDiscount: CDN\r\nx-amz-request-id: 0000019D4DD9D6C49046714F7A4D26D2\r\nETag: \"016cd45c857036e05d918038c2204c89\"\r\nLast-Modified: Thu, 02 Apr 2026 08:36:05 GMT\r\nx-amz-id-2: 36AAAQAAEAABAAAQAAEAABAAAQAAEAABAAAaI=AAAAAAAAAAAAAAAAAAAAAAAAAA\r\nvia: CHN-HNchangsha-AREACT1-CACHE33[5],CHN-HNchangsha-AREACT1-CACHE53[0,TCP_HIT,2],CHN-JSwuxi-GLOBAL2-CACHE41[5],CHN-JSwuxi-GLOBAL2-CACHE53[0,TCP_HIT,2]\r\nx-hcs-proxy-type: 1\r\nX-CCDN-CacheTTL: 31536000\r\nnginx-hit: 1\r\nAge: 172001\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":14984,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced","md5":"016cd45c857036e05d918038c2204c89","sha1":"c98cdb75eb10f8cb7df2f62a8123fd963d2fe556","sha256":"049e4ed2a13f25934dfd70ff4625e5bec31bc34ca41720c6c1c4169309408ef4","sha512":"f73ebb9dd475546b1e94e7da7d3968d22d9591f9a0dd192fc3ccf9cfcef02aa56aee0e3f96230124e494f42dacec0a71ad5379594158745116c5a766ce282d86","ssdeep":"384:+6/qT+8c0P20y98yisekTHvuHHs088ieNV8twr75:+t+8B63and19","tlshash":"7c62bfbc03f21fea19100beaf085aa53eb78d8704579c19daa178e88d689cfc5769125","first_seen":"2026-04-04T14:27:36.467613Z","last_seen":"2026-04-04T14:27:36.467613Z","times_seen":1,"resource_available":false,"data":null}},"time_used":17570,"timings":{"blocked":13778,"dns":1,"connect":1301,"send":0,"wait":1412,"receive":1,"ssl":1077},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img3.downza.cn/capmobile/202604/160243-69ce22a379c8b.png","fqdn":"img3.downza.cn","domain":"downza.cn","tld":"cn"},"ip":{"addr":"113.240.117.108","port":443,"asn":63835,"as":"No.293,Wanbao Avenue","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.downza.cn/soft/360885.html","date":"2026-04-04T14:26:28.136Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img3.downza.cn","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Mon, 02 Mar 2026 00:00:00 GMT","end":"Sun, 31 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"55:2F:FB:08:6F:B4:C5:C2:09:87:88:75:54:0F:B8:93:BD:40:45:BC","sha256":"2C:BA:99:7E:59:AC:83:1E:DE:33:00:2E:51:95:4B:C4:18:0F:62:0D:8D:C4:BD:57:E4:43:A7:70:9C:65:8B:7D"}}},"request":{"raw":"GET /capmobile/202604/160243-69ce22a379c8b.png HTTP/1.1\r\nHost: img3.downza.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.downza.cn/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sat, 04 Apr 2026 14:26:42 GMT\r\nContent-Type: image/png\r\nContent-Length: 16856\r\nConnection: keep-alive\r\nServer: openresty\r\nx-reserved: amazon, aws and amazon web services are trademarks or registered trademarks of Amazon Technologies, Inc\r\nCloudServiceDiscount: CDN\r\nx-amz-request-id: 0000019D4D719FB597C8807E4A915BEA\r\nETag: \"72c4dc66d46ffa09d5adf56cddb24383\"\r\nLast-Modified: Thu, 02 Apr 2026 08:02:43 GMT\r\nx-amz-id-2: 36AAAQAAEAABAAAQAAEAABAAAQAAEAABAAAaI=AAAAAAAAAAAAAAAAAAAAAAAAAA\r\nvia: CHN-HNchangsha-AREACT1-CACHE18[13],CHN-HNchangsha-AREACT1-CACHE11[0,TCP_HIT,11],CHN-JSwuxi-GLOBAL2-CACHE104[7],CHN-JSwuxi-GLOBAL2-CACHE104[0,TCP_HIT,5]\r\nx-hcs-proxy-type: 1\r\nX-CCDN-CacheTTL: 31536000\r\nnginx-hit: 1\r\nAge: 187478\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":16856,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced","md5":"72c4dc66d46ffa09d5adf56cddb24383","sha1":"cfdfffc6a374a9df9b561a1cbe0866663040f5dd","sha256":"38d272b07f587841eeb32827a9255c1e2e69dec6fa482505c62e7d430ba107f1","sha512":"c12cda766395c373d099b245666550fc17fe8e2419349bdb5f79b82761e7cb9ce6e62549719b813d2f4f7b409fe4ba348cecc265f0fd66c79b251c9287afc900","ssdeep":"192:hX8mS8TipErQ2TQo+ItzXEX3G9N1rRZSoR2aTzgKp60HOPlks5ynC5auCNP/Lp9G:FjAEUYzV9PrR1R/8B0HWWYsDLjCAs","tlshash":"0e72e1a7a367c97be66c854537299ff7d4d08b00c98ac0d33e86b214a258eb0b5cd747","first_seen":"2026-04-04T14:27:36.468531Z","last_seen":"2026-04-04T14:27:36.468531Z","times_seen":1,"resource_available":false,"data":null}},"time_used":14931,"timings":{"blocked":13777,"dns":1,"connect":260,"send":0,"wait":342,"receive":20,"ssl":531},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img3.downza.cn/download/202111/154135-619f3e2fca9ce.jpg","fqdn":"img3.downza.cn","domain":"downza.cn","tld":"cn"},"ip":{"addr":"113.240.117.108","port":443,"asn":63835,"as":"No.293,Wanbao Avenue","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.downza.cn/soft/360885.html","date":"2026-04-04T14:26:28.162Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img3.downza.cn","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Mon, 02 Mar 2026 00:00:00 GMT","end":"Sun, 31 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"55:2F:FB:08:6F:B4:C5:C2:09:87:88:75:54:0F:B8:93:BD:40:45:BC","sha256":"2C:BA:99:7E:59:AC:83:1E:DE:33:00:2E:51:95:4B:C4:18:0F:62:0D:8D:C4:BD:57:E4:43:A7:70:9C:65:8B:7D"}}},"request":{"raw":"GET /download/202111/154135-619f3e2fca9ce.jpg HTTP/1.1\r\nHost: img3.downza.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sat, 04 Apr 2026 14:26:46 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 4595\r\nConnection: keep-alive\r\nServer: openresty\r\nx-reserved: amazon, aws and amazon web services are trademarks or registered trademarks of Amazon Technologies, Inc\r\nCloudServiceDiscount: CDN\r\nx-amz-request-id: 0000019478DF34FD90536F188354D720\r\nETag: \"56c87ba3ac2e5467b1b018f5e39dbf9b\"\r\nLast-Modified: Thu, 25 Nov 2021 07:41:35 GMT\r\nx-amz-id-2: 32AAAQAAEAABAAAQAAEAABAAAQAAEAABCSAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA\r\nvia: CHN-HNchangsha-AREACT1-CACHE21[4],CHN-HNchangsha-AREACT1-CACHE42[0,TCP_HIT,3],CHN-JSwuxi-GLOBAL2-CACHE94[16],CHN-JSwuxi-GLOBAL2-CACHE117[0,TCP_HIT,2],CHN-SH-GLOBAL4-CACHE143[55],CHN-SH-GLOBAL4-CACHE7[0,TCP_HIT,28]\r\nx-hcs-proxy-type: 1\r\nX-CCDN-CacheTTL: 31536000\r\nnginx-hit: 1\r\nAge: 3967545\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":4595,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=3], baseline, precision 8, 80x80, components 3","md5":"56c87ba3ac2e5467b1b018f5e39dbf9b","sha1":"95eca484e78ce370d2ccb5ce0185b8f66a28cdbb","sha256":"d3507d8da742be96d2bd08c6fae73b7945885e6cfa2a62d77d5ee900f479675a","sha512":"5cfdd3f5c8614670ffa281a516eeb223811f08893d13b74fcdb825778e5e1340cd920e9d3c3f85e482ba28e423dc643dbec362243c0d8cd1ece5dc8d6edeb9fe","ssdeep":"96:ITGMEFZDUWCdTH6iURzyKuBw8udTZUu1iZiJ2giPXLriw8vRH+Lueynnm:IXeWp8FyPmUu0iSLQhguHnm","tlshash":"c2915d0b5f2a7f344feb12f41901e24fd18af943554b298981802e92ba12582de4b35c","first_seen":"2025-07-22T11:13:12.12703Z","last_seen":"2026-04-04T14:27:36.469341Z","times_seen":2,"resource_available":false,"data":null}},"time_used":18046,"timings":{"blocked":17757,"dns":0,"connect":0,"send":0,"wait":287,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"res.njxzwh.com/downza/pc/v2023/css/detail.css?2026040412","fqdn":"res.njxzwh.com","domain":"njxzwh.com","tld":"com"},"ip":{"addr":"113.240.117.107","port":443,"asn":63835,"as":"No.293,Wanbao Avenue","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.downza.cn/soft/360885.html","date":"2026-04-04T14:26:27.887Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"res.njxzwh.com","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Thu, 19 Feb 2026 00:00:00 GMT","end":"Wed, 20 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"BF:F9:0C:9F:DA:C1:19:17:44:6C:7F:14:F0:08:EE:C7:99:CB:76:4C","sha256":"9E:13:1A:33:49:E6:F7:8B:29:45:3C:6B:D3:41:4A:A5:B6:45:DD:0A:0B:C4:36:10:64:FD:EF:64:9D:7A:C2:69"}}},"request":{"raw":"GET /downza/pc/v2023/css/detail.css?2026040412 HTTP/1.1\r\nHost: res.njxzwh.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.downza.cn/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sat, 04 Apr 2026 14:26:31 GMT\r\nContent-Type: text/css\r\nContent-Length: 47820\r\nConnection: keep-alive\r\nServer: openresty\r\nx-reserved: amazon, aws and amazon web services are trademarks or registered trademarks of Amazon Technologies, Inc\r\nCloudServiceDiscount: CDN\r\nx-amz-request-id: 0000019D56A5E59697485EBF97E9AB7E\r\nETag: \"87b580e29b584562c6b7a1af81ec12b3\"\r\nLast-Modified: Thu, 30 Oct 2025 09:32:36 GMT\r\nx-amz-id-2: 36AAAQAAEAABAAAQAAEAABAAAQAAEAABAAAaI=AAAAAAAAAAAAAAAAAAAAAAAAAA\r\nX-CCDN-Expires: 49218\r\nvia: CHN-HNchangsha-AREACT1-CACHE20[8],CHN-HNchangsha-AREACT1-CACHE32[0,TCP_HIT,3],CHN-JSwuxi-GLOBAL2-CACHE115[2],CHN-JSwuxi-GLOBAL2-CACHE32[0,TCP_HIT,1]\r\nx-hcs-proxy-type: 1\r\nX-CCDN-CacheTTL: 86400\r\nnginx-hit: 1\r\nAge: 37182\r\nAccept-Ranges: bytes\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: OPTION,GET\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":47820,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"87b580e29b584562c6b7a1af81ec12b3","sha1":"408ac88ee15360ab1d803c94d0b0a8e4fad61bac","sha256":"d5f853100ea8008200404d7ef311fe252ae6c6f8c0b6b640a878a060236f8969","sha512":"8a70c75c67a2414c202884ebc1f66ef07e1440898f23ba5c23c7d6576f13e6b9ccfb066f5cd3e7621eaa69c3f32bf63cc821f5d95b6548d79960401312a0d1e8","ssdeep":"384:kabXyz5ybUrFTw1wsJApejeOFcFkvF3K2L5Y9Hm:kabWqahowsOoj1FcFkvF3K2L5Y9Hm","tlshash":"de23336cfb411709727bcaba7741679363531463838202e8bfe16a58bbc48ad4572fcd","first_seen":"2025-11-02T09:13:30.179527Z","last_seen":"2026-06-06T23:56:38.300675Z","times_seen":37,"resource_available":false,"data":null}},"time_used":7731,"timings":{"blocked":3479,"dns":1224,"connect":289,"send":0,"wait":391,"receive":369,"ssl":1975},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bigdata.downza.com/js/xingzhi.js?6bd0","fqdn":"bigdata.downza.com","domain":"downza.com","tld":"com"},"ip":{"addr":"122.112.196.83","port":443,"asn":55990,"as":"Huawei Cloud Service data center","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.downza.cn/soft/360885.html","date":"2026-04-04T14:26:27.897Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"bigdata.downza.com","organization":""},"issuer":{"commonName":"ZeroSSL ECC Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Fri, 13 Mar 2026 00:00:00 GMT","end":"Thu, 11 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C0:FA:D0:1D:93:6D:CF:29:23:A2:0B:27:B7:67:A4:43:EA:B2:E5:58","sha256":"48:A5:CE:F7:2C:FD:EE:67:23:37:9C:A7:E9:0B:C3:6B:F7:7D:42:1D:48:DB:5C:08:33:D0:78:F9:82:C7:43:C9"}}},"request":{"raw":"GET /js/xingzhi.js?6bd0 HTTP/1.1\r\nHost: bigdata.downza.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.downza.cn/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 04 Apr 2026 14:26:29 GMT\r\nContent-Type: application/javascript\r\nLast-Modified: Fri, 14 Jan 2022 07:11:30 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"61e12222-ce4\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3300,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (3300), with no line terminators","md5":"20cfe5a66ceaa704c9134202b3197360","sha1":"1465772bfe2402479f12f67574cde3e4515b77f7","sha256":"df9d37d34bbd878277d92fa3633976f3a4f61a076c86a76bdbf51c350e928e0a","sha512":"4c93a2504530954a3e0f5535cc2ac214c94d14540af20fec2e8d2aa6f54aed586045d9e5ce92d93224a845dfe08e7c0bf04c892369f134faef9797e762201cee","ssdeep":"","tlshash":"57612274b294247540a12069672b734b63365146b84f6491a43eeef0bd74f47a123fbf","first_seen":"2023-03-09T21:13:51Z","last_seen":"2026-06-06T23:56:38.253001Z","times_seen":169,"resource_available":true,"data":null}},"time_used":1650,"timings":{"blocked":-1,"dns":405,"connect":310,"send":0,"wait":310,"receive":0,"ssl":625},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img3.downza.cn/capmobile/202509/153845-68ba9385b7872.png","fqdn":"img3.downza.cn","domain":"downza.cn","tld":"cn"},"ip":{"addr":"113.240.117.108","port":443,"asn":63835,"as":"No.293,Wanbao Avenue","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.downza.cn/soft/360885.html","date":"2026-04-04T14:26:27.901Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img3.downza.cn","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Mon, 02 Mar 2026 00:00:00 GMT","end":"Sun, 31 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"55:2F:FB:08:6F:B4:C5:C2:09:87:88:75:54:0F:B8:93:BD:40:45:BC","sha256":"2C:BA:99:7E:59:AC:83:1E:DE:33:00:2E:51:95:4B:C4:18:0F:62:0D:8D:C4:BD:57:E4:43:A7:70:9C:65:8B:7D"}}},"request":{"raw":"GET /capmobile/202509/153845-68ba9385b7872.png HTTP/1.1\r\nHost: img3.downza.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.downza.cn/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sat, 04 Apr 2026 14:26:43 GMT\r\nContent-Type: image/png\r\nContent-Length: 39811\r\nConnection: keep-alive\r\nServer: openresty\r\nx-reserved: amazon, aws and amazon web services are trademarks or registered trademarks of Amazon Technologies, Inc\r\nCloudServiceDiscount: CDN\r\nx-amz-request-id: 0000019918EF9AFF905658F23918EC96\r\nETag: \"b684d6cd6eece66c11fc346e78f2f146\"\r\nLast-Modified: Fri, 05 Sep 2025 07:38:45 GMT\r\nx-amz-id-2: 36AAAQAAEAABAAAQAAEAABAAAQAAEAABAAAaI=AAAAAAAAAAAAAAAAAAAAAAAAAA\r\nvia: CHN-HNchangsha-AREACT1-CACHE14[21],CHN-HNchangsha-AREACT1-CACHE75[0,TCP_HIT,18],CHN-JSwuxi-GLOBAL2-CACHE74[29],CHN-JSwuxi-GLOBAL2-CACHE75[0,TCP_HIT,23]\r\nx-hcs-proxy-type: 1\r\nX-CCDN-CacheTTL: 31536000\r\nnginx-hit: 1\r\nAge: 4852433\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":39811,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced","md5":"b684d6cd6eece66c11fc346e78f2f146","sha1":"d4dbc35358828eea9d0ca96abbc785bbcb3d9ee6","sha256":"dd17c9fe7014bb3e2d778aa621ac32da878fe1969dd1aaf188f8955d704d6b40","sha512":"ee7e93757adf1dd5b954e691b01b13e64f0112bfb29a8432ead5e7ecac9f5c4ce907492ce1bb77b10592147f5ec0a04f99eb9dee2f7529df958fe50e82c0cd74","ssdeep":"768:s3lOJKP3/Rg9y4S5FdGVitqcnIE3XwSEE4cFCK:0OJKPPSFS5jGVitq6DEkCK","tlshash":"1103f177761c7bb2913c95fdf8f34748aa931e107db00892703279bafa5ca5716808e9","first_seen":"2026-04-04T14:27:36.471847Z","last_seen":"2026-04-04T14:27:36.471847Z","times_seen":1,"resource_available":false,"data":null}},"time_used":16561,"timings":{"blocked":15899,"dns":0,"connect":0,"send":0,"wait":382,"receive":280,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img3.downza.cn/download/202112/102321-61bfe9197f3c4.jpg","fqdn":"img3.downza.cn","domain":"downza.cn","tld":"cn"},"ip":{"addr":"113.240.117.108","port":443,"asn":63835,"as":"No.293,Wanbao Avenue","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.downza.cn/soft/360885.html","date":"2026-04-04T14:26:28.159Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img3.downza.cn","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Mon, 02 Mar 2026 00:00:00 GMT","end":"Sun, 31 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"55:2F:FB:08:6F:B4:C5:C2:09:87:88:75:54:0F:B8:93:BD:40:45:BC","sha256":"2C:BA:99:7E:59:AC:83:1E:DE:33:00:2E:51:95:4B:C4:18:0F:62:0D:8D:C4:BD:57:E4:43:A7:70:9C:65:8B:7D"}}},"request":{"raw":"GET /download/202112/102321-61bfe9197f3c4.jpg HTTP/1.1\r\nHost: img3.downza.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sat, 04 Apr 2026 14:26:45 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 4680\r\nConnection: keep-alive\r\nServer: openresty\r\nx-reserved: amazon, aws and amazon web services are trademarks or registered trademarks of Amazon Technologies, Inc\r\nCloudServiceDiscount: CDN\r\nx-amz-request-id: 0000019ADEA11DBB904B44C73AC674EC\r\nETag: \"aebc64fde61b2405b60b992bc2f4cfc8\"\r\nLast-Modified: Mon, 20 Dec 2021 02:23:21 GMT\r\nx-amz-id-2: 36AAAQAAEAABAAAQAAEAABAAAQAAEAABAAAaI=AAAAAAAAAAAAAAAAAAAAAAAAAA\r\nvia: CHN-HNchangsha-AREACT1-CACHE14[10],CHN-HNchangsha-AREACT1-CACHE38[0,TCP_HIT,7],CHN-JSwuxi-GLOBAL2-CACHE97[26],CHN-JSwuxi-GLOBAL2-CACHE38[0,TCP_HIT,24]\r\nx-hcs-proxy-type: 1\r\nX-CCDN-CacheTTL: 31536000\r\nnginx-hit: 1\r\nAge: 4590118\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4680,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 80 x 80, 8-bit/color RGBA, non-interlaced","md5":"aebc64fde61b2405b60b992bc2f4cfc8","sha1":"e90131fa3f85befb338fb1361a99922883c7fe6c","sha256":"a5a8e1f7f9c931d0d010281266967960d54734d68ccbf29543f0a2619411522b","sha512":"a997b684450d13359babdfba579a0545dec25868da1dc079991332470e3dbd929f42fc3f3ac7180148676a6b37de762c213fcfa49ae15c21e647ccc1b2763cd1","ssdeep":"96:AkFjwe6LVw8e3ul/Y+E4l5OzPq2YvgPPUGJstcbY0IuI/7vfz9FYC5n:Ane6LVjeelw+N/OzPQvgkWsmbY0IB/jf","tlshash":"73a18dcb358ed79da345649a7eca286c04fa154c80f5b21ea80ecec37df1004574ac3a","first_seen":"2025-07-22T11:13:12.12329Z","last_seen":"2026-04-04T14:27:36.472737Z","times_seen":2,"resource_available":false,"data":null}},"time_used":17939,"timings":{"blocked":17648,"dns":0,"connect":0,"send":0,"wait":291,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img3.downza.cn/mobile/202205/140639-6274baefc92b5.jpg","fqdn":"img3.downza.cn","domain":"downza.cn","tld":"cn"},"ip":{"addr":"113.240.117.108","port":443,"asn":63835,"as":"No.293,Wanbao Avenue","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.downza.cn/soft/360885.html","date":"2026-04-04T14:26:28.172Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img3.downza.cn","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Mon, 02 Mar 2026 00:00:00 GMT","end":"Sun, 31 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"55:2F:FB:08:6F:B4:C5:C2:09:87:88:75:54:0F:B8:93:BD:40:45:BC","sha256":"2C:BA:99:7E:59:AC:83:1E:DE:33:00:2E:51:95:4B:C4:18:0F:62:0D:8D:C4:BD:57:E4:43:A7:70:9C:65:8B:7D"}}},"request":{"raw":"GET /mobile/202205/140639-6274baefc92b5.jpg HTTP/1.1\r\nHost: img3.downza.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sat, 04 Apr 2026 14:26:42 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 5452\r\nConnection: keep-alive\r\nServer: openresty\r\nx-reserved: amazon, aws and amazon web services are trademarks or registered trademarks of Amazon Technologies, Inc\r\nCloudServiceDiscount: CDN\r\nx-amz-request-id: 0000019415CD49779058C20625870C41\r\nETag: \"52e6f4acaef81bb962f2ba1be3b9706e\"\r\nLast-Modified: Fri, 06 May 2022 06:06:39 GMT\r\nx-amz-id-2: 32AAAQAAEAABAAAQAAEAABAAAQAAEAABCSAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA\r\nvia: CHN-HNchangsha-AREACT1-CACHE46[3],CHN-HNchangsha-AREACT1-CACHE10[0,TCP_HIT,1],CHN-JSwuxi-GLOBAL2-CACHE72[35],CHN-JSwuxi-GLOBAL2-CACHE10[0,TCP_HIT,34],CHN-SH-GLOBAL4-CACHE118[30],CHN-SH-GLOBAL4-CACHE48[0,TCP_HIT,29]\r\nx-hcs-proxy-type: 1\r\nX-CCDN-CacheTTL: 31536000\r\nnginx-hit: 1\r\nAge: 5198984\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":5452,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90\", baseline, precision 8, 128x128, components 3","md5":"52e6f4acaef81bb962f2ba1be3b9706e","sha1":"081604271fdc9cd8e2f97d5e0997a8b5e3f66509","sha256":"1c892ee2f59423a852931ed24b26049ddd58e68c2e2fde4ddb1def197b4d76f9","sha512":"65e86c0af19d1bf30c7cc6fb4d8d719f621b0e4eb3070affb35c38d58a0a1e43e7259375e78825faf90214dc5c0b23900c2a957d2fb9d8db3e6851f6f75def86","ssdeep":"96:7EZYXFzIZ8k46d7wVRJJyzV7aVNXYHL9z9VPbgo4ZI7uYC3CVWsRqhW:7FFzIv4zVRJQzV7aHXYHLaBUq37G","tlshash":"31b15c6b63e242dc3ada91afe8222d4fa3cb69cfaf9015447be55570c490e1169c478c","first_seen":"2024-05-31T23:55:31Z","last_seen":"2026-06-06T23:56:38.222166Z","times_seen":47,"resource_available":false,"data":null}},"time_used":14829,"timings":{"blocked":13741,"dns":1,"connect":276,"send":0,"wait":296,"receive":0,"ssl":515},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"res-etl-ssl.xunlei.com/v1.0.0/xla.min.js","fqdn":"res-etl-ssl.xunlei.com","domain":"xunlei.com","tld":"com"},"ip":{"addr":"101.133.169.157","port":443,"asn":37963,"as":"Hangzhou Alibaba Advertising Co.,Ltd.","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.downza.cn/soft/360885.html","date":"2026-04-04T14:26:41.940Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.xunlei.com","organization":"Shenzhen Xunlei Networking Technologies Co., Ltd."},"issuer":{"commonName":"GlobalSign RSA OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 14 May 2025 07:30:49 GMT","end":"Mon, 15 Jun 2026 07:30:48 GMT"},"fingerprint":{"sha1":"BA:01:25:07:4E:8B:85:C9:0E:27:3E:A0:F8:CF:0A:2D:B8:75:24:81","sha256":"9D:CE:53:1C:87:46:BA:05:F3:28:6D:D0:99:B2:26:FB:59:C4:50:9C:A7:8D:5A:BA:5D:14:F7:17:30:4D:10:46"}}},"request":{"raw":"GET /v1.0.0/xla.min.js HTTP/1.1\r\nHost: res-etl-ssl.xunlei.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.downza.cn/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 04 Apr 2026 14:26:43 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 07 Jan 2019 08:10:53 GMT\r\netag: W/\"5c33098d-3805\"\r\nexpires: Sat, 04 Apr 2026 14:26:42 GMT\r\ncache-control: no-cache\r\nvia: a013099\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":14341,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (14305)","md5":"80b7b16ffa8b5d8f91a66841b3c572b6","sha1":"c90f3805a1f71be10f8e975db44722db5be34915","sha256":"f1a0b5c230e0005dc4f672cdb642e09b3323d1e3024b9979a3d4441b5e53942a","sha512":"b48170401a2205f335631d33783f7ec9aa01abddc97d6d32986958b4f95197dea875f0b268007a3ce7ff91dcad41e02c9fb95976ed3fbdba8da74bd535501a27","ssdeep":"192:fxWB6UHJsio0sFYPvCmzHK096O+aTtfHO9Gda6xw4L4fafp26Lr4T4S139AxPcqv:fxWBA0s6HB9HlqIa6xRM7EPc/PDNu","tlshash":"3f52c99a3364b49683a73ce41d6f3946e0b58c156858d490fb74c8e26874e6f833be3c","first_seen":"2023-03-10T11:33:41Z","last_seen":"2026-06-06T23:56:38.340739Z","times_seen":332,"resource_available":true,"data":null}},"time_used":1965,"timings":{"blocked":-1,"dns":323,"connect":232,"send":0,"wait":240,"receive":0,"ssl":1170},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"res-etl-ssl.xunlei.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.downza.cn/soft/360885.html","fqdn":"www.downza.cn","domain":"downza.cn","tld":"cn"},"ip":{"addr":"218.11.0.74","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-04-04T14:26:25.597Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.downza.cn","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Mon, 02 Mar 2026 00:00:00 GMT","end":"Sun, 31 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D5:BE:35:93:B1:F3:EB:E5:47:F0:FE:71:85:7E:A4:3F:0E:3A:63:D8","sha256":"72:50:D8:A9:AC:53:99:7E:52:76:4E:3A:7C:A0:D7:9B:19:42:29:EB:2E:E7:08:ED:A1:DB:8E:FD:3A:CC:C6:4A"}}},"request":{"raw":"GET /soft/360885.html HTTP/1.1\r\nHost: www.downza.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sat, 04 Apr 2026 14:26:27 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nContent-Length: 78865\r\nConnection: keep-alive\r\nServer: openresty\r\nVary: Accept-Encoding\r\nExpires: Sat, 04 Apr 2026 06:13:28 GMT\r\nX-CCDN-Expires: 43194\r\nvia: CHN-HEshijiazhuang-AREACUCC8-CACHE34[8],CHN-HEshijiazhuang-AREACUCC8-CACHE5[0,TCP_HIT,5],CHN-TJ-GLOBAL6-CACHE144[3],CHN-TJ-GLOBAL6-CACHE75[0,TCP_HIT,1]\r\nx-hcs-proxy-type: 1\r\nX-CCDN-CacheTTL: 43200\r\nnginx-hit: 1\r\nCache-Control: max-age=7200, public\r\nAge: 6\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"jQuery:1.12.4","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}],"data":{"size":78865,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (339)","md5":"06a186605931f096f0235390d6897aeb","sha1":"a2bd76334e2cdc0e765d4f9f5340b2feee223eb6","sha256":"421f58d3957d37e1f503606f28cf180a2e9391a75f5c4fa77a1ef8c1f1af0e5b","sha512":"0b74c32c59c8db489989d2e9733a6de89b0ffae7968426e58b68fe29ad744106a2417fbf64f6e8c2cebb5bd706d459aa9099ed07192d64faad737440916849e3","ssdeep":"1536:76Rreb2klUXTJY9Ncg/GTkj0jy0WRM4Y6Q8KNBPq:54jy/YIkBy","tlshash":"8a73b567c6f694b31501d0d297baa318fd83114bdb465a46f5fc0accbfc5ea24a0329e","first_seen":"2026-04-04T14:27:36.474948Z","last_seen":"2026-04-04T14:27:36.474948Z","times_seen":1,"resource_available":false,"data":null}},"time_used":4320,"timings":{"blocked":1755,"dns":1035,"connect":250,"send":0,"wait":329,"receive":481,"ssl":468},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img3.downza.cn/download/202008/154753-5f44c229a5dad.jpg?x-image-process=style/50-50","fqdn":"img3.downza.cn","domain":"downza.cn","tld":"cn"},"ip":{"addr":"113.240.117.108","port":443,"asn":63835,"as":"No.293,Wanbao Avenue","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.downza.cn/soft/360885.html","date":"2026-04-04T14:26:27.909Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img3.downza.cn","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Mon, 02 Mar 2026 00:00:00 GMT","end":"Sun, 31 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"55:2F:FB:08:6F:B4:C5:C2:09:87:88:75:54:0F:B8:93:BD:40:45:BC","sha256":"2C:BA:99:7E:59:AC:83:1E:DE:33:00:2E:51:95:4B:C4:18:0F:62:0D:8D:C4:BD:57:E4:43:A7:70:9C:65:8B:7D"}}},"request":{"raw":"GET /download/202008/154753-5f44c229a5dad.jpg?x-image-process=style/50-50 HTTP/1.1\r\nHost: img3.downza.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sat, 04 Apr 2026 14:26:45 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 1402\r\nConnection: keep-alive\r\nServer: openresty\r\nx-reserved: amazon, aws and amazon web services are trademarks or registered trademarks of Amazon Technologies, Inc\r\nCloudServiceDiscount: CDN\r\nx-amz-id-2: 36AAAQAAEAABAAAQAAEAABAAAQAAEAABAAAaE=AAAAAAAAAAAAAAAAAAAAAAAAAA\r\nx-amz-request-id: 0000019BE3E6FE0A9058ABE2EA218D0A\r\nETag: 9348622495a5b70a5ecfeb5ac914f1de\r\nX-Oef-Request-Id: 36346537303638383631333a3233372e3136313a\r\nX-Request-Id: 36346537303638383631333a3233372e3136313a\r\nX-Transcode-Length: 10540\r\nvia: CHN-HNchangsha-AREACT1-CACHE36[3],CHN-HNchangsha-AREACT1-CACHE5[0,TCP_HIT,2],CHN-JSwuxi-GLOBAL2-CACHE10[34],CHN-JSwuxi-GLOBAL2-CACHE113[0,TCP_HIT,28]\r\nx-hcs-proxy-type: 1\r\nX-CCDN-CacheTTL: 31536000\r\nnginx-hit: 1\r\nAge: 353419\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1402,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 0x0, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1, software=www.meitu.com], baseline, precision 8, 50x50, components 3","md5":"97b97d9dd97e610c789041b8702b575e","sha1":"a6c6cac14b80b07e7da835ed4635b23a63ff8f32","sha256":"f495ac7fee2a8982e0f30a95da6bcdb6e360214e5d43f03aa70d6bf6ff428875","sha512":"6607efc45f363a3ca0188dd39cd9b0703c3812ad3cc4530fe5c51de293a2345e7a21d67bcbb58d7079507ff6311efa1b1fb363ae3683fc748589a5aae45dffb5","ssdeep":"","tlshash":"112186b34e474fc8faa925325ee16f63bfd2ee145112c2df39c0575381a55c24a28785","first_seen":"2025-07-22T11:13:12.161297Z","last_seen":"2026-04-04T14:27:36.475846Z","times_seen":2,"resource_available":false,"data":null}},"time_used":17369,"timings":{"blocked":16283,"dns":0,"connect":0,"send":0,"wait":1085,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img3.downza.cn/capmobile/202401/104942-65a49d46eabd0.png","fqdn":"img3.downza.cn","domain":"downza.cn","tld":"cn"},"ip":{"addr":"113.240.117.108","port":443,"asn":63835,"as":"No.293,Wanbao Avenue","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.downza.cn/soft/360885.html","date":"2026-04-04T14:26:27.923Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img3.downza.cn","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Mon, 02 Mar 2026 00:00:00 GMT","end":"Sun, 31 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"55:2F:FB:08:6F:B4:C5:C2:09:87:88:75:54:0F:B8:93:BD:40:45:BC","sha256":"2C:BA:99:7E:59:AC:83:1E:DE:33:00:2E:51:95:4B:C4:18:0F:62:0D:8D:C4:BD:57:E4:43:A7:70:9C:65:8B:7D"}}},"request":{"raw":"GET /capmobile/202401/104942-65a49d46eabd0.png HTTP/1.1\r\nHost: img3.downza.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.downza.cn/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sat, 04 Apr 2026 14:26:43 GMT\r\nContent-Type: image/png\r\nContent-Length: 44861\r\nConnection: keep-alive\r\nServer: openresty\r\nx-reserved: amazon, aws and amazon web services are trademarks or registered trademarks of Amazon Technologies, Inc\r\nCloudServiceDiscount: CDN\r\nx-amz-request-id: 000001943EC6CBE79058C2894E8F4078\r\nETag: \"fbbf6be1ac56ebbc658c74c497d306b5\"\r\nLast-Modified: Mon, 15 Jan 2024 02:49:42 GMT\r\nx-amz-id-2: 32AAAQAAEAABAAAQAAEAABAAAQAAEAABCSAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA\r\nvia: CHN-HNchangsha-AREACT1-CACHE46[65],CHN-HNchangsha-AREACT1-CACHE10[29,TCP_MISS,60],CHN-JSwuxi-GLOBAL2-CACHE67[4],CHN-JSwuxi-GLOBAL2-CACHE10[0,TCP_HIT,3],CHN-SH-GLOBAL4-CACHE34[19],CHN-SH-GLOBAL4-CACHE30[0,TCP_HIT,17]\r\nx-hcs-proxy-type: 1\r\nX-CCDN-CacheTTL: 31536000\r\nAge: 1\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":44861,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced","md5":"fbbf6be1ac56ebbc658c74c497d306b5","sha1":"fc2976deb2c89fe3dd372088458985f721054fb5","sha256":"821aa436d19a42754be03543c95fd13977d1eec87ae03c779ce585db1c28fe2d","sha512":"1987e086d90dc0935b0ba91f78e28af204e6e6d88dffd4d4e84594aad02503c72fb6ea95b37094134a64d723a5b42b42217955ce81312860b6354cc620c6e0b5","ssdeep":"768:ZY669hgjevhVbMNZ9AgZSGl7vjfn8Wcn4uAv8hKubYMZ/muZlpnz:Gx9hpvT8Qgrvjf8j4uVhKuTZ/mu79","tlshash":"7213f147b5a9251327ab0a574b8e27e120f9dcf52a0a37dca421c9be8f5bc14381f618","first_seen":"2026-04-04T14:27:36.476678Z","last_seen":"2026-04-04T14:27:36.476678Z","times_seen":1,"resource_available":false,"data":null}},"time_used":16535,"timings":{"blocked":13989,"dns":1,"connect":1577,"send":0,"wait":1201,"receive":255,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"res.njxzwh.com/downza/pc/v2023/images/icon-down3.png","fqdn":"res.njxzwh.com","domain":"njxzwh.com","tld":"com"},"ip":{"addr":"121.22.232.170","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.downza.cn/soft/360885.html","date":"2026-04-04T14:26:42.081Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"res.njxzwh.com","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Thu, 19 Feb 2026 00:00:00 GMT","end":"Wed, 20 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"BF:F9:0C:9F:DA:C1:19:17:44:6C:7F:14:F0:08:EE:C7:99:CB:76:4C","sha256":"9E:13:1A:33:49:E6:F7:8B:29:45:3C:6B:D3:41:4A:A5:B6:45:DD:0A:0B:C4:36:10:64:FD:EF:64:9D:7A:C2:69"}}},"request":{"raw":"GET /downza/pc/v2023/images/icon-down3.png HTTP/1.1\r\nHost: res.njxzwh.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://res.njxzwh.com/downza/pc/v2023/css/detail.css?2026040412\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sat, 04 Apr 2026 14:26:42 GMT\r\nContent-Type: image/png\r\nContent-Length: 1101\r\nConnection: keep-alive\r\nServer: openresty\r\nx-reserved: amazon, aws and amazon web services are trademarks or registered trademarks of Amazon Technologies, Inc\r\nCloudServiceDiscount: CDN\r\nx-amz-request-id: 0000019D4822AE329747A58EA42D7E5F\r\nETag: \"53cc3fdc4ee1f6bcf026487033306c6c\"\r\nLast-Modified: Thu, 30 Oct 2025 09:32:39 GMT\r\nx-amz-id-2: 36AAAQAAEAABAAAQAAEAABAAAQAAEAABAAAaI=AAAAAAAAAAAAAAAAAAAAAAAAAA\r\nX-CCDN-Expires: 2311546\r\nvia: CHN-HEqinhuangdao-AREACUCC1-CACHE13[7],CHN-HEqinhuangdao-AREACUCC1-CACHE1[0,TCP_HIT,4],CHN-TJ-GLOBAL6-CACHE104[4],CHN-TJ-GLOBAL6-CACHE99[0,TCP_HIT,2]\r\nx-hcs-proxy-type: 1\r\nX-CCDN-CacheTTL: 2592000\r\nnginx-hit: 1\r\nAge: 280454\r\nAccept-Ranges: bytes\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: OPTION,GET\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1101,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 26 x 26, 8-bit/color RGBA, non-interlaced","md5":"53cc3fdc4ee1f6bcf026487033306c6c","sha1":"db4d19d0902dbbc2f8c0d97f83bb93986a8f8660","sha256":"e669089b250199f1fc73cb6f341be272d72148183dc509d09d5e2a72efb74687","sha512":"773afc3f1cbb4e5e5d1aec3c26871ba4ea778fa21fb9e9b040876f09a94b60eb6fbb2458925d7b6172167e4a19a1d526da9b3acced85ee68a5d17195f164e6d1","ssdeep":"","tlshash":"4f11f9d17136809ca5b451fb4aeac0d89e8320bce45328603446d3f20493fcc271dfb2","first_seen":"2023-07-03T04:23:05Z","last_seen":"2026-06-06T23:56:38.341777Z","times_seen":43,"resource_available":false,"data":null}},"time_used":723,"timings":{"blocked":469,"dns":0,"connect":0,"send":0,"wait":254,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zz.bdstatic.com/linksubmit/push.js","fqdn":"zz.bdstatic.com","domain":"bdstatic.com","tld":"com"},"ip":{"addr":"157.255.63.48","port":443,"asn":136958,"as":"China Unicom Guangdong IP network","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.downza.cn/soft/360885.html","date":"2026-04-04T14:26:42.129Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"baidu.com","organization":"Beijing Baidu Netcom Science Technology Co., Ltd"},"issuer":{"commonName":"GlobalSign RSA OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 09 Jul 2025 07:01:02 GMT","end":"Mon, 10 Aug 2026 07:01:01 GMT"},"fingerprint":{"sha1":"21:BF:66:0D:67:BE:7A:7F:49:48:05:30:F4:7F:09:F2:30:36:CA:63","sha256":"0D:82:2C:9A:90:5A:EF:E9:8F:37:12:C0:E0:26:30:EE:95:33:2C:45:5F:E7:74:5D:F0:8D:BC:79:F4:B0:A1:49"}}},"request":{"raw":"GET /linksubmit/push.js HTTP/1.1\r\nHost: zz.bdstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.downza.cn/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: JSP3/2.0.14\r\ndate: Sat, 04 Apr 2026 14:26:44 GMT\r\ncontent-type: application/x-javascript\r\nlast-modified: Sun, 07 Sep 2025 05:03:28 GMT\r\netag: \"68bd1220-134\"\r\ncache-control: max-age=86400\r\ncontent-encoding: br\r\nage: 26782\r\naccept-ranges: bytes\r\ntracecode: 00220739860427332106040415\r\nohc-global-saved-time: Sat, 04 Apr 2026 07:00:22 GMT\r\nohc-cache-hit: gz5un69 [2], bduncache85 [2]\r\nohc-response-time: 1 0 0 0 0 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":308,"size_decoded":0,"mime_type":"application/x-javascript","magic":"ASCII text, with very long lines (308), with no line terminators","md5":"f9fc52ab67f035b8baf5d558714cc94d","sha1":"37062a6fb1ef410d496137d44275738ae743c747","sha256":"c31f2003f1c93ac1e34b09f376d97a65da6e110bf451cf1e0e50a7946c5e7212","sha512":"ebb0415852fbb5b964094e2e55a28b90f701dff1977c8b98c6f24d65d09067dc0c417d01492ca28a4be6747816d7c0bfac87b73a33725aee047a5d2f7ab83182","ssdeep":"","tlshash":"11e0cde86054c01c0dcb107135bb324ce7771d675a645545c04d9445396cb1f8247fe9","first_seen":"2023-03-07T01:18:58Z","last_seen":"2026-06-15T02:27:31.015338Z","times_seen":23342,"resource_available":true,"data":null}},"time_used":2265,"timings":{"blocked":-1,"dns":1472,"connect":258,"send":0,"wait":267,"receive":0,"ssl":268},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"res.njxzwh.com/downza/pc/v2023/js/layer/theme/default/layer.css?v=3.1.1","fqdn":"res.njxzwh.com","domain":"njxzwh.com","tld":"com"},"ip":{"addr":"113.240.117.107","port":443,"asn":63835,"as":"No.293,Wanbao Avenue","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.downza.cn/soft/360885.html","date":"2026-04-04T14:26:42.138Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"res.njxzwh.com","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Thu, 19 Feb 2026 00:00:00 GMT","end":"Wed, 20 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"BF:F9:0C:9F:DA:C1:19:17:44:6C:7F:14:F0:08:EE:C7:99:CB:76:4C","sha256":"9E:13:1A:33:49:E6:F7:8B:29:45:3C:6B:D3:41:4A:A5:B6:45:DD:0A:0B:C4:36:10:64:FD:EF:64:9D:7A:C2:69"}}},"request":{"raw":"GET /downza/pc/v2023/js/layer/theme/default/layer.css?v=3.1.1 HTTP/1.1\r\nHost: res.njxzwh.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.downza.cn/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sat, 04 Apr 2026 14:26:42 GMT\r\nContent-Type: text/css\r\nContent-Length: 14367\r\nConnection: keep-alive\r\nServer: openresty\r\nx-reserved: amazon, aws and amazon web services are trademarks or registered trademarks of Amazon Technologies, Inc\r\nCloudServiceDiscount: CDN\r\nx-amz-request-id: 0000019D4822A7F997C9987D5C28F501\r\nETag: \"3d2e0d91c5c0b96abb8dbdc2234aba77\"\r\nLast-Modified: Thu, 30 Oct 2025 09:32:52 GMT\r\nx-amz-id-2: 36AAAQAAEAABAAAQAAEAABAAAQAAEAABAAAaI=AAAAAAAAAAAAAAAAAAAAAAAAAA\r\nX-CCDN-Expires: 65933\r\nvia: CHN-HNchangsha-AREACT1-CACHE6[3],CHN-HNchangsha-AREACT1-CACHE53[0,TCP_HIT,2],CHN-JSwuxi-GLOBAL2-CACHE92[3],CHN-JSwuxi-GLOBAL2-CACHE53[0,TCP_HIT,1]\r\nx-hcs-proxy-type: 1\r\nX-CCDN-CacheTTL: 86400\r\nnginx-hit: 1\r\nAge: 20467\r\nAccept-Ranges: bytes\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: OPTION,GET\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":14367,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (14367), with no line terminators","md5":"3d2e0d91c5c0b96abb8dbdc2234aba77","sha1":"9d55e153b30fd7414fada5718e20918e9c7f65e7","sha256":"e3144d018a6a24f733c6fc2a2ee603fb583f0030585e9d4b71bec471b78e31fc","sha512":"42bf3eff281998d088ce012b9a5910f72951c91715595572bb968fbfc5fa2b1cddacef3ca683a1734eb41114b302b6a4dad8b7432c5877b3563a080a2547ae05","ssdeep":"96:mp+Ntha8qNEp+wRY1vUPXiK6nMLPD2OtLzXyPHL/LztJDzyv2OQ7KGx1jyd2/SWz:1WmLr2OtSrzzt42OQ7KGx1jCWR2b+RcU","tlshash":"2e5221e144811299b0278721d6dc7eba32f88d43e5630daef257381f874c6dba2b6647","first_seen":"2023-04-05T06:05:22Z","last_seen":"2026-06-17T17:45:27.079347Z","times_seen":6590,"resource_available":false,"data":null}},"time_used":412,"timings":{"blocked":97,"dns":0,"connect":0,"send":0,"wait":314,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"res.njxzwh.com/downza/pc/v2023/images/download3.png","fqdn":"res.njxzwh.com","domain":"njxzwh.com","tld":"com"},"ip":{"addr":"113.240.117.107","port":443,"asn":63835,"as":"No.293,Wanbao Avenue","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.downza.cn/soft/360885.html","date":"2026-04-04T14:26:42.004Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"res.njxzwh.com","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Thu, 19 Feb 2026 00:00:00 GMT","end":"Wed, 20 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"BF:F9:0C:9F:DA:C1:19:17:44:6C:7F:14:F0:08:EE:C7:99:CB:76:4C","sha256":"9E:13:1A:33:49:E6:F7:8B:29:45:3C:6B:D3:41:4A:A5:B6:45:DD:0A:0B:C4:36:10:64:FD:EF:64:9D:7A:C2:69"}}},"request":{"raw":"GET /downza/pc/v2023/images/download3.png HTTP/1.1\r\nHost: res.njxzwh.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://res.njxzwh.com/downza/pc/v2023/css/detail.css?2026040412\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sat, 04 Apr 2026 14:26:42 GMT\r\nContent-Type: image/png\r\nContent-Length: 334\r\nConnection: keep-alive\r\nServer: openresty\r\nx-reserved: amazon, aws and amazon web services are trademarks or registered trademarks of Amazon Technologies, Inc\r\nCloudServiceDiscount: CDN\r\nx-amz-request-id: 0000019D4822A7AC97C881CA9DF4C7D8\r\nETag: \"926063fafb47ff0aceb1956589d4b55d\"\r\nLast-Modified: Thu, 30 Oct 2025 09:32:38 GMT\r\nx-amz-id-2: 36AAAQAAEAABAAAQAAEAABAAAQAAEAABAAAaI=AAAAAAAAAAAAAAAAAAAAAAAAAA\r\nX-CCDN-Expires: 2311028\r\nvia: CHN-HNchangsha-AREACT1-CACHE27[11],CHN-HNchangsha-AREACT1-CACHE18[0,TCP_HIT,2],CHN-JSwuxi-GLOBAL2-CACHE42[10],CHN-JSwuxi-GLOBAL2-CACHE98[0,TCP_HIT,6]\r\nx-hcs-proxy-type: 1\r\nX-CCDN-CacheTTL: 2592000\r\nnginx-hit: 1\r\nAge: 280972\r\nAccept-Ranges: bytes\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: OPTION,GET\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":334,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 20 x 20, 8-bit/color RGBA, non-interlaced","md5":"926063fafb47ff0aceb1956589d4b55d","sha1":"ebb40f618282e27d2917f68ee750d181a2504073","sha256":"6dcd81e312384b956320074756821f7d6f64dab0afa8e0db87157a49a9a71a0b","sha512":"bb9ce1b87e9f8e357299666b88728a2ad8f67afbdde5bbac54cdd4e01a6ea5daae95e9444037cd6ba678cbc45b726f5601fce6ecb5f2babad61b2eca1956015c","ssdeep":"","tlshash":"f1e02de177802c887bc0632633f8e043ad0a48ec6983130b4819d0770ae20846be6bf3","first_seen":"2025-06-15T16:39:48.287999Z","last_seen":"2026-06-06T23:56:38.317038Z","times_seen":39,"resource_available":false,"data":null}},"time_used":1027,"timings":{"blocked":72,"dns":0,"connect":0,"send":0,"wait":955,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"res.njxzwh.com/downza/pc/v2023/images/download2.png","fqdn":"res.njxzwh.com","domain":"njxzwh.com","tld":"com"},"ip":{"addr":"113.240.117.107","port":443,"asn":63835,"as":"No.293,Wanbao Avenue","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.downza.cn/soft/360885.html","date":"2026-04-04T14:26:42.088Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"res.njxzwh.com","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Thu, 19 Feb 2026 00:00:00 GMT","end":"Wed, 20 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"BF:F9:0C:9F:DA:C1:19:17:44:6C:7F:14:F0:08:EE:C7:99:CB:76:4C","sha256":"9E:13:1A:33:49:E6:F7:8B:29:45:3C:6B:D3:41:4A:A5:B6:45:DD:0A:0B:C4:36:10:64:FD:EF:64:9D:7A:C2:69"}}},"request":{"raw":"GET /downza/pc/v2023/images/download2.png HTTP/1.1\r\nHost: res.njxzwh.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://res.njxzwh.com/downza/pc/v2023/css/detail.css?2026040412\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sat, 04 Apr 2026 14:26:43 GMT\r\nContent-Type: image/png\r\nContent-Length: 266\r\nConnection: keep-alive\r\nServer: openresty\r\nx-reserved: amazon, aws and amazon web services are trademarks or registered trademarks of Amazon Technologies, Inc\r\nCloudServiceDiscount: CDN\r\nx-amz-request-id: 0000019D4822A83897485E85F81B8B8B\r\nETag: \"5ee8bc4f8c2c23625e69e7e3868030c6\"\r\nLast-Modified: Thu, 30 Oct 2025 09:32:38 GMT\r\nx-amz-id-2: 36AAAQAAEAABAAAQAAEAABAAAQAAEAABAAAaI=AAAAAAAAAAAAAAAAAAAAAAAAAA\r\nX-CCDN-Expires: 2311027\r\nvia: CHN-HNchangsha-AREACT1-CACHE20[3],CHN-HNchangsha-AREACT1-CACHE74[0,TCP_HIT,1],CHN-JSwuxi-GLOBAL2-CACHE10[4],CHN-JSwuxi-GLOBAL2-CACHE74[0,TCP_HIT,1]\r\nx-hcs-proxy-type: 1\r\nX-CCDN-CacheTTL: 2592000\r\nnginx-hit: 1\r\nAge: 280973\r\nAccept-Ranges: bytes\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: OPTION,GET\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":266,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 15 x 15, 8-bit/color RGBA, non-interlaced","md5":"5ee8bc4f8c2c23625e69e7e3868030c6","sha1":"06d6bb74603c44b984f9d06e570831c17ad8ca7e","sha256":"598caf6948a2ca183c6dc80e3270ecc138577a3ac31bd04de7614b988e18715c","sha512":"f24d1ddbd877958bbe0e5794d7e01e911de0856f7e207e7c07a0b9eabded793d79c35027eed9b989c985ac7e5bc073bdc90b7b72002aaa18c359c333a205d761","ssdeep":"","tlshash":"61d0ebc3c92c8820e7c96daf6b282a06e8a151ff88302034a8ce202ec068028e284503","first_seen":"2025-06-15T16:39:48.151769Z","last_seen":"2026-06-06T23:56:38.260783Z","times_seen":39,"resource_available":false,"data":null}},"time_used":1498,"timings":{"blocked":462,"dns":0,"connect":0,"send":0,"wait":1036,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s.union.360.cn/proxy.html","fqdn":"s.union.360.cn","domain":"360.cn","tld":"cn"},"ip":{"addr":"123.125.81.172","port":443,"asn":4808,"as":"China Unicom Beijing Province Network","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://www.downza.cn/soft/360885.html","date":"2026-04-04T14:26:43.585Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"s.union.360.cn","organization":""},"issuer":{"commonName":"WoTrus DV Server CA  [Run by the Issuer]","organization":"WoTrus CA Limited"},"validity":{"start":"Fri, 13 Mar 2026 00:00:00 GMT","end":"Sun, 27 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"40:79:9F:7D:10:DE:47:ED:56:2A:F4:36:4D:75:86:7C:4A:D0:E8:8A","sha256":"0C:9F:90:EF:DD:A1:84:EA:79:D5:D0:7B:A3:D3:62:F7:CD:1F:5D:90:3B:9A:5E:0E:C1:E1:49:BD:F0:5F:94:90"}}},"request":{"raw":"GET /proxy.html HTTP/1.1\r\nHost: s.union.360.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.downza.cn/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: openresty/1.9.15.1\r\nDate: Sat, 04 Apr 2026 14:26:44 GMT\r\nContent-Type: text/html\r\nLast-Modified: Thu, 04 Sep 2025 08:11:51 GMT\r\nTransfer-Encoding: chunked\r\nConnection: close\r\nVary: Accept-Encoding\r\nETag: W/\"68b949c7-7c7\"\r\nP3P: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty:1.9.15.1","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1991,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (1991), with no line terminators","md5":"d89cb9c53d3744759aa660ab5c0a6866","sha1":"fec1278a3b957ee56c7a68ebb0a561e070bf3d75","sha256":"0ff72f560db1021a6ebfb448ff1f0e2577e84cdcc994939da93557f6244881bc","sha512":"78c30468fc3653a08b3beb418be72eb86a22a9175da798722bb3477f4c6a49a717d60df75d536164c44375a5d4746f262175f56da435089f0f91a7245696c0fc","ssdeep":"","tlshash":"2241b8ed3249706900664e512aef370e723812366847cca03e66f9f27ca974f8713dd9","first_seen":"2023-06-16T09:54:32Z","last_seen":"2026-06-06T23:56:38.2915Z","times_seen":972,"resource_available":false,"data":null}},"time_used":1021,"timings":{"blocked":-1,"dns":1,"connect":252,"send":0,"wait":252,"receive":0,"ssl":516},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"local.info.g9hc4.cn:54360/?callback=uuidjsonpcb2020\u0026t=1775312804699","fqdn":"local.info.g9hc4.cn","domain":"g9hc4.cn","tld":"cn"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://s.union.360.cn/proxy.html","date":"2026-04-04T14:26:44.709Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /?callback=uuidjsonpcb2020\u0026t=1775312804699 HTTP/1.1\r\nHost: local.info.g9hc4.cn:54360\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://s.union.360.cn/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-18T01:31:21.233037Z","times_seen":16497762,"resource_available":true,"data":null}},"time_used":300,"timings":{"blocked":0,"dns":300,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"open.thunderurl.com/thunder-link.js","fqdn":"open.thunderurl.com","domain":"thunderurl.com","tld":"com"},"ip":{"addr":"218.12.76.168","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.downza.cn/soft/360885.html","date":"2026-04-04T14:26:27.893Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.thunderurl.com","organization":""},"issuer":{"commonName":"Encryption Everywhere DV TLS CA - G2","organization":"DigiCert Inc"},"validity":{"start":"Tue, 30 Dec 2025 00:00:00 GMT","end":"Sat, 30 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"D8:95:0B:B8:A3:A8:B4:22:36:26:D9:8D:20:1F:F7:F4:FC:0F:30:FC","sha256":"EC:32:FE:AC:C8:6D:D3:0B:01:DF:F0:60:87:A2:F5:F1:91:75:FD:FF:98:24:55:4E:E5:60:F5:F0:9E:56:85:F6"}}},"request":{"raw":"GET /thunder-link.js HTTP/1.1\r\nHost: open.thunderurl.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.downza.cn/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 04 Apr 2026 14:26:30 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 111759\r\nserver: openresty\r\nlast-modified: Wed, 18 Mar 2026 06:59:52 GMT\r\nexpires: 7d\r\nvary: Accept-Encoding, Accept-Encoding, User-Agent\r\ncontent-encoding: gzip\r\nx-ccdn-expires: 86400\r\nvia: CHN-HEshijiazhuang-AREACUCC1-CACHE26[2],CHN-HEshijiazhuang-AREACUCC1-CACHE36[0,TCP_HIT,0],CHN-TJ-GLOBAL6-CACHE66[8],CHN-TJ-GLOBAL6-CACHE56[0,TCP_HIT,3]\r\nx-hcs-proxy-type: 1\r\nx-ccdn-cachettl: 86400\r\nnginx-hit: 1\r\nage: 19856\r\ncache-control: max-age=2592000\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":356379,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65480)","md5":"366976acad16241ce359322cea8d383e","sha1":"be007f54dd8164cfe0b3d69a7a8168014647a89f","sha256":"2f61ea9513085af46cebce1fd02111cf41148953fe58ba0822b5160818fdfcf4","sha512":"b1899080a2c015d60e60725760faa488a3c677a9fe9390720e62d4bf5061eb1d3df64ce77fd3f9b1ac9c6bfb43000f48dafb7bbcbb08ef53c5a8c22e941b614d","ssdeep":"3072:r+AXJCaTlvK3boCD0stnW+/vnu0srcRwEZ2CVGv6bNwRuLsl6Ab9rCE4c/VhI:rnBbssQvnGAIpb9rCE4T","tlshash":"78747e8fb246b1664baa2ef6c4bf590ff176111428488c60f269d8d5ac7cb9c411bf7c","first_seen":"2026-03-19T17:00:24.439046Z","last_seen":"2026-06-06T23:56:38.324798Z","times_seen":87,"resource_available":true,"data":null}},"time_used":3533,"timings":{"blocked":-1,"dns":1822,"connect":269,"send":0,"wait":537,"receive":499,"ssl":406},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img3.downza.cn/xueyuan/202602/114621-698d4d0db42f0.png","fqdn":"img3.downza.cn","domain":"downza.cn","tld":"cn"},"ip":{"addr":"113.240.117.108","port":443,"asn":63835,"as":"No.293,Wanbao Avenue","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.downza.cn/soft/360885.html","date":"2026-04-04T14:26:27.932Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img3.downza.cn","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Mon, 02 Mar 2026 00:00:00 GMT","end":"Sun, 31 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"55:2F:FB:08:6F:B4:C5:C2:09:87:88:75:54:0F:B8:93:BD:40:45:BC","sha256":"2C:BA:99:7E:59:AC:83:1E:DE:33:00:2E:51:95:4B:C4:18:0F:62:0D:8D:C4:BD:57:E4:43:A7:70:9C:65:8B:7D"}}},"request":{"raw":"GET /xueyuan/202602/114621-698d4d0db42f0.png HTTP/1.1\r\nHost: img3.downza.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.downza.cn/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sat, 04 Apr 2026 14:26:43 GMT\r\nContent-Type: image/png\r\nContent-Length: 45140\r\nConnection: keep-alive\r\nServer: openresty\r\nx-reserved: amazon, aws and amazon web services are trademarks or registered trademarks of Amazon Technologies, Inc\r\nCloudServiceDiscount: CDN\r\nx-amz-request-id: 0000019C4FF4FE3397C9945A5E1F1C98\r\nETag: \"4eb0d73471bcb1f268457e40a42a7d3a\"\r\nLast-Modified: Thu, 12 Feb 2026 03:46:21 GMT\r\nx-amz-id-2: 36AAAQAAEAABAAAQAAEAABAAAQAAEAABAAAaI=AAAAAAAAAAAAAAAAAAAAAAAAAA\r\nvia: CHN-HNchangsha-AREACT1-CACHE18[5],CHN-HNchangsha-AREACT1-CACHE1[0,TCP_HIT,2],CHN-JSwuxi-GLOBAL2-CACHE59[9],CHN-JSwuxi-GLOBAL2-CACHE116[0,TCP_HIT,2]\r\nx-hcs-proxy-type: 1\r\nX-CCDN-CacheTTL: 31536000\r\nnginx-hit: 1\r\nAge: 4350609\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":45140,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1276 x 764, 8-bit/color RGB, non-interlaced","md5":"4eb0d73471bcb1f268457e40a42a7d3a","sha1":"d48a8749a133f15ff2b18f2594ce3f46ca0baf74","sha256":"8a252b42e1309422b973fad5148ed6980c21be091f9e6bc867fb24971975b4e8","sha512":"ac007966565c3da1951de94c2481fd5e07679604761be14db4d48ff7ad45b94834e89d7ee820aef4ab17316646120c8390cdcc42aab045a6c77b0b82f5fd507a","ssdeep":"768:PJn87UWJK7JqAV4tUWaon4yOsbHTDqHcu7in8L+L+LF:x87FmXWaEzqHcU","tlshash":"2d13a102dba6683fb541519abaa7388791314d373455de2a0fcba56e2b03fb0fcb0d51","first_seen":"2026-03-22T21:57:25.411918Z","last_seen":"2026-05-30T20:53:33.808317Z","times_seen":15,"resource_available":false,"data":null}},"time_used":16396,"timings":{"blocked":15137,"dns":0,"connect":0,"send":0,"wait":1077,"receive":182,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img3.downza.cn/download/202108/112516-6111f19c5e780.jpg?x-image-process=style/50-50","fqdn":"img3.downza.cn","domain":"downza.cn","tld":"cn"},"ip":{"addr":"113.240.117.108","port":443,"asn":63835,"as":"No.293,Wanbao Avenue","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.downza.cn/soft/360885.html","date":"2026-04-04T14:26:27.939Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img3.downza.cn","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Mon, 02 Mar 2026 00:00:00 GMT","end":"Sun, 31 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"55:2F:FB:08:6F:B4:C5:C2:09:87:88:75:54:0F:B8:93:BD:40:45:BC","sha256":"2C:BA:99:7E:59:AC:83:1E:DE:33:00:2E:51:95:4B:C4:18:0F:62:0D:8D:C4:BD:57:E4:43:A7:70:9C:65:8B:7D"}}},"request":{"raw":"GET /download/202108/112516-6111f19c5e780.jpg?x-image-process=style/50-50 HTTP/1.1\r\nHost: img3.downza.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sat, 04 Apr 2026 14:26:45 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 1630\r\nConnection: keep-alive\r\nServer: openresty\r\nx-reserved: amazon, aws and amazon web services are trademarks or registered trademarks of Amazon Technologies, Inc\r\nCloudServiceDiscount: CDN\r\nx-amz-id-2: 36AAAQAAEAABAAAQAAEAABAAAQAAEAABAAAaE=AAAAAAAAAAAAAAAAAAAAAAAAAA\r\nx-amz-request-id: 0000019C01EB24079056951D3E0B51F5\r\nETag: 911a10b72a5938035a2e1866ede236ab\r\nX-Oef-Request-Id: 38343039333062303939393a3233372e3132393a\r\nX-Request-Id: 38343039333062303939393a3233372e3132393a\r\nX-Transcode-Length: 2981\r\nvia: CHN-HNchangsha-AREACT1-CACHE14[9],CHN-HNchangsha-AREACT1-CACHE34[0,TCP_HIT,2],CHN-JSwuxi-GLOBAL2-CACHE48[4],CHN-JSwuxi-GLOBAL2-CACHE34[0,TCP_HIT,3]\r\nx-hcs-proxy-type: 1\r\nX-CCDN-CacheTTL: 31536000\r\nnginx-hit: 1\r\nAge: 4597713\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":1630,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=3], baseline, precision 8, 50x50, components 3","md5":"e7243411c1a532bd81c782f4f4479cdd","sha1":"4c2d265bb4a4ef7666b78d00c5a1d61b659f7343","sha256":"193f63fef56b5b7968ed9f2442ded03395085a0bad896c86d1ead0b85f10300b","sha512":"c103d04b77c83365247200219b1ab18c8cecd8bbc9c4c4e3e445548452ee2aa4c1e3b2473eac2a382f87687517a41ebc075cd1ea0e0ffec97c4e333857f78065","ssdeep":"","tlshash":"1031c80fdb737c02dce6e9b415f9e20a4b419d83d703579b35952638bcd20822f8a25c","first_seen":"2025-07-22T11:13:12.241608Z","last_seen":"2026-04-04T14:27:36.484045Z","times_seen":2,"resource_available":false,"data":null}},"time_used":17537,"timings":{"blocked":16524,"dns":0,"connect":0,"send":0,"wait":1013,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"res.njxzwh.com/w2/js/app/tongji.js","fqdn":"res.njxzwh.com","domain":"njxzwh.com","tld":"com"},"ip":{"addr":"113.240.117.107","port":443,"asn":63835,"as":"No.293,Wanbao Avenue","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.downza.cn/soft/360885.html","date":"2026-04-04T14:26:28.196Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"res.njxzwh.com","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Thu, 19 Feb 2026 00:00:00 GMT","end":"Wed, 20 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"BF:F9:0C:9F:DA:C1:19:17:44:6C:7F:14:F0:08:EE:C7:99:CB:76:4C","sha256":"9E:13:1A:33:49:E6:F7:8B:29:45:3C:6B:D3:41:4A:A5:B6:45:DD:0A:0B:C4:36:10:64:FD:EF:64:9D:7A:C2:69"}}},"request":{"raw":"GET /w2/js/app/tongji.js HTTP/1.1\r\nHost: res.njxzwh.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.downza.cn/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sat, 04 Apr 2026 14:26:29 GMT\r\nContent-Type: text/javascript\r\nContent-Length: 1108\r\nConnection: keep-alive\r\nServer: openresty\r\nx-reserved: amazon, aws and amazon web services are trademarks or registered trademarks of Amazon Technologies, Inc\r\nCloudServiceDiscount: CDN\r\nx-amz-request-id: 0000019D4822A8E1974552B94110EC6F\r\nETag: \"98e4c22ce59e9effa9bde2788477fceb\"\r\nLast-Modified: Tue, 02 Jan 2024 02:36:48 GMT\r\nx-amz-tagging-count: 0\r\nx-amz-id-2: 36AAAQAAEAABAAAQAAEAABAAAQAAEAABAAAaI=AAAAAAAAAAAAAAAAAAAAAAAAAA\r\nX-CCDN-Expires: 65939\r\nvia: CHN-HNchangsha-AREACT1-CACHE27[5],CHN-HNchangsha-AREACT1-CACHE49[0,TCP_HIT,4],CHN-JSwuxi-GLOBAL2-CACHE109[3],CHN-JSwuxi-GLOBAL2-CACHE49[0,TCP_HIT,1]\r\nx-hcs-proxy-type: 1\r\nX-CCDN-CacheTTL: 86400\r\nnginx-hit: 1\r\nAge: 20461\r\nAccept-Ranges: bytes\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: OPTION,GET\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":1108,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"98e4c22ce59e9effa9bde2788477fceb","sha1":"ee3517ea667977f21e09e8355591c46d5e7cad96","sha256":"5515312c90eca191e9c7ba662587459b5f746dc4372e6237416be4f63a75a4b6","sha512":"b87d693fb7b6f493ac7763f870f490325f3744aef1f41bef7f45ee86e27fa36d846fd6270f5fcc21adcf94f6a92af0b0716e048d9737049e325fd0c4ae2718d1","ssdeep":"","tlshash":"b611309b2c7b6834176c08f650bdf508b2b8101ca486d603a8acd9050ab0fed1c0d998","first_seen":"2025-02-11T04:22:13.827294Z","last_seen":"2026-06-06T23:56:38.295545Z","times_seen":63,"resource_available":true,"data":null}},"time_used":1935,"timings":{"blocked":-1,"dns":908,"connect":268,"send":0,"wait":272,"receive":0,"ssl":483},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"res.njxzwh.com/downza/pc/v2023/js/public.js?2026040412","fqdn":"res.njxzwh.com","domain":"njxzwh.com","tld":"com"},"ip":{"addr":"113.240.117.107","port":443,"asn":63835,"as":"No.293,Wanbao Avenue","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.downza.cn/soft/360885.html","date":"2026-04-04T14:26:28.197Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"res.njxzwh.com","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Thu, 19 Feb 2026 00:00:00 GMT","end":"Wed, 20 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"BF:F9:0C:9F:DA:C1:19:17:44:6C:7F:14:F0:08:EE:C7:99:CB:76:4C","sha256":"9E:13:1A:33:49:E6:F7:8B:29:45:3C:6B:D3:41:4A:A5:B6:45:DD:0A:0B:C4:36:10:64:FD:EF:64:9D:7A:C2:69"}}},"request":{"raw":"GET /downza/pc/v2023/js/public.js?2026040412 HTTP/1.1\r\nHost: res.njxzwh.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.downza.cn/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sat, 04 Apr 2026 14:26:30 GMT\r\nContent-Type: text/javascript\r\nContent-Length: 1253\r\nConnection: keep-alive\r\nServer: openresty\r\nx-reserved: amazon, aws and amazon web services are trademarks or registered trademarks of Amazon Technologies, Inc\r\nCloudServiceDiscount: CDN\r\nx-amz-request-id: 0000019D56A5D0D49746EA5914C9EF09\r\nETag: \"eda88714ebfd43d4e934a0a8cec072ac\"\r\nLast-Modified: Thu, 30 Oct 2025 09:32:43 GMT\r\nx-amz-id-2: 36AAAQAAEAABAAAQAAEAABAAAQAAEAABAAAaI=AAAAAAAAAAAAAAAAAAAAAAAAAA\r\nX-CCDN-Expires: 48838\r\nvia: CHN-HNchangsha-AREACT1-CACHE27[4],CHN-HNchangsha-AREACT1-CACHE3[0,TCP_HIT,3],CHN-JSwuxi-GLOBAL2-CACHE48[8],CHN-JSwuxi-GLOBAL2-CACHE3[0,TCP_HIT,3]\r\nx-hcs-proxy-type: 1\r\nX-CCDN-CacheTTL: 86400\r\nnginx-hit: 1\r\nAge: 37562\r\nAccept-Ranges: bytes\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: OPTION,GET\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1253,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with CRLF line terminators","md5":"eda88714ebfd43d4e934a0a8cec072ac","sha1":"699b3f74fb9d75b838c54ae9327a06638714597b","sha256":"5b431ed61701ed4718f82518a545c5530bd00e6150d9bf2b2b57874362218800","sha512":"2349334d1427db374cb46e85c6794a31fc4e9560a70800206e4b9b501ce5e7f73ca61cb235ad841dd5d8a41cfabf089d5bb188be8e5af6355ab3ea76f14bfde8","ssdeep":"","tlshash":"8921c458e8a20295897fb3b1873f5204ff7a2837510347083deea4c40f70929a392eec","first_seen":"2025-02-11T04:22:13.832274Z","last_seen":"2026-06-06T23:56:38.320935Z","times_seen":64,"resource_available":true,"data":null}},"time_used":2203,"timings":{"blocked":1931,"dns":0,"connect":0,"send":0,"wait":272,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img3.downza.cn/download/202108/115411-6111f863bddfb.jpg?x-image-process=style/50-50","fqdn":"img3.downza.cn","domain":"downza.cn","tld":"cn"},"ip":{"addr":"113.240.117.108","port":443,"asn":63835,"as":"No.293,Wanbao Avenue","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.downza.cn/soft/360885.html","date":"2026-04-04T14:26:27.939Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img3.downza.cn","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Mon, 02 Mar 2026 00:00:00 GMT","end":"Sun, 31 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"55:2F:FB:08:6F:B4:C5:C2:09:87:88:75:54:0F:B8:93:BD:40:45:BC","sha256":"2C:BA:99:7E:59:AC:83:1E:DE:33:00:2E:51:95:4B:C4:18:0F:62:0D:8D:C4:BD:57:E4:43:A7:70:9C:65:8B:7D"}}},"request":{"raw":"GET /download/202108/115411-6111f863bddfb.jpg?x-image-process=style/50-50 HTTP/1.1\r\nHost: img3.downza.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sat, 04 Apr 2026 14:26:45 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 1816\r\nConnection: keep-alive\r\nServer: openresty\r\nx-reserved: amazon, aws and amazon web services are trademarks or registered trademarks of Amazon Technologies, Inc\r\nCloudServiceDiscount: CDN\r\nx-amz-id-2: 36AAAQAAEAABAAAQAAEAABAAAQAAEAABAAAaE=AAAAAAAAAAAAAAAAAAAAAAAAAA\r\nx-amz-request-id: 0000019BDBBCB3179019057B57C9BB15\r\nETag: c8af28f60f1c98365d6b9828c50e9fd0\r\nX-Oef-Request-Id: 39643761393464373234363a3233372e3233363a\r\nX-Request-Id: 39643761393464373234363a3233372e3233363a\r\nX-Transcode-Length: 3913\r\nvia: CHN-HNchangsha-AREACT1-CACHE18[8],CHN-HNchangsha-AREACT1-CACHE68[0,TCP_HIT,2],CHN-JSwuxi-GLOBAL2-CACHE83[8],CHN-JSwuxi-GLOBAL2-CACHE68[0,TCP_HIT,2]\r\nx-hcs-proxy-type: 1\r\nX-CCDN-CacheTTL: 31536000\r\nnginx-hit: 1\r\nAge: 1459656\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":1816,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=5], baseline, precision 8, 50x50, components 3","md5":"d95e2af1b442ac0ce1e03d83273c12e9","sha1":"f4199765956c7cf660ca0dec953713355c791d59","sha256":"8793915d4e2de2d2831c3c9300fe528dde678a5f03a990452125cc8b4f56af1b","sha512":"0f101869d9d77c5d9f9ce2cf29d7a41566bd41efad5798d701853e32a8c3a29e52f23ab4c408868d48e6f141f918b410a72bae9cc2725f68fb162e59090b9c89","ssdeep":"","tlshash":"7d31fa26ab00fd06ded2077ec801e675157a6a05d4a31bab34e310aebd456f2d9263b1","first_seen":"2025-07-22T11:13:12.100457Z","last_seen":"2026-04-04T14:27:36.487701Z","times_seen":2,"resource_available":false,"data":null}},"time_used":17542,"timings":{"blocked":16654,"dns":0,"connect":0,"send":0,"wait":888,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img3.downza.cn/softbaike/202407/112801-668cae41296b2.jpg","fqdn":"img3.downza.cn","domain":"downza.cn","tld":"cn"},"ip":{"addr":"113.240.117.108","port":443,"asn":63835,"as":"No.293,Wanbao Avenue","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.downza.cn/soft/360885.html","date":"2026-04-04T14:26:28.024Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img3.downza.cn","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Mon, 02 Mar 2026 00:00:00 GMT","end":"Sun, 31 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"55:2F:FB:08:6F:B4:C5:C2:09:87:88:75:54:0F:B8:93:BD:40:45:BC","sha256":"2C:BA:99:7E:59:AC:83:1E:DE:33:00:2E:51:95:4B:C4:18:0F:62:0D:8D:C4:BD:57:E4:43:A7:70:9C:65:8B:7D"}}},"request":{"raw":"GET /softbaike/202407/112801-668cae41296b2.jpg HTTP/1.1\r\nHost: img3.downza.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.downza.cn/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sat, 04 Apr 2026 14:26:45 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 986\r\nConnection: keep-alive\r\nServer: openresty\r\nx-reserved: amazon, aws and amazon web services are trademarks or registered trademarks of Amazon Technologies, Inc\r\nCloudServiceDiscount: CDN\r\nx-amz-request-id: 00000194534F60A09007E93D88D12424\r\nETag: \"c4ac4814e4e1e506c63bddfbbebc14c8\"\r\nLast-Modified: Tue, 09 Jul 2024 03:28:01 GMT\r\nx-amz-id-2: 32AAAQAAEAABAAAQAAEAABAAAQAAEAABCSAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA\r\nvia: CHN-HNchangsha-AREACT1-CACHE57[7],CHN-HNchangsha-AREACT1-CACHE68[0,TCP_HIT,5],CHN-JSwuxi-GLOBAL2-CACHE106[25],CHN-JSwuxi-GLOBAL2-CACHE104[0,TCP_HIT,20],CHN-SH-GLOBAL4-CACHE143[21],CHN-SH-GLOBAL4-CACHE20[0,TCP_HIT,19]\r\nx-hcs-proxy-type: 1\r\nX-CCDN-CacheTTL: 31536000\r\nnginx-hit: 1\r\nAge: 4568797\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":986,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 72 x 72, 8-bit colormap, non-interlaced","md5":"c4ac4814e4e1e506c63bddfbbebc14c8","sha1":"16f528ee8f46ec2b8f760149c023e45f2cc2697a","sha256":"a729f19798782a3903c1f4d8b779d7764bcd4296a9ea533869adf9dda41229df","sha512":"7feca19276672d43c23083c1e436fe20419dc11e8b2057034ce91f15fb4026dbf458780db296e3ba9caa232d13966de0f8265edfc0114a837f70bfa6ec4f94e6","ssdeep":"","tlshash":"1e115c86b7c41baca6c11523468b0b29da67c4384011b116efef78ea4e527de70dae4c","first_seen":"2025-06-15T16:39:48.266456Z","last_seen":"2026-06-06T23:56:38.285871Z","times_seen":27,"resource_available":false,"data":null}},"time_used":17176,"timings":{"blocked":16885,"dns":0,"connect":0,"send":0,"wait":291,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"127.0.0.1:28317/get_thunder_version/?thunderPid=11111\u0026sign=f1bd42598d63f741eb48dbcaa8704e5a","fqdn":"127.0.0.1","domain":"127.0.0.1","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.downza.cn/soft/360885.html","date":"2026-04-04T14:26:41.953Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /get_thunder_version/?thunderPid=11111\u0026sign=f1bd42598d63f741eb48dbcaa8704e5a HTTP/1.1\r\nHost: 127.0.0.1:28317\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/javascript, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded\r\nOrigin: https://www.downza.cn\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-18T01:31:21.233037Z","times_seen":16497762,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bigdata.downza.com/1.gif?ak=6bd0\u0026aId=4afb246e-12e6-418d-1e45-d61b637bba56\u0026su=https%3A%2F%2Fwww.downza.cn%2Fsoft%2F360885.html\u0026da=www.downza.cn\u0026tt=%E4%BC%98%E8%B7%AF%E6%95%99%E8%82%B2%E4%B8%8B%E8%BD%BD_%E4%BC%98%E8%B7%AF%E6%95%99%E8%82%B2%E7%94%B5%E8%84%91%E7%89%88%E4%B8%8B%E8%BD%BD%5B%E5%AE%98%E6%96%B9%E7%89%88%5D-%E4%B8%8B%E8%BD%BD%E4%B9%8B%E5%AE%B6\u0026r=\u0026pt=down\u0026fl=1444-1445-1447\u0026ds=1280x1024\u0026cd=24\u0026lt=-1775312785565\u0026ln=en-US\u0026ce=1\u0026je=0\u0026random=0.4165425497547184","fqdn":"bigdata.downza.com","domain":"downza.com","tld":"com"},"ip":{"addr":"122.112.196.83","port":443,"asn":55990,"as":"Huawei Cloud Service data center","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.downza.cn/soft/360885.html","date":"2026-04-04T14:26:42.106Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"bigdata.downza.com","organization":""},"issuer":{"commonName":"ZeroSSL ECC Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Fri, 13 Mar 2026 00:00:00 GMT","end":"Thu, 11 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C0:FA:D0:1D:93:6D:CF:29:23:A2:0B:27:B7:67:A4:43:EA:B2:E5:58","sha256":"48:A5:CE:F7:2C:FD:EE:67:23:37:9C:A7:E9:0B:C3:6B:F7:7D:42:1D:48:DB:5C:08:33:D0:78:F9:82:C7:43:C9"}}},"request":{"raw":"GET /1.gif?ak=6bd0\u0026aId=4afb246e-12e6-418d-1e45-d61b637bba56\u0026su=https%3A%2F%2Fwww.downza.cn%2Fsoft%2F360885.html\u0026da=www.downza.cn\u0026tt=%E4%BC%98%E8%B7%AF%E6%95%99%E8%82%B2%E4%B8%8B%E8%BD%BD_%E4%BC%98%E8%B7%AF%E6%95%99%E8%82%B2%E7%94%B5%E8%84%91%E7%89%88%E4%B8%8B%E8%BD%BD%5B%E5%AE%98%E6%96%B9%E7%89%88%5D-%E4%B8%8B%E8%BD%BD%E4%B9%8B%E5%AE%B6\u0026r=\u0026pt=down\u0026fl=1444-1445-1447\u0026ds=1280x1024\u0026cd=24\u0026lt=-1775312785565\u0026ln=en-US\u0026ce=1\u0026je=0\u0026random=0.4165425497547184 HTTP/1.1\r\nHost: bigdata.downza.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.downza.cn/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 \r\nServer: nginx\r\nDate: Sat, 04 Apr 2026 14:26:42 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-18T01:31:21.233037Z","times_seen":16497762,"resource_available":true,"data":null}},"time_used":311,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":311,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s.union.360.cn/s.gif?lts=1\u0026et=100\u0026si=336149\u0026ldt=1\u0026vis=visible\u0026prv=0\u0026guid=125334355.2574638577695200256.1775312803001.0146\u0026huid=11e%252Fod9j1VrYeKZExueyJC7K9maoWO4MwVhK4DbpiUvHA%253D\u0026t=1775312803565\u0026v=3.2.0\u0026_mtd=im","fqdn":"s.union.360.cn","domain":"360.cn","tld":"cn"},"ip":{"addr":"123.125.81.172","port":443,"asn":4808,"as":"China Unicom Beijing Province Network","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.downza.cn/soft/360885.html","date":"2026-04-04T14:26:43.572Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"s.union.360.cn","organization":""},"issuer":{"commonName":"WoTrus DV Server CA  [Run by the Issuer]","organization":"WoTrus CA Limited"},"validity":{"start":"Fri, 13 Mar 2026 00:00:00 GMT","end":"Sun, 27 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"40:79:9F:7D:10:DE:47:ED:56:2A:F4:36:4D:75:86:7C:4A:D0:E8:8A","sha256":"0C:9F:90:EF:DD:A1:84:EA:79:D5:D0:7B:A3:D3:62:F7:CD:1F:5D:90:3B:9A:5E:0E:C1:E1:49:BD:F0:5F:94:90"}}},"request":{"raw":"GET /s.gif?lts=1\u0026et=100\u0026si=336149\u0026ldt=1\u0026vis=visible\u0026prv=0\u0026guid=125334355.2574638577695200256.1775312803001.0146\u0026huid=11e%252Fod9j1VrYeKZExueyJC7K9maoWO4MwVhK4DbpiUvHA%253D\u0026t=1775312803565\u0026v=3.2.0\u0026_mtd=im HTTP/1.1\r\nHost: s.union.360.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.downza.cn/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: openresty/1.9.15.1\r\nDate: Sat, 04 Apr 2026 14:26:43 GMT\r\nContent-Type: image/gif\r\nContent-Length: 43\r\nLast-Modified: Mon, 28 Sep 1970 06:00:00 GMT\r\nConnection: close\r\nExpires: Fri, 01 Jan 1980 00:00:00 GMT\r\nPragma: no-cache\r\nCache-Control: private, max-age=0, no-cache\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"OpenResty:1.9.15.1","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"ad4b0f606e0f8465bc4c4c170b37e1a3","sha1":"50b30fd5f87c85fe5cba2635cb83316ca71250d7","sha256":"cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda","sha512":"ebfe0c0df4bcc167d5cb6ebdd379f9083df62bef63a23818e1c6adf0f64b65467ea58b7cd4d03cf0a1b1a2b07fb7b969bf35f25f1f8538cc65cf3eebdf8a0910","ssdeep":"","tlshash":"15900003fbc08002c2b2e0300b3b0380238ce2200aa8030b80aeb0acecaa3a20c03020","first_seen":"2023-04-05T02:54:03Z","last_seen":"2026-06-18T00:56:47.4063Z","times_seen":368294,"resource_available":true,"data":null}},"time_used":282,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":282,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bigdata.onlinedown.net/win_heartbeat_tool.js?2026040412","fqdn":"bigdata.onlinedown.net","domain":"onlinedown.net","tld":"net"},"ip":{"addr":"115.223.9.117","port":443,"asn":134771,"as":"WENZHOU, ZHEJIANG Province, P.R.China.","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.downza.cn/soft/360885.html","date":"2026-04-04T14:26:27.892Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.onlinedown.net","organization":""},"issuer":{"commonName":"RapidSSL TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 11 Sep 2025 00:00:00 GMT","end":"Thu, 24 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"FC:FA:0E:D8:11:22:B7:C8:E2:EA:47:2C:3F:C4:35:3E:75:4F:D4:A6","sha256":"DC:64:A6:5B:03:F0:08:02:D6:8F:BF:26:A0:58:6F:5C:2D:9B:38:6A:12:95:AA:9E:B9:2F:3D:3D:E9:A6:A2:95"}}},"request":{"raw":"GET /win_heartbeat_tool.js?2026040412 HTTP/1.1\r\nHost: bigdata.onlinedown.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.downza.cn/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sat, 04 Apr 2026 14:26:33 GMT\r\nContent-Type: application/javascript\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nServer: openresty\r\nLast-Modified: Mon, 01 Dec 2025 06:22:17 GMT\r\nVary: Accept-Encoding\r\nETag: W/\"692d3419-1466\"\r\nContent-Encoding: gzip\r\nX-CCDN-Origin-Time: 13\r\nvia: CHN-ZJwenzhou-AREACT1-CACHE58[37],CHN-ZJwenzhou-AREACT1-CACHE13[31,TCP_MISS,35],CHN-JSwuxi-GLOBAL2-CACHE94[17],CHN-JSwuxi-GLOBAL2-CACHE103[13,TCP_MISS,15]\r\nx-hcs-proxy-type: 0\r\nX-CCDN-CacheTTL: 0\r\nX-CCDN-REQ-ID-46B1: 163898bb3dd4e78b3f500c7c4ad4f05d\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5222,"size_decoded":0,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text, with CRLF line terminators","md5":"4e979ccfd61b1b2edd7c35c38e983d65","sha1":"42e9c12a32f3d71d4dd1f54218d109eaa4ed225a","sha256":"c3d3ad3880a8c5c7ff719b98acadbbb2127bc2bd2796dea8f535f1b503320887","sha512":"c6cb9f8906181aab8afb067ecf46e79951130d50ce1a898053814201e247d07d11f5260871b012892f81e9e0e651e1040203d3afc8408663b8951a21383b48fd","ssdeep":"96:Q6WIKZ7Wk+mj/hCP4C1wZD1ZD5BnX+B68pkO967zE/DCKlQ1mxp6wti:Q6WI3obP3XBnOBdto74m1mbPI","tlshash":"9ab1959425d970aa45bbbb705f63e08af3305a131940e198bddd87160f33bf89245fd9","first_seen":"2025-12-19T23:36:25.989321Z","last_seen":"2026-06-06T22:27:36.490719Z","times_seen":82,"resource_available":true,"data":null}},"time_used":5665,"timings":{"blocked":-1,"dns":582,"connect":3572,"send":0,"wait":325,"receive":0,"ssl":1186},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img3.downza.cn/download/202108/094910-6109f2168512b.jpg?x-image-process=style/50-50","fqdn":"img3.downza.cn","domain":"downza.cn","tld":"cn"},"ip":{"addr":"113.240.117.108","port":443,"asn":63835,"as":"No.293,Wanbao Avenue","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.downza.cn/soft/360885.html","date":"2026-04-04T14:26:27.935Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img3.downza.cn","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Mon, 02 Mar 2026 00:00:00 GMT","end":"Sun, 31 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"55:2F:FB:08:6F:B4:C5:C2:09:87:88:75:54:0F:B8:93:BD:40:45:BC","sha256":"2C:BA:99:7E:59:AC:83:1E:DE:33:00:2E:51:95:4B:C4:18:0F:62:0D:8D:C4:BD:57:E4:43:A7:70:9C:65:8B:7D"}}},"request":{"raw":"GET /download/202108/094910-6109f2168512b.jpg?x-image-process=style/50-50 HTTP/1.1\r\nHost: img3.downza.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sat, 04 Apr 2026 14:26:44 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 1656\r\nConnection: keep-alive\r\nServer: openresty\r\nx-reserved: amazon, aws and amazon web services are trademarks or registered trademarks of Amazon Technologies, Inc\r\nCloudServiceDiscount: CDN\r\nx-amz-id-2: 36AAAQAAEAABAAAQAAEAABAAAQAAEAABAAAaE=AAAAAAAAAAAAAAAAAAAAAAAAAA\r\nx-amz-request-id: 0000019BE375065A901AE2F1798EC7C1\r\nETag: 9aa3c15f770483e6b1248d7fb81e6da1\r\nX-Oef-Request-Id: 32383662323937633330623a3233372e3139363a\r\nX-Request-Id: 32383662323937633330623a3233372e3139363a\r\nX-Transcode-Length: 3408\r\nvia: CHN-HNchangsha-AREACT1-CACHE18[7],CHN-HNchangsha-AREACT1-CACHE15[0,TCP_HIT,5],CHN-JSwuxi-GLOBAL2-CACHE57[5],CHN-JSwuxi-GLOBAL2-CACHE97[0,TCP_HIT,4]\r\nx-hcs-proxy-type: 1\r\nX-CCDN-CacheTTL: 31536000\r\nnginx-hit: 1\r\nAge: 3027383\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":1656,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 50x50, components 3","md5":"669826579d46625f654272cc9fba6847","sha1":"f56cd89ad2a945e1eb3c2d8cdbe7b7bdacdec703","sha256":"5a9f81395a2378838638f71aa152950935cfc26d53c8d1a8a8a14e1b38c24930","sha512":"752047e11be23ff6caaf4f8689c3999b06561a6319bd82c09c9fb4cfa92c0225004ad29d3addab8588f4a48dab1d6d15b602e2dffa1918bacbbe309a7cd11d5a","ssdeep":"","tlshash":"d631e83476a39ca7ded900f4e541d020860ba20e565bd9ac9e7d1129b0348db6949273","first_seen":"2025-07-22T11:13:12.221561Z","last_seen":"2026-04-04T14:27:36.49067Z","times_seen":2,"resource_available":false,"data":null}},"time_used":16658,"timings":{"blocked":16392,"dns":0,"connect":0,"send":0,"wait":265,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img3.downza.cn/softbaike/202011/150316-5fbcb0346ddff.jpg","fqdn":"img3.downza.cn","domain":"downza.cn","tld":"cn"},"ip":{"addr":"113.240.117.108","port":443,"asn":63835,"as":"No.293,Wanbao Avenue","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.downza.cn/soft/360885.html","date":"2026-04-04T14:26:28.029Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img3.downza.cn","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Mon, 02 Mar 2026 00:00:00 GMT","end":"Sun, 31 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"55:2F:FB:08:6F:B4:C5:C2:09:87:88:75:54:0F:B8:93:BD:40:45:BC","sha256":"2C:BA:99:7E:59:AC:83:1E:DE:33:00:2E:51:95:4B:C4:18:0F:62:0D:8D:C4:BD:57:E4:43:A7:70:9C:65:8B:7D"}}},"request":{"raw":"GET /softbaike/202011/150316-5fbcb0346ddff.jpg HTTP/1.1\r\nHost: img3.downza.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.downza.cn/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sat, 04 Apr 2026 14:26:45 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 30890\r\nConnection: keep-alive\r\nServer: openresty\r\nx-reserved: amazon, aws and amazon web services are trademarks or registered trademarks of Amazon Technologies, Inc\r\nCloudServiceDiscount: CDN\r\nx-amz-request-id: 0000019483BBE7E2900BA8DDDA086A82\r\nETag: \"e876c3d22535b5fc0eb7a86b8a64879c\"\r\nLast-Modified: Tue, 24 Nov 2020 07:03:16 GMT\r\nx-amz-id-2: 32AAAQAAEAABAAAQAAEAABAAAQAAEAABCSAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA\r\nvia: CHN-HNchangsha-AREACT1-CACHE36[4],CHN-HNchangsha-AREACT1-CACHE5[0,TCP_HIT,3],CHN-JSwuxi-GLOBAL2-CACHE17[17],CHN-JSwuxi-GLOBAL2-CACHE5[0,TCP_HIT,14],CHN-SH-GLOBAL4-CACHE124[44],CHN-SH-GLOBAL4-CACHE60[0,TCP_HIT,40]\r\nx-hcs-proxy-type: 1\r\nX-CCDN-CacheTTL: 31536000\r\nnginx-hit: 1\r\nAge: 1117323\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":30890,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CS2 Windows, datetime=2013:04:18 03:13:21], baseline, precision 8, 128x128, components 3","md5":"e876c3d22535b5fc0eb7a86b8a64879c","sha1":"93aec7e7018d9add6001bd50c951cecf55e48226","sha256":"66507819fabb8045521910b7d185d1cc335864a9acc4ebf085dbde7ecdb15578","sha512":"122006c791e668b796c49d30896336d0626c663d8c7bcc0820d44db376247959e3d89fc1458c2f80e438ae92b19ef0af4a3025a7a215556f4f78098ee06cb700","ssdeep":"192:H21sAIwikXhvIWrUaG1sAIwikXhvIWrHkA6Ftm553PYNMtKwAtV+p23xfndsOVSp:Hbp8Nltp8NlY9+53PYNg7SVf35PFl8p","tlshash":"6ed28d241f64be52e4d5833859d2ebd6e6213e1b71737e86354c36193f31b820e9e247","first_seen":"2025-06-15T16:39:48.246342Z","last_seen":"2026-06-06T23:56:38.343954Z","times_seen":29,"resource_available":false,"data":null}},"time_used":17682,"timings":{"blocked":17250,"dns":0,"connect":0,"send":0,"wait":363,"receive":69,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hm.baidu.com/hm.js?38823771752fde0027cab9a4bbd6d13f","fqdn":"hm.baidu.com","domain":"baidu.com","tld":"com"},"ip":{"addr":"14.215.182.140","port":443,"asn":4134,"as":"Chinanet","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.downza.cn/soft/360885.html","date":"2026-04-04T14:26:42.066Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"baidu.com","organization":"Beijing Baidu Netcom Science Technology Co., Ltd"},"issuer":{"commonName":"GlobalSign RSA OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 09 Jul 2025 07:01:02 GMT","end":"Mon, 10 Aug 2026 07:01:01 GMT"},"fingerprint":{"sha1":"21:BF:66:0D:67:BE:7A:7F:49:48:05:30:F4:7F:09:F2:30:36:CA:63","sha256":"0D:82:2C:9A:90:5A:EF:E9:8F:37:12:C0:E0:26:30:EE:95:33:2C:45:5F:E7:74:5D:F0:8D:BC:79:F4:B0:A1:49"}}},"request":{"raw":"GET /hm.js?38823771752fde0027cab9a4bbd6d13f HTTP/1.1\r\nHost: hm.baidu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.downza.cn/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nCache-Control: max-age=0, must-revalidate\r\nContent-Encoding: gzip\r\nContent-Length: 11610\r\nContent-Type: application/javascript\r\nDate: Sat, 04 Apr 2026 14:26:44 GMT\r\nEtag: 6d9c95c81acfd565bb9cafe7c6ffaacb\r\nP3p: CP=\"CURa ADMa DEVa PSAo PSDo OUR BUS UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR\"\r\nServer: apache\r\nSet-Cookie: HMACCOUNT=DAB08768E596F9BC; Path=/; Domain=hm.baidu.com; Expires=Sun, 18 Jan 2038 00:00:00 GMT\r\nStrict-Transport-Security: max-age=172800\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":30216,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (940)","md5":"4de3f95f0bdd5f3c78bbdfcda1006114","sha1":"af9eb920137e03bf90786b35d99017cb5ece1ffb","sha256":"93560cf1b1f1112909f03dc59d6cb60377bea1414f09c0b886cea8c06d60cc39","sha512":"932e397954201059f7ec37244ce6b332f3a4668f193c1a91c419a982b4c1a34815a0cbd0bf51b34eed9e2874b884a7c673c72108546bd40477208fc9df17d309","ssdeep":"384:GJSoLMJJTRl6s1JXFVCFI/TayvuodsZPIGm8XaR1JRwvutq1tGdc7M04gRw6:G4VJfHgMdvussZPIx82Rwvutcto07v","tlshash":"add2c8a9b282713293a324a5157f324af07b5e54bd4968a4f11894c07d38fbb027bfdd","first_seen":"2026-04-04T14:27:36.492181Z","last_seen":"2026-04-04T14:27:36.492181Z","times_seen":1,"resource_available":true,"data":null}},"time_used":2371,"timings":{"blocked":-1,"dns":278,"connect":509,"send":0,"wait":323,"receive":1,"ssl":1260},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"res.njxzwh.com/downza/pc/v2023/images/icon-goTop.png","fqdn":"res.njxzwh.com","domain":"njxzwh.com","tld":"com"},"ip":{"addr":"113.240.117.107","port":443,"asn":63835,"as":"No.293,Wanbao Avenue","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.downza.cn/soft/360885.html","date":"2026-04-04T14:26:42.140Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"res.njxzwh.com","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Thu, 19 Feb 2026 00:00:00 GMT","end":"Wed, 20 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"BF:F9:0C:9F:DA:C1:19:17:44:6C:7F:14:F0:08:EE:C7:99:CB:76:4C","sha256":"9E:13:1A:33:49:E6:F7:8B:29:45:3C:6B:D3:41:4A:A5:B6:45:DD:0A:0B:C4:36:10:64:FD:EF:64:9D:7A:C2:69"}}},"request":{"raw":"GET /downza/pc/v2023/images/icon-goTop.png HTTP/1.1\r\nHost: res.njxzwh.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://res.njxzwh.com/downza/pc/v2023/css/public.css?2026040412\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sat, 04 Apr 2026 14:26:43 GMT\r\nContent-Type: image/png\r\nContent-Length: 227\r\nConnection: keep-alive\r\nServer: openresty\r\nx-reserved: amazon, aws and amazon web services are trademarks or registered trademarks of Amazon Technologies, Inc\r\nCloudServiceDiscount: CDN\r\nx-amz-request-id: 0000019D4822A87397AAC45D48D62DD0\r\nETag: \"385424c135679968aabae48149cc24c4\"\r\nLast-Modified: Thu, 30 Oct 2025 09:32:39 GMT\r\nx-amz-id-2: 36AAAQAAEAABAAAQAAEAABAAAQAAEAABAAAaI=AAAAAAAAAAAAAAAAAAAAAAAAAA\r\nX-CCDN-Expires: 2311018\r\nvia: CHN-HNchangsha-AREACT1-CACHE66[34],CHN-HNchangsha-AREACT1-CACHE61[0,TCP_HIT,4],CHN-JSwuxi-GLOBAL2-CACHE30[3],CHN-JSwuxi-GLOBAL2-CACHE61[0,TCP_HIT,1]\r\nx-hcs-proxy-type: 1\r\nX-CCDN-CacheTTL: 2592000\r\nnginx-hit: 1\r\nAge: 280982\r\nAccept-Ranges: bytes\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: OPTION,GET\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":227,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 16 x 10, 8-bit/color RGBA, non-interlaced","md5":"385424c135679968aabae48149cc24c4","sha1":"ed69e993cff9ea613e83c73ee35cafb1ee6f7904","sha256":"69929324e0c1349babca27eb65bb886fe661b5186be0cf8a61b4006e22745b9a","sha512":"93f3cc24301c016c90517ad2b135d202d91669c38311b286211eb8cf8462d183b621cd7061d9edf4802a53ae34d280dccb1b8be014465cd06b5d47286443e631","ssdeep":"","tlshash":"86d0a7a9d2a1be3bb65400270b491a578c76010452d4a45a4056973b7349937d68da07","first_seen":"2025-02-11T04:22:13.971268Z","last_seen":"2026-06-06T23:56:38.331911Z","times_seen":54,"resource_available":false,"data":null}},"time_used":1380,"timings":{"blocked":410,"dns":0,"connect":0,"send":0,"wait":969,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img3.downza.cn/download/202111/141856-6184ccd0ac1c3.jpg","fqdn":"img3.downza.cn","domain":"downza.cn","tld":"cn"},"ip":{"addr":"113.240.117.108","port":443,"asn":63835,"as":"No.293,Wanbao Avenue","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.downza.cn/soft/360885.html","date":"2026-04-04T14:26:28.046Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img3.downza.cn","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Mon, 02 Mar 2026 00:00:00 GMT","end":"Sun, 31 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"55:2F:FB:08:6F:B4:C5:C2:09:87:88:75:54:0F:B8:93:BD:40:45:BC","sha256":"2C:BA:99:7E:59:AC:83:1E:DE:33:00:2E:51:95:4B:C4:18:0F:62:0D:8D:C4:BD:57:E4:43:A7:70:9C:65:8B:7D"}}},"request":{"raw":"GET /download/202111/141856-6184ccd0ac1c3.jpg HTTP/1.1\r\nHost: img3.downza.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sat, 04 Apr 2026 14:26:45 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 4338\r\nConnection: keep-alive\r\nServer: openresty\r\nx-reserved: amazon, aws and amazon web services are trademarks or registered trademarks of Amazon Technologies, Inc\r\nCloudServiceDiscount: CDN\r\nx-amz-request-id: 000001944608E4FD9053701ADB22ED39\r\nETag: \"574da2dd5aace0a0e553463c1b4ea1b9\"\r\nLast-Modified: Fri, 05 Nov 2021 06:18:56 GMT\r\nx-amz-id-2: 32AAAQAAEAABAAAQAAEAABAAAQAAEAABCSAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA\r\nvia: CHN-HNchangsha-AREACT1-CACHE46[5],CHN-HNchangsha-AREACT1-CACHE16[0,TCP_HIT,3],CHN-JSwuxi-GLOBAL2-CACHE86[26],CHN-JSwuxi-GLOBAL2-CACHE109[0,TCP_HIT,24],CHN-SH-GLOBAL4-CACHE140[27],CHN-SH-GLOBAL4-CACHE44[0,TCP_HIT,12]\r\nx-hcs-proxy-type: 1\r\nX-CCDN-CacheTTL: 31536000\r\nnginx-hit: 1\r\nAge: 924701\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":4338,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1], baseline, precision 8, 80x80, components 3","md5":"574da2dd5aace0a0e553463c1b4ea1b9","sha1":"1e40331017efcc632144d97d058593cc8171363e","sha256":"9eb2ea678614434170759b65d9aeafec48340ec12cc780f2ebe907ed9e58b229","sha512":"47cfc6c4877416958ef700b6c75c3ee7882b70dc2ccec510fa1e7612056ed8efa43e96150de267c46e8206ec1b128fa4e681df45d004b28dc9a3a8027529b801","ssdeep":"96:3JI5rMErE3UqyZ8Wt9cVJeklcwZS13aPdfPqETiakM0Hp8u:5Im73UqyZ8iAJUqPdXqEupV","tlshash":"22916c19cf4bec30cce12674c5aae265a1ea472537438c3b45e083f1f16c7a589e998d","first_seen":"2025-07-22T11:13:12.128194Z","last_seen":"2026-04-04T14:27:36.495774Z","times_seen":2,"resource_available":false,"data":null}},"time_used":17946,"timings":{"blocked":17663,"dns":0,"connect":0,"send":0,"wait":282,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"res.njxzwh.com/downza/pc/v2023/images/andior.png","fqdn":"res.njxzwh.com","domain":"njxzwh.com","tld":"com"},"ip":{"addr":"113.240.117.107","port":443,"asn":63835,"as":"No.293,Wanbao Avenue","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.downza.cn/soft/360885.html","date":"2026-04-04T14:26:42.001Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"res.njxzwh.com","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Thu, 19 Feb 2026 00:00:00 GMT","end":"Wed, 20 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"BF:F9:0C:9F:DA:C1:19:17:44:6C:7F:14:F0:08:EE:C7:99:CB:76:4C","sha256":"9E:13:1A:33:49:E6:F7:8B:29:45:3C:6B:D3:41:4A:A5:B6:45:DD:0A:0B:C4:36:10:64:FD:EF:64:9D:7A:C2:69"}}},"request":{"raw":"GET /downza/pc/v2023/images/andior.png HTTP/1.1\r\nHost: res.njxzwh.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://res.njxzwh.com/downza/pc/v2023/css/detail.css?2026040412\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sat, 04 Apr 2026 14:26:42 GMT\r\nContent-Type: image/png\r\nContent-Length: 707\r\nConnection: keep-alive\r\nServer: openresty\r\nx-reserved: amazon, aws and amazon web services are trademarks or registered trademarks of Amazon Technologies, Inc\r\nCloudServiceDiscount: CDN\r\nx-amz-request-id: 0000019D4822A96297A87F32F8F41ACE\r\nETag: \"4c26f012aa7af4b0b836c59d1005fadd\"\r\nLast-Modified: Thu, 30 Oct 2025 09:32:37 GMT\r\nx-amz-id-2: 36AAAQAAEAABAAAQAAEAABAAAQAAEAABAAAaI=AAAAAAAAAAAAAAAAAAAAAAAAAA\r\nX-CCDN-Expires: 2312478\r\nvia: CHN-HNchangsha-AREACT1-CACHE66[5],CHN-HNchangsha-AREACT1-CACHE20[0,TCP_HIT,4],CHN-JSwuxi-GLOBAL2-CACHE15[11],CHN-JSwuxi-GLOBAL2-CACHE104[0,TCP_HIT,5]\r\nx-hcs-proxy-type: 1\r\nX-CCDN-CacheTTL: 2592000\r\nnginx-hit: 1\r\nAge: 279522\r\nAccept-Ranges: bytes\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: OPTION,GET\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":707,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced","md5":"4c26f012aa7af4b0b836c59d1005fadd","sha1":"df95ac64e5776203654521009c12355fd5fb76c1","sha256":"5c9ec5f3b44551b2d481850a165388fe3b3476eb4544f919eb90d85021f831ba","sha512":"882333038b42b63c176376db6a5a5226499dafe84c3e16fce82203bf154ef0f924755b0efae655f1e07749593c5c75475a6ff0f3db8a6575ec8ac9fadd8847ad","ssdeep":"","tlshash":"6d0110e7c10f6a381a156a9939280cc2f392958402a469ae0f249967d5a4d6d7181b14","first_seen":"2025-06-15T16:39:48.373053Z","last_seen":"2026-06-06T22:27:36.488922Z","times_seen":13,"resource_available":false,"data":null}},"time_used":336,"timings":{"blocked":63,"dns":0,"connect":0,"send":0,"wait":273,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hm.baidu.com/hm.gif?hca=DAB08768E596F9BC\u0026cc=1\u0026ck=1\u0026cl=24-bit\u0026ds=1280x1024\u0026vl=1024\u0026et=0\u0026ja=0\u0026ln=en-us\u0026lo=0\u0026rnd=398523207\u0026si=38823771752fde0027cab9a4bbd6d13f\u0026v=1.3.2\u0026lv=1\u0026sn=35189\u0026r=0\u0026ww=1280\u0026u=https%3A%2F%2Fwww.downza.cn%2Fsoft%2F360885.html\u0026tt=%E4%BC%98%E8%B7%AF%E6%95%99%E8%82%B2%E4%B8%8B%E8%BD%BD_%E4%BC%98%E8%B7%AF%E6%95%99%E8%82%B2%E7%94%B5%E8%84%91%E7%89%88%E4%B8%8B%E8%BD%BD%5B%E5%AE%98%E6%96%B9%E7%89%88%5D-%E4%B8%8B%E8%BD%BD%E4%B9%8B%E5%AE%B6","fqdn":"hm.baidu.com","domain":"baidu.com","tld":"com"},"ip":{"addr":"14.215.182.140","port":443,"asn":4134,"as":"Chinanet","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.downza.cn/soft/360885.html","date":"2026-04-04T14:26:44.454Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"baidu.com","organization":"Beijing Baidu Netcom Science Technology Co., Ltd"},"issuer":{"commonName":"GlobalSign RSA OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 09 Jul 2025 07:01:02 GMT","end":"Mon, 10 Aug 2026 07:01:01 GMT"},"fingerprint":{"sha1":"21:BF:66:0D:67:BE:7A:7F:49:48:05:30:F4:7F:09:F2:30:36:CA:63","sha256":"0D:82:2C:9A:90:5A:EF:E9:8F:37:12:C0:E0:26:30:EE:95:33:2C:45:5F:E7:74:5D:F0:8D:BC:79:F4:B0:A1:49"}}},"request":{"raw":"GET /hm.gif?hca=DAB08768E596F9BC\u0026cc=1\u0026ck=1\u0026cl=24-bit\u0026ds=1280x1024\u0026vl=1024\u0026et=0\u0026ja=0\u0026ln=en-us\u0026lo=0\u0026rnd=398523207\u0026si=38823771752fde0027cab9a4bbd6d13f\u0026v=1.3.2\u0026lv=1\u0026sn=35189\u0026r=0\u0026ww=1280\u0026u=https%3A%2F%2Fwww.downza.cn%2Fsoft%2F360885.html\u0026tt=%E4%BC%98%E8%B7%AF%E6%95%99%E8%82%B2%E4%B8%8B%E8%BD%BD_%E4%BC%98%E8%B7%AF%E6%95%99%E8%82%B2%E7%94%B5%E8%84%91%E7%89%88%E4%B8%8B%E8%BD%BD%5B%E5%AE%98%E6%96%B9%E7%89%88%5D-%E4%B8%8B%E8%BD%BD%E4%B9%8B%E5%AE%B6 HTTP/1.1\r\nHost: hm.baidu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.downza.cn/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nCache-Control: private, max-age=0, no-cache\r\nContent-Length: 43\r\nContent-Type: image/gif\r\nDate: Sat, 04 Apr 2026 14:26:44 GMT\r\nP3p: CP=\"CURa ADMa DEVa PSAo PSDo OUR BUS UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR\"\r\nPragma: no-cache\r\nServer: apache\r\nSet-Cookie: HMACCOUNT=6FBCE2E8BB699803; Path=/; Domain=hm.baidu.com; Expires=Sun, 18 Jan 2038 00:00:00 GMT\r\nStrict-Transport-Security: max-age=172800\r\nX-Content-Type-Options: nosniff\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"ad4b0f606e0f8465bc4c4c170b37e1a3","sha1":"50b30fd5f87c85fe5cba2635cb83316ca71250d7","sha256":"cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda","sha512":"ebfe0c0df4bcc167d5cb6ebdd379f9083df62bef63a23818e1c6adf0f64b65467ea58b7cd4d03cf0a1b1a2b07fb7b969bf35f25f1f8538cc65cf3eebdf8a0910","ssdeep":"","tlshash":"15900003fbc08002c2b2e0300b3b0380238ce2200aa8030b80aeb0acecaa3a20c03020","first_seen":"2023-04-05T02:54:03Z","last_seen":"2026-06-18T00:56:47.4063Z","times_seen":368294,"resource_available":true,"data":null}},"time_used":328,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":328,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"res.njxzwh.com/redirect/dist/bundle.js?2026040412","fqdn":"res.njxzwh.com","domain":"njxzwh.com","tld":"com"},"ip":{"addr":"113.240.117.107","port":443,"asn":63835,"as":"No.293,Wanbao Avenue","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.downza.cn/soft/360885.html","date":"2026-04-04T14:26:27.891Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"res.njxzwh.com","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Thu, 19 Feb 2026 00:00:00 GMT","end":"Wed, 20 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"BF:F9:0C:9F:DA:C1:19:17:44:6C:7F:14:F0:08:EE:C7:99:CB:76:4C","sha256":"9E:13:1A:33:49:E6:F7:8B:29:45:3C:6B:D3:41:4A:A5:B6:45:DD:0A:0B:C4:36:10:64:FD:EF:64:9D:7A:C2:69"}}},"request":{"raw":"GET /redirect/dist/bundle.js?2026040412 HTTP/1.1\r\nHost: res.njxzwh.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.downza.cn/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sat, 04 Apr 2026 14:26:29 GMT\r\nContent-Type: text/javascript\r\nContent-Length: 34130\r\nConnection: keep-alive\r\nServer: openresty\r\nx-reserved: amazon, aws and amazon web services are trademarks or registered trademarks of Amazon Technologies, Inc\r\nCloudServiceDiscount: CDN\r\nx-amz-request-id: 0000019D56A5D092976428B73722AA9A\r\nETag: \"a15b12ecfca4ad041ce999d9739fcff0\"\r\nLast-Modified: Fri, 24 May 2024 09:26:41 GMT\r\nx-amz-id-2: 36AAAQAAEAABAAAQAAEAABAAAQAAEAABAAAaI=AAAAAAAAAAAAAAAAAAAAAAAAAA\r\nX-CCDN-Expires: 48822\r\nvia: CHN-HNchangsha-AREACT1-CACHE38[5],CHN-HNchangsha-AREACT1-CACHE69[0,TCP_HIT,2],CHN-JSwuxi-GLOBAL2-CACHE120[7],CHN-JSwuxi-GLOBAL2-CACHE69[0,TCP_HIT,5]\r\nx-hcs-proxy-type: 1\r\nX-CCDN-CacheTTL: 86400\r\nnginx-hit: 1\r\nAge: 37578\r\nAccept-Ranges: bytes\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: OPTION,GET\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":34130,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (34126), with no line terminators","md5":"a15b12ecfca4ad041ce999d9739fcff0","sha1":"9543940c6f82d897bc5b6fb9f149303fbc3c8fa0","sha256":"bb245e02ce438ad0655fefc83d386cc5a24dfede2fa9a16176e05b0da6e55d51","sha512":"a831c09652bbbfb50d8396d51f004391a08e28c79bf526a22ee26f050e8d37b31bc78a3f09ae24f95fd61969dea0aabab447fd25f9421bc2a50ffcbac7f7a169","ssdeep":"192:IX+hkzcGGB/qrc2T+tgdiz2PhfN793/uQrbO++ljrxFVD4yggOyz:IX+esGc2OzYDuQrijrxFFz","tlshash":"2ce286ddabce4d649a48dbccb2fd660cb6031ed3d5c5589bc20dac9967322e02b1435e","first_seen":"2024-12-25T04:18:22.998709Z","last_seen":"2026-06-06T23:56:38.288349Z","times_seen":144,"resource_available":true,"data":null}},"time_used":2587,"timings":{"blocked":-1,"dns":1222,"connect":263,"send":0,"wait":343,"receive":267,"ssl":491},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img3.downza.cn/download/202112/131312-61b2e1e84c65f.jpg","fqdn":"img3.downza.cn","domain":"downza.cn","tld":"cn"},"ip":{"addr":"113.240.117.108","port":443,"asn":63835,"as":"No.293,Wanbao Avenue","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.downza.cn/soft/360885.html","date":"2026-04-04T14:26:28.155Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img3.downza.cn","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Mon, 02 Mar 2026 00:00:00 GMT","end":"Sun, 31 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"55:2F:FB:08:6F:B4:C5:C2:09:87:88:75:54:0F:B8:93:BD:40:45:BC","sha256":"2C:BA:99:7E:59:AC:83:1E:DE:33:00:2E:51:95:4B:C4:18:0F:62:0D:8D:C4:BD:57:E4:43:A7:70:9C:65:8B:7D"}}},"request":{"raw":"GET /download/202112/131312-61b2e1e84c65f.jpg HTTP/1.1\r\nHost: img3.downza.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sat, 04 Apr 2026 14:26:45 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 4256\r\nConnection: keep-alive\r\nServer: openresty\r\nx-reserved: amazon, aws and amazon web services are trademarks or registered trademarks of Amazon Technologies, Inc\r\nCloudServiceDiscount: CDN\r\nx-amz-request-id: 00000196D4266F1590572457900F6891\r\nETag: \"4aa48b5f19c2197f6bdf4e4d26826ffe\"\r\nLast-Modified: Fri, 10 Dec 2021 05:13:12 GMT\r\nx-amz-id-2: 32AAAQAAEAABAAAQAAEAABAAAQAAEAABCSAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA\r\nvia: CHN-HNchangsha-AREACT1-CACHE36[4],CHN-HNchangsha-AREACT1-CACHE21[0,TCP_HIT,2],CHN-JSwuxi-GLOBAL2-CACHE21[4],CHN-JSwuxi-GLOBAL2-CACHE119[0,TCP_HIT,2]\r\nx-hcs-proxy-type: 1\r\nX-CCDN-CacheTTL: 31536000\r\nnginx-hit: 1\r\nAge: 5102442\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":4256,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 80 x 80, 8-bit/color RGBA, non-interlaced","md5":"4aa48b5f19c2197f6bdf4e4d26826ffe","sha1":"51162a27d8740328270802d068189c90da54b066","sha256":"fcaa95b58c48ce0c52e86f862c1f63320e8ea4895140d553d508ece5a59b25b9","sha512":"8314ee1d5fdc2a0f94516b751cc407664c85e13ace6eedd99d366dff2e87d178e0736f07c2f0868514310163b9d0b1b6a0345fac337856fabd4b6db5215521c9","ssdeep":"96:T+gJ0AAycP1HC+VXxendYmtkx5UlN7gvZE2cR8J:Tt+JyaC+VBTAehvaNiJ","tlshash":"7d917db2b969bbd97e0f28411a0142e78c34f24dff6bb8b42e02597b1829cc5884cf54","first_seen":"2025-07-22T11:13:12.106176Z","last_seen":"2026-04-04T14:27:36.498308Z","times_seen":2,"resource_available":false,"data":null}},"time_used":17848,"timings":{"blocked":17556,"dns":0,"connect":0,"send":0,"wait":291,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img3.downza.cn/download/202112/114241-61bab5b127444.jpg","fqdn":"img3.downza.cn","domain":"downza.cn","tld":"cn"},"ip":{"addr":"113.240.117.108","port":443,"asn":63835,"as":"No.293,Wanbao Avenue","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.downza.cn/soft/360885.html","date":"2026-04-04T14:26:28.158Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img3.downza.cn","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Mon, 02 Mar 2026 00:00:00 GMT","end":"Sun, 31 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"55:2F:FB:08:6F:B4:C5:C2:09:87:88:75:54:0F:B8:93:BD:40:45:BC","sha256":"2C:BA:99:7E:59:AC:83:1E:DE:33:00:2E:51:95:4B:C4:18:0F:62:0D:8D:C4:BD:57:E4:43:A7:70:9C:65:8B:7D"}}},"request":{"raw":"GET /download/202112/114241-61bab5b127444.jpg HTTP/1.1\r\nHost: img3.downza.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sat, 04 Apr 2026 14:26:45 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 17092\r\nConnection: keep-alive\r\nServer: openresty\r\nx-reserved: amazon, aws and amazon web services are trademarks or registered trademarks of Amazon Technologies, Inc\r\nCloudServiceDiscount: CDN\r\nx-amz-request-id: 0000019A14F20BB99057273B9FE6C595\r\nETag: \"c46e156a3a6c40e25ad710f6c8630f84\"\r\nLast-Modified: Thu, 16 Dec 2021 03:42:41 GMT\r\nx-amz-id-2: 36AAAQAAEAABAAAQAAEAABAAAQAAEAABAAAaI=AAAAAAAAAAAAAAAAAAAAAAAAAA\r\nvia: CHN-HNchangsha-AREACT1-CACHE33[4],CHN-HNchangsha-AREACT1-CACHE21[0,TCP_HIT,3],CHN-JSwuxi-GLOBAL2-CACHE12[27],CHN-JSwuxi-GLOBAL2-CACHE97[0,TCP_HIT,27]\r\nx-hcs-proxy-type: 1\r\nX-CCDN-CacheTTL: 31536000\r\nnginx-hit: 1\r\nAge: 5238914\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":17092,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 80 x 80, 8-bit/color RGBA, non-interlaced","md5":"c46e156a3a6c40e25ad710f6c8630f84","sha1":"01d0c76bd61828c0d9e124afa5b7170ecd1328a6","sha256":"bf5d8d0de8de40c68b1669c564ff3dbd853aef8a3829b0841c6544f39fbdad75","sha512":"d6df8c06af44e473345c4afaa19f27965b672d73ff5734505163bdd271e3f1610b87477feca0943580af1eec57360b11c0468fc5b4408ff7c9e9eb3ea331e8d0","ssdeep":"384:2UpFRKAfsZeltHebtM9gWPY11+h4kRjtWe3XD0TE39y85D5:5x9l9ebtKBm1qtp3XgTE34859","tlshash":"9f72d1f7fa12ad6901ead23efb66ab5032d44031c00024bd6f43aae5650d68e666fc81","first_seen":"2025-07-22T11:13:12.14561Z","last_seen":"2026-04-04T14:27:36.499277Z","times_seen":2,"resource_available":false,"data":null}},"time_used":18008,"timings":{"blocked":17616,"dns":0,"connect":0,"send":0,"wait":382,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.oss.downza.com/oss/advertisingApi/getAdvertisingCodeByModuleIdNew?moduleId=22\u0026classify=-1444-1445-1447\u0026source=3","fqdn":"api.oss.downza.com","domain":"downza.com","tld":"com"},"ip":{"addr":"115.223.9.119","port":443,"asn":134771,"as":"WENZHOU, ZHEJIANG Province, P.R.China.","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.downza.cn/soft/360885.html","date":"2026-04-04T14:26:41.982Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.oss.downza.com","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Sat, 21 Feb 2026 00:00:00 GMT","end":"Fri, 22 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"51:F3:BC:93:01:05:68:55:CB:77:6D:BA:1E:DC:2F:03:69:31:DE:2D","sha256":"2F:A0:D3:49:D2:78:EE:E4:59:8B:A8:ED:84:E3:3E:47:27:83:3A:E6:BE:5F:B7:46:15:45:AE:FE:7C:C9:B9:AF"}}},"request":{"raw":"GET /oss/advertisingApi/getAdvertisingCodeByModuleIdNew?moduleId=22\u0026classify=-1444-1445-1447\u0026source=3 HTTP/1.1\r\nHost: api.oss.downza.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.downza.cn\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.downza.cn/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sat, 04 Apr 2026 14:26:44 GMT\r\nContent-Type: application/json;charset=UTF-8\r\nContent-Length: 49\r\nConnection: keep-alive\r\nServer: openresty\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: GET,POST,DELETE,PUT,OPTIONS\r\nAccess-Control-Allow-Headers: *\r\nX-CCDN-Expires: 2141487\r\nvia: CHN-ZJwenzhou-AREACT1-CACHE67[46],CHN-ZJwenzhou-AREACT1-CACHE61[0,TCP_HIT,43],CHN-JSwuxi-GLOBAL2-CACHE34[4],CHN-JSwuxi-GLOBAL2-CACHE111[0,TCP_HIT,2]\r\nx-hcs-proxy-type: 1\r\nX-CCDN-CacheTTL: 2592000\r\nnginx-hit: 1\r\nAge: 450513\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":49,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"ff8aee19ebe210b03fd3c1ccc508e63c","sha1":"3b887ca80ff0549279341936f3962eeb99b05e3d","sha256":"67228c1a1887842600a7e6dc98afcf57d5ae80292e65fefe8d3d84f9b5053e7b","sha512":"346fe7a81b3617caf90a878042b976c30f3d7e18eac380882ec9dabd0747995ec3b4970f0770a9c04526daeb32bcd9707c230e627d8bc387bb248a90e7162e83","ssdeep":"","tlshash":"0790024119596d5456170045a00ab8a400e6354441512a6108d8b1645201610685ae22","first_seen":"2026-04-04T14:27:36.500165Z","last_seen":"2026-06-06T23:56:38.283023Z","times_seen":15,"resource_available":false,"data":null}},"time_used":2792,"timings":{"blocked":3,"dns":1220,"connect":242,"send":0,"wait":289,"receive":0,"ssl":1035},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"e.so.com/search/c.js?u=2518113589\u0026_=1775312803578","fqdn":"e.so.com","domain":"so.com","tld":"com"},"ip":{"addr":"36.99.171.172","port":443,"asn":137687,"as":"Luoyang, Henan Province, P.R.China.","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.downza.cn/soft/360885.html","date":"2026-04-04T14:26:43.591Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.tf.360.cn","organization":"北京奇虎科技有限公司"},"issuer":{"commonName":"WoTrus OV Server CA  [Run by the Issuer]","organization":"WoTrus CA Limited"},"validity":{"start":"Thu, 09 Oct 2025 00:00:00 GMT","end":"Mon, 09 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"69:CA:D0:58:85:D8:D1:D1:C1:BC:B8:7B:91:44:F7:86:A8:94:E6:6A","sha256":"2E:66:69:92:D8:58:F5:BA:F3:2C:85:70:B8:98:FB:F8:4E:92:4D:4C:EE:14:C2:FA:07:BD:62:F4:85:C3:E5:D6"}}},"request":{"raw":"GET /search/c.js?u=2518113589\u0026_=1775312803578 HTTP/1.1\r\nHost: e.so.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.downza.cn/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 04 Apr 2026 14:26:45 GMT\r\nContent-Type: text/javascript;charset=utf-8\r\nTransfer-Encoding: chunked\r\nConnection: close\r\nCache-Control: private\r\nX-Trace: \"rt\":0\r\nX-Cache: MISS\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-18T01:31:21.233037Z","times_seen":16497762,"resource_available":true,"data":null}},"time_used":1781,"timings":{"blocked":-1,"dns":681,"connect":272,"send":0,"wait":274,"receive":0,"ssl":554},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s.union.360.cn/s.gif?lts=1\u0026et=0\u0026ck=0\u0026adb=0\u0026cl=24\u0026ds=1280x1024\u0026ln=en-US\u0026url=https%3A%2F%2Fwww.downza.cn%2Fsoft%2F360885.html\u0026si=336149\u0026su=\u0026flt=1775312803\u0026lt=1775312803\u0026pt=449177311070676800\u0026guid=125334355.2574638577695200256.1775312803001.0146\u0026huid=11e%252Fod9j1VrYeKZExueyJC7K9maoWO4MwVhK4DbpiUvHA%253D\u0026v=3.2.0\u0026t=1775312804078\u0026qhclickid=\u0026_mtd=im","fqdn":"s.union.360.cn","domain":"360.cn","tld":"cn"},"ip":{"addr":"123.125.81.172","port":443,"asn":4808,"as":"China Unicom Beijing Province Network","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.downza.cn/soft/360885.html","date":"2026-04-04T14:26:44.084Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"s.union.360.cn","organization":""},"issuer":{"commonName":"WoTrus DV Server CA  [Run by the Issuer]","organization":"WoTrus CA Limited"},"validity":{"start":"Fri, 13 Mar 2026 00:00:00 GMT","end":"Sun, 27 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"40:79:9F:7D:10:DE:47:ED:56:2A:F4:36:4D:75:86:7C:4A:D0:E8:8A","sha256":"0C:9F:90:EF:DD:A1:84:EA:79:D5:D0:7B:A3:D3:62:F7:CD:1F:5D:90:3B:9A:5E:0E:C1:E1:49:BD:F0:5F:94:90"}}},"request":{"raw":"GET /s.gif?lts=1\u0026et=0\u0026ck=0\u0026adb=0\u0026cl=24\u0026ds=1280x1024\u0026ln=en-US\u0026url=https%3A%2F%2Fwww.downza.cn%2Fsoft%2F360885.html\u0026si=336149\u0026su=\u0026flt=1775312803\u0026lt=1775312803\u0026pt=449177311070676800\u0026guid=125334355.2574638577695200256.1775312803001.0146\u0026huid=11e%252Fod9j1VrYeKZExueyJC7K9maoWO4MwVhK4DbpiUvHA%253D\u0026v=3.2.0\u0026t=1775312804078\u0026qhclickid=\u0026_mtd=im HTTP/1.1\r\nHost: s.union.360.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.downza.cn/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: openresty/1.9.15.1\r\nDate: Sat, 04 Apr 2026 14:26:44 GMT\r\nContent-Type: image/gif\r\nContent-Length: 43\r\nLast-Modified: Mon, 28 Sep 1970 06:00:00 GMT\r\nConnection: close\r\nExpires: Fri, 01 Jan 1980 00:00:00 GMT\r\nPragma: no-cache\r\nCache-Control: private, max-age=0, no-cache\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty:1.9.15.1","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"ad4b0f606e0f8465bc4c4c170b37e1a3","sha1":"50b30fd5f87c85fe5cba2635cb83316ca71250d7","sha256":"cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda","sha512":"ebfe0c0df4bcc167d5cb6ebdd379f9083df62bef63a23818e1c6adf0f64b65467ea58b7cd4d03cf0a1b1a2b07fb7b969bf35f25f1f8538cc65cf3eebdf8a0910","ssdeep":"","tlshash":"15900003fbc08002c2b2e0300b3b0380238ce2200aa8030b80aeb0acecaa3a20c03020","first_seen":"2023-04-05T02:54:03Z","last_seen":"2026-06-18T00:56:47.4063Z","times_seen":368294,"resource_available":true,"data":null}},"time_used":1485,"timings":{"blocked":622,"dns":0,"connect":0,"send":0,"wait":284,"receive":0,"ssl":579},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"at.alicdn.com/t/font_210132_a1ve2v7g9dq2gldi.css","fqdn":"at.alicdn.com","domain":"alicdn.com","tld":"com"},"ip":{"addr":"47.246.44.178","port":443,"asn":24429,"as":"Zhejiang Taobao Network Co.,Ltd","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.downza.cn/soft/360885.html","date":"2026-04-04T14:26:27.882Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tbcdn.cn","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Fri, 28 Nov 2025 03:07:13 GMT","end":"Sat, 18 Jul 2026 09:41:04 GMT"},"fingerprint":{"sha1":"01:40:62:EF:8C:E5:C1:8A:19:4C:8D:B6:F5:C2:24:7F:DC:C0:9C:8A","sha256":"60:3C:41:A0:78:62:E6:5E:82:F0:FA:CF:5C:C9:D3:22:E4:64:EE:1A:EE:C7:CC:BA:DD:25:08:90:6F:CC:C4:F2"}}},"request":{"raw":"GET /t/font_210132_a1ve2v7g9dq2gldi.css HTTP/1.1\r\nHost: at.alicdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.downza.cn/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: Tengine\r\ncontent-type: text/css\r\ndate: Thu, 30 Oct 2025 15:49:29 GMT\r\nvary: Accept-Encoding, Accept-Encoding, Accept-Encoding, Origin\r\nx-oss-request-id: 690389096AD0C431300D15E7\r\netag: W/\"0A48B5404E3D488867D76F4F011EE380\"\r\nlast-modified: Fri, 24 Dec 2021 20:05:53 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 6465900413072983531\r\nx-oss-storage-class: Standard\r\ncache-control: max-age=63072000\r\ncontent-md5: Cki1QE49SIhn129PAR7jgA==\r\nx-oss-server-time: 7\r\nvia: ens-cache23.l2de4[0,0,200-0,H], ens-cache12.l2de4[1,0], ens-cache20.se2[0,0,200-0,H], ens-cache13.se2[1,0]\r\nage: 13473419\r\nali-swift-global-savetime: 1761839369\r\nx-cache: HIT TCP_MEM_HIT dirn:-2:-2\r\nx-swift-savetime: Fri, 31 Oct 2025 18:20:33 GMT\r\nx-swift-cachetime: 62976536\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\neagleid: 2ff62ca117753127883107875e\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]},{"name":"Tengine","description":"Tengine is a web server which is based on the Nginx HTTP server.","website":"https://tengine.taobao.org","common_platform_enumeration":"","icon":"Tengine.png","categories":["Web servers"]}],"data":{"size":21463,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (17895)","md5":"0a48b5404e3d488867d76f4f011ee380","sha1":"7132fe5922538950f7be3474e762f4339021c157","sha256":"fd217a4c4c5d4c49e3695189c05724a8bd9c7dc4b84f11286d3d9dcf58ef4756","sha512":"d144377b1d38432bd637b60c5910f040abb0182b3c1447a4361db91b6362737ed5485093e0c74873e760614c2c87a12c1c7a85c49b4b9340cb81845574db8a71","ssdeep":"384:kwBFuVZJXPqwZRiWxJCFsSYVd1mekIgS+NdKHN6ZdtRT85jATCXR:kOFuz3LJZ/LmxIlHNsdbT+jAGR","tlshash":"d4a26cf2987c19f55b14e4902713a7849f42b71a8a825c1be1072dcdf3e3209f693aec","first_seen":"2025-03-13T07:56:58.625954Z","last_seen":"2026-06-06T23:56:38.298072Z","times_seen":72,"resource_available":false,"data":null}},"time_used":884,"timings":{"blocked":433,"dns":37,"connect":7,"send":0,"wait":9,"receive":0,"ssl":395},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img3.downza.cn/download/202108/114347-6110a473410d1.jpg?x-image-process=style/50-50","fqdn":"img3.downza.cn","domain":"downza.cn","tld":"cn"},"ip":{"addr":"113.240.117.108","port":443,"asn":63835,"as":"No.293,Wanbao Avenue","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.downza.cn/soft/360885.html","date":"2026-04-04T14:26:27.937Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img3.downza.cn","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Mon, 02 Mar 2026 00:00:00 GMT","end":"Sun, 31 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"55:2F:FB:08:6F:B4:C5:C2:09:87:88:75:54:0F:B8:93:BD:40:45:BC","sha256":"2C:BA:99:7E:59:AC:83:1E:DE:33:00:2E:51:95:4B:C4:18:0F:62:0D:8D:C4:BD:57:E4:43:A7:70:9C:65:8B:7D"}}},"request":{"raw":"GET /download/202108/114347-6110a473410d1.jpg?x-image-process=style/50-50 HTTP/1.1\r\nHost: img3.downza.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sat, 04 Apr 2026 14:26:44 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 2041\r\nConnection: keep-alive\r\nServer: openresty\r\nx-reserved: amazon, aws and amazon web services are trademarks or registered trademarks of Amazon Technologies, Inc\r\nCloudServiceDiscount: CDN\r\nx-amz-id-2: 36AAAQAAEAABAAAQAAEAABAAAQAAEAABAAAaI=AAAAAAAAAAAAAAAAAAAAAAAAAA\r\nx-amz-request-id: 0000019C07E7A84290167D732473AB7C\r\nETag: f6bc37b3dbe506c48f189ba4efca1a1c\r\nX-Oef-Request-Id: 34663636306237373237393a3233372e3131353a\r\nX-Request-Id: 34663636306237373237393a3233372e3131353a\r\nX-Transcode-Length: 4169\r\nvia: CHN-HNchangsha-AREACT1-CACHE46[3],CHN-HNchangsha-AREACT1-CACHE1[0,TCP_HIT,1],CHN-JSwuxi-GLOBAL2-CACHE7[11],CHN-JSwuxi-GLOBAL2-CACHE1[0,TCP_HIT,4]\r\nx-hcs-proxy-type: 1\r\nX-CCDN-CacheTTL: 31536000\r\nnginx-hit: 1\r\nAge: 4020589\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":2041,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=5], baseline, precision 8, 50x50, components 3","md5":"3309a764e6eb728cc1008448db8779d8","sha1":"879b8ce883207901da8cbc74248160c2e8d7a60a","sha256":"16867c9c041df320e9e9e74d909e4a4f729abf0f57b6380dd091f8dd12ecbd4a","sha512":"22f2d74d80638bc5a1ba886ad50bdcd1f3f1fc265494742cfa9eec63c72925f2704283fc9f06b7171fc3b0c04c4edbcd6a3f5f22f7bb9693d159ed45d58c804e","ssdeep":"","tlshash":"1e41c66c95039ef6d9d26eb01165c7217387a8ca693f614320658c0d30334a6a9b3298","first_seen":"2025-07-22T11:13:12.1884Z","last_seen":"2026-04-04T14:27:36.5022Z","times_seen":2,"resource_available":false,"data":null}},"time_used":16803,"timings":{"blocked":16522,"dns":0,"connect":0,"send":0,"wait":281,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img3.downza.cn/download/202201/115745-61e4e93917294.jpg","fqdn":"img3.downza.cn","domain":"downza.cn","tld":"cn"},"ip":{"addr":"113.240.117.108","port":443,"asn":63835,"as":"No.293,Wanbao Avenue","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.downza.cn/soft/360885.html","date":"2026-04-04T14:26:28.163Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img3.downza.cn","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Mon, 02 Mar 2026 00:00:00 GMT","end":"Sun, 31 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"55:2F:FB:08:6F:B4:C5:C2:09:87:88:75:54:0F:B8:93:BD:40:45:BC","sha256":"2C:BA:99:7E:59:AC:83:1E:DE:33:00:2E:51:95:4B:C4:18:0F:62:0D:8D:C4:BD:57:E4:43:A7:70:9C:65:8B:7D"}}},"request":{"raw":"GET /download/202201/115745-61e4e93917294.jpg HTTP/1.1\r\nHost: img3.downza.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sat, 04 Apr 2026 14:26:46 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 4432\r\nConnection: keep-alive\r\nServer: openresty\r\nx-reserved: amazon, aws and amazon web services are trademarks or registered trademarks of Amazon Technologies, Inc\r\nCloudServiceDiscount: CDN\r\nx-amz-request-id: 000001963BB7F56590074A14D825345F\r\nETag: \"b5f29f322ab85cbd0a82d87ef7676bca\"\r\nLast-Modified: Mon, 17 Jan 2022 03:57:45 GMT\r\nx-amz-id-2: 32AAAQAAEAABAAAQAAEAABAAAQAAEAABCSAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA\r\nvia: CHN-HNchangsha-AREACT1-CACHE46[26],CHN-HNchangsha-AREACT1-CACHE3[0,TCP_HIT,23],CHN-JSwuxi-GLOBAL2-CACHE96[13],CHN-JSwuxi-GLOBAL2-CACHE3[0,TCP_HIT,4]\r\nx-hcs-proxy-type: 1\r\nX-CCDN-CacheTTL: 31536000\r\nnginx-hit: 1\r\nAge: 4953074\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4432,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 80 x 80, 8-bit/color RGBA, non-interlaced","md5":"b5f29f322ab85cbd0a82d87ef7676bca","sha1":"9c13c0719b41e0fddf90adf6950259860e02f0ad","sha256":"e065bc65e69440151e799811dcdc2b0f954fe03dbe57c44229e38effd1aa8763","sha512":"02e8c5731cdaeeabde768d8d4e39e6f918bbc3f64f4c1c1b81dfa06affe6f5ecc74a85c9e35790bc2e634f79f2461b42772aa9d7d465d30ec610970cb9060c77","ssdeep":"96:GsnKvHeGjSQ5kG6l8u2CI0jclmuCh9NLNsCvDpbDNQtanMktnoHxS5i:GsKveGjbPMF2BP9cpssVC++xX","tlshash":"8391ada384db66b38e042fe1436c2189de588ec80686c72a810767dd677b1f4d18e2f0","first_seen":"2025-07-22T11:13:12.201969Z","last_seen":"2026-04-04T14:27:36.503648Z","times_seen":2,"resource_available":false,"data":null}},"time_used":18131,"timings":{"blocked":17828,"dns":0,"connect":0,"send":0,"wait":303,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"res.njxzwh.com/downza/pc/v2023/js/jquery.SuperSlide.2.1.1.js?2026040412","fqdn":"res.njxzwh.com","domain":"njxzwh.com","tld":"com"},"ip":{"addr":"113.240.117.107","port":443,"asn":63835,"as":"No.293,Wanbao Avenue","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.downza.cn/soft/360885.html","date":"2026-04-04T14:26:28.199Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"res.njxzwh.com","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Thu, 19 Feb 2026 00:00:00 GMT","end":"Wed, 20 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"BF:F9:0C:9F:DA:C1:19:17:44:6C:7F:14:F0:08:EE:C7:99:CB:76:4C","sha256":"9E:13:1A:33:49:E6:F7:8B:29:45:3C:6B:D3:41:4A:A5:B6:45:DD:0A:0B:C4:36:10:64:FD:EF:64:9D:7A:C2:69"}}},"request":{"raw":"GET /downza/pc/v2023/js/jquery.SuperSlide.2.1.1.js?2026040412 HTTP/1.1\r\nHost: res.njxzwh.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.downza.cn/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sat, 04 Apr 2026 14:26:30 GMT\r\nContent-Type: text/javascript\r\nContent-Length: 11422\r\nConnection: keep-alive\r\nServer: openresty\r\nx-reserved: amazon, aws and amazon web services are trademarks or registered trademarks of Amazon Technologies, Inc\r\nCloudServiceDiscount: CDN\r\nx-amz-request-id: 0000019D56A5D0B197A6740074B1DC14\r\nETag: \"cd674d9e02f20426d9acf1d11c85539b\"\r\nLast-Modified: Thu, 30 Oct 2025 09:32:43 GMT\r\nx-amz-id-2: 36AAAQAAEAABAAAQAAEAABAAAQAAEAABAAAaI=AAAAAAAAAAAAAAAAAAAAAAAAAA\r\nX-CCDN-Expires: 49219\r\nvia: CHN-HNchangsha-AREACT1-CACHE66[9],CHN-HNchangsha-AREACT1-CACHE57[0,TCP_HIT,1],CHN-JSwuxi-GLOBAL2-CACHE10[3],CHN-JSwuxi-GLOBAL2-CACHE104[0,TCP_HIT,1]\r\nx-hcs-proxy-type: 1\r\nX-CCDN-CacheTTL: 86400\r\nnginx-hit: 1\r\nAge: 37181\r\nAccept-Ranges: bytes\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: OPTION,GET\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":11422,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (10855), with CRLF line terminators","md5":"0b9bc63ab05e21e3830da5bbb4ccee67","sha1":"d162156bdaf14217d76d920e0e57b86d8feb1d97","sha256":"349e46b2c65028736d0bbff7b829c7fc6fbdebc1fb1e8b12365a0ca2e6e9e848","sha512":"bdfa220da1f08e29f05a9984c4999d7e742bea10ad86b7e497a0d112c7992cc52b7f1e9f5430b4286f14bb2336110f85cbdc3164a92121caaf5c91961f7e69c9","ssdeep":"192:j+K3bxH+nqfhD9VUVjIItpfg5uXG3+1tSCl+7flvSXwaHxImISLTNSfYXH7Le2HE:jNcnqflKFgEWulE8REcS3j/CkR1Xh3","tlshash":"9532c65fb66635ca4597b3f1107f940d222b5965fc8a8ca0b17082c0adb9a1c243bfed","first_seen":"2023-04-05T11:06:31Z","last_seen":"2026-06-17T23:54:24.234926Z","times_seen":13913,"resource_available":true,"data":null}},"time_used":2509,"timings":{"blocked":2190,"dns":0,"connect":0,"send":0,"wait":318,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"res.njxzwh.com/downza/pc/v2023/js/detail.js?2026040412","fqdn":"res.njxzwh.com","domain":"njxzwh.com","tld":"com"},"ip":{"addr":"113.240.117.107","port":443,"asn":63835,"as":"No.293,Wanbao Avenue","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.downza.cn/soft/360885.html","date":"2026-04-04T14:26:28.200Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"res.njxzwh.com","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Thu, 19 Feb 2026 00:00:00 GMT","end":"Wed, 20 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"BF:F9:0C:9F:DA:C1:19:17:44:6C:7F:14:F0:08:EE:C7:99:CB:76:4C","sha256":"9E:13:1A:33:49:E6:F7:8B:29:45:3C:6B:D3:41:4A:A5:B6:45:DD:0A:0B:C4:36:10:64:FD:EF:64:9D:7A:C2:69"}}},"request":{"raw":"GET /downza/pc/v2023/js/detail.js?2026040412 HTTP/1.1\r\nHost: res.njxzwh.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.downza.cn/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sat, 04 Apr 2026 14:26:30 GMT\r\nContent-Type: text/javascript\r\nContent-Length: 4413\r\nConnection: keep-alive\r\nServer: openresty\r\nx-reserved: amazon, aws and amazon web services are trademarks or registered trademarks of Amazon Technologies, Inc\r\nCloudServiceDiscount: CDN\r\nx-amz-request-id: 0000019D56A5E7B497A7B8AD305318C6\r\nETag: \"b9df3fe2e7265ce4938428ed4f20f03c\"\r\nLast-Modified: Thu, 30 Oct 2025 09:32:43 GMT\r\nx-amz-id-2: 36AAAQAAEAABAAAQAAEAABAAAQAAEAABAAAaI=AAAAAAAAAAAAAAAAAAAAAAAAAA\r\nX-CCDN-Expires: 49220\r\nvia: CHN-HNchangsha-AREACT1-CACHE27[16],CHN-HNchangsha-AREACT1-CACHE51[0,TCP_HIT,14],CHN-JSwuxi-GLOBAL2-CACHE59[8],CHN-JSwuxi-GLOBAL2-CACHE110[0,TCP_HIT,7]\r\nx-hcs-proxy-type: 1\r\nX-CCDN-CacheTTL: 86400\r\nnginx-hit: 1\r\nAge: 37180\r\nAccept-Ranges: bytes\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: OPTION,GET\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4413,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with CRLF line terminators","md5":"b9df3fe2e7265ce4938428ed4f20f03c","sha1":"bf8d062485b95aaf40898508172256dca7b051ee","sha256":"51c50d7e774b5ffdcf1f84fd2349932ae5a3e2527551bb05d43b499435232938","sha512":"41ed7dde17f83cc0724a3194174b24f11ac3d226add096539d042fb82ace14184dc8418c60d9b0d1434ae0dd8e218a10c3ee4bb6a317f7531afd3e929669fb15","ssdeep":"96:w4zYnZ4z8nDV4zYn44wMmwHW6nk27ENACWIvAK2L4:w4zYZ4z8R4zY44wMmwR3XL4","tlshash":"af912f49b9002a6468bfa73f6a7b6404db1a5513c161e200f09e48e61f701a477f3ede","first_seen":"2025-11-02T09:13:30.168288Z","last_seen":"2026-06-06T23:56:38.286398Z","times_seen":37,"resource_available":true,"data":null}},"time_used":2494,"timings":{"blocked":2200,"dns":0,"connect":0,"send":0,"wait":294,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img3.downza.cn/softbaike/202407/173717-669f79cd70cce.jpg","fqdn":"img3.downza.cn","domain":"downza.cn","tld":"cn"},"ip":{"addr":"113.240.117.108","port":443,"asn":63835,"as":"No.293,Wanbao Avenue","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.downza.cn/soft/360885.html","date":"2026-04-04T14:26:28.021Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img3.downza.cn","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Mon, 02 Mar 2026 00:00:00 GMT","end":"Sun, 31 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"55:2F:FB:08:6F:B4:C5:C2:09:87:88:75:54:0F:B8:93:BD:40:45:BC","sha256":"2C:BA:99:7E:59:AC:83:1E:DE:33:00:2E:51:95:4B:C4:18:0F:62:0D:8D:C4:BD:57:E4:43:A7:70:9C:65:8B:7D"}}},"request":{"raw":"GET /softbaike/202407/173717-669f79cd70cce.jpg HTTP/1.1\r\nHost: img3.downza.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.downza.cn/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sat, 04 Apr 2026 14:26:44 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 59283\r\nConnection: keep-alive\r\nServer: openresty\r\nx-reserved: amazon, aws and amazon web services are trademarks or registered trademarks of Amazon Technologies, Inc\r\nCloudServiceDiscount: CDN\r\nx-amz-request-id: 0000019C07C31F1B9058AAAF8E457095\r\nETag: \"72d458e528938af9ed09697fb202ee39\"\r\nLast-Modified: Tue, 23 Jul 2024 09:37:17 GMT\r\nx-amz-id-2: 36AAAQAAEAABAAAQAAEAABAAAQAAEAABAAAaI=AAAAAAAAAAAAAAAAAAAAAAAAAA\r\nvia: CHN-HNchangsha-AREACT1-CACHE46[4],CHN-HNchangsha-AREACT1-CACHE19[0,TCP_HIT,2],CHN-JSwuxi-GLOBAL2-CACHE2[25],CHN-JSwuxi-GLOBAL2-CACHE19[0,TCP_HIT,23]\r\nx-hcs-proxy-type: 1\r\nX-CCDN-CacheTTL: 31536000\r\nnginx-hit: 1\r\nAge: 2990812\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":59283,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=1, software=www.meitu.com], baseline, precision 8, 243x243, components 3","md5":"72d458e528938af9ed09697fb202ee39","sha1":"66478ac59b8039b3b0965ec538db3ebfb0006e5e","sha256":"744903056f9effb93ebb65a918ba3dc84d653b8a852d63c1f21030d60ad5408e","sha512":"330439216482e55efc8526ef09d747b8183a1256830edd43a623370ee9a8e6a1b3155f203f06095836d807d3c6c61c514be6587029f76dc6e1fd7a0d032c51c5","ssdeep":"1536:CAP1RDi9BJ4S0aRSZdTlsQEoBBkuVESgkJ/tHqzBvhIVDeHcLr8aNkRa7:RP1RDu/DqbBykekj8gd0Fc7","tlshash":"914301e6f7cafc4e433e262482e62454739869d922c0d8d1020fd5d6e3e9e78e541b6c","first_seen":"2025-06-15T16:39:48.23145Z","last_seen":"2026-06-06T23:56:38.221612Z","times_seen":27,"resource_available":false,"data":null}},"time_used":17161,"timings":{"blocked":16720,"dns":0,"connect":0,"send":0,"wait":316,"receive":125,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img3.downza.cn/softbaike/202405/171156-664b13dc6b0f1.jpg","fqdn":"img3.downza.cn","domain":"downza.cn","tld":"cn"},"ip":{"addr":"113.240.117.108","port":443,"asn":63835,"as":"No.293,Wanbao Avenue","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.downza.cn/soft/360885.html","date":"2026-04-04T14:26:28.027Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img3.downza.cn","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Mon, 02 Mar 2026 00:00:00 GMT","end":"Sun, 31 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"55:2F:FB:08:6F:B4:C5:C2:09:87:88:75:54:0F:B8:93:BD:40:45:BC","sha256":"2C:BA:99:7E:59:AC:83:1E:DE:33:00:2E:51:95:4B:C4:18:0F:62:0D:8D:C4:BD:57:E4:43:A7:70:9C:65:8B:7D"}}},"request":{"raw":"GET /softbaike/202405/171156-664b13dc6b0f1.jpg HTTP/1.1\r\nHost: img3.downza.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.downza.cn/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sat, 04 Apr 2026 14:26:45 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 38561\r\nConnection: keep-alive\r\nServer: openresty\r\nx-reserved: amazon, aws and amazon web services are trademarks or registered trademarks of Amazon Technologies, Inc\r\nCloudServiceDiscount: CDN\r\nx-amz-request-id: 00000194107CCB5D9058C2D0D3988ACD\r\nETag: \"fa6c0e1e342522005cbf29829a81d95d\"\r\nLast-Modified: Mon, 20 May 2024 09:11:56 GMT\r\nx-amz-id-2: 32AAAQAAEAABAAAQAAEAABAAAQAAEAABCSAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA\r\nvia: CHN-HNchangsha-AREACT1-CACHE46[10],CHN-HNchangsha-AREACT1-CACHE48[0,TCP_HIT,6],CHN-JSwuxi-GLOBAL2-CACHE4[24],CHN-JSwuxi-GLOBAL2-CACHE48[0,TCP_HIT,22],CHN-SH-GLOBAL4-CACHE139[17],CHN-SH-GLOBAL4-CACHE4[0,TCP_HIT,14]\r\nx-hcs-proxy-type: 1\r\nX-CCDN-CacheTTL: 31536000\r\nnginx-hit: 1\r\nAge: 4390446\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":38561,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 233 x 233, 8-bit/color RGBA, non-interlaced","md5":"fa6c0e1e342522005cbf29829a81d95d","sha1":"2f7d900286d3ad55eea563a793dc864340945773","sha256":"004456c2156a762c7e455e81b3285d58928f99191d3590ba2ea2480e07eb9372","sha512":"2e1a7a941b166a35ad76d20f26bac0581f916fa1ced64fcb4679c7a485607e2d74a95bc93c5a0f2184fc1cace7ee37627f622b5aef7850fe88f89157cb9fef78","ssdeep":"768:nKLXoLKbr3/kzHkn/AW+BrrgGifzCpUJ9vxS:nKLYLwMaIfgGSXfS","tlshash":"c703f18172d6a7047dbbec3f84d2c055137832f1bc77141624a2f9626e9b0678f5eb94","first_seen":"2025-06-15T16:39:48.170562Z","last_seen":"2026-06-06T23:56:38.342882Z","times_seen":27,"resource_available":false,"data":null}},"time_used":17549,"timings":{"blocked":17173,"dns":0,"connect":0,"send":0,"wait":317,"receive":59,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sp0.baidu.com/9_Q4simg2RQJ8t7jm9iCKT-xh_/s.gif?l=https://www.downza.cn/soft/360885.html","fqdn":"sp0.baidu.com","domain":"baidu.com","tld":"com"},"ip":{"addr":"103.235.46.102","port":443,"asn":55967,"as":"Beijing Baidu Netcom Science and Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.downza.cn/soft/360885.html","date":"2026-04-04T14:26:44.395Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"baidu.com","organization":"Beijing Baidu Netcom Science Technology Co., Ltd"},"issuer":{"commonName":"GlobalSign RSA OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 09 Jul 2025 07:01:02 GMT","end":"Mon, 10 Aug 2026 07:01:01 GMT"},"fingerprint":{"sha1":"21:BF:66:0D:67:BE:7A:7F:49:48:05:30:F4:7F:09:F2:30:36:CA:63","sha256":"0D:82:2C:9A:90:5A:EF:E9:8F:37:12:C0:E0:26:30:EE:95:33:2C:45:5F:E7:74:5D:F0:8D:BC:79:F4:B0:A1:49"}}},"request":{"raw":"GET /9_Q4simg2RQJ8t7jm9iCKT-xh_/s.gif?l=https://www.downza.cn/soft/360885.html HTTP/1.1\r\nHost: sp0.baidu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.downza.cn/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Length: 0\r\nContent-Type: text/plain; charset=utf-8\r\nDate: Sat, 04 Apr 2026 14:26:45 GMT\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-18T01:31:21.233037Z","times_seen":16497762,"resource_available":true,"data":null}},"time_used":1145,"timings":{"blocked":-1,"dns":4,"connect":261,"send":0,"wait":336,"receive":4,"ssl":540},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"local.info.g9hc4.cn:51360/?callback=uuidjsonpcb2020\u0026t=1775312805011","fqdn":"local.info.g9hc4.cn","domain":"g9hc4.cn","tld":"cn"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://s.union.360.cn/proxy.html","date":"2026-04-04T14:26:45.015Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /?callback=uuidjsonpcb2020\u0026t=1775312805011 HTTP/1.1\r\nHost: local.info.g9hc4.cn:51360\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://s.union.360.cn/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-18T01:31:21.233037Z","times_seen":16497762,"resource_available":true,"data":null}},"time_used":1,"timings":{"blocked":0,"dns":1,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cbjs.baidu.com/js/m.js","fqdn":"cbjs.baidu.com","domain":"baidu.com","tld":"com"},"ip":{"addr":"119.188.176.49","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.downza.cn/soft/360885.html","date":"2026-04-04T14:26:27.894Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"baidu.com","organization":"Beijing Baidu Netcom Science Technology Co., Ltd"},"issuer":{"commonName":"GlobalSign RSA OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 09 Jul 2025 07:01:02 GMT","end":"Mon, 10 Aug 2026 07:01:01 GMT"},"fingerprint":{"sha1":"21:BF:66:0D:67:BE:7A:7F:49:48:05:30:F4:7F:09:F2:30:36:CA:63","sha256":"0D:82:2C:9A:90:5A:EF:E9:8F:37:12:C0:E0:26:30:EE:95:33:2C:45:5F:E7:74:5D:F0:8D:BC:79:F4:B0:A1:49"}}},"request":{"raw":"GET /js/m.js HTTP/1.1\r\nHost: cbjs.baidu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.downza.cn/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: JSP3/2.0.14\r\ndate: Sat, 04 Apr 2026 14:26:29 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\nlast-modified: Fri, 20 Jun 2025 03:28:07 GMT\r\ncontent-encoding: br\r\nage: 51\r\naccept-ranges: bytes\r\nohc-global-saved-time: Sat, 04 Apr 2026 14:25:38 GMT\r\nohc-cache-hit: jn2un54 [2]\r\nohc-response-time: 1 0 0 0 0 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":117379,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65532), with no line terminators","md5":"b543dbe074718c21f7f5e7cbf1aff034","sha1":"99ef1caf9c69e99a60c2f0ee33720cb40cdf1cc8","sha256":"b6a34b928d00909e40ec7edfadd89ac0cfa1fcc5892bdf3168b60b28a5bfe1f6","sha512":"56d74637e8023b8983c240ec595528c56ed7d84f461fd4a1e16d329906a2dbfd023a8d519a68b1458a48f9cd19176df60dc099102640f0c3589c3bddd69221b7","ssdeep":"3072:GpOyaTRXqCpCOjwlfbitfD9mxf1W4OwYsRQD+fgpNCpIdlw:GpBApCO0fyfDcTQD+fgXRdlw","tlshash":"f4b3e899f6d2742546a220a4162f2609b2375548748b8480f67ee8d1fdbcf4f607bfbc","first_seen":"2025-06-30T07:43:55.721259Z","last_seen":"2026-06-15T10:15:23.743114Z","times_seen":1044,"resource_available":true,"data":null}},"time_used":1580,"timings":{"blocked":-1,"dns":556,"connect":253,"send":0,"wait":250,"receive":0,"ssl":510},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"res.njxzwh.com/downza/pc/v2023/images/logo.png","fqdn":"res.njxzwh.com","domain":"njxzwh.com","tld":"com"},"ip":{"addr":"113.240.117.107","port":443,"asn":63835,"as":"No.293,Wanbao Avenue","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.downza.cn/soft/360885.html","date":"2026-04-04T14:26:27.900Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"res.njxzwh.com","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Thu, 19 Feb 2026 00:00:00 GMT","end":"Wed, 20 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"BF:F9:0C:9F:DA:C1:19:17:44:6C:7F:14:F0:08:EE:C7:99:CB:76:4C","sha256":"9E:13:1A:33:49:E6:F7:8B:29:45:3C:6B:D3:41:4A:A5:B6:45:DD:0A:0B:C4:36:10:64:FD:EF:64:9D:7A:C2:69"}}},"request":{"raw":"GET /downza/pc/v2023/images/logo.png HTTP/1.1\r\nHost: res.njxzwh.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.downza.cn/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sat, 04 Apr 2026 14:26:42 GMT\r\nContent-Type: image/png\r\nContent-Length: 17183\r\nConnection: keep-alive\r\nServer: openresty\r\nx-reserved: amazon, aws and amazon web services are trademarks or registered trademarks of Amazon Technologies, Inc\r\nCloudServiceDiscount: CDN\r\nx-amz-request-id: 0000019D4822A92797479F67A3168A03\r\nETag: \"2574cd7ed542c26b9f99e293108749ad\"\r\nLast-Modified: Thu, 30 Oct 2025 09:32:41 GMT\r\nx-amz-id-2: 36AAAQAAEAABAAAQAAEAABAAAQAAEAABAAAaI=AAAAAAAAAAAAAAAAAAAAAAAAAA\r\nX-CCDN-Expires: 2311017\r\nvia: CHN-HNchangsha-AREACT1-CACHE20[6],CHN-HNchangsha-AREACT1-CACHE42[0,TCP_HIT,4],CHN-JSwuxi-GLOBAL2-CACHE18[3],CHN-JSwuxi-GLOBAL2-CACHE95[0,TCP_HIT,2]\r\nx-hcs-proxy-type: 1\r\nX-CCDN-CacheTTL: 2592000\r\nnginx-hit: 1\r\nAge: 280983\r\nAccept-Ranges: bytes\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: OPTION,GET\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":17183,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 107 x 39, 8-bit/color RGBA, non-interlaced","md5":"2574cd7ed542c26b9f99e293108749ad","sha1":"c7d8ca97763dca067477c0be05673268dc668d8e","sha256":"0e77996a966214e9a98d9bb0069ed5e28754db8a3f2be466939268cabddea1a1","sha512":"bf75bdcfa2c55a2897bbf57e3d56cc278068755e821b981c103215f6c5b3dac5b4c98bd326eb96069e16b916c480f2d378be3cad2ea91ee333572b3a179c4bf9","ssdeep":"96:5S/kEWR2xNXrNGQhGKy79csc5hGlAFkhbYIrzngIcBEbL79dJPUzMkIe:5S/ktM5Dy79xLxFceLhdJU1Ie","tlshash":"90720898eef134919589e4320ec0354a9da31e8789d2dc06bbcd9e5bff117a94c6f182","first_seen":"2024-05-31T23:55:31Z","last_seen":"2026-06-06T23:56:38.280139Z","times_seen":83,"resource_available":false,"data":null}},"time_used":14378,"timings":{"blocked":14013,"dns":0,"connect":0,"send":0,"wait":352,"receive":13,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img3.downza.cn/capmobile/202604/191539-69ce4fdbb18e5.png","fqdn":"img3.downza.cn","domain":"downza.cn","tld":"cn"},"ip":{"addr":"113.240.117.108","port":443,"asn":63835,"as":"No.293,Wanbao Avenue","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.downza.cn/soft/360885.html","date":"2026-04-04T14:26:28.131Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img3.downza.cn","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Mon, 02 Mar 2026 00:00:00 GMT","end":"Sun, 31 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"55:2F:FB:08:6F:B4:C5:C2:09:87:88:75:54:0F:B8:93:BD:40:45:BC","sha256":"2C:BA:99:7E:59:AC:83:1E:DE:33:00:2E:51:95:4B:C4:18:0F:62:0D:8D:C4:BD:57:E4:43:A7:70:9C:65:8B:7D"}}},"request":{"raw":"GET /capmobile/202604/191539-69ce4fdbb18e5.png HTTP/1.1\r\nHost: img3.downza.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.downza.cn/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sat, 04 Apr 2026 14:26:43 GMT\r\nContent-Type: image/png\r\nContent-Length: 32712\r\nConnection: keep-alive\r\nServer: openresty\r\nx-reserved: amazon, aws and amazon web services are trademarks or registered trademarks of Amazon Technologies, Inc\r\nCloudServiceDiscount: CDN\r\nx-amz-request-id: 0000019D527E8BCF97C9945A9B8AC8C2\r\nETag: \"af67514fec8acfdfae897b6ad14abfb3\"\r\nLast-Modified: Thu, 02 Apr 2026 11:15:39 GMT\r\nx-amz-id-2: 36AAAQAAEAABAAAQAAEAABAAAQAAEAABAAAaI=AAAAAAAAAAAAAAAAAAAAAAAAAA\r\nvia: CHN-HNchangsha-AREACT1-CACHE36[20],CHN-HNchangsha-AREACT1-CACHE11[0,TCP_HIT,19],CHN-JSwuxi-GLOBAL2-CACHE97[23],CHN-JSwuxi-GLOBAL2-CACHE11[0,TCP_HIT,20]\r\nx-hcs-proxy-type: 1\r\nX-CCDN-CacheTTL: 31536000\r\nnginx-hit: 1\r\nAge: 102735\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":32712,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced","md5":"af67514fec8acfdfae897b6ad14abfb3","sha1":"7559f1dff2493638609af0306f5402d77904c7eb","sha256":"365b627db5f929e47d2551b8714409c2f28c902ba7c5112765ec9f31d8ea99d0","sha512":"51be3c8dd322d4e45192654d4a9b2c8da5d4dfed07142db39ee2744ebfee31c4d6b75db6e7061003b058031786ca732aa9a8d4f6d5dfb262b1b70c8ecefff247","ssdeep":"768:K3yxQmy4LZwIaN5vdK4zddYZOTmK1ZTg5j00RcXCt:KCPy4LZCvdvpmK1ZT50Rft","tlshash":"57e2f1a0b9cd4e73bba8a28a08c9efd67f27e0047548250fb9da549d635f3488d2044f","first_seen":"2026-04-04T14:27:36.509163Z","last_seen":"2026-04-04T14:27:36.509163Z","times_seen":1,"resource_available":false,"data":null}},"time_used":16060,"timings":{"blocked":13782,"dns":1,"connect":1306,"send":0,"wait":390,"receive":286,"ssl":295},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img3.downza.cn/capmobile/202603/051817-69a9f31973e01.jpg","fqdn":"img3.downza.cn","domain":"downza.cn","tld":"cn"},"ip":{"addr":"113.240.117.108","port":443,"asn":63835,"as":"No.293,Wanbao Avenue","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.downza.cn/soft/360885.html","date":"2026-04-04T14:26:28.134Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img3.downza.cn","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Mon, 02 Mar 2026 00:00:00 GMT","end":"Sun, 31 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"55:2F:FB:08:6F:B4:C5:C2:09:87:88:75:54:0F:B8:93:BD:40:45:BC","sha256":"2C:BA:99:7E:59:AC:83:1E:DE:33:00:2E:51:95:4B:C4:18:0F:62:0D:8D:C4:BD:57:E4:43:A7:70:9C:65:8B:7D"}}},"request":{"raw":"GET /capmobile/202603/051817-69a9f31973e01.jpg HTTP/1.1\r\nHost: img3.downza.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.downza.cn/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sat, 04 Apr 2026 14:26:44 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 9450\r\nConnection: keep-alive\r\nServer: openresty\r\nx-reserved: amazon, aws and amazon web services are trademarks or registered trademarks of Amazon Technologies, Inc\r\nCloudServiceDiscount: CDN\r\nx-amz-request-id: 0000019D517FBC2797AAC008F561AD8F\r\nETag: \"54a2a5decb0550e4191ea17bd11b1a96\"\r\nLast-Modified: Thu, 05 Mar 2026 21:18:17 GMT\r\nx-amz-id-2: 36AAAQAAEAABAAAQAAEAABAAAQAAEAABAAAaI=AAAAAAAAAAAAAAAAAAAAAAAAAA\r\nvia: CHN-HNchangsha-AREACT1-CACHE57[3],CHN-HNchangsha-AREACT1-CACHE57[0,TCP_HIT,1],CHN-JSwuxi-GLOBAL2-CACHE12[4],CHN-JSwuxi-GLOBAL2-CACHE57[0,TCP_HIT,3]\r\nx-hcs-proxy-type: 1\r\nX-CCDN-CacheTTL: 31536000\r\nnginx-hit: 1\r\nAge: 118624\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":9450,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 216x216, components 3","md5":"54a2a5decb0550e4191ea17bd11b1a96","sha1":"bfdeed66a8af3439bb11641a4198406d036e6c5e","sha256":"ffca08f3b2165d053c5ebc55d4f4f32c92ba1810e1c292c32a390c33ab313c34","sha512":"7f534758455841ddc10bcb57ac087e5714eb158cccad3f624c8ed8fd2801a8f9d327e4bc1d32acbc9265da1aa12b986db6733b710b2b4ba8d4d8c5fa319453f6","ssdeep":"192:XmqGj926pVNPkc5lXtQ6A5YUJ5TVKuF5nszRQLA1K0jLc:6j9Bprkc89OUJBkEnWfg","tlshash":"f5128c89364d94d9f888022fce583e88afc68cad2c61c6b509f077778a32ee5541e635","first_seen":"2026-04-04T14:27:36.510805Z","last_seen":"2026-04-04T14:27:36.510805Z","times_seen":1,"resource_available":false,"data":null}},"time_used":16774,"timings":{"blocked":13779,"dns":1,"connect":281,"send":0,"wait":2201,"receive":1,"ssl":510},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"res.njxzwh.com/downza/pc/v2023/images/gwba.png","fqdn":"res.njxzwh.com","domain":"njxzwh.com","tld":"com"},"ip":{"addr":"113.240.117.107","port":443,"asn":63835,"as":"No.293,Wanbao Avenue","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.downza.cn/soft/360885.html","date":"2026-04-04T14:26:28.194Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"res.njxzwh.com","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Thu, 19 Feb 2026 00:00:00 GMT","end":"Wed, 20 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"BF:F9:0C:9F:DA:C1:19:17:44:6C:7F:14:F0:08:EE:C7:99:CB:76:4C","sha256":"9E:13:1A:33:49:E6:F7:8B:29:45:3C:6B:D3:41:4A:A5:B6:45:DD:0A:0B:C4:36:10:64:FD:EF:64:9D:7A:C2:69"}}},"request":{"raw":"GET /downza/pc/v2023/images/gwba.png HTTP/1.1\r\nHost: res.njxzwh.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.downza.cn/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sat, 04 Apr 2026 14:26:42 GMT\r\nContent-Type: image/png\r\nContent-Length: 19256\r\nConnection: keep-alive\r\nServer: openresty\r\nx-reserved: amazon, aws and amazon web services are trademarks or registered trademarks of Amazon Technologies, Inc\r\nCloudServiceDiscount: CDN\r\nx-amz-request-id: 0000019D4822A794901B54D755F6E92C\r\nETag: \"d0289dc0a46fc5b15b3363ffa78cf6c7\"\r\nLast-Modified: Thu, 30 Oct 2025 09:32:38 GMT\r\nx-amz-id-2: 36AAAQAAEAABAAAQAAEAABAAAQAAEAABAAAaI=AAAAAAAAAAAAAAAAAAAAAAAAAA\r\nX-CCDN-Expires: 2311018\r\nvia: CHN-HNchangsha-AREACT1-CACHE6[3],CHN-HNchangsha-AREACT1-CACHE67[0,TCP_HIT,2],CHN-JSwuxi-GLOBAL2-CACHE104[3],CHN-JSwuxi-GLOBAL2-CACHE67[0,TCP_HIT,1]\r\nx-hcs-proxy-type: 1\r\nX-CCDN-CacheTTL: 2592000\r\nnginx-hit: 1\r\nAge: 280982\r\nAccept-Ranges: bytes\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: OPTION,GET\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":19256,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 20 x 20, 8-bit/color RGBA, non-interlaced","md5":"d0289dc0a46fc5b15b3363ffa78cf6c7","sha1":"29c400bc3b89f6085766dac4e0330ded5cb73d52","sha256":"a20583c81805fe64f7fa210851ce29754af9d25fd6aa5a3225a9557529602513","sha512":"10a9cd6fd64b8107db8b058eb8c4cc0fe23bb5c13a91d40caf93d323f4a15f1b34463bf0eacb0239c6dbd699ec6c49a8625e86cec674cc7b351509155b889e7f","ssdeep":"96:VSMllcHitlIxv9vk7C1+I4wWHLihk/xGWvki7rxmVKXUsDEVWvdNGthls+GfNXrL:VSHIIHUCD4wabkijpso15909rfEx","tlshash":"1c823928fcf0b125548993393de674095c779bc3c681ac45badc8a0b6f00fa95d6b183","first_seen":"2023-04-16T20:03:19Z","last_seen":"2026-06-17T23:43:04.616447Z","times_seen":10295,"resource_available":false,"data":null}},"time_used":14041,"timings":{"blocked":13719,"dns":0,"connect":0,"send":0,"wait":316,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.oss.downza.com/oss/advertisingApi/getAdvertisingCodeByModuleIdNew?moduleId=23\u0026classify=-1444-1445-1447\u0026source=3","fqdn":"api.oss.downza.com","domain":"downza.com","tld":"com"},"ip":{"addr":"116.153.39.132","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.downza.cn/soft/360885.html","date":"2026-04-04T14:26:41.986Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.oss.downza.com","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Sat, 21 Feb 2026 00:00:00 GMT","end":"Fri, 22 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"51:F3:BC:93:01:05:68:55:CB:77:6D:BA:1E:DC:2F:03:69:31:DE:2D","sha256":"2F:A0:D3:49:D2:78:EE:E4:59:8B:A8:ED:84:E3:3E:47:27:83:3A:E6:BE:5F:B7:46:15:45:AE:FE:7C:C9:B9:AF"}}},"request":{"raw":"GET /oss/advertisingApi/getAdvertisingCodeByModuleIdNew?moduleId=23\u0026classify=-1444-1445-1447\u0026source=3 HTTP/1.1\r\nHost: api.oss.downza.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.downza.cn\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.downza.cn/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sat, 04 Apr 2026 14:26:44 GMT\r\nContent-Type: application/json;charset=UTF-8\r\nContent-Length: 287\r\nConnection: keep-alive\r\nServer: openresty\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: GET,POST,DELETE,PUT,OPTIONS\r\nAccess-Control-Allow-Headers: *\r\nX-CCDN-Expires: 2148587\r\nvia: CHN-JXnanchang-AREACUCC1-CACHE22[3],CHN-JXnanchang-AREACUCC1-CACHE16[0,TCP_HIT,1],CHN-JSwuxi-GLOBAL2-CACHE46[6],CHN-JSwuxi-GLOBAL2-CACHE16[0,TCP_HIT,2]\r\nx-hcs-proxy-type: 1\r\nX-CCDN-CacheTTL: 2592000\r\nnginx-hit: 1\r\nAge: 443420\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":287,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"aef3d3951eabcc44414315b4835438f8","sha1":"3212add1b00aea61f7b522b3f8333328897dbfb9","sha256":"a0ab555b26f65bb2658db34ca6d82ce8c5b9cc906001e712e78017d30f15f4b6","sha512":"d3ccd07733e61f360b4795f1a743d8b999e7b065fc3688f188a12bd02179aa69c7f5dbf2716696d784c4bef45a17a21bba549f3a449860a3f39fa138a20aa8cd","ssdeep":"","tlshash":"55d0ebe3e58ccdd88aa5408c171a70ecd0e3b2870c8bd4005c2c452ce590032202eeeb","first_seen":"2025-08-18T23:56:19.288174Z","last_seen":"2026-04-04T14:27:36.512899Z","times_seen":17,"resource_available":false,"data":null}},"time_used":3091,"timings":{"blocked":-1,"dns":1220,"connect":567,"send":0,"wait":278,"receive":0,"ssl":1049},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"res.njxzwh.com/downza/pc/v2023/images/iconpic-star-S-default_to.png","fqdn":"res.njxzwh.com","domain":"njxzwh.com","tld":"com"},"ip":{"addr":"121.22.232.170","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.downza.cn/soft/360885.html","date":"2026-04-04T14:26:41.999Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"res.njxzwh.com","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Thu, 19 Feb 2026 00:00:00 GMT","end":"Wed, 20 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"BF:F9:0C:9F:DA:C1:19:17:44:6C:7F:14:F0:08:EE:C7:99:CB:76:4C","sha256":"9E:13:1A:33:49:E6:F7:8B:29:45:3C:6B:D3:41:4A:A5:B6:45:DD:0A:0B:C4:36:10:64:FD:EF:64:9D:7A:C2:69"}}},"request":{"raw":"GET /downza/pc/v2023/images/iconpic-star-S-default_to.png HTTP/1.1\r\nHost: res.njxzwh.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://res.njxzwh.com/downza/pc/v2023/css/detail.css?2026040412\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sat, 04 Apr 2026 14:26:42 GMT\r\nContent-Type: image/png\r\nContent-Length: 1574\r\nConnection: keep-alive\r\nServer: openresty\r\nx-reserved: amazon, aws and amazon web services are trademarks or registered trademarks of Amazon Technologies, Inc\r\nCloudServiceDiscount: CDN\r\nx-amz-request-id: 0000019D4822AB4B97A674AFB0230E7C\r\nETag: \"f539bbfa3dc84d8cd387a95854aacea5\"\r\nLast-Modified: Thu, 30 Oct 2025 09:32:40 GMT\r\nx-amz-id-2: 36AAAQAAEAABAAAQAAEAABAAAQAAEAABAAAaI=AAAAAAAAAAAAAAAAAAAAAAAAAA\r\nX-CCDN-Expires: 2311546\r\nvia: CHN-HEqinhuangdao-AREACUCC1-CACHE13[4],CHN-HEqinhuangdao-AREACUCC1-CACHE73[0,TCP_HIT,2],CHN-TJ-GLOBAL6-CACHE117[5],CHN-TJ-GLOBAL6-CACHE22[0,TCP_HIT,3]\r\nx-hcs-proxy-type: 1\r\nX-CCDN-CacheTTL: 2592000\r\nnginx-hit: 1\r\nAge: 280454\r\nAccept-Ranges: bytes\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: OPTION,GET\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":1574,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 17 x 31, 8-bit/color RGBA, non-interlaced","md5":"f539bbfa3dc84d8cd387a95854aacea5","sha1":"d8bcab50d8a5a9372060b5148bb23f616197a841","sha256":"0a68c926965cb332664a9a54e57c5cc5d8682b52232913df6999f157de34d4e1","sha512":"84a14a500a2fe662fa9b6c09f67cc403c984096b15abb6149380dedc768e12919a93df38ecb1090644dd41466fdcb367cefc758efedf97d660d062f0aa08e793","ssdeep":"","tlshash":"fc31dac8f7987411839487c935fbc827da9b0dc14ad4e57eb589e45b49781fa0d3c0ca","first_seen":"2023-05-26T03:28:21Z","last_seen":"2026-06-06T23:56:38.273935Z","times_seen":56,"resource_available":false,"data":null}},"time_used":308,"timings":{"blocked":53,"dns":0,"connect":0,"send":0,"wait":255,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.oss.downza.com/oss/advertisingApi/getAdvertisingCodeByModuleIdNew?moduleId=24\u0026classify=-1444-1445-1447\u0026source=3","fqdn":"api.oss.downza.com","domain":"downza.com","tld":"com"},"ip":{"addr":"115.223.9.119","port":443,"asn":134771,"as":"WENZHOU, ZHEJIANG Province, P.R.China.","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.downza.cn/soft/360885.html","date":"2026-04-04T14:26:42.046Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.oss.downza.com","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Sat, 21 Feb 2026 00:00:00 GMT","end":"Fri, 22 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"51:F3:BC:93:01:05:68:55:CB:77:6D:BA:1E:DC:2F:03:69:31:DE:2D","sha256":"2F:A0:D3:49:D2:78:EE:E4:59:8B:A8:ED:84:E3:3E:47:27:83:3A:E6:BE:5F:B7:46:15:45:AE:FE:7C:C9:B9:AF"}}},"request":{"raw":"GET /oss/advertisingApi/getAdvertisingCodeByModuleIdNew?moduleId=24\u0026classify=-1444-1445-1447\u0026source=3 HTTP/1.1\r\nHost: api.oss.downza.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.downza.cn\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.downza.cn/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sat, 04 Apr 2026 14:26:44 GMT\r\nContent-Type: application/json;charset=UTF-8\r\nContent-Length: 517\r\nConnection: keep-alive\r\nServer: openresty\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: GET,POST,DELETE,PUT,OPTIONS\r\nAccess-Control-Allow-Headers: *\r\nX-CCDN-Expires: 2157323\r\nvia: CHN-ZJwenzhou-AREACT1-CACHE53[14],CHN-ZJwenzhou-AREACT1-CACHE38[0,TCP_HIT,13],CHN-JSwuxi-GLOBAL2-CACHE3[81],CHN-JSwuxi-GLOBAL2-CACHE118[0,TCP_HIT,78]\r\nx-hcs-proxy-type: 1\r\nX-CCDN-CacheTTL: 2592000\r\nnginx-hit: 1\r\nAge: 434677\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":517,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"dd0a82eb30e600a20b96bcdab26a762c","sha1":"1bc2a38594c62dac85b0d1ac928322a6999182f0","sha256":"dda61cc227eab898222d5c5dcb0247a22cc777a40785679cafc959104e588d28","sha512":"f4e5ce4f66a32a271ee070fda93242425b53f3ee0f06f9e5f00dffa75ef72194dcc8681daf00259d188a25db0c69aeb3065ac29222e3fcf3d263f05cd9906bf7","ssdeep":"","tlshash":"16f0d4070d8ed77814121cc667b7da1d2c55710044504c1c7fcc897d2740f6a8c05db0","first_seen":"2025-06-21T17:27:26.859981Z","last_seen":"2026-04-04T14:27:36.514343Z","times_seen":13,"resource_available":false,"data":null}},"time_used":2251,"timings":{"blocked":0,"dns":1160,"connect":280,"send":0,"wait":295,"receive":0,"ssl":515},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"360fenxi.mediav.com/mediav1130.html","fqdn":"360fenxi.mediav.com","domain":"mediav.com","tld":"com"},"ip":{"addr":"112.65.69.71","port":443,"asn":17621,"as":"China Unicom Shanghai network","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://www.downza.cn/soft/360885.html","date":"2026-04-04T14:26:43.581Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.mediav.com","organization":"北京奇虎科技有限公司"},"issuer":{"commonName":"WoTrus OV Server CA  [Run by the Issuer]","organization":"WoTrus CA Limited"},"validity":{"start":"Thu, 26 Feb 2026 00:00:00 GMT","end":"Mon, 29 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"15:C5:33:A3:09:FA:3B:51:5D:2F:DC:FB:C5:01:2E:77:33:D5:6F:BD","sha256":"16:83:9F:4B:EB:16:FC:45:51:95:5A:5D:A5:DD:34:8C:F7:27:F4:0C:FD:80:84:82:FB:E3:70:62:20:5E:15:79"}}},"request":{"raw":"GET /mediav1130.html HTTP/1.1\r\nHost: 360fenxi.mediav.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.downza.cn/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: openresty/1.9.15.1\r\nDate: Sat, 04 Apr 2026 14:26:44 GMT\r\nContent-Type: text/html\r\nLast-Modified: Thu, 04 Sep 2025 08:11:47 GMT\r\nTransfer-Encoding: chunked\r\nConnection: close\r\nETag: W/\"68b949c3-6d1\"\r\nP3P: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty:1.9.15.1","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1745,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (1579)","md5":"c4b25c38f941a15e0fbba34fc8cfdcb2","sha1":"22fcb14d6c62d79d8ee9d636b3399d72298e4b96","sha256":"2ccf4bf52269e8872e012440ee64499afc65c85f11206ff7651ebebce6fd4563","sha512":"798f511cf99f5d6baaf5c3f267457662c8b25c39b8b4abaad9f59bbe0be6043c16c14fc02f32f4b8858ec38b2b9b45bab89c33d87f77c748d759d0a194abeca9","ssdeep":"","tlshash":"bd31969fa1f668110096143020fe724537b9655877028c94d6f6d0313b386af2b45eec","first_seen":"2023-04-08T15:33:59Z","last_seen":"2026-06-06T23:56:38.261856Z","times_seen":973,"resource_available":false,"data":null}},"time_used":1465,"timings":{"blocked":-1,"dns":480,"connect":243,"send":0,"wait":243,"receive":0,"ssl":498},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}