{"report_id":"a5b919bf-aba7-475a-b943-4eae5a83f8b3","version":6,"status":"done","tags":[],"date":"2025-10-19T08:10:09Z","url":{"schema":"https","addr":"web.i4zhusao.icu/","fqdn":"web.i4zhusao.icu","domain":"i4zhusao.icu","tld":"icu"},"ip":{"addr":"172.245.67.31","port":0,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"web.i4zhusao.icu/","fqdn":"web.i4zhusao.icu","domain":"i4zhusao.icu","tld":"icu"},"title":"酷狗音乐"},"submit":{"url":{"schema":"https","addr":"web.i4zhusao.icu/","fqdn":"web.i4zhusao.icu","domain":"i4zhusao.icu","tld":"icu"},"ip":{"addr":"172.245.67.31","port":0,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"tags":null,"meta":null,"user":{"user_id":"akbkyowd9geqr98"}},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-11-23T08:10:09Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":1,"urlquery":0,"analyzer":0}},"detection":{"ids":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-10-19T08:09:47Z","timestamp":1760861387,"ip_dst":{"addr":"172.245.67.31","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"ip_src":{"addr":"172.18.0.8","port":55636,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"medium","alert":"ET INFO Suspicious Domain (*.icu) in TLS SNI","source":"{\"timestamp\":\"2025-10-19T08:09:47.796007+0000\",\"flow_id\":433068477975081,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.8\",\"src_port\":55636,\"dest_ip\":\"172.245.67.31\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2026889,\"rev\":4,\"signature\":\"ET INFO Suspicious Domain (*.icu) in TLS SNI\",\"category\":\"Potentially Bad Traffic\",\"severity\":2,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2019_02_06\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2022_11_21\"]}},\"tls\":{\"sni\":\"web.i4zhusao.icu\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"15af977ce25de452b96affa2addb1036\",\"string\":\"771,4866,43-51\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":3,\"bytes_toserver\":789,\"bytes_toclient\":1654,\"start\":\"2025-10-19T08:09:47.461353+0000\"}}"}],"analyzer":null,"urlquery":null},"summary":[{"fqdn":"web.i4zhusao.icu","ip":{"addr":"172.245.67.31","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"domain_registered":"2025-02-27","domain_rank":0,"first_seen":"2025-10-19T08:10:10.942245Z","last_seen":"2025-10-19T08:10:10.942245Z","alert_count":0,"request_count":41,"received_data":1851574,"sent_data":18489,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}]},{"fqdn":"statwww2.kugou.com","ip":{"addr":"49.7.251.203","port":443,"asn":23724,"as":"IDC, China Telecommunications Corporation","country":"China","country_code":"CN"},"domain_registered":"2004-02-10","domain_rank":0,"first_seen":"2017-07-11T12:12:05Z","last_seen":"2025-10-19T08:01:37.152516Z","alert_count":0,"request_count":1,"received_data":231,"sent_data":583,"comment":"","tags":null,"fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}]},{"fqdn":"userservice.kugou.com","ip":{"addr":"122.10.103.131","port":443,"asn":136897,"as":"Enjoyvc Cloud Group Limited.","country":"Hong Kong","country_code":"HK"},"domain_registered":"2004-02-10","domain_rank":3641343,"first_seen":"2019-05-08T01:52:09Z","last_seen":"2025-10-19T08:01:37.124685Z","alert_count":0,"request_count":1,"received_data":518,"sent_data":740,"comment":"","tags":null,"fingerprints":null},{"fqdn":"webcollects.kugou.com","ip":{"addr":"36.110.225.149","port":443,"asn":23724,"as":"IDC, China Telecommunications Corporation","country":"China","country_code":"CN"},"domain_registered":"2004-02-10","domain_rank":1420522,"first_seen":"2017-07-25T09:22:30Z","last_seen":"2025-10-19T08:01:37.036079Z","alert_count":0,"request_count":1,"received_data":404,"sent_data":549,"comment":"","tags":null,"fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-10-19T08:09:47Z","timestamp":1760861387,"ip_dst":{"addr":"172.245.67.31","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"ip_src":{"addr":"172.18.0.8","port":55636,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"medium","alert":"ET INFO Suspicious Domain (*.icu) in TLS SNI","source":"{\"timestamp\":\"2025-10-19T08:09:47.796007+0000\",\"flow_id\":433068477975081,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.8\",\"src_port\":55636,\"dest_ip\":\"172.245.67.31\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2026889,\"rev\":4,\"signature\":\"ET INFO Suspicious Domain (*.icu) in TLS SNI\",\"category\":\"Potentially Bad Traffic\",\"severity\":2,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2019_02_06\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2022_11_21\"]}},\"tls\":{\"sni\":\"web.i4zhusao.icu\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"15af977ce25de452b96affa2addb1036\",\"string\":\"771,4866,43-51\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":3,\"bytes_toserver\":789,\"bytes_toclient\":1654,\"start\":\"2025-10-19T08:09:47.461353+0000\"}}"}]}],"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"web.i4zhusao.icu/","fqdn":"web.i4zhusao.icu","domain":"i4zhusao.icu","tld":"icu"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"ee69574fac7e9892dd8747fbd4c9d19c","sha1":"8184b3f21d1291b0b284be1d2e76b22f3fa97f35","sha256":"6b0a328e38c8b950c7656b3662d1328a78271759a38ffec9b7d46dfadbee763e","sha512":"a8415edd262abadfcd7635c9d0746e31f64dc5e07285b754efc23df735cb97d924bd3a81e3a21cfd4ad83582f38fe8ea728607c76768431656175ee136a5986e","ssdeep":"","tlshash":"89f0c66a75db5431460770f87c7c42d43534010777072f04fc6cb956af41c3a16a6aed","size":559,"data":"","first_seen":"2025-10-19T08:02:22.562341Z","last_seen":"2025-10-22T21:32:48.95972Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"web.i4zhusao.icu/","fqdn":"web.i4zhusao.icu","domain":"i4zhusao.icu","tld":"icu"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"2facdc2b288a6ea443393fb6e66b2c38","sha1":"04a329aadda170b7defa847ebccfe6e5983b9701","sha256":"6d2303a12e8a047792fa16ca090f3383c14abdb98e1151af179077c0e2ee22f4","sha512":"f339318451abdcf72a543597850b6570a5ef9bb0e07f041983a6fb3a578be05ad737b511c604a7827a668253f2d4b94c5dc198e28cab6897bde6ce8fadc10ff6","ssdeep":"","tlshash":"fed022d21292930100870f16002420286970c62f296b209135bf8b90074805f323909a","size":197,"data":"","first_seen":"2025-01-10T19:43:59.84485Z","last_seen":"2025-10-22T21:32:48.960693Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"web.i4zhusao.icu/kugoucss/js/collect.js","fqdn":"web.i4zhusao.icu","domain":"i4zhusao.icu","tld":"icu"},"ip":{"addr":"172.245.67.31","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"1c6c09608abf5b84226892cadafa0dd1","sha1":"12691cc19d64efc1b65550927f35954903dfd89d","sha256":"f5c1d1e205801318da652bf3450fc8185dd387d1774634e5e3562e1fd01afc6f","sha512":"e0183625e9f144d6194f8a9c5cfe4714c127f92164e71a211b62fcf8354168e2e69a3c206efa8d413de28d56420836a0591b8c958a74109c851f8268f5622377","ssdeep":"192:nUHtOjV2mDgC9Y820en1UD3ypt95dySKt6LUxeTAQADVXySp3o99C7:nUoJJe1UDCpt95sSW6AxBDVXySp3om7","tlshash":"4a42cb437963d47085fa103498aad55ddaf3f63c247c98643d5382d29668ea0323bb7e","size":12696,"data":"","first_seen":"2025-10-19T08:02:22.543661Z","last_seen":"2025-10-24T03:43:26.528397Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webcollects.kugou.com/v2/web/time.js?appid=2400\u0026_t=1760861392450\u0026_r=0.09771599766842776\u0026sign=0228845941fc95ded8d718834d9f92d4\u0026callback=WebCollectConfig.callback","fqdn":"webcollects.kugou.com","domain":"kugou.com","tld":"com"},"ip":{"addr":"36.110.225.149","port":443,"asn":23724,"as":"IDC, China Telecommunications Corporation","country":"China","country_code":"CN"},"introduction_type":"scriptElement","is_inline":false,"md5":"a169079707125912e1f8971675acd7e4","sha1":"96d30df5addd7bf9cb06c5456c4f8efb812eba02","sha256":"0c353d5a4a17e9d55fc681b75f0024771cf5273d916a6920cb50faf756c84376","sha512":"7d765992cee26ed4807bedb8208ca55b8b8ac609f22ab27b40b812bd9c38bac26ef77e5e5ff10f468d363e207149f76579d0b7410bff3ac67692a3680063750b","ssdeep":"","tlshash":"7e9004457f11d3311c5df315450145d05d1d473c551c7c570c5d730747355500115417","size":45,"data":"","first_seen":"2025-10-19T08:10:15.456166Z","last_seen":"2025-10-19T08:10:15.456166Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"web.i4zhusao.icu/kugoucss/js/base-min.js","fqdn":"web.i4zhusao.icu","domain":"i4zhusao.icu","tld":"icu"},"ip":{"addr":"172.245.67.31","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"a47e27930568881969531c4980477912","sha1":"6492f399f3822a6efde3f5b4e4df6cff14991e72","sha256":"c148ebf7aee721c668282c7539cbfb9beebbf5f22417750d3438ba8cf39bc024","sha512":"f700be1277abc8bf7c00b74b25e3b12fc28540bf56554d48b602c2fd572c3b1b6c1d1b9a06b01a4ad53dba601ad7f1852f44266ea8345da2f87def508c5afb62","ssdeep":"192:koa733UdU+Y6ZvZwwrZb4EGz4TzNZFtVWhW9fQgC+ElsaAwbvEuDGl3Xk/xDuW9/:jUi0Geoay0cuDGlHgAybYYmBUV","tlshash":"6b623a7c7e48597ac6abd7a61c36f1083367127b3b74a013e4a0dce2090c6976b6f395","size":15199,"data":"","first_seen":"2025-10-19T08:02:22.526806Z","last_seen":"2025-10-24T03:43:26.518899Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"web.i4zhusao.icu/kugoucss/js/jquery.min.js","fqdn":"web.i4zhusao.icu","domain":"i4zhusao.icu","tld":"icu"},"ip":{"addr":"172.245.67.31","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"397754ba49e9e0cf4e7c190da78dda05","sha1":"ae49e56999d82802727455f0ba83b63acd90a22b","sha256":"c12f6098e641aaca96c60215800f18f5671039aecf812217fab3c0d152f6adb4","sha512":"8c64754f77507ab2c24a6fc818419b9dd3f0ceccc9065290e41afdbee0743f0da2cb13b2fbb00afa525c082f1e697cb3ffd76ef9b902cb81d7c41ca1c641dffb","ssdeep":"1536:dnu00HWWaRxkqJg09pYxoxDKMXJrg8hXXO4dK3kyfiLJBhdSZE+I+Qg7rbaN1RUx:ddkWgoBhcZRQgmW42qe","tlshash":"8c932bdd72d2b03257ab30bd106f540ff2361959280d8850f268d8f9bc79a49a277f6d","size":92629,"data":"","first_seen":"2023-03-07T01:02:08Z","last_seen":"2026-08-16T19:16:14.008927Z","times_seen":72251,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"web.i4zhusao.icu/click.js","fqdn":"web.i4zhusao.icu","domain":"i4zhusao.icu","tld":"icu"},"ip":{"addr":"172.245.67.31","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"f424c9d9dd884dc5cdf0073192793e72","sha1":"f2901bcb16a4993905c7aea70d383b6448697935","sha256":"5e16556dc868466989420543faae65a561cfe5674906121eae4cce209979f077","sha512":"773a00fafbb6b97938c0ffcbe6ffae923be637a0cf5afe981e3c501c1ec94cf936aaf600812fec339b5075a14a25c31e25f70b03554dcf7905cbd2ba740e28a8","ssdeep":"96:mOsmCPNri1utKXHFfkwDpFy2tWETT2vUeo5rox:meCPNWvpkoltWETCse8rox","tlshash":"87b1518d7505627d1ab263b51e7b2e04f847662b6040ec12ff3c9950afb4b11732eed6","size":5197,"data":"","first_seen":"2025-10-19T08:02:22.372668Z","last_seen":"2025-10-22T21:32:48.954688Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"web.i4zhusao.icu/","fqdn":"web.i4zhusao.icu","domain":"i4zhusao.icu","tld":"icu"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"cc8140249003a5ccd8e589298f799ede","sha1":"512167f6900a8e576560e7da57eb13636f4e57c9","sha256":"30a7a7709da06b033bfeac051ecc3c89142a23d4c25542459bc90042975a68f9","sha512":"30788232a4455770b4a703a825ffcbb34b9dea480522fd7ad9cf4916ca6fe03fd00050869468ea00e298266074355ad2f12f16c1689c83bbfc8fdb304fc960b3","ssdeep":"384:B+o+gW3lU9hmJbp6pbe1vc9kcdUm1mC1kDKV1QC6fTftfRfrNmhVdqD4k:H+nU9Xbe1k9kcO7C1k2V1QC6fTftfRfH","tlshash":"31a2d8597386a478c7d6767a1c3fb188b07aa9227c0d6084b076fc912838f55463bfbd","size":22585,"data":"","first_seen":"2025-10-19T08:02:22.57382Z","last_seen":"2025-10-24T03:43:26.552304Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"web.i4zhusao.icu/kugoucss/js/kguser_min.js","fqdn":"web.i4zhusao.icu","domain":"i4zhusao.icu","tld":"icu"},"ip":{"addr":"172.245.67.31","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"45d4919b7b78816799a9afbfc65e1660","sha1":"4bc35ba539b5142233597deaa28f4f334f22a2ee","sha256":"aeb6ae230534667452cfc4a92fbd5286e336fb947769118e080f637c3bbcfc85","sha512":"2be99d3e6934d671c5f50c28dc1720bbfb0f1cf6b3f65a9382fcda6e5a8f1211ed473494019263a0c2f28c7906bea87fa650313d2f456b18106db35c19279a52","ssdeep":"768:z2wr+UOyk+IgeS1SOhD3vfs7tLiH/VLx8kuiDg9QMEV+6rZTO7GSte/zl4ZtiSuA:z2wr+8k+GSMOhD3vfs7tLiH/VLxCWg9p","tlshash":"3d13e8d1a281481b6491972a467f270c62fca15176fbd41988b0eff0be34b5ec077a7e","size":43378,"data":"","first_seen":"2024-08-19T14:10:51.95898Z","last_seen":"2026-01-15T19:35:47.767123Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"web.i4zhusao.icu/kugoucss/js/sentry5.6.1.min.js","fqdn":"web.i4zhusao.icu","domain":"i4zhusao.icu","tld":"icu"},"ip":{"addr":"172.245.67.31","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"fdfa44f73f3f3ffbd366973b854d61f4","sha1":"8685319f578cdfd3e9678925ab12b81decd8d0fa","sha256":"fd576f0b9f3a7da553a1f10dc955374e6e6ea76f762b006a01f94b5daf9a6571","sha512":"9d6f498b7ff9d0162b28e3c6dac4160077a52ee7e5eec6fda29ba747814a7565c5631627b9ac6cfdea9d7fe70e69b9370113617b56243b9afde61aad221c1df4","ssdeep":"768:wCANwH4feqmn2Ufl8zQT9DQUd2ZYmRJUCteg/b2CF3+CGPKsAgv9/WgV:wg9ozW0UEvC5/TV","tlshash":"0e3394ccf5e1b076479366a1523f000ae33f5d68689da2a8b445e9f02cf940d9a27f7d","size":52222,"data":"","first_seen":"2023-03-09T05:10:05Z","last_seen":"2026-06-06T21:41:22.128914Z","times_seen":21,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"web.i4zhusao.icu/footMsg.js","fqdn":"web.i4zhusao.icu","domain":"i4zhusao.icu","tld":"icu"},"ip":{"addr":"172.245.67.31","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"7ce2ce4beb2d63a3021b33fb5f5204ba","sha1":"4f5c5b54a2cea9343d39b7720a632121f2b5a900","sha256":"d4849ee9936128637f0dc35d3347349d091b147794004e425fe69519bdfcae93","sha512":"b24e2cb79d85a06c712b2892c8602247435bb891ff58f5d96f9185726443071d10d9047166c8b113c9de3cb715e8373014b83d0a1f879c441860e7a3682d7c8b","ssdeep":"192:9AijGgsM6uI6YQu1k+ra6PbILBRijRJIDQshvh4RZq/:9AijGgH676Bui+m6jINUj3Ivh54Dq/","tlshash":"10f156d0a5ccf565233527a2c1b2fb34b45220f6fd423a07fece160a6b98e69511719f","size":7492,"data":"","first_seen":"2025-10-19T08:02:22.441816Z","last_seen":"2025-10-22T21:32:48.955504Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"web.i4zhusao.icu/","fqdn":"web.i4zhusao.icu","domain":"i4zhusao.icu","tld":"icu"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"1bb4eed44b11f70c97a6990aa15ce1ac","sha1":"5c0580cbc069d15775d2f4ed5870a1b9cc895d4a","sha256":"7b7679fe37ab45d1c04fb790e581ff9ce7bb0e084078a4c4ce60b50e9d870a18","sha512":"7230c675a7e61294284162c603176621cab9d527640a4a90a0267f0db5d0368c34c9f286c304ac2ef69ffc1a450fb05cbb8742023c385d47fc9df17daf76928e","ssdeep":"","tlshash":"37d0c28b1d02800415a32176aa4f2299e35b31ab3408d048fb0c81004f5037fa20f5e8","size":281,"data":"","first_seen":"2025-10-19T08:02:22.570696Z","last_seen":"2025-10-22T21:32:48.961667Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"web.i4zhusao.icu/kugoucss/js/kguser.v2.min.js","fqdn":"web.i4zhusao.icu","domain":"i4zhusao.icu","tld":"icu"},"ip":{"addr":"172.245.67.31","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://web.i4zhusao.icu/","date":"2025-10-19T08:09:49.678Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"web.i4zhusao.icu","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Fri, 28 Feb 2025 11:36:59 GMT","end":"Thu, 29 May 2025 11:36:58 GMT"},"fingerprint":{"sha1":"93:00:0F:29:69:B3:A1:59:B7:D8:1E:48:41:8F:DC:E2:B0:20:8D:FC","sha256":"D5:80:22:AC:F5:27:96:9F:9B:F0:12:CC:0E:90:97:84:3B:4F:CF:5E:2E:E5:AC:CB:83:EA:A2:AD:CB:76:3C:32"}}},"request":{"raw":"GET /kugoucss/js/kguser.v2.min.js HTTP/1.1\r\nHost: web.i4zhusao.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://web.i4zhusao.icu/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 19 Oct 2025 08:09:49 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 27 Mar 2025 13:58:56 GMT\r\nvary: Accept-Encoding\r\netag: W/\"67e559a0-1622e\"\r\nexpires: Sun, 19 Oct 2025 20:09:49 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":90670,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65290), with no line terminators","md5":"4ffeff7ff14aaad385a3014d52808c41","sha1":"5c4ae2f3b2875f7e6b494bcd4e9481f5c4250648","sha256":"4b363a65fe647ad84a7ac38cda740c5b8b4f64c5488ef303826b1a9952517048","sha512":"6951bc0bcd00e50c78b6f766872417dabbcc663b92a03f1a53b4f8ce63fb97cc939ff429c50299df4293e0b14089e2d62e40e132a82eda70c10a30773a07371e","ssdeep":"1536:AQd+0cRsUKocv0TknX/d/MVD4GfsK9RVkZwI63n6p1fI8jLak2iFfBkIH8E+JVHN:dVGMXF/mDnfsK9RVkZwIjRjLak2iFfB8","tlshash":"4b932ac8b4d0640012675268117f220d71f96a1568edd95072b9cff9fcb8aafe227e7c","first_seen":"2024-08-19T19:41:48.944442Z","last_seen":"2025-10-22T21:32:48.854284Z","times_seen":9,"resource_available":true,"data":null}},"time_used":599,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":599,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"web.i4zhusao.icu/kugoucss/js/lib.js","fqdn":"web.i4zhusao.icu","domain":"i4zhusao.icu","tld":"icu"},"ip":{"addr":"172.245.67.31","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://web.i4zhusao.icu/","date":"2025-10-19T08:09:49.674Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"web.i4zhusao.icu","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Fri, 28 Feb 2025 11:36:59 GMT","end":"Thu, 29 May 2025 11:36:58 GMT"},"fingerprint":{"sha1":"93:00:0F:29:69:B3:A1:59:B7:D8:1E:48:41:8F:DC:E2:B0:20:8D:FC","sha256":"D5:80:22:AC:F5:27:96:9F:9B:F0:12:CC:0E:90:97:84:3B:4F:CF:5E:2E:E5:AC:CB:83:EA:A2:AD:CB:76:3C:32"}}},"request":{"raw":"GET /kugoucss/js/lib.js HTTP/1.1\r\nHost: web.i4zhusao.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://web.i4zhusao.icu/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 19 Oct 2025 08:09:49 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 27 Mar 2025 13:58:57 GMT\r\nvary: Accept-Encoding\r\netag: W/\"67e559a1-6711\"\r\nexpires: Sun, 19 Oct 2025 20:09:49 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":26385,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (26382), with no line terminators","md5":"0eca94079e859a0c9c6769f73047dc27","sha1":"a161cc5acb969677094b9b4f359d3dd87b848fae","sha256":"a78bce1e7fad91d29b49053987cb9e740e14c7f40e54febc3d0936b403efe2b9","sha512":"877dc3321caccfeae507bb90a18719baa7e7859ad0414c73d1336c4a7b68f83ef0a1c6b775376a7b3221752adb2f0d3559e35a3752ff8c41f9cf6d3a37182ca3","ssdeep":"384:yg84ONneWqk7md7AIx+1KpEVuY/FsIO3OuLc7xXL10Cs4mdj4t:R8241Kp7Yd++uLc7TP","tlshash":"67c2ea5432a1703585db50aa303f270ab13696b5b408c8e47179c4f47df8e8692abf7e","first_seen":"2025-01-10T19:43:59.832595Z","last_seen":"2025-10-22T21:32:48.953005Z","times_seen":5,"resource_available":true,"data":null}},"time_used":567,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":567,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"web.i4zhusao.icu/kugoucss/css/cmhead.css","fqdn":"web.i4zhusao.icu","domain":"i4zhusao.icu","tld":"icu"},"ip":{"addr":"172.245.67.31","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://web.i4zhusao.icu/","date":"2025-10-19T08:09:49.670Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"web.i4zhusao.icu","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Fri, 28 Feb 2025 11:36:59 GMT","end":"Thu, 29 May 2025 11:36:58 GMT"},"fingerprint":{"sha1":"93:00:0F:29:69:B3:A1:59:B7:D8:1E:48:41:8F:DC:E2:B0:20:8D:FC","sha256":"D5:80:22:AC:F5:27:96:9F:9B:F0:12:CC:0E:90:97:84:3B:4F:CF:5E:2E:E5:AC:CB:83:EA:A2:AD:CB:76:3C:32"}}},"request":{"raw":"GET /kugoucss/css/cmhead.css HTTP/1.1\r\nHost: web.i4zhusao.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://web.i4zhusao.icu/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 19 Oct 2025 08:09:49 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 27 Mar 2025 13:58:14 GMT\r\nvary: Accept-Encoding\r\netag: W/\"67e55976-493e\"\r\nexpires: Sun, 19 Oct 2025 20:09:49 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":18750,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"babc94051e3bc8499b897b94da504d23","sha1":"17df9e365725f6434effe6ccf70cb82bd9b3906f","sha256":"620908c11a332d786088b775b64db2cbfc191a90d031b2a857dd5c665c6736fa","sha512":"a708a775829d2cc5301356bb25576d98f2c1df65647ec56830a06c81a08ddc9aee21fb26d9a0aaf03051fb3b4e8088fb54d371c4e778c3692ca4a7495af0efe6","ssdeep":"192:Q7EHZTpSLin5q7RuLW+qGrA27Zp7F+a3nMf+p/PBpSX:wEZQty7F+a8gHBpY","tlshash":"c082f1b706654305b807ec401e952ba16378c013854ee6f87eef64489fcfac999f379a","first_seen":"2025-10-19T08:02:22.495781Z","last_seen":"2025-10-22T21:32:48.844498Z","times_seen":4,"resource_available":false,"data":null}},"time_used":501,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":501,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"web.i4zhusao.icu/kugoucss/js/getbaseinfo.min.js","fqdn":"web.i4zhusao.icu","domain":"i4zhusao.icu","tld":"icu"},"ip":{"addr":"172.245.67.31","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://web.i4zhusao.icu/","date":"2025-10-19T08:09:49.680Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"web.i4zhusao.icu","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Fri, 28 Feb 2025 11:36:59 GMT","end":"Thu, 29 May 2025 11:36:58 GMT"},"fingerprint":{"sha1":"93:00:0F:29:69:B3:A1:59:B7:D8:1E:48:41:8F:DC:E2:B0:20:8D:FC","sha256":"D5:80:22:AC:F5:27:96:9F:9B:F0:12:CC:0E:90:97:84:3B:4F:CF:5E:2E:E5:AC:CB:83:EA:A2:AD:CB:76:3C:32"}}},"request":{"raw":"GET /kugoucss/js/getbaseinfo.min.js HTTP/1.1\r\nHost: web.i4zhusao.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://web.i4zhusao.icu/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 19 Oct 2025 08:09:49 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 27 Mar 2025 13:58:54 GMT\r\nvary: Accept-Encoding\r\netag: W/\"67e5599e-47e3\"\r\nexpires: Sun, 19 Oct 2025 20:09:49 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":18403,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (18240)","md5":"f1056ac4df2b3cf6942b5c1bbbc68db4","sha1":"906f9f9cdf69eb7a51218d009458e8a96cddf6f6","sha256":"f6c38b61eefde1b3154bfdf1426cd6b6d372c3e1ba83ab83984729af4fdc8bbe","sha512":"7cd635cffc737165a82b0d85f0a418242b725701e7eb7effca6d9c071515f3e558995af2c242f126cd76d522f77b95e924ea9027e74a8cfcb325c2f7e4a23567","ssdeep":"384:Ysq27zLdr4/n4N0w6qvEQBloHvki25GgmhTDvoHy5Vm+It:BxUXqvVBpaZDSy5Vm+It","tlshash":"5882e748b1e278750579a666214f3281a03e8746b42d4921a73ecee1f860ddfda73b7c","first_seen":"2024-06-17T16:52:48Z","last_seen":"2026-01-15T19:35:47.783637Z","times_seen":9,"resource_available":true,"data":null}},"time_used":663,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":663,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"web.i4zhusao.icu/kugoucss/js/infsign.min.js","fqdn":"web.i4zhusao.icu","domain":"i4zhusao.icu","tld":"icu"},"ip":{"addr":"172.245.67.31","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://web.i4zhusao.icu/","date":"2025-10-19T08:09:49.682Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"web.i4zhusao.icu","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Fri, 28 Feb 2025 11:36:59 GMT","end":"Thu, 29 May 2025 11:36:58 GMT"},"fingerprint":{"sha1":"93:00:0F:29:69:B3:A1:59:B7:D8:1E:48:41:8F:DC:E2:B0:20:8D:FC","sha256":"D5:80:22:AC:F5:27:96:9F:9B:F0:12:CC:0E:90:97:84:3B:4F:CF:5E:2E:E5:AC:CB:83:EA:A2:AD:CB:76:3C:32"}}},"request":{"raw":"GET /kugoucss/js/infsign.min.js HTTP/1.1\r\nHost: web.i4zhusao.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://web.i4zhusao.icu/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 19 Oct 2025 08:09:49 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 27 Mar 2025 13:58:55 GMT\r\nvary: Accept-Encoding\r\netag: W/\"67e5599f-2e87\"\r\nexpires: Sun, 19 Oct 2025 20:09:49 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":11911,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (11749)","md5":"c5bb072673bd677ba0078463bd198641","sha1":"73fa39c43c83a480f584a15898d173f328d39c82","sha256":"342ada792e6625f17678f1305f65ec1e62bc6202a8c926ebc04cd77c19f44dbe","sha512":"1087e0dcfeb8f007adc35ecad26fd4fd769c3b768d1c9d0b24eb2003bd1f77e61501b84a6f3b230078df2cbc2d96df084de528d3a23f50248ca9d47b1402b2f8","ssdeep":"192:hTuUMPUfReLYwN1dK+EZoyM8jP+LbLVBn46xkLgQx5zhRAuEQ2O0qGjUtS9UNwG:hTucwxK+EZopoULVSfDAuEVOfG4EG","tlshash":"0032faa9f691b4758aa9b924052f3106fc3ccb04796e50a2f27cc9d1ad709ff5173e28","first_seen":"2024-08-19T14:10:51.952648Z","last_seen":"2026-01-15T19:35:47.733072Z","times_seen":9,"resource_available":true,"data":null}},"time_used":662,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":662,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"web.i4zhusao.icu/kugoucss/picture/section3_pic1_.jpg","fqdn":"web.i4zhusao.icu","domain":"i4zhusao.icu","tld":"icu"},"ip":{"addr":"172.245.67.31","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://web.i4zhusao.icu/","date":"2025-10-19T08:09:49.694Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"web.i4zhusao.icu","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Fri, 28 Feb 2025 11:36:59 GMT","end":"Thu, 29 May 2025 11:36:58 GMT"},"fingerprint":{"sha1":"93:00:0F:29:69:B3:A1:59:B7:D8:1E:48:41:8F:DC:E2:B0:20:8D:FC","sha256":"D5:80:22:AC:F5:27:96:9F:9B:F0:12:CC:0E:90:97:84:3B:4F:CF:5E:2E:E5:AC:CB:83:EA:A2:AD:CB:76:3C:32"}}},"request":{"raw":"GET /kugoucss/picture/section3_pic1_.jpg HTTP/1.1\r\nHost: web.i4zhusao.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://web.i4zhusao.icu/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 19 Oct 2025 08:09:49 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Thu, 27 Mar 2025 13:59:03 GMT\r\nvary: Accept-Encoding\r\netag: W/\"67e559a7-c38c\"\r\nexpires: Tue, 18 Nov 2025 08:09:49 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":50060,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 580x392, components 3","md5":"45e67254ef908a5d20528d3a33bf9a8c","sha1":"d3a6cadf534c714aee3c325e93e63fffb446a80b","sha256":"9fbc90854c9d370eb69bbd3d399ffa9694dbcdff850289cd077fcca08277b635","sha512":"c382fe90c6500909704de4301459b0dfa8f4f2618573332af76c00526c5555c40d7adb52fcee3aeafd363b4db305795c9abd98ce3394837e367880e96a294194","ssdeep":"1536:WmEAdYeS4P4YmDgbJ1dQExzwImEnluiB4oZqZqIyQ:IAdjS4QcbTzH3BNZqZqs","tlshash":"2c23cf22404892f2fbfede7037eb855b5a1f54d9c7f4ce46648b04cba298daec4491d2","first_seen":"2025-10-19T08:02:22.406089Z","last_seen":"2025-10-22T21:32:48.917626Z","times_seen":4,"resource_available":false,"data":null}},"time_used":654,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":654,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"web.i4zhusao.icu/kugoucss/picture/section4_pic1.png","fqdn":"web.i4zhusao.icu","domain":"i4zhusao.icu","tld":"icu"},"ip":{"addr":"172.245.67.31","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://web.i4zhusao.icu/","date":"2025-10-19T08:09:49.697Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"web.i4zhusao.icu","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Fri, 28 Feb 2025 11:36:59 GMT","end":"Thu, 29 May 2025 11:36:58 GMT"},"fingerprint":{"sha1":"93:00:0F:29:69:B3:A1:59:B7:D8:1E:48:41:8F:DC:E2:B0:20:8D:FC","sha256":"D5:80:22:AC:F5:27:96:9F:9B:F0:12:CC:0E:90:97:84:3B:4F:CF:5E:2E:E5:AC:CB:83:EA:A2:AD:CB:76:3C:32"}}},"request":{"raw":"GET /kugoucss/picture/section4_pic1.png HTTP/1.1\r\nHost: web.i4zhusao.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://web.i4zhusao.icu/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 19 Oct 2025 08:09:49 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 27 Mar 2025 13:59:04 GMT\r\nvary: Accept-Encoding\r\netag: W/\"67e559a8-22303\"\r\nexpires: Tue, 18 Nov 2025 08:09:49 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":140035,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 547 x 440, 8-bit/color RGBA, non-interlaced","md5":"16bd92126783ec2418485897624e3c22","sha1":"bed56fe2003e918d898876eaa7890f23a980cc09","sha256":"e3e87649174108d9985688aa2d3acf4a4aa6d7a42b1dd6a73ed250cbb510dee0","sha512":"cf4c7b1c39dcc2c6c04d3fe6d6cb6c0e98b78674709ecd2c28b100b2fd8e0eaec8a03602402b93a296deb1755b2ab035cba05daaadd68078f7b95bc7a677f8de","ssdeep":"3072:4GeRQQMcMsPuz7QgtL8oeJTVXuJway1caYArc6FYInrU9BG:4G8pjvJhiy1caJrfnrkA","tlshash":"2bd32345ac4a6ec844e137623f260575c32bcc26e9f9884ceaacd395c74f594b1f2ca6","first_seen":"2025-10-19T08:02:22.481307Z","last_seen":"2025-10-22T21:32:48.953854Z","times_seen":4,"resource_available":false,"data":null}},"time_used":654,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":654,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"web.i4zhusao.icu/kugoucss/picture/section4_pic2.png","fqdn":"web.i4zhusao.icu","domain":"i4zhusao.icu","tld":"icu"},"ip":{"addr":"172.245.67.31","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://web.i4zhusao.icu/","date":"2025-10-19T08:09:49.698Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"web.i4zhusao.icu","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Fri, 28 Feb 2025 11:36:59 GMT","end":"Thu, 29 May 2025 11:36:58 GMT"},"fingerprint":{"sha1":"93:00:0F:29:69:B3:A1:59:B7:D8:1E:48:41:8F:DC:E2:B0:20:8D:FC","sha256":"D5:80:22:AC:F5:27:96:9F:9B:F0:12:CC:0E:90:97:84:3B:4F:CF:5E:2E:E5:AC:CB:83:EA:A2:AD:CB:76:3C:32"}}},"request":{"raw":"GET /kugoucss/picture/section4_pic2.png HTTP/1.1\r\nHost: web.i4zhusao.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://web.i4zhusao.icu/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 19 Oct 2025 08:09:49 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 27 Mar 2025 13:59:04 GMT\r\nvary: Accept-Encoding\r\netag: W/\"67e559a8-c277\"\r\nexpires: Tue, 18 Nov 2025 08:09:49 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":49783,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 603 x 300, 8-bit colormap, non-interlaced","md5":"fbff648be0d80d0a08e2d5a59ca23f31","sha1":"ac67a9d36afd508724c6e58081c84bb7c30a17c3","sha256":"6d09afd18298cd94596385ea197ecb3f30cc9da0daa194e59d43cae9f63ce709","sha512":"00c8f5c6931958c3604d2b0e59f124e57e8dc36a8ddf4078053ac44e0f2c9fde0711e5ba1749a4bdd87b11f6ab400bd6d776cb475bae94879051fef630a7e514","ssdeep":"768:Dv+0SLYG9AZGbjyhoyjvVgNKNYxB7RSVGN1s4nwPlRDrTrPM7399SnKgbtLbujsu:jvSEIChoQWKsBlS8sPTrU7DS5btLbuwu","tlshash":"9923f1ca166ce23e24db20ee2dacd3717c13975930dd3e50f1063649ce6395631abae6","first_seen":"2025-10-19T08:02:22.538904Z","last_seen":"2025-10-22T21:32:48.898127Z","times_seen":4,"resource_available":false,"data":null}},"time_used":654,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":654,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"web.i4zhusao.icu/kugoucss/js/utility.js","fqdn":"web.i4zhusao.icu","domain":"i4zhusao.icu","tld":"icu"},"ip":{"addr":"172.245.67.31","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://web.i4zhusao.icu/","date":"2025-10-19T08:09:49.677Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"web.i4zhusao.icu","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Fri, 28 Feb 2025 11:36:59 GMT","end":"Thu, 29 May 2025 11:36:58 GMT"},"fingerprint":{"sha1":"93:00:0F:29:69:B3:A1:59:B7:D8:1E:48:41:8F:DC:E2:B0:20:8D:FC","sha256":"D5:80:22:AC:F5:27:96:9F:9B:F0:12:CC:0E:90:97:84:3B:4F:CF:5E:2E:E5:AC:CB:83:EA:A2:AD:CB:76:3C:32"}}},"request":{"raw":"GET /kugoucss/js/utility.js HTTP/1.1\r\nHost: web.i4zhusao.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://web.i4zhusao.icu/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 19 Oct 2025 08:09:49 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 27 Mar 2025 13:58:58 GMT\r\nvary: Accept-Encoding\r\netag: W/\"67e559a2-11a5\"\r\nexpires: Sun, 19 Oct 2025 20:09:49 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4517,"size_decoded":0,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text","md5":"a59e61d6b60eb4eef297274d5e80079b","sha1":"4bc7b4e7f1e03b4da13fb7c125f92a2392c0e086","sha256":"c3fb674b06a392f4a0b0574a78c270ead8ed5a00045ad8e2f9b5af5189624c95","sha512":"89731a69a7abc285ab04d7ae12238e831329bef600388ff04a91c0d07ae818e82d0ed46e9bcc562962f977ac8f5f89644f3c21d7d9d422e46edc0956fe8efaf4","ssdeep":"96:5WYKsgoeVpUyZ9xixgqRCBlWCC0AzwjnVSoHF+S:EYDgoeVpUyZ9KgqRCBl3C0AzwjnVS0","tlshash":"16911f685de3e012762ab01b1fbad200b1b79103154dd884798de7b18f40b358d7fee5","first_seen":"2024-08-19T14:10:52.005948Z","last_seen":"2026-01-15T19:35:47.782629Z","times_seen":8,"resource_available":true,"data":null}},"time_used":572,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":572,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"web.i4zhusao.icu/kugoucss/js/repalcehttpsimg.js","fqdn":"web.i4zhusao.icu","domain":"i4zhusao.icu","tld":"icu"},"ip":{"addr":"172.245.67.31","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://web.i4zhusao.icu/","date":"2025-10-19T08:09:49.679Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"web.i4zhusao.icu","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Fri, 28 Feb 2025 11:36:59 GMT","end":"Thu, 29 May 2025 11:36:58 GMT"},"fingerprint":{"sha1":"93:00:0F:29:69:B3:A1:59:B7:D8:1E:48:41:8F:DC:E2:B0:20:8D:FC","sha256":"D5:80:22:AC:F5:27:96:9F:9B:F0:12:CC:0E:90:97:84:3B:4F:CF:5E:2E:E5:AC:CB:83:EA:A2:AD:CB:76:3C:32"}}},"request":{"raw":"GET /kugoucss/js/repalcehttpsimg.js HTTP/1.1\r\nHost: web.i4zhusao.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://web.i4zhusao.icu/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 19 Oct 2025 08:09:49 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 27 Mar 2025 13:58:58 GMT\r\nvary: Accept-Encoding\r\netag: W/\"67e559a2-1241\"\r\nexpires: Sun, 19 Oct 2025 20:09:49 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4673,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (2382)","md5":"b13c1f066841aacef0de138d5edfe5b0","sha1":"f7315d7cb51f5c1f17cc6696cc617c7880ad5fa7","sha256":"b06a31a61a0d58d9dc3dc44524ba83b6e61ed8349d57c8cf22a08a850e3328b3","sha512":"706d65cd22947fa034bb2063dead9caf8bb757f0fe6a57592432a61638ba87128bc01553b3adb6f808d983e4a9c22d1fa9777eac596a72e1dcb407bec850cbba","ssdeep":"96:yKwsacyaCR63PPiiEmumJmmZcviFoLeRzQRbPrsTMRClt+J+UYmk9tmBwroZvFeu:yKVnyJR63HiiEHAHQRbPYTMRClt+J+Ur","tlshash":"36a1a0eb0867101193976a60e9bd758cd3be52d606c4c8d2be9d4c537baa2b31d027fc","first_seen":"2024-08-19T14:10:51.958167Z","last_seen":"2026-01-15T19:35:47.768894Z","times_seen":10,"resource_available":true,"data":null}},"time_used":663,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":663,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"web.i4zhusao.icu/kugoucss/picture/section1_pic2.png","fqdn":"web.i4zhusao.icu","domain":"i4zhusao.icu","tld":"icu"},"ip":{"addr":"172.245.67.31","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://web.i4zhusao.icu/","date":"2025-10-19T08:09:49.688Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"web.i4zhusao.icu","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Fri, 28 Feb 2025 11:36:59 GMT","end":"Thu, 29 May 2025 11:36:58 GMT"},"fingerprint":{"sha1":"93:00:0F:29:69:B3:A1:59:B7:D8:1E:48:41:8F:DC:E2:B0:20:8D:FC","sha256":"D5:80:22:AC:F5:27:96:9F:9B:F0:12:CC:0E:90:97:84:3B:4F:CF:5E:2E:E5:AC:CB:83:EA:A2:AD:CB:76:3C:32"}}},"request":{"raw":"GET /kugoucss/picture/section1_pic2.png HTTP/1.1\r\nHost: web.i4zhusao.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://web.i4zhusao.icu/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 19 Oct 2025 08:09:49 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 27 Mar 2025 13:59:00 GMT\r\nvary: Accept-Encoding\r\netag: W/\"67e559a4-1b0a3\"\r\nexpires: Tue, 18 Nov 2025 08:09:49 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":110755,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 458 x 309, 8-bit/color RGBA, non-interlaced","md5":"4be9f64927e1c69597c99d80c1524872","sha1":"84c49c4aa430eaf0aa6f25abc8e57df66098aa0d","sha256":"2dfbf7386a7f0f6069511205694bff54a3981f79c3126bc29885aa7633059806","sha512":"c2b6f95bb3a6153b874a9f9eb12c521ae06dc2399bafd2072cd3dc1134f42e7406483795bbebf90721245f12cd812521542a83afa5f66ff11a0fbe84714ef6c3","ssdeep":"3072:ZfIU00TSnxOiWJr2Zlg+6CJ/Cq2sihamR:RI5osOhJO6lrxhamR","tlshash":"3cb312c205144d9612b8d4b348a03bfd3ebba58975f8a653f409363aadf85cd8e9344f","first_seen":"2025-10-19T08:02:22.437447Z","last_seen":"2025-10-22T21:32:48.884561Z","times_seen":4,"resource_available":false,"data":null}},"time_used":660,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":660,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"web.i4zhusao.icu/kugoucss/picture/section1_pic3.png","fqdn":"web.i4zhusao.icu","domain":"i4zhusao.icu","tld":"icu"},"ip":{"addr":"172.245.67.31","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://web.i4zhusao.icu/","date":"2025-10-19T08:09:49.689Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"web.i4zhusao.icu","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Fri, 28 Feb 2025 11:36:59 GMT","end":"Thu, 29 May 2025 11:36:58 GMT"},"fingerprint":{"sha1":"93:00:0F:29:69:B3:A1:59:B7:D8:1E:48:41:8F:DC:E2:B0:20:8D:FC","sha256":"D5:80:22:AC:F5:27:96:9F:9B:F0:12:CC:0E:90:97:84:3B:4F:CF:5E:2E:E5:AC:CB:83:EA:A2:AD:CB:76:3C:32"}}},"request":{"raw":"GET /kugoucss/picture/section1_pic3.png HTTP/1.1\r\nHost: web.i4zhusao.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://web.i4zhusao.icu/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 19 Oct 2025 08:09:49 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 27 Mar 2025 13:59:01 GMT\r\nvary: Accept-Encoding\r\netag: W/\"67e559a5-196e3\"\r\nexpires: Tue, 18 Nov 2025 08:09:49 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":104163,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 458 x 309, 8-bit/color RGBA, non-interlaced","md5":"40b8795728eb3a4c50edca20eed4407c","sha1":"f80df83ba5ecdb3005933288f6d1b055f597bb8e","sha256":"b35e461392709926058f613526da1c29fbd5d3284d9aef296825ad0495bd012e","sha512":"a7831db275fb5690e05ad3c83910c431140b0996c6bcc1ff25fdbc049b234f768d4d960422167ab93c864272de6f196b7de612a63d2bac94414fd57b942c67ea","ssdeep":"1536:0O78fPb3nUxgV7L8E8Gy9WF0omjvm3JCX0h4asbcaBay/ocJtgPx:SPYov8E8GyPyZCI49DB7/ocAPx","tlshash":"99a3121eb8235967e6eb937f0a0d2a9d57ef32ac34b04dd1cb6cb09dd49748c4e58902","first_seen":"2025-10-19T08:02:22.550204Z","last_seen":"2025-10-22T21:32:48.922959Z","times_seen":4,"resource_available":false,"data":null}},"time_used":654,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":654,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"web.i4zhusao.icu/kugoucss/css/cmfoot.css","fqdn":"web.i4zhusao.icu","domain":"i4zhusao.icu","tld":"icu"},"ip":{"addr":"172.245.67.31","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://web.i4zhusao.icu/","date":"2025-10-19T08:09:49.702Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"web.i4zhusao.icu","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Fri, 28 Feb 2025 11:36:59 GMT","end":"Thu, 29 May 2025 11:36:58 GMT"},"fingerprint":{"sha1":"93:00:0F:29:69:B3:A1:59:B7:D8:1E:48:41:8F:DC:E2:B0:20:8D:FC","sha256":"D5:80:22:AC:F5:27:96:9F:9B:F0:12:CC:0E:90:97:84:3B:4F:CF:5E:2E:E5:AC:CB:83:EA:A2:AD:CB:76:3C:32"}}},"request":{"raw":"GET /kugoucss/css/cmfoot.css HTTP/1.1\r\nHost: web.i4zhusao.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://web.i4zhusao.icu/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 19 Oct 2025 08:09:49 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 27 Mar 2025 13:58:13 GMT\r\nvary: Accept-Encoding\r\netag: W/\"67e55975-1339\"\r\nexpires: Sun, 19 Oct 2025 20:09:49 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4921,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"b3890ea795202ea7bef45f6b5668e0d8","sha1":"51f53ac9316e01dfb24dce9c81916893f63fae32","sha256":"0d9129092964659ca94d63f3925129a54cb677e6debd1f3d196331bd07f394cd","sha512":"f4e6b381193f96c4a0edf4488156c2b1076b01b4db56b2b82fc6f908c7b610c9260393c90b4e1edd8540cba7e90c7d0df47ac75cf2130db19a02421c0a56577b","ssdeep":"48:DZaBP1IHuMz0We01yCPyU1IMz4yOBlF+SvaHuMlqByT6scamUknl:DZstILe01bPT194zbF+SvagBC9G9l","tlshash":"5aa14a265e9a524a340bdc0427263670a37cc42385099bfe39bf3c59bf8b58978f3746","first_seen":"2025-10-19T08:02:22.514586Z","last_seen":"2025-10-22T21:32:48.946542Z","times_seen":4,"resource_available":false,"data":null}},"time_used":651,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":651,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"web.i4zhusao.icu/footMsg.js","fqdn":"web.i4zhusao.icu","domain":"i4zhusao.icu","tld":"icu"},"ip":{"addr":"172.245.67.31","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://web.i4zhusao.icu/","date":"2025-10-19T08:09:49.703Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"web.i4zhusao.icu","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Fri, 28 Feb 2025 11:36:59 GMT","end":"Thu, 29 May 2025 11:36:58 GMT"},"fingerprint":{"sha1":"93:00:0F:29:69:B3:A1:59:B7:D8:1E:48:41:8F:DC:E2:B0:20:8D:FC","sha256":"D5:80:22:AC:F5:27:96:9F:9B:F0:12:CC:0E:90:97:84:3B:4F:CF:5E:2E:E5:AC:CB:83:EA:A2:AD:CB:76:3C:32"}}},"request":{"raw":"GET /footMsg.js HTTP/1.1\r\nHost: web.i4zhusao.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://web.i4zhusao.icu/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 19 Oct 2025 08:09:49 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 27 Mar 2025 13:58:12 GMT\r\nvary: Accept-Encoding\r\netag: W/\"67e55974-1d47\"\r\nexpires: Sun, 19 Oct 2025 20:09:49 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":7495,"size_decoded":0,"mime_type":"application/javascript","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (453), with CRLF line terminators","md5":"7ce2ce4beb2d63a3021b33fb5f5204ba","sha1":"4f5c5b54a2cea9343d39b7720a632121f2b5a900","sha256":"d4849ee9936128637f0dc35d3347349d091b147794004e425fe69519bdfcae93","sha512":"b24e2cb79d85a06c712b2892c8602247435bb891ff58f5d96f9185726443071d10d9047166c8b113c9de3cb715e8373014b83d0a1f879c441860e7a3682d7c8b","ssdeep":"192:9AijGgsM6uI6YQu1k+ra6PbILBRijRJIDQshvh4RZq/:9AijGgH676Bui+m6jINUj3Ivh54Dq/","tlshash":"10f156d0a5ccf565233527a2c1b2fb34b45220f6fd423a07fece160a6b98e69511719f","first_seen":"2025-10-19T08:02:22.441816Z","last_seen":"2025-10-22T21:32:48.955504Z","times_seen":4,"resource_available":true,"data":null}},"time_used":651,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":651,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"web.i4zhusao.icu/logo.jpg","fqdn":"web.i4zhusao.icu","domain":"i4zhusao.icu","tld":"icu"},"ip":{"addr":"172.245.67.31","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://web.i4zhusao.icu/","date":"2025-10-19T08:09:51.376Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"web.i4zhusao.icu","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Fri, 28 Feb 2025 11:36:59 GMT","end":"Thu, 29 May 2025 11:36:58 GMT"},"fingerprint":{"sha1":"93:00:0F:29:69:B3:A1:59:B7:D8:1E:48:41:8F:DC:E2:B0:20:8D:FC","sha256":"D5:80:22:AC:F5:27:96:9F:9B:F0:12:CC:0E:90:97:84:3B:4F:CF:5E:2E:E5:AC:CB:83:EA:A2:AD:CB:76:3C:32"}}},"request":{"raw":"GET /logo.jpg HTTP/1.1\r\nHost: web.i4zhusao.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://web.i4zhusao.icu/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 19 Oct 2025 08:09:51 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Thu, 27 Mar 2025 13:58:13 GMT\r\nvary: Accept-Encoding\r\netag: W/\"67e55975-3090\"\r\nexpires: Tue, 18 Nov 2025 08:09:51 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":12432,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 240x240, components 3","md5":"974cae4b86b4ae3ce6a7bfaeb27a4bd0","sha1":"8429e7c1af01f92785af6366a1e2708fa441ed51","sha256":"85cc55ccc3961711d4a7e32ed67993a111a424c7fe52aa533cd96b35f63ba9d3","sha512":"9b5dca74e94c5bbc5a3186c2e4587b19d57bac0f054448501b12885bf1131d6634c919d0788041d401c965cce23a34ddfce504a99f9460f044be701382209103","ssdeep":"192:GHxq2vvsWuQcSqIrTd1LS67XJY94lQRyoh4RL4rplct7Vxem56OaN0gp3rjmYx:GRtvmQtXyelaeRMrplcvx756VN0SyW","tlshash":"7842af7bfb645ca698f0dbb57e93c60aabcaad45d45337ef71d40801773014a680e02a","first_seen":"2025-10-19T08:02:22.518488Z","last_seen":"2025-10-22T21:32:48.826543Z","times_seen":4,"resource_available":false,"data":null}},"time_used":169,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":169,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"web.i4zhusao.icu/kugoucss/js/cmhead.min.js","fqdn":"web.i4zhusao.icu","domain":"i4zhusao.icu","tld":"icu"},"ip":{"addr":"172.245.67.31","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://web.i4zhusao.icu/","date":"2025-10-19T08:09:52.234Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"web.i4zhusao.icu","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Fri, 28 Feb 2025 11:36:59 GMT","end":"Thu, 29 May 2025 11:36:58 GMT"},"fingerprint":{"sha1":"93:00:0F:29:69:B3:A1:59:B7:D8:1E:48:41:8F:DC:E2:B0:20:8D:FC","sha256":"D5:80:22:AC:F5:27:96:9F:9B:F0:12:CC:0E:90:97:84:3B:4F:CF:5E:2E:E5:AC:CB:83:EA:A2:AD:CB:76:3C:32"}}},"request":{"raw":"GET /kugoucss/js/cmhead.min.js HTTP/1.1\r\nHost: web.i4zhusao.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://web.i4zhusao.icu/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\nserver: nginx\r\ndate: Sun, 19 Oct 2025 08:09:52 GMT\r\ncontent-type: text/html\r\ncontent-length: 146\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":146,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"8eec510e57f5f732fd2cce73df7b73ef","sha1":"3c0af39ecb3753c5fee3b53d063c7286019eac3b","sha256":"55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0","sha512":"73bbf698482132b5fd60a0b58926fddec9055f8095a53bc52714e211e9340c3419736ceafd6b279667810114d306bfccdcfcddf51c0b67fe9e3c73c54583e574","ssdeep":"","tlshash":"b7c02b2d35133c4cc563313423c37140c0d6833b687a41110400c00371cf2998ec3397","first_seen":"2023-03-07T12:05:15Z","last_seen":"2026-08-16T19:31:16.256395Z","times_seen":551395,"resource_available":true,"data":null}},"time_used":168,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":168,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"web.i4zhusao.icu/kugoucss/css/main.css","fqdn":"web.i4zhusao.icu","domain":"i4zhusao.icu","tld":"icu"},"ip":{"addr":"172.245.67.31","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://web.i4zhusao.icu/","date":"2025-10-19T08:09:49.659Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"web.i4zhusao.icu","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Fri, 28 Feb 2025 11:36:59 GMT","end":"Thu, 29 May 2025 11:36:58 GMT"},"fingerprint":{"sha1":"93:00:0F:29:69:B3:A1:59:B7:D8:1E:48:41:8F:DC:E2:B0:20:8D:FC","sha256":"D5:80:22:AC:F5:27:96:9F:9B:F0:12:CC:0E:90:97:84:3B:4F:CF:5E:2E:E5:AC:CB:83:EA:A2:AD:CB:76:3C:32"}}},"request":{"raw":"GET /kugoucss/css/main.css HTTP/1.1\r\nHost: web.i4zhusao.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://web.i4zhusao.icu/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 19 Oct 2025 08:09:49 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 27 Mar 2025 13:58:14 GMT\r\nvary: Accept-Encoding\r\netag: W/\"67e55976-c284\"\r\nexpires: Sun, 19 Oct 2025 20:09:49 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":49796,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text","md5":"6ab81e16d066e078f088e5c96e772c42","sha1":"ac3a6f8eff3331a7e4de2415cae244b3ead919eb","sha256":"e9093eb9e125684ae41fe2ed45fcb01f9332f05c231d109d1f20a6d675f3f840","sha512":"2616994386fb696ee1417e716b5fa0fd1a177e2226025f1dbc45ff7b90d6bece8e6e3966ab91ae7ec331df4461f32e8f77dde575dd67eb0ad84cc89803247d75","ssdeep":"768:9FNFZLJg0ftAwEHa+7MZneP+4z5ty3n9DIN7F8hHmlGNHrBxvuB:9/tttAwEHa+7MZnePty3n9Ws/NE","tlshash":"5023a71ec7e0260ff06f9271b57a538921268007e6238f9eb95d7cadf2894755173b83","first_seen":"2025-10-19T08:02:22.523422Z","last_seen":"2025-10-22T21:32:48.933095Z","times_seen":4,"resource_available":false,"data":null}},"time_used":201,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":201,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"web.i4zhusao.icu/kugoucss/css/pcdownloadpage201211.css","fqdn":"web.i4zhusao.icu","domain":"i4zhusao.icu","tld":"icu"},"ip":{"addr":"172.245.67.31","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://web.i4zhusao.icu/","date":"2025-10-19T08:09:49.686Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"web.i4zhusao.icu","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Fri, 28 Feb 2025 11:36:59 GMT","end":"Thu, 29 May 2025 11:36:58 GMT"},"fingerprint":{"sha1":"93:00:0F:29:69:B3:A1:59:B7:D8:1E:48:41:8F:DC:E2:B0:20:8D:FC","sha256":"D5:80:22:AC:F5:27:96:9F:9B:F0:12:CC:0E:90:97:84:3B:4F:CF:5E:2E:E5:AC:CB:83:EA:A2:AD:CB:76:3C:32"}}},"request":{"raw":"GET /kugoucss/css/pcdownloadpage201211.css HTTP/1.1\r\nHost: web.i4zhusao.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://web.i4zhusao.icu/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 19 Oct 2025 08:09:49 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 27 Mar 2025 13:58:15 GMT\r\nvary: Accept-Encoding\r\netag: W/\"67e55977-1fe7\"\r\nexpires: Sun, 19 Oct 2025 20:09:49 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":8167,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"77d739ae23ffb5266479bed09f783531","sha1":"ef7f52eb41765a7e4ad7be2f80c2aa32f65d8a68","sha256":"12035f9a56c622fa46cc09ad69517cae423ead27eb5408e6374543840d15a921","sha512":"24c7bdc2974dfa072930d370463786e272d6600c442645ae90f5b7121ce63df61eab609cdc198f725b0e74cf3701642f2a284488426eecb9b98972e8f9b6469e","ssdeep":"192:DSGLqCKdWSu7A5QZ3McDcjnDNFpu0pPn/xfpl46cOHlOvrl9EaS9E9ExhX9KK9so:bqCKkSu7A5QZMcDcjnDNFpu0pPnpfplj","tlshash":"16f1ed0b25a46a0cd24396e2378e191d0a3f9343b07a98bdb27d395ed774eb4433356b","first_seen":"2025-10-19T08:02:22.386163Z","last_seen":"2025-10-22T21:32:48.773422Z","times_seen":4,"resource_available":false,"data":null}},"time_used":661,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":661,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"web.i4zhusao.icu/kugoucss/picture/section3_pic2.jpg","fqdn":"web.i4zhusao.icu","domain":"i4zhusao.icu","tld":"icu"},"ip":{"addr":"172.245.67.31","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://web.i4zhusao.icu/","date":"2025-10-19T08:09:49.695Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"web.i4zhusao.icu","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Fri, 28 Feb 2025 11:36:59 GMT","end":"Thu, 29 May 2025 11:36:58 GMT"},"fingerprint":{"sha1":"93:00:0F:29:69:B3:A1:59:B7:D8:1E:48:41:8F:DC:E2:B0:20:8D:FC","sha256":"D5:80:22:AC:F5:27:96:9F:9B:F0:12:CC:0E:90:97:84:3B:4F:CF:5E:2E:E5:AC:CB:83:EA:A2:AD:CB:76:3C:32"}}},"request":{"raw":"GET /kugoucss/picture/section3_pic2.jpg HTTP/1.1\r\nHost: web.i4zhusao.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://web.i4zhusao.icu/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 19 Oct 2025 08:09:49 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Thu, 27 Mar 2025 13:59:03 GMT\r\nvary: Accept-Encoding\r\netag: W/\"67e559a7-3da4\"\r\nexpires: Tue, 18 Nov 2025 08:09:49 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":15780,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 500x236, components 3","md5":"4cce5d0e2d581c616874ac7cddd81381","sha1":"ab7de11ab1a2d9a2cae96226990f5aec0bd0eaa4","sha256":"994f09bb8f558ba67f0ab6ddb2c03604af89fa62290cfe49fd3a013db407e137","sha512":"2207f56264e69b70b0fc3f309856c6fd9a815110d05bfd1347180f6a61a8f2b316fe79d19e7be32da3977b3648bba286a008b4e2e51c7e7345f2969fc3b96c24","ssdeep":"192:qXR1SSetiNlZ3AqVyKElM+scaHs2S75hEa6fBcl4qeovCr5k594P6/zYsXAUNPwY:qB1SSehVsrHmt6mirG59MyPwwY4YuL7l","tlshash":"a862bf753f099386d534b86367b3ca0629419d50ec97f25828b890dfcab7d46fa2cdb0","first_seen":"2025-10-19T08:02:22.41617Z","last_seen":"2025-10-22T21:32:48.804983Z","times_seen":4,"resource_available":false,"data":null}},"time_used":654,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":654,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"web.i4zhusao.icu/kugoucss/picture/section3_pic3.png","fqdn":"web.i4zhusao.icu","domain":"i4zhusao.icu","tld":"icu"},"ip":{"addr":"172.245.67.31","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://web.i4zhusao.icu/","date":"2025-10-19T08:09:49.696Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"web.i4zhusao.icu","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Fri, 28 Feb 2025 11:36:59 GMT","end":"Thu, 29 May 2025 11:36:58 GMT"},"fingerprint":{"sha1":"93:00:0F:29:69:B3:A1:59:B7:D8:1E:48:41:8F:DC:E2:B0:20:8D:FC","sha256":"D5:80:22:AC:F5:27:96:9F:9B:F0:12:CC:0E:90:97:84:3B:4F:CF:5E:2E:E5:AC:CB:83:EA:A2:AD:CB:76:3C:32"}}},"request":{"raw":"GET /kugoucss/picture/section3_pic3.png HTTP/1.1\r\nHost: web.i4zhusao.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://web.i4zhusao.icu/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 19 Oct 2025 08:09:49 GMT\r\ncontent-type: image/png\r\ncontent-length: 733\r\nlast-modified: Thu, 27 Mar 2025 13:59:03 GMT\r\netag: \"67e559a7-2dd\"\r\nexpires: Tue, 18 Nov 2025 08:09:49 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":733,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 74 x 65, 8-bit colormap, non-interlaced","md5":"72612b9f4229aae210e2ca7687cb026a","sha1":"a1c5d6d738bba0e37f23c922312734432b099368","sha256":"806624cc325e7b2964acf57f1feb9811e54bc3051de801a85c5c95fe172fd1bc","sha512":"4344f7e016a360b13c2525091f5ab422e43ebda6ba73d696275003d2a4dd60768ce5e85b09e5a3b32bb2e0528b7fd31b1e1b3c01469d8fecf35d7893be49d570","ssdeep":"","tlshash":"8c01627766669e34f224c9b96b279ce0dbb038b0c590d850273c8d2c186a22c80ce4b0","first_seen":"2025-10-19T08:02:22.410045Z","last_seen":"2025-10-22T21:32:48.806516Z","times_seen":4,"resource_available":false,"data":null}},"time_used":955,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":654,"receive":301,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"web.i4zhusao.icu/kugoucss/js/jquery.min.js","fqdn":"web.i4zhusao.icu","domain":"i4zhusao.icu","tld":"icu"},"ip":{"addr":"172.245.67.31","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://web.i4zhusao.icu/","date":"2025-10-19T08:09:50.225Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"web.i4zhusao.icu","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Fri, 28 Feb 2025 11:36:59 GMT","end":"Thu, 29 May 2025 11:36:58 GMT"},"fingerprint":{"sha1":"93:00:0F:29:69:B3:A1:59:B7:D8:1E:48:41:8F:DC:E2:B0:20:8D:FC","sha256":"D5:80:22:AC:F5:27:96:9F:9B:F0:12:CC:0E:90:97:84:3B:4F:CF:5E:2E:E5:AC:CB:83:EA:A2:AD:CB:76:3C:32"}}},"request":{"raw":"GET /kugoucss/js/jquery.min.js HTTP/1.1\r\nHost: web.i4zhusao.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://web.i4zhusao.icu/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 19 Oct 2025 08:09:50 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 27 Mar 2025 13:58:55 GMT\r\nvary: Accept-Encoding\r\netag: W/\"67e5599f-169d8\"\r\nexpires: Sun, 19 Oct 2025 20:09:50 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":92632,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (32089)","md5":"397754ba49e9e0cf4e7c190da78dda05","sha1":"ae49e56999d82802727455f0ba83b63acd90a22b","sha256":"c12f6098e641aaca96c60215800f18f5671039aecf812217fab3c0d152f6adb4","sha512":"8c64754f77507ab2c24a6fc818419b9dd3f0ceccc9065290e41afdbee0743f0da2cb13b2fbb00afa525c082f1e697cb3ffd76ef9b902cb81d7c41ca1c641dffb","ssdeep":"1536:dnu00HWWaRxkqJg09pYxoxDKMXJrg8hXXO4dK3kyfiLJBhdSZE+I+Qg7rbaN1RUx:ddkWgoBhcZRQgmW42qe","tlshash":"8c932bdd72d2b03257ab30bd106f540ff2361959280d8850f268d8f9bc79a49a277f6d","first_seen":"2023-03-07T01:02:08Z","last_seen":"2026-08-16T19:16:14.008927Z","times_seen":72251,"resource_available":true,"data":null}},"time_used":545,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":545,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"web.i4zhusao.icu/","fqdn":"web.i4zhusao.icu","domain":"i4zhusao.icu","tld":"icu"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-10-19T08:09:47.339Z","timestamp":0,"http_version":"","security_state":"broken","security_info":null,"request":{"raw":"GET / HTTP/1.1\r\nHost: web.i4zhusao.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-16T19:35:55.306911Z","times_seen":17923256,"resource_available":true,"data":null}},"time_used":467,"timings":{"blocked":0,"dns":128,"connect":166,"send":0,"wait":0,"receive":0,"ssl":171},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"web.i4zhusao.icu/kugoucss/js/base-min.js","fqdn":"web.i4zhusao.icu","domain":"i4zhusao.icu","tld":"icu"},"ip":{"addr":"172.245.67.31","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://web.i4zhusao.icu/","date":"2025-10-19T08:09:49.663Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"web.i4zhusao.icu","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Fri, 28 Feb 2025 11:36:59 GMT","end":"Thu, 29 May 2025 11:36:58 GMT"},"fingerprint":{"sha1":"93:00:0F:29:69:B3:A1:59:B7:D8:1E:48:41:8F:DC:E2:B0:20:8D:FC","sha256":"D5:80:22:AC:F5:27:96:9F:9B:F0:12:CC:0E:90:97:84:3B:4F:CF:5E:2E:E5:AC:CB:83:EA:A2:AD:CB:76:3C:32"}}},"request":{"raw":"GET /kugoucss/js/base-min.js HTTP/1.1\r\nHost: web.i4zhusao.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://web.i4zhusao.icu/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 19 Oct 2025 08:09:49 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 27 Mar 2025 13:58:54 GMT\r\nvary: Accept-Encoding\r\netag: W/\"67e5599e-3b62\"\r\nexpires: Sun, 19 Oct 2025 20:09:49 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":15202,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (15141), with no line terminators","md5":"a47e27930568881969531c4980477912","sha1":"6492f399f3822a6efde3f5b4e4df6cff14991e72","sha256":"c148ebf7aee721c668282c7539cbfb9beebbf5f22417750d3438ba8cf39bc024","sha512":"f700be1277abc8bf7c00b74b25e3b12fc28540bf56554d48b602c2fd572c3b1b6c1d1b9a06b01a4ad53dba601ad7f1852f44266ea8345da2f87def508c5afb62","ssdeep":"192:koa733UdU+Y6ZvZwwrZb4EGz4TzNZFtVWhW9fQgC+ElsaAwbvEuDGl3Xk/xDuW9/:jUi0Geoay0cuDGlHgAybYYmBUV","tlshash":"6b623a7c7e48597ac6abd7a61c36f1083367127b3b74a013e4a0dce2090c6976b6f395","first_seen":"2025-10-19T08:02:22.526806Z","last_seen":"2025-10-24T03:43:26.518899Z","times_seen":5,"resource_available":true,"data":null}},"time_used":235,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":235,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"web.i4zhusao.icu/kugoucss/js/registerdev.v1.min.js","fqdn":"web.i4zhusao.icu","domain":"i4zhusao.icu","tld":"icu"},"ip":{"addr":"172.245.67.31","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://web.i4zhusao.icu/","date":"2025-10-19T08:09:49.683Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"web.i4zhusao.icu","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Fri, 28 Feb 2025 11:36:59 GMT","end":"Thu, 29 May 2025 11:36:58 GMT"},"fingerprint":{"sha1":"93:00:0F:29:69:B3:A1:59:B7:D8:1E:48:41:8F:DC:E2:B0:20:8D:FC","sha256":"D5:80:22:AC:F5:27:96:9F:9B:F0:12:CC:0E:90:97:84:3B:4F:CF:5E:2E:E5:AC:CB:83:EA:A2:AD:CB:76:3C:32"}}},"request":{"raw":"GET /kugoucss/js/registerdev.v1.min.js HTTP/1.1\r\nHost: web.i4zhusao.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://web.i4zhusao.icu/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 19 Oct 2025 08:09:49 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 27 Mar 2025 13:58:57 GMT\r\nvary: Accept-Encoding\r\netag: W/\"67e559a1-a78c\"\r\nexpires: Sun, 19 Oct 2025 20:09:49 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":42892,"size_decoded":0,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text, with very long lines (42829), with no line terminators","md5":"7f8636c831654cfb50f08583c6e51ea4","sha1":"4e2cf3b050bd378c9a37a49837debc0967461359","sha256":"1ac9daf3e1adf7b3db63320bb6ed55947fdf498f63af4703a63dbbce4404a8b3","sha512":"36f9b2d8ae5e54dc6369cb2f45fe1b07b6f41fd1980966bde5d11d07c2367bf72e0da97f8b5ae45a7d9ad3f2e7636caf7de8de66444e7b90d790e3294c71daad","ssdeep":"768:ljN55q3/8J/3LqvtJITf3xeruSJFhAN5OTQpzqe6h718mA7n/:lJ5Y0J/3utJILheSSJFhAN5Tqe6h718R","tlshash":"31134b4cb5dd353503a52aa4203fb18ab3367651580e4440f3aae5ed78a4eeed33bd78","first_seen":"2024-06-17T16:52:48Z","last_seen":"2026-01-15T19:35:47.776433Z","times_seen":12,"resource_available":true,"data":null}},"time_used":662,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":662,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"web.i4zhusao.icu/kugoucss/css/cmdialog.css","fqdn":"web.i4zhusao.icu","domain":"i4zhusao.icu","tld":"icu"},"ip":{"addr":"172.245.67.31","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://web.i4zhusao.icu/","date":"2025-10-19T08:09:49.669Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"web.i4zhusao.icu","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Fri, 28 Feb 2025 11:36:59 GMT","end":"Thu, 29 May 2025 11:36:58 GMT"},"fingerprint":{"sha1":"93:00:0F:29:69:B3:A1:59:B7:D8:1E:48:41:8F:DC:E2:B0:20:8D:FC","sha256":"D5:80:22:AC:F5:27:96:9F:9B:F0:12:CC:0E:90:97:84:3B:4F:CF:5E:2E:E5:AC:CB:83:EA:A2:AD:CB:76:3C:32"}}},"request":{"raw":"GET /kugoucss/css/cmdialog.css HTTP/1.1\r\nHost: web.i4zhusao.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://web.i4zhusao.icu/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 19 Oct 2025 08:09:49 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 27 Mar 2025 13:58:13 GMT\r\nvary: Accept-Encoding\r\netag: W/\"67e55975-2e89\"\r\nexpires: Sun, 19 Oct 2025 20:09:49 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":11913,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"39fe878c243251bebf9d0b3805f8d192","sha1":"14a7e575a6fbe4c338fa58cd057c53a9eb1821fa","sha256":"71233e27cd3cba74b060f182831edde8bb5a4df3cce0946bd125e4ddf910ac21","sha512":"7e8a3c9b57f449d65a20d51f0f696a665611b22c34449aab9ece5b3e9d614e800ec0fa89dc7f4dcd377423d9a6958d0a7133beb3db6242bb7ddb7872abf4d875","ssdeep":"96:6gURuFmN57tziSCiTRAxrDgiiyzGUtX6qdsNnrrRNeX8ysuisJ5AGqIy/yayGyfj:aj7WXvaL8PsTpkYEbIkUk","tlshash":"4a320c7a35093c8cb10cc1e5ae76bdf5d20782707a1b2ffbb95d241e92848d0776e52a","first_seen":"2025-10-19T08:02:22.369161Z","last_seen":"2025-10-22T21:32:48.950157Z","times_seen":4,"resource_available":false,"data":null}},"time_used":483,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":483,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"web.i4zhusao.icu/kugoucss/picture/section2_pic2.jpg","fqdn":"web.i4zhusao.icu","domain":"i4zhusao.icu","tld":"icu"},"ip":{"addr":"172.245.67.31","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://web.i4zhusao.icu/","date":"2025-10-19T08:09:49.691Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"web.i4zhusao.icu","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Fri, 28 Feb 2025 11:36:59 GMT","end":"Thu, 29 May 2025 11:36:58 GMT"},"fingerprint":{"sha1":"93:00:0F:29:69:B3:A1:59:B7:D8:1E:48:41:8F:DC:E2:B0:20:8D:FC","sha256":"D5:80:22:AC:F5:27:96:9F:9B:F0:12:CC:0E:90:97:84:3B:4F:CF:5E:2E:E5:AC:CB:83:EA:A2:AD:CB:76:3C:32"}}},"request":{"raw":"GET /kugoucss/picture/section2_pic2.jpg HTTP/1.1\r\nHost: web.i4zhusao.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://web.i4zhusao.icu/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 19 Oct 2025 08:09:49 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Thu, 27 Mar 2025 13:59:02 GMT\r\nvary: Accept-Encoding\r\netag: W/\"67e559a6-657b\"\r\nexpires: Tue, 18 Nov 2025 08:09:49 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":25979,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 280x590, components 3","md5":"7e6953c9f854337e440dafcd387c180a","sha1":"309ec1d0643c187a4dbff5858c025af96c9d5b34","sha256":"90d4e7efb9173e3dd2b3c62a808497b3c6d017afe5ca145b36564bfac3d82da2","sha512":"87f0182267c74d936f677f0d37cbc15869c2b5739b8f2243d933d2ab48e4324303125a14993fcd90582ec987d45756501051433ae740c4946263da8ab81b8e18","ssdeep":"768:dBPHRUu7Os+ATPydNaTd2gZAa1O2Q4dpB6fnL:3xbBbTWNaTMgZX1tdpyL","tlshash":"7bc27bab622c17b5f3c9ee2b77db8587804f47188b325c1444775cc7e929e2ce2600e2","first_seen":"2025-10-19T08:02:22.401959Z","last_seen":"2025-10-22T21:32:48.939355Z","times_seen":4,"resource_available":false,"data":null}},"time_used":654,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":654,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"web.i4zhusao.icu/click.js","fqdn":"web.i4zhusao.icu","domain":"i4zhusao.icu","tld":"icu"},"ip":{"addr":"172.245.67.31","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://web.i4zhusao.icu/","date":"2025-10-19T08:09:49.705Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"web.i4zhusao.icu","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Fri, 28 Feb 2025 11:36:59 GMT","end":"Thu, 29 May 2025 11:36:58 GMT"},"fingerprint":{"sha1":"93:00:0F:29:69:B3:A1:59:B7:D8:1E:48:41:8F:DC:E2:B0:20:8D:FC","sha256":"D5:80:22:AC:F5:27:96:9F:9B:F0:12:CC:0E:90:97:84:3B:4F:CF:5E:2E:E5:AC:CB:83:EA:A2:AD:CB:76:3C:32"}}},"request":{"raw":"GET /click.js HTTP/1.1\r\nHost: web.i4zhusao.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://web.i4zhusao.icu/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 19 Oct 2025 08:09:49 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 27 Mar 2025 13:58:11 GMT\r\nvary: Accept-Encoding\r\netag: W/\"67e55973-1450\"\r\nexpires: Sun, 19 Oct 2025 20:09:49 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5200,"size_decoded":0,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text, with CRLF line terminators","md5":"f424c9d9dd884dc5cdf0073192793e72","sha1":"f2901bcb16a4993905c7aea70d383b6448697935","sha256":"5e16556dc868466989420543faae65a561cfe5674906121eae4cce209979f077","sha512":"773a00fafbb6b97938c0ffcbe6ffae923be637a0cf5afe981e3c501c1ec94cf936aaf600812fec339b5075a14a25c31e25f70b03554dcf7905cbd2ba740e28a8","ssdeep":"96:mOsmCPNri1utKXHFfkwDpFy2tWETT2vUeo5rox:meCPNWvpkoltWETCse8rox","tlshash":"87b1518d7505627d1ab263b51e7b2e04f847662b6040ec12ff3c9950afb4b11732eed6","first_seen":"2025-10-19T08:02:22.372668Z","last_seen":"2025-10-22T21:32:48.954688Z","times_seen":4,"resource_available":true,"data":null}},"time_used":650,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":650,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"web.i4zhusao.icu/kugoucss/images/section2_bg.jpg","fqdn":"web.i4zhusao.icu","domain":"i4zhusao.icu","tld":"icu"},"ip":{"addr":"172.245.67.31","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://web.i4zhusao.icu/","date":"2025-10-19T08:09:52.432Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"web.i4zhusao.icu","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Fri, 28 Feb 2025 11:36:59 GMT","end":"Thu, 29 May 2025 11:36:58 GMT"},"fingerprint":{"sha1":"93:00:0F:29:69:B3:A1:59:B7:D8:1E:48:41:8F:DC:E2:B0:20:8D:FC","sha256":"D5:80:22:AC:F5:27:96:9F:9B:F0:12:CC:0E:90:97:84:3B:4F:CF:5E:2E:E5:AC:CB:83:EA:A2:AD:CB:76:3C:32"}}},"request":{"raw":"GET /kugoucss/images/section2_bg.jpg HTTP/1.1\r\nHost: web.i4zhusao.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://web.i4zhusao.icu/kugoucss/css/pcdownloadpage201211.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 19 Oct 2025 08:09:52 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Thu, 27 Mar 2025 13:58:46 GMT\r\nvary: Accept-Encoding\r\netag: W/\"67e55996-12eda\"\r\nexpires: Tue, 18 Nov 2025 08:09:52 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":77530,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1920x800, components 3","md5":"55e8859dc9b83ae43317b9a4b4fa0559","sha1":"9c57447fa68b1c5fb9e60aa77a974d9eea13feea","sha256":"aa2384c4e47af7f8bfa8abdc40980fa934aac59fa09770251d0c154f8ad8f144","sha512":"57ef6ac8db205acdb52aa8a2e7efa85dab36dc6d2bd21debb683b638c4ab63e3112da1dfd52fe7d5a540fc1561006fc9bf178752840bae2d37a912f027334728","ssdeep":"1536:k8kOwcWWDhflcVzDIAOhUEeeYUqh1LswddheRtGveHo5qTPpCiq8I:bBWBJDILhXYU8rNCWeI4TPpDI","tlshash":"50730117db429ae8d55b1736a2678b26bb770179e919a3cb41301e2c81f73a73f10305","first_seen":"2025-10-19T08:02:22.485168Z","last_seen":"2025-10-22T21:32:48.948538Z","times_seen":4,"resource_available":false,"data":null}},"time_used":177,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":177,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"web.i4zhusao.icu/kugoucss/images/section3_bg.jpg","fqdn":"web.i4zhusao.icu","domain":"i4zhusao.icu","tld":"icu"},"ip":{"addr":"172.245.67.31","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://web.i4zhusao.icu/","date":"2025-10-19T08:09:52.434Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"web.i4zhusao.icu","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Fri, 28 Feb 2025 11:36:59 GMT","end":"Thu, 29 May 2025 11:36:58 GMT"},"fingerprint":{"sha1":"93:00:0F:29:69:B3:A1:59:B7:D8:1E:48:41:8F:DC:E2:B0:20:8D:FC","sha256":"D5:80:22:AC:F5:27:96:9F:9B:F0:12:CC:0E:90:97:84:3B:4F:CF:5E:2E:E5:AC:CB:83:EA:A2:AD:CB:76:3C:32"}}},"request":{"raw":"GET /kugoucss/images/section3_bg.jpg HTTP/1.1\r\nHost: web.i4zhusao.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://web.i4zhusao.icu/kugoucss/css/pcdownloadpage201211.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 19 Oct 2025 08:09:52 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Thu, 27 Mar 2025 13:58:46 GMT\r\nvary: Accept-Encoding\r\netag: W/\"67e55996-bd39\"\r\nexpires: Tue, 18 Nov 2025 08:09:52 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":48441,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1920x800, components 3","md5":"3a54c14cfff713b4e74aa82a5ab6ce9b","sha1":"4771de87f3a8f52a8796ae35976c21866f12eaa8","sha256":"21dd33edbdb986fe7be07e4d67d35a656f3c01e773eaf1b5544969fd5431c267","sha512":"6c0a83e9ccd96bdb815d57cf03032cc1403cc4f1020ab721a069a39b7691615bde0f3ad99f50f65dca30bc454ae48dee1da1bd9045057fdfa00f732fe110b35a","ssdeep":"768:1KdYiijmaOeqp8hGD1d9hPzWfcpP/3t1HtGR3dUXMvJYKq32XK7xRQKJOu:OAjmaOeqihMhPzW6/t1HY1dUXWJYKsXn","tlshash":"be23d062779cdbe3c89dd3309ae3072a331249b56a560b93d9f54930289db30fc1a9e1","first_seen":"2025-10-19T08:02:22.376509Z","last_seen":"2025-10-22T21:32:48.753166Z","times_seen":4,"resource_available":false,"data":null}},"time_used":183,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":183,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"web.i4zhusao.icu/kugoucss/images/section4_bg.jpg","fqdn":"web.i4zhusao.icu","domain":"i4zhusao.icu","tld":"icu"},"ip":{"addr":"172.245.67.31","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://web.i4zhusao.icu/","date":"2025-10-19T08:09:52.435Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"web.i4zhusao.icu","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Fri, 28 Feb 2025 11:36:59 GMT","end":"Thu, 29 May 2025 11:36:58 GMT"},"fingerprint":{"sha1":"93:00:0F:29:69:B3:A1:59:B7:D8:1E:48:41:8F:DC:E2:B0:20:8D:FC","sha256":"D5:80:22:AC:F5:27:96:9F:9B:F0:12:CC:0E:90:97:84:3B:4F:CF:5E:2E:E5:AC:CB:83:EA:A2:AD:CB:76:3C:32"}}},"request":{"raw":"GET /kugoucss/images/section4_bg.jpg HTTP/1.1\r\nHost: web.i4zhusao.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://web.i4zhusao.icu/kugoucss/css/pcdownloadpage201211.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 19 Oct 2025 08:09:52 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Thu, 27 Mar 2025 13:58:47 GMT\r\nvary: Accept-Encoding\r\netag: W/\"67e55997-10b8a\"\r\nexpires: Tue, 18 Nov 2025 08:09:52 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":68490,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1920x800, components 3","md5":"fbc2bfd516166b180d14d7f4bcc3c497","sha1":"ef2824f8d643935f93059cbcc4e2d287e08f7820","sha256":"399479fd75ebff1ef948d7264b5879acbb7df77effb5352cb94bf92f9f5fdb16","sha512":"ca6092c52d2b70ce27ca68fa0370960be25457e54c8607aa95f37b4f74f8859f8a03c2e6f4a7c8909ec5831c3af5110b93e0cd0824a55ad97be91a76c3186c5f","ssdeep":"1536:Ljwiixt/tii19lfBXdCBmfhaiB1iJGzNlFbg6lG:vihn9lfBXdbfhai1zjFbg6g","tlshash":"de63d004db42abcbc05c3b7180f35b2cbb6346aca681657682bc7635de65354ff6a2d0","first_seen":"2025-10-19T08:02:22.488911Z","last_seen":"2025-10-22T21:32:48.952281Z","times_seen":4,"resource_available":false,"data":null}},"time_used":185,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":185,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"statwww2.kugou.com/node/weblog/jsloger?key=registerDev\u0026time=2499\u0026errmsg=%E7%94%9F%E6%88%90%E8%AE%BE%E5%A4%87%E6%8C%87%E7%BA%B9%E6%97%B6%E9%95%BF(%E6%AF%AB%E7%A7%92)","fqdn":"statwww2.kugou.com","domain":"kugou.com","tld":"com"},"ip":{"addr":"49.7.251.203","port":443,"asn":23724,"as":"IDC, China Telecommunications Corporation","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://web.i4zhusao.icu/","date":"2025-10-19T08:09:53.326Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.kugou.com","organization":"广州酷狗计算机科技有限公司"},"issuer":{"commonName":"GeoTrust G2 TLS CN RSA4096 SHA256 2022 CA1","organization":"DigiCert, Inc."},"validity":{"start":"Fri, 15 Aug 2025 00:00:00 GMT","end":"Sat, 12 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"54:C9:FE:60:DD:C7:A4:FD:21:40:06:FD:BE:5D:7A:67:E7:C2:88:2A","sha256":"B1:D1:4A:49:9C:8F:28:B9:3E:7E:5F:2C:52:A0:8A:7B:75:5E:69:76:D1:F3:74:4A:69:EC:46:93:36:DF:5C:A7"}}},"request":{"raw":"GET /node/weblog/jsloger?key=registerDev\u0026time=2499\u0026errmsg=%E7%94%9F%E6%88%90%E8%AE%BE%E5%A4%87%E6%8C%87%E7%BA%B9%E6%97%B6%E9%95%BF(%E6%AF%AB%E7%A7%92) HTTP/1.1\r\nHost: statwww2.kugou.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://web.i4zhusao.icu\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://web.i4zhusao.icu/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: kws\r\nDate: Sun, 19 Oct 2025 08:09:55 GMT\r\nContent-Type: application/json; charset=utf-8\r\nContent-Length: 12\r\nConnection: keep-alive\r\nX-Powered-By: Express\r\nETag: W/\"c-Tdf/iJp4v5+BVMhHHK9kwA\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":12,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"4dd7ff889a78bf9f8154c8471caf64c0","sha1":"5bc6f8ed1647e665103c514bef0d94776f2b0c00","sha256":"587fa9763e3d74ded3b64a843905f5541690582aad4976207e03743a7fb5f70e","sha512":"59782fe6e53039320d09e94101090aad23f9ec5ed233f1742781a00da739b5d661d0d419136af9ef2c7a97a596ce4a0432a8f13cea8ef5451ef0a7f1c0440868","ssdeep":"","tlshash":"c760000000000000ccc00c030c000030ff300f00000f00c0000c00f00003cc0c00c000","first_seen":"2023-04-15T14:56:12Z","last_seen":"2026-08-16T12:47:27.638683Z","times_seen":3207,"resource_available":true,"data":null}},"time_used":4526,"timings":{"blocked":2149,"dns":1462,"connect":227,"send":0,"wait":228,"receive":0,"ssl":459},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"web.i4zhusao.icu/kugoucss/js/jquery.min.js","fqdn":"web.i4zhusao.icu","domain":"i4zhusao.icu","tld":"icu"},"ip":{"addr":"172.245.67.31","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://web.i4zhusao.icu/","date":"2025-10-19T08:09:49.665Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"web.i4zhusao.icu","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Fri, 28 Feb 2025 11:36:59 GMT","end":"Thu, 29 May 2025 11:36:58 GMT"},"fingerprint":{"sha1":"93:00:0F:29:69:B3:A1:59:B7:D8:1E:48:41:8F:DC:E2:B0:20:8D:FC","sha256":"D5:80:22:AC:F5:27:96:9F:9B:F0:12:CC:0E:90:97:84:3B:4F:CF:5E:2E:E5:AC:CB:83:EA:A2:AD:CB:76:3C:32"}}},"request":{"raw":"GET /kugoucss/js/jquery.min.js HTTP/1.1\r\nHost: web.i4zhusao.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://web.i4zhusao.icu/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 19 Oct 2025 08:09:49 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 27 Mar 2025 13:58:55 GMT\r\nvary: Accept-Encoding\r\netag: W/\"67e5599f-169d8\"\r\nexpires: Sun, 19 Oct 2025 20:09:49 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":92632,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (32089)","md5":"397754ba49e9e0cf4e7c190da78dda05","sha1":"ae49e56999d82802727455f0ba83b63acd90a22b","sha256":"c12f6098e641aaca96c60215800f18f5671039aecf812217fab3c0d152f6adb4","sha512":"8c64754f77507ab2c24a6fc818419b9dd3f0ceccc9065290e41afdbee0743f0da2cb13b2fbb00afa525c082f1e697cb3ffd76ef9b902cb81d7c41ca1c641dffb","ssdeep":"1536:dnu00HWWaRxkqJg09pYxoxDKMXJrg8hXXO4dK3kyfiLJBhdSZE+I+Qg7rbaN1RUx:ddkWgoBhcZRQgmW42qe","tlshash":"8c932bdd72d2b03257ab30bd106f540ff2361959280d8850f268d8f9bc79a49a277f6d","first_seen":"2023-03-07T01:02:08Z","last_seen":"2026-08-16T19:16:14.008927Z","times_seen":72251,"resource_available":true,"data":null}},"time_used":342,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":342,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"web.i4zhusao.icu/kugoucss/js/sentry5.6.1.min.js","fqdn":"web.i4zhusao.icu","domain":"i4zhusao.icu","tld":"icu"},"ip":{"addr":"172.245.67.31","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://web.i4zhusao.icu/","date":"2025-10-19T08:09:49.673Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"web.i4zhusao.icu","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Fri, 28 Feb 2025 11:36:59 GMT","end":"Thu, 29 May 2025 11:36:58 GMT"},"fingerprint":{"sha1":"93:00:0F:29:69:B3:A1:59:B7:D8:1E:48:41:8F:DC:E2:B0:20:8D:FC","sha256":"D5:80:22:AC:F5:27:96:9F:9B:F0:12:CC:0E:90:97:84:3B:4F:CF:5E:2E:E5:AC:CB:83:EA:A2:AD:CB:76:3C:32"}}},"request":{"raw":"GET /kugoucss/js/sentry5.6.1.min.js HTTP/1.1\r\nHost: web.i4zhusao.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://web.i4zhusao.icu/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 19 Oct 2025 08:09:49 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 27 Mar 2025 13:58:58 GMT\r\nvary: Accept-Encoding\r\netag: W/\"67e559a2-cc01\"\r\nexpires: Sun, 19 Oct 2025 20:09:49 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":52225,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (52093)","md5":"fdfa44f73f3f3ffbd366973b854d61f4","sha1":"8685319f578cdfd3e9678925ab12b81decd8d0fa","sha256":"fd576f0b9f3a7da553a1f10dc955374e6e6ea76f762b006a01f94b5daf9a6571","sha512":"9d6f498b7ff9d0162b28e3c6dac4160077a52ee7e5eec6fda29ba747814a7565c5631627b9ac6cfdea9d7fe70e69b9370113617b56243b9afde61aad221c1df4","ssdeep":"768:wCANwH4feqmn2Ufl8zQT9DQUd2ZYmRJUCteg/b2CF3+CGPKsAgv9/WgV:wg9ozW0UEvC5/TV","tlshash":"0e3394ccf5e1b076479366a1523f000ae33f5d68689da2a8b445e9f02cf940d9a27f7d","first_seen":"2023-03-09T05:10:05Z","last_seen":"2026-06-06T21:41:22.128914Z","times_seen":21,"resource_available":true,"data":null}},"time_used":546,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":546,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"web.i4zhusao.icu/kugoucss/js/kguser_min.js","fqdn":"web.i4zhusao.icu","domain":"i4zhusao.icu","tld":"icu"},"ip":{"addr":"172.245.67.31","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://web.i4zhusao.icu/","date":"2025-10-19T08:09:49.667Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"web.i4zhusao.icu","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Fri, 28 Feb 2025 11:36:59 GMT","end":"Thu, 29 May 2025 11:36:58 GMT"},"fingerprint":{"sha1":"93:00:0F:29:69:B3:A1:59:B7:D8:1E:48:41:8F:DC:E2:B0:20:8D:FC","sha256":"D5:80:22:AC:F5:27:96:9F:9B:F0:12:CC:0E:90:97:84:3B:4F:CF:5E:2E:E5:AC:CB:83:EA:A2:AD:CB:76:3C:32"}}},"request":{"raw":"GET /kugoucss/js/kguser_min.js HTTP/1.1\r\nHost: web.i4zhusao.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://web.i4zhusao.icu/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 19 Oct 2025 08:09:49 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 27 Mar 2025 13:58:56 GMT\r\nvary: Accept-Encoding\r\netag: W/\"67e559a0-a975\"\r\nexpires: Sun, 19 Oct 2025 20:09:49 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":43381,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (2794)","md5":"45d4919b7b78816799a9afbfc65e1660","sha1":"4bc35ba539b5142233597deaa28f4f334f22a2ee","sha256":"aeb6ae230534667452cfc4a92fbd5286e336fb947769118e080f637c3bbcfc85","sha512":"2be99d3e6934d671c5f50c28dc1720bbfb0f1cf6b3f65a9382fcda6e5a8f1211ed473494019263a0c2f28c7906bea87fa650313d2f456b18106db35c19279a52","ssdeep":"768:z2wr+UOyk+IgeS1SOhD3vfs7tLiH/VLx8kuiDg9QMEV+6rZTO7GSte/zl4ZtiSuA:z2wr+8k+GSMOhD3vfs7tLiH/VLxCWg9p","tlshash":"3d13e8d1a281481b6491972a467f270c62fca15176fbd41988b0eff0be34b5ec077a7e","first_seen":"2024-08-19T14:10:51.95898Z","last_seen":"2026-01-15T19:35:47.767123Z","times_seen":9,"resource_available":true,"data":null}},"time_used":474,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":474,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"web.i4zhusao.icu/kugoucss/picture/section2_pic1.jpg","fqdn":"web.i4zhusao.icu","domain":"i4zhusao.icu","tld":"icu"},"ip":{"addr":"172.245.67.31","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://web.i4zhusao.icu/","date":"2025-10-19T08:09:49.690Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"web.i4zhusao.icu","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Fri, 28 Feb 2025 11:36:59 GMT","end":"Thu, 29 May 2025 11:36:58 GMT"},"fingerprint":{"sha1":"93:00:0F:29:69:B3:A1:59:B7:D8:1E:48:41:8F:DC:E2:B0:20:8D:FC","sha256":"D5:80:22:AC:F5:27:96:9F:9B:F0:12:CC:0E:90:97:84:3B:4F:CF:5E:2E:E5:AC:CB:83:EA:A2:AD:CB:76:3C:32"}}},"request":{"raw":"GET /kugoucss/picture/section2_pic1.jpg HTTP/1.1\r\nHost: web.i4zhusao.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://web.i4zhusao.icu/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 19 Oct 2025 08:09:49 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Thu, 27 Mar 2025 13:59:02 GMT\r\nvary: Accept-Encoding\r\netag: W/\"67e559a6-22cf8\"\r\nexpires: Tue, 18 Nov 2025 08:09:49 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":142584,"size_decoded":0,"mime_type":"image/jpeg","magic":"PNG image data, 492 x 333, 8-bit/color RGBA, non-interlaced","md5":"c0aa139a4d7538534b2b607736ee3996","sha1":"d1421416488a4ea3d781515a60ee7246f690d96b","sha256":"c84da37f2ef0401ede3bc1cd07f4deb81705d2822765fb4cb4dcafa01869844f","sha512":"13b2464f8f1b47446052b47d1a308799a79dc79dde34532b3dc4a168e7bf4bdac7c8128f70413df66c2e4bfdb0bb863bc4d1f566302c9720c9736a34f43c44dd","ssdeep":"3072:7axHFRIqW6U8zP+ROke1injhFkghk/W6k3YxQTN/BVwAvLLFEA73:7aT6Pg4e1ujW/oIxQT1fljLFEa","tlshash":"b0d3126c8009d5b2b50b067b443ccc6a78317b05de2865fcf072d0d79a26d5e9b1e7ea","first_seen":"2025-10-19T08:02:22.554731Z","last_seen":"2025-10-22T21:32:48.894462Z","times_seen":4,"resource_available":false,"data":null}},"time_used":654,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":654,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"userservice.kugou.com/risk/v1/r_register_dev?appid=1058\u0026platid=4\u0026clientver=0\u0026clienttime=1760861392\u0026signature=09cac767c6c63516c3b31890406ac146\u0026mid=b96b07829abf22aa339f73158b8cc7b9\u0026userid=0\u0026uuid=c797e419f1c6bc38779979747e9fb7b5\u0026p.token=","fqdn":"userservice.kugou.com","domain":"kugou.com","tld":"com"},"ip":{"addr":"122.10.103.131","port":443,"asn":136897,"as":"Enjoyvc Cloud Group Limited.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://web.i4zhusao.icu/","date":"2025-10-19T08:09:52.254Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.kugou.com","organization":"广州酷狗计算机科技有限公司"},"issuer":{"commonName":"GeoTrust G2 TLS CN RSA4096 SHA256 2022 CA1","organization":"DigiCert, Inc."},"validity":{"start":"Fri, 15 Aug 2025 00:00:00 GMT","end":"Sat, 12 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"54:C9:FE:60:DD:C7:A4:FD:21:40:06:FD:BE:5D:7A:67:E7:C2:88:2A","sha256":"B1:D1:4A:49:9C:8F:28:B9:3E:7E:5F:2C:52:A0:8A:7B:75:5E:69:76:D1:F3:74:4A:69:EC:46:93:36:DF:5C:A7"}}},"request":{"raw":"POST /risk/v1/r_register_dev?appid=1058\u0026platid=4\u0026clientver=0\u0026clienttime=1760861392\u0026signature=09cac767c6c63516c3b31890406ac146\u0026mid=b96b07829abf22aa339f73158b8cc7b9\u0026userid=0\u0026uuid=c797e419f1c6bc38779979747e9fb7b5\u0026p.token= HTTP/1.1\r\nHost: userservice.kugou.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\nContent-Length: 1740\r\nOrigin: https://web.i4zhusao.icu\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://web.i4zhusao.icu/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 19 Oct 2025 08:09:53 GMT\r\ncontent-type: application/json;charset=utf-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization\r\nkg-svr-version: v20251013-1_t_20251013204252\r\nkg-bc-ms: 36\r\nkg-rs-ms: 1760861393081\r\nserver: kws\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":71,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"56640c008fa9d2965e6eebe8d5a2ce25","sha1":"29831ff67930f7b261a8e2de41ecaa372d5aba17","sha256":"42bc17dd41ff349077351b76f72773e2eeb08b97e16ab1ed3d01133dfd494ea8","sha512":"8d09b38472d58d294128e8ba4f75e36a0a647010ff389b1c5c41b4bed93b502581f2505ce329068c5aacba427c6cae6e18b353fb2e59980f02596b60095331ce","ssdeep":"","tlshash":"5ea022088ccc0c820c0030208c0caa23e3f3c0c08c0f00af08c88b3800ab80ce0e08ec","first_seen":"2025-10-19T08:10:15.446084Z","last_seen":"2025-10-19T08:10:15.446084Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1671,"timings":{"blocked":656,"dns":1,"connect":323,"send":0,"wait":359,"receive":0,"ssl":329},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webcollects.kugou.com/v2/web/time.js?appid=2400\u0026_t=1760861392450\u0026_r=0.09771599766842776\u0026sign=0228845941fc95ded8d718834d9f92d4\u0026callback=WebCollectConfig.callback","fqdn":"webcollects.kugou.com","domain":"kugou.com","tld":"com"},"ip":{"addr":"36.110.225.149","port":443,"asn":23724,"as":"IDC, China Telecommunications Corporation","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://web.i4zhusao.icu/","date":"2025-10-19T08:09:52.455Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.kugou.com","organization":"广州酷狗计算机科技有限公司"},"issuer":{"commonName":"GeoTrust G2 TLS CN RSA4096 SHA256 2022 CA1","organization":"DigiCert, Inc."},"validity":{"start":"Fri, 15 Aug 2025 00:00:00 GMT","end":"Sat, 12 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"54:C9:FE:60:DD:C7:A4:FD:21:40:06:FD:BE:5D:7A:67:E7:C2:88:2A","sha256":"B1:D1:4A:49:9C:8F:28:B9:3E:7E:5F:2C:52:A0:8A:7B:75:5E:69:76:D1:F3:74:4A:69:EC:46:93:36:DF:5C:A7"}}},"request":{"raw":"GET /v2/web/time.js?appid=2400\u0026_t=1760861392450\u0026_r=0.09771599766842776\u0026sign=0228845941fc95ded8d718834d9f92d4\u0026callback=WebCollectConfig.callback HTTP/1.1\r\nHost: webcollects.kugou.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://web.i4zhusao.icu/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Sun, 19 Oct 2025 08:09:53 GMT\r\ncontent-type: application/javascript; charset=utf8\r\nvary: Accept-Encoding\r\nset-cookie: _WCMID=164af73668f49cd10fac9405; Expires=Mon, 19 Oct 2026 16:09:53 GMT; path=/; domain=webcollects.kugou.com\r\nstrict-transport-security: max-age=63072000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":45,"size_decoded":0,"mime_type":"application/javascript; charset=utf8","magic":"ASCII text, with no line terminators","md5":"a169079707125912e1f8971675acd7e4","sha1":"96d30df5addd7bf9cb06c5456c4f8efb812eba02","sha256":"0c353d5a4a17e9d55fc681b75f0024771cf5273d916a6920cb50faf756c84376","sha512":"7d765992cee26ed4807bedb8208ca55b8b8ac609f22ab27b40b812bd9c38bac26ef77e5e5ff10f468d363e207149f76579d0b7410bff3ac67692a3680063750b","ssdeep":"","tlshash":"7e9004457f11d3311c5df315450145d05d1d473c551c7c570c5d730747355500115417","first_seen":"2025-10-19T08:10:15.456166Z","last_seen":"2025-10-19T08:10:15.456166Z","times_seen":1,"resource_available":true,"data":null}},"time_used":1642,"timings":{"blocked":705,"dns":1,"connect":229,"send":0,"wait":231,"receive":0,"ssl":473},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"web.i4zhusao.icu/","fqdn":"web.i4zhusao.icu","domain":"i4zhusao.icu","tld":"icu"},"ip":{"addr":"172.245.67.31","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-10-19T08:09:48.924Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"web.i4zhusao.icu","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Fri, 28 Feb 2025 11:36:59 GMT","end":"Thu, 29 May 2025 11:36:58 GMT"},"fingerprint":{"sha1":"93:00:0F:29:69:B3:A1:59:B7:D8:1E:48:41:8F:DC:E2:B0:20:8D:FC","sha256":"D5:80:22:AC:F5:27:96:9F:9B:F0:12:CC:0E:90:97:84:3B:4F:CF:5E:2E:E5:AC:CB:83:EA:A2:AD:CB:76:3C:32"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: web.i4zhusao.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 19 Oct 2025 08:09:49 GMT\r\ncontent-type: text/html\r\nlast-modified: Thu, 08 May 2025 14:54:53 GMT\r\nvary: Accept-Encoding\r\netag: W/\"681cc5bd-21b3\"\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":8627,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text","md5":"2b7182209d43c9b48ee9546ef0f847ee","sha1":"886585ab55773c3dcfc22e2c95e7f31e8098c30c","sha256":"171d0470b61fc5df42792ead28d9af393e15a3eb654c289399a91cf9624c5dcf","sha512":"941493eab4fb9b1dd163557ba43f424e9f521d69a45e5c9f7518200ef580051cfc123fd749bc1bde2dad389a430216825fd8ebfff78dce9902353df190f4743b","ssdeep":"192:2D/Iea9kAh7nDvV0mcbHwRo71RyawB2O6traUtkMr:2D/Zo5VlcbHwRo7PIJ6traUb","tlshash":"250246152ce1d123808321e0b6ba7a09bae0d10be6138d44b5fc8bed6f95f95cd53d4d","first_seen":"2025-10-19T08:02:22.470758Z","last_seen":"2025-10-22T21:32:48.949304Z","times_seen":4,"resource_available":false,"data":null}},"time_used":858,"timings":{"blocked":344,"dns":1,"connect":166,"send":0,"wait":170,"receive":0,"ssl":174},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"web.i4zhusao.icu/kugoucss/js/cmhead.min.js","fqdn":"web.i4zhusao.icu","domain":"i4zhusao.icu","tld":"icu"},"ip":{"addr":"172.245.67.31","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://web.i4zhusao.icu/","date":"2025-10-19T08:09:49.684Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"web.i4zhusao.icu","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Fri, 28 Feb 2025 11:36:59 GMT","end":"Thu, 29 May 2025 11:36:58 GMT"},"fingerprint":{"sha1":"93:00:0F:29:69:B3:A1:59:B7:D8:1E:48:41:8F:DC:E2:B0:20:8D:FC","sha256":"D5:80:22:AC:F5:27:96:9F:9B:F0:12:CC:0E:90:97:84:3B:4F:CF:5E:2E:E5:AC:CB:83:EA:A2:AD:CB:76:3C:32"}}},"request":{"raw":"GET /kugoucss/js/cmhead.min.js HTTP/1.1\r\nHost: web.i4zhusao.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://web.i4zhusao.icu/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\nserver: nginx\r\ndate: Sun, 19 Oct 2025 08:09:49 GMT\r\ncontent-type: text/html\r\ncontent-length: 146\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":146,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"8eec510e57f5f732fd2cce73df7b73ef","sha1":"3c0af39ecb3753c5fee3b53d063c7286019eac3b","sha256":"55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0","sha512":"73bbf698482132b5fd60a0b58926fddec9055f8095a53bc52714e211e9340c3419736ceafd6b279667810114d306bfccdcfcddf51c0b67fe9e3c73c54583e574","ssdeep":"","tlshash":"b7c02b2d35133c4cc563313423c37140c0d6833b687a41110400c00371cf2998ec3397","first_seen":"2023-03-07T12:05:15Z","last_seen":"2026-08-16T19:31:16.256395Z","times_seen":551395,"resource_available":true,"data":null}},"time_used":707,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":661,"receive":46,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"web.i4zhusao.icu/kugoucss/js/collect.js","fqdn":"web.i4zhusao.icu","domain":"i4zhusao.icu","tld":"icu"},"ip":{"addr":"172.245.67.31","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://web.i4zhusao.icu/","date":"2025-10-19T08:09:49.701Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"web.i4zhusao.icu","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Fri, 28 Feb 2025 11:36:59 GMT","end":"Thu, 29 May 2025 11:36:58 GMT"},"fingerprint":{"sha1":"93:00:0F:29:69:B3:A1:59:B7:D8:1E:48:41:8F:DC:E2:B0:20:8D:FC","sha256":"D5:80:22:AC:F5:27:96:9F:9B:F0:12:CC:0E:90:97:84:3B:4F:CF:5E:2E:E5:AC:CB:83:EA:A2:AD:CB:76:3C:32"}}},"request":{"raw":"GET /kugoucss/js/collect.js HTTP/1.1\r\nHost: web.i4zhusao.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://web.i4zhusao.icu/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 19 Oct 2025 08:09:49 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 27 Mar 2025 13:58:54 GMT\r\nvary: Accept-Encoding\r\netag: W/\"67e5599e-319b\"\r\nexpires: Sun, 19 Oct 2025 20:09:49 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":12699,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (12695)","md5":"1c6c09608abf5b84226892cadafa0dd1","sha1":"12691cc19d64efc1b65550927f35954903dfd89d","sha256":"f5c1d1e205801318da652bf3450fc8185dd387d1774634e5e3562e1fd01afc6f","sha512":"e0183625e9f144d6194f8a9c5cfe4714c127f92164e71a211b62fcf8354168e2e69a3c206efa8d413de28d56420836a0591b8c958a74109c851f8268f5622377","ssdeep":"192:nUHtOjV2mDgC9Y820en1UD3ypt95dySKt6LUxeTAQADVXySp3o99C7:nUoJJe1UDCpt95sSW6AxBDVXySp3om7","tlshash":"4a42cb437963d47085fa103498aad55ddaf3f63c247c98643d5382d29668ea0323bb7e","first_seen":"2025-10-19T08:02:22.543661Z","last_seen":"2025-10-24T03:43:26.528397Z","times_seen":5,"resource_available":true,"data":null}},"time_used":654,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":654,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"web.i4zhusao.icu/kugoucss/images/section1_bg.jpg","fqdn":"web.i4zhusao.icu","domain":"i4zhusao.icu","tld":"icu"},"ip":{"addr":"172.245.67.31","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://web.i4zhusao.icu/","date":"2025-10-19T08:09:52.429Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"web.i4zhusao.icu","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Fri, 28 Feb 2025 11:36:59 GMT","end":"Thu, 29 May 2025 11:36:58 GMT"},"fingerprint":{"sha1":"93:00:0F:29:69:B3:A1:59:B7:D8:1E:48:41:8F:DC:E2:B0:20:8D:FC","sha256":"D5:80:22:AC:F5:27:96:9F:9B:F0:12:CC:0E:90:97:84:3B:4F:CF:5E:2E:E5:AC:CB:83:EA:A2:AD:CB:76:3C:32"}}},"request":{"raw":"GET /kugoucss/images/section1_bg.jpg HTTP/1.1\r\nHost: web.i4zhusao.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://web.i4zhusao.icu/kugoucss/css/pcdownloadpage201211.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 19 Oct 2025 08:09:52 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Thu, 27 Mar 2025 13:58:45 GMT\r\nvary: Accept-Encoding\r\netag: W/\"67e55995-15efb\"\r\nexpires: Tue, 18 Nov 2025 08:09:52 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":89851,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1920x833, components 3","md5":"516baab90bbb430eb7b3578614fcc484","sha1":"9eab3fa63ae5af848f47d1a797e9dd0325df59f4","sha256":"19ee0cfbd4fa0515c3b647f21cfb0d1f84d51678a2d273de43bd3962fb98c1d3","sha512":"6f0f778a155c109766c8d7e767c7337f44919741e66baf3ed203d15e8838e7b55bb39128202b033e132dbb1713c85b2691bbcb2c9207e80ed11ce1d607ad2732","ssdeep":"1536:BhYoK0wPCDetcZfjEDiF2sTtzqoOQED7lVWxow6qHY4a7nUTpuFi3RHst:O05WVDiF2sUpRD76xLiUTpVat","tlshash":"06930293d32b40fac44c43fa6a0787369b2187b531aed763fa7d4469fe982486d063c5","first_seen":"2025-10-19T08:02:22.558883Z","last_seen":"2026-03-19T18:02:31.48687Z","times_seen":5,"resource_available":false,"data":null}},"time_used":170,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":170,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"web.i4zhusao.icu/kugoucss/picture/kugou_white.png","fqdn":"web.i4zhusao.icu","domain":"i4zhusao.icu","tld":"icu"},"ip":{"addr":"172.245.67.31","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://web.i4zhusao.icu/","date":"2025-10-19T08:09:49.672Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"web.i4zhusao.icu","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Fri, 28 Feb 2025 11:36:59 GMT","end":"Thu, 29 May 2025 11:36:58 GMT"},"fingerprint":{"sha1":"93:00:0F:29:69:B3:A1:59:B7:D8:1E:48:41:8F:DC:E2:B0:20:8D:FC","sha256":"D5:80:22:AC:F5:27:96:9F:9B:F0:12:CC:0E:90:97:84:3B:4F:CF:5E:2E:E5:AC:CB:83:EA:A2:AD:CB:76:3C:32"}}},"request":{"raw":"GET /kugoucss/picture/kugou_white.png HTTP/1.1\r\nHost: web.i4zhusao.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://web.i4zhusao.icu/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 19 Oct 2025 08:09:49 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 27 Mar 2025 13:58:59 GMT\r\nvary: Accept-Encoding\r\netag: W/\"67e559a3-1415\"\r\nexpires: Tue, 18 Nov 2025 08:09:49 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5141,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 292 x 76, 8-bit colormap, non-interlaced","md5":"b4e63188b3d3750f8469859c8fad60c7","sha1":"2cad65d8d8544566307b1fc06f2c15d71e438d82","sha256":"021b6ce0ca94ddd9285fb5457d7aef68ee023dc491689e921fbb7c4ef7569fbd","sha512":"878ca6116b9e16edfe6806f78c4999596c431fb4a36e08381056ad351b1f922964c2e0d6852192a1492225d7a86e733b298e29c18eb3c7158ef82fde2409cd81","ssdeep":"96:nBBf33Pf3I33of3D9aaRCG9HYGNt2c8SuqjAaf5xbcwiafD2XEiOqGO9A:BBntkOyYozSY6xbcFafDz4K","tlshash":"bcb18f9fe26b14189e14f4d0f08501eebc695c35340d08881751b4a4e7b827cdc0d77a","first_seen":"2024-08-19T14:10:51.946133Z","last_seen":"2025-10-22T21:32:48.91993Z","times_seen":6,"resource_available":false,"data":null}},"time_used":510,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":510,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"web.i4zhusao.icu/kugoucss/picture/section1_pic1.png","fqdn":"web.i4zhusao.icu","domain":"i4zhusao.icu","tld":"icu"},"ip":{"addr":"172.245.67.31","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://web.i4zhusao.icu/","date":"2025-10-19T08:09:49.687Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"web.i4zhusao.icu","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Fri, 28 Feb 2025 11:36:59 GMT","end":"Thu, 29 May 2025 11:36:58 GMT"},"fingerprint":{"sha1":"93:00:0F:29:69:B3:A1:59:B7:D8:1E:48:41:8F:DC:E2:B0:20:8D:FC","sha256":"D5:80:22:AC:F5:27:96:9F:9B:F0:12:CC:0E:90:97:84:3B:4F:CF:5E:2E:E5:AC:CB:83:EA:A2:AD:CB:76:3C:32"}}},"request":{"raw":"GET /kugoucss/picture/section1_pic1.png HTTP/1.1\r\nHost: web.i4zhusao.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://web.i4zhusao.icu/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 19 Oct 2025 08:09:49 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 27 Mar 2025 13:59:00 GMT\r\nvary: Accept-Encoding\r\netag: W/\"67e559a4-3e41e\"\r\nexpires: Tue, 18 Nov 2025 08:09:49 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":255006,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 580 x 389, 8-bit/color RGBA, non-interlaced","md5":"d9d5564a0e3a44886ec2aa1cda852c90","sha1":"bb1159dfd274d56073cb8dbbddd878face003ed1","sha256":"ea4124aa7762643330159cc3209b871ea5c1b23813fdb2f057f5a9028a2e4b9c","sha512":"1443d33d94bd188503e5cd930874fec7b97c36829ac43584aa8eaa93a60d2a7a91cb59c2da8ce9e0668b10d1be64ebfbe21072c02fb6a9cb115f1504b0853940","ssdeep":"6144:RypxcVgDfjcfIpZJsQBOdWqNcSc/nTiIsre0+rsmQ:RypxccfjcApjsW2fSPnTU+rI","tlshash":"9c442228faed9db5019d43733ff2d5a86656ace40181413b9fced297cc6212982f7632","first_seen":"2025-10-19T08:02:22.432062Z","last_seen":"2025-10-22T21:32:48.957204Z","times_seen":4,"resource_available":false,"data":null}},"time_used":660,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":660,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"web.i4zhusao.icu/kugoucss/picture/section2_title.png","fqdn":"web.i4zhusao.icu","domain":"i4zhusao.icu","tld":"icu"},"ip":{"addr":"172.245.67.31","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://web.i4zhusao.icu/","date":"2025-10-19T08:09:49.692Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"web.i4zhusao.icu","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Fri, 28 Feb 2025 11:36:59 GMT","end":"Thu, 29 May 2025 11:36:58 GMT"},"fingerprint":{"sha1":"93:00:0F:29:69:B3:A1:59:B7:D8:1E:48:41:8F:DC:E2:B0:20:8D:FC","sha256":"D5:80:22:AC:F5:27:96:9F:9B:F0:12:CC:0E:90:97:84:3B:4F:CF:5E:2E:E5:AC:CB:83:EA:A2:AD:CB:76:3C:32"}}},"request":{"raw":"GET /kugoucss/picture/section2_title.png HTTP/1.1\r\nHost: web.i4zhusao.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://web.i4zhusao.icu/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 19 Oct 2025 08:09:49 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 27 Mar 2025 13:59:02 GMT\r\nvary: Accept-Encoding\r\netag: W/\"67e559a6-457f\"\r\nexpires: Tue, 18 Nov 2025 08:09:49 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":17791,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 449 x 209, 8-bit colormap, non-interlaced","md5":"cf3b74f2f3e4129143be20d3b1aeb807","sha1":"ba19befe09726f196e0c5c22cc89bba41744ffd9","sha256":"444d2a629044c9fbfdac775f8eb24e1faaf2fe4e9f184e48d301c35a29d1273d","sha512":"e55ee30d32c6d7253bf0abe93a42fd31082759ca8a1dbb652f82973ccf890b25f8b7a39790346f3dce7532838d52cf60e495722d4c76daaa926efeafb5cc9391","ssdeep":"384:UrCbjRkH7Unw+TzioMqtaEt8hGMqSgwL24J214I23Znk7N:UrCbjqYwazRfPt8ho0r73Zn2N","tlshash":"e882c0115d2f682ac5b2df3c5419e9426c4e501461d2aa9a3f0becf611d1b979cc30cf","first_seen":"2025-10-19T08:02:22.510213Z","last_seen":"2025-10-22T21:32:48.908306Z","times_seen":4,"resource_available":false,"data":null}},"time_used":654,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":654,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}