{"report_id":"a6216487-7d72-4489-9098-60f2d2a605e6","version":6,"status":"done","tags":[],"date":"2025-10-31T04:45:57Z","url":{"schema":"http","addr":"rb88t.com","fqdn":"rb88t.com","domain":"rb88t.com","tld":"com"},"ip":{"addr":"34.96.219.82","port":0,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"Hong Kong","country_code":"HK"},"final":{"url":{"schema":"https","addr":"rb88t.com:8989/","fqdn":"rb88t.com","domain":"rb88t.com","tld":"com"},"title":"bet365","dom":{"size":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":""}},"submit":{"url":{"schema":"http","addr":"rb88t.com","fqdn":"rb88t.com","domain":"rb88t.com","tld":"com"},"ip":{"addr":"34.96.219.82","port":0,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"Hong Kong","country_code":"HK"},"tags":null,"meta":null,"user":{"user_id":"akbkyowd9geqr98","country_code":"zz"}},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-12-05T04:45:57Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-31","alert":"Sinkholed","trigger":"rb88t.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-31","alert":"Sinkholed","trigger":"rb88t.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null},"summary":[{"fqdn":"8vpfnx.bqkmk.cn","ip":{"addr":"103.198.200.7","port":443,"asn":138915,"as":"Kaopu Cloud HK Limited","country":"Hong Kong","country_code":"HK"},"domain_registered":"2024-11-11","domain_rank":0,"first_seen":"2025-10-21T13:32:57.352416Z","last_seen":"2025-10-28T15:03:45.320695Z","alert_count":0,"request_count":74,"received_data":3116421,"sent_data":35361,"comment":"","tags":null,"fingerprints":null},{"fqdn":"rb88t.com","ip":{"addr":"34.96.219.82","port":8989,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"Hong Kong","country_code":"HK"},"domain_registered":"2024-02-16","domain_rank":0,"first_seen":"2025-10-31T02:50:16.87423Z","last_seen":"2025-10-31T02:50:16.87423Z","alert_count":36,"request_count":18,"received_data":1099196,"sent_data":9471,"comment":"","tags":null,"fingerprints":[{"name":"jQuery:1.11.3","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Swiper","description":"Swiper is a JavaScript library that creates modern touch sliders with hardware-accelerated transitions.","website":"https://swiperjs.com","common_platform_enumeration":"","icon":"Swiper.svg","categories":["JavaScript libraries"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"Moment.js","description":"Moment.js is a free and open-source JavaScript library that removes the need to use the native JavaScript Date object directly.","website":"https://momentjs.com","common_platform_enumeration":"cpe:2.3:a:momentjs:moment:*:*:*:*:*:*:*:*","icon":"Moment.js.svg","categories":["JavaScript libraries"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":null}],"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"rb88t.com:8989/","fqdn":"rb88t.com","domain":"rb88t.com","tld":"com"},"ip":{"addr":"34.96.219.82","port":8989,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":true,"md5":"9846b4b0c961f85e4c150bd29f4b86e1","sha1":"adf30369fc215e80b26536f1e24a1824ad3b81d5","sha256":"163a003d567f6d41f861d978c558eced69ed2b25c863055ed8171eefa350784b","sha512":"cf37c88b0608cef82c3627c952577e291343b8f63323da2dd77b34ab0500d5494bf377f85e968cb058124ff32345f184aeea9447eda67d9e887d688e2e5c81de","ssdeep":"","tlshash":"1c80000a8c0088cfac038e00803c00a23acc202a0022c2202a00a803aa00032023a0f2","size":29,"data":"","first_seen":"2023-03-07T01:14:38Z","last_seen":"2026-06-07T07:30:11.574937Z","times_seen":9745,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rb88t.com:8989/","fqdn":"rb88t.com","domain":"rb88t.com","tld":"com"},"ip":{"addr":"34.96.219.82","port":8989,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":true,"md5":"37f0336a6fe3f56c661b149ecf659efe","sha1":"9aff4163d5da3b8d760f0593c583dd8d1f6dfc14","sha256":"f33f7afadc5c318efdd57d35da2dc2aebe39fd166a61905ce37b9f7363f51c2f","sha512":"d24a42f5f1834957e5616b5f61d52db98c3351e5ab3346f1fee8e7ca6ba62dc7c51f4ae645a8dd403194e2df3f8d2ea2c3b34d371a67dde201979552033cbace","ssdeep":"","tlshash":"279004510f71113ddc305157055c13747050c13ddc1ffcd43413d57c04741300011401","size":48,"data":"","first_seen":"2023-03-07T01:14:38Z","last_seen":"2026-06-07T07:30:11.575592Z","times_seen":16886,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"8vpfnx.bqkmk.cn/ftl/commonPage/js/jquery/jquery-1.11.3.min.js","fqdn":"8vpfnx.bqkmk.cn","domain":"bqkmk.cn","tld":"cn"},"ip":{"addr":"103.198.200.7","port":443,"asn":138915,"as":"Kaopu Cloud HK Limited","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"b091a47f6b91e26c93a848092c6f3788","sha1":"52918af2d431e73464060b35d364640c8db75606","sha256":"329ab92b9276ef4e3148f69be6b208969bebdf2db3121a589caa172453fd9f10","sha512":"ab444102be476f0104eeff79c9b596174852b4fe8cbd0b5a0279d56f106a166ec39304636e09326213de000b102ce8f517bb268a9abb2955c56ee4f18b464ea8","ssdeep":"1536:OP10iSi65U/dXXeyhzeBuG+HYE0WEeLDFoNqLTW8+S5VRZIVI6xSb8xh2ZbQnRmS:R+41ZqLTW8xRrqSb8qGH77da98Hr3","tlshash":"6893d8d9b7d67162977730b850bf510bb13a98eab80c4ca0f0a4d8e47d74a89507bf2d","size":95956,"data":"","first_seen":"2023-03-07T01:10:10Z","last_seen":"2026-07-26T10:06:40.467894Z","times_seen":18406,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rb88t.com:8989/","fqdn":"rb88t.com","domain":"rb88t.com","tld":"com"},"ip":{"addr":"34.96.219.82","port":8989,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":true,"md5":"5755bd33351d998f9a8835d8b6b5fc26","sha1":"c8a3bca55ef8cc490ed41cdd158f1ba7bf6fad4b","sha256":"19c658841673f15b9a19062b15d628002637a68d4e9d5cb005e4ad86bdb46862","sha512":"cabc809e1b159603c89a58fb975984cbac35090ea9afdb414eb9cda84a428ed508a1d63e30d904f76afdcc2105d9725906da98c38d6385fa0cd2826813ff3ced","ssdeep":"","tlshash":"21e0c254a4eaf0530382400600fb7c105e9b2f035f58c891327f2048aff9a8c08d3e6c","size":318,"data":"","first_seen":"2024-09-24T19:10:11Z","last_seen":"2026-06-07T07:30:11.57646Z","times_seen":10332,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rb88t.com:8989/","fqdn":"rb88t.com","domain":"rb88t.com","tld":"com"},"ip":{"addr":"34.96.219.82","port":8989,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":true,"md5":"c88c91034e9f42727d170a5cfca4b1e5","sha1":"6942164e782f48e3d9e7a1b6646250178a8e492a","sha256":"91c1ba3d2c81289972f211626e1df827e753f98e8843fd441b69cdfba7264f88","sha512":"06e055dc340536058577192d45b26e69ff374562a84b33879d724d993b7e873d9c4bca82b1093041247f16f734565391c177f4435f964d842d9039baaa30adb6","ssdeep":"","tlshash":"3ce01264f4dbb0a20241801455bb3a000d6b2f529a2894d5b6bf5188aff4a8d0973f5d","size":304,"data":"","first_seen":"2024-09-24T19:10:11Z","last_seen":"2026-06-06T23:54:10.548373Z","times_seen":4316,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rb88t.com:8989/","fqdn":"rb88t.com","domain":"rb88t.com","tld":"com"},"ip":{"addr":"34.96.219.82","port":8989,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":true,"md5":"c88c91034e9f42727d170a5cfca4b1e5","sha1":"6942164e782f48e3d9e7a1b6646250178a8e492a","sha256":"91c1ba3d2c81289972f211626e1df827e753f98e8843fd441b69cdfba7264f88","sha512":"06e055dc340536058577192d45b26e69ff374562a84b33879d724d993b7e873d9c4bca82b1093041247f16f734565391c177f4435f964d842d9039baaa30adb6","ssdeep":"","tlshash":"3ce01264f4dbb0a20241801455bb3a000d6b2f529a2894d5b6bf5188aff4a8d0973f5d","size":304,"data":"","first_seen":"2024-09-24T19:10:11Z","last_seen":"2026-06-06T23:54:10.548373Z","times_seen":4316,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rb88t.com:8989/commonPage/lan/i18n.js?t=1761885935.87","fqdn":"rb88t.com","domain":"rb88t.com","tld":"com"},"ip":{"addr":"34.96.219.82","port":8989,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"82d931e4a388fdea770a839c05b34308","sha1":"3ef89f5840e894c2da824583a47be1890de58936","sha256":"8c0bc69637b40cc07e216be3b482438c4dac007501c3c772d19beed079b84e15","sha512":"59b6af7623b4e2bb3905415da65f68ab2c1ac08ef73519b5aa81a7d9d3dc5b7e695f698baa539f439c543397d5e701d7c9b60be067b4a124542b76903b2b8b18","ssdeep":"","tlshash":"f521af68f7e051d32d5e8aa3ed653e6f11b5497d04a73507837835ce01b9ba79c6c408","size":1310,"data":"","first_seen":"2025-10-31T04:46:03.88192Z","last_seen":"2025-10-31T04:46:03.88192Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rb88t.com:8989/","fqdn":"rb88t.com","domain":"rb88t.com","tld":"com"},"ip":{"addr":"34.96.219.82","port":8989,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"Hong Kong","country_code":"HK"},"introduction_type":"Function","is_inline":false,"md5":"cf0aad09d2e7287c48d72501c4ed8cbd","sha1":"7950b8c00d5a278b662dbccd11af31398a408e51","sha256":"72512199b29d971b5fe854b1f610604dcbdec2c38666c106f1d15863e0df32db","sha512":"2c1680bded9b22be2e6c38d76e46ef67bd438c6c9d99c804f9dcb77ca30bd5aa6f090c89a51205cc7efb466040a171eaa318ffe6fdf046c924394ce7867218f7","ssdeep":"","tlshash":"75d02b4472e3280c08f22b214cde250508a271b610484d08b10ce9d64bb5522b97773c","size":278,"data":"","first_seen":"2023-04-14T20:29:13Z","last_seen":"2026-06-20T23:33:35.358813Z","times_seen":13045,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"8vpfnx.bqkmk.cn/ftl/commonPage/js/jquery/jquery.super-marquee.js","fqdn":"8vpfnx.bqkmk.cn","domain":"bqkmk.cn","tld":"cn"},"ip":{"addr":"103.198.200.7","port":443,"asn":138915,"as":"Kaopu Cloud HK Limited","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"f77d83590bc0a69298f2fbcc5d9911cd","sha1":"1d6aa25d7052f53ad0181385e5efe72f224bbdb9","sha256":"1d042b9441e860ddcc01b9e9e5e8d354121ee0e31b47f6e18a321e2e633d22e7","sha512":"a39dc6c01df32c8f72842af346f4d67e1278d37a74a0541537b8274b421bcfbc547a2f4844f3c4b6c5cdda4c78f0a8f41171c87ffd149ab52526a95bc6c5bf61","ssdeep":"96:nwzrUsI9/8w/ISEgOGXFRNcrc8PQjc3Pb:+rUsk88OnJQA3D","tlshash":"2991252d7290f5d559cf3c3be02b0b050c785123a54e00927a65def279ba379a607e1f","size":4433,"data":"","first_seen":"2023-03-07T01:14:38Z","last_seen":"2026-07-26T05:01:44.841706Z","times_seen":17885,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"8vpfnx.bqkmk.cn/ftl/commonPage/js/idangerous.swiper.min.js","fqdn":"8vpfnx.bqkmk.cn","domain":"bqkmk.cn","tld":"cn"},"ip":{"addr":"103.198.200.7","port":443,"asn":138915,"as":"Kaopu Cloud HK Limited","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"f15409fb02c527ce1f66a2fd3c4aa0e9","sha1":"1e1e1bcc0f49e99e14ba34991cffe0745178d302","sha256":"1a1b5d3d6fbfc28abe37a668abd59494208c63c5f0b5d040cf4bbbd137f87c27","sha512":"66a384d6ad5fba862e778e24c43326a718328b6f860469fb5eb69c2687b0bbdc3c2dfa9049b0e3d5509214db1dbec4477f5c3654dc04446a505379a4300d4908","ssdeep":"768:oTFZ8CkWyYzh9MTvl7prcAgQW5ppZ+rPPWRqKDyBuq0t:cZiY9uTJuAgQW5LZ+rPPWRLt","tlshash":"5613f8c1b32031a741f3626e91fecb4271f54966aa05d4dcb5ed84c41ab489a03beff9","size":45187,"data":"","first_seen":"2023-08-15T12:01:05Z","last_seen":"2026-07-26T05:01:44.850908Z","times_seen":17499,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rb88t.com:8989/","fqdn":"rb88t.com","domain":"rb88t.com","tld":"com"},"ip":{"addr":"34.96.219.82","port":8989,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":true,"md5":"c88c91034e9f42727d170a5cfca4b1e5","sha1":"6942164e782f48e3d9e7a1b6646250178a8e492a","sha256":"91c1ba3d2c81289972f211626e1df827e753f98e8843fd441b69cdfba7264f88","sha512":"06e055dc340536058577192d45b26e69ff374562a84b33879d724d993b7e873d9c4bca82b1093041247f16f734565391c177f4435f964d842d9039baaa30adb6","ssdeep":"","tlshash":"3ce01264f4dbb0a20241801455bb3a000d6b2f529a2894d5b6bf5188aff4a8d0973f5d","size":304,"data":"","first_seen":"2024-09-24T19:10:11Z","last_seen":"2026-06-06T23:54:10.548373Z","times_seen":4316,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rb88t.com:8989/","fqdn":"rb88t.com","domain":"rb88t.com","tld":"com"},"ip":{"addr":"34.96.219.82","port":8989,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":true,"md5":"c88c91034e9f42727d170a5cfca4b1e5","sha1":"6942164e782f48e3d9e7a1b6646250178a8e492a","sha256":"91c1ba3d2c81289972f211626e1df827e753f98e8843fd441b69cdfba7264f88","sha512":"06e055dc340536058577192d45b26e69ff374562a84b33879d724d993b7e873d9c4bca82b1093041247f16f734565391c177f4435f964d842d9039baaa30adb6","ssdeep":"","tlshash":"3ce01264f4dbb0a20241801455bb3a000d6b2f529a2894d5b6bf5188aff4a8d0973f5d","size":304,"data":"","first_seen":"2024-09-24T19:10:11Z","last_seen":"2026-06-06T23:54:10.548373Z","times_seen":4316,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rb88t.com:8989/","fqdn":"rb88t.com","domain":"rb88t.com","tld":"com"},"ip":{"addr":"34.96.219.82","port":8989,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":true,"md5":"c88c91034e9f42727d170a5cfca4b1e5","sha1":"6942164e782f48e3d9e7a1b6646250178a8e492a","sha256":"91c1ba3d2c81289972f211626e1df827e753f98e8843fd441b69cdfba7264f88","sha512":"06e055dc340536058577192d45b26e69ff374562a84b33879d724d993b7e873d9c4bca82b1093041247f16f734565391c177f4435f964d842d9039baaa30adb6","ssdeep":"","tlshash":"3ce01264f4dbb0a20241801455bb3a000d6b2f529a2894d5b6bf5188aff4a8d0973f5d","size":304,"data":"","first_seen":"2024-09-24T19:10:11Z","last_seen":"2026-06-06T23:54:10.548373Z","times_seen":4316,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rb88t.com:8989/","fqdn":"rb88t.com","domain":"rb88t.com","tld":"com"},"ip":{"addr":"34.96.219.82","port":8989,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":true,"md5":"c88c91034e9f42727d170a5cfca4b1e5","sha1":"6942164e782f48e3d9e7a1b6646250178a8e492a","sha256":"91c1ba3d2c81289972f211626e1df827e753f98e8843fd441b69cdfba7264f88","sha512":"06e055dc340536058577192d45b26e69ff374562a84b33879d724d993b7e873d9c4bca82b1093041247f16f734565391c177f4435f964d842d9039baaa30adb6","ssdeep":"","tlshash":"3ce01264f4dbb0a20241801455bb3a000d6b2f529a2894d5b6bf5188aff4a8d0973f5d","size":304,"data":"","first_seen":"2024-09-24T19:10:11Z","last_seen":"2026-06-06T23:54:10.548373Z","times_seen":4316,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"8vpfnx.bqkmk.cn/ftl/commonPage/js/websocket/PopUp.js","fqdn":"8vpfnx.bqkmk.cn","domain":"bqkmk.cn","tld":"cn"},"ip":{"addr":"103.198.200.7","port":443,"asn":138915,"as":"Kaopu Cloud HK Limited","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"07864ad2e2759d53f8f2f14dd4295bd9","sha1":"95144219e2eb702c4c4a707c3622b086876cf41c","sha256":"871bf30791bb89605b61cea815c3786246274b65ede3b8a8b8c2dd9244cfa89d","sha512":"f469d0f23c75e918d55e076d72481fca7043ac5eff9025aaac1f26860d080e4fc3c5d28f8f9ee1dae80719aca2b83f39ea82a129c221980bd7d63c212bacc119","ssdeep":"","tlshash":"9041ae54baf359a12c9b71f3aaaf30413160f2479505ed017d0cb9945f1d228b2cf7e9","size":2088,"data":"","first_seen":"2023-03-07T01:14:38Z","last_seen":"2026-07-26T05:01:44.844789Z","times_seen":17796,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"8vpfnx.bqkmk.cn/ftl/commonPage/js/websocket/Comet.js","fqdn":"8vpfnx.bqkmk.cn","domain":"bqkmk.cn","tld":"cn"},"ip":{"addr":"103.198.200.7","port":443,"asn":138915,"as":"Kaopu Cloud HK Limited","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"1008fe6a5e1a182d7775963b85405bb2","sha1":"e174a7b08cc3cb5545af1cd33d2814e604119392","sha256":"7479f6f22194ac37dd6d3f5a579b4682ac8dcb6389fb961cf4140f3fcc707a20","sha512":"26e07821ee1e8e94c4bada028e049df7572cac06f2e8dae958baa7a011eb201a6a1d4ed0cfa15017a3f52a0cb949343de0b33ca6da7c245f763c86d5adfb0223","ssdeep":"192:4Pf+aTbLSru4NyRs8VDv1KygOdWuTyVC3d7QPXLHOm8cSCl1Ej7bY8l7YJIJvO5N:4Pf+aTbe4M2cXzsjDUfj","tlshash":"ab721e4a2cf76086552732b90f5f64543235a8172605e91c7dcca6e08f98b7c1babff8","size":17162,"data":"","first_seen":"2023-04-05T18:30:47Z","last_seen":"2026-07-26T05:01:44.842903Z","times_seen":17646,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"8vpfnx.bqkmk.cn/ftl/commonPage/js/jquery/jquery.nicescroll.min.js","fqdn":"8vpfnx.bqkmk.cn","domain":"bqkmk.cn","tld":"cn"},"ip":{"addr":"103.198.200.7","port":443,"asn":138915,"as":"Kaopu Cloud HK Limited","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"b5bc8cd626b389bde727a91e6ce79436","sha1":"3df6c39300ac286cf596b3bda273cb39ff825429","sha256":"a1eb48eeb3b3f2ba41940d3041464f0b386b7a7c4a8acb42f3017e691f4b116e","sha512":"2c1dde58ce83d9b716919dfc42602aef3022be012b3f92e61b17b674303ecbf0b9d308064b6d6c2443cf3e3dfd36bfb332eab62e64b56bef0be801e6f4610f12","ssdeep":"768:CwJl9VwAdGuMbJVAOi9ee9RjOEe1sdMv5rjITry:Cxb7AdRjOEKhHay","tlshash":"9553a7cd7522346b05de5235d18b4b4a623a9857730b90e4762c8cf46d29bbaf223f7c","size":64651,"data":"","first_seen":"2023-03-07T01:14:38Z","last_seen":"2026-07-26T05:01:44.848713Z","times_seen":18016,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"8vpfnx.bqkmk.cn/ftl/commonPage/js/lazyload.js","fqdn":"8vpfnx.bqkmk.cn","domain":"bqkmk.cn","tld":"cn"},"ip":{"addr":"103.198.200.7","port":443,"asn":138915,"as":"Kaopu Cloud HK Limited","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"d87854586672bff7f886a47da85da5ed","sha1":"8d0537030dc7a81ade87a41a75fd5a75e4e33da1","sha256":"17859187f895c27de8869fb6bfec579fd68c4588d0af71d08d334be92d144ada","sha512":"d8c3e724f00bcf1ebfe1f8e96dda01243cf22aef18a0fc5a25a42d84458ff58a22a316dabf1d80d1b4f4c28db79edbdf9ba19df755d72f2b0b9f64497137672f","ssdeep":"192:Cdr+EgBD7NiM7B1wV20jSCQrF/bcbe7/bgdCx4RTsmS3KDsS3CggvBSChKRJ0Suk:Cdr+JBDYpV20Ez+obgdsm3ROCJIqSJvG","tlshash":"304200483deb51aba1d3b0f89a5f11447235810b160eee253d6c9395af6093932f2ff9","size":12053,"data":"","first_seen":"2023-08-15T12:01:05Z","last_seen":"2026-07-26T05:01:44.841171Z","times_seen":17621,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"8vpfnx.bqkmk.cn/061410/rcenter/common/js/gamebox/common/jquery.validate.extend.msites.js","fqdn":"8vpfnx.bqkmk.cn","domain":"bqkmk.cn","tld":"cn"},"ip":{"addr":"103.198.200.7","port":443,"asn":138915,"as":"Kaopu Cloud HK Limited","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"4fe7dadf050dad2dcfd386d21b880281","sha1":"07e7feb8dc9309fe66d86d7a9e27f8efd32ab0bd","sha256":"aa891aafe8e98e1e15d81b2b116e6c3808d0bbbec56cd24818e2e7ac911877c9","sha512":"9da40e5132ece9fe346f27aa467b2496545c84197131c633e5b1ff1f641ece723440ec0289e82d7948b85bcd901b9e3eb6e36f8e0339ae05e4a32621e895accf","ssdeep":"384:yC+tJn9Dbvbf1P3QSBxDrdiewZnnoTW39if+04xSlR4nbiamdrjNfrzInGINYlor:NWJnlN3QSBxDMewZnnoTW39L0MSR4biK","tlshash":"a762954d3a9514bb4adf31b770ab204f767e8800852c91c4bdbca0d166b5ee072e7e6d","size":14857,"data":"","first_seen":"2023-03-07T01:14:38Z","last_seen":"2026-07-26T05:01:44.842324Z","times_seen":17877,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rb88t.com:8989/message_zh_CN.js?v=1761552496493","fqdn":"rb88t.com","domain":"rb88t.com","tld":"com"},"ip":{"addr":"34.96.219.82","port":8989,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"5c463230de3124410e7015a8136d3ae3","sha1":"106c5a33e790fa80f4e5bb291d29cd2b0a266332","sha256":"b1bda3ddce877042bed704c992c1f0878803f40766293108df208911bc443dd2","sha512":"395ed6839be13c87f7e853f474bddc815cc42aeb4565744a5bf3a56ce0d6727c7b99c06f29affd0751c12a63bbbcde1eb2b56a1b54ffa1c3dbde2ce38bc9707b","ssdeep":"384:vTrBmS53qEviCysRI/2aTvfyxtvgfG+S7MjREQP1RODaP5YnRn21IRBGN9Jaqxk7:IIy92nyfB3vODR01IRBG3JpfsIU","tlshash":"54e23ba604bedffb581615d6d44700c921d96b899afc7928bed0ee1e1b863c604f3387","size":32081,"data":"","first_seen":"2025-03-21T12:45:19.902672Z","last_seen":"2026-01-20T00:53:59.396585Z","times_seen":4025,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"8vpfnx.bqkmk.cn/ftl/commonPage/js/jquery/jquery-1.11.3.min.js","fqdn":"8vpfnx.bqkmk.cn","domain":"bqkmk.cn","tld":"cn"},"ip":{"addr":"103.198.200.7","port":443,"asn":138915,"as":"Kaopu Cloud HK Limited","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"b091a47f6b91e26c93a848092c6f3788","sha1":"52918af2d431e73464060b35d364640c8db75606","sha256":"329ab92b9276ef4e3148f69be6b208969bebdf2db3121a589caa172453fd9f10","sha512":"ab444102be476f0104eeff79c9b596174852b4fe8cbd0b5a0279d56f106a166ec39304636e09326213de000b102ce8f517bb268a9abb2955c56ee4f18b464ea8","ssdeep":"1536:OP10iSi65U/dXXeyhzeBuG+HYE0WEeLDFoNqLTW8+S5VRZIVI6xSb8xh2ZbQnRmS:R+41ZqLTW8xRrqSb8qGH77da98Hr3","tlshash":"6893d8d9b7d67162977730b850bf510bb13a98eab80c4ca0f0a4d8e47d74a89507bf2d","size":95956,"data":"","first_seen":"2023-03-07T01:10:10Z","last_seen":"2026-07-26T10:06:40.467894Z","times_seen":18406,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rb88t.com:8989/","fqdn":"rb88t.com","domain":"rb88t.com","tld":"com"},"ip":{"addr":"34.96.219.82","port":8989,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":true,"md5":"c88c91034e9f42727d170a5cfca4b1e5","sha1":"6942164e782f48e3d9e7a1b6646250178a8e492a","sha256":"91c1ba3d2c81289972f211626e1df827e753f98e8843fd441b69cdfba7264f88","sha512":"06e055dc340536058577192d45b26e69ff374562a84b33879d724d993b7e873d9c4bca82b1093041247f16f734565391c177f4435f964d842d9039baaa30adb6","ssdeep":"","tlshash":"3ce01264f4dbb0a20241801455bb3a000d6b2f529a2894d5b6bf5188aff4a8d0973f5d","size":304,"data":"","first_seen":"2024-09-24T19:10:11Z","last_seen":"2026-06-06T23:54:10.548373Z","times_seen":4316,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"8vpfnx.bqkmk.cn/ftl/commonPage/js/float.js","fqdn":"8vpfnx.bqkmk.cn","domain":"bqkmk.cn","tld":"cn"},"ip":{"addr":"103.198.200.7","port":443,"asn":138915,"as":"Kaopu Cloud HK Limited","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"829af863b0cdc4a603919824ae046299","sha1":"1d417b1553e4ecb7125ebf2005b74255291fbf73","sha256":"1dbe4afbc9ed220c08b9e95577b56f83e2e8e0f7620c5dc18266bb325e5bb271","sha512":"e1202fa26fd353dfb2f989d3d45512e0691c062076297399f5fe62f63e7f5b194fec4a3d7fe2f09be1a6a945e197e7d68445d33dcc6f80b23a315112d9ae5b6c","ssdeep":"96:G4SXFXVXDL+R5NxuHie/moRUgIm/Kv3RKXg+Iw3qCNv5IC80b7Yr+HpH:G7xhDL+jNxzeBVLKJ1LeqCwCxb7YspH","tlshash":"04e1506e03b1212195aff1beaf1e424c6631905b2507dd057e0c87c46fa493c4636fee","size":6959,"data":"","first_seen":"2023-03-07T01:14:38Z","last_seen":"2026-07-25T16:42:26.192209Z","times_seen":17548,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"8vpfnx.bqkmk.cn/ftl/commonPage/js/moment.js","fqdn":"8vpfnx.bqkmk.cn","domain":"bqkmk.cn","tld":"cn"},"ip":{"addr":"103.198.200.7","port":443,"asn":138915,"as":"Kaopu Cloud HK Limited","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"36c8f828395a9395549bd6e7307cb7e9","sha1":"f30a4961558e2d3d4405e7d93aa28fdb63245e78","sha256":"5d5e32fa1e06a0bc9396f349d142ad248e82086543e438c890e43f41e692db33","sha512":"40c24a9011e1bbdd98bd95b341c400bdaf48fefd953fcb407368fe3c685ac09196b55e230c03ca9890c35fe9acef2c916bed52423dc1a7b532a1db9817c03a8e","ssdeep":"1536:qOL1yBkBeb9wNoHpH7tjl2Ulwjwaj2BH3fMobEKeYEoZYiMirUw0:qOCWeH70R2BkobE+cw0","tlshash":"aeb35f5a59e31023496362294fdf2011ba388123590dee487d8da3d49f9ed7c47bafec","size":117433,"data":"","first_seen":"2023-07-29T10:21:40Z","last_seen":"2026-07-26T05:01:44.839781Z","times_seen":17865,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rb88t.com:8989/","fqdn":"rb88t.com","domain":"rb88t.com","tld":"com"},"ip":{"addr":"34.96.219.82","port":8989,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":true,"md5":"0bef0817f0d11fcf076f27b44c25a017","sha1":"8faaa2bd2d5898bae045c9af656a9ce3ee681fa0","sha256":"776766fbf7f8c3cd2ba1b39849a1a5db98429909c1eefdba42e31b701859e572","sha512":"38b7cc7830ce2d21c4033c5d05b8b8e3f86925fc6c466e68e63d1f523e454d352f4b95805f9257cca14d42e38381b47308d321cb38199ad9a6161671769a37ba","ssdeep":"","tlshash":"18a0026813502f4b8b57e7ee4b4fe5077074051621636d61f63ca0eebb27f58c24166d","size":80,"data":"","first_seen":"2025-10-25T00:22:29.951446Z","last_seen":"2026-05-23T18:41:03.259267Z","times_seen":80,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rb88t.com:8989/","fqdn":"rb88t.com","domain":"rb88t.com","tld":"com"},"ip":{"addr":"34.96.219.82","port":8989,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":true,"md5":"a2dfe7db95be9792922530c88ef88da4","sha1":"fc992fc77fdfa4abe3570569fbdc53a1c5714c0c","sha256":"d05ab645a69476e9a8ba932b58907e3d8f103bf23aedafbe3e76b27f4a22358a","sha512":"99065782830b3e3f013910fd9aa795fd6b341e7892eaec200ad05305920552798f2446dad45dd254de8185095f36af246cee24052b58f05eb17dee20d59b5abe","ssdeep":"","tlshash":"7f210e524f048a9b77cdc7195060241c6ccca06fbc94b988f6ce9ba70f5ea9e56fd083","size":1279,"data":"","first_seen":"2025-10-03T11:28:12.468736Z","last_seen":"2026-03-15T12:05:04.391268Z","times_seen":1669,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rb88t.com:8989/","fqdn":"rb88t.com","domain":"rb88t.com","tld":"com"},"ip":{"addr":"34.96.219.82","port":8989,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":true,"md5":"0c2fbae4d0655ff388ba2b3439eb5c33","sha1":"ea9a1120732f3c3009a8897ce8d077f697ac00f2","sha256":"d11ca0dd56676ad2249bb99326af3d7545db551925148c113e1eb7d7d7e9010d","sha512":"3a27b3a81253277303c0fdf3e37fd06fe2ee9b81efae5eaa02032bc885c26e3f3d576872dfa28abd5d4496375ab223c569c459bd98498da6f2b961dd3cf66f03","ssdeep":"","tlshash":"14012d318c3880807d111362233f7b0cf5b24a3b1d81e585720e5b603fda9af00ca3da","size":704,"data":"","first_seen":"2025-10-25T00:22:29.954773Z","last_seen":"2025-11-26T07:39:41.46146Z","times_seen":69,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rb88t.com:8989/","fqdn":"rb88t.com","domain":"rb88t.com","tld":"com"},"ip":{"addr":"34.96.219.82","port":8989,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":true,"md5":"a2dfe7db95be9792922530c88ef88da4","sha1":"fc992fc77fdfa4abe3570569fbdc53a1c5714c0c","sha256":"d05ab645a69476e9a8ba932b58907e3d8f103bf23aedafbe3e76b27f4a22358a","sha512":"99065782830b3e3f013910fd9aa795fd6b341e7892eaec200ad05305920552798f2446dad45dd254de8185095f36af246cee24052b58f05eb17dee20d59b5abe","ssdeep":"","tlshash":"7f210e524f048a9b77cdc7195060241c6ccca06fbc94b988f6ce9ba70f5ea9e56fd083","size":1279,"data":"","first_seen":"2025-10-03T11:28:12.468736Z","last_seen":"2026-03-15T12:05:04.391268Z","times_seen":1669,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rb88t.com:8989/","fqdn":"rb88t.com","domain":"rb88t.com","tld":"com"},"ip":{"addr":"34.96.219.82","port":8989,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":true,"md5":"cbcea9f2133eaa78ab1d369420329af2","sha1":"37248d1dff4c4d07b9e2040ab80f67fce4d5f52a","sha256":"084baff03d9e32fa334c616d01b6d765e2dc23e6200ab4b7dc18f8ab302ae962","sha512":"213e541dbe2307ccffcb96188334b67efe86ece732a36aa27547e349726f0c14c7cf85f0dd4bbdd5c478e5d6a44491a87b689ed17ff9cbd4c33ea8a9cbee66f0","ssdeep":"384:2F05MtGUz1xylvvtZdH0l3PEkdn69oz1R0f6Iem:2KytGUuvvtLGF6e1A6Iem","tlshash":"3f8282c869ea0035a5dbf07e5a9f5c587728849b0b8a4c0f7c4d66b49f60a3003fa5fd","size":19289,"data":"","first_seen":"2025-10-25T00:22:29.957278Z","last_seen":"2025-11-26T07:39:41.462806Z","times_seen":69,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"8vpfnx.bqkmk.cn/061410/rcenter/common/static/js/gb.validation.min.js?v=1761552496493","fqdn":"8vpfnx.bqkmk.cn","domain":"bqkmk.cn","tld":"cn"},"ip":{"addr":"103.198.200.7","port":443,"asn":138915,"as":"Kaopu Cloud HK Limited","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"a55780dc13cbf1a8d375f14ebb659cf2","sha1":"9548cc269bcde0dc48e166fa6bab37af8a649e57","sha256":"35d147a863ab8828e073ca1ae89d476a9cede797c410ac555597c1f442452cc8","sha512":"3514366118d038da9131739e4557dc5fd92b8b7d3a27af00a7c2d8f4cfd49f4932991cba899fcc8171ac59eb356b25e717494225912f37d65600305ce2d3ace9","ssdeep":"768:WqBveMjZ1oE/eL8hhMjm9a1hI4vhej4pZ:Xpo5GhMjm9a1hI4vheUpZ","tlshash":"cee231166b7701e2916b71e10e4f9a083174952b5a87ce08bdac92e09f18d787373ff8","size":32679,"data":"","first_seen":"2023-04-05T18:30:47Z","last_seen":"2026-07-26T05:01:44.845952Z","times_seen":18132,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rb88t.com:8989/","fqdn":"rb88t.com","domain":"rb88t.com","tld":"com"},"ip":{"addr":"34.96.219.82","port":8989,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":true,"md5":"ab8b1bcffc72e505e0f37f693d6a87a5","sha1":"849c792d84445ff1cc946c4458255dce152a68da","sha256":"36e8c37b1055713547aa080372b86615e1f9858d3f632cb0f949e05247f8e607","sha512":"cb717ce8dccbd48d7b8ac79f8018ff327637fce9ef4441b832a9ba7af57cfae5e476170ec2490374e8026a0b6a6a265399d4ad2801ebdb37b7a0092d8f9331a3","ssdeep":"192:1BDi+KreB5FlJ7KRn8rVavN3nryOcCxiAcJGw/d2mi7yn:TTKCBRhKRn6YEDdV","tlshash":"ec42c8a821fe392301d371394f1e6a072532599bc396ad013e5e8b884fe977c46b36c7","size":12737,"data":"","first_seen":"2024-06-28T11:39:26Z","last_seen":"2026-06-07T07:30:11.579799Z","times_seen":12672,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rb88t.com:8989/","fqdn":"rb88t.com","domain":"rb88t.com","tld":"com"},"ip":{"addr":"34.96.219.82","port":8989,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":true,"md5":"6681856885ee92601b7711c11d19553f","sha1":"95ab4437869df8c790cad28e0753a4c9ea362e73","sha256":"ce52fd46b2a5cfd741a2f0c39bc2d5218271b5690bdf8ec33af94f1062e98d23","sha512":"5f2a2fe1e899778e0687301ff306fd8c35b869c0675f726653be98393da31fedc388b4d3ed25d7075a0da69656458fc929bb00daf92e1381e19bb49764bea4b5","ssdeep":"192:dvbLsKRfG3Ncq2w30CowkzcDC/L04alCUM:d93d3","tlshash":"1722cb08f1bb1da540b3203c1faff082ae64564b9d89cd02bc4d59c45f09aede971f9a","size":10725,"data":"","first_seen":"2023-04-05T18:30:47Z","last_seen":"2026-06-07T07:30:11.580464Z","times_seen":17284,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rb88t.com:8989/","fqdn":"rb88t.com","domain":"rb88t.com","tld":"com"},"ip":{"addr":"34.96.219.82","port":8989,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":true,"md5":"d15a9b513acdcf3e9b08901384511565","sha1":"f1fe72392137895e4952f835c0330f76aacfecdf","sha256":"9fa644edfd9af9be6b244016e8f4f0eaee414732edc6ba3641e8647253359995","sha512":"9bb3e57667fd095c42db5514ac18c9b41baf50b81ded3ff810486ce394e1034751a941fefdb4e0e09bb98613b5dfc0a842d37cd9802671928e5f49380b9eda29","ssdeep":"","tlshash":"b071013cf4fa2228282b6085779b2821a5915427144dfd0cbb1ff3389fe9d25ee566c7","size":3647,"data":"","first_seen":"2023-04-05T18:30:47Z","last_seen":"2026-06-07T07:30:11.581264Z","times_seen":17277,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rb88t.com:8989/","fqdn":"rb88t.com","domain":"rb88t.com","tld":"com"},"ip":{"addr":"34.96.219.82","port":8989,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":true,"md5":"c4d2ed9f155ff3fd4cd19477efb6387f","sha1":"d7cc49cbba2d13aa08bf4822be52fa198a55ccb3","sha256":"da33a2ffadde03902fc3bf1036b86dc86703f6856656bea2c0498562b56fceee","sha512":"4100529e93b0c82e49d6eeb856e531ae676d7fac1e2fcc6d6e700dd543796b01022a6647c1ef0081edb797db53f3c2134f8562c9c39ecaee6fa701e94530537e","ssdeep":"192:GkalAgvOyeWE9kFg3b9CCCiC+Vd2BX6p54JiVXargvn4n6SnEFvcWaSgNqEcIyYM:0lvvZ+GhcqJmYcIyaFIy/BIyv3IyPlpK","tlshash":"16a2834c25f7042829a3717a5b9f6088f178842b894add45bc8e92542fd4a2c77f37fe","size":21722,"data":"","first_seen":"2025-10-25T00:22:29.963297Z","last_seen":"2025-11-26T07:39:41.466378Z","times_seen":69,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rb88t.com:8989/","fqdn":"rb88t.com","domain":"rb88t.com","tld":"com"},"ip":{"addr":"34.96.219.82","port":8989,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":true,"md5":"9f5bce1aa50f72fd0834901c70db4f43","sha1":"41771079bee5eb45539e694a5eff580732ab26b0","sha256":"a50724b65a2657f6e67adbf98a3dd135de52b4786350f0b1bd142adff38c7ffd","sha512":"d1445eef1431e8e11779bb3aa9da243cfc04ea0abe4cb9a62b6b0f5940a9ea17ad7d0926a51925feb06ce2afc435ce9050c3955ce973407eebfa4dd1d0ca35af","ssdeep":"192:cyzyMkzf77qsBQXbhG1SUnqpT7H8DvswVAJ4jy7j3vU4P8eaoCrHoQcasI4kHwCW:mMkjq0TqEVAJ184P4DiQzR0KmgqQ2N","tlshash":"599210b876f701b24c667477875a2144e100f0ebb648ee087d4e56dc4fa8a34b3a6fd5","size":19701,"data":"","first_seen":"2023-04-05T18:30:47Z","last_seen":"2026-06-07T07:30:11.582699Z","times_seen":17251,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rb88t.com:8989/","fqdn":"rb88t.com","domain":"rb88t.com","tld":"com"},"ip":{"addr":"34.96.219.82","port":8989,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":true,"md5":"edaddb8132e9e0880252c5b6c47bf1c1","sha1":"dc08b5b6ca432b46cca94f1f297491e1b08736ea","sha256":"b98809417c0240085bf70f2a1127f0b622c1514651737e7e4ffac4b39e4da17e","sha512":"00dbcc0a7b89e5e377bc26573fa3b9f1d09267044b3ee1c594e22522f8a17733bf041ebfa09ddb2e70a9f495437933f8a4e42875a16a3221067bf1df558c090b","ssdeep":"","tlshash":"da4000000000000000000000000000000000000300000000300000000f000000000000","size":6,"data":"","first_seen":"2023-03-07T01:14:38Z","last_seen":"2026-07-24T08:07:41.926604Z","times_seen":20358,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"8vpfnx.bqkmk.cn/ftl/commonPage/js/bootstrap-dialog.min.js","fqdn":"8vpfnx.bqkmk.cn","domain":"bqkmk.cn","tld":"cn"},"ip":{"addr":"103.198.200.7","port":443,"asn":138915,"as":"Kaopu Cloud HK Limited","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"5ce8851dc823429a42ab6147554403cc","sha1":"28f381f0e0aa4f5d56690e65723bd97fb59a38e6","sha256":"dd1edf5e54071903c4c1e81e33636444899d645df6b18bad22249da07f91c811","sha512":"f42a4d48c666d9c78fcb6c6061141452899085c504bf15e23749611dda00b6913e75ebbe47ca436a2ed016175d0918f193e474f13974a2f6a5304e18909a87ee","ssdeep":"384:3ai3F3N3VKUINthDa7Vnq86z3JCDKSz1m0hMtkJI2Cg0WEUOv5Dq:T3l3INthDu1YCDKS5flC9m1","tlshash":"6a9261ccb2d9b54c47abe072143f200df03a996951496119bc79e9ebecf060aa077f79","size":20132,"data":"","first_seen":"2023-03-07T01:14:38Z","last_seen":"2026-07-26T05:01:44.851785Z","times_seen":17932,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rb88t.com:8989/","fqdn":"rb88t.com","domain":"rb88t.com","tld":"com"},"ip":{"addr":"34.96.219.82","port":8989,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":true,"md5":"9f1681b5a72417b33c2869aab85af152","sha1":"b40a6d9c6d058c2bd6e126a1b0191182926b9d04","sha256":"eabdfd0c5237f406e0acbef879968e72e5e3d62dd8e8b6bcee48e5ab7f4d0154","sha512":"d9190153595e85b071dbf1c92212e7c30a5de2e1d6c4533558bb5f4235d6227c327751799ce20fa50a875a4ceb25227f4eb7d133c3257d8770c1131117d8bda4","ssdeep":"","tlshash":"1631d8d2f3cd01fd42099504248620d9b11dc2394219d48efa9d3c8e73d696e232f32f","size":1761,"data":"","first_seen":"2023-04-05T18:30:47Z","last_seen":"2026-06-07T07:30:11.584253Z","times_seen":17228,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rb88t.com:8989/","fqdn":"rb88t.com","domain":"rb88t.com","tld":"com"},"ip":{"addr":"34.96.219.82","port":8989,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":true,"md5":"9c3f7d9e5de3b764c32a679ad06ae3db","sha1":"9ab260e36b46c6ca6f58066ee914f3826d86a37f","sha256":"fefe9a763127c0f92edfe95be1000aeed2eda7690482769c90dc9488dbe5d33a","sha512":"1517bde6929159474692270e256f6021611365d30618b57d1fd325e7170bc7540bac8500e1ccd438d2a3d5f3b6cf1456ba39560d5cbc685f4b56b4c2b4126ad3","ssdeep":"","tlshash":"0e51462618e8c076a31b639d0b9f1141b53c750bc3ac8d357d0d5b758fe451452dabdd","size":2561,"data":"","first_seen":"2023-11-23T15:36:17Z","last_seen":"2026-06-07T07:30:11.584941Z","times_seen":15235,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rb88t.com:8989/","fqdn":"rb88t.com","domain":"rb88t.com","tld":"com"},"ip":{"addr":"34.96.219.82","port":8989,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":true,"md5":"0145b150cf9410a33b8a0679a299015e","sha1":"586c182550a810cc9224bda84e1b5b34ff8a668e","sha256":"efbbdbeb40a43470df0934a0cbd1f2e77c21953d30f0e9b5beab85479662cd5c","sha512":"9fb1f0ee51e0a68723dee9e1b3a81e5de9da717ade38b4c3780a0c21e26c463e6eb86a26693b51aaf2a0e8977932176859749770d2bbd763bfe308c3970c34a8","ssdeep":"768:cOHmhEOPRtPvJdcz4nPFCKJV+3/svMIR0Ka3gYe1LvcOvBea/u+IaAVbaa1aTKOB:7ELq9jgIa4aTuUwlo8/z0vwr90AIC8","tlshash":"82c3c71c75e712a664b330791baf31007072941b690ddd04bd5dbac06f98a3da3b6bee","size":126553,"data":"","first_seen":"2025-10-25T00:22:29.974889Z","last_seen":"2025-11-08T13:39:55.980772Z","times_seen":55,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rb88t.com:8989/","fqdn":"rb88t.com","domain":"rb88t.com","tld":"com"},"ip":{"addr":"34.96.219.82","port":8989,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":true,"md5":"479c01001c455527cf2aafec087accad","sha1":"230c5d853a00977d890c25cb56b5a07c5e0acd0e","sha256":"0ad2a7081ff475ce3a2068fe69547248166c0fd39f26fbf03f2ac5db073a16cf","sha512":"ebedabe18db451b91ae6cfe4a55712d0401a1cd5545a5b9344edcbb68c7cb678a1a8a6efc20f101d99e8cc094a060bb32deccf9e694a837ee17a8f8585bd43c6","ssdeep":"","tlshash":"1f21233e1c17a1b52ef7046a9b7bd5a63af2051b2442e400bc8cd8193f14fc11c25bde","size":1389,"data":"","first_seen":"2023-08-21T11:10:45Z","last_seen":"2026-06-07T07:30:11.586469Z","times_seen":16887,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"8vpfnx.bqkmk.cn/061410/rcenter/common/js/jquery/plugins/jquery.validate/jquery.validate.js","fqdn":"8vpfnx.bqkmk.cn","domain":"bqkmk.cn","tld":"cn"},"ip":{"addr":"103.198.200.7","port":443,"asn":138915,"as":"Kaopu Cloud HK Limited","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"9c41709c2b64126b909c101a27f39153","sha1":"4ab666b36c092577acb41390ad90e96d5fea7711","sha256":"c1963697eeafb63b6c29e95da2d38d91dd907ab656e130e6e1c34d1dcd149f60","sha512":"f235dccead15199e58495c6faee849c50252b9beed29a04ae46a7a9bdbccfd569a8ab452e7fcf923b7048dfda0c3d7bd51261874642d40e994d1640ca89e330e","ssdeep":"768:u4ygd0iB6d9zYDO5qYT8fwTW3Jny+XiKZNtrt2tG:NB0iB6d9zYDO5qYTMwTW3Jny+jrP","tlshash":"e6c2b7093585102f4ecf30fbb897524f72ba95a45019a069b5fca4d1bef9f8530a6f38","size":27822,"data":"","first_seen":"2023-04-05T18:30:47Z","last_seen":"2026-07-26T05:01:44.852373Z","times_seen":17807,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"8vpfnx.bqkmk.cn/ftl/commonPage/js/layer.js","fqdn":"8vpfnx.bqkmk.cn","domain":"bqkmk.cn","tld":"cn"},"ip":{"addr":"103.198.200.7","port":443,"asn":138915,"as":"Kaopu Cloud HK Limited","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"cb96339625e9d456e32f86cdb3c7a7a1","sha1":"1301165c58bbb13c542cba493b7ab5774e87e31f","sha256":"17fb047ba6828fcbdf2ca226fa4594cfded2b2fdfeaff89a5bd81c7cf0359919","sha512":"53083bf4d6d450b1e9402c3f3dc40fb3434a27d47fbabee51f4ce1d3577f2a0aabe90cf5f6dfc22830a3878ec7552a6bf6bff605c82a4f832c79f34f7657ccef","ssdeep":"384:r1dCih92A3DgrLXSt/SdMrXqE6tGLxzAOTElH0jjhtjfs8:r1YiV3D+WtXItqF13k8","tlshash":"6aa2b76a754034976323906ad11fba0b31f21d24d7078128f22bb4ae1dbcd95a2b7f5f","size":21994,"data":"","first_seen":"2023-04-05T18:30:47Z","last_seen":"2026-07-26T05:01:44.838984Z","times_seen":17821,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"8vpfnx.bqkmk.cn/ftl/commonPage/js/gui-base.js","fqdn":"8vpfnx.bqkmk.cn","domain":"bqkmk.cn","tld":"cn"},"ip":{"addr":"103.198.200.7","port":443,"asn":138915,"as":"Kaopu Cloud HK Limited","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"e6ce47d880d7a50ddf91b074c8572edf","sha1":"6a3657c67209136e5b544859daecf16f2d153b72","sha256":"c49e04c7ecfd07c74b58cf161ef2b58f2bc837a9091ed1ae090a33734cdaa734","sha512":"0946a1cb9d048b485dadf4056a4aa7be685a8906240a828a5ac776a4e1eae2ed5ef238bd0724da41cce33324357ba44704d34a6766430f1552630f9a17b664f4","ssdeep":"768:+lkflKVlvREcS38xHmuqrRO/5IS3oFaJX+mQdudqD9jAXImsUh8H3yALdODRG4eK:6ClKVlvREcYoHz0PszIfoALkMEY16pB","tlshash":"4353c80a72b130a106efb1b6515f460d323a6927d44ac458b97c9ae43f74f28316bf7e","size":60909,"data":"","first_seen":"2023-08-26T00:19:56Z","last_seen":"2026-07-26T05:01:44.845389Z","times_seen":17075,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rb88t.com:8989/","fqdn":"rb88t.com","domain":"rb88t.com","tld":"com"},"ip":{"addr":"34.96.219.82","port":8989,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":true,"md5":"7932637ac9b0a1125acfaeffa837b6af","sha1":"01107a42cef642f68e70ef30502ecb6c0de6a0d6","sha256":"f938651bd7efeb3c523dcca3df1c9a0cc63b12f604816c8e49636fda5b1b1c7e","sha512":"6ee9dd22796803d3a44aaf8a59219dc077e2cf7ebe2b58efe545c7f08028496e595fbea31d2990cc0f210054f6cd91055326484acd544aa29889712c2c050f57","ssdeep":"","tlshash":"bc71315e7559bc949bd3202a4a7f1008727b486f2928c850fa5dcc50af5cf0f2362b9f","size":3486,"data":"","first_seen":"2023-10-24T11:42:08Z","last_seen":"2026-06-07T07:30:11.58824Z","times_seen":15967,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"8vpfnx.bqkmk.cn/ftl/commonPage/js/websocket/CometMarathon.js","fqdn":"8vpfnx.bqkmk.cn","domain":"bqkmk.cn","tld":"cn"},"ip":{"addr":"103.198.200.7","port":443,"asn":138915,"as":"Kaopu Cloud HK Limited","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"466a7ed7d00986d45375c0cbffb5233c","sha1":"68845ead668e9abd29c24b491dbf97b219226c08","sha256":"7ddafae5a0a552d2d56101cdc8306403e8fb9570759d66c48b25893b409f0123","sha512":"752801557c12ee7830f1f2e55352ab9c033aff01ff79abdffaee1601c54cdfc85a2041facfc5a7e180706812be5ad08668eada116544197fd2a784bac1903ea0","ssdeep":"192:0Pf+0Sn4NyRSTTPhvygOdWuTdC3d7QPXLHOm8cSCl1Ej3m7YAPzhsoqFncJ0j:0Pf+fnwfcXSaGLj","tlshash":"9e32314b6cf75085592b32b50f9f24447239d8572605e81c7dccaae48f98b6c0b6bfb8","size":11905,"data":"","first_seen":"2023-04-05T18:30:47Z","last_seen":"2026-07-26T05:01:44.843444Z","times_seen":17728,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rb88t.com:8989/","fqdn":"rb88t.com","domain":"rb88t.com","tld":"com"},"ip":{"addr":"34.96.219.82","port":8989,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":true,"md5":"dd4934ec50598a49950c57836d268ba9","sha1":"9830d9f40b0baf411ea1e7b7a4b65675cf35ae04","sha256":"89e8ae92a48e530a676704a7858edcc65fdd1488e39280ba8da4cb80dc5729d5","sha512":"1b7e75147ff199dc7900be58df3ab41039a70322ab2db2d697238b166447a915cefafb3e1cc17377a7ecfc08b641fd9ab51351f060abb405ceed36ee1e5b1b9c","ssdeep":"","tlshash":"c641df0d25ee1008d01729a9fbbbf50c632994272ca4ed08b50dd2154f6ed7ed2b9a9f","size":2036,"data":"","first_seen":"2023-11-22T16:18:01Z","last_seen":"2026-06-07T07:30:11.5897Z","times_seen":15182,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rb88t.com:8989/","fqdn":"rb88t.com","domain":"rb88t.com","tld":"com"},"ip":{"addr":"34.96.219.82","port":8989,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":true,"md5":"d1880ce6f7e86a563b54412066416edc","sha1":"379f66a5c76c995e8255b0f825f2d2ef05d3ab74","sha256":"dadb28dfc6a383dc589a4c01a6db796fab7be6c40b7f7d413a189394ecac0bf1","sha512":"c5764f5080dc814bc985f6c4b26e18684cfe09bd3bb2dadb92e45500f82f583561e31d4b722d43628a014f5bb0c4f97019f91dbf0432d38909e7468e86e2bc49","ssdeep":"","tlshash":"70312f221117907787f2fb12a27f2406c80f878a953c99ee739f9070bb014fd71aaa4d","size":1827,"data":"","first_seen":"2024-07-12T23:08:52Z","last_seen":"2026-06-07T07:30:11.591126Z","times_seen":12357,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rb88t.com:8989/","fqdn":"rb88t.com","domain":"rb88t.com","tld":"com"},"ip":{"addr":"34.96.219.82","port":8989,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":true,"md5":"e6ea297058f6d52d83390d9ea7f914aa","sha1":"349df987c3c4c50687d993b31f83cfea7f796730","sha256":"2f21ca2376a9112f70c12ecc46d75ff792b067f5edceae5ea06011c13cf14e56","sha512":"80999dd48f3db744a7cc59dc9cec9303b35216f65d2711891705dbc5dcfb34a18c5c015a2615573aaf59315882c5724ab5dc0e218e8f9cfa2579c4ef37d81cc5","ssdeep":"96:Ge2n8LmEhLzcRXKBxap3cSubfC7WjnM9LidafQa+X9MhsvVQCi:D2n8LmEhAXKfapMSu7C7w2WX988QCi","tlshash":"e0c10e4e72e120b199a7a52c929f901024725403080fdd1dbe4d93a4df89d7fb6ba3ef","size":6025,"data":"","first_seen":"2023-08-02T04:42:13Z","last_seen":"2026-06-07T07:30:11.592514Z","times_seen":17147,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rb88t.com:8989/","fqdn":"rb88t.com","domain":"rb88t.com","tld":"com"},"ip":{"addr":"34.96.219.82","port":8989,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":true,"md5":"428ea510f7bb729dda8565276d74dc3e","sha1":"3d294d1acb8620bcdc0cce1ab21b229c4fbaac6b","sha256":"486b529091050a0dda3f3de25c70425ba78cbdf6294538038358b817c9bf74e3","sha512":"0c345ecaba29150af2fe927af04f62a382e6257edba9c7a42e80e11381bfc16fd280a2af41dba2d5811ff5810253b04ec362b89cdc7005fc451ac7043b7bb991","ssdeep":"","tlshash":"78f00e06c67744a1903320a93b7f20306cee430f900ccea8be2c17c21f481110bb0389","size":584,"data":"","first_seen":"2025-10-25T00:22:29.990189Z","last_seen":"2025-11-26T07:39:41.477474Z","times_seen":69,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rb88t.com:8989/","fqdn":"rb88t.com","domain":"rb88t.com","tld":"com"},"ip":{"addr":"34.96.219.82","port":8989,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":true,"md5":"c2c998d7ca2764a732999f41912e334a","sha1":"d9a0b0c2747579bcd56fb57824458355bc92de08","sha256":"cf45d13769cbd70c78e6b136444c6c2c95c57243a42ebe92c5139b79d96b0070","sha512":"c2bf78c3517531e64a27f0700af855a8fcb8b55b060258d6ae0599effaa91492fdadf709998e89fb7434e41b22c9a284e531b636e6a9a0185a7fd5d626443e5f","ssdeep":"","tlshash":"b321bb08f3a8106878f72579987c31d442240183cc4ac8b5f97de5b14fe42987643e6a","size":1268,"data":"","first_seen":"2024-07-04T08:35:13Z","last_seen":"2026-06-06T23:55:15.813284Z","times_seen":696,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rb88t.com:8989/","fqdn":"rb88t.com","domain":"rb88t.com","tld":"com"},"ip":{"addr":"34.96.219.82","port":8989,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":true,"md5":"b9ea25d0dd599352c38e3a05b629f7b3","sha1":"7c0e1af020fe9cace8935297c56ca529a8f1d7a0","sha256":"e0845f276d19f47c78e3d7c415381bc0435382443f9f5093cc5bc931e4debe90","sha512":"433a5a73160c067e88e6efcb46391a4a8e5c4c730af91fa07fc548a8d477723b85e6bf4f7d229d807afac1b10652fead2b2594e89dcd41933a2f6ef2fb75b3ee","ssdeep":"96:XMyuljaRlu/Z0ErX6o8xi6b04+LpyPLSCRCvTRS2FPmhXZq5V7fOlO6t:XMyuljaRsB0Erqo8lb0X9yPLSCcvTRS7","tlshash":"8da1a30e60f900e108733079bbbf750a17a120175948ed14bd4f9b887f5593aaa27adf","size":4718,"data":"","first_seen":"2025-10-25T00:22:29.993344Z","last_seen":"2026-05-23T18:41:03.323798Z","times_seen":80,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rb88t.com:8989/","fqdn":"rb88t.com","domain":"rb88t.com","tld":"com"},"ip":{"addr":"34.96.219.82","port":8989,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":true,"md5":"66276725dd860dbf3e6f5493f62ffb76","sha1":"600f21f6afae31e55f6f11dd814078b3af490c2b","sha256":"a665945894a7768941fe79c071910251c58b44024ed9ee1b41f08385106ec005","sha512":"870e36846fc17c56d6b8db5f0de2e49700374ffd77d6af2261320097e5ee0df00dd90b59c86e6822a0626b191db79332838cf032634c90061c7683a0992d736f","ssdeep":"","tlshash":"079002496595200004f72468095f50145c60244b105689443f4d4a814f1002c420151c","size":51,"data":"","first_seen":"2023-03-10T21:36:58Z","last_seen":"2026-06-06T23:47:00.428239Z","times_seen":676,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"8vpfnx.bqkmk.cn/ftl/ysb1758-02/themes/images/bg-products.gif.base64","fqdn":"8vpfnx.bqkmk.cn","domain":"bqkmk.cn","tld":"cn"},"ip":{"addr":"103.198.200.7","port":443,"asn":138915,"as":"Kaopu Cloud HK Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://rb88t.com:8989/","date":"2025-10-31T04:45:39.453Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.bqkmk.cn","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 20 Oct 2025 00:00:00 GMT","end":"Tue, 20 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"CD:A6:04:CF:32:73:E5:24:43:2F:6D:D8:78:B9:CF:F5:FF:75:2B:72","sha256":"D4:BA:B1:C0:7D:2E:00:30:EC:84:7E:26:6D:DB:2A:4F:A5:87:A0:9E:7F:A3:96:24:96:6E:6E:3E:1C:A4:D5:5D"}}},"request":{"raw":"GET /ftl/ysb1758-02/themes/images/bg-products.gif.base64 HTTP/1.1\r\nHost: 8vpfnx.bqkmk.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://rb88t.com:8989\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rb88t.com:8989/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/plain; charset=utf-8\r\ncontent-length: 28413\r\nserver: Default-server-KS-CLOUD-XG-FOREIGN-12-03\r\netag: \"68d38ff0-6efd\"\r\ndate: Wed, 22 Oct 2025 08:45:21 GMT\r\nlast-modified: Wed, 24 Sep 2025 06:30:08 GMT\r\nexpires: Fri, 21 Nov 2025 08:45:21 GMT\r\nage: 763218\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\nx-frame-options: SAMEORIGIN\r\nx-cache: MISS\r\nuuid: -\r\nout-line: gb-cdn-212\r\nx-link-via: xg21:443;xg12:80;\r\nx-cache-status: MISS from KS-CLOUD-XG-FOREIGN-12-03, HIT from KS-CLOUD-XG-FOREIGN-21-11\r\nx-cdn-request-id: 5762d3e32e02be325448b1539cfa41e9\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":28413,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"d892e587b7a49e504868bfd2a0a21f20","sha1":"960e3851883dbda8687f203e48aa6378ef84e397","sha256":"94e021b79a655d45519d465610b1cfdfdd2f1908890e433c3b7d867dfaffe819","sha512":"8a1de4fa82e14da2a1f85d7b6ac7d4f0f575d3b0a67cfc02935ded833fc022a07629dc9c587c7d042228561967760a32a80dca34e779ef3affd840152bb5a2b3","ssdeep":"768:vNNzwhWZwiiUI/9FRmrUFVsFkAmikDRqd7ry3Kjrptf:v/zwhWZxiT/dPAqNqdq6jrpF","tlshash":"a4d2f0722d312e5b3baf9413305c0ef69e21b6af011eb25c80da9da510be0c64d66f5e","first_seen":"2023-04-16T16:45:37Z","last_seen":"2026-06-07T07:30:11.553079Z","times_seen":7463,"resource_available":false,"data":null}},"time_used":266,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":265,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rb88t.com:8989/","fqdn":"rb88t.com","domain":"rb88t.com","tld":"com"},"ip":{"addr":"34.96.219.82","port":8989,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"Hong Kong","country_code":"HK"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-10-31T04:45:35.319Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rb88t.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 16 Oct 2025 17:09:31 GMT","end":"Wed, 14 Jan 2026 17:09:30 GMT"},"fingerprint":{"sha1":"1E:C2:B3:67:0C:77:84:F1:9F:8D:AD:21:1B:38:A6:D8:C7:76:57:1C","sha256":"3B:31:2B:A2:8D:4D:4D:EC:78:17:C6:E3:F3:EA:94:02:0E:AF:0F:86:CC:F4:27:C3:4D:68:DF:1D:2C:E4:19:9B"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: rb88t.com:8989\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 31 Oct 2025 04:45:35 GMT\r\ncontent-type: text/html; charset=utf-8\r\nvary: Accept-Encoding\r\nx-html-cache: HIT-3600\r\nx-frame-options: SAMEORIGIN\r\nuuid: -\r\nout-line: gb-site-204\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"jQuery:1.11.3","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Swiper","description":"Swiper is a JavaScript library that creates modern touch sliders with hardware-accelerated transitions.","website":"https://swiperjs.com","common_platform_enumeration":"","icon":"Swiper.svg","categories":["JavaScript libraries"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"Moment.js","description":"Moment.js is a free and open-source JavaScript library that removes the need to use the native JavaScript Date object directly.","website":"https://momentjs.com","common_platform_enumeration":"cpe:2.3:a:momentjs:moment:*:*:*:*:*:*:*:*","icon":"Moment.js.svg","categories":["JavaScript libraries"]}],"data":{"size":404454,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"fe434aaec405fa35833d15fd101eb7c8","sha1":"aafbf3bc891cdc5c37d1a9e6245fa3e3c4fc1d58","sha256":"54a8b53a0d7436e3fb65f47b4a3a34e4b40174372b8fed32e1daa0f5ce2d6d87","sha512":"a45b1260a86807ac049fd669ca4ea46111e7cfdf051a78779bf171dba4e03a9b7aa1241923fc0fdb6455cdfb439e4230c65c0c0e3ef8275dcce1da418ad0c35f","ssdeep":"3072:cy5emUt6lkzB9LJwEaKMBRggyE3v4PEsbd6vg6o/aqz0vs2kn4M/RCh0QguJafT3:35ELPlbdtLai0vsD4M/RCh0tuJaD","tlshash":"5c940b0975f212a256d7a0b50ebf210479b2a147ee0ccd147d6e62ccaf90d6961f3bec","first_seen":"2025-10-31T04:46:03.870653Z","last_seen":"2025-10-31T04:46:03.870653Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1319,"timings":{"blocked":440,"dns":1,"connect":217,"send":0,"wait":434,"receive":0,"ssl":224},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-31","alert":"Sinkholed","trigger":"rb88t.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-31","alert":"Sinkholed","trigger":"rb88t.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"8vpfnx.bqkmk.cn/ftl/ysb1758-02/themes/style/common.css","fqdn":"8vpfnx.bqkmk.cn","domain":"bqkmk.cn","tld":"cn"},"ip":{"addr":"103.198.200.7","port":443,"asn":138915,"as":"Kaopu Cloud HK Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rb88t.com:8989/","date":"2025-10-31T04:45:36.284Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.bqkmk.cn","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 20 Oct 2025 00:00:00 GMT","end":"Tue, 20 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"CD:A6:04:CF:32:73:E5:24:43:2F:6D:D8:78:B9:CF:F5:FF:75:2B:72","sha256":"D4:BA:B1:C0:7D:2E:00:30:EC:84:7E:26:6D:DB:2A:4F:A5:87:A0:9E:7F:A3:96:24:96:6E:6E:3E:1C:A4:D5:5D"}}},"request":{"raw":"GET /ftl/ysb1758-02/themes/style/common.css HTTP/1.1\r\nHost: 8vpfnx.bqkmk.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rb88t.com:8989/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css\r\ncontent-length: 16495\r\nserver: Default-server-KS-CLOUD-XG-FOREIGN-12-03\r\netag: W/\"6901de9d-114e6\"\r\ndate: Wed, 29 Oct 2025 09:41:51 GMT\r\nlast-modified: Wed, 29 Oct 2025 09:30:05 GMT\r\nexpires: Fri, 28 Nov 2025 09:41:51 GMT\r\nage: 155025\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\nx-frame-options: SAMEORIGIN\r\nx-cache: MISS\r\nuuid: -\r\nout-line: gb-cdn-212\r\nx-link-via: xg21:443;xg12:80;\r\nx-cache-status: MISS from KS-CLOUD-XG-FOREIGN-12-03, HIT from KS-CLOUD-XG-FOREIGN-21-08\r\nx-cdn-request-id: a47d0966e6fb60d64607ceb9e6cadda6\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":70886,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (883)","md5":"be64d30b94ba3fa63d1d7c809d1a9b11","sha1":"973e027a7e49066e21f635092e2d957b5d2e5b25","sha256":"fbd839b3eeb133ebea99e05331fb7e5c9c68ae15df52cc048f32645290d402e0","sha512":"7a488dfd61657793733db04cc661129cf2283098bb76f803313b7c130db92094f9714c1b3600e380e3a367cbd9e115e3e62872c320d2a01805168840505f9768","ssdeep":"384:KMz5Nr/Jxyuq0wWXHOK5lRSiVEJBptR3X7QmM5df7qg/o/R0Hqcejmh8jULFJT4i:vNr/Jwuq0wWXHOYXVUBpSCaHqcKljULf","tlshash":"4363b832d680321eb017d1bbf495bfa9355aa443d6034ebcfab63569c6cb18927327c4","first_seen":"2025-10-29T12:19:22.052804Z","last_seen":"2026-05-23T18:41:03.094014Z","times_seen":63,"resource_available":false,"data":null}},"time_used":1346,"timings":{"blocked":528,"dns":2,"connect":258,"send":0,"wait":264,"receive":1,"ssl":290},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"8vpfnx.bqkmk.cn/ftl/ysb1758-02/themes/style/bootstrap-dialog.min.css","fqdn":"8vpfnx.bqkmk.cn","domain":"bqkmk.cn","tld":"cn"},"ip":{"addr":"103.198.200.7","port":443,"asn":138915,"as":"Kaopu Cloud HK Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rb88t.com:8989/","date":"2025-10-31T04:45:36.286Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.bqkmk.cn","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 20 Oct 2025 00:00:00 GMT","end":"Tue, 20 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"CD:A6:04:CF:32:73:E5:24:43:2F:6D:D8:78:B9:CF:F5:FF:75:2B:72","sha256":"D4:BA:B1:C0:7D:2E:00:30:EC:84:7E:26:6D:DB:2A:4F:A5:87:A0:9E:7F:A3:96:24:96:6E:6E:3E:1C:A4:D5:5D"}}},"request":{"raw":"GET /ftl/ysb1758-02/themes/style/bootstrap-dialog.min.css HTTP/1.1\r\nHost: 8vpfnx.bqkmk.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rb88t.com:8989/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css\r\ncontent-length: 630\r\nserver: Default-server-KS-CLOUD-XG-FOREIGN-12-03\r\netag: W/\"68d38ff0-adc\"\r\ndate: Wed, 22 Oct 2025 08:45:16 GMT\r\nlast-modified: Wed, 24 Sep 2025 06:30:08 GMT\r\nexpires: Fri, 21 Nov 2025 08:45:16 GMT\r\nage: 763220\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\nx-frame-options: SAMEORIGIN\r\nx-cache: HIT\r\nuuid: -\r\nout-line: gb-cdn-211\r\nx-link-via: xg21:443;xg12:80;\r\nx-cache-status: MISS from KS-CLOUD-XG-FOREIGN-12-03, HIT from KS-CLOUD-XG-FOREIGN-21-06\r\nx-cdn-request-id: 97b60e87dec3bd34fe20e7dd3a45fe70\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":2780,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"304eb84809c6637b7cdd0dc6225c5761","sha1":"e724aff10b16dc82bf1086cd3b70d8396f630d64","sha256":"cb1d0b332c0218bbb360fd25d693f88293b54389caf88c36ffcfd8adc948d0e4","sha512":"7283d3d20b85a21e53d2f281a7bc4bebaaa407cd3a4304454ab4b4a96150d3dbf0743d95e9bc67482626913e7ff464532410168f8f0207c61c1654a8796cdefb","ssdeep":"","tlshash":"c051791c0eaa0895a15f45cc77ee6f2164b83093444eae9937ef332c8f85466b9f6b04","first_seen":"2023-04-14T20:29:14Z","last_seen":"2026-06-20T23:33:35.336785Z","times_seen":11044,"resource_available":false,"data":null}},"time_used":1943,"timings":{"blocked":543,"dns":1,"connect":265,"send":0,"wait":830,"receive":0,"ssl":301},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"8vpfnx.bqkmk.cn/ftl//commonPage/commonContent/nav/images/sub-arrow.png.base64","fqdn":"8vpfnx.bqkmk.cn","domain":"bqkmk.cn","tld":"cn"},"ip":{"addr":"103.198.200.7","port":443,"asn":138915,"as":"Kaopu Cloud HK Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://rb88t.com:8989/","date":"2025-10-31T04:45:38.260Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.bqkmk.cn","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 20 Oct 2025 00:00:00 GMT","end":"Tue, 20 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"CD:A6:04:CF:32:73:E5:24:43:2F:6D:D8:78:B9:CF:F5:FF:75:2B:72","sha256":"D4:BA:B1:C0:7D:2E:00:30:EC:84:7E:26:6D:DB:2A:4F:A5:87:A0:9E:7F:A3:96:24:96:6E:6E:3E:1C:A4:D5:5D"}}},"request":{"raw":"GET /ftl//commonPage/commonContent/nav/images/sub-arrow.png.base64 HTTP/1.1\r\nHost: 8vpfnx.bqkmk.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://rb88t.com:8989\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rb88t.com:8989/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/plain; charset=utf-8\r\ncontent-length: 227\r\nserver: Default-server-KS-CLOUD-XG-FOREIGN-12-03\r\netag: \"667bb57c-e3\"\r\ndate: Mon, 20 Oct 2025 04:25:44 GMT\r\nlast-modified: Wed, 26 Jun 2024 06:30:20 GMT\r\nexpires: Wed, 19 Nov 2025 04:25:44 GMT\r\nage: 951593\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nx-frame-options: SAMEORIGIN\r\nx-cache: HIT\r\nuuid: -\r\nout-line: gb-cdn-211\r\nx-link-via: xg21:443;xg12:80;\r\nx-cache-status: MISS from KS-CLOUD-XG-FOREIGN-12-03, HIT from KS-CLOUD-XG-FOREIGN-21-01\r\nx-cdn-request-id: 5486b8ee995d42dce505b8a8cc625e32\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":227,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"77546ee8bcab279aee067f7794d08541","sha1":"e1ace21ee1e968151b5b0ad8da4b0ebf8420bdcf","sha256":"9f967376ac77e445b313fbebbab9a4572c0984edb80f6b5baa9c10f9bf68d647","sha512":"d56ff9fcf76a2153287b4b016b7e59f40c60859b36ac5d12bc96a43237a828cfcd4c0b5de142dbf178ebccef9092c3ae167ea7e3a59d359f50db78df36263b21","ssdeep":"","tlshash":"09d097310605283062ce68013802d1000e222b8f52a760407ff86023581b3c88a9a3c0","first_seen":"2024-09-24T19:10:13Z","last_seen":"2026-06-06T23:51:10.814802Z","times_seen":2088,"resource_available":false,"data":null}},"time_used":610,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":610,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"8vpfnx.bqkmk.cn/ftl//commonPage/themes/images/hongbao/icon-close-1.png.base64","fqdn":"8vpfnx.bqkmk.cn","domain":"bqkmk.cn","tld":"cn"},"ip":{"addr":"103.198.200.7","port":443,"asn":138915,"as":"Kaopu Cloud HK Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://rb88t.com:8989/","date":"2025-10-31T04:45:38.287Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.bqkmk.cn","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 20 Oct 2025 00:00:00 GMT","end":"Tue, 20 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"CD:A6:04:CF:32:73:E5:24:43:2F:6D:D8:78:B9:CF:F5:FF:75:2B:72","sha256":"D4:BA:B1:C0:7D:2E:00:30:EC:84:7E:26:6D:DB:2A:4F:A5:87:A0:9E:7F:A3:96:24:96:6E:6E:3E:1C:A4:D5:5D"}}},"request":{"raw":"GET /ftl//commonPage/themes/images/hongbao/icon-close-1.png.base64 HTTP/1.1\r\nHost: 8vpfnx.bqkmk.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://rb88t.com:8989\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rb88t.com:8989/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/plain; charset=utf-8\r\ncontent-length: 8227\r\nserver: Default-server-KS-CLOUD-XG-FOREIGN-12-04\r\netag: \"66b2f148-2023\"\r\ndate: Mon, 20 Oct 2025 04:19:13 GMT\r\nlast-modified: Wed, 07 Aug 2024 04:00:08 GMT\r\nexpires: Wed, 19 Nov 2025 04:19:13 GMT\r\nage: 951984\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\nx-frame-options: SAMEORIGIN\r\nx-cache: HIT\r\nuuid: -\r\nout-line: gb-cdn-211\r\nx-link-via: xg21:443;xg12:80;\r\nx-cache-status: MISS from KS-CLOUD-XG-FOREIGN-12-04, HIT from KS-CLOUD-XG-FOREIGN-21-02\r\nx-cdn-request-id: a7373da763bfd50f9473a02433a45db0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":8227,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"5ff41d2becd0689589fd8afb58c0913e","sha1":"9f463b57b27260b19c93d533046f893360933d76","sha256":"7f97dfd7455fb76be00f454b95e3b28c114f9164b49a504bf34200da41d9db8d","sha512":"d502dc1bf29166726ba9183c01efa1b698dcbf22d79de614a4772b4150add3f308d597732844c9febef77b1d85568604b729f2c16e4c66f2f86b0b724fdb4d72","ssdeep":"192:JkkBHNqwnjSJuxF1drKn9K79LDQXFj4NLaYQ7ar/:rBHI8BHkn9Kx4+LhQ7ar/","tlshash":"4d02bf013bd42b6a1dbb10d3f1684da88c83819232f43d99371fef7b658812c6253a68","first_seen":"2024-08-07T18:17:10Z","last_seen":"2026-06-07T07:30:11.528883Z","times_seen":9329,"resource_available":false,"data":null}},"time_used":712,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":712,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"8vpfnx.bqkmk.cn/ftl/ysb1758-02/themes/images/login_os.png.base64","fqdn":"8vpfnx.bqkmk.cn","domain":"bqkmk.cn","tld":"cn"},"ip":{"addr":"103.198.200.7","port":443,"asn":138915,"as":"Kaopu Cloud HK Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://rb88t.com:8989/","date":"2025-10-31T04:45:39.410Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.bqkmk.cn","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 20 Oct 2025 00:00:00 GMT","end":"Tue, 20 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"CD:A6:04:CF:32:73:E5:24:43:2F:6D:D8:78:B9:CF:F5:FF:75:2B:72","sha256":"D4:BA:B1:C0:7D:2E:00:30:EC:84:7E:26:6D:DB:2A:4F:A5:87:A0:9E:7F:A3:96:24:96:6E:6E:3E:1C:A4:D5:5D"}}},"request":{"raw":"GET /ftl/ysb1758-02/themes/images/login_os.png.base64 HTTP/1.1\r\nHost: 8vpfnx.bqkmk.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://rb88t.com:8989\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rb88t.com:8989/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/plain; charset=utf-8\r\ncontent-length: 1990\r\nserver: Default-server-KS-CLOUD-XG-FOREIGN-12-04\r\netag: \"68ec518a-7c6\"\r\ndate: Wed, 22 Oct 2025 08:45:20 GMT\r\nlast-modified: Mon, 13 Oct 2025 01:10:34 GMT\r\nexpires: Fri, 21 Nov 2025 08:45:20 GMT\r\nage: 763218\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\nx-frame-options: SAMEORIGIN\r\nx-cache: MISS\r\nuuid: -\r\nout-line: gb-cdn-211\r\nx-link-via: xg21:443;xg12:80;\r\nx-cache-status: MISS from KS-CLOUD-XG-FOREIGN-12-04, HIT from KS-CLOUD-XG-FOREIGN-21-10\r\nx-cdn-request-id: 7fff1f36f5bd38e47181658100e436c4\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1990,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"a28882a0f6f4259b839c46595cf824a4","sha1":"e0e736ea53d20349559b52c413cae19a7abb8c96","sha256":"c163852d50c6f581c0ba771911feacbbb43b47bc7b157722778a0f47cae4e0f7","sha512":"c444afde3d1877b363c6b3a78674debe2f566ce27bafa15ad29a949f5e155ab03806b8e8799041b176d86e74cee81ebd8f359c49ec9e11d2c6cbf2fb61af2bfb","ssdeep":"","tlshash":"6541e67fad363b1d1224a81867f265753d9a594a2c4d03b750b730220cda79826cf29c","first_seen":"2025-10-13T02:05:29.065866Z","last_seen":"2026-05-23T18:41:03.113619Z","times_seen":78,"resource_available":false,"data":null}},"time_used":260,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":260,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"8vpfnx.bqkmk.cn/ftl/commonPage/images/favicon/favicon_1758.png.base64","fqdn":"8vpfnx.bqkmk.cn","domain":"bqkmk.cn","tld":"cn"},"ip":{"addr":"103.198.200.7","port":443,"asn":138915,"as":"Kaopu Cloud HK Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://rb88t.com:8989/","date":"2025-10-31T04:45:39.417Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.bqkmk.cn","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 20 Oct 2025 00:00:00 GMT","end":"Tue, 20 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"CD:A6:04:CF:32:73:E5:24:43:2F:6D:D8:78:B9:CF:F5:FF:75:2B:72","sha256":"D4:BA:B1:C0:7D:2E:00:30:EC:84:7E:26:6D:DB:2A:4F:A5:87:A0:9E:7F:A3:96:24:96:6E:6E:3E:1C:A4:D5:5D"}}},"request":{"raw":"GET /ftl/commonPage/images/favicon/favicon_1758.png.base64 HTTP/1.1\r\nHost: 8vpfnx.bqkmk.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://rb88t.com:8989\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rb88t.com:8989/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/plain; charset=utf-8\r\ncontent-length: 787\r\nserver: Default-server-KS-CLOUD-XG-FOREIGN-12-04\r\netag: \"68d20d43-313\"\r\ndate: Mon, 20 Oct 2025 04:25:46 GMT\r\nlast-modified: Tue, 23 Sep 2025 03:00:19 GMT\r\nexpires: Wed, 19 Nov 2025 04:25:46 GMT\r\nage: 951593\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nx-frame-options: SAMEORIGIN\r\nx-cache: MISS\r\nuuid: -\r\nout-line: gb-cdn-212\r\nx-link-via: xg21:443;xg12:80;\r\nx-cache-status: MISS from KS-CLOUD-XG-FOREIGN-12-04, HIT from KS-CLOUD-XG-FOREIGN-21-11\r\nx-cdn-request-id: 20c6a0b656130f6b8d3990931639eb89\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":787,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"7b0c9827674508bf9e14f37d4bb346ba","sha1":"6277cbd52743249b83008970b513ec68c754a596","sha256":"0f512b8d92cce977fc32b606fdbfb24ea4ebfa2b82c567967a5e9d3ebfbee09d","sha512":"2cbda8b04d2917034da41f01c03c13ef96b57f72d4fab194c50e64d99f00b581ac970b1ee224fa8ff625ddf047fd54738ab38d181622f4bf3a24adfffe7b9858","ssdeep":"","tlshash":"f201757081190ee2e9a5ea697270004e8f22ed86651582c468b537fa90987a4e3dfde0","first_seen":"2023-10-16T02:24:17Z","last_seen":"2026-06-04T13:13:28.782791Z","times_seen":866,"resource_available":false,"data":null}},"time_used":260,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":260,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"8vpfnx.bqkmk.cn/ftl/commonPage/images/partner/partner-hongtu-gold.png.base64","fqdn":"8vpfnx.bqkmk.cn","domain":"bqkmk.cn","tld":"cn"},"ip":{"addr":"103.198.200.7","port":443,"asn":138915,"as":"Kaopu Cloud HK Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://rb88t.com:8989/","date":"2025-10-31T04:45:39.038Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.bqkmk.cn","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 20 Oct 2025 00:00:00 GMT","end":"Tue, 20 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"CD:A6:04:CF:32:73:E5:24:43:2F:6D:D8:78:B9:CF:F5:FF:75:2B:72","sha256":"D4:BA:B1:C0:7D:2E:00:30:EC:84:7E:26:6D:DB:2A:4F:A5:87:A0:9E:7F:A3:96:24:96:6E:6E:3E:1C:A4:D5:5D"}}},"request":{"raw":"GET /ftl/commonPage/images/partner/partner-hongtu-gold.png.base64 HTTP/1.1\r\nHost: 8vpfnx.bqkmk.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://rb88t.com:8989\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rb88t.com:8989/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/plain; charset=utf-8\r\ncontent-length: 109381\r\nserver: Default-server-KS-CLOUD-XG-FOREIGN-12-01\r\netag: \"68b69275-1ab45\"\r\ndate: Mon, 20 Oct 2025 04:19:14 GMT\r\nlast-modified: Tue, 02 Sep 2025 06:45:09 GMT\r\nexpires: Wed, 19 Nov 2025 04:19:14 GMT\r\nage: 951985\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\nx-frame-options: SAMEORIGIN\r\nx-cache: HIT\r\nuuid: -\r\nout-line: gb-cdn-212\r\nx-link-via: xg21:443;xg12:80;\r\nx-cache-status: MISS from KS-CLOUD-XG-FOREIGN-12-01, HIT from KS-CLOUD-XG-FOREIGN-21-07\r\nx-cdn-request-id: 64dbc2a0c69146ea1a9ee317170f190c\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":109381,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"1f1a5a7aa13ee13ebd33338b3b1b0680","sha1":"92a135287652a3582477b8fbe0420847ad4a8c6a","sha256":"1d794bb495091aa98a44b50f428eae59185a9b9c55feec3045ebcb5ec1de796f","sha512":"1d4021f01cda849ef9c12b7f9edccd441892aa8e3bd1a5bc165e88c561c24291191aeb1a3a205214505c1399012d07581bfabf4803d9509da45db81f0e101a61","ssdeep":"3072:vutRp5cNyBLZQC/brFWegWNnv7LztzwcpG1cTeJrB6:mBiNyBJ9We1R7LhD6cm6","tlshash":"eeb312117f655c20f47443b424ebfa34a4ac4cf7d854a8a287a4b1dedf88fa0955193b","first_seen":"2025-09-18T16:22:49.442313Z","last_seen":"2026-04-17T04:44:35.22244Z","times_seen":1728,"resource_available":false,"data":null}},"time_used":302,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":281,"receive":21,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"8vpfnx.bqkmk.cn/ftl/commonPage/images/partner/partner-hongtu-goldGradient.png.base64","fqdn":"8vpfnx.bqkmk.cn","domain":"bqkmk.cn","tld":"cn"},"ip":{"addr":"103.198.200.7","port":443,"asn":138915,"as":"Kaopu Cloud HK Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://rb88t.com:8989/","date":"2025-10-31T04:45:39.062Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.bqkmk.cn","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 20 Oct 2025 00:00:00 GMT","end":"Tue, 20 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"CD:A6:04:CF:32:73:E5:24:43:2F:6D:D8:78:B9:CF:F5:FF:75:2B:72","sha256":"D4:BA:B1:C0:7D:2E:00:30:EC:84:7E:26:6D:DB:2A:4F:A5:87:A0:9E:7F:A3:96:24:96:6E:6E:3E:1C:A4:D5:5D"}}},"request":{"raw":"GET /ftl/commonPage/images/partner/partner-hongtu-goldGradient.png.base64 HTTP/1.1\r\nHost: 8vpfnx.bqkmk.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://rb88t.com:8989\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rb88t.com:8989/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/plain; charset=utf-8\r\ncontent-length: 124335\r\nserver: Default-server-KS-CLOUD-XG-FOREIGN-12-04\r\netag: \"68b69275-1e5af\"\r\ndate: Mon, 20 Oct 2025 04:19:13 GMT\r\nlast-modified: Tue, 02 Sep 2025 06:45:09 GMT\r\nexpires: Wed, 19 Nov 2025 04:19:13 GMT\r\nage: 951985\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\nx-frame-options: SAMEORIGIN\r\nx-cache: HIT\r\nuuid: -\r\nout-line: gb-cdn-211\r\nx-link-via: xg21:443;xg12:80;\r\nx-cache-status: MISS from KS-CLOUD-XG-FOREIGN-12-04, HIT from KS-CLOUD-XG-FOREIGN-21-08\r\nx-cdn-request-id: e6d0d491cab3688b53a9f105c8791a51\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":124335,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"ce2a68b63bdc53b665753c51c725aa67","sha1":"bf0e7f53993078efbf6fd58e0086140aa483bd0b","sha256":"1746360cb57da17f40d53702373975c6a089bdbc3b30ad614a2aee3861e6ee69","sha512":"ce5aee0c48488099c795f67dc7f68f03fdd4554a66b03ef5c259f5b7d8edaa69a2d142a898468a54e9e4795e5fea843ff5e926a06d4233b26d2561ca6efb5468","ssdeep":"3072:SlBd9XIEDaQchMCJ1v1kKAr1p7IQWvMsy:Sh9XRNcGCJtuNrv7e3y","tlshash":"f5c312445f984f9af1eee8465005ed5cbc509192efef6df027d3f4a78888c818396b29","first_seen":"2025-09-06T20:06:14.226062Z","last_seen":"2026-04-17T08:59:04.359738Z","times_seen":1771,"resource_available":false,"data":null}},"time_used":411,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":389,"receive":22,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"8vpfnx.bqkmk.cn/ftl/ysb1758-02/images/index-chess.jpg.base64","fqdn":"8vpfnx.bqkmk.cn","domain":"bqkmk.cn","tld":"cn"},"ip":{"addr":"103.198.200.7","port":443,"asn":138915,"as":"Kaopu Cloud HK Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://rb88t.com:8989/","date":"2025-10-31T04:45:39.462Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.bqkmk.cn","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 20 Oct 2025 00:00:00 GMT","end":"Tue, 20 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"CD:A6:04:CF:32:73:E5:24:43:2F:6D:D8:78:B9:CF:F5:FF:75:2B:72","sha256":"D4:BA:B1:C0:7D:2E:00:30:EC:84:7E:26:6D:DB:2A:4F:A5:87:A0:9E:7F:A3:96:24:96:6E:6E:3E:1C:A4:D5:5D"}}},"request":{"raw":"GET /ftl/ysb1758-02/images/index-chess.jpg.base64 HTTP/1.1\r\nHost: 8vpfnx.bqkmk.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://rb88t.com:8989\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rb88t.com:8989/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/plain; charset=utf-8\r\ncontent-length: 16110\r\nserver: Default-server-KS-CLOUD-XG-FOREIGN-12-04\r\netag: \"68d38fef-3eee\"\r\ndate: Wed, 22 Oct 2025 08:45:21 GMT\r\nlast-modified: Wed, 24 Sep 2025 06:30:07 GMT\r\nexpires: Fri, 21 Nov 2025 08:45:21 GMT\r\nage: 763217\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\nx-frame-options: SAMEORIGIN\r\nx-cache: MISS\r\nuuid: -\r\nout-line: gb-cdn-211\r\nx-link-via: xg21:443;xg12:80;\r\nx-cache-status: MISS from KS-CLOUD-XG-FOREIGN-12-04, HIT from KS-CLOUD-XG-FOREIGN-21-10\r\nx-cdn-request-id: 200efff41535b5eef32d2bddc752c6db\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":16110,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"faf1998267e959c00a7537a2c427a6a3","sha1":"b3764ea5d30ea5ecb9c6d02c435fb50bfc7685b3","sha256":"6fcfdd0a17f8fce68f28f10ec7cd33756f1be16c76c4e4a01fa9927689a9779c","sha512":"c4e8e79aea2e445581f051b4da184bae3ee9caf7a519368e71dcc3ae66f22cf1b9a1d743a50d77e4feba45ddbb2dae054dcef15cbc69da3be5c9d7c01adc07f7","ssdeep":"384:kocH1CyrKXqDybLFkx+29dIhiV7PMp7BQFup4TSJ+Hs:aH1C8KXqDybLSxrixUCySJd","tlshash":"ff72d037300fdabd08946a83155b498a9e62bcff2425f020e179f8b127134e6e3792f5","first_seen":"2025-10-11T11:36:46.138122Z","last_seen":"2026-05-23T18:41:03.091407Z","times_seen":85,"resource_available":false,"data":null}},"time_used":272,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":271,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rb88t.com:8989/commonPage/lan/i18n.js?t=1761885935.87","fqdn":"rb88t.com","domain":"rb88t.com","tld":"com"},"ip":{"addr":"34.96.219.82","port":8989,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rb88t.com:8989/","date":"2025-10-31T04:45:36.289Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rb88t.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 16 Oct 2025 17:09:31 GMT","end":"Wed, 14 Jan 2026 17:09:30 GMT"},"fingerprint":{"sha1":"1E:C2:B3:67:0C:77:84:F1:9F:8D:AD:21:1B:38:A6:D8:C7:76:57:1C","sha256":"3B:31:2B:A2:8D:4D:4D:EC:78:17:C6:E3:F3:EA:94:02:0E:AF:0F:86:CC:F4:27:C3:4D:68:DF:1D:2C:E4:19:9B"}}},"request":{"raw":"GET /commonPage/lan/i18n.js?t=1761885935.87 HTTP/1.1\r\nHost: rb88t.com:8989\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rb88t.com:8989/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 31 Oct 2025 04:45:36 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\nx-frame-options: SAMEORIGIN\r\nuuid: 01758-01-00000000-17618859365492\r\nout-line: gb-site-204\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1310,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (1217)","md5":"82d931e4a388fdea770a839c05b34308","sha1":"3ef89f5840e894c2da824583a47be1890de58936","sha256":"8c0bc69637b40cc07e216be3b482438c4dac007501c3c772d19beed079b84e15","sha512":"59b6af7623b4e2bb3905415da65f68ab2c1ac08ef73519b5aa81a7d9d3dc5b7e695f698baa539f439c543397d5e701d7c9b60be067b4a124542b76903b2b8b18","ssdeep":"","tlshash":"f521af68f7e051d32d5e8aa3ed653e6f11b5497d04a73507837835ce01b9ba79c6c408","first_seen":"2025-10-31T04:46:03.88192Z","last_seen":"2025-10-31T04:46:03.88192Z","times_seen":1,"resource_available":true,"data":null}},"time_used":363,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":363,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-31","alert":"Sinkholed","trigger":"rb88t.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-31","alert":"Sinkholed","trigger":"rb88t.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"8vpfnx.bqkmk.cn/ftl/commonPage/js/jquery/jquery.nicescroll.min.js","fqdn":"8vpfnx.bqkmk.cn","domain":"bqkmk.cn","tld":"cn"},"ip":{"addr":"103.198.200.7","port":443,"asn":138915,"as":"Kaopu Cloud HK Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rb88t.com:8989/","date":"2025-10-31T04:45:36.312Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.bqkmk.cn","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 20 Oct 2025 00:00:00 GMT","end":"Tue, 20 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"CD:A6:04:CF:32:73:E5:24:43:2F:6D:D8:78:B9:CF:F5:FF:75:2B:72","sha256":"D4:BA:B1:C0:7D:2E:00:30:EC:84:7E:26:6D:DB:2A:4F:A5:87:A0:9E:7F:A3:96:24:96:6E:6E:3E:1C:A4:D5:5D"}}},"request":{"raw":"GET /ftl/commonPage/js/jquery/jquery.nicescroll.min.js HTTP/1.1\r\nHost: 8vpfnx.bqkmk.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rb88t.com:8989/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 17446\r\nserver: Default-server-KS-CLOUD-XG-FOREIGN-12-04\r\netag: W/\"5d848f4f-fc8b\"\r\ndate: Mon, 20 Oct 2025 04:19:08 GMT\r\nlast-modified: Fri, 20 Sep 2019 08:35:27 GMT\r\nexpires: Wed, 19 Nov 2025 04:19:08 GMT\r\nage: 951989\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\nx-frame-options: SAMEORIGIN\r\nx-cache: HIT\r\nuuid: -\r\nout-line: gb-cdn-212\r\nx-link-via: xg21:443;xg12:80;\r\nx-cache-status: MISS from KS-CLOUD-XG-FOREIGN-12-04, HIT from KS-CLOUD-XG-FOREIGN-21-11\r\nx-cdn-request-id: eb567703da5d21741f7167d1a8433be6\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":64651,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (64577)","md5":"b5bc8cd626b389bde727a91e6ce79436","sha1":"3df6c39300ac286cf596b3bda273cb39ff825429","sha256":"a1eb48eeb3b3f2ba41940d3041464f0b386b7a7c4a8acb42f3017e691f4b116e","sha512":"2c1dde58ce83d9b716919dfc42602aef3022be012b3f92e61b17b674303ecbf0b9d308064b6d6c2443cf3e3dfd36bfb332eab62e64b56bef0be801e6f4610f12","ssdeep":"768:CwJl9VwAdGuMbJVAOi9ee9RjOEe1sdMv5rjITry:Cxb7AdRjOEKhHay","tlshash":"9553a7cd7522346b05de5235d18b4b4a623a9857730b90e4762c8cf46d29bbaf223f7c","first_seen":"2023-03-07T01:14:38Z","last_seen":"2026-07-26T05:01:44.848713Z","times_seen":18016,"resource_available":true,"data":null}},"time_used":1038,"timings":{"blocked":501,"dns":0,"connect":0,"send":0,"wait":534,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"8vpfnx.bqkmk.cn/ftl/ysb1758-02/themes/images/Message.gif.base64","fqdn":"8vpfnx.bqkmk.cn","domain":"bqkmk.cn","tld":"cn"},"ip":{"addr":"103.198.200.7","port":443,"asn":138915,"as":"Kaopu Cloud HK Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://rb88t.com:8989/","date":"2025-10-31T04:45:39.412Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.bqkmk.cn","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 20 Oct 2025 00:00:00 GMT","end":"Tue, 20 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"CD:A6:04:CF:32:73:E5:24:43:2F:6D:D8:78:B9:CF:F5:FF:75:2B:72","sha256":"D4:BA:B1:C0:7D:2E:00:30:EC:84:7E:26:6D:DB:2A:4F:A5:87:A0:9E:7F:A3:96:24:96:6E:6E:3E:1C:A4:D5:5D"}}},"request":{"raw":"GET /ftl/ysb1758-02/themes/images/Message.gif.base64 HTTP/1.1\r\nHost: 8vpfnx.bqkmk.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://rb88t.com:8989\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rb88t.com:8989/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/plain; charset=utf-8\r\ncontent-length: 1070\r\nserver: Default-server-KS-CLOUD-XG-FOREIGN-12-01\r\netag: \"68d38ff0-42e\"\r\ndate: Wed, 22 Oct 2025 08:45:20 GMT\r\nlast-modified: Wed, 24 Sep 2025 06:30:08 GMT\r\nexpires: Fri, 21 Nov 2025 08:45:20 GMT\r\nage: 763219\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\nx-frame-options: SAMEORIGIN\r\nx-cache: HIT\r\nuuid: -\r\nout-line: gb-cdn-212\r\nx-link-via: xg21:443;xg12:80;\r\nx-cache-status: MISS from KS-CLOUD-XG-FOREIGN-12-01, HIT from KS-CLOUD-XG-FOREIGN-21-07\r\nx-cdn-request-id: 1fe0541ecd3a93fd49da5440dcb67e31\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1070,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"cfe82f3a661a7022b5e7b74146f9ecb9","sha1":"9c8cf36f9d37b8b2956685b85097bbd5125508b7","sha256":"1a7833e7b4953b8c54584191f12259a9f64f13585875bb317438d0efb3261d32","sha512":"9a6d0aa9a033d4e7134b2f099f1843759958e0409fed9ca1f0da333679eda367640d32e6bdab8cff97aa3df5c92bf3ce56099daa7c1c9d7ae7ea8815e1297903","ssdeep":"","tlshash":"9411c43e83005184ba8fd688ff181db0bef612cbd85242881a44fd32cf15d8005ee062","first_seen":"2025-10-13T02:05:29.272803Z","last_seen":"2026-05-23T18:41:03.045594Z","times_seen":78,"resource_available":false,"data":null}},"time_used":260,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":260,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"8vpfnx.bqkmk.cn/ftl/ysb1758-02/images/index-casino.jpg.base64","fqdn":"8vpfnx.bqkmk.cn","domain":"bqkmk.cn","tld":"cn"},"ip":{"addr":"103.198.200.7","port":443,"asn":138915,"as":"Kaopu Cloud HK Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://rb88t.com:8989/","date":"2025-10-31T04:45:39.458Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.bqkmk.cn","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 20 Oct 2025 00:00:00 GMT","end":"Tue, 20 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"CD:A6:04:CF:32:73:E5:24:43:2F:6D:D8:78:B9:CF:F5:FF:75:2B:72","sha256":"D4:BA:B1:C0:7D:2E:00:30:EC:84:7E:26:6D:DB:2A:4F:A5:87:A0:9E:7F:A3:96:24:96:6E:6E:3E:1C:A4:D5:5D"}}},"request":{"raw":"GET /ftl/ysb1758-02/images/index-casino.jpg.base64 HTTP/1.1\r\nHost: 8vpfnx.bqkmk.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://rb88t.com:8989\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rb88t.com:8989/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/plain; charset=utf-8\r\ncontent-length: 15757\r\nserver: Default-server-KS-CLOUD-XG-FOREIGN-12-03\r\netag: \"68d38fef-3d8d\"\r\ndate: Wed, 22 Oct 2025 08:45:20 GMT\r\nlast-modified: Wed, 24 Sep 2025 06:30:07 GMT\r\nexpires: Fri, 21 Nov 2025 08:45:20 GMT\r\nage: 763218\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\nx-frame-options: SAMEORIGIN\r\nx-cache: MISS\r\nuuid: -\r\nout-line: gb-cdn-211\r\nx-link-via: xg21:443;xg12:80;\r\nx-cache-status: MISS from KS-CLOUD-XG-FOREIGN-12-03, HIT from KS-CLOUD-XG-FOREIGN-21-04\r\nx-cdn-request-id: b3cb6913bd5aca10e9cdb916124c598c\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":15757,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"fcfa84f35c9906dbf32eefe49146b994","sha1":"8e8e227c23837370f3b4ab0a5488c989e580f3cd","sha256":"59f6a7a46e102246786efbc12dba1d25c29576246882a817ffdceaf8874754fa","sha512":"e67913d2a3de7063d897dd69a4f42af653ed00fefe80b4ca6e2d29faac4af7690cb5b19c0470241bc4fdc74d482f6e10e26b232dfda21587249033d611f50231","ssdeep":"384:ZgiqUQ+4ay87Kj70jZpuVbBZdcLzcSBiaJbXTnqN:q2b4MejQjZEJR2zR9JbXLqN","tlshash":"8762e139d9d6aa1b4efb14743e4aeed04a047c43b069b89bcddb80cd2d6e540399b8d4","first_seen":"2023-04-16T16:45:37Z","last_seen":"2026-06-07T07:30:11.563383Z","times_seen":7469,"resource_available":false,"data":null}},"time_used":269,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":268,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"8vpfnx.bqkmk.cn/ftl//commonPage/commonContent/nav/images/sub-arrow.png.base64","fqdn":"8vpfnx.bqkmk.cn","domain":"bqkmk.cn","tld":"cn"},"ip":{"addr":"103.198.200.7","port":443,"asn":138915,"as":"Kaopu Cloud HK Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://rb88t.com:8989/","date":"2025-10-31T04:45:38.270Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.bqkmk.cn","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 20 Oct 2025 00:00:00 GMT","end":"Tue, 20 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"CD:A6:04:CF:32:73:E5:24:43:2F:6D:D8:78:B9:CF:F5:FF:75:2B:72","sha256":"D4:BA:B1:C0:7D:2E:00:30:EC:84:7E:26:6D:DB:2A:4F:A5:87:A0:9E:7F:A3:96:24:96:6E:6E:3E:1C:A4:D5:5D"}}},"request":{"raw":"GET /ftl//commonPage/commonContent/nav/images/sub-arrow.png.base64 HTTP/1.1\r\nHost: 8vpfnx.bqkmk.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://rb88t.com:8989\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rb88t.com:8989/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/plain; charset=utf-8\r\ncontent-length: 227\r\nserver: Default-server-KS-CLOUD-XG-FOREIGN-12-03\r\netag: \"667bb57c-e3\"\r\ndate: Mon, 20 Oct 2025 04:25:44 GMT\r\nlast-modified: Wed, 26 Jun 2024 06:30:20 GMT\r\nexpires: Wed, 19 Nov 2025 04:25:44 GMT\r\nage: 951593\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nx-frame-options: SAMEORIGIN\r\nx-cache: HIT\r\nuuid: -\r\nout-line: gb-cdn-211\r\nx-link-via: xg21:443;xg12:80;\r\nx-cache-status: MISS from KS-CLOUD-XG-FOREIGN-12-03, HIT from KS-CLOUD-XG-FOREIGN-21-01\r\nx-cdn-request-id: 3be5647a22c73b9a688d05cb91b5979e\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":227,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"77546ee8bcab279aee067f7794d08541","sha1":"e1ace21ee1e968151b5b0ad8da4b0ebf8420bdcf","sha256":"9f967376ac77e445b313fbebbab9a4572c0984edb80f6b5baa9c10f9bf68d647","sha512":"d56ff9fcf76a2153287b4b016b7e59f40c60859b36ac5d12bc96a43237a828cfcd4c0b5de142dbf178ebccef9092c3ae167ea7e3a59d359f50db78df36263b21","ssdeep":"","tlshash":"09d097310605283062ce68013802d1000e222b8f52a760407ff86023581b3c88a9a3c0","first_seen":"2024-09-24T19:10:13Z","last_seen":"2026-06-06T23:51:10.814802Z","times_seen":2088,"resource_available":false,"data":null}},"time_used":655,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":655,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"8vpfnx.bqkmk.cn/ftl//commonPage/commonContent/nav/images/navbar-sub-sprite2.png.base64","fqdn":"8vpfnx.bqkmk.cn","domain":"bqkmk.cn","tld":"cn"},"ip":{"addr":"103.198.200.7","port":443,"asn":138915,"as":"Kaopu Cloud HK Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://rb88t.com:8989/","date":"2025-10-31T04:45:38.273Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.bqkmk.cn","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 20 Oct 2025 00:00:00 GMT","end":"Tue, 20 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"CD:A6:04:CF:32:73:E5:24:43:2F:6D:D8:78:B9:CF:F5:FF:75:2B:72","sha256":"D4:BA:B1:C0:7D:2E:00:30:EC:84:7E:26:6D:DB:2A:4F:A5:87:A0:9E:7F:A3:96:24:96:6E:6E:3E:1C:A4:D5:5D"}}},"request":{"raw":"GET /ftl//commonPage/commonContent/nav/images/navbar-sub-sprite2.png.base64 HTTP/1.1\r\nHost: 8vpfnx.bqkmk.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://rb88t.com:8989\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rb88t.com:8989/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/plain; charset=utf-8\r\ncontent-length: 73333\r\nserver: Default-server-KS-CLOUD-XG-FOREIGN-12-04\r\netag: \"68b69275-11e75\"\r\ndate: Mon, 20 Oct 2025 04:25:44 GMT\r\nlast-modified: Tue, 02 Sep 2025 06:45:09 GMT\r\nexpires: Wed, 19 Nov 2025 04:25:44 GMT\r\nage: 951593\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\nx-frame-options: SAMEORIGIN\r\nx-cache: MISS\r\nuuid: -\r\nout-line: gb-cdn-212\r\nx-link-via: xg21:443;xg12:80;\r\nx-cache-status: MISS from KS-CLOUD-XG-FOREIGN-12-04, HIT from KS-CLOUD-XG-FOREIGN-21-01\r\nx-cdn-request-id: eb2ec337cd9d453f9aa1535d458f052f\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":73333,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"e09c7b111da72ff020d33a8978446fbc","sha1":"aa301c18846db062dc85f330f615e3462167ed51","sha256":"d2a00ca8254c1316538c612d648dd11c093e17fad8a9e2c2823c3a65373cd401","sha512":"e2d07eb9a5c109a3e73fa18a409691fe25ffe97d2e82d3f0092a30bf0be6c5bef387e3e190838d5eb80ea41d41fddcef16df874d4aaee91b5ff35d8861cc68cf","ssdeep":"1536:k9sSaVz0lJT/xf5n6O7nn+7lSBsyeUPlVVdxKLQ9oVIrBwvUou:k9sftctT+5g2U/ReQ9oV1Uou","tlshash":"1763026f2e543c067e2466fc359b8b10001d5f63603de7dea0a9fa23f297196f24ab54","first_seen":"2025-09-18T16:22:49.423406Z","last_seen":"2026-04-18T04:41:00.368806Z","times_seen":639,"resource_available":false,"data":null}},"time_used":690,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":656,"receive":34,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"8vpfnx.bqkmk.cn/ftl//commonPage/commonContent/nav/images/sub-arrow.png.base64","fqdn":"8vpfnx.bqkmk.cn","domain":"bqkmk.cn","tld":"cn"},"ip":{"addr":"103.198.200.7","port":443,"asn":138915,"as":"Kaopu Cloud HK Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://rb88t.com:8989/","date":"2025-10-31T04:45:38.285Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.bqkmk.cn","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 20 Oct 2025 00:00:00 GMT","end":"Tue, 20 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"CD:A6:04:CF:32:73:E5:24:43:2F:6D:D8:78:B9:CF:F5:FF:75:2B:72","sha256":"D4:BA:B1:C0:7D:2E:00:30:EC:84:7E:26:6D:DB:2A:4F:A5:87:A0:9E:7F:A3:96:24:96:6E:6E:3E:1C:A4:D5:5D"}}},"request":{"raw":"GET /ftl//commonPage/commonContent/nav/images/sub-arrow.png.base64 HTTP/1.1\r\nHost: 8vpfnx.bqkmk.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://rb88t.com:8989\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rb88t.com:8989/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/plain; charset=utf-8\r\ncontent-length: 227\r\nserver: Default-server-KS-CLOUD-XG-FOREIGN-12-03\r\netag: \"667bb57c-e3\"\r\ndate: Mon, 20 Oct 2025 04:25:44 GMT\r\nlast-modified: Wed, 26 Jun 2024 06:30:20 GMT\r\nexpires: Wed, 19 Nov 2025 04:25:44 GMT\r\nage: 951594\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nx-frame-options: SAMEORIGIN\r\nx-cache: HIT\r\nuuid: -\r\nout-line: gb-cdn-211\r\nx-link-via: xg21:443;xg12:80;\r\nx-cache-status: MISS from KS-CLOUD-XG-FOREIGN-12-03, HIT from KS-CLOUD-XG-FOREIGN-21-01\r\nx-cdn-request-id: ceceb8dcf230cdb335b4b550c355621f\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":227,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"77546ee8bcab279aee067f7794d08541","sha1":"e1ace21ee1e968151b5b0ad8da4b0ebf8420bdcf","sha256":"9f967376ac77e445b313fbebbab9a4572c0984edb80f6b5baa9c10f9bf68d647","sha512":"d56ff9fcf76a2153287b4b016b7e59f40c60859b36ac5d12bc96a43237a828cfcd4c0b5de142dbf178ebccef9092c3ae167ea7e3a59d359f50db78df36263b21","ssdeep":"","tlshash":"09d097310605283062ce68013802d1000e222b8f52a760407ff86023581b3c88a9a3c0","first_seen":"2024-09-24T19:10:13Z","last_seen":"2026-06-06T23:51:10.814802Z","times_seen":2088,"resource_available":false,"data":null}},"time_used":715,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":715,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"8vpfnx.bqkmk.cn/ftl/commonPage/js/idangerous.swiper.min.js","fqdn":"8vpfnx.bqkmk.cn","domain":"bqkmk.cn","tld":"cn"},"ip":{"addr":"103.198.200.7","port":443,"asn":138915,"as":"Kaopu Cloud HK Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rb88t.com:8989/","date":"2025-10-31T04:45:36.297Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.bqkmk.cn","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 20 Oct 2025 00:00:00 GMT","end":"Tue, 20 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"CD:A6:04:CF:32:73:E5:24:43:2F:6D:D8:78:B9:CF:F5:FF:75:2B:72","sha256":"D4:BA:B1:C0:7D:2E:00:30:EC:84:7E:26:6D:DB:2A:4F:A5:87:A0:9E:7F:A3:96:24:96:6E:6E:3E:1C:A4:D5:5D"}}},"request":{"raw":"GET /ftl/commonPage/js/idangerous.swiper.min.js HTTP/1.1\r\nHost: 8vpfnx.bqkmk.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rb88t.com:8989/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 11957\r\nserver: Default-server-KS-CLOUD-XG-FOREIGN-12-03\r\netag: W/\"64d5b951-b083\"\r\ndate: Mon, 20 Oct 2025 04:19:08 GMT\r\nlast-modified: Fri, 11 Aug 2023 04:30:09 GMT\r\nexpires: Wed, 19 Nov 2025 04:19:08 GMT\r\nage: 951988\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\nx-frame-options: SAMEORIGIN\r\nx-cache: HIT\r\nuuid: -\r\nout-line: gb-cdn-212\r\nx-link-via: xg21:443;xg12:80;\r\nx-cache-status: MISS from KS-CLOUD-XG-FOREIGN-12-03, HIT from KS-CLOUD-XG-FOREIGN-21-04\r\nx-cdn-request-id: c6f7aa7d609aacfee2c4e7dc701893f2\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":45187,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (32034)","md5":"f15409fb02c527ce1f66a2fd3c4aa0e9","sha1":"1e1e1bcc0f49e99e14ba34991cffe0745178d302","sha256":"1a1b5d3d6fbfc28abe37a668abd59494208c63c5f0b5d040cf4bbbd137f87c27","sha512":"66a384d6ad5fba862e778e24c43326a718328b6f860469fb5eb69c2687b0bbdc3c2dfa9049b0e3d5509214db1dbec4477f5c3654dc04446a505379a4300d4908","ssdeep":"768:oTFZ8CkWyYzh9MTvl7prcAgQW5ppZ+rPPWRqKDyBuq0t:cZiY9uTJuAgQW5LZ+rPPWRLt","tlshash":"5613f8c1b32031a741f3626e91fecb4271f54966aa05d4dcb5ed84c41ab489a03beff9","first_seen":"2023-08-15T12:01:05Z","last_seen":"2026-07-26T05:01:44.850908Z","times_seen":17499,"resource_available":true,"data":null}},"time_used":1906,"timings":{"blocked":544,"dns":1,"connect":281,"send":0,"wait":788,"receive":1,"ssl":287},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"8vpfnx.bqkmk.cn/ftl/commonPage/js/theme/default/layer.css?v=3.1.0","fqdn":"8vpfnx.bqkmk.cn","domain":"bqkmk.cn","tld":"cn"},"ip":{"addr":"103.198.200.7","port":443,"asn":138915,"as":"Kaopu Cloud HK Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rb88t.com:8989/","date":"2025-10-31T04:45:38.113Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.bqkmk.cn","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 20 Oct 2025 00:00:00 GMT","end":"Tue, 20 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"CD:A6:04:CF:32:73:E5:24:43:2F:6D:D8:78:B9:CF:F5:FF:75:2B:72","sha256":"D4:BA:B1:C0:7D:2E:00:30:EC:84:7E:26:6D:DB:2A:4F:A5:87:A0:9E:7F:A3:96:24:96:6E:6E:3E:1C:A4:D5:5D"}}},"request":{"raw":"GET /ftl/commonPage/js/theme/default/layer.css?v=3.1.0 HTTP/1.1\r\nHost: 8vpfnx.bqkmk.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rb88t.com:8989/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css\r\ncontent-length: 3111\r\nserver: Default-server-KS-CLOUD-XG-FOREIGN-12-01\r\netag: W/\"6131d862-48e4\"\r\ndate: Mon, 20 Oct 2025 04:19:08 GMT\r\nlast-modified: Fri, 03 Sep 2021 08:10:10 GMT\r\nexpires: Wed, 19 Nov 2025 04:19:08 GMT\r\nage: 951989\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\nx-frame-options: SAMEORIGIN\r\nx-cache: HIT\r\nuuid: -\r\nout-line: gb-cdn-212\r\nx-link-via: xg21:443;xg12:80;\r\nx-cache-status: MISS from KS-CLOUD-XG-FOREIGN-12-01, HIT from KS-CLOUD-XG-FOREIGN-21-08\r\nx-cdn-request-id: 16f1bf7a09125da6e51dd5279bc6f7fe\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":18660,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"5cf9259b7dd27aacd46161ec23d261cf","sha1":"ba0c399616a5ae9cdd8aec5b76ba4aae4822367c","sha256":"7f73a66b3a9a38576d124b6243a8984d795028e3493b8fa3f688d8dbe10cbccc","sha512":"834ae73090b76f7dad48a5efa850a0009d5104cfcab402b7c343ceb49410584c3a60a4eea800d366f380dc8364f5f00e3d38101c379fd5fa19f9492781d9ada1","ssdeep":"192:99OUf4PBsPIOpyNYpyBVpkgdpkqg60yQG0yrGlwSlyDXLIXiYHIli5aT6XeFTfb1:C4CyFP/FgkFxUE6QS","tlshash":"b7821de599a31584751b8214dbee267232f85c83e40fcc6cf7df354f4f086a592a1a4b","first_seen":"2023-04-05T18:30:47Z","last_seen":"2026-07-06T07:37:01.527204Z","times_seen":17719,"resource_available":false,"data":null}},"time_used":261,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":261,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rb88t.com:8989/mobile-api/v5/origin/getFloat.html","fqdn":"rb88t.com","domain":"rb88t.com","tld":"com"},"ip":{"addr":"34.96.219.82","port":8989,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://rb88t.com:8989/","date":"2025-10-31T04:45:38.134Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rb88t.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 16 Oct 2025 17:09:31 GMT","end":"Wed, 14 Jan 2026 17:09:30 GMT"},"fingerprint":{"sha1":"1E:C2:B3:67:0C:77:84:F1:9F:8D:AD:21:1B:38:A6:D8:C7:76:57:1C","sha256":"3B:31:2B:A2:8D:4D:4D:EC:78:17:C6:E3:F3:EA:94:02:0E:AF:0F:86:CC:F4:27:C3:4D:68:DF:1D:2C:E4:19:9B"}}},"request":{"raw":"POST /mobile-api/v5/origin/getFloat.html HTTP/1.1\r\nHost: rb88t.com:8989\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/javascript, */*; q=0.01\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 68\r\nOrigin: https://rb88t.com:8989\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rb88t.com:8989/\r\nCookie: sticket=qSm1NbVZtTnpZeUxU\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 31 Oct 2025 04:45:38 GMT\r\ncontent-type: text/html;charset=utf-8\r\ncontent-length: 138\r\nset-cookie: route=4bf55577ceef236451cccfe77519a18d; Path=/\r\naccess-control-allow-origin: https://rb88t.com:8989\r\naccess-control-allow-methods: *\r\naccess-control-max-age: 3600\r\naccess-control-allow-headers: Content-Type,Access-Token,X-Requested-With\r\ncontent-disposition: inline;filename=f.txt\r\nsub-sys: mobile\r\nx-frame-options: SAMEORIGIN\r\nuuid: 01758-01-00000000-1761885938894e\r\nout-line: gb-site-204\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":138,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"JSON text data","md5":"18da76ef30828950957abc98b28e7327","sha1":"dc5c652bbb18e3bf5d2f14776ce2e10710e0decb","sha256":"45c7e7ed630f2a5c7a48a85a78bf558f3a831d66085669a7953dfb0ea646fa54","sha512":"a0e384d5b3e7687739c51960f20e3905eefcbdeea4de83306cff5c7b7928eae98c6da9187d68e701550d708cc78ec2dd1178573d80978220e390fc5836e84384","ssdeep":"","tlshash":"59c09b4551287db356471ba164ec3806c6fd51d641f4c43dfd8c8e5847d44dba345937","first_seen":"2023-04-19T10:42:24Z","last_seen":"2026-06-07T07:30:11.568595Z","times_seen":6336,"resource_available":false,"data":null}},"time_used":513,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":513,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-31","alert":"Sinkholed","trigger":"rb88t.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-31","alert":"Sinkholed","trigger":"rb88t.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"8vpfnx.bqkmk.cn/ftl/commonPage/images/partner/partner-hongtu-gray.png.base64","fqdn":"8vpfnx.bqkmk.cn","domain":"bqkmk.cn","tld":"cn"},"ip":{"addr":"103.198.200.7","port":443,"asn":138915,"as":"Kaopu Cloud HK Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://rb88t.com:8989/","date":"2025-10-31T04:45:39.047Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.bqkmk.cn","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 20 Oct 2025 00:00:00 GMT","end":"Tue, 20 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"CD:A6:04:CF:32:73:E5:24:43:2F:6D:D8:78:B9:CF:F5:FF:75:2B:72","sha256":"D4:BA:B1:C0:7D:2E:00:30:EC:84:7E:26:6D:DB:2A:4F:A5:87:A0:9E:7F:A3:96:24:96:6E:6E:3E:1C:A4:D5:5D"}}},"request":{"raw":"GET /ftl/commonPage/images/partner/partner-hongtu-gray.png.base64 HTTP/1.1\r\nHost: 8vpfnx.bqkmk.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://rb88t.com:8989\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rb88t.com:8989/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/plain; charset=utf-8\r\ncontent-length: 104955\r\nserver: Default-server-KS-CLOUD-XG-FOREIGN-12-04\r\netag: \"68b69275-199fb\"\r\ndate: Mon, 20 Oct 2025 04:19:13 GMT\r\nlast-modified: Tue, 02 Sep 2025 06:45:09 GMT\r\nexpires: Wed, 19 Nov 2025 04:19:13 GMT\r\nage: 951986\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\nx-frame-options: SAMEORIGIN\r\nx-cache: HIT\r\nuuid: -\r\nout-line: gb-cdn-212\r\nx-link-via: xg21:443;xg12:80;\r\nx-cache-status: MISS from KS-CLOUD-XG-FOREIGN-12-04, HIT from KS-CLOUD-XG-FOREIGN-21-11\r\nx-cdn-request-id: f1d4a1ceddc7daa0f1b456acce93d83b\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":104955,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"Apple HFS Plus version 12135 data (spared blocks) last mounted by: 'GYCw', created: Thu Nov 30 10:34:46 2084, last modified: Thu Sep  4 23:18:47 2098, block size: 1467044454, number of blocks: 729362515, free blocks: 1497459512","md5":"c74ef17cb37fbfb0a1c949597470e977","sha1":"34c6ba958b6527c7a9eb35a4d64233da66e772c7","sha256":"f3fafe4c402edc11f26d8170dd5ef6da07e1d538ce471b39fd0769803439d2db","sha512":"493dc789121a373e46f86420affcd800691d47a146c19852599e9896ca521c3fd42a89a02932fbf69d4d3040734cc0ec4f0c3afc86064ec54668397955a48bbf","ssdeep":"1536:2qC8ZeKIScoUhq8lzPJt7W54AH4XmYho/1bxXoYW5qyx+zn8tnngf:2xi0hJzRthZWT9BoKysin8","tlshash":"c9a3023ccb433a116ad267a51fb22deda740e6cb555e03e785d222c615963ceef318e0","first_seen":"2025-09-07T00:50:47.660386Z","last_seen":"2026-04-17T08:59:04.26396Z","times_seen":1764,"resource_available":false,"data":null}},"time_used":309,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":291,"receive":18,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"8vpfnx.bqkmk.cn/ftl//commonPage/commonContent/nav/images/sub-arrow.png.base64","fqdn":"8vpfnx.bqkmk.cn","domain":"bqkmk.cn","tld":"cn"},"ip":{"addr":"103.198.200.7","port":443,"asn":138915,"as":"Kaopu Cloud HK Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://rb88t.com:8989/","date":"2025-10-31T04:45:38.251Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.bqkmk.cn","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 20 Oct 2025 00:00:00 GMT","end":"Tue, 20 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"CD:A6:04:CF:32:73:E5:24:43:2F:6D:D8:78:B9:CF:F5:FF:75:2B:72","sha256":"D4:BA:B1:C0:7D:2E:00:30:EC:84:7E:26:6D:DB:2A:4F:A5:87:A0:9E:7F:A3:96:24:96:6E:6E:3E:1C:A4:D5:5D"}}},"request":{"raw":"GET /ftl//commonPage/commonContent/nav/images/sub-arrow.png.base64 HTTP/1.1\r\nHost: 8vpfnx.bqkmk.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://rb88t.com:8989\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rb88t.com:8989/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/plain; charset=utf-8\r\ncontent-length: 227\r\nserver: Default-server-KS-CLOUD-XG-FOREIGN-12-03\r\netag: \"667bb57c-e3\"\r\ndate: Mon, 20 Oct 2025 04:25:44 GMT\r\nlast-modified: Wed, 26 Jun 2024 06:30:20 GMT\r\nexpires: Wed, 19 Nov 2025 04:25:44 GMT\r\nage: 951593\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nx-frame-options: SAMEORIGIN\r\nx-cache: HIT\r\nuuid: -\r\nout-line: gb-cdn-211\r\nx-link-via: xg21:443;xg12:80;\r\nx-cache-status: MISS from KS-CLOUD-XG-FOREIGN-12-03, HIT from KS-CLOUD-XG-FOREIGN-21-01\r\nx-cdn-request-id: 01056949da3e86e078a66bfb25e03c54\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":227,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"77546ee8bcab279aee067f7794d08541","sha1":"e1ace21ee1e968151b5b0ad8da4b0ebf8420bdcf","sha256":"9f967376ac77e445b313fbebbab9a4572c0984edb80f6b5baa9c10f9bf68d647","sha512":"d56ff9fcf76a2153287b4b016b7e59f40c60859b36ac5d12bc96a43237a828cfcd4c0b5de142dbf178ebccef9092c3ae167ea7e3a59d359f50db78df36263b21","ssdeep":"","tlshash":"09d097310605283062ce68013802d1000e222b8f52a760407ff86023581b3c88a9a3c0","first_seen":"2024-09-24T19:10:13Z","last_seen":"2026-06-06T23:51:10.814802Z","times_seen":2088,"resource_available":false,"data":null}},"time_used":548,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":548,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"8vpfnx.bqkmk.cn/ftl//commonPage/commonContent/nav/images/navbar-sub-sprite2.png.base64","fqdn":"8vpfnx.bqkmk.cn","domain":"bqkmk.cn","tld":"cn"},"ip":{"addr":"103.198.200.7","port":443,"asn":138915,"as":"Kaopu Cloud HK Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://rb88t.com:8989/","date":"2025-10-31T04:45:38.256Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.bqkmk.cn","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 20 Oct 2025 00:00:00 GMT","end":"Tue, 20 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"CD:A6:04:CF:32:73:E5:24:43:2F:6D:D8:78:B9:CF:F5:FF:75:2B:72","sha256":"D4:BA:B1:C0:7D:2E:00:30:EC:84:7E:26:6D:DB:2A:4F:A5:87:A0:9E:7F:A3:96:24:96:6E:6E:3E:1C:A4:D5:5D"}}},"request":{"raw":"GET /ftl//commonPage/commonContent/nav/images/navbar-sub-sprite2.png.base64 HTTP/1.1\r\nHost: 8vpfnx.bqkmk.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://rb88t.com:8989\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rb88t.com:8989/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/plain; charset=utf-8\r\ncontent-length: 73333\r\nserver: Default-server-KS-CLOUD-XG-FOREIGN-12-04\r\netag: \"68b69275-11e75\"\r\ndate: Mon, 20 Oct 2025 04:25:44 GMT\r\nlast-modified: Tue, 02 Sep 2025 06:45:09 GMT\r\nexpires: Wed, 19 Nov 2025 04:25:44 GMT\r\nage: 951593\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\nx-frame-options: SAMEORIGIN\r\nx-cache: MISS\r\nuuid: -\r\nout-line: gb-cdn-212\r\nx-link-via: xg21:443;xg12:80;\r\nx-cache-status: MISS from KS-CLOUD-XG-FOREIGN-12-04, HIT from KS-CLOUD-XG-FOREIGN-21-01\r\nx-cdn-request-id: 7504473a4231ac165e28af4d401c4e27\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":73333,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"e09c7b111da72ff020d33a8978446fbc","sha1":"aa301c18846db062dc85f330f615e3462167ed51","sha256":"d2a00ca8254c1316538c612d648dd11c093e17fad8a9e2c2823c3a65373cd401","sha512":"e2d07eb9a5c109a3e73fa18a409691fe25ffe97d2e82d3f0092a30bf0be6c5bef387e3e190838d5eb80ea41d41fddcef16df874d4aaee91b5ff35d8861cc68cf","ssdeep":"1536:k9sSaVz0lJT/xf5n6O7nn+7lSBsyeUPlVVdxKLQ9oVIrBwvUou:k9sftctT+5g2U/ReQ9oV1Uou","tlshash":"1763026f2e543c067e2466fc359b8b10001d5f63603de7dea0a9fa23f297196f24ab54","first_seen":"2025-09-18T16:22:49.423406Z","last_seen":"2026-04-18T04:41:00.368806Z","times_seen":639,"resource_available":false,"data":null}},"time_used":611,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":559,"receive":52,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"8vpfnx.bqkmk.cn/ftl//commonPage/commonContent/nav/images/sub-arrow.png.base64","fqdn":"8vpfnx.bqkmk.cn","domain":"bqkmk.cn","tld":"cn"},"ip":{"addr":"103.198.200.7","port":443,"asn":138915,"as":"Kaopu Cloud HK Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://rb88t.com:8989/","date":"2025-10-31T04:45:38.275Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.bqkmk.cn","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 20 Oct 2025 00:00:00 GMT","end":"Tue, 20 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"CD:A6:04:CF:32:73:E5:24:43:2F:6D:D8:78:B9:CF:F5:FF:75:2B:72","sha256":"D4:BA:B1:C0:7D:2E:00:30:EC:84:7E:26:6D:DB:2A:4F:A5:87:A0:9E:7F:A3:96:24:96:6E:6E:3E:1C:A4:D5:5D"}}},"request":{"raw":"GET /ftl//commonPage/commonContent/nav/images/sub-arrow.png.base64 HTTP/1.1\r\nHost: 8vpfnx.bqkmk.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://rb88t.com:8989\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rb88t.com:8989/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/plain; charset=utf-8\r\ncontent-length: 227\r\nserver: Default-server-KS-CLOUD-XG-FOREIGN-12-03\r\netag: \"667bb57c-e3\"\r\ndate: Mon, 20 Oct 2025 04:25:44 GMT\r\nlast-modified: Wed, 26 Jun 2024 06:30:20 GMT\r\nexpires: Wed, 19 Nov 2025 04:25:44 GMT\r\nage: 951593\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nx-frame-options: SAMEORIGIN\r\nx-cache: HIT\r\nuuid: -\r\nout-line: gb-cdn-211\r\nx-link-via: xg21:443;xg12:80;\r\nx-cache-status: MISS from KS-CLOUD-XG-FOREIGN-12-03, HIT from KS-CLOUD-XG-FOREIGN-21-01\r\nx-cdn-request-id: d110a980b667c16e15f7cbce330ab05e\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":227,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"77546ee8bcab279aee067f7794d08541","sha1":"e1ace21ee1e968151b5b0ad8da4b0ebf8420bdcf","sha256":"9f967376ac77e445b313fbebbab9a4572c0984edb80f6b5baa9c10f9bf68d647","sha512":"d56ff9fcf76a2153287b4b016b7e59f40c60859b36ac5d12bc96a43237a828cfcd4c0b5de142dbf178ebccef9092c3ae167ea7e3a59d359f50db78df36263b21","ssdeep":"","tlshash":"09d097310605283062ce68013802d1000e222b8f52a760407ff86023581b3c88a9a3c0","first_seen":"2024-09-24T19:10:13Z","last_seen":"2026-06-06T23:51:10.814802Z","times_seen":2088,"resource_available":false,"data":null}},"time_used":687,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":687,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"8vpfnx.bqkmk.cn/ftl/commonPage/js/websocket/Comet.js","fqdn":"8vpfnx.bqkmk.cn","domain":"bqkmk.cn","tld":"cn"},"ip":{"addr":"103.198.200.7","port":443,"asn":138915,"as":"Kaopu Cloud HK Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rb88t.com:8989/","date":"2025-10-31T04:45:36.300Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.bqkmk.cn","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 20 Oct 2025 00:00:00 GMT","end":"Tue, 20 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"CD:A6:04:CF:32:73:E5:24:43:2F:6D:D8:78:B9:CF:F5:FF:75:2B:72","sha256":"D4:BA:B1:C0:7D:2E:00:30:EC:84:7E:26:6D:DB:2A:4F:A5:87:A0:9E:7F:A3:96:24:96:6E:6E:3E:1C:A4:D5:5D"}}},"request":{"raw":"GET /ftl/commonPage/js/websocket/Comet.js HTTP/1.1\r\nHost: 8vpfnx.bqkmk.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rb88t.com:8989/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 4031\r\nserver: Default-server-KS-CLOUD-XG-FOREIGN-12-01\r\netag: W/\"60f60fb5-43bc\"\r\ndate: Mon, 20 Oct 2025 04:19:08 GMT\r\nlast-modified: Mon, 19 Jul 2021 23:50:13 GMT\r\nexpires: Wed, 19 Nov 2025 04:19:08 GMT\r\nage: 951988\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\nx-frame-options: SAMEORIGIN\r\nx-cache: HIT\r\nuuid: -\r\nout-line: gb-cdn-211\r\nx-link-via: xg21:443;xg12:80;\r\nx-cache-status: MISS from KS-CLOUD-XG-FOREIGN-12-01, HIT from KS-CLOUD-XG-FOREIGN-21-10\r\nx-cdn-request-id: 26b723d5ccb19bc8d7ba1c2b6f50fa67\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":17340,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"1008fe6a5e1a182d7775963b85405bb2","sha1":"e174a7b08cc3cb5545af1cd33d2814e604119392","sha256":"7479f6f22194ac37dd6d3f5a579b4682ac8dcb6389fb961cf4140f3fcc707a20","sha512":"26e07821ee1e8e94c4bada028e049df7572cac06f2e8dae958baa7a011eb201a6a1d4ed0cfa15017a3f52a0cb949343de0b33ca6da7c245f763c86d5adfb0223","ssdeep":"192:4Pf+aTbLSru4NyRs8VDv1KygOdWuTyVC3d7QPXLHOm8cSCl1Ej7bY8l7YJIJvO5N:4Pf+aTbe4M2cXzsjDUfj","tlshash":"ab721e4a2cf76086552732b90f5f64543235a8172605e91c7dcca6e08f98b7c1babff8","first_seen":"2023-04-05T18:30:47Z","last_seen":"2026-07-26T05:01:44.842903Z","times_seen":17646,"resource_available":true,"data":null}},"time_used":1948,"timings":{"blocked":544,"dns":0,"connect":283,"send":0,"wait":831,"receive":0,"ssl":287},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"8vpfnx.bqkmk.cn/ftl/commonPage/js/websocket/PopUp.js","fqdn":"8vpfnx.bqkmk.cn","domain":"bqkmk.cn","tld":"cn"},"ip":{"addr":"103.198.200.7","port":443,"asn":138915,"as":"Kaopu Cloud HK Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rb88t.com:8989/","date":"2025-10-31T04:45:36.303Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.bqkmk.cn","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 20 Oct 2025 00:00:00 GMT","end":"Tue, 20 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"CD:A6:04:CF:32:73:E5:24:43:2F:6D:D8:78:B9:CF:F5:FF:75:2B:72","sha256":"D4:BA:B1:C0:7D:2E:00:30:EC:84:7E:26:6D:DB:2A:4F:A5:87:A0:9E:7F:A3:96:24:96:6E:6E:3E:1C:A4:D5:5D"}}},"request":{"raw":"GET /ftl/commonPage/js/websocket/PopUp.js HTTP/1.1\r\nHost: 8vpfnx.bqkmk.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rb88t.com:8989/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 797\r\nserver: Default-server-KS-CLOUD-XG-FOREIGN-12-03\r\netag: W/\"6260ddd4-828\"\r\ndate: Mon, 20 Oct 2025 04:19:07 GMT\r\nlast-modified: Thu, 21 Apr 2022 04:30:12 GMT\r\nexpires: Wed, 19 Nov 2025 04:19:07 GMT\r\nage: 951988\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\nx-frame-options: SAMEORIGIN\r\nx-cache: HIT\r\nuuid: -\r\nout-line: gb-cdn-212\r\nx-link-via: xg21:443;xg12:80;\r\nx-cache-status: MISS from KS-CLOUD-XG-FOREIGN-12-03, HIT from KS-CLOUD-XG-FOREIGN-21-15\r\nx-cdn-request-id: 64f13555bd30d92eda4abe5ec5bfcacb\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":2088,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"Unicode text, UTF-8 text","md5":"07864ad2e2759d53f8f2f14dd4295bd9","sha1":"95144219e2eb702c4c4a707c3622b086876cf41c","sha256":"871bf30791bb89605b61cea815c3786246274b65ede3b8a8b8c2dd9244cfa89d","sha512":"f469d0f23c75e918d55e076d72481fca7043ac5eff9025aaac1f26860d080e4fc3c5d28f8f9ee1dae80719aca2b83f39ea82a129c221980bd7d63c212bacc119","ssdeep":"","tlshash":"9041ae54baf359a12c9b71f3aaaf30413160f2479505ed017d0cb9945f1d228b2cf7e9","first_seen":"2023-03-07T01:14:38Z","last_seen":"2026-07-26T05:01:44.844789Z","times_seen":17796,"resource_available":true,"data":null}},"time_used":774,"timings":{"blocked":509,"dns":0,"connect":0,"send":0,"wait":265,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"8vpfnx.bqkmk.cn/061410/rcenter/common/static/css/gb.validation.min.css","fqdn":"8vpfnx.bqkmk.cn","domain":"bqkmk.cn","tld":"cn"},"ip":{"addr":"103.198.200.7","port":443,"asn":138915,"as":"Kaopu Cloud HK Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rb88t.com:8989/","date":"2025-10-31T04:45:36.421Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.bqkmk.cn","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 20 Oct 2025 00:00:00 GMT","end":"Tue, 20 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"CD:A6:04:CF:32:73:E5:24:43:2F:6D:D8:78:B9:CF:F5:FF:75:2B:72","sha256":"D4:BA:B1:C0:7D:2E:00:30:EC:84:7E:26:6D:DB:2A:4F:A5:87:A0:9E:7F:A3:96:24:96:6E:6E:3E:1C:A4:D5:5D"}}},"request":{"raw":"GET /061410/rcenter/common/static/css/gb.validation.min.css HTTP/1.1\r\nHost: 8vpfnx.bqkmk.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rb88t.com:8989/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css\r\ncontent-length: 3788\r\nserver: Default-server-KS-CLOUD-XG-FOREIGN-12-04\r\netag: W/\"633d510e-2d52\"\r\ndate: Mon, 20 Oct 2025 04:19:13 GMT\r\nlast-modified: Wed, 05 Oct 2022 09:40:30 GMT\r\nexpires: Wed, 19 Nov 2025 04:19:13 GMT\r\nage: 951983\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\nx-frame-options: SAMEORIGIN\r\nx-cache: HIT\r\nuuid: -\r\nout-line: gb-cdn-211\r\nx-link-via: xg21:443;xg12:80;\r\nx-cache-status: MISS from KS-CLOUD-XG-FOREIGN-12-04, HIT from KS-CLOUD-XG-FOREIGN-21-10\r\nx-cdn-request-id: 0ed5a0a99c8cae581266a3bfa3011176\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":11602,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (2295)","md5":"12630e8fd95b53f705159b9cd1c2b372","sha1":"1be26841536b82ff280211796e9de339c642795f","sha256":"2c0c712726319f142f14ea06ccdba0ddb9f880571581ab1d0c193d4083a5baa8","sha512":"3084c7d3f917e379235e29b0f641e69f7a9a89b9c30b088292e3b3800cc67e16414b2df9aed1ed144cd2c37bbd035a8f6389d71ace13d17dd32a315c7719a88b","ssdeep":"192:zyzNcfuLLpjyFp291taF4lcrCQ4RFvVhkxP4OKyptj6ZqQ:znmdyF24F6crCQ4R4P4Dx","tlshash":"ed32a673ba220244790d9d442f46ee02bb1b40176a4f8eabff91786cdf825c9b67074c","first_seen":"2025-04-07T03:18:03.798848Z","last_seen":"2026-07-26T05:01:44.84945Z","times_seen":11149,"resource_available":false,"data":null}},"time_used":1243,"timings":{"blocked":393,"dns":0,"connect":0,"send":0,"wait":850,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rb88t.com:8989/ftl/commonPage/themes/hongbao.css","fqdn":"rb88t.com","domain":"rb88t.com","tld":"com"},"ip":{"addr":"34.96.219.82","port":8989,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rb88t.com:8989/","date":"2025-10-31T04:45:36.645Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rb88t.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 16 Oct 2025 17:09:31 GMT","end":"Wed, 14 Jan 2026 17:09:30 GMT"},"fingerprint":{"sha1":"1E:C2:B3:67:0C:77:84:F1:9F:8D:AD:21:1B:38:A6:D8:C7:76:57:1C","sha256":"3B:31:2B:A2:8D:4D:4D:EC:78:17:C6:E3:F3:EA:94:02:0E:AF:0F:86:CC:F4:27:C3:4D:68:DF:1D:2C:E4:19:9B"}}},"request":{"raw":"GET /ftl/commonPage/themes/hongbao.css HTTP/1.1\r\nHost: rb88t.com:8989\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rb88t.com:8989/ftl/commonPage/themes/gui-base.css\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 31 Oct 2025 04:45:36 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 30 Mar 2023 06:38:07 GMT\r\nvary: Accept-Encoding\r\netag: W/\"64252e4f-d530\"\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\nx-frame-options: SAMEORIGIN\r\nexpires: Sat, 01 Nov 2025 04:45:36 GMT\r\ncache-control: max-age=86400\r\nx-cache: HIT\r\nuuid: -\r\nout-line: gb-site-204\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":54576,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (336), with LF, NEL line terminators","md5":"a212ec8d2af1172e5fe97229a8cdd470","sha1":"676b870b21e2b4f18dd23dd24baa8a30955b8362","sha256":"910aca19fa0a1df0c76607fdde36968687403343a50022bed3693011abee9fc8","sha512":"6f8ef1e9c22978fe39412ca413b132e9ae54d5b84c1b95b6f40b5c7bd44e726212ca20b731de29294e77fadf0651f3cbc8bfad1d6a4ec6b808064faa4aa3811b","ssdeep":"1536:qsgR4FlccsG7TCbzG3ArEDTgkvudNssvmp13ZUcPGZ10iS9EvlBcovGF5XAso/GQ:qiu","tlshash":"78336d05e241abab21dad174230bca3bcdd81485fea4dfb7223971f4cba55e5b03625c","first_seen":"2025-04-07T03:18:03.889172Z","last_seen":"2026-06-07T07:30:11.560478Z","times_seen":10722,"resource_available":false,"data":null}},"time_used":217,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":217,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-31","alert":"Sinkholed","trigger":"rb88t.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-31","alert":"Sinkholed","trigger":"rb88t.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rb88t.com:8989/ftl/commonPage/themes/fonts/gui-fonts/gui.ttf","fqdn":"rb88t.com","domain":"rb88t.com","tld":"com"},"ip":{"addr":"34.96.219.82","port":8989,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://rb88t.com:8989/","date":"2025-10-31T04:45:37.756Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rb88t.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 16 Oct 2025 17:09:31 GMT","end":"Wed, 14 Jan 2026 17:09:30 GMT"},"fingerprint":{"sha1":"1E:C2:B3:67:0C:77:84:F1:9F:8D:AD:21:1B:38:A6:D8:C7:76:57:1C","sha256":"3B:31:2B:A2:8D:4D:4D:EC:78:17:C6:E3:F3:EA:94:02:0E:AF:0F:86:CC:F4:27:C3:4D:68:DF:1D:2C:E4:19:9B"}}},"request":{"raw":"GET /ftl/commonPage/themes/fonts/gui-fonts/gui.ttf HTTP/1.1\r\nHost: rb88t.com:8989\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rb88t.com:8989/ftl/commonPage/themes/gui-base.css\r\nCookie: sticket=qSm1NbVZtTnpZeUxU\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 31 Oct 2025 04:45:37 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 429252\r\nlast-modified: Thu, 04 Sep 2025 09:10:07 GMT\r\netag: \"68b9576f-68cc4\"\r\naccess-control-allow-origin: *\r\nx-frame-options: SAMEORIGIN\r\nexpires: Sat, 01 Nov 2025 04:45:37 GMT\r\ncache-control: max-age=86400\r\nx-cache: HIT\r\nuuid: -\r\nout-line: gb-site-204\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":429252,"size_decoded":0,"mime_type":"application/octet-stream","magic":"TrueType Font data, 11 tables, 1st \"OS/2\", 14 names, Macintosh, type 1 string, icomoon    ","md5":"791bc072a3e361510b60c0994a742bf3","sha1":"f08c63ea64126c0f3b24c67fd0e0c5ae5df1b08e","sha256":"7a8e26265738d3cb0f201a53fb168cd59bb721cf0407f00bf25f720cfdcd760e","sha512":"d5548476dd786b5d0d77b02d36199c32d7895e0be8084be18a682f02303971b4c85f6d48e1faa94f51b2eb5ebe61cf91f97299515bcde23fb654a94cbd445509","ssdeep":"12288:pI/XwKnKzir7YTsVYzb/nb/X3M1MP2EF9PpKHQ:pIjnvrsoVK/nbPOAlvP","tlshash":"0e947d07936def8e9451a2e24845d0235ce2e104df3ed366eece7c5cd0258e88d79b9a","first_seen":"2025-09-06T05:10:02.121568Z","last_seen":"2026-04-17T08:01:36.639999Z","times_seen":1267,"resource_available":false,"data":null}},"time_used":893,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":217,"receive":676,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-31","alert":"Sinkholed","trigger":"rb88t.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-31","alert":"Sinkholed","trigger":"rb88t.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"8vpfnx.bqkmk.cn/ftl/commonPage/js/moment.js","fqdn":"8vpfnx.bqkmk.cn","domain":"bqkmk.cn","tld":"cn"},"ip":{"addr":"103.198.200.7","port":443,"asn":138915,"as":"Kaopu Cloud HK Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rb88t.com:8989/","date":"2025-10-31T04:45:36.316Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.bqkmk.cn","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 20 Oct 2025 00:00:00 GMT","end":"Tue, 20 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"CD:A6:04:CF:32:73:E5:24:43:2F:6D:D8:78:B9:CF:F5:FF:75:2B:72","sha256":"D4:BA:B1:C0:7D:2E:00:30:EC:84:7E:26:6D:DB:2A:4F:A5:87:A0:9E:7F:A3:96:24:96:6E:6E:3E:1C:A4:D5:5D"}}},"request":{"raw":"GET /ftl/commonPage/js/moment.js HTTP/1.1\r\nHost: 8vpfnx.bqkmk.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rb88t.com:8989/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 26968\r\nserver: Default-server-KS-CLOUD-XG-FOREIGN-12-04\r\netag: W/\"64b633ca-1cab9\"\r\ndate: Mon, 20 Oct 2025 04:19:08 GMT\r\nlast-modified: Tue, 18 Jul 2023 06:40:10 GMT\r\nexpires: Wed, 19 Nov 2025 04:19:08 GMT\r\nage: 951989\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\nx-frame-options: SAMEORIGIN\r\nx-cache: HIT\r\nuuid: -\r\nout-line: gb-cdn-211\r\nx-link-via: xg21:443;xg12:80;\r\nx-cache-status: MISS from KS-CLOUD-XG-FOREIGN-12-04, HIT from KS-CLOUD-XG-FOREIGN-21-11\r\nx-cdn-request-id: 4871e78af322bdb5e7721c59d197fa73\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":117433,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"36c8f828395a9395549bd6e7307cb7e9","sha1":"f30a4961558e2d3d4405e7d93aa28fdb63245e78","sha256":"5d5e32fa1e06a0bc9396f349d142ad248e82086543e438c890e43f41e692db33","sha512":"40c24a9011e1bbdd98bd95b341c400bdaf48fefd953fcb407368fe3c685ac09196b55e230c03ca9890c35fe9acef2c916bed52423dc1a7b532a1db9817c03a8e","ssdeep":"1536:qOL1yBkBeb9wNoHpH7tjl2Ulwjwaj2BH3fMobEKeYEoZYiMirUw0:qOCWeH70R2BkobE+cw0","tlshash":"aeb35f5a59e31023496362294fdf2011ba388123590dee487d8da3d49f9ed7c47bafec","first_seen":"2023-07-29T10:21:40Z","last_seen":"2026-07-26T05:01:44.839781Z","times_seen":17865,"resource_available":true,"data":null}},"time_used":1343,"timings":{"blocked":497,"dns":0,"connect":0,"send":0,"wait":834,"receive":12,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"8vpfnx.bqkmk.cn/ftl/commonPage/images/partner/partner-hongtu-gray01.png.base64","fqdn":"8vpfnx.bqkmk.cn","domain":"bqkmk.cn","tld":"cn"},"ip":{"addr":"103.198.200.7","port":443,"asn":138915,"as":"Kaopu Cloud HK Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://rb88t.com:8989/","date":"2025-10-31T04:45:39.052Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.bqkmk.cn","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 20 Oct 2025 00:00:00 GMT","end":"Tue, 20 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"CD:A6:04:CF:32:73:E5:24:43:2F:6D:D8:78:B9:CF:F5:FF:75:2B:72","sha256":"D4:BA:B1:C0:7D:2E:00:30:EC:84:7E:26:6D:DB:2A:4F:A5:87:A0:9E:7F:A3:96:24:96:6E:6E:3E:1C:A4:D5:5D"}}},"request":{"raw":"GET /ftl/commonPage/images/partner/partner-hongtu-gray01.png.base64 HTTP/1.1\r\nHost: 8vpfnx.bqkmk.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://rb88t.com:8989\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rb88t.com:8989/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/plain; charset=utf-8\r\ncontent-length: 106998\r\nserver: Default-server-KS-CLOUD-XG-FOREIGN-12-01\r\netag: \"68b69275-1a1f6\"\r\ndate: Mon, 20 Oct 2025 04:19:13 GMT\r\nlast-modified: Tue, 02 Sep 2025 06:45:09 GMT\r\nexpires: Wed, 19 Nov 2025 04:19:13 GMT\r\nage: 951985\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\nx-frame-options: SAMEORIGIN\r\nx-cache: HIT\r\nuuid: -\r\nout-line: gb-cdn-212\r\nx-link-via: xg21:443;xg12:80;\r\nx-cache-status: MISS from KS-CLOUD-XG-FOREIGN-12-01, HIT from KS-CLOUD-XG-FOREIGN-21-10\r\nx-cdn-request-id: 2879b9e89db2b723dfdb5178ba53cfc0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":106998,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"0d835d7c8082eee7f89f0b1b2e62f4e4","sha1":"0faf9149c454be0261eea8b14afaabb70a6bddca","sha256":"a5f8a8d222b97704ebb832a6c68228b835c7d40fabd508de50d662e8f1add6ce","sha512":"c3a9d53a1cd3b51fa7b5af588085dc2ce8de1d0ebd7a86b151f90564dfc120b31be5a5519950265b4b511b7e1b80e5d5e3938104a8cdccfcfce626e5de27f372","ssdeep":"1536:AxJxL2StOAnubXwaS8BIunTHYHwpjLao55e39o8/mamUX1eYPo6uXyQenBV7/XAd:kKuqnbnbKwBw68+amI1eYg6fBVjg","tlshash":"daa30234d3a4f6d50ead035ee525f92c9e4182a74024edc9742b2cd382fd1786e10bde","first_seen":"2025-09-07T00:50:47.554845Z","last_seen":"2026-04-17T08:59:04.344356Z","times_seen":1764,"resource_available":false,"data":null}},"time_used":323,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":303,"receive":20,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"8vpfnx.bqkmk.cn/ftl/commonPage/images/partner/partner-hongtu-purple-02.png.base64","fqdn":"8vpfnx.bqkmk.cn","domain":"bqkmk.cn","tld":"cn"},"ip":{"addr":"103.198.200.7","port":443,"asn":138915,"as":"Kaopu Cloud HK Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://rb88t.com:8989/","date":"2025-10-31T04:45:39.064Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.bqkmk.cn","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 20 Oct 2025 00:00:00 GMT","end":"Tue, 20 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"CD:A6:04:CF:32:73:E5:24:43:2F:6D:D8:78:B9:CF:F5:FF:75:2B:72","sha256":"D4:BA:B1:C0:7D:2E:00:30:EC:84:7E:26:6D:DB:2A:4F:A5:87:A0:9E:7F:A3:96:24:96:6E:6E:3E:1C:A4:D5:5D"}}},"request":{"raw":"GET /ftl/commonPage/images/partner/partner-hongtu-purple-02.png.base64 HTTP/1.1\r\nHost: 8vpfnx.bqkmk.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://rb88t.com:8989\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rb88t.com:8989/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/plain; charset=utf-8\r\ncontent-length: 111403\r\nserver: Default-server-KS-CLOUD-XG-FOREIGN-12-04\r\netag: \"68b69275-1b32b\"\r\ndate: Mon, 20 Oct 2025 04:19:13 GMT\r\nlast-modified: Tue, 02 Sep 2025 06:45:09 GMT\r\nexpires: Wed, 19 Nov 2025 04:19:13 GMT\r\nage: 951985\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\nx-frame-options: SAMEORIGIN\r\nx-cache: HIT\r\nuuid: -\r\nout-line: gb-cdn-211\r\nx-link-via: xg21:443;xg12:80;\r\nx-cache-status: MISS from KS-CLOUD-XG-FOREIGN-12-04, HIT from KS-CLOUD-XG-FOREIGN-21-08\r\nx-cdn-request-id: 5ea6bd87604b0b6eb1a9ae5bf46b9906\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":111403,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"d043d074c686f48dfca9d02ba3e7b670","sha1":"a5fd625703018e34f86c2b4f2f487ce5beaa0903","sha256":"f06a3aa1663a356ff269f6d89768597db1834ac6cb5ab01832786de25d7f1531","sha512":"60202e2a8ab8f0a733d26c38f479c634bffe0fe89253d4aa8f6c91eba694b4c7d331d778926803cc5c65dc678e0125aa9fae04bf66dca45dbe214bb50d537db0","ssdeep":"3072:boG85QSt1cl/lHGqN5+0Ra0h3tGgWUdL3krWqM:sP5p1AV/fRaIAUdrkrWD","tlshash":"16b31240e7a0fda58dd09f4b8a673a795f3c072eb753f0ac94836170837aa9e1257748","first_seen":"2025-09-07T00:50:47.7251Z","last_seen":"2026-04-17T08:59:04.369621Z","times_seen":1763,"resource_available":false,"data":null}},"time_used":507,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":411,"receive":96,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"8vpfnx.bqkmk.cn/ftl/commonPage/images/partner/partner-hongtu-brown01.png.base64","fqdn":"8vpfnx.bqkmk.cn","domain":"bqkmk.cn","tld":"cn"},"ip":{"addr":"103.198.200.7","port":443,"asn":138915,"as":"Kaopu Cloud HK Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://rb88t.com:8989/","date":"2025-10-31T04:45:39.068Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.bqkmk.cn","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 20 Oct 2025 00:00:00 GMT","end":"Tue, 20 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"CD:A6:04:CF:32:73:E5:24:43:2F:6D:D8:78:B9:CF:F5:FF:75:2B:72","sha256":"D4:BA:B1:C0:7D:2E:00:30:EC:84:7E:26:6D:DB:2A:4F:A5:87:A0:9E:7F:A3:96:24:96:6E:6E:3E:1C:A4:D5:5D"}}},"request":{"raw":"GET /ftl/commonPage/images/partner/partner-hongtu-brown01.png.base64 HTTP/1.1\r\nHost: 8vpfnx.bqkmk.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://rb88t.com:8989\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rb88t.com:8989/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/plain; charset=utf-8\r\ncontent-length: 114431\r\nserver: Default-server-KS-CLOUD-XG-FOREIGN-12-01\r\netag: \"68b69275-1beff\"\r\ndate: Mon, 20 Oct 2025 04:19:13 GMT\r\nlast-modified: Tue, 02 Sep 2025 06:45:09 GMT\r\nexpires: Wed, 19 Nov 2025 04:19:13 GMT\r\nage: 951986\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\nx-frame-options: SAMEORIGIN\r\nx-cache: HIT\r\nuuid: -\r\nout-line: gb-cdn-211\r\nx-link-via: xg21:443;xg12:80;\r\nx-cache-status: MISS from KS-CLOUD-XG-FOREIGN-12-01, HIT from KS-CLOUD-XG-FOREIGN-21-11\r\nx-cdn-request-id: f65f7ed07c86986abd5651021e8e36aa\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":114431,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"13705bb454fa93a337d360fde95d32ed","sha1":"f17931976273af97665c359e14c5d7b673ded90b","sha256":"221a4adff18935e8dd8d421dd0dfb431bab972377ff4ead01e00cdc9dbf73127","sha512":"fc3c18262e7afc15b4716e6ed6869f20c27749dc181e010736e5314d0cc96d33826337eb3198e8425dbf01766d7c7cd2d85ce3cf594c4509106540464dda76a7","ssdeep":"3072:d1tyThaOfU3ozO51gip4i02XfacJ7TznFNnOOa:d1tyT8cUM5hcRnFVW","tlshash":"20b312a0dce07db423bb950ca3bc9f186243145f03a6269321b3f5430d627a4a6fd772","first_seen":"2025-09-18T16:22:49.418873Z","last_seen":"2026-04-17T04:44:35.216553Z","times_seen":1726,"resource_available":false,"data":null}},"time_used":551,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":528,"receive":23,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rb88t.com:8989/mobile-api/v5/origin/loginSwitchCheck.html","fqdn":"rb88t.com","domain":"rb88t.com","tld":"com"},"ip":{"addr":"34.96.219.82","port":8989,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://rb88t.com:8989/","date":"2025-10-31T04:45:39.070Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rb88t.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 16 Oct 2025 17:09:31 GMT","end":"Wed, 14 Jan 2026 17:09:30 GMT"},"fingerprint":{"sha1":"1E:C2:B3:67:0C:77:84:F1:9F:8D:AD:21:1B:38:A6:D8:C7:76:57:1C","sha256":"3B:31:2B:A2:8D:4D:4D:EC:78:17:C6:E3:F3:EA:94:02:0E:AF:0F:86:CC:F4:27:C3:4D:68:DF:1D:2C:E4:19:9B"}}},"request":{"raw":"GET /mobile-api/v5/origin/loginSwitchCheck.html HTTP/1.1\r\nHost: rb88t.com:8989\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/javascript, */*; q=0.01\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Requested-With: XMLHttpRequest\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rb88t.com:8989/\r\nCookie: sticket=qSm1NbVZtTnpZeUxU; route=a9961c6ad4780ba0f3c8657ffc8a49b9\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 31 Oct 2025 04:45:39 GMT\r\ncontent-type: text/html;charset=utf-8\r\ncontent-length: 174\r\nset-cookie: route=c7419011ef227a9b9406a6c2cd9b5007; Path=/\r\naccess-control-allow-methods: *\r\naccess-control-max-age: 3600\r\naccess-control-allow-headers: Content-Type,Access-Token,X-Requested-With\r\ncontent-disposition: inline;filename=f.txt\r\nsub-sys: mobile\r\nx-frame-options: SAMEORIGIN\r\nuuid: 01758-01-00000000-17618859399048\r\nout-line: gb-site-204\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":174,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"JSON text data","md5":"1452cebf3e2bb129b06762f43f09e5c8","sha1":"0ec65f1e79233e8c59f76c55fb89ac8637cfb070","sha256":"99a31cd18b8ce37d3725d0a77d5e314452d2906ed2b54b8b19d4de849d1bf13d","sha512":"758e5238156c2ffef164019c0090d96ae3567b56cdb9180b179f9f20dbefa3d184a9b0776e96d10667ecc0bef04ebccad0959b1eecbf5526077c096e22cfe919","ssdeep":"","tlshash":"b6c08c49f00458abce02239456d828402fec189270c9eccddc0c4a58f2cb4dfe322c2b","first_seen":"2023-04-05T18:30:47Z","last_seen":"2026-06-07T07:30:11.558795Z","times_seen":15814,"resource_available":false,"data":null}},"time_used":250,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":250,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-31","alert":"Sinkholed","trigger":"rb88t.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-31","alert":"Sinkholed","trigger":"rb88t.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rb88t.com:8989/ftl/commonPage/themes/images/layer-dialog/gui-layer-close-bg.png","fqdn":"rb88t.com","domain":"rb88t.com","tld":"com"},"ip":{"addr":"34.96.219.82","port":8989,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rb88t.com:8989/","date":"2025-10-31T04:45:39.358Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rb88t.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 16 Oct 2025 17:09:31 GMT","end":"Wed, 14 Jan 2026 17:09:30 GMT"},"fingerprint":{"sha1":"1E:C2:B3:67:0C:77:84:F1:9F:8D:AD:21:1B:38:A6:D8:C7:76:57:1C","sha256":"3B:31:2B:A2:8D:4D:4D:EC:78:17:C6:E3:F3:EA:94:02:0E:AF:0F:86:CC:F4:27:C3:4D:68:DF:1D:2C:E4:19:9B"}}},"request":{"raw":"GET /ftl/commonPage/themes/images/layer-dialog/gui-layer-close-bg.png HTTP/1.1\r\nHost: rb88t.com:8989\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rb88t.com:8989/ftl/commonPage/themes/gui-layer.css\r\nCookie: sticket=qSm1NbVZtTnpZeUxU; route=c7419011ef227a9b9406a6c2cd9b5007\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 31 Oct 2025 04:45:39 GMT\r\ncontent-type: image/png\r\ncontent-length: 1321\r\nlast-modified: Fri, 20 Sep 2019 08:35:27 GMT\r\netag: \"5d848f4f-529\"\r\naccess-control-allow-origin: *\r\nx-frame-options: SAMEORIGIN\r\nexpires: Sat, 01 Nov 2025 04:45:39 GMT\r\ncache-control: max-age=86400\r\nx-cache: HIT\r\nuuid: -\r\nout-line: gb-site-204\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1321,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 34 x 34, 8-bit/color RGBA, non-interlaced","md5":"a2e938202c0287b9c82461a6fd94dee9","sha1":"b5e2adc7cb07c18a70a88af314e56b946ec1a1b6","sha256":"df9ce20db277ad8302c704a73aff5024683a0d38aff0d3e7e884a67a24439936","sha512":"2c035017e6ef6d6be24cf26972434ff7b16760ac6f5418d83652e745007a117cb79f4f9fa542cf4098b9141d4851f748c5151cb1055ea2b1f42eb70eb72a809f","ssdeep":"","tlshash":"1321830eea4368009648bdc114f3a457f7165f80acd8e2f46e8aac5d2d103f96abd6d7","first_seen":"2023-04-30T20:28:22Z","last_seen":"2026-06-07T07:30:11.522472Z","times_seen":16458,"resource_available":false,"data":null}},"time_used":219,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":219,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-31","alert":"Sinkholed","trigger":"rb88t.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-31","alert":"Sinkholed","trigger":"rb88t.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"8vpfnx.bqkmk.cn/ftl/ysb1758-02/themes/images/login_os.png.base64","fqdn":"8vpfnx.bqkmk.cn","domain":"bqkmk.cn","tld":"cn"},"ip":{"addr":"103.198.200.7","port":443,"asn":138915,"as":"Kaopu Cloud HK Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://rb88t.com:8989/","date":"2025-10-31T04:45:39.386Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.bqkmk.cn","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 20 Oct 2025 00:00:00 GMT","end":"Tue, 20 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"CD:A6:04:CF:32:73:E5:24:43:2F:6D:D8:78:B9:CF:F5:FF:75:2B:72","sha256":"D4:BA:B1:C0:7D:2E:00:30:EC:84:7E:26:6D:DB:2A:4F:A5:87:A0:9E:7F:A3:96:24:96:6E:6E:3E:1C:A4:D5:5D"}}},"request":{"raw":"GET /ftl/ysb1758-02/themes/images/login_os.png.base64 HTTP/1.1\r\nHost: 8vpfnx.bqkmk.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://rb88t.com:8989\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rb88t.com:8989/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/plain; charset=utf-8\r\ncontent-length: 1990\r\nserver: Default-server-KS-CLOUD-XG-FOREIGN-12-04\r\netag: \"68ec518a-7c6\"\r\ndate: Wed, 22 Oct 2025 08:45:20 GMT\r\nlast-modified: Mon, 13 Oct 2025 01:10:34 GMT\r\nexpires: Fri, 21 Nov 2025 08:45:20 GMT\r\nage: 763218\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\nx-frame-options: SAMEORIGIN\r\nx-cache: MISS\r\nuuid: -\r\nout-line: gb-cdn-211\r\nx-link-via: xg21:443;xg12:80;\r\nx-cache-status: MISS from KS-CLOUD-XG-FOREIGN-12-04, HIT from KS-CLOUD-XG-FOREIGN-21-10\r\nx-cdn-request-id: 61b577abfb011e89957f4e99b055fe3d\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1990,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"a28882a0f6f4259b839c46595cf824a4","sha1":"e0e736ea53d20349559b52c413cae19a7abb8c96","sha256":"c163852d50c6f581c0ba771911feacbbb43b47bc7b157722778a0f47cae4e0f7","sha512":"c444afde3d1877b363c6b3a78674debe2f566ce27bafa15ad29a949f5e155ab03806b8e8799041b176d86e74cee81ebd8f359c49ec9e11d2c6cbf2fb61af2bfb","ssdeep":"","tlshash":"6541e67fad363b1d1224a81867f265753d9a594a2c4d03b750b730220cda79826cf29c","first_seen":"2025-10-13T02:05:29.065866Z","last_seen":"2026-05-23T18:41:03.113619Z","times_seen":78,"resource_available":false,"data":null}},"time_used":260,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":260,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"8vpfnx.bqkmk.cn/ftl/ysb1758-02/themes/images/Message.gif.base64","fqdn":"8vpfnx.bqkmk.cn","domain":"bqkmk.cn","tld":"cn"},"ip":{"addr":"103.198.200.7","port":443,"asn":138915,"as":"Kaopu Cloud HK Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://rb88t.com:8989/","date":"2025-10-31T04:45:39.390Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.bqkmk.cn","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 20 Oct 2025 00:00:00 GMT","end":"Tue, 20 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"CD:A6:04:CF:32:73:E5:24:43:2F:6D:D8:78:B9:CF:F5:FF:75:2B:72","sha256":"D4:BA:B1:C0:7D:2E:00:30:EC:84:7E:26:6D:DB:2A:4F:A5:87:A0:9E:7F:A3:96:24:96:6E:6E:3E:1C:A4:D5:5D"}}},"request":{"raw":"GET /ftl/ysb1758-02/themes/images/Message.gif.base64 HTTP/1.1\r\nHost: 8vpfnx.bqkmk.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://rb88t.com:8989\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rb88t.com:8989/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/plain; charset=utf-8\r\ncontent-length: 1070\r\nserver: Default-server-KS-CLOUD-XG-FOREIGN-12-01\r\netag: \"68d38ff0-42e\"\r\ndate: Wed, 22 Oct 2025 08:45:20 GMT\r\nlast-modified: Wed, 24 Sep 2025 06:30:08 GMT\r\nexpires: Fri, 21 Nov 2025 08:45:20 GMT\r\nage: 763219\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\nx-frame-options: SAMEORIGIN\r\nx-cache: HIT\r\nuuid: -\r\nout-line: gb-cdn-212\r\nx-link-via: xg21:443;xg12:80;\r\nx-cache-status: MISS from KS-CLOUD-XG-FOREIGN-12-01, HIT from KS-CLOUD-XG-FOREIGN-21-07\r\nx-cdn-request-id: ee651fb07b220aa57e03affe8ccc3e6c\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1070,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"cfe82f3a661a7022b5e7b74146f9ecb9","sha1":"9c8cf36f9d37b8b2956685b85097bbd5125508b7","sha256":"1a7833e7b4953b8c54584191f12259a9f64f13585875bb317438d0efb3261d32","sha512":"9a6d0aa9a033d4e7134b2f099f1843759958e0409fed9ca1f0da333679eda367640d32e6bdab8cff97aa3df5c92bf3ce56099daa7c1c9d7ae7ea8815e1297903","ssdeep":"","tlshash":"9411c43e83005184ba8fd688ff181db0bef612cbd85242881a44fd32cf15d8005ee062","first_seen":"2025-10-13T02:05:29.272803Z","last_seen":"2026-05-23T18:41:03.045594Z","times_seen":78,"resource_available":false,"data":null}},"time_used":260,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":260,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"8vpfnx.bqkmk.cn/ftl//commonPage/commonContent/nav/images/navbar-sub-sprite2.png.base64","fqdn":"8vpfnx.bqkmk.cn","domain":"bqkmk.cn","tld":"cn"},"ip":{"addr":"103.198.200.7","port":443,"asn":138915,"as":"Kaopu Cloud HK Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://rb88t.com:8989/","date":"2025-10-31T04:45:38.283Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.bqkmk.cn","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 20 Oct 2025 00:00:00 GMT","end":"Tue, 20 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"CD:A6:04:CF:32:73:E5:24:43:2F:6D:D8:78:B9:CF:F5:FF:75:2B:72","sha256":"D4:BA:B1:C0:7D:2E:00:30:EC:84:7E:26:6D:DB:2A:4F:A5:87:A0:9E:7F:A3:96:24:96:6E:6E:3E:1C:A4:D5:5D"}}},"request":{"raw":"GET /ftl//commonPage/commonContent/nav/images/navbar-sub-sprite2.png.base64 HTTP/1.1\r\nHost: 8vpfnx.bqkmk.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://rb88t.com:8989\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rb88t.com:8989/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/plain; charset=utf-8\r\ncontent-length: 73333\r\nserver: Default-server-KS-CLOUD-XG-FOREIGN-12-04\r\netag: \"68b69275-11e75\"\r\ndate: Mon, 20 Oct 2025 04:25:44 GMT\r\nlast-modified: Tue, 02 Sep 2025 06:45:09 GMT\r\nexpires: Wed, 19 Nov 2025 04:25:44 GMT\r\nage: 951594\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\nx-frame-options: SAMEORIGIN\r\nx-cache: MISS\r\nuuid: -\r\nout-line: gb-cdn-212\r\nx-link-via: xg21:443;xg12:80;\r\nx-cache-status: MISS from KS-CLOUD-XG-FOREIGN-12-04, HIT from KS-CLOUD-XG-FOREIGN-21-01\r\nx-cdn-request-id: c76f05e30f2a918cace66ff61cae99a7\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":73333,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"e09c7b111da72ff020d33a8978446fbc","sha1":"aa301c18846db062dc85f330f615e3462167ed51","sha256":"d2a00ca8254c1316538c612d648dd11c093e17fad8a9e2c2823c3a65373cd401","sha512":"e2d07eb9a5c109a3e73fa18a409691fe25ffe97d2e82d3f0092a30bf0be6c5bef387e3e190838d5eb80ea41d41fddcef16df874d4aaee91b5ff35d8861cc68cf","ssdeep":"1536:k9sSaVz0lJT/xf5n6O7nn+7lSBsyeUPlVVdxKLQ9oVIrBwvUou:k9sftctT+5g2U/ReQ9oV1Uou","tlshash":"1763026f2e543c067e2466fc359b8b10001d5f63603de7dea0a9fa23f297196f24ab54","first_seen":"2025-09-18T16:22:49.423406Z","last_seen":"2026-04-18T04:41:00.368806Z","times_seen":639,"resource_available":false,"data":null}},"time_used":788,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":761,"receive":27,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"8vpfnx.bqkmk.cn/ftl//commonPage/commonContent/nav/images/navbar-sub-sprite2.png.base64","fqdn":"8vpfnx.bqkmk.cn","domain":"bqkmk.cn","tld":"cn"},"ip":{"addr":"103.198.200.7","port":443,"asn":138915,"as":"Kaopu Cloud HK Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://rb88t.com:8989/","date":"2025-10-31T04:45:38.286Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.bqkmk.cn","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 20 Oct 2025 00:00:00 GMT","end":"Tue, 20 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"CD:A6:04:CF:32:73:E5:24:43:2F:6D:D8:78:B9:CF:F5:FF:75:2B:72","sha256":"D4:BA:B1:C0:7D:2E:00:30:EC:84:7E:26:6D:DB:2A:4F:A5:87:A0:9E:7F:A3:96:24:96:6E:6E:3E:1C:A4:D5:5D"}}},"request":{"raw":"GET /ftl//commonPage/commonContent/nav/images/navbar-sub-sprite2.png.base64 HTTP/1.1\r\nHost: 8vpfnx.bqkmk.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://rb88t.com:8989\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rb88t.com:8989/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/plain; charset=utf-8\r\ncontent-length: 73333\r\nserver: Default-server-KS-CLOUD-XG-FOREIGN-12-04\r\netag: \"68b69275-11e75\"\r\ndate: Mon, 20 Oct 2025 04:25:44 GMT\r\nlast-modified: Tue, 02 Sep 2025 06:45:09 GMT\r\nexpires: Wed, 19 Nov 2025 04:25:44 GMT\r\nage: 951594\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\nx-frame-options: SAMEORIGIN\r\nx-cache: MISS\r\nuuid: -\r\nout-line: gb-cdn-212\r\nx-link-via: xg21:443;xg12:80;\r\nx-cache-status: MISS from KS-CLOUD-XG-FOREIGN-12-04, HIT from KS-CLOUD-XG-FOREIGN-21-01\r\nx-cdn-request-id: 58b2d0c501e4ae6b8aad84f79df89d9f\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":73333,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"e09c7b111da72ff020d33a8978446fbc","sha1":"aa301c18846db062dc85f330f615e3462167ed51","sha256":"d2a00ca8254c1316538c612d648dd11c093e17fad8a9e2c2823c3a65373cd401","sha512":"e2d07eb9a5c109a3e73fa18a409691fe25ffe97d2e82d3f0092a30bf0be6c5bef387e3e190838d5eb80ea41d41fddcef16df874d4aaee91b5ff35d8861cc68cf","ssdeep":"1536:k9sSaVz0lJT/xf5n6O7nn+7lSBsyeUPlVVdxKLQ9oVIrBwvUou:k9sftctT+5g2U/ReQ9oV1Uou","tlshash":"1763026f2e543c067e2466fc359b8b10001d5f63603de7dea0a9fa23f297196f24ab54","first_seen":"2025-09-18T16:22:49.423406Z","last_seen":"2026-04-18T04:41:00.368806Z","times_seen":639,"resource_available":false,"data":null}},"time_used":813,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":787,"receive":26,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"8vpfnx.bqkmk.cn/ftl/commonPage/images/partner/partner-hongtu-blueGrey.png.base64","fqdn":"8vpfnx.bqkmk.cn","domain":"bqkmk.cn","tld":"cn"},"ip":{"addr":"103.198.200.7","port":443,"asn":138915,"as":"Kaopu Cloud HK Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://rb88t.com:8989/","date":"2025-10-31T04:45:39.056Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.bqkmk.cn","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 20 Oct 2025 00:00:00 GMT","end":"Tue, 20 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"CD:A6:04:CF:32:73:E5:24:43:2F:6D:D8:78:B9:CF:F5:FF:75:2B:72","sha256":"D4:BA:B1:C0:7D:2E:00:30:EC:84:7E:26:6D:DB:2A:4F:A5:87:A0:9E:7F:A3:96:24:96:6E:6E:3E:1C:A4:D5:5D"}}},"request":{"raw":"GET /ftl/commonPage/images/partner/partner-hongtu-blueGrey.png.base64 HTTP/1.1\r\nHost: 8vpfnx.bqkmk.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://rb88t.com:8989\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rb88t.com:8989/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/plain; charset=utf-8\r\ncontent-length: 106313\r\nserver: Default-server-KS-CLOUD-XG-FOREIGN-12-03\r\netag: \"68b69275-19f49\"\r\ndate: Mon, 20 Oct 2025 04:19:13 GMT\r\nlast-modified: Tue, 02 Sep 2025 06:45:09 GMT\r\nexpires: Wed, 19 Nov 2025 04:19:13 GMT\r\nage: 951985\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\nx-frame-options: SAMEORIGIN\r\nx-cache: HIT\r\nuuid: -\r\nout-line: gb-cdn-212\r\nx-link-via: xg21:443;xg12:80;\r\nx-cache-status: MISS from KS-CLOUD-XG-FOREIGN-12-03, HIT from KS-CLOUD-XG-FOREIGN-21-13\r\nx-cdn-request-id: 167c47cf806efdc9702d3ac600988b3a\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":106313,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"37075466e8ede9937505a62ba591f77c","sha1":"46052e5f69ce3e53d15108e272c2a76dbfd02217","sha256":"3ff5df0b6596fa59aeeedd78fa1586a1ecd3749e70cd3e294c20888bca51851d","sha512":"ec78c9a7b8c0c6a83178da914e6dbf5fec3d6ed3dac5519385845a9b23d21027af90d0cd86ed2a3f337effcf09fbac31baaabe48696d0746e3e919342f7828e1","ssdeep":"1536:WWW522aOYO4kezvJYez8ZJ073qeCzSyqmxHW6iP2nPjm:WWW522dYnkeO08ZJ09eSHmx2TPOPjm","tlshash":"1da312581fb326ed956e424c4df9e5f1d42e60c291e2a2050fa0a3e2fc3c04785e6ee7","first_seen":"2025-09-05T06:26:06.67207Z","last_seen":"2026-04-17T04:44:35.189692Z","times_seen":1747,"resource_available":false,"data":null}},"time_used":342,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":322,"receive":20,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"8vpfnx.bqkmk.cn/ftl/commonPage/images/partner/partner-hongtu-brown01.png.base64","fqdn":"8vpfnx.bqkmk.cn","domain":"bqkmk.cn","tld":"cn"},"ip":{"addr":"103.198.200.7","port":443,"asn":138915,"as":"Kaopu Cloud HK Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://rb88t.com:8989/","date":"2025-10-31T04:45:39.066Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.bqkmk.cn","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 20 Oct 2025 00:00:00 GMT","end":"Tue, 20 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"CD:A6:04:CF:32:73:E5:24:43:2F:6D:D8:78:B9:CF:F5:FF:75:2B:72","sha256":"D4:BA:B1:C0:7D:2E:00:30:EC:84:7E:26:6D:DB:2A:4F:A5:87:A0:9E:7F:A3:96:24:96:6E:6E:3E:1C:A4:D5:5D"}}},"request":{"raw":"GET /ftl/commonPage/images/partner/partner-hongtu-brown01.png.base64 HTTP/1.1\r\nHost: 8vpfnx.bqkmk.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://rb88t.com:8989\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rb88t.com:8989/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/plain; charset=utf-8\r\ncontent-length: 114431\r\nserver: Default-server-KS-CLOUD-XG-FOREIGN-12-01\r\netag: \"68b69275-1beff\"\r\ndate: Mon, 20 Oct 2025 04:19:13 GMT\r\nlast-modified: Tue, 02 Sep 2025 06:45:09 GMT\r\nexpires: Wed, 19 Nov 2025 04:19:13 GMT\r\nage: 951986\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\nx-frame-options: SAMEORIGIN\r\nx-cache: HIT\r\nuuid: -\r\nout-line: gb-cdn-211\r\nx-link-via: xg21:443;xg12:80;\r\nx-cache-status: MISS from KS-CLOUD-XG-FOREIGN-12-01, HIT from KS-CLOUD-XG-FOREIGN-21-11\r\nx-cdn-request-id: 330f9af6b98d1a48b9730ef2d7eb02be\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":114431,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"13705bb454fa93a337d360fde95d32ed","sha1":"f17931976273af97665c359e14c5d7b673ded90b","sha256":"221a4adff18935e8dd8d421dd0dfb431bab972377ff4ead01e00cdc9dbf73127","sha512":"fc3c18262e7afc15b4716e6ed6869f20c27749dc181e010736e5314d0cc96d33826337eb3198e8425dbf01766d7c7cd2d85ce3cf594c4509106540464dda76a7","ssdeep":"3072:d1tyThaOfU3ozO51gip4i02XfacJ7TznFNnOOa:d1tyT8cUM5hcRnFVW","tlshash":"20b312a0dce07db423bb950ca3bc9f186243145f03a6269321b3f5430d627a4a6fd772","first_seen":"2025-09-18T16:22:49.418873Z","last_seen":"2026-04-17T04:44:35.216553Z","times_seen":1726,"resource_available":false,"data":null}},"time_used":528,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":506,"receive":22,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"8vpfnx.bqkmk.cn/ftl/ysb1758-02/themes/images/login_os.png.base64","fqdn":"8vpfnx.bqkmk.cn","domain":"bqkmk.cn","tld":"cn"},"ip":{"addr":"103.198.200.7","port":443,"asn":138915,"as":"Kaopu Cloud HK Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://rb88t.com:8989/","date":"2025-10-31T04:45:39.393Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.bqkmk.cn","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 20 Oct 2025 00:00:00 GMT","end":"Tue, 20 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"CD:A6:04:CF:32:73:E5:24:43:2F:6D:D8:78:B9:CF:F5:FF:75:2B:72","sha256":"D4:BA:B1:C0:7D:2E:00:30:EC:84:7E:26:6D:DB:2A:4F:A5:87:A0:9E:7F:A3:96:24:96:6E:6E:3E:1C:A4:D5:5D"}}},"request":{"raw":"GET /ftl/ysb1758-02/themes/images/login_os.png.base64 HTTP/1.1\r\nHost: 8vpfnx.bqkmk.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://rb88t.com:8989\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rb88t.com:8989/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/plain; charset=utf-8\r\ncontent-length: 1990\r\nserver: Default-server-KS-CLOUD-XG-FOREIGN-12-04\r\netag: \"68ec518a-7c6\"\r\ndate: Wed, 22 Oct 2025 08:45:20 GMT\r\nlast-modified: Mon, 13 Oct 2025 01:10:34 GMT\r\nexpires: Fri, 21 Nov 2025 08:45:20 GMT\r\nage: 763218\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\nx-frame-options: SAMEORIGIN\r\nx-cache: MISS\r\nuuid: -\r\nout-line: gb-cdn-211\r\nx-link-via: xg21:443;xg12:80;\r\nx-cache-status: MISS from KS-CLOUD-XG-FOREIGN-12-04, HIT from KS-CLOUD-XG-FOREIGN-21-10\r\nx-cdn-request-id: c6210275c079f973569bc86204fbed1f\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1990,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"a28882a0f6f4259b839c46595cf824a4","sha1":"e0e736ea53d20349559b52c413cae19a7abb8c96","sha256":"c163852d50c6f581c0ba771911feacbbb43b47bc7b157722778a0f47cae4e0f7","sha512":"c444afde3d1877b363c6b3a78674debe2f566ce27bafa15ad29a949f5e155ab03806b8e8799041b176d86e74cee81ebd8f359c49ec9e11d2c6cbf2fb61af2bfb","ssdeep":"","tlshash":"6541e67fad363b1d1224a81867f265753d9a594a2c4d03b750b730220cda79826cf29c","first_seen":"2025-10-13T02:05:29.065866Z","last_seen":"2026-05-23T18:41:03.113619Z","times_seen":78,"resource_available":false,"data":null}},"time_used":261,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":261,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"8vpfnx.bqkmk.cn/ftl/ysb1758-02/themes/images/bg-products.gif.base64","fqdn":"8vpfnx.bqkmk.cn","domain":"bqkmk.cn","tld":"cn"},"ip":{"addr":"103.198.200.7","port":443,"asn":138915,"as":"Kaopu Cloud HK Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://rb88t.com:8989/","date":"2025-10-31T04:45:39.460Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.bqkmk.cn","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 20 Oct 2025 00:00:00 GMT","end":"Tue, 20 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"CD:A6:04:CF:32:73:E5:24:43:2F:6D:D8:78:B9:CF:F5:FF:75:2B:72","sha256":"D4:BA:B1:C0:7D:2E:00:30:EC:84:7E:26:6D:DB:2A:4F:A5:87:A0:9E:7F:A3:96:24:96:6E:6E:3E:1C:A4:D5:5D"}}},"request":{"raw":"GET /ftl/ysb1758-02/themes/images/bg-products.gif.base64 HTTP/1.1\r\nHost: 8vpfnx.bqkmk.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://rb88t.com:8989\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rb88t.com:8989/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/plain; charset=utf-8\r\ncontent-length: 28413\r\nserver: Default-server-KS-CLOUD-XG-FOREIGN-12-03\r\netag: \"68d38ff0-6efd\"\r\ndate: Wed, 22 Oct 2025 08:45:21 GMT\r\nlast-modified: Wed, 24 Sep 2025 06:30:08 GMT\r\nexpires: Fri, 21 Nov 2025 08:45:21 GMT\r\nage: 763218\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\nx-frame-options: SAMEORIGIN\r\nx-cache: MISS\r\nuuid: -\r\nout-line: gb-cdn-212\r\nx-link-via: xg21:443;xg12:80;\r\nx-cache-status: MISS from KS-CLOUD-XG-FOREIGN-12-03, HIT from KS-CLOUD-XG-FOREIGN-21-11\r\nx-cdn-request-id: 6156dae9ca9148f18a2a240e40b90c04\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":28413,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"d892e587b7a49e504868bfd2a0a21f20","sha1":"960e3851883dbda8687f203e48aa6378ef84e397","sha256":"94e021b79a655d45519d465610b1cfdfdd2f1908890e433c3b7d867dfaffe819","sha512":"8a1de4fa82e14da2a1f85d7b6ac7d4f0f575d3b0a67cfc02935ded833fc022a07629dc9c587c7d042228561967760a32a80dca34e779ef3affd840152bb5a2b3","ssdeep":"768:vNNzwhWZwiiUI/9FRmrUFVsFkAmikDRqd7ry3Kjrptf:v/zwhWZxiT/dPAqNqdq6jrpF","tlshash":"a4d2f0722d312e5b3baf9413305c0ef69e21b6af011eb25c80da9da510be0c64d66f5e","first_seen":"2023-04-16T16:45:37Z","last_seen":"2026-06-07T07:30:11.553079Z","times_seen":7463,"resource_available":false,"data":null}},"time_used":269,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":267,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"8vpfnx.bqkmk.cn/ftl/ysb1758-02/themes/images/bg-products.gif.base64","fqdn":"8vpfnx.bqkmk.cn","domain":"bqkmk.cn","tld":"cn"},"ip":{"addr":"103.198.200.7","port":443,"asn":138915,"as":"Kaopu Cloud HK Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://rb88t.com:8989/","date":"2025-10-31T04:45:39.464Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.bqkmk.cn","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 20 Oct 2025 00:00:00 GMT","end":"Tue, 20 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"CD:A6:04:CF:32:73:E5:24:43:2F:6D:D8:78:B9:CF:F5:FF:75:2B:72","sha256":"D4:BA:B1:C0:7D:2E:00:30:EC:84:7E:26:6D:DB:2A:4F:A5:87:A0:9E:7F:A3:96:24:96:6E:6E:3E:1C:A4:D5:5D"}}},"request":{"raw":"GET /ftl/ysb1758-02/themes/images/bg-products.gif.base64 HTTP/1.1\r\nHost: 8vpfnx.bqkmk.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://rb88t.com:8989\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rb88t.com:8989/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/plain; charset=utf-8\r\ncontent-length: 28413\r\nserver: Default-server-KS-CLOUD-XG-FOREIGN-12-03\r\netag: \"68d38ff0-6efd\"\r\ndate: Wed, 22 Oct 2025 08:45:21 GMT\r\nlast-modified: Wed, 24 Sep 2025 06:30:08 GMT\r\nexpires: Fri, 21 Nov 2025 08:45:21 GMT\r\nage: 763218\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\nx-frame-options: SAMEORIGIN\r\nx-cache: MISS\r\nuuid: -\r\nout-line: gb-cdn-212\r\nx-link-via: xg21:443;xg12:80;\r\nx-cache-status: MISS from KS-CLOUD-XG-FOREIGN-12-03, HIT from KS-CLOUD-XG-FOREIGN-21-11\r\nx-cdn-request-id: 60b04d15c19cf76bdd26fab9ffc4b124\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":28413,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"d892e587b7a49e504868bfd2a0a21f20","sha1":"960e3851883dbda8687f203e48aa6378ef84e397","sha256":"94e021b79a655d45519d465610b1cfdfdd2f1908890e433c3b7d867dfaffe819","sha512":"8a1de4fa82e14da2a1f85d7b6ac7d4f0f575d3b0a67cfc02935ded833fc022a07629dc9c587c7d042228561967760a32a80dca34e779ef3affd840152bb5a2b3","ssdeep":"768:vNNzwhWZwiiUI/9FRmrUFVsFkAmikDRqd7ry3Kjrptf:v/zwhWZxiT/dPAqNqdq6jrpF","tlshash":"a4d2f0722d312e5b3baf9413305c0ef69e21b6af011eb25c80da9da510be0c64d66f5e","first_seen":"2023-04-16T16:45:37Z","last_seen":"2026-06-07T07:30:11.553079Z","times_seen":7463,"resource_available":false,"data":null}},"time_used":272,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":268,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"8vpfnx.bqkmk.cn/ftl/ysb1758-02/images/index-game.jpg.base64","fqdn":"8vpfnx.bqkmk.cn","domain":"bqkmk.cn","tld":"cn"},"ip":{"addr":"103.198.200.7","port":443,"asn":138915,"as":"Kaopu Cloud HK Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://rb88t.com:8989/","date":"2025-10-31T04:45:39.468Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.bqkmk.cn","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 20 Oct 2025 00:00:00 GMT","end":"Tue, 20 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"CD:A6:04:CF:32:73:E5:24:43:2F:6D:D8:78:B9:CF:F5:FF:75:2B:72","sha256":"D4:BA:B1:C0:7D:2E:00:30:EC:84:7E:26:6D:DB:2A:4F:A5:87:A0:9E:7F:A3:96:24:96:6E:6E:3E:1C:A4:D5:5D"}}},"request":{"raw":"GET /ftl/ysb1758-02/images/index-game.jpg.base64 HTTP/1.1\r\nHost: 8vpfnx.bqkmk.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://rb88t.com:8989\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rb88t.com:8989/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/plain; charset=utf-8\r\ncontent-length: 15510\r\nserver: Default-server-KS-CLOUD-XG-FOREIGN-12-03\r\netag: \"68d38fef-3c96\"\r\ndate: Wed, 22 Oct 2025 08:45:21 GMT\r\nlast-modified: Wed, 24 Sep 2025 06:30:07 GMT\r\nexpires: Fri, 21 Nov 2025 08:45:21 GMT\r\nage: 763217\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\nx-frame-options: SAMEORIGIN\r\nx-cache: HIT\r\nuuid: -\r\nout-line: gb-cdn-211\r\nx-link-via: xg21:443;xg12:80;\r\nx-cache-status: MISS from KS-CLOUD-XG-FOREIGN-12-03, HIT from KS-CLOUD-XG-FOREIGN-21-10\r\nx-cdn-request-id: e02a8195ed6dfdf3eb7dcfc96eb8488c\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":15510,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"f952beea0ea4245c919822cc678b47c6","sha1":"183dea21737684ff91760fff6c50a7de52f44058","sha256":"3cb7fb166036f2a11c8526d3275994ccf2cf2a870684bfe5b8f7de981b07399a","sha512":"d8f7a244f87030da3891f1289eb67ec6accf30d75c3168df763fe87f9ff02ec8096d10d888873267126b78ca530af5a4981e28434a1a1dabdc19e9636d2ef0ed","ssdeep":"384:1P61zFG2s92vCX3vuNzxYY00xtWs0O/vfrsI2/gi:l61o92aPujljzf0OnfC","tlshash":"cf62d0b638ba2cbc2864b746bd9078ad5e025dd33db4e4dad1dd0640e0f6b3df818960","first_seen":"2023-04-16T16:45:37Z","last_seen":"2026-06-07T07:30:11.540769Z","times_seen":7463,"resource_available":false,"data":null}},"time_used":268,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":267,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rb88t.com:8989/favicon.ico","fqdn":"rb88t.com","domain":"rb88t.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rb88t.com:8989/","date":"2025-10-31T04:45:39.738Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rb88t.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 16 Oct 2025 17:09:31 GMT","end":"Wed, 14 Jan 2026 17:09:30 GMT"},"fingerprint":{"sha1":"1E:C2:B3:67:0C:77:84:F1:9F:8D:AD:21:1B:38:A6:D8:C7:76:57:1C","sha256":"3B:31:2B:A2:8D:4D:4D:EC:78:17:C6:E3:F3:EA:94:02:0E:AF:0F:86:CC:F4:27:C3:4D:68:DF:1D:2C:E4:19:9B"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: rb88t.com:8989\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rb88t.com:8989/\r\nCookie: sticket=qSm1NbVZtTnpZeUxU; route=c7419011ef227a9b9406a6c2cd9b5007\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-26T13:24:10.517198Z","times_seen":17545338,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-31","alert":"Sinkholed","trigger":"rb88t.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-31","alert":"Sinkholed","trigger":"rb88t.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"8vpfnx.bqkmk.cn/ftl/commonPage/zh_CN/mobileTopic/images/special_3.jpg","fqdn":"8vpfnx.bqkmk.cn","domain":"bqkmk.cn","tld":"cn"},"ip":{"addr":"103.198.200.7","port":443,"asn":138915,"as":"Kaopu Cloud HK Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rb88t.com:8989/","date":"2025-10-31T04:45:36.429Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.bqkmk.cn","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 20 Oct 2025 00:00:00 GMT","end":"Tue, 20 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"CD:A6:04:CF:32:73:E5:24:43:2F:6D:D8:78:B9:CF:F5:FF:75:2B:72","sha256":"D4:BA:B1:C0:7D:2E:00:30:EC:84:7E:26:6D:DB:2A:4F:A5:87:A0:9E:7F:A3:96:24:96:6E:6E:3E:1C:A4:D5:5D"}}},"request":{"raw":"GET /ftl/commonPage/zh_CN/mobileTopic/images/special_3.jpg HTTP/1.1\r\nHost: 8vpfnx.bqkmk.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rb88t.com:8989/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/jpeg\r\ncontent-length: 6871\r\nserver: Default-server-KS-CLOUD-XG-FOREIGN-12-04\r\netag: \"5d848f4f-1ad7\"\r\ndate: Mon, 20 Oct 2025 04:19:08 GMT\r\nlast-modified: Fri, 20 Sep 2019 08:35:27 GMT\r\nexpires: Wed, 19 Nov 2025 04:19:08 GMT\r\nage: 951988\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nx-frame-options: SAMEORIGIN\r\nx-cache: HIT\r\nuuid: -\r\nout-line: gb-cdn-211\r\nx-link-via: xg21:443;xg12:80;\r\nx-cache-status: MISS from KS-CLOUD-XG-FOREIGN-12-04, HIT from KS-CLOUD-XG-FOREIGN-21-10\r\nx-cdn-request-id: 87b1a29f14e3c2d3f7ae22fe1a9c63e9\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":6871,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 168x168, components 3","md5":"99be4bfe275809d4e436b77c991b1381","sha1":"54eadee77394eb62ccf377ae68d9f49acb5b6785","sha256":"4ca35131972acdf420b94f0d64a5a0f504eb5a7b0e6fb7b8b467916a12aae37d","sha512":"452a79b02619ed5c1e4f81fc5a4a209cb8a11d03aadb1841ae9be18fbca088652cdb54340329c1bf57771abfb02ffed4bf75b61f4df96866b7f2358c36ae75a3","ssdeep":"192:p7FikLUR+6X7MCy5nSb1jSG99DX8yclWGo2yscY8:pfA3+gSGjX25+Y8","tlshash":"4ae18e26da8bdb85c4a4f2713f7d881a5551da1a5bd3f02160f8c41b3c9327c15e7a8f","first_seen":"2023-04-30T20:28:22Z","last_seen":"2026-07-26T05:01:44.846566Z","times_seen":17791,"resource_available":false,"data":null}},"time_used":1240,"timings":{"blocked":385,"dns":0,"connect":0,"send":0,"wait":855,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"8vpfnx.bqkmk.cn/ftl/commonPage/js/lazyload.js","fqdn":"8vpfnx.bqkmk.cn","domain":"bqkmk.cn","tld":"cn"},"ip":{"addr":"103.198.200.7","port":443,"asn":138915,"as":"Kaopu Cloud HK Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rb88t.com:8989/","date":"2025-10-31T04:45:36.306Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.bqkmk.cn","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 20 Oct 2025 00:00:00 GMT","end":"Tue, 20 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"CD:A6:04:CF:32:73:E5:24:43:2F:6D:D8:78:B9:CF:F5:FF:75:2B:72","sha256":"D4:BA:B1:C0:7D:2E:00:30:EC:84:7E:26:6D:DB:2A:4F:A5:87:A0:9E:7F:A3:96:24:96:6E:6E:3E:1C:A4:D5:5D"}}},"request":{"raw":"GET /ftl/commonPage/js/lazyload.js HTTP/1.1\r\nHost: 8vpfnx.bqkmk.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rb88t.com:8989/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 2731\r\nserver: Default-server-KS-CLOUD-XG-FOREIGN-12-04\r\netag: W/\"64d05f66-2f79\"\r\ndate: Mon, 20 Oct 2025 04:19:08 GMT\r\nlast-modified: Mon, 07 Aug 2023 03:05:10 GMT\r\nexpires: Wed, 19 Nov 2025 04:19:08 GMT\r\nage: 951988\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\nx-frame-options: SAMEORIGIN\r\nx-cache: HIT\r\nuuid: -\r\nout-line: gb-cdn-211\r\nx-link-via: xg21:443;xg12:80;\r\nx-cache-status: MISS from KS-CLOUD-XG-FOREIGN-12-04, HIT from KS-CLOUD-XG-FOREIGN-21-09\r\nx-cdn-request-id: facab570cbb36d97cc5d6700a8f8d85e\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":12153,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"d87854586672bff7f886a47da85da5ed","sha1":"8d0537030dc7a81ade87a41a75fd5a75e4e33da1","sha256":"17859187f895c27de8869fb6bfec579fd68c4588d0af71d08d334be92d144ada","sha512":"d8c3e724f00bcf1ebfe1f8e96dda01243cf22aef18a0fc5a25a42d84458ff58a22a316dabf1d80d1b4f4c28db79edbdf9ba19df755d72f2b0b9f64497137672f","ssdeep":"192:Cdr+EgBD7NiM7B1wV20jSCQrF/bcbe7/bgdCx4RTsmS3KDsS3CggvBSChKRJ0Suk:Cdr+JBDYpV20Ez+obgdsm3ROCJIqSJvG","tlshash":"304200483deb51aba1d3b0f89a5f11447235810b160eee253d6c9395af6093932f2ff9","first_seen":"2023-08-15T12:01:05Z","last_seen":"2026-07-26T05:01:44.841171Z","times_seen":17621,"resource_available":true,"data":null}},"time_used":771,"timings":{"blocked":506,"dns":0,"connect":0,"send":0,"wait":265,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"8vpfnx.bqkmk.cn/ftl/ysb1758-02/themes/images/dc_hot.gif.base64","fqdn":"8vpfnx.bqkmk.cn","domain":"bqkmk.cn","tld":"cn"},"ip":{"addr":"103.198.200.7","port":443,"asn":138915,"as":"Kaopu Cloud HK Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://rb88t.com:8989/","date":"2025-10-31T04:45:38.194Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.bqkmk.cn","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 20 Oct 2025 00:00:00 GMT","end":"Tue, 20 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"CD:A6:04:CF:32:73:E5:24:43:2F:6D:D8:78:B9:CF:F5:FF:75:2B:72","sha256":"D4:BA:B1:C0:7D:2E:00:30:EC:84:7E:26:6D:DB:2A:4F:A5:87:A0:9E:7F:A3:96:24:96:6E:6E:3E:1C:A4:D5:5D"}}},"request":{"raw":"GET /ftl/ysb1758-02/themes/images/dc_hot.gif.base64 HTTP/1.1\r\nHost: 8vpfnx.bqkmk.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://rb88t.com:8989\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rb88t.com:8989/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/plain; charset=utf-8\r\ncontent-length: 1881\r\nserver: Default-server-KS-CLOUD-XG-FOREIGN-12-04\r\netag: \"68f894e2-759\"\r\ndate: Wed, 22 Oct 2025 08:47:42 GMT\r\nlast-modified: Wed, 22 Oct 2025 08:25:06 GMT\r\nexpires: Fri, 21 Nov 2025 08:47:42 GMT\r\nage: 763076\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\nx-frame-options: SAMEORIGIN\r\nx-cache: MISS\r\nuuid: -\r\nout-line: gb-cdn-212\r\nx-link-via: xg21:443;xg12:80;\r\nx-cache-status: MISS from KS-CLOUD-XG-FOREIGN-12-04, HIT from KS-CLOUD-XG-FOREIGN-21-13\r\nx-cdn-request-id: dbcbeee2087a6fb4818f7b7b30964640\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1881,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"51f75edecbfa3c8682b0ac727ea4602d","sha1":"1f0b22b068fda6a0c2ee2a08cb7d081d0048e7fd","sha256":"5cf107f61227d7ef030e6ee0533aee68f2d65091c9b5b6387dcdfa31c1d3e973","sha512":"b2f8d6a1543b79c87a7c45f4d9beb43ded9c9456ebe864d3ef5ac70dcef7c00fe1cefae5e8f3c16ef5574b379243f03c4d6d170b71838c15dfd4530235fadffa","ssdeep":"","tlshash":"2041e63326a7792e0468ad2c3fbe78171ce9c6874c631ba9903a335e181f73456c9d65","first_seen":"2023-05-29T05:49:22Z","last_seen":"2026-06-01T23:54:58.401889Z","times_seen":340,"resource_available":false,"data":null}},"time_used":265,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":265,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rb88t.com:8989/index/getUserTimeZoneDate.html?t=mhedeb8t","fqdn":"rb88t.com","domain":"rb88t.com","tld":"com"},"ip":{"addr":"34.96.219.82","port":8989,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://rb88t.com:8989/","date":"2025-10-31T04:45:39.081Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rb88t.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 16 Oct 2025 17:09:31 GMT","end":"Wed, 14 Jan 2026 17:09:30 GMT"},"fingerprint":{"sha1":"1E:C2:B3:67:0C:77:84:F1:9F:8D:AD:21:1B:38:A6:D8:C7:76:57:1C","sha256":"3B:31:2B:A2:8D:4D:4D:EC:78:17:C6:E3:F3:EA:94:02:0E:AF:0F:86:CC:F4:27:C3:4D:68:DF:1D:2C:E4:19:9B"}}},"request":{"raw":"GET /index/getUserTimeZoneDate.html?t=mhedeb8t HTTP/1.1\r\nHost: rb88t.com:8989\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/javascript, */*; q=0.01\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Requested-With: XMLHttpRequest\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rb88t.com:8989/\r\nCookie: sticket=qSm1NbVZtTnpZeUxU; route=a9961c6ad4780ba0f3c8657ffc8a49b9\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 31 Oct 2025 04:45:39 GMT\r\ncontent-type: text/html;charset=utf-8\r\ncontent-length: 119\r\ncontent-disposition: inline;filename=f.txt\r\nsub-sys: msite\r\ncachettl: 3\r\nx-frame-options: SAMEORIGIN\r\nuuid: 01758-01-00000000-1761885939e8db\r\nout-line: gb-site-204\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":119,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"JSON text data","md5":"ad709a64aedcfb70f6caa91d25c5d2e6","sha1":"2f082120ef9496f32629ee07eb02e2a0e6ad7d78","sha256":"6de611d4f5d78847b3cfceaa52aed45974376653c7e167836a5ebb36ef3ba0d5","sha512":"69284c7759279918a84262a3881bfaab4bc402e5abd27342d25f187b7469437b1401aa98fea5313c93e1b6419d1c31ab96ab6db3814f2a9c45c2400f8a9a6677","ssdeep":"","tlshash":"94b09b5441555f5f0a1449a0d988b5cc4d6416571993c6155d96dd1c545e9651804111","first_seen":"2025-10-31T04:46:03.905085Z","last_seen":"2025-10-31T04:46:03.905085Z","times_seen":1,"resource_available":false,"data":null}},"time_used":259,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":259,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-31","alert":"Sinkholed","trigger":"rb88t.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-31","alert":"Sinkholed","trigger":"rb88t.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"8vpfnx.bqkmk.cn/ftl/commonPage/images/favicon/favicon_1758.png.base64","fqdn":"8vpfnx.bqkmk.cn","domain":"bqkmk.cn","tld":"cn"},"ip":{"addr":"103.198.200.7","port":443,"asn":138915,"as":"Kaopu Cloud HK Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://rb88t.com:8989/","date":"2025-10-31T04:45:39.403Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.bqkmk.cn","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 20 Oct 2025 00:00:00 GMT","end":"Tue, 20 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"CD:A6:04:CF:32:73:E5:24:43:2F:6D:D8:78:B9:CF:F5:FF:75:2B:72","sha256":"D4:BA:B1:C0:7D:2E:00:30:EC:84:7E:26:6D:DB:2A:4F:A5:87:A0:9E:7F:A3:96:24:96:6E:6E:3E:1C:A4:D5:5D"}}},"request":{"raw":"GET /ftl/commonPage/images/favicon/favicon_1758.png.base64 HTTP/1.1\r\nHost: 8vpfnx.bqkmk.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://rb88t.com:8989\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rb88t.com:8989/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/plain; charset=utf-8\r\ncontent-length: 787\r\nserver: Default-server-KS-CLOUD-XG-FOREIGN-12-04\r\netag: \"68d20d43-313\"\r\ndate: Mon, 20 Oct 2025 04:25:46 GMT\r\nlast-modified: Tue, 23 Sep 2025 03:00:19 GMT\r\nexpires: Wed, 19 Nov 2025 04:25:46 GMT\r\nage: 951593\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nx-frame-options: SAMEORIGIN\r\nx-cache: MISS\r\nuuid: -\r\nout-line: gb-cdn-212\r\nx-link-via: xg21:443;xg12:80;\r\nx-cache-status: MISS from KS-CLOUD-XG-FOREIGN-12-04, HIT from KS-CLOUD-XG-FOREIGN-21-11\r\nx-cdn-request-id: e066b8a7b2819e9ade674d2e8c6fb8a3\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":787,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"7b0c9827674508bf9e14f37d4bb346ba","sha1":"6277cbd52743249b83008970b513ec68c754a596","sha256":"0f512b8d92cce977fc32b606fdbfb24ea4ebfa2b82c567967a5e9d3ebfbee09d","sha512":"2cbda8b04d2917034da41f01c03c13ef96b57f72d4fab194c50e64d99f00b581ac970b1ee224fa8ff625ddf047fd54738ab38d181622f4bf3a24adfffe7b9858","ssdeep":"","tlshash":"f201757081190ee2e9a5ea697270004e8f22ed86651582c468b537fa90987a4e3dfde0","first_seen":"2023-10-16T02:24:17Z","last_seen":"2026-06-04T13:13:28.782791Z","times_seen":866,"resource_available":false,"data":null}},"time_used":261,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":260,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"8vpfnx.bqkmk.cn/ftl/commonPage/images/favicon/favicon_1758.png.base64","fqdn":"8vpfnx.bqkmk.cn","domain":"bqkmk.cn","tld":"cn"},"ip":{"addr":"103.198.200.7","port":443,"asn":138915,"as":"Kaopu Cloud HK Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://rb88t.com:8989/","date":"2025-10-31T04:45:39.418Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.bqkmk.cn","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 20 Oct 2025 00:00:00 GMT","end":"Tue, 20 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"CD:A6:04:CF:32:73:E5:24:43:2F:6D:D8:78:B9:CF:F5:FF:75:2B:72","sha256":"D4:BA:B1:C0:7D:2E:00:30:EC:84:7E:26:6D:DB:2A:4F:A5:87:A0:9E:7F:A3:96:24:96:6E:6E:3E:1C:A4:D5:5D"}}},"request":{"raw":"GET /ftl/commonPage/images/favicon/favicon_1758.png.base64 HTTP/1.1\r\nHost: 8vpfnx.bqkmk.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://rb88t.com:8989\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rb88t.com:8989/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/plain; charset=utf-8\r\ncontent-length: 787\r\nserver: Default-server-KS-CLOUD-XG-FOREIGN-12-04\r\netag: \"68d20d43-313\"\r\ndate: Mon, 20 Oct 2025 04:25:46 GMT\r\nlast-modified: Tue, 23 Sep 2025 03:00:19 GMT\r\nexpires: Wed, 19 Nov 2025 04:25:46 GMT\r\nage: 951593\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nx-frame-options: SAMEORIGIN\r\nx-cache: MISS\r\nuuid: -\r\nout-line: gb-cdn-212\r\nx-link-via: xg21:443;xg12:80;\r\nx-cache-status: MISS from KS-CLOUD-XG-FOREIGN-12-04, HIT from KS-CLOUD-XG-FOREIGN-21-11\r\nx-cdn-request-id: 1826e86b5a96cf075a2210bb030330df\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":787,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"7b0c9827674508bf9e14f37d4bb346ba","sha1":"6277cbd52743249b83008970b513ec68c754a596","sha256":"0f512b8d92cce977fc32b606fdbfb24ea4ebfa2b82c567967a5e9d3ebfbee09d","sha512":"2cbda8b04d2917034da41f01c03c13ef96b57f72d4fab194c50e64d99f00b581ac970b1ee224fa8ff625ddf047fd54738ab38d181622f4bf3a24adfffe7b9858","ssdeep":"","tlshash":"f201757081190ee2e9a5ea697270004e8f22ed86651582c468b537fa90987a4e3dfde0","first_seen":"2023-10-16T02:24:17Z","last_seen":"2026-06-04T13:13:28.782791Z","times_seen":866,"resource_available":false,"data":null}},"time_used":260,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":260,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"8vpfnx.bqkmk.cn/ftl/commonPage/js/jquery/jquery-1.11.3.min.js","fqdn":"8vpfnx.bqkmk.cn","domain":"bqkmk.cn","tld":"cn"},"ip":{"addr":"103.198.200.7","port":443,"asn":138915,"as":"Kaopu Cloud HK Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rb88t.com:8989/","date":"2025-10-31T04:45:36.295Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.bqkmk.cn","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 20 Oct 2025 00:00:00 GMT","end":"Tue, 20 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"CD:A6:04:CF:32:73:E5:24:43:2F:6D:D8:78:B9:CF:F5:FF:75:2B:72","sha256":"D4:BA:B1:C0:7D:2E:00:30:EC:84:7E:26:6D:DB:2A:4F:A5:87:A0:9E:7F:A3:96:24:96:6E:6E:3E:1C:A4:D5:5D"}}},"request":{"raw":"GET /ftl/commonPage/js/jquery/jquery-1.11.3.min.js HTTP/1.1\r\nHost: 8vpfnx.bqkmk.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rb88t.com:8989/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 33545\r\nserver: Default-server-KS-CLOUD-XG-FOREIGN-12-03\r\netag: W/\"5d848f4f-176d4\"\r\ndate: Mon, 20 Oct 2025 04:19:08 GMT\r\nlast-modified: Fri, 20 Sep 2019 08:35:27 GMT\r\nexpires: Wed, 19 Nov 2025 04:19:08 GMT\r\nage: 951989\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\nx-frame-options: SAMEORIGIN\r\nx-cache: HIT\r\nuuid: -\r\nout-line: gb-cdn-211\r\nx-link-via: xg21:443;xg12:80;\r\nx-cache-status: MISS from KS-CLOUD-XG-FOREIGN-12-03, HIT from KS-CLOUD-XG-FOREIGN-21-07\r\nx-cdn-request-id: 8d90fc419ec8b8a3ce9917a8fbe0ef34\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":95956,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (32038)","md5":"b091a47f6b91e26c93a848092c6f3788","sha1":"52918af2d431e73464060b35d364640c8db75606","sha256":"329ab92b9276ef4e3148f69be6b208969bebdf2db3121a589caa172453fd9f10","sha512":"ab444102be476f0104eeff79c9b596174852b4fe8cbd0b5a0279d56f106a166ec39304636e09326213de000b102ce8f517bb268a9abb2955c56ee4f18b464ea8","ssdeep":"1536:OP10iSi65U/dXXeyhzeBuG+HYE0WEeLDFoNqLTW8+S5VRZIVI6xSb8xh2ZbQnRmS:R+41ZqLTW8xRrqSb8qGH77da98Hr3","tlshash":"6893d8d9b7d67162977730b850bf510bb13a98eab80c4ca0f0a4d8e47d74a89507bf2d","first_seen":"2023-03-07T01:10:10Z","last_seen":"2026-07-26T10:06:40.467894Z","times_seen":18406,"resource_available":true,"data":null}},"time_used":1892,"timings":{"blocked":534,"dns":1,"connect":274,"send":0,"wait":772,"receive":23,"ssl":284},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"8vpfnx.bqkmk.cn/ftl/commonPage/js/gui-base.js","fqdn":"8vpfnx.bqkmk.cn","domain":"bqkmk.cn","tld":"cn"},"ip":{"addr":"103.198.200.7","port":443,"asn":138915,"as":"Kaopu Cloud HK Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rb88t.com:8989/","date":"2025-10-31T04:45:36.307Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.bqkmk.cn","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 20 Oct 2025 00:00:00 GMT","end":"Tue, 20 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"CD:A6:04:CF:32:73:E5:24:43:2F:6D:D8:78:B9:CF:F5:FF:75:2B:72","sha256":"D4:BA:B1:C0:7D:2E:00:30:EC:84:7E:26:6D:DB:2A:4F:A5:87:A0:9E:7F:A3:96:24:96:6E:6E:3E:1C:A4:D5:5D"}}},"request":{"raw":"GET /ftl/commonPage/js/gui-base.js HTTP/1.1\r\nHost: 8vpfnx.bqkmk.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rb88t.com:8989/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 15779\r\nserver: Default-server-KS-CLOUD-XG-FOREIGN-12-04\r\netag: W/\"64ddbaed-ee5c\"\r\ndate: Mon, 20 Oct 2025 04:19:08 GMT\r\nlast-modified: Thu, 17 Aug 2023 06:15:09 GMT\r\nexpires: Wed, 19 Nov 2025 04:19:08 GMT\r\nage: 951988\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\nx-frame-options: SAMEORIGIN\r\nx-cache: HIT\r\nuuid: -\r\nout-line: gb-cdn-211\r\nx-link-via: xg21:443;xg12:80;\r\nx-cache-status: MISS from KS-CLOUD-XG-FOREIGN-12-04, HIT from KS-CLOUD-XG-FOREIGN-21-10\r\nx-cdn-request-id: 5393ea1717151fa8bf763af82a5a6314\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":61020,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (11056)","md5":"e6ce47d880d7a50ddf91b074c8572edf","sha1":"6a3657c67209136e5b544859daecf16f2d153b72","sha256":"c49e04c7ecfd07c74b58cf161ef2b58f2bc837a9091ed1ae090a33734cdaa734","sha512":"0946a1cb9d048b485dadf4056a4aa7be685a8906240a828a5ac776a4e1eae2ed5ef238bd0724da41cce33324357ba44704d34a6766430f1552630f9a17b664f4","ssdeep":"768:+lkflKVlvREcS38xHmuqrRO/5IS3oFaJX+mQdudqD9jAXImsUh8H3yALdODRG4eK:6ClKVlvREcYoHz0PszIfoALkMEY16pB","tlshash":"4353c80a72b130a106efb1b6515f460d323a6927d44ac458b97c9ae43f74f28316bf7e","first_seen":"2023-08-26T00:19:56Z","last_seen":"2026-07-26T05:01:44.845389Z","times_seen":17075,"resource_available":true,"data":null}},"time_used":771,"timings":{"blocked":505,"dns":0,"connect":0,"send":0,"wait":266,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"8vpfnx.bqkmk.cn/ftl/commonPage/js/layer.js","fqdn":"8vpfnx.bqkmk.cn","domain":"bqkmk.cn","tld":"cn"},"ip":{"addr":"103.198.200.7","port":443,"asn":138915,"as":"Kaopu Cloud HK Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rb88t.com:8989/","date":"2025-10-31T04:45:36.310Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.bqkmk.cn","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 20 Oct 2025 00:00:00 GMT","end":"Tue, 20 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"CD:A6:04:CF:32:73:E5:24:43:2F:6D:D8:78:B9:CF:F5:FF:75:2B:72","sha256":"D4:BA:B1:C0:7D:2E:00:30:EC:84:7E:26:6D:DB:2A:4F:A5:87:A0:9E:7F:A3:96:24:96:6E:6E:3E:1C:A4:D5:5D"}}},"request":{"raw":"GET /ftl/commonPage/js/layer.js HTTP/1.1\r\nHost: 8vpfnx.bqkmk.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rb88t.com:8989/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 7599\r\nserver: Default-server-KS-CLOUD-XG-FOREIGN-12-01\r\netag: W/\"5d848f4f-55f6\"\r\ndate: Mon, 20 Oct 2025 04:19:08 GMT\r\nlast-modified: Fri, 20 Sep 2019 08:35:27 GMT\r\nexpires: Wed, 19 Nov 2025 04:19:08 GMT\r\nage: 951988\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\nx-frame-options: SAMEORIGIN\r\nx-cache: HIT\r\nuuid: -\r\nout-line: gb-cdn-212\r\nx-link-via: xg21:443;xg12:80;\r\nx-cache-status: MISS from KS-CLOUD-XG-FOREIGN-12-01, HIT from KS-CLOUD-XG-FOREIGN-21-01\r\nx-cdn-request-id: c22c39c5708fbc72e9640845d5e16102\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":22006,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (21910)","md5":"cb96339625e9d456e32f86cdb3c7a7a1","sha1":"1301165c58bbb13c542cba493b7ab5774e87e31f","sha256":"17fb047ba6828fcbdf2ca226fa4594cfded2b2fdfeaff89a5bd81c7cf0359919","sha512":"53083bf4d6d450b1e9402c3f3dc40fb3434a27d47fbabee51f4ce1d3577f2a0aabe90cf5f6dfc22830a3878ec7552a6bf6bff605c82a4f832c79f34f7657ccef","ssdeep":"384:r1dCih92A3DgrLXSt/SdMrXqE6tGLxzAOTElH0jjhtjfs8:r1YiV3D+WtXItqF13k8","tlshash":"6aa2b76a754034976323906ad11fba0b31f21d24d7078128f22bb4ae1dbcd95a2b7f5f","first_seen":"2023-04-05T18:30:47Z","last_seen":"2026-07-26T05:01:44.838984Z","times_seen":17821,"resource_available":true,"data":null}},"time_used":1024,"timings":{"blocked":503,"dns":0,"connect":0,"send":0,"wait":521,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"8vpfnx.bqkmk.cn/ftl//commonPage/commonContent/nav/images/sub-arrow.png.base64","fqdn":"8vpfnx.bqkmk.cn","domain":"bqkmk.cn","tld":"cn"},"ip":{"addr":"103.198.200.7","port":443,"asn":138915,"as":"Kaopu Cloud HK Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://rb88t.com:8989/","date":"2025-10-31T04:45:38.282Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.bqkmk.cn","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 20 Oct 2025 00:00:00 GMT","end":"Tue, 20 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"CD:A6:04:CF:32:73:E5:24:43:2F:6D:D8:78:B9:CF:F5:FF:75:2B:72","sha256":"D4:BA:B1:C0:7D:2E:00:30:EC:84:7E:26:6D:DB:2A:4F:A5:87:A0:9E:7F:A3:96:24:96:6E:6E:3E:1C:A4:D5:5D"}}},"request":{"raw":"GET /ftl//commonPage/commonContent/nav/images/sub-arrow.png.base64 HTTP/1.1\r\nHost: 8vpfnx.bqkmk.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://rb88t.com:8989\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rb88t.com:8989/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/plain; charset=utf-8\r\ncontent-length: 227\r\nserver: Default-server-KS-CLOUD-XG-FOREIGN-12-03\r\netag: \"667bb57c-e3\"\r\ndate: Mon, 20 Oct 2025 04:25:44 GMT\r\nlast-modified: Wed, 26 Jun 2024 06:30:20 GMT\r\nexpires: Wed, 19 Nov 2025 04:25:44 GMT\r\nage: 951594\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nx-frame-options: SAMEORIGIN\r\nx-cache: HIT\r\nuuid: -\r\nout-line: gb-cdn-211\r\nx-link-via: xg21:443;xg12:80;\r\nx-cache-status: MISS from KS-CLOUD-XG-FOREIGN-12-03, HIT from KS-CLOUD-XG-FOREIGN-21-01\r\nx-cdn-request-id: 6d20ad3ac6209271e4866defd583784b\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":227,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"77546ee8bcab279aee067f7794d08541","sha1":"e1ace21ee1e968151b5b0ad8da4b0ebf8420bdcf","sha256":"9f967376ac77e445b313fbebbab9a4572c0984edb80f6b5baa9c10f9bf68d647","sha512":"d56ff9fcf76a2153287b4b016b7e59f40c60859b36ac5d12bc96a43237a828cfcd4c0b5de142dbf178ebccef9092c3ae167ea7e3a59d359f50db78df36263b21","ssdeep":"","tlshash":"09d097310605283062ce68013802d1000e222b8f52a760407ff86023581b3c88a9a3c0","first_seen":"2024-09-24T19:10:13Z","last_seen":"2026-06-06T23:51:10.814802Z","times_seen":2088,"resource_available":false,"data":null}},"time_used":727,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":727,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"8vpfnx.bqkmk.cn/fserver/files/gb/1758/carousel/10045/1759417312619.jpg?wsSecret=29e28f9fcacfcb6c6561a54b8d6fe94c\u0026wsTime=1761885938","fqdn":"8vpfnx.bqkmk.cn","domain":"bqkmk.cn","tld":"cn"},"ip":{"addr":"103.198.200.7","port":443,"asn":138915,"as":"Kaopu Cloud HK Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rb88t.com:8989/","date":"2025-10-31T04:45:39.080Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.bqkmk.cn","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 20 Oct 2025 00:00:00 GMT","end":"Tue, 20 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"CD:A6:04:CF:32:73:E5:24:43:2F:6D:D8:78:B9:CF:F5:FF:75:2B:72","sha256":"D4:BA:B1:C0:7D:2E:00:30:EC:84:7E:26:6D:DB:2A:4F:A5:87:A0:9E:7F:A3:96:24:96:6E:6E:3E:1C:A4:D5:5D"}}},"request":{"raw":"GET /fserver/files/gb/1758/carousel/10045/1759417312619.jpg?wsSecret=29e28f9fcacfcb6c6561a54b8d6fe94c\u0026wsTime=1761885938 HTTP/1.1\r\nHost: 8vpfnx.bqkmk.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rb88t.com:8989/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/jpeg\r\ncontent-length: 91193\r\nserver: Default-server-KS-CLOUD-XG-FOREIGN-12-03\r\netag: \"68de93e0-16439\"\r\ndate: Mon, 20 Oct 2025 04:25:46 GMT\r\nlast-modified: Thu, 02 Oct 2025 15:01:52 GMT\r\nexpires: Wed, 19 Nov 2025 04:25:46 GMT\r\nage: 951592\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\nx-frame-options: SAMEORIGIN\r\nx-cache: MISS\r\nuuid: -\r\nout-line: gb-cdn-211\r\nx-link-via: xg21:443;xg12:80;\r\nx-cache-status: MISS from KS-CLOUD-XG-FOREIGN-12-03, HIT from KS-CLOUD-XG-FOREIGN-21-10\r\nx-cdn-request-id: 3df5dd3f56d153d54f84a27ca655578c\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":91193,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 844x214, components 3","md5":"d916e0665f302b8e35c3469947a56d20","sha1":"22cde107a9299ad68ece9794c358dceba3dee70b","sha256":"e6be6a8cc5955c91e61126b322c6201f5c69b2c5a80e6fef8f065df385ae1b3a","sha512":"0d2d23491a83408910b9c3d194ce3d94384c26e23c3a49c32b73fc868575da6eb9be0f1b18ecce8783c4185bb4801b8187dd9bb4edeef1d51362671338fe85ba","ssdeep":"1536:cSgIjKJOTPGbYuhUgJgl3LGYSBhxsAyBl6JEnZgADImK9szN9B:J9IXU7l3LGYyCBcJEODmK9s9","tlshash":"4a9302c507f7aa8998183b7f1ec467220f763305ffb2e60d24a98418da414daeabc755","first_seen":"2025-10-11T11:36:46.143056Z","last_seen":"2026-01-17T14:34:43.813968Z","times_seen":78,"resource_available":false,"data":null}},"time_used":542,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":528,"receive":14,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"8vpfnx.bqkmk.cn/fserver/files/gb/1758/Logo/406/1759215756769.png.base64","fqdn":"8vpfnx.bqkmk.cn","domain":"bqkmk.cn","tld":"cn"},"ip":{"addr":"103.198.200.7","port":443,"asn":138915,"as":"Kaopu Cloud HK Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://rb88t.com:8989/","date":"2025-10-31T04:45:39.371Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.bqkmk.cn","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 20 Oct 2025 00:00:00 GMT","end":"Tue, 20 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"CD:A6:04:CF:32:73:E5:24:43:2F:6D:D8:78:B9:CF:F5:FF:75:2B:72","sha256":"D4:BA:B1:C0:7D:2E:00:30:EC:84:7E:26:6D:DB:2A:4F:A5:87:A0:9E:7F:A3:96:24:96:6E:6E:3E:1C:A4:D5:5D"}}},"request":{"raw":"GET /fserver/files/gb/1758/Logo/406/1759215756769.png.base64 HTTP/1.1\r\nHost: 8vpfnx.bqkmk.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://rb88t.com:8989\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rb88t.com:8989/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/plain; charset=utf-8\r\ncontent-length: 3409\r\nserver: Default-server-KS-CLOUD-XG-FOREIGN-12-04\r\netag: \"68db808c-d51\"\r\ndate: Mon, 20 Oct 2025 04:25:46 GMT\r\nlast-modified: Tue, 30 Sep 2025 07:02:36 GMT\r\nexpires: Wed, 19 Nov 2025 04:25:46 GMT\r\nage: 951592\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\nx-frame-options: SAMEORIGIN\r\nx-cache: HIT\r\nuuid: -\r\nout-line: gb-cdn-212\r\nx-link-via: xg21:443;xg12:80;\r\nx-cache-status: MISS from KS-CLOUD-XG-FOREIGN-12-04, HIT from KS-CLOUD-XG-FOREIGN-21-15\r\nx-cdn-request-id: d2510bcbde5aa1849848354698eaf8c6\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":3409,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text, with very long lines (3409), with no line terminators","md5":"5656a08de40b3419b7143f274cc629cf","sha1":"eba08684f4b0507816d3d44e4ff153180c5ad9e9","sha256":"f0d09b8a83f0780cb4f71ae9dc0cd721b31117fbf982dacc9dc9f77b22b5071a","sha512":"d3c96998b4d0f251e97aa105b260214eb2e6950e141ac49ab36b1532b3d1ad0ffa3fafdc7aaf0d72d0750b4e9203a47b8596b190d6227d9368c7fad4def0afb8","ssdeep":"","tlshash":"14616eb65059e6c69f8b70c071f02855bd384f46dfa6082a850cf03f73e448dc270755","first_seen":"2025-10-11T11:36:46.136433Z","last_seen":"2026-05-23T18:41:03.126141Z","times_seen":81,"resource_available":false,"data":null}},"time_used":261,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":261,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"8vpfnx.bqkmk.cn/ftl/commonPage/js/jquery/jquery.super-marquee.js","fqdn":"8vpfnx.bqkmk.cn","domain":"bqkmk.cn","tld":"cn"},"ip":{"addr":"103.198.200.7","port":443,"asn":138915,"as":"Kaopu Cloud HK Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rb88t.com:8989/","date":"2025-10-31T04:45:36.311Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.bqkmk.cn","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 20 Oct 2025 00:00:00 GMT","end":"Tue, 20 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"CD:A6:04:CF:32:73:E5:24:43:2F:6D:D8:78:B9:CF:F5:FF:75:2B:72","sha256":"D4:BA:B1:C0:7D:2E:00:30:EC:84:7E:26:6D:DB:2A:4F:A5:87:A0:9E:7F:A3:96:24:96:6E:6E:3E:1C:A4:D5:5D"}}},"request":{"raw":"GET /ftl/commonPage/js/jquery/jquery.super-marquee.js HTTP/1.1\r\nHost: 8vpfnx.bqkmk.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rb88t.com:8989/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 1421\r\nserver: Default-server-KS-CLOUD-XG-FOREIGN-12-01\r\netag: W/\"5d848f4f-1151\"\r\ndate: Mon, 20 Oct 2025 04:19:08 GMT\r\nlast-modified: Fri, 20 Sep 2019 08:35:27 GMT\r\nexpires: Wed, 19 Nov 2025 04:19:08 GMT\r\nage: 951988\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\nvary: Accept-Encoding, Accept-Encoding\r\naccess-control-allow-origin: *\r\nx-frame-options: SAMEORIGIN\r\nx-cache: HIT\r\nuuid: -\r\nout-line: gb-cdn-212\r\ncontent-encoding: gzip\r\nx-link-via: xg21:443;xg12:80;\r\nx-cache-status: MISS from KS-CLOUD-XG-FOREIGN-12-01, HIT from KS-CLOUD-XG-FOREIGN-21-07\r\nx-cdn-request-id: a37fee1eb3c80d77ea0304990ec0e3b0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":4433,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (4433), with no line terminators","md5":"f77d83590bc0a69298f2fbcc5d9911cd","sha1":"1d6aa25d7052f53ad0181385e5efe72f224bbdb9","sha256":"1d042b9441e860ddcc01b9e9e5e8d354121ee0e31b47f6e18a321e2e633d22e7","sha512":"a39dc6c01df32c8f72842af346f4d67e1278d37a74a0541537b8274b421bcfbc547a2f4844f3c4b6c5cdda4c78f0a8f41171c87ffd149ab52526a95bc6c5bf61","ssdeep":"96:nwzrUsI9/8w/ISEgOGXFRNcrc8PQjc3Pb:+rUsk88OnJQA3D","tlshash":"2991252d7290f5d559cf3c3be02b0b050c785123a54e00927a65def279ba379a607e1f","first_seen":"2023-03-07T01:14:38Z","last_seen":"2026-07-26T05:01:44.841706Z","times_seen":17885,"resource_available":true,"data":null}},"time_used":768,"timings":{"blocked":502,"dns":0,"connect":0,"send":0,"wait":266,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"8vpfnx.bqkmk.cn/ftl/commonPage/themes/hb/css/pc.css","fqdn":"8vpfnx.bqkmk.cn","domain":"bqkmk.cn","tld":"cn"},"ip":{"addr":"103.198.200.7","port":443,"asn":138915,"as":"Kaopu Cloud HK Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rb88t.com:8989/","date":"2025-10-31T04:45:36.318Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.bqkmk.cn","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 20 Oct 2025 00:00:00 GMT","end":"Tue, 20 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"CD:A6:04:CF:32:73:E5:24:43:2F:6D:D8:78:B9:CF:F5:FF:75:2B:72","sha256":"D4:BA:B1:C0:7D:2E:00:30:EC:84:7E:26:6D:DB:2A:4F:A5:87:A0:9E:7F:A3:96:24:96:6E:6E:3E:1C:A4:D5:5D"}}},"request":{"raw":"GET /ftl/commonPage/themes/hb/css/pc.css HTTP/1.1\r\nHost: 8vpfnx.bqkmk.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rb88t.com:8989/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css\r\ncontent-length: 911\r\nserver: Default-server-KS-CLOUD-XG-FOREIGN-12-01\r\netag: W/\"5d848f4f-b5d\"\r\ndate: Mon, 20 Oct 2025 04:19:13 GMT\r\nlast-modified: Fri, 20 Sep 2019 08:35:27 GMT\r\nexpires: Wed, 19 Nov 2025 04:19:13 GMT\r\nage: 951983\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\nx-frame-options: SAMEORIGIN\r\nx-cache: HIT\r\nuuid: -\r\nout-line: gb-cdn-211\r\nx-link-via: xg21:443;xg12:80;\r\nx-cache-status: MISS from KS-CLOUD-XG-FOREIGN-12-01, HIT from KS-CLOUD-XG-FOREIGN-21-06\r\nx-cdn-request-id: 3d5369bcaf3b3083071384ffff8a3967\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":2909,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"1da71520b7a0a61526a8fa8d0feb40d1","sha1":"ba1bf69dad8783563328054cae58ccabf1b00829","sha256":"5eb4d895bcb33061cda238c8ff4985ede69a866819b980c732cf3802ec101e8d","sha512":"d1cb92160523c231c4942f27c018bd3b30f89fc60153e23eb0a49d0696c896b0904ebe5db7cb97a0686f656d04a58f3ccf8fc0f09f2be703fa8400bd3270dfa8","ssdeep":"","tlshash":"d451dd305a02b1aaf42ffa677420874c2537004373169b3e72fd7ad1cfca9696136ad4","first_seen":"2023-04-05T18:30:47Z","last_seen":"2026-07-26T05:01:44.84772Z","times_seen":17607,"resource_available":false,"data":null}},"time_used":1044,"timings":{"blocked":496,"dns":0,"connect":0,"send":0,"wait":548,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"8vpfnx.bqkmk.cn/ftl//commonPage/commonContent/nav/images/navbar-sub-sprite2.png.base64","fqdn":"8vpfnx.bqkmk.cn","domain":"bqkmk.cn","tld":"cn"},"ip":{"addr":"103.198.200.7","port":443,"asn":138915,"as":"Kaopu Cloud HK Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://rb88t.com:8989/","date":"2025-10-31T04:45:38.277Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.bqkmk.cn","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 20 Oct 2025 00:00:00 GMT","end":"Tue, 20 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"CD:A6:04:CF:32:73:E5:24:43:2F:6D:D8:78:B9:CF:F5:FF:75:2B:72","sha256":"D4:BA:B1:C0:7D:2E:00:30:EC:84:7E:26:6D:DB:2A:4F:A5:87:A0:9E:7F:A3:96:24:96:6E:6E:3E:1C:A4:D5:5D"}}},"request":{"raw":"GET /ftl//commonPage/commonContent/nav/images/navbar-sub-sprite2.png.base64 HTTP/1.1\r\nHost: 8vpfnx.bqkmk.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://rb88t.com:8989\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rb88t.com:8989/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/plain; charset=utf-8\r\ncontent-length: 73333\r\nserver: Default-server-KS-CLOUD-XG-FOREIGN-12-04\r\netag: \"68b69275-11e75\"\r\ndate: Mon, 20 Oct 2025 04:25:44 GMT\r\nlast-modified: Tue, 02 Sep 2025 06:45:09 GMT\r\nexpires: Wed, 19 Nov 2025 04:25:44 GMT\r\nage: 951594\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\nx-frame-options: SAMEORIGIN\r\nx-cache: MISS\r\nuuid: -\r\nout-line: gb-cdn-212\r\nx-link-via: xg21:443;xg12:80;\r\nx-cache-status: MISS from KS-CLOUD-XG-FOREIGN-12-04, HIT from KS-CLOUD-XG-FOREIGN-21-01\r\nx-cdn-request-id: 19ca2cd931252317b52eaa016aac658d\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":73333,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"e09c7b111da72ff020d33a8978446fbc","sha1":"aa301c18846db062dc85f330f615e3462167ed51","sha256":"d2a00ca8254c1316538c612d648dd11c093e17fad8a9e2c2823c3a65373cd401","sha512":"e2d07eb9a5c109a3e73fa18a409691fe25ffe97d2e82d3f0092a30bf0be6c5bef387e3e190838d5eb80ea41d41fddcef16df874d4aaee91b5ff35d8861cc68cf","ssdeep":"1536:k9sSaVz0lJT/xf5n6O7nn+7lSBsyeUPlVVdxKLQ9oVIrBwvUou:k9sftctT+5g2U/ReQ9oV1Uou","tlshash":"1763026f2e543c067e2466fc359b8b10001d5f63603de7dea0a9fa23f297196f24ab54","first_seen":"2025-09-18T16:22:49.423406Z","last_seen":"2026-04-18T04:41:00.368806Z","times_seen":639,"resource_available":false,"data":null}},"time_used":723,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":686,"receive":37,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"8vpfnx.bqkmk.cn/ftl/ysb1758-02/themes/images/sports-infos-bg.png.base64","fqdn":"8vpfnx.bqkmk.cn","domain":"bqkmk.cn","tld":"cn"},"ip":{"addr":"103.198.200.7","port":443,"asn":138915,"as":"Kaopu Cloud HK Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://rb88t.com:8989/","date":"2025-10-31T04:45:39.449Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.bqkmk.cn","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 20 Oct 2025 00:00:00 GMT","end":"Tue, 20 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"CD:A6:04:CF:32:73:E5:24:43:2F:6D:D8:78:B9:CF:F5:FF:75:2B:72","sha256":"D4:BA:B1:C0:7D:2E:00:30:EC:84:7E:26:6D:DB:2A:4F:A5:87:A0:9E:7F:A3:96:24:96:6E:6E:3E:1C:A4:D5:5D"}}},"request":{"raw":"GET /ftl/ysb1758-02/themes/images/sports-infos-bg.png.base64 HTTP/1.1\r\nHost: 8vpfnx.bqkmk.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://rb88t.com:8989\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rb88t.com:8989/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/plain; charset=utf-8\r\ncontent-length: 5828\r\nserver: Default-server-KS-CLOUD-XG-FOREIGN-12-04\r\netag: \"68d38ff0-16c4\"\r\ndate: Wed, 22 Oct 2025 08:45:20 GMT\r\nlast-modified: Wed, 24 Sep 2025 06:30:08 GMT\r\nexpires: Fri, 21 Nov 2025 08:45:20 GMT\r\nage: 763218\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\nx-frame-options: SAMEORIGIN\r\nx-cache: HIT\r\nuuid: -\r\nout-line: gb-cdn-212\r\nx-link-via: xg21:443;xg12:80;\r\nx-cache-status: MISS from KS-CLOUD-XG-FOREIGN-12-04, HIT from KS-CLOUD-XG-FOREIGN-21-04\r\nx-cdn-request-id: cca04e6b71e6a950bd83308e23073d6d\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":5828,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"79c9b3586dba9b3c483f0b77075f62f2","sha1":"2fb032981889b677e8024a90150b7caf527f87e6","sha256":"28dae31296a9cb48ab278440246605b535b848a248cc93e22779300a1eac5e28","sha512":"3eb93900af2b6170d5db0456e8f4c15c9666b02e227deadbac99fa562cca9d91237e79d225ba71e551be9be42df93c93afb3beec557c2a747097a59c98438ac1","ssdeep":"96:dYvKcomUGg7DSm8wJtVZpTNrEgaVR/xFH1ikFe39KABm0pgJ3b8FfOq:dYSeU17mmzJDDTNEVR/xFwkFeTVKb8FF","tlshash":"e0c19f2c8d60da50ed10706584682a0f1aa0534ba4febc3a384fbaa792559fd77c5078","first_seen":"2023-04-16T16:45:37Z","last_seen":"2026-06-07T07:30:11.552245Z","times_seen":7424,"resource_available":false,"data":null}},"time_used":263,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":263,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"8vpfnx.bqkmk.cn/ftl//commonPage/commonContent/nav/images/icon-menu-api.png.base64","fqdn":"8vpfnx.bqkmk.cn","domain":"bqkmk.cn","tld":"cn"},"ip":{"addr":"103.198.200.7","port":443,"asn":138915,"as":"Kaopu Cloud HK Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://rb88t.com:8989/","date":"2025-10-31T04:45:38.212Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.bqkmk.cn","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 20 Oct 2025 00:00:00 GMT","end":"Tue, 20 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"CD:A6:04:CF:32:73:E5:24:43:2F:6D:D8:78:B9:CF:F5:FF:75:2B:72","sha256":"D4:BA:B1:C0:7D:2E:00:30:EC:84:7E:26:6D:DB:2A:4F:A5:87:A0:9E:7F:A3:96:24:96:6E:6E:3E:1C:A4:D5:5D"}}},"request":{"raw":"GET /ftl//commonPage/commonContent/nav/images/icon-menu-api.png.base64 HTTP/1.1\r\nHost: 8vpfnx.bqkmk.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://rb88t.com:8989\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rb88t.com:8989/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/plain; charset=utf-8\r\ncontent-length: 265723\r\nserver: Default-server-KS-CLOUD-XG-FOREIGN-12-01\r\netag: \"68b69275-40dfb\"\r\ndate: Mon, 20 Oct 2025 04:20:44 GMT\r\nlast-modified: Tue, 02 Sep 2025 06:45:09 GMT\r\nexpires: Wed, 19 Nov 2025 04:20:44 GMT\r\nage: 951893\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\nx-frame-options: SAMEORIGIN\r\nx-cache: HIT\r\nuuid: -\r\nout-line: gb-cdn-212\r\nx-link-via: xg21:443;xg12:80;\r\nx-cache-status: MISS from KS-CLOUD-XG-FOREIGN-12-01, HIT from KS-CLOUD-XG-FOREIGN-21-02\r\nx-cdn-request-id: 1963d72c316c86f0151ecf37e75ab411\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":265723,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"76d497e86a00b805a70ff97bdb743d78","sha1":"b6be1d2c17da2c76b00096a042de2e480a28efbd","sha256":"a568e7d2dbcf32cb781dd6d99a047cc36553d3df1e7d728170f3dff4d6235ce6","sha512":"144b081f7143a469e086d57b9822ee39e971bfea9a511734163475dcf42207feca2bd90546f08d97086438bd368b5355abe4db98f4a0adb57c010dffd6282a64","ssdeep":"6144:dsESHvc42SEl34G48NAcpznkqbvq0To5Qw0uq4+:dsa42SEC8yU4qbvq0U50uf+","tlshash":"f44423d4cf736d7001aae326a41dfe5c06a6a64b0c70359f626d43db1739a835a0bf78","first_seen":"2025-09-05T06:26:06.673661Z","last_seen":"2026-04-18T11:26:56.647725Z","times_seen":1600,"resource_available":false,"data":null}},"time_used":545,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":275,"receive":270,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"8vpfnx.bqkmk.cn/ftl//commonPage/commonContent/nav/images/icon-menu-api-chess.png.base64","fqdn":"8vpfnx.bqkmk.cn","domain":"bqkmk.cn","tld":"cn"},"ip":{"addr":"103.198.200.7","port":443,"asn":138915,"as":"Kaopu Cloud HK Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://rb88t.com:8989/","date":"2025-10-31T04:45:38.230Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.bqkmk.cn","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 20 Oct 2025 00:00:00 GMT","end":"Tue, 20 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"CD:A6:04:CF:32:73:E5:24:43:2F:6D:D8:78:B9:CF:F5:FF:75:2B:72","sha256":"D4:BA:B1:C0:7D:2E:00:30:EC:84:7E:26:6D:DB:2A:4F:A5:87:A0:9E:7F:A3:96:24:96:6E:6E:3E:1C:A4:D5:5D"}}},"request":{"raw":"GET /ftl//commonPage/commonContent/nav/images/icon-menu-api-chess.png.base64 HTTP/1.1\r\nHost: 8vpfnx.bqkmk.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://rb88t.com:8989\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rb88t.com:8989/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/plain; charset=utf-8\r\ncontent-length: 26257\r\nserver: Default-server-KS-CLOUD-XG-FOREIGN-12-03\r\netag: \"667bb57b-6691\"\r\ndate: Mon, 20 Oct 2025 04:20:44 GMT\r\nlast-modified: Wed, 26 Jun 2024 06:30:19 GMT\r\nexpires: Wed, 19 Nov 2025 04:20:44 GMT\r\nage: 951893\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\nx-frame-options: SAMEORIGIN\r\nx-cache: HIT\r\nuuid: -\r\nout-line: gb-cdn-211\r\nx-link-via: xg21:443;xg12:80;\r\nx-cache-status: MISS from KS-CLOUD-XG-FOREIGN-12-03, HIT from KS-CLOUD-XG-FOREIGN-21-04\r\nx-cdn-request-id: ca4a3f5bd692e61b8ab2b15861cbc2d9\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":26257,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"2b2b86e3f47aa8dc657a0739103a4c2c","sha1":"c95bd8f8f6c88ca24b6dd4cf4cb5cfe16ab026b4","sha256":"ed3501127a1c0edf05c6faaf1b98de005cd0807b3c4b3621e9785502c942e8d0","sha512":"096b862b0aee48baa5dcd58d58aceacbd7f7b011bb81ad5adec543fa007ae00f2e4f4a1996aed2992a718b40894b7996adea3f1df9272c270a0d7228972d5418","ssdeep":"384:jEGr5XxkpArm62ZT06d7FZSW9sfG2IRD//hdHmf9hYHjmHRBp/uKrKSE0VTC2bwM:jJ5XBq6LavgG/hdw/ajmHHvrtTVAM","tlshash":"37c2e1abba236eeca1d107317483de67ca5b78c3b065328451513c39efaa2530751fa8","first_seen":"2024-09-24T19:10:13Z","last_seen":"2026-06-07T07:30:11.519084Z","times_seen":8175,"resource_available":false,"data":null}},"time_used":551,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":538,"receive":13,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rb88t.com:8989/index/getUserTimeZoneDate.html?t=mhedeall","fqdn":"rb88t.com","domain":"rb88t.com","tld":"com"},"ip":{"addr":"34.96.219.82","port":8989,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://rb88t.com:8989/","date":"2025-10-31T04:45:38.288Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rb88t.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 16 Oct 2025 17:09:31 GMT","end":"Wed, 14 Jan 2026 17:09:30 GMT"},"fingerprint":{"sha1":"1E:C2:B3:67:0C:77:84:F1:9F:8D:AD:21:1B:38:A6:D8:C7:76:57:1C","sha256":"3B:31:2B:A2:8D:4D:4D:EC:78:17:C6:E3:F3:EA:94:02:0E:AF:0F:86:CC:F4:27:C3:4D:68:DF:1D:2C:E4:19:9B"}}},"request":{"raw":"GET /index/getUserTimeZoneDate.html?t=mhedeall HTTP/1.1\r\nHost: rb88t.com:8989\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/javascript, */*; q=0.01\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Requested-With: XMLHttpRequest\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rb88t.com:8989/\r\nCookie: sticket=qSm1NbVZtTnpZeUxU\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 31 Oct 2025 04:45:38 GMT\r\ncontent-type: text/html;charset=utf-8\r\ncontent-length: 119\r\nset-cookie: route=a9961c6ad4780ba0f3c8657ffc8a49b9; Path=/\r\ncontent-disposition: inline;filename=f.txt\r\nsub-sys: msite\r\ncachettl: 3\r\nx-frame-options: SAMEORIGIN\r\nuuid: 01758-01-00000000-176188593860b3\r\nout-line: gb-site-204\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":119,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"JSON text data","md5":"9ceea2ad2602d102f21c500523d3a57e","sha1":"297ff24382f6842280c79cbf3b2256628a556fa8","sha256":"d239019609c1962c95fe5500381b0d0c20462c2313570fd4e1976e6948c0ef32","sha512":"8165e6366f88214240465e9f032a2c8f06c3be1cbefa74b4d71db3b6cca0698b3ef10f5c2b4b352bd12c0fe85c01b896fc4c5977be4305160c55bfece64d237f","ssdeep":"","tlshash":"f8b0922485a5af9f0a1444a0d98cf5cc5e6426ab59a3cb212a97ed1ca46ee69180c202","first_seen":"2025-10-31T04:46:03.916333Z","last_seen":"2025-10-31T04:46:03.916333Z","times_seen":1,"resource_available":false,"data":null}},"time_used":368,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":368,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-31","alert":"Sinkholed","trigger":"rb88t.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-31","alert":"Sinkholed","trigger":"rb88t.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rb88t.com:8989/ftl/commonPage/themes/gui-base.css","fqdn":"rb88t.com","domain":"rb88t.com","tld":"com"},"ip":{"addr":"34.96.219.82","port":8989,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rb88t.com:8989/","date":"2025-10-31T04:45:36.276Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rb88t.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 16 Oct 2025 17:09:31 GMT","end":"Wed, 14 Jan 2026 17:09:30 GMT"},"fingerprint":{"sha1":"1E:C2:B3:67:0C:77:84:F1:9F:8D:AD:21:1B:38:A6:D8:C7:76:57:1C","sha256":"3B:31:2B:A2:8D:4D:4D:EC:78:17:C6:E3:F3:EA:94:02:0E:AF:0F:86:CC:F4:27:C3:4D:68:DF:1D:2C:E4:19:9B"}}},"request":{"raw":"GET /ftl/commonPage/themes/gui-base.css HTTP/1.1\r\nHost: rb88t.com:8989\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rb88t.com:8989/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 31 Oct 2025 04:45:36 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 04 Sep 2025 09:10:07 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68b9576f-14638\"\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\nx-frame-options: SAMEORIGIN\r\nexpires: Sat, 01 Nov 2025 04:45:36 GMT\r\ncache-control: max-age=86400\r\nx-cache: HIT\r\nuuid: -\r\nout-line: gb-site-204\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":83512,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (12023)","md5":"78136b812bd0f329e23a6eba6760c3f3","sha1":"585998c593784e87518aa432ed938244b4e81f52","sha256":"75d61cadaffd54e2aafc6b662a3afc5217d9ccbec5f362bcac420aea2b2aeedd","sha512":"535590f836e71e550854458b74fe58ad96df51d4b7498150471bd546215710afb21e3579baab98b0e842efe04796f9cbbb7e24b55a59f327fc7fec99c8ae2281","ssdeep":"1536:hh/EEJVfpLdXYS44H1Y7B/Daf4Zxn+PXCg9bN:VXYS4E+R8Xr","tlshash":"278385b2e25824e63373c856a381f7da2554b122c5134efdf89f655c8bc738612a2f5c","first_seen":"2025-10-25T00:22:29.908601Z","last_seen":"2025-11-20T16:00:13.030444Z","times_seen":41,"resource_available":false,"data":null}},"time_used":218,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":218,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-31","alert":"Sinkholed","trigger":"rb88t.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-31","alert":"Sinkholed","trigger":"rb88t.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"8vpfnx.bqkmk.cn/061410/rcenter/common/js/jquery/plugins/jquery.validate/jquery.validate.js","fqdn":"8vpfnx.bqkmk.cn","domain":"bqkmk.cn","tld":"cn"},"ip":{"addr":"103.198.200.7","port":443,"asn":138915,"as":"Kaopu Cloud HK Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rb88t.com:8989/","date":"2025-10-31T04:45:36.313Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.bqkmk.cn","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 20 Oct 2025 00:00:00 GMT","end":"Tue, 20 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"CD:A6:04:CF:32:73:E5:24:43:2F:6D:D8:78:B9:CF:F5:FF:75:2B:72","sha256":"D4:BA:B1:C0:7D:2E:00:30:EC:84:7E:26:6D:DB:2A:4F:A5:87:A0:9E:7F:A3:96:24:96:6E:6E:3E:1C:A4:D5:5D"}}},"request":{"raw":"GET /061410/rcenter/common/js/jquery/plugins/jquery.validate/jquery.validate.js HTTP/1.1\r\nHost: 8vpfnx.bqkmk.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rb88t.com:8989/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 7746\r\nserver: Default-server-KS-CLOUD-XG-FOREIGN-12-01\r\netag: W/\"66cd4838-6caf\"\r\ndate: Mon, 20 Oct 2025 04:19:08 GMT\r\nlast-modified: Tue, 27 Aug 2024 03:30:00 GMT\r\nexpires: Wed, 19 Nov 2025 04:19:08 GMT\r\nage: 951988\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\nx-frame-options: SAMEORIGIN\r\nx-cache: HIT\r\nuuid: -\r\nout-line: gb-cdn-211\r\nx-link-via: xg21:443;xg12:80;\r\nx-cache-status: MISS from KS-CLOUD-XG-FOREIGN-12-01, HIT from KS-CLOUD-XG-FOREIGN-21-10\r\nx-cdn-request-id: 0b40079281ad247310c6621002dc9bc3\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":27823,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (27668)","md5":"9c41709c2b64126b909c101a27f39153","sha1":"4ab666b36c092577acb41390ad90e96d5fea7711","sha256":"c1963697eeafb63b6c29e95da2d38d91dd907ab656e130e6e1c34d1dcd149f60","sha512":"f235dccead15199e58495c6faee849c50252b9beed29a04ae46a7a9bdbccfd569a8ab452e7fcf923b7048dfda0c3d7bd51261874642d40e994d1640ca89e330e","ssdeep":"768:u4ygd0iB6d9zYDO5qYT8fwTW3Jny+XiKZNtrt2tG:NB0iB6d9zYDO5qYTMwTW3Jny+jrP","tlshash":"e6c2b7093585102f4ecf30fbb897524f72ba95a45019a069b5fca4d1bef9f8530a6f38","first_seen":"2023-04-05T18:30:47Z","last_seen":"2026-07-26T05:01:44.852373Z","times_seen":17807,"resource_available":true,"data":null}},"time_used":1045,"timings":{"blocked":500,"dns":0,"connect":0,"send":0,"wait":544,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"8vpfnx.bqkmk.cn/061410/rcenter/common/js/gamebox/common/jquery.validate.extend.msites.js","fqdn":"8vpfnx.bqkmk.cn","domain":"bqkmk.cn","tld":"cn"},"ip":{"addr":"103.198.200.7","port":443,"asn":138915,"as":"Kaopu Cloud HK Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rb88t.com:8989/","date":"2025-10-31T04:45:36.315Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.bqkmk.cn","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 20 Oct 2025 00:00:00 GMT","end":"Tue, 20 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"CD:A6:04:CF:32:73:E5:24:43:2F:6D:D8:78:B9:CF:F5:FF:75:2B:72","sha256":"D4:BA:B1:C0:7D:2E:00:30:EC:84:7E:26:6D:DB:2A:4F:A5:87:A0:9E:7F:A3:96:24:96:6E:6E:3E:1C:A4:D5:5D"}}},"request":{"raw":"GET /061410/rcenter/common/js/gamebox/common/jquery.validate.extend.msites.js HTTP/1.1\r\nHost: 8vpfnx.bqkmk.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rb88t.com:8989/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 4126\r\nserver: Default-server-KS-CLOUD-XG-FOREIGN-12-03\r\netag: W/\"66cd4838-3a09\"\r\ndate: Mon, 20 Oct 2025 04:19:08 GMT\r\nlast-modified: Tue, 27 Aug 2024 03:30:00 GMT\r\nexpires: Wed, 19 Nov 2025 04:19:08 GMT\r\nage: 951988\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\nx-frame-options: SAMEORIGIN\r\nx-cache: HIT\r\nuuid: -\r\nout-line: gb-cdn-211\r\nx-link-via: xg21:443;xg12:80;\r\nx-cache-status: MISS from KS-CLOUD-XG-FOREIGN-12-03, HIT from KS-CLOUD-XG-FOREIGN-21-01\r\nx-cdn-request-id: e9e3039beeffb4dd70101319844ceab2\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":14857,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (14855), with no line terminators","md5":"4fe7dadf050dad2dcfd386d21b880281","sha1":"07e7feb8dc9309fe66d86d7a9e27f8efd32ab0bd","sha256":"aa891aafe8e98e1e15d81b2b116e6c3808d0bbbec56cd24818e2e7ac911877c9","sha512":"9da40e5132ece9fe346f27aa467b2496545c84197131c633e5b1ff1f641ece723440ec0289e82d7948b85bcd901b9e3eb6e36f8e0339ae05e4a32621e895accf","ssdeep":"384:yC+tJn9Dbvbf1P3QSBxDrdiewZnnoTW39if+04xSlR4nbiamdrjNfrzInGINYlor:NWJnlN3QSBxDMewZnnoTW39L0MSR4biK","tlshash":"a762954d3a9514bb4adf31b770ab204f767e8800852c91c4bdbca0d166b5ee072e7e6d","first_seen":"2023-03-07T01:14:38Z","last_seen":"2026-07-26T05:01:44.842324Z","times_seen":17877,"resource_available":true,"data":null}},"time_used":1044,"timings":{"blocked":498,"dns":0,"connect":0,"send":0,"wait":546,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"8vpfnx.bqkmk.cn/061410/rcenter/common/static/js/gb.validation.min.js?v=1761552496493","fqdn":"8vpfnx.bqkmk.cn","domain":"bqkmk.cn","tld":"cn"},"ip":{"addr":"103.198.200.7","port":443,"asn":138915,"as":"Kaopu Cloud HK Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rb88t.com:8989/","date":"2025-10-31T04:45:36.417Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.bqkmk.cn","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 20 Oct 2025 00:00:00 GMT","end":"Tue, 20 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"CD:A6:04:CF:32:73:E5:24:43:2F:6D:D8:78:B9:CF:F5:FF:75:2B:72","sha256":"D4:BA:B1:C0:7D:2E:00:30:EC:84:7E:26:6D:DB:2A:4F:A5:87:A0:9E:7F:A3:96:24:96:6E:6E:3E:1C:A4:D5:5D"}}},"request":{"raw":"GET /061410/rcenter/common/static/js/gb.validation.min.js?v=1761552496493 HTTP/1.1\r\nHost: 8vpfnx.bqkmk.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rb88t.com:8989/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 5207\r\nserver: Default-server-KS-CLOUD-XG-FOREIGN-12-04\r\netag: W/\"633d510e-7fd7\"\r\ndate: Mon, 20 Oct 2025 04:19:08 GMT\r\nlast-modified: Wed, 05 Oct 2022 09:40:30 GMT\r\nexpires: Wed, 19 Nov 2025 04:19:08 GMT\r\nage: 951988\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\nx-frame-options: SAMEORIGIN\r\nx-cache: HIT\r\nuuid: -\r\nout-line: gb-cdn-211\r\nx-link-via: xg21:443;xg12:80;\r\nx-cache-status: MISS from KS-CLOUD-XG-FOREIGN-12-04, HIT from KS-CLOUD-XG-FOREIGN-21-09\r\nx-cdn-request-id: 0c63f30ffca7be456bac42c8edec2229\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":32727,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (801)","md5":"a55780dc13cbf1a8d375f14ebb659cf2","sha1":"9548cc269bcde0dc48e166fa6bab37af8a649e57","sha256":"35d147a863ab8828e073ca1ae89d476a9cede797c410ac555597c1f442452cc8","sha512":"3514366118d038da9131739e4557dc5fd92b8b7d3a27af00a7c2d8f4cfd49f4932991cba899fcc8171ac59eb356b25e717494225912f37d65600305ce2d3ace9","ssdeep":"768:WqBveMjZ1oE/eL8hhMjm9a1hI4vhej4pZ:Xpo5GhMjm9a1hI4vheUpZ","tlshash":"cee231166b7701e2916b71e10e4f9a083174952b5a87ce08bdac92e09f18d787373ff8","first_seen":"2023-04-05T18:30:47Z","last_seen":"2026-07-26T05:01:44.845952Z","times_seen":18132,"resource_available":true,"data":null}},"time_used":1172,"timings":{"blocked":397,"dns":0,"connect":0,"send":0,"wait":774,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"8vpfnx.bqkmk.cn/ftl//commonPage/commonContent/nav/images/navbar-sub-sprite2.png.base64","fqdn":"8vpfnx.bqkmk.cn","domain":"bqkmk.cn","tld":"cn"},"ip":{"addr":"103.198.200.7","port":443,"asn":138915,"as":"Kaopu Cloud HK Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://rb88t.com:8989/","date":"2025-10-31T04:45:38.265Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.bqkmk.cn","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 20 Oct 2025 00:00:00 GMT","end":"Tue, 20 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"CD:A6:04:CF:32:73:E5:24:43:2F:6D:D8:78:B9:CF:F5:FF:75:2B:72","sha256":"D4:BA:B1:C0:7D:2E:00:30:EC:84:7E:26:6D:DB:2A:4F:A5:87:A0:9E:7F:A3:96:24:96:6E:6E:3E:1C:A4:D5:5D"}}},"request":{"raw":"GET /ftl//commonPage/commonContent/nav/images/navbar-sub-sprite2.png.base64 HTTP/1.1\r\nHost: 8vpfnx.bqkmk.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://rb88t.com:8989\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rb88t.com:8989/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/plain; charset=utf-8\r\ncontent-length: 73333\r\nserver: Default-server-KS-CLOUD-XG-FOREIGN-12-04\r\netag: \"68b69275-11e75\"\r\ndate: Mon, 20 Oct 2025 04:25:44 GMT\r\nlast-modified: Tue, 02 Sep 2025 06:45:09 GMT\r\nexpires: Wed, 19 Nov 2025 04:25:44 GMT\r\nage: 951593\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\nx-frame-options: SAMEORIGIN\r\nx-cache: MISS\r\nuuid: -\r\nout-line: gb-cdn-212\r\nx-link-via: xg21:443;xg12:80;\r\nx-cache-status: MISS from KS-CLOUD-XG-FOREIGN-12-04, HIT from KS-CLOUD-XG-FOREIGN-21-01\r\nx-cdn-request-id: 7b96775f12df8ac8b28148b3d6fe9a2f\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":73333,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"e09c7b111da72ff020d33a8978446fbc","sha1":"aa301c18846db062dc85f330f615e3462167ed51","sha256":"d2a00ca8254c1316538c612d648dd11c093e17fad8a9e2c2823c3a65373cd401","sha512":"e2d07eb9a5c109a3e73fa18a409691fe25ffe97d2e82d3f0092a30bf0be6c5bef387e3e190838d5eb80ea41d41fddcef16df874d4aaee91b5ff35d8861cc68cf","ssdeep":"1536:k9sSaVz0lJT/xf5n6O7nn+7lSBsyeUPlVVdxKLQ9oVIrBwvUou:k9sftctT+5g2U/ReQ9oV1Uou","tlshash":"1763026f2e543c067e2466fc359b8b10001d5f63603de7dea0a9fa23f297196f24ab54","first_seen":"2025-09-18T16:22:49.423406Z","last_seen":"2026-04-18T04:41:00.368806Z","times_seen":639,"resource_available":false,"data":null}},"time_used":672,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":622,"receive":50,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rb88t.com:8989/ftl/commonPage/themes/gui-layer.css","fqdn":"rb88t.com","domain":"rb88t.com","tld":"com"},"ip":{"addr":"34.96.219.82","port":8989,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rb88t.com:8989/","date":"2025-10-31T04:45:36.647Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rb88t.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 16 Oct 2025 17:09:31 GMT","end":"Wed, 14 Jan 2026 17:09:30 GMT"},"fingerprint":{"sha1":"1E:C2:B3:67:0C:77:84:F1:9F:8D:AD:21:1B:38:A6:D8:C7:76:57:1C","sha256":"3B:31:2B:A2:8D:4D:4D:EC:78:17:C6:E3:F3:EA:94:02:0E:AF:0F:86:CC:F4:27:C3:4D:68:DF:1D:2C:E4:19:9B"}}},"request":{"raw":"GET /ftl/commonPage/themes/gui-layer.css HTTP/1.1\r\nHost: rb88t.com:8989\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rb88t.com:8989/ftl/commonPage/themes/gui-base.css\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 31 Oct 2025 04:45:36 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 17 Aug 2023 08:10:09 GMT\r\nvary: Accept-Encoding\r\netag: W/\"64ddd5e1-c760\"\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\nx-frame-options: SAMEORIGIN\r\nexpires: Sat, 01 Nov 2025 04:45:36 GMT\r\ncache-control: max-age=86400\r\nx-cache: HIT\r\nuuid: -\r\nout-line: gb-site-204\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":51040,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (489)","md5":"858eefc3fa70af7d0115c901908471f5","sha1":"29c181bbbc09a424f7de7cb57629bd8a9e3c679a","sha256":"9f6a77c93f998e065f1ed52eb9943a3c560a50366bba2c8a34a4a1223c793caf","sha512":"3731234bfa0b2abf45883da0ab74960a77f167dc158f4eae4f9c58293bfe6ccf322fabdbd4100bd5fdba0f463cbf18ba44d89b0bed695b65b8edce7edc9441ec","ssdeep":"384:RCEe+wekUqKrIQycnvqP9bQmAJS0OuaIHmOKpPg+2fF93sJJ:RCf+wekUqjpqCP+OuaIHmOK6+2fFVSJ","tlshash":"67330d22a16816cd7156eac8705dbab7b7fc8c02e21717bcf8ab304fd28d5439476a47","first_seen":"2023-08-17T12:06:57Z","last_seen":"2026-07-26T08:00:03.144304Z","times_seen":16730,"resource_available":false,"data":null}},"time_used":217,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":217,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-31","alert":"Sinkholed","trigger":"rb88t.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-31","alert":"Sinkholed","trigger":"rb88t.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rb88t.com:8989/ftl/ysb1758-02/themes/images/language-zh_CN.png","fqdn":"rb88t.com","domain":"rb88t.com","tld":"com"},"ip":{"addr":"34.96.219.82","port":8989,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rb88t.com:8989/","date":"2025-10-31T04:45:37.754Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rb88t.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 16 Oct 2025 17:09:31 GMT","end":"Wed, 14 Jan 2026 17:09:30 GMT"},"fingerprint":{"sha1":"1E:C2:B3:67:0C:77:84:F1:9F:8D:AD:21:1B:38:A6:D8:C7:76:57:1C","sha256":"3B:31:2B:A2:8D:4D:4D:EC:78:17:C6:E3:F3:EA:94:02:0E:AF:0F:86:CC:F4:27:C3:4D:68:DF:1D:2C:E4:19:9B"}}},"request":{"raw":"GET /ftl/ysb1758-02/themes/images/language-zh_CN.png HTTP/1.1\r\nHost: rb88t.com:8989\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rb88t.com:8989/\r\nCookie: sticket=qSm1NbVZtTnpZeUxU\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 31 Oct 2025 04:45:37 GMT\r\ncontent-type: image/png\r\ncontent-length: 1478\r\nlast-modified: Wed, 24 Sep 2025 06:30:08 GMT\r\netag: \"68d38ff0-5c6\"\r\naccess-control-allow-origin: *\r\nx-frame-options: SAMEORIGIN\r\nexpires: Sat, 01 Nov 2025 04:45:37 GMT\r\ncache-control: max-age=86400\r\nx-cache: HIT\r\nuuid: -\r\nout-line: gb-site-204\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1478,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 18 x 18, 8-bit/color RGBA, non-interlaced","md5":"7d347494285dc3bd3b77aa1a3d9ce676","sha1":"d48dbc14280b8de9e9a12a4dd88b9d68838c7f16","sha256":"84a6b60323373d71dc3c3b25add8a6471097dfd52acab1b3bd52928428f05aa7","sha512":"312e5bf9df589a4acde3ec61cc77126c9e730ede2afcde06c8589c71c97cad2e17a32766a4633a142ecf3bdea0ba0c8c2dc9d5119c4e1bf86c4d3f0c6b0cd727","ssdeep":"","tlshash":"7a31778abec05dd02194e66234e7d51b5473588095e0f4e6e2eed0af19281f4145d4c7","first_seen":"2023-05-16T01:42:58Z","last_seen":"2026-05-23T18:41:03.133663Z","times_seen":96,"resource_available":false,"data":null}},"time_used":217,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":217,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-31","alert":"Sinkholed","trigger":"rb88t.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-31","alert":"Sinkholed","trigger":"rb88t.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"8vpfnx.bqkmk.cn/ftl/commonPage/images/partner/partner-hongtu-white.png.base64","fqdn":"8vpfnx.bqkmk.cn","domain":"bqkmk.cn","tld":"cn"},"ip":{"addr":"103.198.200.7","port":443,"asn":138915,"as":"Kaopu Cloud HK Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://rb88t.com:8989/","date":"2025-10-31T04:45:39.027Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.bqkmk.cn","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 20 Oct 2025 00:00:00 GMT","end":"Tue, 20 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"CD:A6:04:CF:32:73:E5:24:43:2F:6D:D8:78:B9:CF:F5:FF:75:2B:72","sha256":"D4:BA:B1:C0:7D:2E:00:30:EC:84:7E:26:6D:DB:2A:4F:A5:87:A0:9E:7F:A3:96:24:96:6E:6E:3E:1C:A4:D5:5D"}}},"request":{"raw":"GET /ftl/commonPage/images/partner/partner-hongtu-white.png.base64 HTTP/1.1\r\nHost: 8vpfnx.bqkmk.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://rb88t.com:8989\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rb88t.com:8989/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/plain; charset=utf-8\r\ncontent-length: 109239\r\nserver: Default-server-KS-CLOUD-XG-FOREIGN-12-04\r\netag: \"68b69275-1aab7\"\r\ndate: Mon, 20 Oct 2025 04:19:13 GMT\r\nlast-modified: Tue, 02 Sep 2025 06:45:09 GMT\r\nexpires: Wed, 19 Nov 2025 04:19:13 GMT\r\nage: 951985\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\nx-frame-options: SAMEORIGIN\r\nx-cache: HIT\r\nuuid: -\r\nout-line: gb-cdn-211\r\nx-link-via: xg21:443;xg12:80;\r\nx-cache-status: MISS from KS-CLOUD-XG-FOREIGN-12-04, HIT from KS-CLOUD-XG-FOREIGN-21-10\r\nx-cdn-request-id: 9acfa97edaf601ddafc657411d22a67d\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":109239,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"050b6873c440d2c512d27f83bd536ba3","sha1":"3f1ef3c0eb4037170fa7dc0fa5f6f8b667eef5e9","sha256":"cab2392ea2953b735b5410022f07d4590018ca546e1fe21b2feab5db0a4e69ad","sha512":"562cc6092d643d8b5487bb406860661b215d8c94d4a51c63aa9a6823fbe6533acbf95133d385781c9ea5f8913adfd26810e6903296b2106ebed51c4c4ccf2331","ssdeep":"3072:InJWQnDraF6gDT3Kxms0QQ9OPMGJrcPaF:9SDu3DMmTrQgPaF","tlshash":"50b31216b50e3e0f2b55dc0f514ee9f6cb920786850deece4768348462c9e85c3df999","first_seen":"2025-09-06T20:06:14.275441Z","last_seen":"2026-04-17T08:59:04.373557Z","times_seen":1773,"resource_available":false,"data":null}},"time_used":284,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":262,"receive":22,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"8vpfnx.bqkmk.cn/ftl/commonPage/images/partner/partner-hongtu-silver.png.base64","fqdn":"8vpfnx.bqkmk.cn","domain":"bqkmk.cn","tld":"cn"},"ip":{"addr":"103.198.200.7","port":443,"asn":138915,"as":"Kaopu Cloud HK Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://rb88t.com:8989/","date":"2025-10-31T04:45:39.058Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.bqkmk.cn","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 20 Oct 2025 00:00:00 GMT","end":"Tue, 20 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"CD:A6:04:CF:32:73:E5:24:43:2F:6D:D8:78:B9:CF:F5:FF:75:2B:72","sha256":"D4:BA:B1:C0:7D:2E:00:30:EC:84:7E:26:6D:DB:2A:4F:A5:87:A0:9E:7F:A3:96:24:96:6E:6E:3E:1C:A4:D5:5D"}}},"request":{"raw":"GET /ftl/commonPage/images/partner/partner-hongtu-silver.png.base64 HTTP/1.1\r\nHost: 8vpfnx.bqkmk.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://rb88t.com:8989\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rb88t.com:8989/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/plain; charset=utf-8\r\ncontent-length: 125725\r\nserver: Default-server-KS-CLOUD-XG-FOREIGN-12-04\r\netag: \"68b69275-1eb1d\"\r\ndate: Mon, 20 Oct 2025 04:19:13 GMT\r\nlast-modified: Tue, 02 Sep 2025 06:45:09 GMT\r\nexpires: Wed, 19 Nov 2025 04:19:13 GMT\r\nage: 951985\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\nx-frame-options: SAMEORIGIN\r\nx-cache: HIT\r\nuuid: -\r\nout-line: gb-cdn-212\r\nx-link-via: xg21:443;xg12:80;\r\nx-cache-status: MISS from KS-CLOUD-XG-FOREIGN-12-04, HIT from KS-CLOUD-XG-FOREIGN-21-08\r\nx-cdn-request-id: 1a577099397bf9771eaf076dc1c15402\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":125725,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"5f6980b5f154060a1d83407f4c95b0a6","sha1":"62e410c7edcbbdcb24a07444f9ebaa79a4047f92","sha256":"522e1c9e3407783f021aa3d7b4c19179ee6d2784358e8dc3960fdd93e996f720","sha512":"ffee4c4b7962e3b1ab48896394cc18e7ed3eb1d199a56e4bed2c29934b20ee1706619969ac82a3c6840cb1b617f90d7c16a9c7080b2d8c1a905be0f5ca922206","ssdeep":"3072:uVcAUgIZn4dMj6qCKK2si2pXQ5kbTSfE2BBsUdSTIC4RvJ:uSAUnmD2AgObTEE27fdR","tlshash":"20c313e136ecbc5cee44d632a5ca9960c250abde89f1c48bc6da50ca141335c9dceedd","first_seen":"2025-09-06T20:06:14.266784Z","last_seen":"2026-04-17T08:59:04.285034Z","times_seen":1773,"resource_available":false,"data":null}},"time_used":388,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":362,"receive":26,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rb88t.com:8989/mobile-api/v5/origin/getThirdParam.html","fqdn":"rb88t.com","domain":"rb88t.com","tld":"com"},"ip":{"addr":"34.96.219.82","port":8989,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://rb88t.com:8989/","date":"2025-10-31T04:45:39.318Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rb88t.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 16 Oct 2025 17:09:31 GMT","end":"Wed, 14 Jan 2026 17:09:30 GMT"},"fingerprint":{"sha1":"1E:C2:B3:67:0C:77:84:F1:9F:8D:AD:21:1B:38:A6:D8:C7:76:57:1C","sha256":"3B:31:2B:A2:8D:4D:4D:EC:78:17:C6:E3:F3:EA:94:02:0E:AF:0F:86:CC:F4:27:C3:4D:68:DF:1D:2C:E4:19:9B"}}},"request":{"raw":"GET /mobile-api/v5/origin/getThirdParam.html HTTP/1.1\r\nHost: rb88t.com:8989\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/javascript, */*; q=0.01\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Requested-With: XMLHttpRequest\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rb88t.com:8989/\r\nCookie: sticket=qSm1NbVZtTnpZeUxU; route=c7419011ef227a9b9406a6c2cd9b5007\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 31 Oct 2025 04:45:39 GMT\r\ncontent-type: text/html;charset=utf-8\r\ncontent-length: 103\r\naccess-control-allow-methods: *\r\naccess-control-max-age: 3600\r\naccess-control-allow-headers: Content-Type,Access-Token,X-Requested-With\r\ncontent-disposition: inline;filename=f.txt\r\nsub-sys: mobile\r\nx-frame-options: SAMEORIGIN\r\nuuid: 01758-01-00000000-1761885939a750\r\nout-line: gb-site-204\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":103,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"JSON text data","md5":"9ac55fe189e4f53f37156e563e0f542e","sha1":"18b13b1360ce9fbd973e046d2652be38d58a15e0","sha256":"d7e02321006e1520d4c3e8d26428462419388e022cc89f3c974d0b87ad83af7b","sha512":"45b140d1bb3f3f06ff883448128956edda4d8ae0820dbb6b10f13860896cd611921dadb5b11b8d1577f22a80aefdfdbf8a2d54f6076b1e05f69d262df93b94f0","ssdeep":"","tlshash":"12b012816118adb39f0317e120ec380142fc11d180d48408dc5c8e5847948d7a202933","first_seen":"2023-04-05T18:30:47Z","last_seen":"2026-06-07T07:30:11.50515Z","times_seen":15881,"resource_available":false,"data":null}},"time_used":258,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":258,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-31","alert":"Sinkholed","trigger":"rb88t.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-31","alert":"Sinkholed","trigger":"rb88t.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"8vpfnx.bqkmk.cn/ftl/ysb1758-02/themes/images/refreshIcon.png.base64","fqdn":"8vpfnx.bqkmk.cn","domain":"bqkmk.cn","tld":"cn"},"ip":{"addr":"103.198.200.7","port":443,"asn":138915,"as":"Kaopu Cloud HK Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://rb88t.com:8989/","date":"2025-10-31T04:45:39.372Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.bqkmk.cn","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 20 Oct 2025 00:00:00 GMT","end":"Tue, 20 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"CD:A6:04:CF:32:73:E5:24:43:2F:6D:D8:78:B9:CF:F5:FF:75:2B:72","sha256":"D4:BA:B1:C0:7D:2E:00:30:EC:84:7E:26:6D:DB:2A:4F:A5:87:A0:9E:7F:A3:96:24:96:6E:6E:3E:1C:A4:D5:5D"}}},"request":{"raw":"GET /ftl/ysb1758-02/themes/images/refreshIcon.png.base64 HTTP/1.1\r\nHost: 8vpfnx.bqkmk.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://rb88t.com:8989\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rb88t.com:8989/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/plain; charset=utf-8\r\ncontent-length: 4057\r\nserver: Default-server-KS-CLOUD-XG-FOREIGN-12-03\r\netag: \"68ec518a-fd9\"\r\ndate: Wed, 22 Oct 2025 08:45:20 GMT\r\nlast-modified: Mon, 13 Oct 2025 01:10:34 GMT\r\nexpires: Fri, 21 Nov 2025 08:45:20 GMT\r\nage: 763219\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\nx-frame-options: SAMEORIGIN\r\nx-cache: HIT\r\nuuid: -\r\nout-line: gb-cdn-212\r\nx-link-via: xg21:443;xg12:80;\r\nx-cache-status: MISS from KS-CLOUD-XG-FOREIGN-12-03, HIT from KS-CLOUD-XG-FOREIGN-21-01\r\nx-cdn-request-id: ac12344bbb07cdd0d646a166d783ca7b\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":4057,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"be348972574ac557a4ffa4b1413e3d06","sha1":"068548a4241c1e9fd19c3eba65d918485cc24e59","sha256":"cf189087a134dbb23865c230934cc6f543bd1d946d85d24624b5d65bc8a72b98","sha512":"1357af357089827c94609693a277a77c5c8119b0e1552b8c3e5fe1437d3be480d4883ae7b161a39efbee167d04d133c6f17aa6d507b39f2d93e15ee28edd361d","ssdeep":"","tlshash":"25816d3780d322aef51f85d2a3256153daa60679552581fc6bdae8a4a842d0db17f0cc","first_seen":"2025-10-13T02:05:29.250043Z","last_seen":"2026-05-23T18:41:03.128381Z","times_seen":78,"resource_available":false,"data":null}},"time_used":261,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":261,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rb88t.com:8989/ftl/commonPage/themes/gui-skin-default.css","fqdn":"rb88t.com","domain":"rb88t.com","tld":"com"},"ip":{"addr":"34.96.219.82","port":8989,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rb88t.com:8989/","date":"2025-10-31T04:45:36.279Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rb88t.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 16 Oct 2025 17:09:31 GMT","end":"Wed, 14 Jan 2026 17:09:30 GMT"},"fingerprint":{"sha1":"1E:C2:B3:67:0C:77:84:F1:9F:8D:AD:21:1B:38:A6:D8:C7:76:57:1C","sha256":"3B:31:2B:A2:8D:4D:4D:EC:78:17:C6:E3:F3:EA:94:02:0E:AF:0F:86:CC:F4:27:C3:4D:68:DF:1D:2C:E4:19:9B"}}},"request":{"raw":"GET /ftl/commonPage/themes/gui-skin-default.css HTTP/1.1\r\nHost: rb88t.com:8989\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rb88t.com:8989/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 31 Oct 2025 04:45:36 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 11 Jul 2023 08:40:09 GMT\r\nvary: Accept-Encoding\r\netag: W/\"64ad1569-7b6e\"\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\nx-frame-options: SAMEORIGIN\r\nexpires: Sat, 01 Nov 2025 04:45:36 GMT\r\ncache-control: max-age=86400\r\nx-cache: HIT\r\nuuid: -\r\nout-line: gb-site-204\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":31598,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (7014)","md5":"1d6c464e8e5800ca483689206174ec6e","sha1":"d5ff05232c516152a711ec5c6d060a2f2cc791e3","sha256":"08d29322d883091252b3348e9514dac589896516374e8a319fd1190dd67f8e30","sha512":"4e259baddb36f5a8894c26f0f50c453200cb738c5e9d8131e146288a0d25ed3d4dd42f173392f8dbae521fd8344425b2b6e1ade92bd08edf7ab010cb577f775e","ssdeep":"384:/FboUEeh9ScJRfc0uGWw8Ms4N4muQh8v8brn8w/NtSmdz:/FbPSVGmNQjLPFtSi","tlshash":"7be29834f20022a9b563c7a570d1dd4a362de592d2170ebdf26b319c8f425ce263bb6c","first_seen":"2025-04-07T03:18:03.900415Z","last_seen":"2026-07-26T08:00:03.149243Z","times_seen":11137,"resource_available":false,"data":null}},"time_used":369,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":369,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-31","alert":"Sinkholed","trigger":"rb88t.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-31","alert":"Sinkholed","trigger":"rb88t.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"8vpfnx.bqkmk.cn/ftl/commonPage/js/jquery/jquery-1.11.3.min.js","fqdn":"8vpfnx.bqkmk.cn","domain":"bqkmk.cn","tld":"cn"},"ip":{"addr":"103.198.200.7","port":443,"asn":138915,"as":"Kaopu Cloud HK Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rb88t.com:8989/","date":"2025-10-31T04:45:37.752Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.bqkmk.cn","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 20 Oct 2025 00:00:00 GMT","end":"Tue, 20 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"CD:A6:04:CF:32:73:E5:24:43:2F:6D:D8:78:B9:CF:F5:FF:75:2B:72","sha256":"D4:BA:B1:C0:7D:2E:00:30:EC:84:7E:26:6D:DB:2A:4F:A5:87:A0:9E:7F:A3:96:24:96:6E:6E:3E:1C:A4:D5:5D"}}},"request":{"raw":"GET /ftl/commonPage/js/jquery/jquery-1.11.3.min.js HTTP/1.1\r\nHost: 8vpfnx.bqkmk.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rb88t.com:8989/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 33545\r\nserver: Default-server-KS-CLOUD-XG-FOREIGN-12-03\r\netag: W/\"5d848f4f-176d4\"\r\ndate: Mon, 20 Oct 2025 04:19:08 GMT\r\nlast-modified: Fri, 20 Sep 2019 08:35:27 GMT\r\nexpires: Wed, 19 Nov 2025 04:19:08 GMT\r\nage: 951989\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\nx-frame-options: SAMEORIGIN\r\nx-cache: HIT\r\nuuid: -\r\nout-line: gb-cdn-211\r\nx-link-via: xg21:443;xg12:80;\r\nx-cache-status: MISS from KS-CLOUD-XG-FOREIGN-12-03, HIT from KS-CLOUD-XG-FOREIGN-21-07\r\nx-cdn-request-id: ef6917e2d87d5f06c8eed3281b446bc3\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":95956,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (32038)","md5":"b091a47f6b91e26c93a848092c6f3788","sha1":"52918af2d431e73464060b35d364640c8db75606","sha256":"329ab92b9276ef4e3148f69be6b208969bebdf2db3121a589caa172453fd9f10","sha512":"ab444102be476f0104eeff79c9b596174852b4fe8cbd0b5a0279d56f106a166ec39304636e09326213de000b102ce8f517bb268a9abb2955c56ee4f18b464ea8","ssdeep":"1536:OP10iSi65U/dXXeyhzeBuG+HYE0WEeLDFoNqLTW8+S5VRZIVI6xSb8xh2ZbQnRmS:R+41ZqLTW8xRrqSb8qGH77da98Hr3","tlshash":"6893d8d9b7d67162977730b850bf510bb13a98eab80c4ca0f0a4d8e47d74a89507bf2d","first_seen":"2023-03-07T01:10:10Z","last_seen":"2026-07-26T10:06:40.467894Z","times_seen":18406,"resource_available":true,"data":null}},"time_used":308,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":292,"receive":16,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rb88t.com:8989/message_zh_CN.js?v=1761552496493","fqdn":"rb88t.com","domain":"rb88t.com","tld":"com"},"ip":{"addr":"34.96.219.82","port":8989,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rb88t.com:8989/","date":"2025-10-31T04:45:36.305Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rb88t.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 16 Oct 2025 17:09:31 GMT","end":"Wed, 14 Jan 2026 17:09:30 GMT"},"fingerprint":{"sha1":"1E:C2:B3:67:0C:77:84:F1:9F:8D:AD:21:1B:38:A6:D8:C7:76:57:1C","sha256":"3B:31:2B:A2:8D:4D:4D:EC:78:17:C6:E3:F3:EA:94:02:0E:AF:0F:86:CC:F4:27:C3:4D:68:DF:1D:2C:E4:19:9B"}}},"request":{"raw":"GET /message_zh_CN.js?v=1761552496493 HTTP/1.1\r\nHost: rb88t.com:8989\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rb88t.com:8989/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 31 Oct 2025 04:45:36 GMT\r\ncontent-type: application/javascript;charset=UTF-8\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\nx-frame-options: SAMEORIGIN\r\nexpires: Sat, 01 Nov 2025 04:45:36 GMT\r\ncache-control: max-age=86400\r\nx-cache: HIT\r\nuuid: 01758-01-00000000-1761885936eb1b\r\nout-line: gb-site-204\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":33429,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"Unicode text, UTF-8 text, with very long lines (15702), with LF, NEL line terminators","md5":"05d23a047675ad46867dc0605eea1493","sha1":"d4dab661f6778d2f18e68a059a83e35a331e3197","sha256":"73db08bf61e11a30ea2bf528fcc52f7e2a8f777a1552a0208e80268e4ec68b2e","sha512":"d04ddcf998036cb566a730b2269c7584fe675087e0045ac610ee822b2344d0f524baad554be57a5de735bf58c2944e54352aef2e9b7fe27913b13d466775aa7b","ssdeep":"768:IIy92nyfB3vODR01IRBG3Jpf/OEg7/wiwL38:Ib9BB3vF1IRBGHOp","tlshash":"1ff24c8746fecbf68a4a0af9985301ae22b557c8c9ec79147f90ddd92b457c900a7383","first_seen":"2025-04-07T03:18:03.847953Z","last_seen":"2026-01-20T00:53:59.33658Z","times_seen":3635,"resource_available":false,"data":null}},"time_used":354,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":354,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-31","alert":"Sinkholed","trigger":"rb88t.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-31","alert":"Sinkholed","trigger":"rb88t.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"8vpfnx.bqkmk.cn/ftl/commonPage/js/bootstrap-dialog.min.js","fqdn":"8vpfnx.bqkmk.cn","domain":"bqkmk.cn","tld":"cn"},"ip":{"addr":"103.198.200.7","port":443,"asn":138915,"as":"Kaopu Cloud HK Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rb88t.com:8989/","date":"2025-10-31T04:45:36.309Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.bqkmk.cn","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 20 Oct 2025 00:00:00 GMT","end":"Tue, 20 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"CD:A6:04:CF:32:73:E5:24:43:2F:6D:D8:78:B9:CF:F5:FF:75:2B:72","sha256":"D4:BA:B1:C0:7D:2E:00:30:EC:84:7E:26:6D:DB:2A:4F:A5:87:A0:9E:7F:A3:96:24:96:6E:6E:3E:1C:A4:D5:5D"}}},"request":{"raw":"GET /ftl/commonPage/js/bootstrap-dialog.min.js HTTP/1.1\r\nHost: 8vpfnx.bqkmk.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rb88t.com:8989/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 5007\r\nserver: Default-server-KS-CLOUD-XG-FOREIGN-12-03\r\netag: W/\"5d848f4f-4ea4\"\r\ndate: Mon, 20 Oct 2025 04:19:08 GMT\r\nlast-modified: Fri, 20 Sep 2019 08:35:27 GMT\r\nexpires: Wed, 19 Nov 2025 04:19:08 GMT\r\nage: 951988\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\nx-frame-options: SAMEORIGIN\r\nx-cache: HIT\r\nuuid: -\r\nout-line: gb-cdn-212\r\nx-link-via: xg21:443;xg12:80;\r\nx-cache-status: MISS from KS-CLOUD-XG-FOREIGN-12-03, HIT from KS-CLOUD-XG-FOREIGN-21-04\r\nx-cdn-request-id: 356686236acbc42a2d8081ac3b92ecb4\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":20132,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (20132), with no line terminators","md5":"5ce8851dc823429a42ab6147554403cc","sha1":"28f381f0e0aa4f5d56690e65723bd97fb59a38e6","sha256":"dd1edf5e54071903c4c1e81e33636444899d645df6b18bad22249da07f91c811","sha512":"f42a4d48c666d9c78fcb6c6061141452899085c504bf15e23749611dda00b6913e75ebbe47ca436a2ed016175d0918f193e474f13974a2f6a5304e18909a87ee","ssdeep":"384:3ai3F3N3VKUINthDa7Vnq86z3JCDKSz1m0hMtkJI2Cg0WEUOv5Dq:T3l3INthDu1YCDKS5flC9m1","tlshash":"6a9261ccb2d9b54c47abe072143f200df03a996951496119bc79e9ebecf060aa077f79","first_seen":"2023-03-07T01:14:38Z","last_seen":"2026-07-26T05:01:44.851785Z","times_seen":17932,"resource_available":true,"data":null}},"time_used":770,"timings":{"blocked":504,"dns":0,"connect":0,"send":0,"wait":266,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rb88t.com:8989/headerInfo.html?t=mhedeaxx","fqdn":"rb88t.com","domain":"rb88t.com","tld":"com"},"ip":{"addr":"34.96.219.82","port":8989,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://rb88t.com:8989/","date":"2025-10-31T04:45:38.682Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rb88t.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 16 Oct 2025 17:09:31 GMT","end":"Wed, 14 Jan 2026 17:09:30 GMT"},"fingerprint":{"sha1":"1E:C2:B3:67:0C:77:84:F1:9F:8D:AD:21:1B:38:A6:D8:C7:76:57:1C","sha256":"3B:31:2B:A2:8D:4D:4D:EC:78:17:C6:E3:F3:EA:94:02:0E:AF:0F:86:CC:F4:27:C3:4D:68:DF:1D:2C:E4:19:9B"}}},"request":{"raw":"GET /headerInfo.html?t=mhedeaxx HTTP/1.1\r\nHost: rb88t.com:8989\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/javascript, */*; q=0.01\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Requested-With: XMLHttpRequest\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rb88t.com:8989/\r\nCookie: sticket=qSm1NbVZtTnpZeUxU; route=a9961c6ad4780ba0f3c8657ffc8a49b9\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 31 Oct 2025 04:45:38 GMT\r\ncontent-type: text/html;charset=utf-8\r\nvary: Accept-Encoding\r\ncontent-disposition: inline;filename=f.txt\r\nsub-sys: msite\r\ncontent-encoding: gzip\r\nx-frame-options: SAMEORIGIN\r\nuuid: 01758-01-00000000-1761885938f874\r\nout-line: gb-site-204\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":127,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"JSON text data","md5":"772a3b68b448aa6edcbfae17d44ab122","sha1":"f10b333ff98914bafdfb7908f7acbcaddbbf5cd8","sha256":"e108fe8eaca5a997f169d554b32115f00b82f14439233f87f891592ab6f81d3f","sha512":"a17cade89c9c6d2a415a3513635acdd2c6d588ff5b40897854685b5f76f48da5cadf508e05beb571b4355e0779e7f64e5134f1335466df9c250b534d90c6ee4f","ssdeep":"","tlshash":"c5b02228282bceee88832220c3800a8002080828f0c2ba0ec2aca20820caaf80022003","first_seen":"2025-10-31T04:46:03.928299Z","last_seen":"2025-10-31T04:46:03.928299Z","times_seen":1,"resource_available":false,"data":null}},"time_used":259,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":259,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-31","alert":"Sinkholed","trigger":"rb88t.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-31","alert":"Sinkholed","trigger":"rb88t.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"8vpfnx.bqkmk.cn/ftl/commonPage/images/partner/partner-hongtu-black.png.base64","fqdn":"8vpfnx.bqkmk.cn","domain":"bqkmk.cn","tld":"cn"},"ip":{"addr":"103.198.200.7","port":443,"asn":138915,"as":"Kaopu Cloud HK Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://rb88t.com:8989/","date":"2025-10-31T04:45:39.057Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.bqkmk.cn","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 20 Oct 2025 00:00:00 GMT","end":"Tue, 20 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"CD:A6:04:CF:32:73:E5:24:43:2F:6D:D8:78:B9:CF:F5:FF:75:2B:72","sha256":"D4:BA:B1:C0:7D:2E:00:30:EC:84:7E:26:6D:DB:2A:4F:A5:87:A0:9E:7F:A3:96:24:96:6E:6E:3E:1C:A4:D5:5D"}}},"request":{"raw":"GET /ftl/commonPage/images/partner/partner-hongtu-black.png.base64 HTTP/1.1\r\nHost: 8vpfnx.bqkmk.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://rb88t.com:8989\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rb88t.com:8989/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/plain; charset=utf-8\r\ncontent-length: 104412\r\nserver: Default-server-KS-CLOUD-XG-FOREIGN-12-03\r\netag: \"68b69275-197dc\"\r\ndate: Mon, 20 Oct 2025 04:19:13 GMT\r\nlast-modified: Tue, 02 Sep 2025 06:45:09 GMT\r\nexpires: Wed, 19 Nov 2025 04:19:13 GMT\r\nage: 951985\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\nx-frame-options: SAMEORIGIN\r\nx-cache: HIT\r\nuuid: -\r\nout-line: gb-cdn-211\r\nx-link-via: xg21:443;xg12:80;\r\nx-cache-status: MISS from KS-CLOUD-XG-FOREIGN-12-03, HIT from KS-CLOUD-XG-FOREIGN-21-15\r\nx-cdn-request-id: 2d753b451165e2d60a38692e12494e59\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":104412,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"0298fe6d0aa5b489e3cda6cddcc325ee","sha1":"4f7dbdce496c21b36fdb5406592d1ec8f0219699","sha256":"98bd06ca490d5c000e797802b93323fca6de4f672c4a561099bdc6c0d7e0c093","sha512":"a110c084c85583253556ada989851ffe48a9fdfa752976ad7061b230fea6a4d685369a3303d8bea7f27512b35cae4c96d143fe61d275521a8cdcc8c4ac8f9554","ssdeep":"1536:8WIh38q9JcZYHgtwd+CJbHa835EktOC08ltxlgWIIa+uoAwQpqcZCfrW5s4h:7Ih33cyHdNzJwBmjepoAwQAcc4h","tlshash":"d8a3122dfaa06f75da22873f8255dc0481db6196dedba24a02f0ddd8cb4a7374267d20","first_seen":"2025-09-06T07:11:29.245175Z","last_seen":"2026-04-17T04:44:35.203107Z","times_seen":1734,"resource_available":false,"data":null}},"time_used":361,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":342,"receive":19,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"8vpfnx.bqkmk.cn/ftl/commonPage/images/favicon/favicon_1758.png.base64","fqdn":"8vpfnx.bqkmk.cn","domain":"bqkmk.cn","tld":"cn"},"ip":{"addr":"103.198.200.7","port":443,"asn":138915,"as":"Kaopu Cloud HK Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://rb88t.com:8989/","date":"2025-10-31T04:45:39.405Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.bqkmk.cn","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 20 Oct 2025 00:00:00 GMT","end":"Tue, 20 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"CD:A6:04:CF:32:73:E5:24:43:2F:6D:D8:78:B9:CF:F5:FF:75:2B:72","sha256":"D4:BA:B1:C0:7D:2E:00:30:EC:84:7E:26:6D:DB:2A:4F:A5:87:A0:9E:7F:A3:96:24:96:6E:6E:3E:1C:A4:D5:5D"}}},"request":{"raw":"GET /ftl/commonPage/images/favicon/favicon_1758.png.base64 HTTP/1.1\r\nHost: 8vpfnx.bqkmk.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://rb88t.com:8989\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rb88t.com:8989/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/plain; charset=utf-8\r\ncontent-length: 787\r\nserver: Default-server-KS-CLOUD-XG-FOREIGN-12-04\r\netag: \"68d20d43-313\"\r\ndate: Mon, 20 Oct 2025 04:25:46 GMT\r\nlast-modified: Tue, 23 Sep 2025 03:00:19 GMT\r\nexpires: Wed, 19 Nov 2025 04:25:46 GMT\r\nage: 951593\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nx-frame-options: SAMEORIGIN\r\nx-cache: MISS\r\nuuid: -\r\nout-line: gb-cdn-212\r\nx-link-via: xg21:443;xg12:80;\r\nx-cache-status: MISS from KS-CLOUD-XG-FOREIGN-12-04, HIT from KS-CLOUD-XG-FOREIGN-21-11\r\nx-cdn-request-id: c50336bf6c0c1a8ace05c31f4e30ab5e\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":787,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"7b0c9827674508bf9e14f37d4bb346ba","sha1":"6277cbd52743249b83008970b513ec68c754a596","sha256":"0f512b8d92cce977fc32b606fdbfb24ea4ebfa2b82c567967a5e9d3ebfbee09d","sha512":"2cbda8b04d2917034da41f01c03c13ef96b57f72d4fab194c50e64d99f00b581ac970b1ee224fa8ff625ddf047fd54738ab38d181622f4bf3a24adfffe7b9858","ssdeep":"","tlshash":"f201757081190ee2e9a5ea697270004e8f22ed86651582c468b537fa90987a4e3dfde0","first_seen":"2023-10-16T02:24:17Z","last_seen":"2026-06-04T13:13:28.782791Z","times_seen":866,"resource_available":false,"data":null}},"time_used":260,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":260,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"8vpfnx.bqkmk.cn/ftl/ysb1758-02/themes/images/login_os.png.base64","fqdn":"8vpfnx.bqkmk.cn","domain":"bqkmk.cn","tld":"cn"},"ip":{"addr":"103.198.200.7","port":443,"asn":138915,"as":"Kaopu Cloud HK Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://rb88t.com:8989/","date":"2025-10-31T04:45:39.413Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.bqkmk.cn","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 20 Oct 2025 00:00:00 GMT","end":"Tue, 20 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"CD:A6:04:CF:32:73:E5:24:43:2F:6D:D8:78:B9:CF:F5:FF:75:2B:72","sha256":"D4:BA:B1:C0:7D:2E:00:30:EC:84:7E:26:6D:DB:2A:4F:A5:87:A0:9E:7F:A3:96:24:96:6E:6E:3E:1C:A4:D5:5D"}}},"request":{"raw":"GET /ftl/ysb1758-02/themes/images/login_os.png.base64 HTTP/1.1\r\nHost: 8vpfnx.bqkmk.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://rb88t.com:8989\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rb88t.com:8989/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/plain; charset=utf-8\r\ncontent-length: 1990\r\nserver: Default-server-KS-CLOUD-XG-FOREIGN-12-04\r\netag: \"68ec518a-7c6\"\r\ndate: Wed, 22 Oct 2025 08:45:20 GMT\r\nlast-modified: Mon, 13 Oct 2025 01:10:34 GMT\r\nexpires: Fri, 21 Nov 2025 08:45:20 GMT\r\nage: 763218\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\nx-frame-options: SAMEORIGIN\r\nx-cache: MISS\r\nuuid: -\r\nout-line: gb-cdn-211\r\nx-link-via: xg21:443;xg12:80;\r\nx-cache-status: MISS from KS-CLOUD-XG-FOREIGN-12-04, HIT from KS-CLOUD-XG-FOREIGN-21-10\r\nx-cdn-request-id: c311f217acf88b1ffac50edd2ae3ef63\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1990,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"a28882a0f6f4259b839c46595cf824a4","sha1":"e0e736ea53d20349559b52c413cae19a7abb8c96","sha256":"c163852d50c6f581c0ba771911feacbbb43b47bc7b157722778a0f47cae4e0f7","sha512":"c444afde3d1877b363c6b3a78674debe2f566ce27bafa15ad29a949f5e155ab03806b8e8799041b176d86e74cee81ebd8f359c49ec9e11d2c6cbf2fb61af2bfb","ssdeep":"","tlshash":"6541e67fad363b1d1224a81867f265753d9a594a2c4d03b750b730220cda79826cf29c","first_seen":"2025-10-13T02:05:29.065866Z","last_seen":"2026-05-23T18:41:03.113619Z","times_seen":78,"resource_available":false,"data":null}},"time_used":260,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":260,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"8vpfnx.bqkmk.cn/ftl/ysb1758-02/themes/images/body-bg.gif.base64","fqdn":"8vpfnx.bqkmk.cn","domain":"bqkmk.cn","tld":"cn"},"ip":{"addr":"103.198.200.7","port":443,"asn":138915,"as":"Kaopu Cloud HK Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://rb88t.com:8989/","date":"2025-10-31T04:45:39.445Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.bqkmk.cn","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 20 Oct 2025 00:00:00 GMT","end":"Tue, 20 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"CD:A6:04:CF:32:73:E5:24:43:2F:6D:D8:78:B9:CF:F5:FF:75:2B:72","sha256":"D4:BA:B1:C0:7D:2E:00:30:EC:84:7E:26:6D:DB:2A:4F:A5:87:A0:9E:7F:A3:96:24:96:6E:6E:3E:1C:A4:D5:5D"}}},"request":{"raw":"GET /ftl/ysb1758-02/themes/images/body-bg.gif.base64 HTTP/1.1\r\nHost: 8vpfnx.bqkmk.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://rb88t.com:8989\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rb88t.com:8989/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/plain; charset=utf-8\r\ncontent-length: 1030\r\nserver: Default-server-KS-CLOUD-XG-FOREIGN-12-04\r\netag: \"68d38ff0-406\"\r\ndate: Wed, 22 Oct 2025 08:45:20 GMT\r\nlast-modified: Wed, 24 Sep 2025 06:30:08 GMT\r\nexpires: Fri, 21 Nov 2025 08:45:20 GMT\r\nage: 763218\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\nx-frame-options: SAMEORIGIN\r\nx-cache: HIT\r\nuuid: -\r\nout-line: gb-cdn-212\r\nx-link-via: xg21:443;xg12:80;\r\nx-cache-status: MISS from KS-CLOUD-XG-FOREIGN-12-04, HIT from KS-CLOUD-XG-FOREIGN-21-15\r\nx-cdn-request-id: 045989bd4f9f0b0af4efe1bd505d0e12\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1030,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"e96e9f2e747e299fbea0229324083fdd","sha1":"dfe89fa5739efbf9de5296d5d8d83d74730293ca","sha256":"9baada4f54cb7180f4d241952f4636cca32fa8e35e90fb8c23204dd51d8b19dc","sha512":"8628f4add37a61c2687903ba261f45a4cdf86c39ea3eed275286489292b7e7ed91cef734bcc3d9054f86ffbc8c93c40d5bb04782c19d788246763c9cc2f74095","ssdeep":"","tlshash":"f41194fb87c913670b091d19f10362d23d295b872439dfbadb9120fa54d222bc071c5d","first_seen":"2023-04-16T16:45:37Z","last_seen":"2026-06-07T07:30:11.535762Z","times_seen":7318,"resource_available":false,"data":null}},"time_used":263,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":263,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"8vpfnx.bqkmk.cn/ftl/ysb1758-02/themes/images/sec-nav-bg-grad.gif.base64","fqdn":"8vpfnx.bqkmk.cn","domain":"bqkmk.cn","tld":"cn"},"ip":{"addr":"103.198.200.7","port":443,"asn":138915,"as":"Kaopu Cloud HK Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://rb88t.com:8989/","date":"2025-10-31T04:45:39.447Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.bqkmk.cn","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 20 Oct 2025 00:00:00 GMT","end":"Tue, 20 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"CD:A6:04:CF:32:73:E5:24:43:2F:6D:D8:78:B9:CF:F5:FF:75:2B:72","sha256":"D4:BA:B1:C0:7D:2E:00:30:EC:84:7E:26:6D:DB:2A:4F:A5:87:A0:9E:7F:A3:96:24:96:6E:6E:3E:1C:A4:D5:5D"}}},"request":{"raw":"GET /ftl/ysb1758-02/themes/images/sec-nav-bg-grad.gif.base64 HTTP/1.1\r\nHost: 8vpfnx.bqkmk.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://rb88t.com:8989\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rb88t.com:8989/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/plain; charset=utf-8\r\ncontent-length: 515\r\nserver: Default-server-KS-CLOUD-XG-FOREIGN-12-03\r\netag: \"68d38ff0-203\"\r\ndate: Wed, 22 Oct 2025 08:45:20 GMT\r\nlast-modified: Wed, 24 Sep 2025 06:30:08 GMT\r\nexpires: Fri, 21 Nov 2025 08:45:20 GMT\r\nage: 763219\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nx-frame-options: SAMEORIGIN\r\nx-cache: MISS\r\nuuid: -\r\nout-line: gb-cdn-212\r\nx-link-via: xg21:443;xg12:80;\r\nx-cache-status: MISS from KS-CLOUD-XG-FOREIGN-12-03, HIT from KS-CLOUD-XG-FOREIGN-21-09\r\nx-cdn-request-id: fa8dcafdfc7f5b28e85ddc33f2a8387d\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":515,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"b1734cb77ae0e91b4116a8a06a7fc5b3","sha1":"146195cdb93b3194f586acabd2712c7efb1c02da","sha256":"d89f82c6664674129fe2a5da52c794ad91b6b8e8840119139180574d278ca20f","sha512":"dc37d2ec60579989ae163768cb74b77fdf6fd85d19086ef46daf6cef13ad0362cb439902bc2672e24d077e64f2f04e1a8375d582e4b204bc759ac3ce5092f9ee","ssdeep":"","tlshash":"92f0dcb727d3b45a0f8623e895069acfbd028ba3108a358ce082072058c08bf241682f","first_seen":"2023-04-16T16:45:37Z","last_seen":"2026-06-07T07:30:11.526981Z","times_seen":7440,"resource_available":false,"data":null}},"time_used":263,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":263,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rb88t.com/","fqdn":"rb88t.com","domain":"rb88t.com","tld":"com"},"ip":{"addr":"34.96.219.82","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"Hong Kong","country_code":"HK"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-10-31T04:45:34.503Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rb88t.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 16 Oct 2025 17:09:31 GMT","end":"Wed, 14 Jan 2026 17:09:30 GMT"},"fingerprint":{"sha1":"1E:C2:B3:67:0C:77:84:F1:9F:8D:AD:21:1B:38:A6:D8:C7:76:57:1C","sha256":"3B:31:2B:A2:8D:4D:4D:EC:78:17:C6:E3:F3:EA:94:02:0E:AF:0F:86:CC:F4:27:C3:4D:68:DF:1D:2C:E4:19:9B"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: rb88t.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 31 Oct 2025 04:45:35 GMT\r\ncontent-type: text/html; charset=utf-8\r\nvary: Accept-Encoding\r\nx-frame-options: SAMEORIGIN\r\ncache-control: private, no-store, no-cache, must-revalidate, proxy-revalidate\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":81,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"0faeb2243a84c9b131ed30624fa55da7","sha1":"638117c52ed6a4c87ed819639602e132c856bff3","sha256":"d4534308d4c60fbd3e88015c4e8889b1552b9d753791033bcfce010cafe1a686","sha512":"c94abcd8831906d5b12ffa84e7e92a83a9b4f89a0219871803bf6572d1a1934c454ac84d7e39ccfb1f5d5d1f31846bf3260f6fcec4d29a5d18ec3e47798e7fc5","ssdeep":"","tlshash":"6ba011e32a200022a222aab0acc0b003a00208888c8880a0e0e20aac08a0b288c83222","first_seen":"2025-10-31T02:50:22.7722Z","last_seen":"2025-10-31T04:46:03.932271Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1090,"timings":{"blocked":438,"dns":0,"connect":214,"send":0,"wait":215,"receive":0,"ssl":219},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-31","alert":"Sinkholed","trigger":"rb88t.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-31","alert":"Sinkholed","trigger":"rb88t.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"8vpfnx.bqkmk.cn/ftl/commonPage/js/float.js","fqdn":"8vpfnx.bqkmk.cn","domain":"bqkmk.cn","tld":"cn"},"ip":{"addr":"103.198.200.7","port":443,"asn":138915,"as":"Kaopu Cloud HK Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rb88t.com:8989/","date":"2025-10-31T04:45:36.296Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.bqkmk.cn","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 20 Oct 2025 00:00:00 GMT","end":"Tue, 20 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"CD:A6:04:CF:32:73:E5:24:43:2F:6D:D8:78:B9:CF:F5:FF:75:2B:72","sha256":"D4:BA:B1:C0:7D:2E:00:30:EC:84:7E:26:6D:DB:2A:4F:A5:87:A0:9E:7F:A3:96:24:96:6E:6E:3E:1C:A4:D5:5D"}}},"request":{"raw":"GET /ftl/commonPage/js/float.js HTTP/1.1\r\nHost: 8vpfnx.bqkmk.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rb88t.com:8989/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 1929\r\nserver: Default-server-KS-CLOUD-XG-FOREIGN-12-04\r\netag: W/\"612747ba-1b2f\"\r\ndate: Mon, 20 Oct 2025 04:19:08 GMT\r\nlast-modified: Thu, 26 Aug 2021 07:50:18 GMT\r\nexpires: Wed, 19 Nov 2025 04:19:08 GMT\r\nage: 951988\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\nx-frame-options: SAMEORIGIN\r\nx-cache: HIT\r\nuuid: -\r\nout-line: gb-cdn-211\r\nx-link-via: xg21:443;xg12:80;\r\nx-cache-status: MISS from KS-CLOUD-XG-FOREIGN-12-04, HIT from KS-CLOUD-XG-FOREIGN-21-13\r\nx-cdn-request-id: d870966acbefb38eca6dd9a182b0ba41\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":6959,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"829af863b0cdc4a603919824ae046299","sha1":"1d417b1553e4ecb7125ebf2005b74255291fbf73","sha256":"1dbe4afbc9ed220c08b9e95577b56f83e2e8e0f7620c5dc18266bb325e5bb271","sha512":"e1202fa26fd353dfb2f989d3d45512e0691c062076297399f5fe62f63e7f5b194fec4a3d7fe2f09be1a6a945e197e7d68445d33dcc6f80b23a315112d9ae5b6c","ssdeep":"96:G4SXFXVXDL+R5NxuHie/moRUgIm/Kv3RKXg+Iw3qCNv5IC80b7Yr+HpH:G7xhDL+jNxzeBVLKJ1LeqCwCxb7YspH","tlshash":"04e1506e03b1212195aff1beaf1e424c6631905b2507dd057e0c87c46fa493c4636fee","first_seen":"2023-03-07T01:14:38Z","last_seen":"2026-07-25T16:42:26.192209Z","times_seen":17548,"resource_available":true,"data":null}},"time_used":1894,"timings":{"blocked":538,"dns":1,"connect":275,"send":0,"wait":791,"receive":0,"ssl":286},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"8vpfnx.bqkmk.cn/ftl/commonPage/js/websocket/CometMarathon.js","fqdn":"8vpfnx.bqkmk.cn","domain":"bqkmk.cn","tld":"cn"},"ip":{"addr":"103.198.200.7","port":443,"asn":138915,"as":"Kaopu Cloud HK Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rb88t.com:8989/","date":"2025-10-31T04:45:36.302Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.bqkmk.cn","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 20 Oct 2025 00:00:00 GMT","end":"Tue, 20 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"CD:A6:04:CF:32:73:E5:24:43:2F:6D:D8:78:B9:CF:F5:FF:75:2B:72","sha256":"D4:BA:B1:C0:7D:2E:00:30:EC:84:7E:26:6D:DB:2A:4F:A5:87:A0:9E:7F:A3:96:24:96:6E:6E:3E:1C:A4:D5:5D"}}},"request":{"raw":"GET /ftl/commonPage/js/websocket/CometMarathon.js HTTP/1.1\r\nHost: 8vpfnx.bqkmk.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rb88t.com:8989/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 3316\r\nserver: Default-server-KS-CLOUD-XG-FOREIGN-12-04\r\netag: W/\"6260ddd4-2f13\"\r\ndate: Mon, 20 Oct 2025 04:19:08 GMT\r\nlast-modified: Thu, 21 Apr 2022 04:30:12 GMT\r\nexpires: Wed, 19 Nov 2025 04:19:08 GMT\r\nage: 951987\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\nx-frame-options: SAMEORIGIN\r\nx-cache: HIT\r\nuuid: -\r\nout-line: gb-cdn-211\r\nx-link-via: xg21:443;xg12:80;\r\nx-cache-status: MISS from KS-CLOUD-XG-FOREIGN-12-04, HIT from KS-CLOUD-XG-FOREIGN-21-06\r\nx-cdn-request-id: 66e6222dee0fd9e3c52c71778178c909\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":12051,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"466a7ed7d00986d45375c0cbffb5233c","sha1":"68845ead668e9abd29c24b491dbf97b219226c08","sha256":"7ddafae5a0a552d2d56101cdc8306403e8fb9570759d66c48b25893b409f0123","sha512":"752801557c12ee7830f1f2e55352ab9c033aff01ff79abdffaee1601c54cdfc85a2041facfc5a7e180706812be5ad08668eada116544197fd2a784bac1903ea0","ssdeep":"192:0Pf+0Sn4NyRSTTPhvygOdWuTdC3d7QPXLHOm8cSCl1Ej3m7YAPzhsoqFncJ0j:0Pf+fnwfcXSaGLj","tlshash":"9e32314b6cf75085592b32b50f9f24447239d8572605e81c7dccaae48f98b6c0b6bfb8","first_seen":"2023-04-05T18:30:47Z","last_seen":"2026-07-26T05:01:44.843444Z","times_seen":17728,"resource_available":true,"data":null}},"time_used":778,"timings":{"blocked":510,"dns":0,"connect":0,"send":0,"wait":268,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"8vpfnx.bqkmk.cn/ftl//commonPage/commonContent/nav/images/sub-arrow.png.base64","fqdn":"8vpfnx.bqkmk.cn","domain":"bqkmk.cn","tld":"cn"},"ip":{"addr":"103.198.200.7","port":443,"asn":138915,"as":"Kaopu Cloud HK Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://rb88t.com:8989/","date":"2025-10-31T04:45:38.278Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.bqkmk.cn","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 20 Oct 2025 00:00:00 GMT","end":"Tue, 20 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"CD:A6:04:CF:32:73:E5:24:43:2F:6D:D8:78:B9:CF:F5:FF:75:2B:72","sha256":"D4:BA:B1:C0:7D:2E:00:30:EC:84:7E:26:6D:DB:2A:4F:A5:87:A0:9E:7F:A3:96:24:96:6E:6E:3E:1C:A4:D5:5D"}}},"request":{"raw":"GET /ftl//commonPage/commonContent/nav/images/sub-arrow.png.base64 HTTP/1.1\r\nHost: 8vpfnx.bqkmk.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://rb88t.com:8989\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rb88t.com:8989/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/plain; charset=utf-8\r\ncontent-length: 227\r\nserver: Default-server-KS-CLOUD-XG-FOREIGN-12-03\r\netag: \"667bb57c-e3\"\r\ndate: Mon, 20 Oct 2025 04:25:44 GMT\r\nlast-modified: Wed, 26 Jun 2024 06:30:20 GMT\r\nexpires: Wed, 19 Nov 2025 04:25:44 GMT\r\nage: 951594\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nx-frame-options: SAMEORIGIN\r\nx-cache: HIT\r\nuuid: -\r\nout-line: gb-cdn-211\r\nx-link-via: xg21:443;xg12:80;\r\nx-cache-status: MISS from KS-CLOUD-XG-FOREIGN-12-03, HIT from KS-CLOUD-XG-FOREIGN-21-01\r\nx-cdn-request-id: 3728f5cc754bcdfad3a013a98f4d1459\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":227,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"77546ee8bcab279aee067f7794d08541","sha1":"e1ace21ee1e968151b5b0ad8da4b0ebf8420bdcf","sha256":"9f967376ac77e445b313fbebbab9a4572c0984edb80f6b5baa9c10f9bf68d647","sha512":"d56ff9fcf76a2153287b4b016b7e59f40c60859b36ac5d12bc96a43237a828cfcd4c0b5de142dbf178ebccef9092c3ae167ea7e3a59d359f50db78df36263b21","ssdeep":"","tlshash":"09d097310605283062ce68013802d1000e222b8f52a760407ff86023581b3c88a9a3c0","first_seen":"2024-09-24T19:10:13Z","last_seen":"2026-06-06T23:51:10.814802Z","times_seen":2088,"resource_available":false,"data":null}},"time_used":721,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":721,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"8vpfnx.bqkmk.cn/ftl//commonPage/commonContent/nav/images/navbar-sub-sprite2.png.base64","fqdn":"8vpfnx.bqkmk.cn","domain":"bqkmk.cn","tld":"cn"},"ip":{"addr":"103.198.200.7","port":443,"asn":138915,"as":"Kaopu Cloud HK Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://rb88t.com:8989/","date":"2025-10-31T04:45:38.280Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.bqkmk.cn","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 20 Oct 2025 00:00:00 GMT","end":"Tue, 20 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"CD:A6:04:CF:32:73:E5:24:43:2F:6D:D8:78:B9:CF:F5:FF:75:2B:72","sha256":"D4:BA:B1:C0:7D:2E:00:30:EC:84:7E:26:6D:DB:2A:4F:A5:87:A0:9E:7F:A3:96:24:96:6E:6E:3E:1C:A4:D5:5D"}}},"request":{"raw":"GET /ftl//commonPage/commonContent/nav/images/navbar-sub-sprite2.png.base64 HTTP/1.1\r\nHost: 8vpfnx.bqkmk.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://rb88t.com:8989\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rb88t.com:8989/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/plain; charset=utf-8\r\ncontent-length: 73333\r\nserver: Default-server-KS-CLOUD-XG-FOREIGN-12-04\r\netag: \"68b69275-11e75\"\r\ndate: Mon, 20 Oct 2025 04:25:44 GMT\r\nlast-modified: Tue, 02 Sep 2025 06:45:09 GMT\r\nexpires: Wed, 19 Nov 2025 04:25:44 GMT\r\nage: 951594\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\nx-frame-options: SAMEORIGIN\r\nx-cache: MISS\r\nuuid: -\r\nout-line: gb-cdn-212\r\nx-link-via: xg21:443;xg12:80;\r\nx-cache-status: MISS from KS-CLOUD-XG-FOREIGN-12-04, HIT from KS-CLOUD-XG-FOREIGN-21-01\r\nx-cdn-request-id: 371c1df2fdee2d0686c5ac7b74e40404\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":73333,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"e09c7b111da72ff020d33a8978446fbc","sha1":"aa301c18846db062dc85f330f615e3462167ed51","sha256":"d2a00ca8254c1316538c612d648dd11c093e17fad8a9e2c2823c3a65373cd401","sha512":"e2d07eb9a5c109a3e73fa18a409691fe25ffe97d2e82d3f0092a30bf0be6c5bef387e3e190838d5eb80ea41d41fddcef16df874d4aaee91b5ff35d8861cc68cf","ssdeep":"1536:k9sSaVz0lJT/xf5n6O7nn+7lSBsyeUPlVVdxKLQ9oVIrBwvUou:k9sftctT+5g2U/ReQ9oV1Uou","tlshash":"1763026f2e543c067e2466fc359b8b10001d5f63603de7dea0a9fa23f297196f24ab54","first_seen":"2025-09-18T16:22:49.423406Z","last_seen":"2026-04-18T04:41:00.368806Z","times_seen":639,"resource_available":false,"data":null}},"time_used":761,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":737,"receive":24,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}