{"report_id":"a72c967d-1070-4ca2-a43d-3c3ec6755c14","version":6,"status":"done","tags":[],"date":"2026-03-22T21:48:35Z","url":{"schema":"http","addr":"glc.ceshishiping.top","fqdn":"glc.ceshishiping.top","domain":"ceshishiping.top","tld":"top"},"ip":{"addr":"58.229.132.104","port":0,"asn":9318,"as":"SK Broadband Co Ltd","country":"South Korea","country_code":"KR"},"final":{"url":{"schema":"https","addr":"glc.ceshishiping.top/","fqdn":"glc.ceshishiping.top","domain":"ceshishiping.top","tld":"top"},"title":"BWA 数字生态","dom":{"size":153897,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1591)","md5":"71df82d2a33736f54b24149ec22a316f","sha1":"0b33468433fb63166f988363d930c99302c33269","sha256":"9a5d0d9c93bea96b747106adfcb6126e18fdf4ec3131039541654a919d393a3c","sha512":"7b4cccd6327d2adbdcd80495551b35e10e311976931dc87188751d43a0d5a3ec936e17a27e9949c5b3bb3bf68dcf965b4621e94ea6c177af2b20b381a9288192","ssdeep":"1536:BYPAIBqN+JCCd3dk3v1BYgiE+2abH6OyChp926ljZBesoYj8zSsORMFIF8OC8qVT:BYPAIDCCd3dQdBYgiiOyChp926ljZBHM","tlshash":"67e3eb14bafb21621033b0751bbfd6067a21914b850ace107ebd5bc49fc5e68dda3bc9","dom_hash":"domhash381b7cc85546ac00de0440f67f546516","first_seen":"2026-03-22T21:48:44.887836Z","last_seen":"2026-03-22T21:48:44.887836Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"glc.ceshishiping.top","fqdn":"glc.ceshishiping.top","domain":"ceshishiping.top","tld":"top"},"ip":{"addr":"58.229.132.104","port":0,"asn":9318,"as":"SK Broadband Co Ltd","country":"South Korea","country_code":"KR"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-04-26T21:48:35Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":1,"urlquery":0,"analyzer":0}},"detection":{"ids":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-03-22T21:48:14Z","timestamp":1774216094,"ip_dst":{"addr":"58.229.132.104","port":80,"asn":9318,"as":"SK Broadband Co Ltd","country":"South Korea","country_code":"KR"},"ip_src":{"addr":"Client IP","port":42014,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"medium","alert":"ET INFO HTTP Request to a *.top domain","source":"{\"timestamp\":\"2026-03-22T21:48:14.848755+0000\",\"flow_id\":223810269633466,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.21\",\"src_port\":42014,\"dest_ip\":\"58.229.132.104\",\"dest_port\":80,\"proto\":\"TCP\",\"metadata\":{\"flowbits\":[\"ET.SuspExeTLDs\"]},\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2023882,\"rev\":5,\"signature\":\"ET INFO HTTP Request to a *.top domain\",\"category\":\"Potentially Bad Traffic\",\"severity\":2,\"metadata\":{\"affected_product\":[\"Windows_XP_Vista_7_8_10_Server_32_64_Bit\"],\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2017_02_07\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2022_11_21\"]}},\"http\":{\"hostname\":\"glc.ceshishiping.top\",\"url\":\"/\",\"http_user_agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\",\"http_content_type\":\"text/html\",\"http_method\":\"GET\",\"protocol\":\"HTTP/1.1\",\"status\":301,\"redirect\":\"https://glc.ceshishiping.top/\",\"length\":162},\"app_proto\":\"http\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":3,\"bytes_toserver\":557,\"bytes_toclient\":610,\"start\":\"2026-03-22T21:48:14.351162+0000\"}}"}],"analyzer":null,"urlquery":null},"summary":[{"fqdn":"glc.ceshishiping.top","ip":{"addr":"58.229.132.104","port":443,"asn":9318,"as":"SK Broadband Co Ltd","country":"South Korea","country_code":"KR"},"domain_registered":"2025-11-04","domain_rank":0,"first_seen":"2026-03-22T21:48:38.622345Z","last_seen":"2026-03-22T21:48:38.622345Z","alert_count":1,"request_count":44,"received_data":3692125,"sent_data":23318,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"jQuery:2.1.4","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Clipboard.js","description":"","website":"https://clipboardjs.com/","common_platform_enumeration":"","icon":"Clipboard.js.svg","categories":["JavaScript libraries"]},{"name":"ThinkPHP","description":"ThinkPHP is an open-source PHP framework with MVC structure developed and maintained by Shanghai Topthink Company.","website":"https://www.thinkphp.cn","common_platform_enumeration":"cpe:2.3:a:thinkphp:thinkphp:*:*:*:*:*:*:*:*","icon":"ThinkPHP.png","categories":["Web frameworks"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}]},{"fqdn":"cdnjs.cloudflare.com","ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2009-02-17","domain_rank":1222,"first_seen":"2012-05-23T12:49:49Z","last_seen":"2026-03-15T22:30:49.343058Z","alert_count":0,"request_count":2,"received_data":254122,"sent_data":1029,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"glc.ceshishiping.top/ercjs/js/web3.min.js","fqdn":"glc.ceshishiping.top","domain":"ceshishiping.top","tld":"top"},"ip":{"addr":"58.229.132.104","port":443,"asn":9318,"as":"SK Broadband Co Ltd","country":"South Korea","country_code":"KR"},"introduction_type":"scriptElement","is_inline":false,"md5":"eac05221b31bf5ef0a093865fde5f0f6","sha1":"0812818f769e7733b2b971350b9df9b9bd570b33","sha256":"57260df9b7b8c98913555b9221c91668e94b69f180335b5cd956be0884f772c3","sha512":"ea57f6f059a8950768e1aa78e1c5f0ee3fad858119cd2d7f917c43917d69a4efff48709a81e052d4799876a9242fcd7d59f1ad43eed313eb97130b318c95c429","ssdeep":"6144:GyDd49Qg36vihjhILbU+TuNmarM6cA1nJElXtaXwXn6eCOeCNvms58jHjLt/CNvu:rPruNDBZnJEPJXipams8Z/ams6n1","tlshash":"fc35ead47690b095c3a66e91402fd00ae33dfd693c4c016dbb57ecf32ca5a85562af3a","size":1163746,"data":"","first_seen":"2023-04-07T20:20:03Z","last_seen":"2026-08-16T07:06:37.623328Z","times_seen":550,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"glc.ceshishiping.top/ercjs/js/abi.js?v=123666","fqdn":"glc.ceshishiping.top","domain":"ceshishiping.top","tld":"top"},"ip":{"addr":"58.229.132.104","port":443,"asn":9318,"as":"SK Broadband Co Ltd","country":"South Korea","country_code":"KR"},"introduction_type":"scriptElement","is_inline":false,"md5":"61b5957b7e5adef32a2599160b55cb51","sha1":"6991346dccefadd78360942c6b2622faf6a8b371","sha256":"3cd947b2ff1ba0ac7d022b4a5560f836292017aa6344c0c35a68473bbdc16464","sha512":"08421ce72d9081af2d3d632b5aea7b47202b8e6f37228358e7294ebd40afa5ca1f3e60ae8625aec4b17fd9e35cc1fe5a2a79fdcf73a19e351b1b321e01dcd8d9","ssdeep":"96:BAoGAY1kgqAMjC5xu/HarAg3i1zGxA5YA+lk9IG+XdaTQAAYA86jq8qvVEMsRQ6M:GOgL6HDOveUCOA96vWZuJ6Vjx","tlshash":"cb82179c101abebf88895bb581d75748b66072e3a0cdcc81549cce35cbee596c42e78f","size":18512,"data":"","first_seen":"2025-07-22T12:12:59.96457Z","last_seen":"2026-03-23T02:29:37.804603Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"glc.ceshishiping.top/","fqdn":"glc.ceshishiping.top","domain":"ceshishiping.top","tld":"top"},"ip":{"addr":"58.229.132.104","port":443,"asn":9318,"as":"SK Broadband Co Ltd","country":"South Korea","country_code":"KR"},"introduction_type":"scriptElement","is_inline":true,"md5":"32d91f74455108ee917291097bbc82b5","sha1":"97ddd4502956e07e5c3fe0738af2bdc8088715c5","sha256":"046b15d72baeceaec478e75d7989163acb1f18b621154883b33372f91cb80b3c","sha512":"fdaf27a3182dfa00ce81beefc9ba19e270c7272687282a6711624915560b376fdb4c679ef3e9a532d4e57d34cad2401dd0195c24a447a9e4a131b7407a216318","ssdeep":"","tlshash":"645188dea9f335b25117f0384bbf59093536040b150ace14bc2e5aca2fd0e5096e5beb","size":3082,"data":"","first_seen":"2026-03-22T21:48:44.93775Z","last_seen":"2026-03-23T02:29:37.820811Z","times_seen":2,"alerts":{"ids":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-03-22T21:48:14Z","timestamp":1774216094,"ip_dst":{"addr":"58.229.132.104","port":80,"asn":9318,"as":"SK Broadband Co Ltd","country":"South Korea","country_code":"KR"},"ip_src":{"addr":"172.18.0.21","port":42014,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"medium","alert":"ET INFO HTTP Request to a *.top domain","source":"{\"timestamp\":\"2026-03-22T21:48:14.848755+0000\",\"flow_id\":223810269633466,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.21\",\"src_port\":42014,\"dest_ip\":\"58.229.132.104\",\"dest_port\":80,\"proto\":\"TCP\",\"metadata\":{\"flowbits\":[\"ET.SuspExeTLDs\"]},\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2023882,\"rev\":5,\"signature\":\"ET INFO HTTP Request to a *.top domain\",\"category\":\"Potentially Bad Traffic\",\"severity\":2,\"metadata\":{\"affected_product\":[\"Windows_XP_Vista_7_8_10_Server_32_64_Bit\"],\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2017_02_07\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2022_11_21\"]}},\"http\":{\"hostname\":\"glc.ceshishiping.top\",\"url\":\"/\",\"http_user_agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\",\"http_content_type\":\"text/html\",\"http_method\":\"GET\",\"protocol\":\"HTTP/1.1\",\"status\":301,\"redirect\":\"https://glc.ceshishiping.top/\",\"length\":162},\"app_proto\":\"http\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":3,\"bytes_toserver\":557,\"bytes_toclient\":610,\"start\":\"2026-03-22T21:48:14.351162+0000\"}}"}],"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"glc.ceshishiping.top/","fqdn":"glc.ceshishiping.top","domain":"ceshishiping.top","tld":"top"},"ip":{"addr":"58.229.132.104","port":443,"asn":9318,"as":"SK Broadband Co Ltd","country":"South Korea","country_code":"KR"},"introduction_type":"Function","is_inline":false,"md5":"29d0c84b9d1d8da446a6062c6a840ad9","sha1":"6d6b3a6065667c7c50d92f3889c85ed65a9ad784","sha256":"3c3cbdb71d0d2c22f504f4d63d8a6ffe8d250cde7e58300619be35b6bbab26a1","sha512":"52cfcbf2f7c3521c5a6c6120099ee6822d16e04ffbc04720da925a11242c8c2050f9cfc8d864a6d39a0036ac599f701080195a29a7c5e8d3e9308b91f9f0390f","ssdeep":"","tlshash":"428004d533c350004753117c04571cc4d034447014444d405040d4531c570315115c7c","size":37,"data":"","first_seen":"2023-04-11T21:31:25Z","last_seen":"2026-08-17T16:42:12.468329Z","times_seen":745159,"alerts":{"ids":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-03-22T21:48:14Z","timestamp":1774216094,"ip_dst":{"addr":"58.229.132.104","port":80,"asn":9318,"as":"SK Broadband Co Ltd","country":"South Korea","country_code":"KR"},"ip_src":{"addr":"172.18.0.21","port":42014,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"medium","alert":"ET INFO HTTP Request to a *.top domain","source":"{\"timestamp\":\"2026-03-22T21:48:14.848755+0000\",\"flow_id\":223810269633466,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.21\",\"src_port\":42014,\"dest_ip\":\"58.229.132.104\",\"dest_port\":80,\"proto\":\"TCP\",\"metadata\":{\"flowbits\":[\"ET.SuspExeTLDs\"]},\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2023882,\"rev\":5,\"signature\":\"ET INFO HTTP Request to a *.top domain\",\"category\":\"Potentially Bad Traffic\",\"severity\":2,\"metadata\":{\"affected_product\":[\"Windows_XP_Vista_7_8_10_Server_32_64_Bit\"],\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2017_02_07\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2022_11_21\"]}},\"http\":{\"hostname\":\"glc.ceshishiping.top\",\"url\":\"/\",\"http_user_agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\",\"http_content_type\":\"text/html\",\"http_method\":\"GET\",\"protocol\":\"HTTP/1.1\",\"status\":301,\"redirect\":\"https://glc.ceshishiping.top/\",\"length\":162},\"app_proto\":\"http\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":3,\"bytes_toserver\":557,\"bytes_toclient\":610,\"start\":\"2026-03-22T21:48:14.351162+0000\"}}"}],"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"glc.ceshishiping.top/","fqdn":"glc.ceshishiping.top","domain":"ceshishiping.top","tld":"top"},"ip":{"addr":"58.229.132.104","port":443,"asn":9318,"as":"SK Broadband Co Ltd","country":"South Korea","country_code":"KR"},"introduction_type":"scriptElement","is_inline":true,"md5":"32d91f74455108ee917291097bbc82b5","sha1":"97ddd4502956e07e5c3fe0738af2bdc8088715c5","sha256":"046b15d72baeceaec478e75d7989163acb1f18b621154883b33372f91cb80b3c","sha512":"fdaf27a3182dfa00ce81beefc9ba19e270c7272687282a6711624915560b376fdb4c679ef3e9a532d4e57d34cad2401dd0195c24a447a9e4a131b7407a216318","ssdeep":"","tlshash":"645188dea9f335b25117f0384bbf59093536040b150ace14bc2e5aca2fd0e5096e5beb","size":3082,"data":"","first_seen":"2026-03-22T21:48:44.93775Z","last_seen":"2026-03-23T02:29:37.820811Z","times_seen":2,"alerts":{"ids":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-03-22T21:48:14Z","timestamp":1774216094,"ip_dst":{"addr":"58.229.132.104","port":80,"asn":9318,"as":"SK Broadband Co Ltd","country":"South Korea","country_code":"KR"},"ip_src":{"addr":"172.18.0.21","port":42014,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"medium","alert":"ET INFO HTTP Request to a *.top domain","source":"{\"timestamp\":\"2026-03-22T21:48:14.848755+0000\",\"flow_id\":223810269633466,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.21\",\"src_port\":42014,\"dest_ip\":\"58.229.132.104\",\"dest_port\":80,\"proto\":\"TCP\",\"metadata\":{\"flowbits\":[\"ET.SuspExeTLDs\"]},\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2023882,\"rev\":5,\"signature\":\"ET INFO HTTP Request to a *.top domain\",\"category\":\"Potentially Bad Traffic\",\"severity\":2,\"metadata\":{\"affected_product\":[\"Windows_XP_Vista_7_8_10_Server_32_64_Bit\"],\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2017_02_07\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2022_11_21\"]}},\"http\":{\"hostname\":\"glc.ceshishiping.top\",\"url\":\"/\",\"http_user_agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\",\"http_content_type\":\"text/html\",\"http_method\":\"GET\",\"protocol\":\"HTTP/1.1\",\"status\":301,\"redirect\":\"https://glc.ceshishiping.top/\",\"length\":162},\"app_proto\":\"http\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":3,\"bytes_toserver\":557,\"bytes_toclient\":610,\"start\":\"2026-03-22T21:48:14.351162+0000\"}}"}],"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"glc.ceshishiping.top/ercjs/js/bignumber.min.js","fqdn":"glc.ceshishiping.top","domain":"ceshishiping.top","tld":"top"},"ip":{"addr":"58.229.132.104","port":443,"asn":9318,"as":"SK Broadband Co Ltd","country":"South Korea","country_code":"KR"},"introduction_type":"scriptElement","is_inline":false,"md5":"220b87873ab81287f915af82e3ba9a33","sha1":"ced2ebc27d644716effa64115643dd1770ba04eb","sha256":"266103c2cedfaf94d60f5a638555639fb2b86f2b66386660fd3d057715ebf463","sha512":"ddd12920edadffa6de43bed4fda62056a26999291cbd6b9314ee1684242b4a2dad49057753e938a65c122a554ec4a89bb2777a67fd1ebe60a5b0c9782d567b22","ssdeep":"384:W/NxaJsOM+a9fxrSZwieoa+gPIbMPzvP22niiXuB/CeTa4pLG950/GrVh:0xdxcZ9epPzP2/VlTDiX0/6","tlshash":"e582fcd875e3f09d62ff20e100e75443e17a9f0ba84c1976a2509496b831ddba2aff35","size":18565,"data":"","first_seen":"2023-03-07T12:03:15Z","last_seen":"2026-08-15T22:28:30.117877Z","times_seen":826,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"glc.ceshishiping.top/","fqdn":"glc.ceshishiping.top","domain":"ceshishiping.top","tld":"top"},"ip":{"addr":"58.229.132.104","port":443,"asn":9318,"as":"SK Broadband Co Ltd","country":"South Korea","country_code":"KR"},"introduction_type":"Function","is_inline":false,"md5":"29d0c84b9d1d8da446a6062c6a840ad9","sha1":"6d6b3a6065667c7c50d92f3889c85ed65a9ad784","sha256":"3c3cbdb71d0d2c22f504f4d63d8a6ffe8d250cde7e58300619be35b6bbab26a1","sha512":"52cfcbf2f7c3521c5a6c6120099ee6822d16e04ffbc04720da925a11242c8c2050f9cfc8d864a6d39a0036ac599f701080195a29a7c5e8d3e9308b91f9f0390f","ssdeep":"","tlshash":"428004d533c350004753117c04571cc4d034447014444d405040d4531c570315115c7c","size":37,"data":"","first_seen":"2023-04-11T21:31:25Z","last_seen":"2026-08-17T16:42:12.468329Z","times_seen":745159,"alerts":{"ids":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-03-22T21:48:14Z","timestamp":1774216094,"ip_dst":{"addr":"58.229.132.104","port":80,"asn":9318,"as":"SK Broadband Co Ltd","country":"South Korea","country_code":"KR"},"ip_src":{"addr":"172.18.0.21","port":42014,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"medium","alert":"ET INFO HTTP Request to a *.top domain","source":"{\"timestamp\":\"2026-03-22T21:48:14.848755+0000\",\"flow_id\":223810269633466,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.21\",\"src_port\":42014,\"dest_ip\":\"58.229.132.104\",\"dest_port\":80,\"proto\":\"TCP\",\"metadata\":{\"flowbits\":[\"ET.SuspExeTLDs\"]},\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2023882,\"rev\":5,\"signature\":\"ET INFO HTTP Request to a *.top domain\",\"category\":\"Potentially Bad Traffic\",\"severity\":2,\"metadata\":{\"affected_product\":[\"Windows_XP_Vista_7_8_10_Server_32_64_Bit\"],\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2017_02_07\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2022_11_21\"]}},\"http\":{\"hostname\":\"glc.ceshishiping.top\",\"url\":\"/\",\"http_user_agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\",\"http_content_type\":\"text/html\",\"http_method\":\"GET\",\"protocol\":\"HTTP/1.1\",\"status\":301,\"redirect\":\"https://glc.ceshishiping.top/\",\"length\":162},\"app_proto\":\"http\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":3,\"bytes_toserver\":557,\"bytes_toclient\":610,\"start\":\"2026-03-22T21:48:14.351162+0000\"}}"}],"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"glc.ceshishiping.top/","fqdn":"glc.ceshishiping.top","domain":"ceshishiping.top","tld":"top"},"ip":{"addr":"58.229.132.104","port":443,"asn":9318,"as":"SK Broadband Co Ltd","country":"South Korea","country_code":"KR"},"introduction_type":"scriptElement","is_inline":true,"md5":"c0fcdb89c73354395c591c624f0097df","sha1":"d82fb6b678fb9e2f15574800876b960f58fb0b8f","sha256":"77cb83060d1bda3ce2626463e46d45bbd3ca0389044d090c2278b317f8a32014","sha512":"2fe01349e180584c5b99fb71c96635dd42332b2fd7187c92824c6eddb8f54a1e227975100c8d57d590d846b19b9c0db7e879203bf1df04134f94b097fb3ef3b5","ssdeep":"192:uhRdAiWCGMtFCnuCruhicBpIerJsiFxzCbrOWvK0HQIdopSjGrCPdE7/JnoYVY4M:uN2UFCnuCruhL31gzwQGKq/mb","tlshash":"98a2615c63f71270867335250b7fe2403936165b1809de10be4ddb449fd0e992eeabd6","size":21738,"data":"","first_seen":"2026-03-22T21:48:44.94013Z","last_seen":"2026-03-23T02:29:37.825264Z","times_seen":2,"alerts":{"ids":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-03-22T21:48:14Z","timestamp":1774216094,"ip_dst":{"addr":"58.229.132.104","port":80,"asn":9318,"as":"SK Broadband Co Ltd","country":"South Korea","country_code":"KR"},"ip_src":{"addr":"172.18.0.21","port":42014,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"medium","alert":"ET INFO HTTP Request to a *.top domain","source":"{\"timestamp\":\"2026-03-22T21:48:14.848755+0000\",\"flow_id\":223810269633466,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.21\",\"src_port\":42014,\"dest_ip\":\"58.229.132.104\",\"dest_port\":80,\"proto\":\"TCP\",\"metadata\":{\"flowbits\":[\"ET.SuspExeTLDs\"]},\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2023882,\"rev\":5,\"signature\":\"ET INFO HTTP Request to a *.top domain\",\"category\":\"Potentially Bad Traffic\",\"severity\":2,\"metadata\":{\"affected_product\":[\"Windows_XP_Vista_7_8_10_Server_32_64_Bit\"],\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2017_02_07\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2022_11_21\"]}},\"http\":{\"hostname\":\"glc.ceshishiping.top\",\"url\":\"/\",\"http_user_agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\",\"http_content_type\":\"text/html\",\"http_method\":\"GET\",\"protocol\":\"HTTP/1.1\",\"status\":301,\"redirect\":\"https://glc.ceshishiping.top/\",\"length\":162},\"app_proto\":\"http\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":3,\"bytes_toserver\":557,\"bytes_toclient\":610,\"start\":\"2026-03-22T21:48:14.351162+0000\"}}"}],"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"glc.ceshishiping.top/Application/Home/View/js/jquery.min.js","fqdn":"glc.ceshishiping.top","domain":"ceshishiping.top","tld":"top"},"ip":{"addr":"58.229.132.104","port":443,"asn":9318,"as":"SK Broadband Co Ltd","country":"South Korea","country_code":"KR"},"introduction_type":"scriptElement","is_inline":false,"md5":"e39d7f174407886a84c437f14182e57a","sha1":"77e9eed704c96c3eb0180d35c6ba430b3f69a43a","sha256":"c1bcc5f2066e4476e6dbab0b5a9b9700b86f4d6ebeb2900d73ee97e53753d4f9","sha512":"3e153156a11b21a66500b592b574bc2e2ebddd41014216177c0c2d5e6b31f2d0a742f68899527dbae47309df2922f81544450f73e3e2981c88cd9ecae0c570e7","ssdeep":"1536:Z4mCgi8DyCuXXFiJ+L0kJQsJVPEKLQRZdC/RAfDknv+p0WzH/Io9Z7qABZnu0sFy:ZGsKXAI2p0WP9bDrstfa5","tlshash":"9393f8ddb2d1b06257bb21bd006f540ff236195e280d8850f129e8eabc74a4d9277fad","size":93106,"data":"","first_seen":"2023-03-07T01:15:08Z","last_seen":"2026-08-17T12:20:34.124013Z","times_seen":2490,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"glc.ceshishiping.top/Public/clipboard.min.js","fqdn":"glc.ceshishiping.top","domain":"ceshishiping.top","tld":"top"},"ip":{"addr":"58.229.132.104","port":443,"asn":9318,"as":"SK Broadband Co Ltd","country":"South Korea","country_code":"KR"},"introduction_type":"scriptElement","is_inline":false,"md5":"59ea8d92acb820d160aa22aa8a289acf","sha1":"05844a6289fbc7d2767339b0ed6d42cd943f989c","sha256":"c4d5ece5fee7972e88b9d6d30469ebe8304e6816137bc267f31ca9e2282443d2","sha512":"ba8a00d4ca31a9f93dd37f2dfbdcb6f5c35eee977cddc9156e1750c808b25fd47a60aa2e361fd39c3bafc22cf4a2b0e85ed1a2786b904549bbe3ec1f09679613","ssdeep":"192:35Hh4LyP153pPJ7rVWLBTwuLJ/eXbA5gpEHa4Lyc2mltIjk1QGl:3kA3JVVWLBT9LJ/eXbA5Tj2mzgq","tlshash":"fb22755cb280b1b19ae760a9813f424fb371a469709a90d4b239e8f1bd78dcd5467f3c","size":10669,"data":"","first_seen":"2023-05-17T06:30:29Z","last_seen":"2026-03-23T02:29:37.786588Z","times_seen":34,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"glc.ceshishiping.top/","fqdn":"glc.ceshishiping.top","domain":"ceshishiping.top","tld":"top"},"ip":{"addr":"58.229.132.104","port":443,"asn":9318,"as":"SK Broadband Co Ltd","country":"South Korea","country_code":"KR"},"introduction_type":"scriptElement","is_inline":true,"md5":"b371a5f18164256e4b8a16426860fec9","sha1":"0108d44a525922b49c7bf07db1848247df7785a9","sha256":"e68de8830afd99d78f97852e1e4c7f9c389d51f9af2b3e420db5fe4ba536604d","sha512":"fa3d8a96f2911881b9833c05629ad689590724fe2d8b0644422522fc8074e1733e598d3b3cd13cecbbacfc66ed6fb7fb6a596987433a535db056e0d7332a4074","ssdeep":"","tlshash":"44210409e5fd6751c123b67c9a3f8625b521180b094edf04bc0e9788af1857c6ad7a88","size":1111,"data":"","first_seen":"2026-03-22T21:48:44.941306Z","last_seen":"2026-03-23T02:29:37.827661Z","times_seen":2,"alerts":{"ids":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-03-22T21:48:14Z","timestamp":1774216094,"ip_dst":{"addr":"58.229.132.104","port":80,"asn":9318,"as":"SK Broadband Co Ltd","country":"South Korea","country_code":"KR"},"ip_src":{"addr":"172.18.0.21","port":42014,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"medium","alert":"ET INFO HTTP Request to a *.top domain","source":"{\"timestamp\":\"2026-03-22T21:48:14.848755+0000\",\"flow_id\":223810269633466,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.21\",\"src_port\":42014,\"dest_ip\":\"58.229.132.104\",\"dest_port\":80,\"proto\":\"TCP\",\"metadata\":{\"flowbits\":[\"ET.SuspExeTLDs\"]},\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2023882,\"rev\":5,\"signature\":\"ET INFO HTTP Request to a *.top domain\",\"category\":\"Potentially Bad Traffic\",\"severity\":2,\"metadata\":{\"affected_product\":[\"Windows_XP_Vista_7_8_10_Server_32_64_Bit\"],\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2017_02_07\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2022_11_21\"]}},\"http\":{\"hostname\":\"glc.ceshishiping.top\",\"url\":\"/\",\"http_user_agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\",\"http_content_type\":\"text/html\",\"http_method\":\"GET\",\"protocol\":\"HTTP/1.1\",\"status\":301,\"redirect\":\"https://glc.ceshishiping.top/\",\"length\":162},\"app_proto\":\"http\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":3,\"bytes_toserver\":557,\"bytes_toclient\":610,\"start\":\"2026-03-22T21:48:14.351162+0000\"}}"}],"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"glc.ceshishiping.top/ercjs/js/jquery-2.1.4.min.js","fqdn":"glc.ceshishiping.top","domain":"ceshishiping.top","tld":"top"},"ip":{"addr":"58.229.132.104","port":443,"asn":9318,"as":"SK Broadband Co Ltd","country":"South Korea","country_code":"KR"},"introduction_type":"scriptElement","is_inline":false,"md5":"f9c7afd05729f10f55b689f36bb20172","sha1":"43dc554608df885a59ddeece1598c6ace434d747","sha256":"f16ab224bb962910558715c82f58c10c3ed20f153ddfaa199029f141b5b0255c","sha512":"3dcae1ff6e98c64e3586be3eb14dd486c51f7d4e9fa1b8f9a628be4fbb6a9ab562f31f9b50e16d2e0c72b942bdbe84eee8e0ef87fa730db1428b199a59d88232","ssdeep":"1536:/P10iSi65U/dXXeyhzeBuG+HYE0mdkuJO1z6Oy4sh3J1A72BjmN7TwpDKba98HrJ:++414Jiz6fh6lTqya98HrJ","tlshash":"ca83d6d9b2c67062977734b851bf510bb17a98dab40c8c60f0a4d8e47eb4a8d517bf2c","size":84345,"data":"","first_seen":"2023-03-07T01:06:48Z","last_seen":"2026-08-17T15:04:29.00578Z","times_seen":26330,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"glc.ceshishiping.top/Public/layer/layer.js","fqdn":"glc.ceshishiping.top","domain":"ceshishiping.top","tld":"top"},"ip":{"addr":"58.229.132.104","port":443,"asn":9318,"as":"SK Broadband Co Ltd","country":"South Korea","country_code":"KR"},"introduction_type":"scriptElement","is_inline":false,"md5":"c105cceaf9853bfe46af3435d9400002","sha1":"db0d89c855346638b2b5f5a06e305402677c55a5","sha256":"95a75e4791d3283dea6df07e4d34e81ce46617184d94888eb0d467e27d143965","sha512":"40c8d78091cbc6828302cec8177ce1d2ed494ea460823b2d53a5914520a1a4061965e722892b4ac30bb141c8ce832eb9fae1b291352af272dd492e8c59e1d427","ssdeep":"384:rz5KTTrEpbdi/tkNX0pUhmdQKCznPoXMUnqJjcdm:r1KLebA/tkNM+myxpv","tlshash":"4092c46d754034962253a169821fba0f31f21d20eb078118f16bb0fd1dbcda5a2b7b6f","size":19870,"data":"","first_seen":"2025-07-22T12:12:59.97133Z","last_seen":"2026-03-23T02:29:37.811463Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"glc.ceshishiping.top/ercjs/js/web3model.min.js","fqdn":"glc.ceshishiping.top","domain":"ceshishiping.top","tld":"top"},"ip":{"addr":"58.229.132.104","port":443,"asn":9318,"as":"SK Broadband Co Ltd","country":"South Korea","country_code":"KR"},"introduction_type":"scriptElement","is_inline":false,"md5":"365c80971c9efc3f3e8087fc703f7667","sha1":"de6bd2aadd0984751888f6f59fdc81102e2f816d","sha256":"a4cd4c5feca9f7333052edb99312a899313e1f3f6b8f34ab7f8dcf01fe8d7a74","sha512":"f9470f1d189a597a3588b476b3efdcf97823dd0c87411f60607b641525c52605a7a2550f38337e50869a837fc1d6acf9029d5d17f66050fa94fbadf5b5feeeed","ssdeep":"6144:l76dr/jrE/0NNWS9UO2/HP2jz05O1HaeJ3qZEZDj9+b+Q88MzfFNo8vq5:56d9DZzaneYZEl5+qQ8zztN85","tlshash":"6c94aee93582f42157f366b740af1806b33d691b140c88a0f255edd5e8f84aa913bff9","size":430089,"data":"","first_seen":"2023-03-07T12:03:15Z","last_seen":"2026-07-27T13:45:14.751184Z","times_seen":413,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"glc.ceshishiping.top/ercjs/js/web3provider.js","fqdn":"glc.ceshishiping.top","domain":"ceshishiping.top","tld":"top"},"ip":{"addr":"58.229.132.104","port":443,"asn":9318,"as":"SK Broadband Co Ltd","country":"South Korea","country_code":"KR"},"introduction_type":"scriptElement","is_inline":false,"md5":"ecd0acbd0f232a69f443beec9cd608bf","sha1":"1bbb9cee94841cece182da632767fa43970eb013","sha256":"54335e7705b99ad9f87bd7296dfe88f6c8b78f16703f9ecc27e43a62b5be765e","sha512":"e632544468f0d6d6e6ff8dade483d70f2f3ba38dc222a1e7f1c1fdcdb7d2a1615df52fce2d909ff654d71b942306a50d1e62fdf430628e527e70ead3cc6dea68","ssdeep":"6144:W47GR6PGawV6G7MzqnTaO8V4bHEzQva4qUY2OhwznWoxACNvmsZ4KDGAmq+8q+2Z:XGwjw9nHAamsZ3GAOqwJGPv6","tlshash":"bc15f984b664b061839a65e0043f540ff27aba2d780b44bcf654d8f6bcbd989553bf38","size":955210,"data":"","first_seen":"2023-03-07T12:26:47Z","last_seen":"2026-08-15T02:09:38.792236Z","times_seen":510,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"glc.ceshishiping.top/","fqdn":"glc.ceshishiping.top","domain":"ceshishiping.top","tld":"top"},"ip":{"addr":"58.229.132.104","port":443,"asn":9318,"as":"SK Broadband Co Ltd","country":"South Korea","country_code":"KR"},"introduction_type":"scriptElement","is_inline":true,"md5":"17b3b722fa99ea385eee0c78511ff53b","sha1":"91b725a030f6cf6ea16533760883e2a945c2e503","sha256":"3dd71e93c04708900202d13b42d39df4004f2bc2ddf35d615df03220b671b8f7","sha512":"4ae97735d03f5722060e98dc214083e9621af67c13315c4a7c54d919e21dd74c7fe6417ed895017f75250401e3da1e37f5042a726f0c5eab91cca00ee0b316d8","ssdeep":"1536:dljZBesoYj8zSsORMFIF8OC8qVLDXNJQqnwBCetJ1TRHeM1:dljZBB","tlshash":"f4439618bbeb6255183370390bff90053524518b450dde20bd9ea795afd4b38edb2bca","size":55912,"data":"","first_seen":"2026-03-22T21:48:44.942469Z","last_seen":"2026-03-23T02:29:37.828947Z","times_seen":2,"alerts":{"ids":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-03-22T21:48:14Z","timestamp":1774216094,"ip_dst":{"addr":"58.229.132.104","port":80,"asn":9318,"as":"SK Broadband Co Ltd","country":"South Korea","country_code":"KR"},"ip_src":{"addr":"172.18.0.21","port":42014,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"medium","alert":"ET INFO HTTP Request to a *.top domain","source":"{\"timestamp\":\"2026-03-22T21:48:14.848755+0000\",\"flow_id\":223810269633466,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.21\",\"src_port\":42014,\"dest_ip\":\"58.229.132.104\",\"dest_port\":80,\"proto\":\"TCP\",\"metadata\":{\"flowbits\":[\"ET.SuspExeTLDs\"]},\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2023882,\"rev\":5,\"signature\":\"ET INFO HTTP Request to a *.top domain\",\"category\":\"Potentially Bad Traffic\",\"severity\":2,\"metadata\":{\"affected_product\":[\"Windows_XP_Vista_7_8_10_Server_32_64_Bit\"],\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2017_02_07\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2022_11_21\"]}},\"http\":{\"hostname\":\"glc.ceshishiping.top\",\"url\":\"/\",\"http_user_agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\",\"http_content_type\":\"text/html\",\"http_method\":\"GET\",\"protocol\":\"HTTP/1.1\",\"status\":301,\"redirect\":\"https://glc.ceshishiping.top/\",\"length\":162},\"app_proto\":\"http\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":3,\"bytes_toserver\":557,\"bytes_toclient\":610,\"start\":\"2026-03-22T21:48:14.351162+0000\"}}"}],"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"glc.ceshishiping.top/","fqdn":"glc.ceshishiping.top","domain":"ceshishiping.top","tld":"top"},"ip":{"addr":"58.229.132.104","port":443,"asn":9318,"as":"SK Broadband Co Ltd","country":"South Korea","country_code":"KR"},"introduction_type":"scriptElement","is_inline":true,"md5":"a70d9efef0326d52b1b74e84f8458c53","sha1":"236587cdc235a5614c766355f51b712331d88a2a","sha256":"6d27ebc445163b94ba039e2908a7ea5b8774cff222b46d6ebbcb89c2d7d01652","sha512":"a82835bc210fc816b70e4c4db25506b9ce85cc7e344d8f267b98e50ef68e5bb6b0ea504916c12a3d223956f8ecd48c09c57232fd3d4c278ddd2f6aa4e432661c","ssdeep":"192:STdKZgrDRrH+O3CR8Ix7t939DUqqwpmJnp8csZ6/y7dt7RY1eUoAmV/h8nvIKpcR:STMDV39upMEU2ShoLUe47N2hg","tlshash":"f3a24308befb36a06933f03747bfd545b265005b9506ce007d6d47c09fa8668aa6ded3","size":21588,"data":"","first_seen":"2026-03-22T21:48:44.943691Z","last_seen":"2026-03-23T02:29:37.830717Z","times_seen":2,"alerts":{"ids":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-03-22T21:48:14Z","timestamp":1774216094,"ip_dst":{"addr":"58.229.132.104","port":80,"asn":9318,"as":"SK Broadband Co Ltd","country":"South Korea","country_code":"KR"},"ip_src":{"addr":"172.18.0.21","port":42014,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"medium","alert":"ET INFO HTTP Request to a *.top domain","source":"{\"timestamp\":\"2026-03-22T21:48:14.848755+0000\",\"flow_id\":223810269633466,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.21\",\"src_port\":42014,\"dest_ip\":\"58.229.132.104\",\"dest_port\":80,\"proto\":\"TCP\",\"metadata\":{\"flowbits\":[\"ET.SuspExeTLDs\"]},\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2023882,\"rev\":5,\"signature\":\"ET INFO HTTP Request to a *.top domain\",\"category\":\"Potentially Bad Traffic\",\"severity\":2,\"metadata\":{\"affected_product\":[\"Windows_XP_Vista_7_8_10_Server_32_64_Bit\"],\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2017_02_07\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2022_11_21\"]}},\"http\":{\"hostname\":\"glc.ceshishiping.top\",\"url\":\"/\",\"http_user_agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\",\"http_content_type\":\"text/html\",\"http_method\":\"GET\",\"protocol\":\"HTTP/1.1\",\"status\":301,\"redirect\":\"https://glc.ceshishiping.top/\",\"length\":162},\"app_proto\":\"http\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":3,\"bytes_toserver\":557,\"bytes_toclient\":610,\"start\":\"2026-03-22T21:48:14.351162+0000\"}}"}],"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"glc.ceshishiping.top/","fqdn":"glc.ceshishiping.top","domain":"ceshishiping.top","tld":"top"},"ip":{"addr":"58.229.132.104","port":443,"asn":9318,"as":"SK Broadband Co Ltd","country":"South Korea","country_code":"KR"},"introduction_type":"Function","is_inline":false,"md5":"973e831379b94d060af9b2e9bc78f49e","sha1":"83448e2204ac7f3afafeb07ffa3d2b92a7e31ce2","sha256":"814148cbc3bea44c7786594a53ca13a6326ad08dfd73abbb11e82c285a15109b","sha512":"45e6d9b25a24e2c9a1c34173df38587cad6d7d85753f8211d4e0dff58e73be9e4cb99724024ead994c6cef70aaa958f9f15fb628bc9d83a52b39ca44844f8080","ssdeep":"","tlshash":"5c90027528c2201060173256547658e601308030d4588d51010498a1985543156065ac","size":49,"data":"","first_seen":"2023-04-11T21:45:58Z","last_seen":"2026-08-17T15:55:53.16393Z","times_seen":38164,"alerts":{"ids":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-03-22T21:48:14Z","timestamp":1774216094,"ip_dst":{"addr":"58.229.132.104","port":80,"asn":9318,"as":"SK Broadband Co Ltd","country":"South Korea","country_code":"KR"},"ip_src":{"addr":"172.18.0.21","port":42014,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"medium","alert":"ET INFO HTTP Request to a *.top domain","source":"{\"timestamp\":\"2026-03-22T21:48:14.848755+0000\",\"flow_id\":223810269633466,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.21\",\"src_port\":42014,\"dest_ip\":\"58.229.132.104\",\"dest_port\":80,\"proto\":\"TCP\",\"metadata\":{\"flowbits\":[\"ET.SuspExeTLDs\"]},\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2023882,\"rev\":5,\"signature\":\"ET INFO HTTP Request to a *.top domain\",\"category\":\"Potentially Bad Traffic\",\"severity\":2,\"metadata\":{\"affected_product\":[\"Windows_XP_Vista_7_8_10_Server_32_64_Bit\"],\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2017_02_07\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2022_11_21\"]}},\"http\":{\"hostname\":\"glc.ceshishiping.top\",\"url\":\"/\",\"http_user_agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\",\"http_content_type\":\"text/html\",\"http_method\":\"GET\",\"protocol\":\"HTTP/1.1\",\"status\":301,\"redirect\":\"https://glc.ceshishiping.top/\",\"length\":162},\"app_proto\":\"http\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":3,\"bytes_toserver\":557,\"bytes_toclient\":610,\"start\":\"2026-03-22T21:48:14.351162+0000\"}}"}],"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"glc.ceshishiping.top/ercjs/js/bignumber.min.js","fqdn":"glc.ceshishiping.top","domain":"ceshishiping.top","tld":"top"},"ip":{"addr":"58.229.132.104","port":443,"asn":9318,"as":"SK Broadband Co Ltd","country":"South Korea","country_code":"KR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://glc.ceshishiping.top/","date":"2026-03-22T21:48:18.465Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"glc.ceshishiping.top","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 16 Jan 2026 15:12:32 GMT","end":"Thu, 16 Apr 2026 15:12:31 GMT"},"fingerprint":{"sha1":"EC:D5:46:07:68:F8:28:5F:48:11:6C:C6:EF:A5:03:85:99:7A:E2:4D","sha256":"3C:D3:F3:15:34:60:A4:95:A0:28:F8:32:74:67:D0:49:C8:84:7A:41:C1:CB:15:9C:44:83:87:02:C6:0B:44:8F"}}},"request":{"raw":"GET /ercjs/js/bignumber.min.js HTTP/1.1\r\nHost: glc.ceshishiping.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://glc.ceshishiping.top/\r\nCookie: PHPSESSID=6d5nvqgk0cej31u8apv5aaljed\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 22 Mar 2026 21:46:43 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 09 Feb 2022 13:55:30 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6203c7d2-4885\"\r\nexpires: Mon, 23 Mar 2026 09:46:43 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":18565,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (18564), with no line terminators","md5":"220b87873ab81287f915af82e3ba9a33","sha1":"ced2ebc27d644716effa64115643dd1770ba04eb","sha256":"266103c2cedfaf94d60f5a638555639fb2b86f2b66386660fd3d057715ebf463","sha512":"ddd12920edadffa6de43bed4fda62056a26999291cbd6b9314ee1684242b4a2dad49057753e938a65c122a554ec4a89bb2777a67fd1ebe60a5b0c9782d567b22","ssdeep":"384:W/NxaJsOM+a9fxrSZwieoa+gPIbMPzvP22niiXuB/CeTa4pLG950/GrVh:0xdxcZ9epPzP2/VlTDiX0/6","tlshash":"e582fcd875e3f09d62ff20e100e75443e17a9f0ba84c1976a2509496b831ddba2aff35","first_seen":"2023-03-07T12:03:15Z","last_seen":"2026-08-15T22:28:30.117877Z","times_seen":826,"resource_available":true,"data":null}},"time_used":904,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":904,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"glc.ceshishiping.top/Public/layer/skin/default/layer.css","fqdn":"glc.ceshishiping.top","domain":"ceshishiping.top","tld":"top"},"ip":{"addr":"58.229.132.104","port":443,"asn":9318,"as":"SK Broadband Co Ltd","country":"South Korea","country_code":"KR"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://glc.ceshishiping.top/","date":"2026-03-22T21:48:19.814Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"glc.ceshishiping.top","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 16 Jan 2026 15:12:32 GMT","end":"Thu, 16 Apr 2026 15:12:31 GMT"},"fingerprint":{"sha1":"EC:D5:46:07:68:F8:28:5F:48:11:6C:C6:EF:A5:03:85:99:7A:E2:4D","sha256":"3C:D3:F3:15:34:60:A4:95:A0:28:F8:32:74:67:D0:49:C8:84:7A:41:C1:CB:15:9C:44:83:87:02:C6:0B:44:8F"}}},"request":{"raw":"GET /Public/layer/skin/default/layer.css HTTP/1.1\r\nHost: glc.ceshishiping.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://glc.ceshishiping.top/\r\nCookie: PHPSESSID=6d5nvqgk0cej31u8apv5aaljed\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 22 Mar 2026 21:46:44 GMT\r\ncontent-type: text/css\r\nlast-modified: Sat, 05 Feb 2022 08:35:54 GMT\r\nvary: Accept-Encoding\r\netag: W/\"61fe36ea-369a\"\r\nexpires: Mon, 23 Mar 2026 09:46:44 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":13978,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (13978), with no line terminators","md5":"b00a5e4a8e354f03416e14a83a6b5106","sha1":"4e6ff2efec71e111033e9ab44456c0178360e6ab","sha256":"6234ffa5c29bdf68b43c79cdc5f492de725fb8ba80367000f8e9556570a3825b","sha512":"fc534eca969724fafa73327e2c7f432af1f50607c1bd9e66573f2a6f2537f2e0116793fa9cb6006f3af31e3b9b54304fe3a0fce522a0f535fba331e9366c501a","ssdeep":"192:1TNUL0PmLeWVrrzzt42OT9zBKgwBns+5Cb+RX:1qL0ijVDJATyG+5CGX","tlshash":"855211e144811299b0278612d6dc7eba32f88d53e5630dbef2573c1f874c6dba2b6247","first_seen":"2025-07-22T12:12:59.97703Z","last_seen":"2026-03-23T02:29:37.800563Z","times_seen":4,"resource_available":false,"data":null}},"time_used":2431,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":2431,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"glc.ceshishiping.top/index.php/Home/blind_box/getRoundInfo?box_type=1000","fqdn":"glc.ceshishiping.top","domain":"ceshishiping.top","tld":"top"},"ip":{"addr":"58.229.132.104","port":443,"asn":9318,"as":"SK Broadband Co Ltd","country":"South Korea","country_code":"KR"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://glc.ceshishiping.top/","date":"2026-03-22T21:48:26.596Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"glc.ceshishiping.top","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 16 Jan 2026 15:12:32 GMT","end":"Thu, 16 Apr 2026 15:12:31 GMT"},"fingerprint":{"sha1":"EC:D5:46:07:68:F8:28:5F:48:11:6C:C6:EF:A5:03:85:99:7A:E2:4D","sha256":"3C:D3:F3:15:34:60:A4:95:A0:28:F8:32:74:67:D0:49:C8:84:7A:41:C1:CB:15:9C:44:83:87:02:C6:0B:44:8F"}}},"request":{"raw":"GET /index.php/Home/blind_box/getRoundInfo?box_type=1000 HTTP/1.1\r\nHost: glc.ceshishiping.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/javascript, */*; q=0.01\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Requested-With: XMLHttpRequest\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://glc.ceshishiping.top/\r\nCookie: PHPSESSID=6d5nvqgk0cej31u8apv5aaljed\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 22 Mar 2026 21:46:51 GMT\r\ncontent-type: application/json; charset=utf-8\r\nvary: Accept-Encoding\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":235,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"51639287447bfac0eecf31d87bff2cfe","sha1":"7eb27940ba26023111f4bbbcd034c46d5340db9b","sha256":"bee200bf017e977bd44424685845f155051475b10836ff0ab0ae5444e2536812","sha512":"1d2f9d4bc1dcf59900c7a8830c708857efbc4ab6230011ff08d561023872d25e0cabaab4607e59c0b2e8e5456cebf9dc79af04c72ee0a6f22b02b68576942be8","ssdeep":"","tlshash":"63d0a758e2f289a859a3812142c953e7622c71a6e1c6c340f7ec461437471755591112","first_seen":"2026-03-22T21:48:44.892364Z","last_seen":"2026-03-22T21:48:44.892364Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1812,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1812,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"glc.ceshishiping.top/","fqdn":"glc.ceshishiping.top","domain":"ceshishiping.top","tld":"top"},"ip":{"addr":"58.229.132.104","port":443,"asn":9318,"as":"SK Broadband Co Ltd","country":"South Korea","country_code":"KR"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-22T21:48:11.364Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"glc.ceshishiping.top","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 16 Jan 2026 15:12:32 GMT","end":"Thu, 16 Apr 2026 15:12:31 GMT"},"fingerprint":{"sha1":"EC:D5:46:07:68:F8:28:5F:48:11:6C:C6:EF:A5:03:85:99:7A:E2:4D","sha256":"3C:D3:F3:15:34:60:A4:95:A0:28:F8:32:74:67:D0:49:C8:84:7A:41:C1:CB:15:9C:44:83:87:02:C6:0B:44:8F"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: glc.ceshishiping.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 22 Mar 2026 21:46:42 GMT\r\ncontent-type: text/html; charset=utf-8\r\nvary: Accept-Encoding\r\nset-cookie: PHPSESSID=6d5nvqgk0cej31u8apv5aaljed; path=/\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\npragma: no-cache\r\ncache-control: private\r\nx-powered-by: ThinkPHP\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"jQuery:2.1.4","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Clipboard.js","description":"","website":"https://clipboardjs.com/","common_platform_enumeration":"","icon":"Clipboard.js.svg","categories":["JavaScript libraries"]},{"name":"ThinkPHP","description":"ThinkPHP is an open-source PHP framework with MVC structure developed and maintained by Shanghai Topthink Company.","website":"https://www.thinkphp.cn","common_platform_enumeration":"cpe:2.3:a:thinkphp:thinkphp:*:*:*:*:*:*:*:*","icon":"ThinkPHP.png","categories":["Web frameworks"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":154287,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1585)","md5":"3fcb3c3e7695a0162c67a86c2cc70abd","sha1":"f50b72e7fa261d02b155db6630e3a33695500108","sha256":"1e54804cc82c1a9667df5e70be5de6e9c21c613483317f3550eae85f98fd4936","sha512":"87d0a23e3c69cdd1e55ff0e3c2fdf60de70899865a64642010000d0c54e3d2ae0d636ce767ad9f32e2f44b8449380ad435f9740066d7b3ef49a2d1558f58c92d","ssdeep":"1536:LYPTBq++JCCd3dsN9o0JgBYzZJjTT07OyChp926ljZBesoYj8zSsORMFIF8OC8qO:LYPTICCd3dVHBYz8OyChp926ljZBY6","tlshash":"b9e3eb14bafb21621033b0751bbfd6063a21914b850ace107ebd5bc49fd5e68dda3bc9","first_seen":"2026-03-22T21:48:44.893572Z","last_seen":"2026-03-22T21:48:44.893572Z","times_seen":1,"resource_available":false,"data":null}},"time_used":7539,"timings":{"blocked":836,"dns":337,"connect":246,"send":0,"wait":5866,"receive":0,"ssl":251},"alerts":{"ids":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-03-22T21:48:14Z","timestamp":1774216094,"ip_dst":{"addr":"58.229.132.104","port":80,"asn":9318,"as":"SK Broadband Co Ltd","country":"South Korea","country_code":"KR"},"ip_src":{"addr":"172.18.0.21","port":42014,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"medium","alert":"ET INFO HTTP Request to a *.top domain","source":"{\"timestamp\":\"2026-03-22T21:48:14.848755+0000\",\"flow_id\":223810269633466,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.21\",\"src_port\":42014,\"dest_ip\":\"58.229.132.104\",\"dest_port\":80,\"proto\":\"TCP\",\"metadata\":{\"flowbits\":[\"ET.SuspExeTLDs\"]},\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2023882,\"rev\":5,\"signature\":\"ET INFO HTTP Request to a *.top domain\",\"category\":\"Potentially Bad Traffic\",\"severity\":2,\"metadata\":{\"affected_product\":[\"Windows_XP_Vista_7_8_10_Server_32_64_Bit\"],\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2017_02_07\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2022_11_21\"]}},\"http\":{\"hostname\":\"glc.ceshishiping.top\",\"url\":\"/\",\"http_user_agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\",\"http_content_type\":\"text/html\",\"http_method\":\"GET\",\"protocol\":\"HTTP/1.1\",\"status\":301,\"redirect\":\"https://glc.ceshishiping.top/\",\"length\":162},\"app_proto\":\"http\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":3,\"bytes_toserver\":557,\"bytes_toclient\":610,\"start\":\"2026-03-22T21:48:14.351162+0000\"}}"}],"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"glc.ceshishiping.top/Application/Home/View/images/home/image%20277.png","fqdn":"glc.ceshishiping.top","domain":"ceshishiping.top","tld":"top"},"ip":{"addr":"58.229.132.104","port":443,"asn":9318,"as":"SK Broadband Co Ltd","country":"South Korea","country_code":"KR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://glc.ceshishiping.top/","date":"2026-03-22T21:48:18.392Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"glc.ceshishiping.top","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 16 Jan 2026 15:12:32 GMT","end":"Thu, 16 Apr 2026 15:12:31 GMT"},"fingerprint":{"sha1":"EC:D5:46:07:68:F8:28:5F:48:11:6C:C6:EF:A5:03:85:99:7A:E2:4D","sha256":"3C:D3:F3:15:34:60:A4:95:A0:28:F8:32:74:67:D0:49:C8:84:7A:41:C1:CB:15:9C:44:83:87:02:C6:0B:44:8F"}}},"request":{"raw":"GET /Application/Home/View/images/home/image%20277.png HTTP/1.1\r\nHost: glc.ceshishiping.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://glc.ceshishiping.top/\r\nCookie: PHPSESSID=6d5nvqgk0cej31u8apv5aaljed\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 22 Mar 2026 21:46:43 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 21 Nov 2025 08:12:10 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69201eda-f648\"\r\nexpires: Tue, 21 Apr 2026 21:46:43 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":63048,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 268 x 192, 8-bit/color RGBA, non-interlaced","md5":"0383633c02d4f1545ddaeb2dfa58c166","sha1":"16b2ada2e3963a85f781f626bd4110d38d46eb16","sha256":"228b075ef677f42b34ef8dcb0de31733977e2217cda125bd88159de8682334e1","sha512":"f99f5326cb33561f5f7509b52d3844cbf8e7756e04bac19ab268beb3590477f1426e2540442cddaea06205d9c34d41e78b747843ed7a348c42f7b087faf140aa","ssdeep":"1536:qggQ7b2SFh1b50eD9c2i8igGnVvAOk6HsnBFBj1JVe4STG+f:qa7b3GqizgGnVlvMnt1u40f","tlshash":"ba53028d24df1198419dbb45c716eae0f62bdb78a40feb9c01722e41741dedbc0ac755","first_seen":"2026-03-22T21:48:44.895634Z","last_seen":"2026-03-23T02:29:37.757233Z","times_seen":2,"resource_available":false,"data":null}},"time_used":973,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":973,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"glc.ceshishiping.top/Application/Home/View/images/home/sy5.png","fqdn":"glc.ceshishiping.top","domain":"ceshishiping.top","tld":"top"},"ip":{"addr":"58.229.132.104","port":443,"asn":9318,"as":"SK Broadband Co Ltd","country":"South Korea","country_code":"KR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://glc.ceshishiping.top/","date":"2026-03-22T21:48:18.449Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"glc.ceshishiping.top","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 16 Jan 2026 15:12:32 GMT","end":"Thu, 16 Apr 2026 15:12:31 GMT"},"fingerprint":{"sha1":"EC:D5:46:07:68:F8:28:5F:48:11:6C:C6:EF:A5:03:85:99:7A:E2:4D","sha256":"3C:D3:F3:15:34:60:A4:95:A0:28:F8:32:74:67:D0:49:C8:84:7A:41:C1:CB:15:9C:44:83:87:02:C6:0B:44:8F"}}},"request":{"raw":"GET /Application/Home/View/images/home/sy5.png HTTP/1.1\r\nHost: glc.ceshishiping.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://glc.ceshishiping.top/\r\nCookie: PHPSESSID=6d5nvqgk0cej31u8apv5aaljed\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 22 Mar 2026 21:46:43 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 14 Apr 2022 00:48:06 GMT\r\nvary: Accept-Encoding\r\netag: W/\"62576f46-8b10\"\r\nexpires: Tue, 21 Apr 2026 21:46:43 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":35600,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 216 x 262, 8-bit/color RGBA, non-interlaced","md5":"2a0f7727e8d5c9652e71de0bb0d4f110","sha1":"b5d7153620c51d3ae73de4bc71199b214a5aa6d8","sha256":"4bfe529d4c5e38663c35703516683eb7491428e5f7030437c763847c45317498","sha512":"2381ea0f69e43dfeb062468f8de03605776296a3a59edef51b7f992f1a6d718995ae59d85721e1139056e3e2f25a59651076db48706463b25524fc7081ba0a64","ssdeep":"768:Kf9WbR9vhtGaQzIn0JG3U4NmkufJ23pZY5u7D7mbWzfI:HbR9hUDMn33XNeB2/Y5AG","tlshash":"91f2e1f05b53971e6c73300a11e4925690b78b3befa6c8d9d184540c331a91f971aa7b","first_seen":"2025-07-22T12:12:59.980061Z","last_seen":"2026-03-23T02:29:37.765215Z","times_seen":3,"resource_available":false,"data":null}},"time_used":923,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":923,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"glc.ceshishiping.top/Application/Home/View/images/home/sy6.png","fqdn":"glc.ceshishiping.top","domain":"ceshishiping.top","tld":"top"},"ip":{"addr":"58.229.132.104","port":443,"asn":9318,"as":"SK Broadband Co Ltd","country":"South Korea","country_code":"KR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://glc.ceshishiping.top/","date":"2026-03-22T21:48:18.450Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"glc.ceshishiping.top","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 16 Jan 2026 15:12:32 GMT","end":"Thu, 16 Apr 2026 15:12:31 GMT"},"fingerprint":{"sha1":"EC:D5:46:07:68:F8:28:5F:48:11:6C:C6:EF:A5:03:85:99:7A:E2:4D","sha256":"3C:D3:F3:15:34:60:A4:95:A0:28:F8:32:74:67:D0:49:C8:84:7A:41:C1:CB:15:9C:44:83:87:02:C6:0B:44:8F"}}},"request":{"raw":"GET /Application/Home/View/images/home/sy6.png HTTP/1.1\r\nHost: glc.ceshishiping.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://glc.ceshishiping.top/\r\nCookie: PHPSESSID=6d5nvqgk0cej31u8apv5aaljed\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 22 Mar 2026 21:46:43 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 14 Apr 2022 00:48:06 GMT\r\nvary: Accept-Encoding\r\netag: W/\"62576f46-85d6\"\r\nexpires: Tue, 21 Apr 2026 21:46:43 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":34262,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 216 x 262, 8-bit/color RGBA, non-interlaced","md5":"f864d8d36341816bafaa887287a062c6","sha1":"5540219b923502d3c65d6dc5c3da1d5049bbf76d","sha256":"708bd62e2b902711504c2a6c85f6de8c7918a7d20929851723e8084bb04673ae","sha512":"1b5e04e28f5c0bf4a7b9889e4e213fc68357919979a551c838a88ba01f75d63f1a4a16dc522fb3c1977fe28c21266ff024299453936a0493533c05dcd7e26918","ssdeep":"768:zD7k1LOshBezF2zSFNNFCQWPWFMJRUksQ2++CwQUHzQlIh:zM1K0ezkeNNFtWPWF1Q5OTQlIh","tlshash":"27f2f2ea1c3586ae5840e9f613ceb77871bf4639a91148832d2f3194e0e505c76c9d53","first_seen":"2025-07-22T12:12:59.994816Z","last_seen":"2026-03-23T02:29:37.815629Z","times_seen":3,"resource_available":false,"data":null}},"time_used":922,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":922,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"glc.ceshishiping.top/ercjs/js/web3.min.js","fqdn":"glc.ceshishiping.top","domain":"ceshishiping.top","tld":"top"},"ip":{"addr":"58.229.132.104","port":443,"asn":9318,"as":"SK Broadband Co Ltd","country":"South Korea","country_code":"KR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://glc.ceshishiping.top/","date":"2026-03-22T21:48:18.466Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"glc.ceshishiping.top","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 16 Jan 2026 15:12:32 GMT","end":"Thu, 16 Apr 2026 15:12:31 GMT"},"fingerprint":{"sha1":"EC:D5:46:07:68:F8:28:5F:48:11:6C:C6:EF:A5:03:85:99:7A:E2:4D","sha256":"3C:D3:F3:15:34:60:A4:95:A0:28:F8:32:74:67:D0:49:C8:84:7A:41:C1:CB:15:9C:44:83:87:02:C6:0B:44:8F"}}},"request":{"raw":"GET /ercjs/js/web3.min.js HTTP/1.1\r\nHost: glc.ceshishiping.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://glc.ceshishiping.top/\r\nCookie: PHPSESSID=6d5nvqgk0cej31u8apv5aaljed\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 22 Mar 2026 21:46:43 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 09 Feb 2022 13:55:42 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6203c7de-11c1e2\"\r\nexpires: Mon, 23 Mar 2026 09:46:43 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1163746,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (63842)","md5":"85fbff8aa23dd3215495d577dde4a059","sha1":"1a9d7f2f5d62bafa22b0a52c41e1a56ccb15dbe5","sha256":"170cd2222148267690f1325b49ffc48205a30a174cef90585f7274e9e05ece03","sha512":"1e2fe1dfb61dae0e4232acf58e0e07e995a4ded9d765df11aeebdccea32f126cfd4bdd0cab54449350bb0e7524fe754f82e9782195cfa96b8b18497ca255071d","ssdeep":"6144:GyDd49Qg36vihjhILbU+TuNmarM6cA1nJElXtaXwXn6eCOeCNvms58jHdst/CNvE:rPruNDBZnJEPJXipamsX/amss","tlshash":"8125e9d47690b095c3a65ed1442fd00ae33dfda92c4c012dbb57ecf32ca5a85562af3a","first_seen":"2026-03-22T21:48:44.8993Z","last_seen":"2026-03-23T02:29:37.793082Z","times_seen":2,"resource_available":false,"data":null}},"time_used":898,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":898,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"glc.ceshishiping.top/index.php/Home/blind_box/getRoundInfo?box_type=50","fqdn":"glc.ceshishiping.top","domain":"ceshishiping.top","tld":"top"},"ip":{"addr":"58.229.132.104","port":443,"asn":9318,"as":"SK Broadband Co Ltd","country":"South Korea","country_code":"KR"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://glc.ceshishiping.top/","date":"2026-03-22T21:48:26.585Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"glc.ceshishiping.top","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 16 Jan 2026 15:12:32 GMT","end":"Thu, 16 Apr 2026 15:12:31 GMT"},"fingerprint":{"sha1":"EC:D5:46:07:68:F8:28:5F:48:11:6C:C6:EF:A5:03:85:99:7A:E2:4D","sha256":"3C:D3:F3:15:34:60:A4:95:A0:28:F8:32:74:67:D0:49:C8:84:7A:41:C1:CB:15:9C:44:83:87:02:C6:0B:44:8F"}}},"request":{"raw":"GET /index.php/Home/blind_box/getRoundInfo?box_type=50 HTTP/1.1\r\nHost: glc.ceshishiping.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/javascript, */*; q=0.01\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Requested-With: XMLHttpRequest\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://glc.ceshishiping.top/\r\nCookie: PHPSESSID=6d5nvqgk0cej31u8apv5aaljed\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 22 Mar 2026 21:46:51 GMT\r\ncontent-type: application/json; charset=utf-8\r\nvary: Accept-Encoding\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":233,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"e22e1d62a5ccbab68edff4f1f2700ca4","sha1":"bd4f371094141ab6ed4ace3275f7c212d3bf6855","sha256":"80fa7387108dd64f1ab95f752d893293587b311973f7d1afc1984607d0d1d1ff","sha512":"44a5aadf7e5aca19d979cb6a8b85d4233d1018281b760f5e52a5218f4ae0c3a11bc1bb48fc3346ff41662be02e154d580e4b81b5f5c2a27668823758b558280e","ssdeep":"","tlshash":"0cd0a748e2f299a85993812141c953e7662c61a6a1c6c340f7ec461433071b56591412","first_seen":"2026-03-22T21:48:44.900291Z","last_seen":"2026-03-22T21:48:44.900291Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1818,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1818,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"glc.ceshishiping.top/Application/Home/View/fonts/FZHanZhenGuangBiaoS-GB.otf","fqdn":"glc.ceshishiping.top","domain":"ceshishiping.top","tld":"top"},"ip":{"addr":"58.229.132.104","port":443,"asn":9318,"as":"SK Broadband Co Ltd","country":"South Korea","country_code":"KR"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://glc.ceshishiping.top/","date":"2026-03-22T21:48:26.917Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"glc.ceshishiping.top","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 16 Jan 2026 15:12:32 GMT","end":"Thu, 16 Apr 2026 15:12:31 GMT"},"fingerprint":{"sha1":"EC:D5:46:07:68:F8:28:5F:48:11:6C:C6:EF:A5:03:85:99:7A:E2:4D","sha256":"3C:D3:F3:15:34:60:A4:95:A0:28:F8:32:74:67:D0:49:C8:84:7A:41:C1:CB:15:9C:44:83:87:02:C6:0B:44:8F"}}},"request":{"raw":"GET /Application/Home/View/fonts/FZHanZhenGuangBiaoS-GB.otf HTTP/1.1\r\nHost: glc.ceshishiping.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://glc.ceshishiping.top/Application/Home/View/css/style_new.css?v=20260323054642\r\nCookie: PHPSESSID=6d5nvqgk0cej31u8apv5aaljed\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\nserver: nginx\r\ndate: Sun, 22 Mar 2026 21:46:52 GMT\r\ncontent-type: text/html; charset=utf-8\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\nlocation: /404.html\r\nstrict-transport-security: max-age=31536000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":479,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-17T16:43:02.353128Z","times_seen":17939481,"resource_available":true,"data":null}},"time_used":1474,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":1474,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"glc.ceshishiping.top/Application/Home/View/images/home/box-small.png","fqdn":"glc.ceshishiping.top","domain":"ceshishiping.top","tld":"top"},"ip":{"addr":"58.229.132.104","port":443,"asn":9318,"as":"SK Broadband Co Ltd","country":"South Korea","country_code":"KR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://glc.ceshishiping.top/","date":"2026-03-22T21:48:18.383Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"glc.ceshishiping.top","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 16 Jan 2026 15:12:32 GMT","end":"Thu, 16 Apr 2026 15:12:31 GMT"},"fingerprint":{"sha1":"EC:D5:46:07:68:F8:28:5F:48:11:6C:C6:EF:A5:03:85:99:7A:E2:4D","sha256":"3C:D3:F3:15:34:60:A4:95:A0:28:F8:32:74:67:D0:49:C8:84:7A:41:C1:CB:15:9C:44:83:87:02:C6:0B:44:8F"}}},"request":{"raw":"GET /Application/Home/View/images/home/box-small.png HTTP/1.1\r\nHost: glc.ceshishiping.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://glc.ceshishiping.top/\r\nCookie: PHPSESSID=6d5nvqgk0cej31u8apv5aaljed\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 22 Mar 2026 21:46:43 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 21 Nov 2025 08:11:55 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69201ecb-497a\"\r\nexpires: Tue, 21 Apr 2026 21:46:43 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":18810,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 94 x 90, 8-bit/color RGBA, non-interlaced","md5":"54d2d6083352effe2f7b540e4736234e","sha1":"026c01440902634009e955c3bb0496aae41e5e81","sha256":"f85d4ac2db05af952fbc5a88a7aa84dbe96208fcacbd89b7e07454fcc881b5a1","sha512":"b848564ba49ba1629c67b724da9fd1342a64659b4c17a6193dd1b09842fa0712cbbfbac56849be04f0c60909889a6eb6b85a97fc47ea447418a1299daae58524","ssdeep":"384:B/etCHyUTfr2ITMn8zZ2+xN3091O/ydvFI0ZQaMg6:IUTT2IIYe91Oad9IWdML","tlshash":"9882e09d251e9be1b2ee81e411f5f7e2772c51a7926feefa0c28428272805b494f0497","first_seen":"2026-03-22T21:48:44.90183Z","last_seen":"2026-03-23T02:29:37.755706Z","times_seen":2,"resource_available":false,"data":null}},"time_used":973,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":973,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"glc.ceshishiping.top/Application/Home/View/images/home/cai.png","fqdn":"glc.ceshishiping.top","domain":"ceshishiping.top","tld":"top"},"ip":{"addr":"58.229.132.104","port":443,"asn":9318,"as":"SK Broadband Co Ltd","country":"South Korea","country_code":"KR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://glc.ceshishiping.top/","date":"2026-03-22T21:48:18.397Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"glc.ceshishiping.top","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 16 Jan 2026 15:12:32 GMT","end":"Thu, 16 Apr 2026 15:12:31 GMT"},"fingerprint":{"sha1":"EC:D5:46:07:68:F8:28:5F:48:11:6C:C6:EF:A5:03:85:99:7A:E2:4D","sha256":"3C:D3:F3:15:34:60:A4:95:A0:28:F8:32:74:67:D0:49:C8:84:7A:41:C1:CB:15:9C:44:83:87:02:C6:0B:44:8F"}}},"request":{"raw":"GET /Application/Home/View/images/home/cai.png HTTP/1.1\r\nHost: glc.ceshishiping.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://glc.ceshishiping.top/\r\nCookie: PHPSESSID=6d5nvqgk0cej31u8apv5aaljed\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 22 Mar 2026 21:46:43 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 14 Apr 2022 00:48:04 GMT\r\nvary: Accept-Encoding\r\netag: W/\"62576f44-1857\"\r\nexpires: Tue, 21 Apr 2026 21:46:43 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6231,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 200 x 200, 8-bit/color RGBA, non-interlaced","md5":"79c6bfa76af2df7484077edc07d8828d","sha1":"80fbcc2133a52dfe3013e39f5eafc6f07ecbb47d","sha256":"7beeebf7ee4436dc519ded35aa8f79af784fe756281a84bf98c9074910d742ba","sha512":"cb4ed10775ca19186e23ca5ea67faebf7beecb1feb7910396d9802d9487d61ab04810fd8c0b0f166cf8ad58adb27b91d8f2de1bb98a594dc856a867497d06e15","ssdeep":"96:R8VDJ6bh0u/i8E9ScDjvKjL7lBR5tttFnMqOvrUPHILGOLmqSiSWDaTLb9KKk4bL:YDah0u/iJ9SRxBLTznAHK3WDRKk4X","tlshash":"b4d18d6bf8420bf7852f777f6345f17f57b7a42a241285914a45028d00dc7098fb298f","first_seen":"2025-07-22T12:12:59.990673Z","last_seen":"2026-03-23T02:29:37.809658Z","times_seen":3,"resource_available":false,"data":null}},"time_used":972,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":972,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"glc.ceshishiping.top/ercjs/js/abi.js?v=123666","fqdn":"glc.ceshishiping.top","domain":"ceshishiping.top","tld":"top"},"ip":{"addr":"58.229.132.104","port":443,"asn":9318,"as":"SK Broadband Co Ltd","country":"South Korea","country_code":"KR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://glc.ceshishiping.top/","date":"2026-03-22T21:48:18.468Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"glc.ceshishiping.top","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 16 Jan 2026 15:12:32 GMT","end":"Thu, 16 Apr 2026 15:12:31 GMT"},"fingerprint":{"sha1":"EC:D5:46:07:68:F8:28:5F:48:11:6C:C6:EF:A5:03:85:99:7A:E2:4D","sha256":"3C:D3:F3:15:34:60:A4:95:A0:28:F8:32:74:67:D0:49:C8:84:7A:41:C1:CB:15:9C:44:83:87:02:C6:0B:44:8F"}}},"request":{"raw":"GET /ercjs/js/abi.js?v=123666 HTTP/1.1\r\nHost: glc.ceshishiping.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://glc.ceshishiping.top/\r\nCookie: PHPSESSID=6d5nvqgk0cej31u8apv5aaljed\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 22 Mar 2026 21:46:43 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 05 Jul 2022 07:17:44 GMT\r\nvary: Accept-Encoding\r\netag: W/\"62c3e598-4850\"\r\nexpires: Mon, 23 Mar 2026 09:46:43 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":18512,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (8290)","md5":"61b5957b7e5adef32a2599160b55cb51","sha1":"6991346dccefadd78360942c6b2622faf6a8b371","sha256":"3cd947b2ff1ba0ac7d022b4a5560f836292017aa6344c0c35a68473bbdc16464","sha512":"08421ce72d9081af2d3d632b5aea7b47202b8e6f37228358e7294ebd40afa5ca1f3e60ae8625aec4b17fd9e35cc1fe5a2a79fdcf73a19e351b1b321e01dcd8d9","ssdeep":"96:BAoGAY1kgqAMjC5xu/HarAg3i1zGxA5YA+lk9IG+XdaTQAAYA86jq8qvVEMsRQ6M:GOgL6HDOveUCOA96vWZuJ6Vjx","tlshash":"cb82179c101abebf88895bb581d75748b66072e3a0cdcc81549cce35cbee596c42e78f","first_seen":"2025-07-22T12:12:59.96457Z","last_seen":"2026-03-23T02:29:37.804603Z","times_seen":3,"resource_available":true,"data":null}},"time_used":897,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":897,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"glc.ceshishiping.top/Application/Home/View/css/style_new.css?v=20260323054642","fqdn":"glc.ceshishiping.top","domain":"ceshishiping.top","tld":"top"},"ip":{"addr":"58.229.132.104","port":443,"asn":9318,"as":"SK Broadband Co Ltd","country":"South Korea","country_code":"KR"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://glc.ceshishiping.top/","date":"2026-03-22T21:48:18.362Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"glc.ceshishiping.top","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 16 Jan 2026 15:12:32 GMT","end":"Thu, 16 Apr 2026 15:12:31 GMT"},"fingerprint":{"sha1":"EC:D5:46:07:68:F8:28:5F:48:11:6C:C6:EF:A5:03:85:99:7A:E2:4D","sha256":"3C:D3:F3:15:34:60:A4:95:A0:28:F8:32:74:67:D0:49:C8:84:7A:41:C1:CB:15:9C:44:83:87:02:C6:0B:44:8F"}}},"request":{"raw":"GET /Application/Home/View/css/style_new.css?v=20260323054642 HTTP/1.1\r\nHost: glc.ceshishiping.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://glc.ceshishiping.top/\r\nCookie: PHPSESSID=6d5nvqgk0cej31u8apv5aaljed\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 22 Mar 2026 21:46:43 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 02 Dec 2025 09:03:03 GMT\r\nvary: Accept-Encoding\r\netag: W/\"692eab47-89c1\"\r\nexpires: Mon, 23 Mar 2026 09:46:43 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":35265,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text","md5":"27d428caba1a2fa1112c09145def2c54","sha1":"e0c0c7cce40a97dad69b0f86751b29f6175e02c7","sha256":"4dc1b0146ee45999b65cc9248bdf3dbd5eb5f8c4c3e2f9a4495bf5b977035c65","sha512":"ba792cc6b02c1a18fd24e0a483d305b58805d67ad7a87a95168333adaacb9c5ba95ba502400b40f7eb294498f8f2075621a6b47c69310b79203cc97a7a2dc44c","ssdeep":"768:VBFTF4FCZTsyOFUijmhLUvF4DFijJ7w30qt5Fv96VZfF/hY:/5aYuZq+vSEd7wkqt5jWfde","tlshash":"5df261925ea31945b41bd4683fb78b47e35d9147810fc9ad3fc4624c8f892e9d0aeb8c","first_seen":"2026-03-22T21:48:44.905283Z","last_seen":"2026-03-23T02:29:37.773078Z","times_seen":2,"resource_available":false,"data":null}},"time_used":252,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":252,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/font-awesome/6.4.0/css/all.min.css","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://glc.ceshishiping.top/","date":"2026-03-22T21:48:18.370Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 14 Mar 2026 00:38:49 GMT","end":"Fri, 12 Jun 2026 01:38:45 GMT"},"fingerprint":{"sha1":"7A:4A:F6:D6:63:62:70:CA:51:C5:5A:06:41:17:71:BF:9D:2C:C9:42","sha256":"7F:F5:F5:FE:73:1F:E7:AF:1A:82:5B:59:EE:E8:E9:65:D6:87:68:61:8C:11:1E:94:4A:9A:C4:14:BD:4B:04:BA"}}},"request":{"raw":"GET /ajax/libs/font-awesome/6.4.0/css/all.min.css HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://glc.ceshishiping.top/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 22 Mar 2026 21:48:18 GMT\r\ncontent-type: text/css; charset=utf-8\r\ncontent-length: 18752\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"6421d693-4940\"\r\nlast-modified: Mon, 27 Mar 2023 17:46:59 GMT\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/kv\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 160154\r\nexpires: Fri, 12 Mar 2027 21:48:18 GMT\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=15780000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UpHg%2B8VSxzOA1T6w3XZDgP5dl9H2IcILvWHB8DtTkrCfhU5t04A8PhOMZ%2BIt%2BLimgU9k3BLPbDSonvdQa4D8Sk5BER4%2BQXPt1WMRKdSHUWqKWw4%3D\"}]}\r\ncf-ray: 9e0866568f480daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":102025,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (52276)","md5":"ded1c367363e8b20bdc6a19b8350a737","sha1":"8c06d82739d14b094ff6d9036021a252bd1d985d","sha256":"1edb1725a9ea8ca4dcf2f5508cee183218aa1685e47c1b23056717f754f58ebf","sha512":"89e71d2e66ac925ec2564aa45cd43f647fd72e5bd664e2728fb632eed71e9e6a43d72a404a8ce9993fc4d223ed985201e3a66676d01cf5e341bc7d07fd9a6207","ssdeep":"1536:OwMCMPMCMjMCM4MCMwMCM3sVMX709gbPMfjSFOTyPGuZprfZCl:S709gMGFiyPGuZpfZCl","tlshash":"2ea3a7f9e44c05d97732c44bab95b37c65b6f738d5810ca9f02f580c1ad26a822c6f7a","first_seen":"2023-04-06T15:05:25Z","last_seen":"2026-08-17T16:32:39.585596Z","times_seen":60090,"resource_available":false,"data":null}},"time_used":39,"timings":{"blocked":-1,"dns":0,"connect":1,"send":0,"wait":11,"receive":7,"ssl":17},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"glc.ceshishiping.top/Application/Home/View/images/home/gd.png","fqdn":"glc.ceshishiping.top","domain":"ceshishiping.top","tld":"top"},"ip":{"addr":"58.229.132.104","port":443,"asn":9318,"as":"SK Broadband Co Ltd","country":"South Korea","country_code":"KR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://glc.ceshishiping.top/","date":"2026-03-22T21:48:18.402Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"glc.ceshishiping.top","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 16 Jan 2026 15:12:32 GMT","end":"Thu, 16 Apr 2026 15:12:31 GMT"},"fingerprint":{"sha1":"EC:D5:46:07:68:F8:28:5F:48:11:6C:C6:EF:A5:03:85:99:7A:E2:4D","sha256":"3C:D3:F3:15:34:60:A4:95:A0:28:F8:32:74:67:D0:49:C8:84:7A:41:C1:CB:15:9C:44:83:87:02:C6:0B:44:8F"}}},"request":{"raw":"GET /Application/Home/View/images/home/gd.png HTTP/1.1\r\nHost: glc.ceshishiping.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://glc.ceshishiping.top/\r\nCookie: PHPSESSID=6d5nvqgk0cej31u8apv5aaljed\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 22 Mar 2026 21:46:43 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 02 Jul 2022 09:18:34 GMT\r\nvary: Accept-Encoding\r\netag: W/\"62c00d6a-9779\"\r\nexpires: Tue, 21 Apr 2026 21:46:43 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":38777,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 177 x 168, 8-bit/color RGBA, non-interlaced","md5":"9ac5c803adec0fd74f0eb94b9dc47a6e","sha1":"c268dbe52f5c259c2e297d4e88a7cac1a3256a69","sha256":"4886e26db4380ad90b11691c5cb14358e4e7db2b777dcf88be4cde57f6621fb0","sha512":"2459417e366f247a4d2ca0ad70849cc455e584d5f778b72ee3ad5fd68a93cb0810881bea4f5017fe51712740b0e9cbfd9d997288b7623cf45bc1b9339e07867f","ssdeep":"768:mfmfRURC7ro4k4oRlztUfrL0KlS4qlxtpmdw/bfcvHvKiX5c:miUk7OlzqHlS4qxew/bkvnX5c","tlshash":"9203f1a390de193fe1b5490c6aec3e5d3055e37ce7ec7e4348e9a9306e05950c245a78","first_seen":"2025-07-22T12:13:00.003432Z","last_seen":"2026-03-23T02:29:37.758888Z","times_seen":3,"resource_available":false,"data":null}},"time_used":970,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":970,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"glc.ceshishiping.top/Application/Home/View/images/home/sy2.png","fqdn":"glc.ceshishiping.top","domain":"ceshishiping.top","tld":"top"},"ip":{"addr":"58.229.132.104","port":443,"asn":9318,"as":"SK Broadband Co Ltd","country":"South Korea","country_code":"KR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://glc.ceshishiping.top/","date":"2026-03-22T21:48:18.444Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"glc.ceshishiping.top","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 16 Jan 2026 15:12:32 GMT","end":"Thu, 16 Apr 2026 15:12:31 GMT"},"fingerprint":{"sha1":"EC:D5:46:07:68:F8:28:5F:48:11:6C:C6:EF:A5:03:85:99:7A:E2:4D","sha256":"3C:D3:F3:15:34:60:A4:95:A0:28:F8:32:74:67:D0:49:C8:84:7A:41:C1:CB:15:9C:44:83:87:02:C6:0B:44:8F"}}},"request":{"raw":"GET /Application/Home/View/images/home/sy2.png HTTP/1.1\r\nHost: glc.ceshishiping.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://glc.ceshishiping.top/\r\nCookie: PHPSESSID=6d5nvqgk0cej31u8apv5aaljed\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 22 Mar 2026 21:46:43 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 14 Apr 2022 00:48:06 GMT\r\nvary: Accept-Encoding\r\netag: W/\"62576f46-899f\"\r\nexpires: Tue, 21 Apr 2026 21:46:43 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":35231,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 216 x 262, 8-bit/color RGBA, non-interlaced","md5":"c6176d035bba56be713fc81965ef57f4","sha1":"059dac44e83e30cac72b40565429f4a0e03aed14","sha256":"58c57981eaf10b1bbea7216a07832c3d257ca73d7d159a3198e6506b131bbaf4","sha512":"97e42d8d1d09cf1aa57c8d978239d2e20b6d660835bd6e9520debf74134fa4575c28796c0b61bbab08b0dda700b88dbd2c9b8c0beea24f02b81d006596da5a5c","ssdeep":"768:7McDeVq+nDBsxj5WU/j2Y37B7ibg6p9E3oo0/CzYElrrs:7/yw+NcWciYLBOE6TE3NMCzYElrrs","tlshash":"cff201d31e31fa8f268375b96c1aba2d9c76094e20be09403ab4c5749ef707654a4f83","first_seen":"2025-07-22T12:12:59.986994Z","last_seen":"2026-03-23T02:29:37.785693Z","times_seen":3,"resource_available":false,"data":null}},"time_used":927,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":927,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"glc.ceshishiping.top/Application/Home/View/images/home/nan.png","fqdn":"glc.ceshishiping.top","domain":"ceshishiping.top","tld":"top"},"ip":{"addr":"58.229.132.104","port":443,"asn":9318,"as":"SK Broadband Co Ltd","country":"South Korea","country_code":"KR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://glc.ceshishiping.top/","date":"2026-03-22T21:48:18.461Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"glc.ceshishiping.top","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 16 Jan 2026 15:12:32 GMT","end":"Thu, 16 Apr 2026 15:12:31 GMT"},"fingerprint":{"sha1":"EC:D5:46:07:68:F8:28:5F:48:11:6C:C6:EF:A5:03:85:99:7A:E2:4D","sha256":"3C:D3:F3:15:34:60:A4:95:A0:28:F8:32:74:67:D0:49:C8:84:7A:41:C1:CB:15:9C:44:83:87:02:C6:0B:44:8F"}}},"request":{"raw":"GET /Application/Home/View/images/home/nan.png HTTP/1.1\r\nHost: glc.ceshishiping.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://glc.ceshishiping.top/\r\nCookie: PHPSESSID=6d5nvqgk0cej31u8apv5aaljed\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 22 Mar 2026 21:46:43 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 14 Apr 2022 00:48:04 GMT\r\nvary: Accept-Encoding\r\netag: W/\"62576f44-1c5d\"\r\nexpires: Tue, 21 Apr 2026 21:46:43 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":7261,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 302 x 200, 8-bit/color RGBA, non-interlaced","md5":"33d6e56d684f8123653c072588e8d41f","sha1":"7b390bea842db880b53541d5ab6c8511c1510f28","sha256":"cc0e138d106ddb9bd957967b3656126334e7d097a3b7f167ef4798bda3be239a","sha512":"5b128235f404c0f0eee3865e342bed420cc9f00c40def6622b3903a5a5ee525ede95b7f81dff5d74a8d2f16007a0d7a4469511c29f7cdab0c4c0557c0ffc7c05","ssdeep":"192:gNitlE5CddDUWf32mgxMtz/6kMU5KAxx3/:KWl1R3qxuz9VJ/","tlshash":"79e1affb082592a8df5d8e8804c86f99403d8443281b64f13b43b5c28672c76db6648e","first_seen":"2025-07-22T12:13:00.004288Z","last_seen":"2026-03-23T02:29:37.791413Z","times_seen":3,"resource_available":false,"data":null}},"time_used":909,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":909,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"glc.ceshishiping.top/Public/clipboard.min.js","fqdn":"glc.ceshishiping.top","domain":"ceshishiping.top","tld":"top"},"ip":{"addr":"58.229.132.104","port":443,"asn":9318,"as":"SK Broadband Co Ltd","country":"South Korea","country_code":"KR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://glc.ceshishiping.top/","date":"2026-03-22T21:48:18.473Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"glc.ceshishiping.top","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 16 Jan 2026 15:12:32 GMT","end":"Thu, 16 Apr 2026 15:12:31 GMT"},"fingerprint":{"sha1":"EC:D5:46:07:68:F8:28:5F:48:11:6C:C6:EF:A5:03:85:99:7A:E2:4D","sha256":"3C:D3:F3:15:34:60:A4:95:A0:28:F8:32:74:67:D0:49:C8:84:7A:41:C1:CB:15:9C:44:83:87:02:C6:0B:44:8F"}}},"request":{"raw":"GET /Public/clipboard.min.js HTTP/1.1\r\nHost: glc.ceshishiping.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://glc.ceshishiping.top/\r\nCookie: PHPSESSID=6d5nvqgk0cej31u8apv5aaljed\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 22 Mar 2026 21:46:43 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sat, 29 Jan 2022 04:13:22 GMT\r\nvary: Accept-Encoding\r\netag: W/\"61f4bee2-29ae\"\r\nexpires: Mon, 23 Mar 2026 09:46:43 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":10670,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (10552), with CRLF line terminators","md5":"59ea8d92acb820d160aa22aa8a289acf","sha1":"05844a6289fbc7d2767339b0ed6d42cd943f989c","sha256":"c4d5ece5fee7972e88b9d6d30469ebe8304e6816137bc267f31ca9e2282443d2","sha512":"ba8a00d4ca31a9f93dd37f2dfbdcb6f5c35eee977cddc9156e1750c808b25fd47a60aa2e361fd39c3bafc22cf4a2b0e85ed1a2786b904549bbe3ec1f09679613","ssdeep":"192:35Hh4LyP153pPJ7rVWLBTwuLJ/eXbA5gpEHa4Lyc2mltIjk1QGl:3kA3JVVWLBT9LJ/eXbA5Tj2mzgq","tlshash":"fb22755cb280b1b19ae760a9813f424fb371a469709a90d4b239e8f1bd78dcd5467f3c","first_seen":"2023-05-17T06:30:29Z","last_seen":"2026-03-23T02:29:37.786588Z","times_seen":34,"resource_available":true,"data":null}},"time_used":892,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":892,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/font-awesome/6.4.0/webfonts/fa-solid-900.woff2","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://glc.ceshishiping.top/","date":"2026-03-22T21:48:18.615Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 14 Mar 2026 00:38:49 GMT","end":"Fri, 12 Jun 2026 01:38:45 GMT"},"fingerprint":{"sha1":"7A:4A:F6:D6:63:62:70:CA:51:C5:5A:06:41:17:71:BF:9D:2C:C9:42","sha256":"7F:F5:F5:FE:73:1F:E7:AF:1A:82:5B:59:EE:E8:E9:65:D6:87:68:61:8C:11:1E:94:4A:9A:C4:14:BD:4B:04:BA"}}},"request":{"raw":"GET /ajax/libs/font-awesome/6.4.0/webfonts/fa-solid-900.woff2 HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://glc.ceshishiping.top\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cdnjs.cloudflare.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 22 Mar 2026 21:48:18 GMT\r\ncontent-type: application/octet-stream; charset=utf-8\r\ncontent-length: 150124\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\netag: \"6421d693-24a6c\"\r\nlast-modified: Mon, 27 Mar 2023 17:46:59 GMT\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/kv\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 491591\r\nexpires: Fri, 12 Mar 2027 21:48:18 GMT\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=15780000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=g1roC0TmLVntH8LUt7dp5YIdxNmOlX5iY5Ut49q3PnUe5L7GIuKhlkVvhAXGvEShnYkWXX%2FCjh0dPQSnsMwUaqXhoCbXD7kLXOcZHjzAtR4j8YQ%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\ncf-ray: 9e0866587995783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":150124,"size_decoded":0,"mime_type":"application/octet-stream; charset=utf-8","magic":"Web Open Font Format (Version 2), TrueType, length 150124, version 772.256","md5":"c64278386c2bbb5e293e11b94ca2f6d1","sha1":"6b99aa650bd12a36caa14e0127435d8f4cd3ba73","sha256":"7152a6933ee3d690ec2af3d09da9d701723d16aa3410a6d80f28ff8866f3b880","sha512":"0ccdc1515510d902c0b4a48b863c48bad86e1f766b1f9c890a64e28d91ee7c6d488241c531fc094d15b29c211da71e092587a987e24ee8e67ef8ea99c284e821","ssdeep":"3072:7sCbk7w0ZXdkN6iMjif3Lr7x7wAtf+D7gDk1feXDLnurWHqrNIuv5n0:7sCbkFZXdC7MaLr9w2mIY1feXXurWyNW","tlshash":"28e3123cf2c6d486735f5aeadb79636894fd0a2e74ecc67d26b982112048f828174d1d","first_seen":"2023-04-09T20:30:06Z","last_seen":"2026-08-17T16:32:39.578923Z","times_seen":45498,"resource_available":false,"data":null}},"time_used":42,"timings":{"blocked":16,"dns":1,"connect":0,"send":0,"wait":15,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"glc.ceshishiping.top/404.html","fqdn":"glc.ceshishiping.top","domain":"ceshishiping.top","tld":"top"},"ip":{"addr":"58.229.132.104","port":443,"asn":9318,"as":"SK Broadband Co Ltd","country":"South Korea","country_code":"KR"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://glc.ceshishiping.top/","date":"2026-03-22T21:48:24.702Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"glc.ceshishiping.top","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 16 Jan 2026 15:12:32 GMT","end":"Thu, 16 Apr 2026 15:12:31 GMT"},"fingerprint":{"sha1":"EC:D5:46:07:68:F8:28:5F:48:11:6C:C6:EF:A5:03:85:99:7A:E2:4D","sha256":"3C:D3:F3:15:34:60:A4:95:A0:28:F8:32:74:67:D0:49:C8:84:7A:41:C1:CB:15:9C:44:83:87:02:C6:0B:44:8F"}}},"request":{"raw":"GET /404.html HTTP/1.1\r\nHost: glc.ceshishiping.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://glc.ceshishiping.top/Application/Home/View/css/style_new.css?v=20260323054642\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=6d5nvqgk0cej31u8apv5aaljed\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 22 Mar 2026 21:46:49 GMT\r\ncontent-type: text/html\r\ncontent-length: 479\r\nlast-modified: Tue, 04 Jan 2022 02:36:10 GMT\r\netag: \"61d3b29a-1df\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":479,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text","md5":"57dd7bfa6c07bfe5eeada45d4bdd78ec","sha1":"395c6ad5c3ae0e8ea47281f5007c369551b32ad7","sha256":"c870990950ca5802e260be6786d1e6a148b1acdfeed4fa9bb6acce744488c0b5","sha512":"c455d00381bde372d6016e7b01eb8682dcbc2fbb032ef522f01f0ea1cd85abeb962aeb8de621b49b138b614b14285686a2c432b4214630f23fda2ed19bf4b9d6","ssdeep":"","tlshash":"27f0dc93d243040e220c45702fb2702450877ddbcb9a0d028897e1bfccd5a698363bad","first_seen":"2023-04-28T05:56:14Z","last_seen":"2026-08-16T21:04:46.694344Z","times_seen":3684,"resource_available":true,"data":null}},"time_used":2207,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":2207,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"glc.ceshishiping.top/Application/Home/View/images/home/us.png","fqdn":"glc.ceshishiping.top","domain":"ceshishiping.top","tld":"top"},"ip":{"addr":"58.229.132.104","port":443,"asn":9318,"as":"SK Broadband Co Ltd","country":"South Korea","country_code":"KR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://glc.ceshishiping.top/","date":"2026-03-22T21:48:18.456Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"glc.ceshishiping.top","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 16 Jan 2026 15:12:32 GMT","end":"Thu, 16 Apr 2026 15:12:31 GMT"},"fingerprint":{"sha1":"EC:D5:46:07:68:F8:28:5F:48:11:6C:C6:EF:A5:03:85:99:7A:E2:4D","sha256":"3C:D3:F3:15:34:60:A4:95:A0:28:F8:32:74:67:D0:49:C8:84:7A:41:C1:CB:15:9C:44:83:87:02:C6:0B:44:8F"}}},"request":{"raw":"GET /Application/Home/View/images/home/us.png HTTP/1.1\r\nHost: glc.ceshishiping.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://glc.ceshishiping.top/\r\nCookie: PHPSESSID=6d5nvqgk0cej31u8apv5aaljed\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 22 Mar 2026 21:46:43 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 19 Apr 2022 02:36:36 GMT\r\nvary: Accept-Encoding\r\netag: W/\"625e2034-2966\"\r\nexpires: Tue, 21 Apr 2026 21:46:43 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10598,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 302 x 200, 8-bit/color RGBA, non-interlaced","md5":"5dafb1578d1921630841282677ffe384","sha1":"698adda4a0117f142df3e8cb6299b2e26bde4f95","sha256":"20a1f42b2061e6c5990488598bb2192deadaa90ef323a2e5d5c7db688503bdb1","sha512":"fb5248744f6a8e4a9bbba3162609045c41498d7d1bf8c1e1ec7811de959694306cd0e4b11362617ccc62cb29afd865e66f5a8866b0de8dd445d5f554ee9fc54e","ssdeep":"192:Zt3T4WgcI5wbG7Tx+Y5Refp05F+ZGSbLllZS8d1RgnRLrhmYUTSD3Z2J:X3cWg35wbOT0Y5kRq+5OY1+RZ3N2J","tlshash":"a422bfcaf54a342095718851cef8a224dae0d36f35d1b61905e930958769dcf3b90ccb","first_seen":"2025-07-22T12:12:59.995694Z","last_seen":"2026-03-23T02:29:37.810549Z","times_seen":3,"resource_available":false,"data":null}},"time_used":916,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":916,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"glc.ceshishiping.top/index.php/Home/blind_box/getRoundInfo?box_type=300","fqdn":"glc.ceshishiping.top","domain":"ceshishiping.top","tld":"top"},"ip":{"addr":"58.229.132.104","port":443,"asn":9318,"as":"SK Broadband Co Ltd","country":"South Korea","country_code":"KR"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://glc.ceshishiping.top/","date":"2026-03-22T21:48:26.591Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"glc.ceshishiping.top","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 16 Jan 2026 15:12:32 GMT","end":"Thu, 16 Apr 2026 15:12:31 GMT"},"fingerprint":{"sha1":"EC:D5:46:07:68:F8:28:5F:48:11:6C:C6:EF:A5:03:85:99:7A:E2:4D","sha256":"3C:D3:F3:15:34:60:A4:95:A0:28:F8:32:74:67:D0:49:C8:84:7A:41:C1:CB:15:9C:44:83:87:02:C6:0B:44:8F"}}},"request":{"raw":"GET /index.php/Home/blind_box/getRoundInfo?box_type=300 HTTP/1.1\r\nHost: glc.ceshishiping.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/javascript, */*; q=0.01\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Requested-With: XMLHttpRequest\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://glc.ceshishiping.top/\r\nCookie: PHPSESSID=6d5nvqgk0cej31u8apv5aaljed\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 22 Mar 2026 21:46:51 GMT\r\ncontent-type: application/json; charset=utf-8\r\nvary: Accept-Encoding\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":254,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"d98f7bae8a991a68452314460871154b","sha1":"ae6f6930ca7d600a6c9f53fe754f96397bef2e0a","sha256":"b7578f2f92e79ac4ed9dcfd5ba452243a27022296e611c5d636a19fc9727d15a","sha512":"04d06c4d31fc1f4a61201ae6db68fc1fd3936e7f11937d0244e300339b540447b8808fa44dd485dabafbf6559dd126401b0da1a5efdd34e1a4eb08fa5cf6d3f2","ssdeep":"","tlshash":"3fd09708e3f289f899e3822082cc43e3632c3191e0c2c380f7ec0a1432434b86091015","first_seen":"2026-03-22T21:48:44.912998Z","last_seen":"2026-03-22T21:48:44.912998Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1815,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1815,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"glc.ceshishiping.top/404.html","fqdn":"glc.ceshishiping.top","domain":"ceshishiping.top","tld":"top"},"ip":{"addr":"58.229.132.104","port":443,"asn":9318,"as":"SK Broadband Co Ltd","country":"South Korea","country_code":"KR"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://glc.ceshishiping.top/","date":"2026-03-22T21:48:28.410Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"glc.ceshishiping.top","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 16 Jan 2026 15:12:32 GMT","end":"Thu, 16 Apr 2026 15:12:31 GMT"},"fingerprint":{"sha1":"EC:D5:46:07:68:F8:28:5F:48:11:6C:C6:EF:A5:03:85:99:7A:E2:4D","sha256":"3C:D3:F3:15:34:60:A4:95:A0:28:F8:32:74:67:D0:49:C8:84:7A:41:C1:CB:15:9C:44:83:87:02:C6:0B:44:8F"}}},"request":{"raw":"GET /404.html HTTP/1.1\r\nHost: glc.ceshishiping.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://glc.ceshishiping.top/Application/Home/View/css/style_new.css?v=20260323054642\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=6d5nvqgk0cej31u8apv5aaljed\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 22 Mar 2026 21:46:53 GMT\r\ncontent-type: text/html\r\ncontent-length: 479\r\nlast-modified: Tue, 04 Jan 2022 02:36:10 GMT\r\netag: \"61d3b29a-1df\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":479,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text","md5":"57dd7bfa6c07bfe5eeada45d4bdd78ec","sha1":"395c6ad5c3ae0e8ea47281f5007c369551b32ad7","sha256":"c870990950ca5802e260be6786d1e6a148b1acdfeed4fa9bb6acce744488c0b5","sha512":"c455d00381bde372d6016e7b01eb8682dcbc2fbb032ef522f01f0ea1cd85abeb962aeb8de621b49b138b614b14285686a2c432b4214630f23fda2ed19bf4b9d6","ssdeep":"","tlshash":"27f0dc93d243040e220c45702fb2702450877ddbcb9a0d028897e1bfccd5a698363bad","first_seen":"2023-04-28T05:56:14Z","last_seen":"2026-08-16T21:04:46.694344Z","times_seen":3684,"resource_available":true,"data":null}},"time_used":1297,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":1297,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"glc.ceshishiping.top/Application/Home/View/images/home/sy1.png","fqdn":"glc.ceshishiping.top","domain":"ceshishiping.top","tld":"top"},"ip":{"addr":"58.229.132.104","port":443,"asn":9318,"as":"SK Broadband Co Ltd","country":"South Korea","country_code":"KR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://glc.ceshishiping.top/","date":"2026-03-22T21:48:18.442Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"glc.ceshishiping.top","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 16 Jan 2026 15:12:32 GMT","end":"Thu, 16 Apr 2026 15:12:31 GMT"},"fingerprint":{"sha1":"EC:D5:46:07:68:F8:28:5F:48:11:6C:C6:EF:A5:03:85:99:7A:E2:4D","sha256":"3C:D3:F3:15:34:60:A4:95:A0:28:F8:32:74:67:D0:49:C8:84:7A:41:C1:CB:15:9C:44:83:87:02:C6:0B:44:8F"}}},"request":{"raw":"GET /Application/Home/View/images/home/sy1.png HTTP/1.1\r\nHost: glc.ceshishiping.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://glc.ceshishiping.top/\r\nCookie: PHPSESSID=6d5nvqgk0cej31u8apv5aaljed\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 22 Mar 2026 21:46:43 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 14 Apr 2022 00:48:04 GMT\r\nvary: Accept-Encoding\r\netag: W/\"62576f44-82a2\"\r\nexpires: Tue, 21 Apr 2026 21:46:43 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":33442,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 216 x 262, 8-bit/color RGBA, non-interlaced","md5":"8b8bb7af3366dcb48c9443e5dba99e97","sha1":"ef93f69b8d2553e2d2292e1620e56cddb456881a","sha256":"d0d664f265ec1dd63e89c197daaf655e06f690ad882ae352b9786f71d61609a8","sha512":"0d8f166887ce3b10a970655585ed3cac99020627b446e1964f8ba73a096a710b8d2d79762d28384047a0b0f3e342fb9181e7dbfc1cdf5872b8b438a710e8bd8d","ssdeep":"768:DjOrZAEtFUM5CzZ+mvGl5cXReveHLCREj0FxOh9OEw0CP:DjOFAEtFUqaZ+pwUmHLMpFoGEwrP","tlshash":"8ae201ef0af60c96e5e4b12dcb3e57639918899c2ee77e3de019ac1334a504465dc0bd","first_seen":"2025-07-22T12:12:59.985986Z","last_seen":"2026-03-23T02:29:37.797131Z","times_seen":3,"resource_available":false,"data":null}},"time_used":928,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":928,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"glc.ceshishiping.top/Application/Home/View/images/home/ying.png","fqdn":"glc.ceshishiping.top","domain":"ceshishiping.top","tld":"top"},"ip":{"addr":"58.229.132.104","port":443,"asn":9318,"as":"SK Broadband Co Ltd","country":"South Korea","country_code":"KR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://glc.ceshishiping.top/","date":"2026-03-22T21:48:18.457Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"glc.ceshishiping.top","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 16 Jan 2026 15:12:32 GMT","end":"Thu, 16 Apr 2026 15:12:31 GMT"},"fingerprint":{"sha1":"EC:D5:46:07:68:F8:28:5F:48:11:6C:C6:EF:A5:03:85:99:7A:E2:4D","sha256":"3C:D3:F3:15:34:60:A4:95:A0:28:F8:32:74:67:D0:49:C8:84:7A:41:C1:CB:15:9C:44:83:87:02:C6:0B:44:8F"}}},"request":{"raw":"GET /Application/Home/View/images/home/ying.png HTTP/1.1\r\nHost: glc.ceshishiping.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://glc.ceshishiping.top/\r\nCookie: PHPSESSID=6d5nvqgk0cej31u8apv5aaljed\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 22 Mar 2026 21:46:43 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 14 Apr 2022 00:48:08 GMT\r\nvary: Accept-Encoding\r\netag: W/\"62576f48-279e\"\r\nexpires: Tue, 21 Apr 2026 21:46:43 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10142,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 301 x 200, 8-bit/color RGBA, non-interlaced","md5":"891c15da077b42d52527fa159efbeffc","sha1":"e4cbdf0521e30586d3ed01825a611907ab195f10","sha256":"b1a0cfa8b9ebd408ba7b9aaaa00201f4da57efef29ef0d453ef1e784c9be188f","sha512":"b395e91f47b984f1a3e3b78907cc4fde9536131640497fa6864a63f1549ff6504cd3a9925b7c5fdacb0b26587c509d4caf8b8b4b808938dd8a2d9c10ee689c9f","ssdeep":"192:rkxUMOq0F61DbGFJgD/o7XzOX+nT7UavgjThgVYnczywkMVvdtfcOv:r4UM4IVGFyU7lnTShgycGEv71","tlshash":"8a22be3762cead63841f4cb3f911b96f8ec39e4890a63bac015410a7d498897a48d2f8","first_seen":"2025-07-22T12:12:59.965522Z","last_seen":"2026-03-23T02:29:37.766096Z","times_seen":3,"resource_available":false,"data":null}},"time_used":916,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":916,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"glc.ceshishiping.top/ercjs/js/jquery-2.1.4.min.js","fqdn":"glc.ceshishiping.top","domain":"ceshishiping.top","tld":"top"},"ip":{"addr":"58.229.132.104","port":443,"asn":9318,"as":"SK Broadband Co Ltd","country":"South Korea","country_code":"KR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://glc.ceshishiping.top/","date":"2026-03-22T21:48:18.462Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"glc.ceshishiping.top","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 16 Jan 2026 15:12:32 GMT","end":"Thu, 16 Apr 2026 15:12:31 GMT"},"fingerprint":{"sha1":"EC:D5:46:07:68:F8:28:5F:48:11:6C:C6:EF:A5:03:85:99:7A:E2:4D","sha256":"3C:D3:F3:15:34:60:A4:95:A0:28:F8:32:74:67:D0:49:C8:84:7A:41:C1:CB:15:9C:44:83:87:02:C6:0B:44:8F"}}},"request":{"raw":"GET /ercjs/js/jquery-2.1.4.min.js HTTP/1.1\r\nHost: glc.ceshishiping.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://glc.ceshishiping.top/\r\nCookie: PHPSESSID=6d5nvqgk0cej31u8apv5aaljed\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 22 Mar 2026 21:46:43 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 09 Feb 2022 13:55:32 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6203c7d4-14979\"\r\nexpires: Mon, 23 Mar 2026 09:46:43 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":84345,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (32025)","md5":"f9c7afd05729f10f55b689f36bb20172","sha1":"43dc554608df885a59ddeece1598c6ace434d747","sha256":"f16ab224bb962910558715c82f58c10c3ed20f153ddfaa199029f141b5b0255c","sha512":"3dcae1ff6e98c64e3586be3eb14dd486c51f7d4e9fa1b8f9a628be4fbb6a9ab562f31f9b50e16d2e0c72b942bdbe84eee8e0ef87fa730db1428b199a59d88232","ssdeep":"1536:/P10iSi65U/dXXeyhzeBuG+HYE0mdkuJO1z6Oy4sh3J1A72BjmN7TwpDKba98HrJ:++414Jiz6fh6lTqya98HrJ","tlshash":"ca83d6d9b2c67062977734b851bf510bb17a98dab40c8c60f0a4d8e47eb4a8d517bf2c","first_seen":"2023-03-07T01:06:48Z","last_seen":"2026-08-17T15:04:29.00578Z","times_seen":26330,"resource_available":true,"data":null}},"time_used":907,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":907,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"glc.ceshishiping.top/Application/Home/View/js/jquery.min.js","fqdn":"glc.ceshishiping.top","domain":"ceshishiping.top","tld":"top"},"ip":{"addr":"58.229.132.104","port":443,"asn":9318,"as":"SK Broadband Co Ltd","country":"South Korea","country_code":"KR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://glc.ceshishiping.top/","date":"2026-03-22T21:48:18.474Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"glc.ceshishiping.top","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 16 Jan 2026 15:12:32 GMT","end":"Thu, 16 Apr 2026 15:12:31 GMT"},"fingerprint":{"sha1":"EC:D5:46:07:68:F8:28:5F:48:11:6C:C6:EF:A5:03:85:99:7A:E2:4D","sha256":"3C:D3:F3:15:34:60:A4:95:A0:28:F8:32:74:67:D0:49:C8:84:7A:41:C1:CB:15:9C:44:83:87:02:C6:0B:44:8F"}}},"request":{"raw":"GET /Application/Home/View/js/jquery.min.js HTTP/1.1\r\nHost: glc.ceshishiping.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://glc.ceshishiping.top/\r\nCookie: PHPSESSID=6d5nvqgk0cej31u8apv5aaljed\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 22 Mar 2026 21:46:43 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 14 Apr 2022 00:48:00 GMT\r\nvary: Accept-Encoding\r\netag: W/\"62576f40-16bb2\"\r\nexpires: Mon, 23 Mar 2026 09:46:43 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":93106,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (32072), with CRLF line terminators","md5":"e39d7f174407886a84c437f14182e57a","sha1":"77e9eed704c96c3eb0180d35c6ba430b3f69a43a","sha256":"c1bcc5f2066e4476e6dbab0b5a9b9700b86f4d6ebeb2900d73ee97e53753d4f9","sha512":"3e153156a11b21a66500b592b574bc2e2ebddd41014216177c0c2d5e6b31f2d0a742f68899527dbae47309df2922f81544450f73e3e2981c88cd9ecae0c570e7","ssdeep":"1536:Z4mCgi8DyCuXXFiJ+L0kJQsJVPEKLQRZdC/RAfDknv+p0WzH/Io9Z7qABZnu0sFy:ZGsKXAI2p0WP9bDrstfa5","tlshash":"9393f8ddb2d1b06257bb21bd006f540ff236195e280d8850f129e8eabc74a4d9277fad","first_seen":"2023-03-07T01:15:08Z","last_seen":"2026-08-17T12:20:34.124013Z","times_seen":2490,"resource_available":true,"data":null}},"time_used":890,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":890,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"glc.ceshishiping.top/index.php/Home/blind_box/getRoundInfo?box_type=100","fqdn":"glc.ceshishiping.top","domain":"ceshishiping.top","tld":"top"},"ip":{"addr":"58.229.132.104","port":443,"asn":9318,"as":"SK Broadband Co Ltd","country":"South Korea","country_code":"KR"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://glc.ceshishiping.top/","date":"2026-03-22T21:48:26.587Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"glc.ceshishiping.top","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 16 Jan 2026 15:12:32 GMT","end":"Thu, 16 Apr 2026 15:12:31 GMT"},"fingerprint":{"sha1":"EC:D5:46:07:68:F8:28:5F:48:11:6C:C6:EF:A5:03:85:99:7A:E2:4D","sha256":"3C:D3:F3:15:34:60:A4:95:A0:28:F8:32:74:67:D0:49:C8:84:7A:41:C1:CB:15:9C:44:83:87:02:C6:0B:44:8F"}}},"request":{"raw":"GET /index.php/Home/blind_box/getRoundInfo?box_type=100 HTTP/1.1\r\nHost: glc.ceshishiping.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/javascript, */*; q=0.01\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Requested-With: XMLHttpRequest\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://glc.ceshishiping.top/\r\nCookie: PHPSESSID=6d5nvqgk0cej31u8apv5aaljed\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 22 Mar 2026 21:46:51 GMT\r\ncontent-type: application/json; charset=utf-8\r\nvary: Accept-Encoding\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":254,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"9c4696f1e6aa91ab461bcaaa2c4a7979","sha1":"2bc9e011f83136994e997a21a276ddbbd5c9e193","sha256":"f90761f98fe551ea3132e46402d96780aeabbb6b7f51d629a5008fb696e4e432","sha512":"9d76b83b7529562066b7405d7df5e34880045d3e5bf436de88e64be7fe42d68110fcf5d2deb2599b7c876605b00ebbf07f7baf414038dfe78f1f43610805ad49","ssdeep":"","tlshash":"a5d09708e3f289f899e3822083cc43e3232c3191e0c2c380fbec0a2432438b5a091015","first_seen":"2026-03-22T21:48:44.917339Z","last_seen":"2026-03-22T21:48:44.917339Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1817,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1817,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"glc.ceshishiping.top/Application/Home/View/images/home/image%20274.png","fqdn":"glc.ceshishiping.top","domain":"ceshishiping.top","tld":"top"},"ip":{"addr":"58.229.132.104","port":443,"asn":9318,"as":"SK Broadband Co Ltd","country":"South Korea","country_code":"KR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://glc.ceshishiping.top/","date":"2026-03-22T21:48:18.381Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"glc.ceshishiping.top","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 16 Jan 2026 15:12:32 GMT","end":"Thu, 16 Apr 2026 15:12:31 GMT"},"fingerprint":{"sha1":"EC:D5:46:07:68:F8:28:5F:48:11:6C:C6:EF:A5:03:85:99:7A:E2:4D","sha256":"3C:D3:F3:15:34:60:A4:95:A0:28:F8:32:74:67:D0:49:C8:84:7A:41:C1:CB:15:9C:44:83:87:02:C6:0B:44:8F"}}},"request":{"raw":"GET /Application/Home/View/images/home/image%20274.png HTTP/1.1\r\nHost: glc.ceshishiping.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://glc.ceshishiping.top/\r\nCookie: PHPSESSID=6d5nvqgk0cej31u8apv5aaljed\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 22 Mar 2026 21:46:43 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 21 Nov 2025 08:12:10 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69201eda-30d6\"\r\nexpires: Tue, 21 Apr 2026 21:46:43 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":12502,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 108 x 66, 8-bit/color RGBA, non-interlaced","md5":"699e212d624e0d0d8f809c2682bb2b5f","sha1":"b238c91e7c19f9d2d962e59c7825fe2e1dd90670","sha256":"69daa5711bbfeab19f71b67b87b6c265c3aa9311abbcf995a2c024664bf3d8ad","sha512":"6a9388ea9f003513b42f733f008c39ab8539e2a9335dcadf69d5be05f8d07c409eb4c0fe78e899be0cdd3225bdfa78ba39715c9d7817e9224efa0f7f40514b2b","ssdeep":"192:nSOCsYb4PNlcpMX9KPuP1icTfsRd04VwKY21a+P/wsad8YqszqVZxiFYN4O0bFE1:Sfs7vXuuNTkR9YiHhad8Y52H4O0b6j5","tlshash":"4242c07281622377e54d233943b5a8300dfb2599449f79d0f7c1472e7f278baab1da80","first_seen":"2026-03-22T21:48:44.918305Z","last_seen":"2026-03-23T02:29:37.784133Z","times_seen":2,"resource_available":false,"data":null}},"time_used":973,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":973,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"glc.ceshishiping.top/Application/Home/View/images/home/sy3.png","fqdn":"glc.ceshishiping.top","domain":"ceshishiping.top","tld":"top"},"ip":{"addr":"58.229.132.104","port":443,"asn":9318,"as":"SK Broadband Co Ltd","country":"South Korea","country_code":"KR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://glc.ceshishiping.top/","date":"2026-03-22T21:48:18.446Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"glc.ceshishiping.top","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 16 Jan 2026 15:12:32 GMT","end":"Thu, 16 Apr 2026 15:12:31 GMT"},"fingerprint":{"sha1":"EC:D5:46:07:68:F8:28:5F:48:11:6C:C6:EF:A5:03:85:99:7A:E2:4D","sha256":"3C:D3:F3:15:34:60:A4:95:A0:28:F8:32:74:67:D0:49:C8:84:7A:41:C1:CB:15:9C:44:83:87:02:C6:0B:44:8F"}}},"request":{"raw":"GET /Application/Home/View/images/home/sy3.png HTTP/1.1\r\nHost: glc.ceshishiping.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://glc.ceshishiping.top/\r\nCookie: PHPSESSID=6d5nvqgk0cej31u8apv5aaljed\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 22 Mar 2026 21:46:43 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 14 Apr 2022 00:48:06 GMT\r\nvary: Accept-Encoding\r\netag: W/\"62576f46-8129\"\r\nexpires: Tue, 21 Apr 2026 21:46:43 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":33065,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 216 x 262, 8-bit/color RGBA, non-interlaced","md5":"ce88a1d9be922169c2bf6a958a9b5948","sha1":"4d43fb7f9b6b1ea1b92de3d35b193fca15792202","sha256":"57b9cbf7d9657ed859892fa7fc3cc11fe85ef945a83d064bc9401c1e08b9d401","sha512":"22ea775314bc7b97c84a55e7e6ef1abb9e100fcbb9f2af6227419b66d58c5f646c89a34494055c1ee9ba6e07a48117b8e8da6ea1a97b2aae262e89e7caef2ccb","ssdeep":"768:MLzRFizPFyzdQLImSFruM+HtN495HIomRxMHdwB8aoeF01ak3H:M5MEiXSFJAiNeiO1o73","tlshash":"a9e201b6d898091e0ba1e0517cee7d4efb6c00ffe17a2c4620e1be562c771fb4061596","first_seen":"2025-07-22T12:12:59.991612Z","last_seen":"2026-03-23T02:29:37.803685Z","times_seen":3,"resource_available":false,"data":null}},"time_used":926,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":926,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"glc.ceshishiping.top/Application/Home/View/images/home/sy7.png","fqdn":"glc.ceshishiping.top","domain":"ceshishiping.top","tld":"top"},"ip":{"addr":"58.229.132.104","port":443,"asn":9318,"as":"SK Broadband Co Ltd","country":"South Korea","country_code":"KR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://glc.ceshishiping.top/","date":"2026-03-22T21:48:18.451Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"glc.ceshishiping.top","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 16 Jan 2026 15:12:32 GMT","end":"Thu, 16 Apr 2026 15:12:31 GMT"},"fingerprint":{"sha1":"EC:D5:46:07:68:F8:28:5F:48:11:6C:C6:EF:A5:03:85:99:7A:E2:4D","sha256":"3C:D3:F3:15:34:60:A4:95:A0:28:F8:32:74:67:D0:49:C8:84:7A:41:C1:CB:15:9C:44:83:87:02:C6:0B:44:8F"}}},"request":{"raw":"GET /Application/Home/View/images/home/sy7.png HTTP/1.1\r\nHost: glc.ceshishiping.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://glc.ceshishiping.top/\r\nCookie: PHPSESSID=6d5nvqgk0cej31u8apv5aaljed\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 22 Mar 2026 21:46:43 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 14 Apr 2022 00:48:06 GMT\r\nvary: Accept-Encoding\r\netag: W/\"62576f46-99e2\"\r\nexpires: Tue, 21 Apr 2026 21:46:43 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":39394,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 216 x 262, 8-bit/color RGBA, non-interlaced","md5":"b24f4c93c17615ad2fdf2c4210145cd0","sha1":"26dd108bd21bd49b10b2ee56a26c4b2fde3a92bf","sha256":"f4bb3a4fbafb40febd030e9cf1fae58d2f156e164579f37a444da52d17c635c9","sha512":"6964b23730ede4e9d96e0738eb3f9394a4e52fddf24aa70f33fd8a5eaa8e536ce5ff0949494d70d00cb2365a5f5f5a55a2aef20585a69e35900f11be62067b81","ssdeep":"768:6DhIO/I32XCkRlRHi3EQeD4FaQcrCPndQ9Gvzsuh6PPq8fMtMvifAql66/ALmACe:6DhIfQ9HHiUV0aQcmVtsO6fMNl6bmA+U","tlshash":"6e03f2ee969e52f70ce8e80001b84a35551bf06e0dbde6e3709bdb7c94415ce5c0d2da","first_seen":"2025-07-22T12:12:59.963308Z","last_seen":"2026-03-23T02:29:37.751097Z","times_seen":3,"resource_available":false,"data":null}},"time_used":921,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":921,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"glc.ceshishiping.top/Application/Home/View/images/home/sy8.png","fqdn":"glc.ceshishiping.top","domain":"ceshishiping.top","tld":"top"},"ip":{"addr":"58.229.132.104","port":443,"asn":9318,"as":"SK Broadband Co Ltd","country":"South Korea","country_code":"KR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://glc.ceshishiping.top/","date":"2026-03-22T21:48:18.455Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"glc.ceshishiping.top","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 16 Jan 2026 15:12:32 GMT","end":"Thu, 16 Apr 2026 15:12:31 GMT"},"fingerprint":{"sha1":"EC:D5:46:07:68:F8:28:5F:48:11:6C:C6:EF:A5:03:85:99:7A:E2:4D","sha256":"3C:D3:F3:15:34:60:A4:95:A0:28:F8:32:74:67:D0:49:C8:84:7A:41:C1:CB:15:9C:44:83:87:02:C6:0B:44:8F"}}},"request":{"raw":"GET /Application/Home/View/images/home/sy8.png HTTP/1.1\r\nHost: glc.ceshishiping.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://glc.ceshishiping.top/\r\nCookie: PHPSESSID=6d5nvqgk0cej31u8apv5aaljed\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 22 Mar 2026 21:46:43 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 14 Apr 2022 00:48:06 GMT\r\nvary: Accept-Encoding\r\netag: W/\"62576f46-7ec1\"\r\nexpires: Tue, 21 Apr 2026 21:46:43 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":32449,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 216 x 262, 8-bit/color RGBA, non-interlaced","md5":"06d228c602868c42c65b1468094ab6ee","sha1":"3259c0652842d991e56c0673e31f83b71eb92762","sha256":"3db81eb1c49727b8b358a0be7ec3e7008566306ebbdfb65ae8c04780e8a015f5","sha512":"543129225811b665b352a380d1034b7e9a8a9f32258e01b14781dfce0b654965e17f82e70a9c344603dd1625d3b720ead2a88da4cefad5f391729100a7478b09","ssdeep":"768:3uT7Hwo0jGD/EDYO3fwGFOm+2bJ/IbzuQEm:3U7Hwo0oElvBkmF0uVm","tlshash":"eae2f1bdd3511c7dcb6cd862488f7d9eaa50a937848d1547774a325e0ee430acdf00b8","first_seen":"2025-07-22T12:12:59.981044Z","last_seen":"2026-03-23T02:29:37.798532Z","times_seen":3,"resource_available":false,"data":null}},"time_used":919,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":919,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"glc.ceshishiping.top/Application/Home/View/images/home/han.png","fqdn":"glc.ceshishiping.top","domain":"ceshishiping.top","tld":"top"},"ip":{"addr":"58.229.132.104","port":443,"asn":9318,"as":"SK Broadband Co Ltd","country":"South Korea","country_code":"KR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://glc.ceshishiping.top/","date":"2026-03-22T21:48:18.460Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"glc.ceshishiping.top","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 16 Jan 2026 15:12:32 GMT","end":"Thu, 16 Apr 2026 15:12:31 GMT"},"fingerprint":{"sha1":"EC:D5:46:07:68:F8:28:5F:48:11:6C:C6:EF:A5:03:85:99:7A:E2:4D","sha256":"3C:D3:F3:15:34:60:A4:95:A0:28:F8:32:74:67:D0:49:C8:84:7A:41:C1:CB:15:9C:44:83:87:02:C6:0B:44:8F"}}},"request":{"raw":"GET /Application/Home/View/images/home/han.png HTTP/1.1\r\nHost: glc.ceshishiping.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://glc.ceshishiping.top/\r\nCookie: PHPSESSID=6d5nvqgk0cej31u8apv5aaljed\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 22 Mar 2026 21:46:43 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 14 Apr 2022 00:48:04 GMT\r\nvary: Accept-Encoding\r\netag: W/\"62576f44-369c\"\r\nexpires: Tue, 21 Apr 2026 21:46:43 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":13980,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 301 x 200, 8-bit/color RGBA, non-interlaced","md5":"21c58ebd7ffc16967df48ceabd1f3dd9","sha1":"b65f753d48de8071076b1c7dc1e39efb59d3447f","sha256":"0aea082fa24bd09edddd5a30af5bd0030b5304af3501442d8dc7725db4657592","sha512":"c72c7a21f1a061822b920e4ffa28a03c261b70f7aae0e46d1d96f0079c88aa11eb01bc3b406e458b08c51ed22a77308ec31d2fbae442647cf97b92a521b2cf95","ssdeep":"384:uouuxBTPg+ATW+ero67HhS4uaq27DCbU1ocSsQudOxmX:uFuX8eD7HE4m27D8UecSsQu4xM","tlshash":"c352c03ac6d396719323c3bbbb0a5a04aad730e21162af0f5952d1db43daf717560316","first_seen":"2025-07-22T12:12:59.982887Z","last_seen":"2026-03-23T02:29:37.799541Z","times_seen":3,"resource_available":false,"data":null}},"time_used":912,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":912,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"glc.ceshishiping.top/ercjs/js/web3provider.js","fqdn":"glc.ceshishiping.top","domain":"ceshishiping.top","tld":"top"},"ip":{"addr":"58.229.132.104","port":443,"asn":9318,"as":"SK Broadband Co Ltd","country":"South Korea","country_code":"KR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://glc.ceshishiping.top/","date":"2026-03-22T21:48:18.472Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"glc.ceshishiping.top","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 16 Jan 2026 15:12:32 GMT","end":"Thu, 16 Apr 2026 15:12:31 GMT"},"fingerprint":{"sha1":"EC:D5:46:07:68:F8:28:5F:48:11:6C:C6:EF:A5:03:85:99:7A:E2:4D","sha256":"3C:D3:F3:15:34:60:A4:95:A0:28:F8:32:74:67:D0:49:C8:84:7A:41:C1:CB:15:9C:44:83:87:02:C6:0B:44:8F"}}},"request":{"raw":"GET /ercjs/js/web3provider.js HTTP/1.1\r\nHost: glc.ceshishiping.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://glc.ceshishiping.top/\r\nCookie: PHPSESSID=6d5nvqgk0cej31u8apv5aaljed\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 22 Mar 2026 21:46:43 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 09 Feb 2022 13:55:46 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6203c7e2-e934a\"\r\nexpires: Mon, 23 Mar 2026 09:46:43 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":955210,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (64169)","md5":"ecd0acbd0f232a69f443beec9cd608bf","sha1":"1bbb9cee94841cece182da632767fa43970eb013","sha256":"54335e7705b99ad9f87bd7296dfe88f6c8b78f16703f9ecc27e43a62b5be765e","sha512":"e632544468f0d6d6e6ff8dade483d70f2f3ba38dc222a1e7f1c1fdcdb7d2a1615df52fce2d909ff654d71b942306a50d1e62fdf430628e527e70ead3cc6dea68","ssdeep":"6144:W47GR6PGawV6G7MzqnTaO8V4bHEzQva4qUY2OhwznWoxACNvmsZ4KDGAmq+8q+2Z:XGwjw9nHAamsZ3GAOqwJGPv6","tlshash":"bc15f984b664b061839a65e0043f540ff27aba2d780b44bcf654d8f6bcbd989553bf38","first_seen":"2023-03-07T12:26:47Z","last_seen":"2026-08-15T02:09:38.792236Z","times_seen":510,"resource_available":true,"data":null}},"time_used":895,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":895,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"glc.ceshishiping.top/Application/Home/View/fonts/FZHanZhenGuangBiaoS-GB.ttf","fqdn":"glc.ceshishiping.top","domain":"ceshishiping.top","tld":"top"},"ip":{"addr":"58.229.132.104","port":443,"asn":9318,"as":"SK Broadband Co Ltd","country":"South Korea","country_code":"KR"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://glc.ceshishiping.top/","date":"2026-03-22T21:48:18.640Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"glc.ceshishiping.top","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 16 Jan 2026 15:12:32 GMT","end":"Thu, 16 Apr 2026 15:12:31 GMT"},"fingerprint":{"sha1":"EC:D5:46:07:68:F8:28:5F:48:11:6C:C6:EF:A5:03:85:99:7A:E2:4D","sha256":"3C:D3:F3:15:34:60:A4:95:A0:28:F8:32:74:67:D0:49:C8:84:7A:41:C1:CB:15:9C:44:83:87:02:C6:0B:44:8F"}}},"request":{"raw":"GET /Application/Home/View/fonts/FZHanZhenGuangBiaoS-GB.ttf HTTP/1.1\r\nHost: glc.ceshishiping.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://glc.ceshishiping.top/Application/Home/View/css/style_new.css?v=20260323054642\r\nCookie: PHPSESSID=6d5nvqgk0cej31u8apv5aaljed\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\nserver: nginx\r\ndate: Sun, 22 Mar 2026 21:46:43 GMT\r\ncontent-type: text/html; charset=utf-8\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\nlocation: /404.html\r\nstrict-transport-security: max-age=31536000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":479,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-17T16:43:02.353128Z","times_seen":17939481,"resource_available":true,"data":null}},"time_used":3606,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3606,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"glc.ceshishiping.top/Application/Home/View/images/home/Vector.png","fqdn":"glc.ceshishiping.top","domain":"ceshishiping.top","tld":"top"},"ip":{"addr":"58.229.132.104","port":443,"asn":9318,"as":"SK Broadband Co Ltd","country":"South Korea","country_code":"KR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://glc.ceshishiping.top/","date":"2026-03-22T21:48:18.375Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"glc.ceshishiping.top","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 16 Jan 2026 15:12:32 GMT","end":"Thu, 16 Apr 2026 15:12:31 GMT"},"fingerprint":{"sha1":"EC:D5:46:07:68:F8:28:5F:48:11:6C:C6:EF:A5:03:85:99:7A:E2:4D","sha256":"3C:D3:F3:15:34:60:A4:95:A0:28:F8:32:74:67:D0:49:C8:84:7A:41:C1:CB:15:9C:44:83:87:02:C6:0B:44:8F"}}},"request":{"raw":"GET /Application/Home/View/images/home/Vector.png HTTP/1.1\r\nHost: glc.ceshishiping.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://glc.ceshishiping.top/\r\nCookie: PHPSESSID=6d5nvqgk0cej31u8apv5aaljed\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 22 Mar 2026 21:46:43 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 21 Nov 2025 09:19:20 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69202e98-873\"\r\nexpires: Tue, 21 Apr 2026 21:46:43 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2163,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 43 x 41, 8-bit/color RGBA, non-interlaced","md5":"586f1227e1527f7c5b828cd79bbd29b6","sha1":"145988818b1b03485b09457a16a03352fe287906","sha256":"9262668d6ea779b0c914f889f8026fc8af8ba8c94f9c9219396ce03583350b30","sha512":"25003c1cb98c3fa1f3653468a4f7498567d673c8ae3ecef6232992d5a053aa2884eb058a2e6ccc0e03d2080b1e2c89ca384e1bdc0db4b8d4084bb3fbe60a866e","ssdeep":"","tlshash":"1e415cb08d96bfa7767f1c4a503eab72be1dfef00501978f67f68ea17115e244406220","first_seen":"2026-03-22T21:48:44.925307Z","last_seen":"2026-03-23T02:29:37.787429Z","times_seen":2,"resource_available":false,"data":null}},"time_used":246,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":246,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"glc.ceshishiping.top/Application/Home/View/images/home/logo44.png","fqdn":"glc.ceshishiping.top","domain":"ceshishiping.top","tld":"top"},"ip":{"addr":"58.229.132.104","port":443,"asn":9318,"as":"SK Broadband Co Ltd","country":"South Korea","country_code":"KR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://glc.ceshishiping.top/","date":"2026-03-22T21:48:18.399Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"glc.ceshishiping.top","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 16 Jan 2026 15:12:32 GMT","end":"Thu, 16 Apr 2026 15:12:31 GMT"},"fingerprint":{"sha1":"EC:D5:46:07:68:F8:28:5F:48:11:6C:C6:EF:A5:03:85:99:7A:E2:4D","sha256":"3C:D3:F3:15:34:60:A4:95:A0:28:F8:32:74:67:D0:49:C8:84:7A:41:C1:CB:15:9C:44:83:87:02:C6:0B:44:8F"}}},"request":{"raw":"GET /Application/Home/View/images/home/logo44.png HTTP/1.1\r\nHost: glc.ceshishiping.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://glc.ceshishiping.top/\r\nCookie: PHPSESSID=6d5nvqgk0cej31u8apv5aaljed\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 22 Mar 2026 21:46:43 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 29 Jun 2022 02:56:58 GMT\r\nvary: Accept-Encoding\r\netag: W/\"62bbbf7a-28e70\"\r\nexpires: Tue, 21 Apr 2026 21:46:43 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":167536,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 3333 x 3333, 8-bit/color RGBA, non-interlaced","md5":"8ab2886e5d6dcc59eb8b0b1e4f97431f","sha1":"f61eda85fb1fd6465a88b0a5506cf19e4058f19c","sha256":"fcd6fdc4820f6c1bcb78d23b1676b3007255c42cb66a79d3c79a801db9b0474d","sha512":"a12b1d681deeb1678eb2c6464733911a484192049ea03678e8b0d0fc64d7dce72b0fa1ca0ad02785436509364f9c9d838a00e5eec122bbae84fac10348b54892","ssdeep":"3072:XgLN/v4www9MczWRxPaEcL3FU5j6AVr+Jojx3uO0gCh:wR/b2Xra/rSF6g+O+gW","tlshash":"91f3cfa97ec29dced40e43395dc3df2cf9b5e6faa08412738b79a6b80a5f0861503147","first_seen":"2025-07-22T12:12:59.966504Z","last_seen":"2026-03-23T02:29:37.749479Z","times_seen":3,"resource_available":false,"data":null}},"time_used":971,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":971,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"glc.ceshishiping.top/Application/Home/View/images/home/sy4.png","fqdn":"glc.ceshishiping.top","domain":"ceshishiping.top","tld":"top"},"ip":{"addr":"58.229.132.104","port":443,"asn":9318,"as":"SK Broadband Co Ltd","country":"South Korea","country_code":"KR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://glc.ceshishiping.top/","date":"2026-03-22T21:48:18.447Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"glc.ceshishiping.top","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 16 Jan 2026 15:12:32 GMT","end":"Thu, 16 Apr 2026 15:12:31 GMT"},"fingerprint":{"sha1":"EC:D5:46:07:68:F8:28:5F:48:11:6C:C6:EF:A5:03:85:99:7A:E2:4D","sha256":"3C:D3:F3:15:34:60:A4:95:A0:28:F8:32:74:67:D0:49:C8:84:7A:41:C1:CB:15:9C:44:83:87:02:C6:0B:44:8F"}}},"request":{"raw":"GET /Application/Home/View/images/home/sy4.png HTTP/1.1\r\nHost: glc.ceshishiping.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://glc.ceshishiping.top/\r\nCookie: PHPSESSID=6d5nvqgk0cej31u8apv5aaljed\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 22 Mar 2026 21:46:43 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 14 Apr 2022 00:48:06 GMT\r\nvary: Accept-Encoding\r\netag: W/\"62576f46-8dde\"\r\nexpires: Tue, 21 Apr 2026 21:46:43 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":36318,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 216 x 262, 8-bit/color RGBA, non-interlaced","md5":"dc66bcee8a15b365c0e4e5d6daaf3817","sha1":"58435bf7b29efd88a93e0775a4e74d78ef4e920b","sha256":"d8ec922cff2a2e7b261c4068aa58f11325c83754aa52eb084bba46a729501152","sha512":"4b873276c90f85935271aa4f44ee3df7ffcb4d1aa86c8b0ae827521470a6558c4722dfa81ab5e2a94284c9e102c10fd45ad40e69671ddb11274d9ccfee97e65a","ssdeep":"768:SoRu3qu/xII3/kaHazKGpSJ1RrulTvxdN7KKMy/k2InFZ:Sok6u/e8/vazh2rutEY/tc","tlshash":"32f2f1c13d86315b2e80c4168d46f8b03cb7ab4f72ce427a91e699df13d841266a6fd6","first_seen":"2025-07-22T12:12:59.974416Z","last_seen":"2026-03-23T02:29:37.768583Z","times_seen":3,"resource_available":false,"data":null}},"time_used":924,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":924,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"glc.ceshishiping.top/Application/Home/View/images/home/xi.png","fqdn":"glc.ceshishiping.top","domain":"ceshishiping.top","tld":"top"},"ip":{"addr":"58.229.132.104","port":443,"asn":9318,"as":"SK Broadband Co Ltd","country":"South Korea","country_code":"KR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://glc.ceshishiping.top/","date":"2026-03-22T21:48:18.458Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"glc.ceshishiping.top","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 16 Jan 2026 15:12:32 GMT","end":"Thu, 16 Apr 2026 15:12:31 GMT"},"fingerprint":{"sha1":"EC:D5:46:07:68:F8:28:5F:48:11:6C:C6:EF:A5:03:85:99:7A:E2:4D","sha256":"3C:D3:F3:15:34:60:A4:95:A0:28:F8:32:74:67:D0:49:C8:84:7A:41:C1:CB:15:9C:44:83:87:02:C6:0B:44:8F"}}},"request":{"raw":"GET /Application/Home/View/images/home/xi.png HTTP/1.1\r\nHost: glc.ceshishiping.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://glc.ceshishiping.top/\r\nCookie: PHPSESSID=6d5nvqgk0cej31u8apv5aaljed\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 22 Mar 2026 21:46:43 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 14 Apr 2022 00:48:08 GMT\r\nvary: Accept-Encoding\r\netag: W/\"62576f48-1bbd\"\r\nexpires: Tue, 21 Apr 2026 21:46:43 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7101,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 303 x 200, 8-bit/color RGBA, non-interlaced","md5":"f74eaab9200f847ace9215dc680e2c94","sha1":"0c38fde3cce3cd1cd3f0dca2cdf7cf00bfe987cb","sha256":"c94021425f7bd48dc260d9b2dfb92c1894e061462e52b55da704beb37484afa6","sha512":"cb73ffbcdf81e924aa98791ac307d50fea8778ffb29ced4d06fddc64e1e276202d8112d1c4a6594a76722473321af26c310feef7db8a5a77bfcfae08aee0c6cc","ssdeep":"192:uwITSBoJB7IbHbPfWNWBtiAdeNBZAA8RsSeWWwIAoEhST/3sHke:roJBIriNipdU229JfT/3sEe","tlshash":"76e18fcdbfd4ea32171aff1aa01e492c885ee2613c94647b261ba190695da0df544836","first_seen":"2025-07-22T12:12:59.970579Z","last_seen":"2026-03-23T02:29:37.769627Z","times_seen":3,"resource_available":false,"data":null}},"time_used":915,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":915,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"glc.ceshishiping.top/ercjs/js/web3model.min.js","fqdn":"glc.ceshishiping.top","domain":"ceshishiping.top","tld":"top"},"ip":{"addr":"58.229.132.104","port":443,"asn":9318,"as":"SK Broadband Co Ltd","country":"South Korea","country_code":"KR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://glc.ceshishiping.top/","date":"2026-03-22T21:48:18.469Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"glc.ceshishiping.top","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 16 Jan 2026 15:12:32 GMT","end":"Thu, 16 Apr 2026 15:12:31 GMT"},"fingerprint":{"sha1":"EC:D5:46:07:68:F8:28:5F:48:11:6C:C6:EF:A5:03:85:99:7A:E2:4D","sha256":"3C:D3:F3:15:34:60:A4:95:A0:28:F8:32:74:67:D0:49:C8:84:7A:41:C1:CB:15:9C:44:83:87:02:C6:0B:44:8F"}}},"request":{"raw":"GET /ercjs/js/web3model.min.js HTTP/1.1\r\nHost: glc.ceshishiping.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://glc.ceshishiping.top/\r\nCookie: PHPSESSID=6d5nvqgk0cej31u8apv5aaljed\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 22 Mar 2026 21:46:43 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 09 Feb 2022 13:55:44 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6203c7e0-69009\"\r\nexpires: Mon, 23 Mar 2026 09:46:43 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":430089,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (44112)","md5":"365c80971c9efc3f3e8087fc703f7667","sha1":"de6bd2aadd0984751888f6f59fdc81102e2f816d","sha256":"a4cd4c5feca9f7333052edb99312a899313e1f3f6b8f34ab7f8dcf01fe8d7a74","sha512":"f9470f1d189a597a3588b476b3efdcf97823dd0c87411f60607b641525c52605a7a2550f38337e50869a837fc1d6acf9029d5d17f66050fa94fbadf5b5feeeed","ssdeep":"6144:l76dr/jrE/0NNWS9UO2/HP2jz05O1HaeJ3qZEZDj9+b+Q88MzfFNo8vq5:56d9DZzaneYZEl5+qQ8zztN85","tlshash":"6c94aee93582f42157f366b740af1806b33d691b140c88a0f255edd5e8f84aa913bff9","first_seen":"2023-03-07T12:03:15Z","last_seen":"2026-07-27T13:45:14.751184Z","times_seen":413,"resource_available":true,"data":null}},"time_used":896,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":896,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"glc.ceshishiping.top/index.php/Home/blind_box/getRoundInfo?box_type=500","fqdn":"glc.ceshishiping.top","domain":"ceshishiping.top","tld":"top"},"ip":{"addr":"58.229.132.104","port":443,"asn":9318,"as":"SK Broadband Co Ltd","country":"South Korea","country_code":"KR"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://glc.ceshishiping.top/","date":"2026-03-22T21:48:26.593Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"glc.ceshishiping.top","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 16 Jan 2026 15:12:32 GMT","end":"Thu, 16 Apr 2026 15:12:31 GMT"},"fingerprint":{"sha1":"EC:D5:46:07:68:F8:28:5F:48:11:6C:C6:EF:A5:03:85:99:7A:E2:4D","sha256":"3C:D3:F3:15:34:60:A4:95:A0:28:F8:32:74:67:D0:49:C8:84:7A:41:C1:CB:15:9C:44:83:87:02:C6:0B:44:8F"}}},"request":{"raw":"GET /index.php/Home/blind_box/getRoundInfo?box_type=500 HTTP/1.1\r\nHost: glc.ceshishiping.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/javascript, */*; q=0.01\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Requested-With: XMLHttpRequest\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://glc.ceshishiping.top/\r\nCookie: PHPSESSID=6d5nvqgk0cej31u8apv5aaljed\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 22 Mar 2026 21:46:51 GMT\r\ncontent-type: application/json; charset=utf-8\r\nvary: Accept-Encoding\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":254,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"3fd68e3138dc1bdf5a6cfa7631c08dfa","sha1":"ecd9b0e93e13611547f3511862b410dea27ee3d8","sha256":"4c0167ab52c16bab8ce9e5d0e3c905b41af4c08ed520b175e60685328720adee","sha512":"124c0d046fe89731211a3df151d1f9e1ca8f0505c78de74ea31d82f0600e3bd14ac8ae2274b5a4387b209435849c958aab5f76e8ad7500dff22b6042ba9be7b7","ssdeep":"","tlshash":"a5d09708e3f289f8a9e3822082cc43e3632c7195e0c2c380f7ec0a1832434b860d1015","first_seen":"2026-03-22T21:48:44.931473Z","last_seen":"2026-03-22T21:48:44.931473Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1813,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1813,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"glc.ceshishiping.top/Application/Home/View/images/home/image%20275.png","fqdn":"glc.ceshishiping.top","domain":"ceshishiping.top","tld":"top"},"ip":{"addr":"58.229.132.104","port":443,"asn":9318,"as":"SK Broadband Co Ltd","country":"South Korea","country_code":"KR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://glc.ceshishiping.top/","date":"2026-03-22T21:48:18.384Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"glc.ceshishiping.top","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 16 Jan 2026 15:12:32 GMT","end":"Thu, 16 Apr 2026 15:12:31 GMT"},"fingerprint":{"sha1":"EC:D5:46:07:68:F8:28:5F:48:11:6C:C6:EF:A5:03:85:99:7A:E2:4D","sha256":"3C:D3:F3:15:34:60:A4:95:A0:28:F8:32:74:67:D0:49:C8:84:7A:41:C1:CB:15:9C:44:83:87:02:C6:0B:44:8F"}}},"request":{"raw":"GET /Application/Home/View/images/home/image%20275.png HTTP/1.1\r\nHost: glc.ceshishiping.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://glc.ceshishiping.top/\r\nCookie: PHPSESSID=6d5nvqgk0cej31u8apv5aaljed\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 22 Mar 2026 21:46:43 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 21 Nov 2025 08:12:10 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69201eda-80ee\"\r\nexpires: Tue, 21 Apr 2026 21:46:43 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":33006,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 157 x 157, 8-bit/color RGBA, non-interlaced","md5":"10dc40475e3ebef799412fef2bd82334","sha1":"ef5de28b1ede93fb9e3753da8125b65fc470ae0b","sha256":"61fdf17835571c55af3ef61696373b1b5b60425b581ceabd9d5d65f6b1c75ead","sha512":"62c631f06e6f268b23aa760adbf519209503e8a277d80b7e207cd9dc5f60f4ba5acbe742699d8be5607bf27a85b4e17dff858030c9aab9457e3f5b28c446c559","ssdeep":"768:B3piA4z1gjEK8HD3yExAonQfgBkocCaagrQdZbFltOy:riA4zCg17yEC6w98zLL","tlshash":"8fe2f19bacd72231d23980ba0c1783b749f535ccbf75400e90b5a6ed593616fb88689e","first_seen":"2026-03-22T21:48:44.932494Z","last_seen":"2026-03-23T02:29:37.813982Z","times_seen":2,"resource_available":false,"data":null}},"time_used":973,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":973,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"glc.ceshishiping.top/Application/Home/View/images/home/copy2.png","fqdn":"glc.ceshishiping.top","domain":"ceshishiping.top","tld":"top"},"ip":{"addr":"58.229.132.104","port":443,"asn":9318,"as":"SK Broadband Co Ltd","country":"South Korea","country_code":"KR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://glc.ceshishiping.top/","date":"2026-03-22T21:48:18.387Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"glc.ceshishiping.top","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 16 Jan 2026 15:12:32 GMT","end":"Thu, 16 Apr 2026 15:12:31 GMT"},"fingerprint":{"sha1":"EC:D5:46:07:68:F8:28:5F:48:11:6C:C6:EF:A5:03:85:99:7A:E2:4D","sha256":"3C:D3:F3:15:34:60:A4:95:A0:28:F8:32:74:67:D0:49:C8:84:7A:41:C1:CB:15:9C:44:83:87:02:C6:0B:44:8F"}}},"request":{"raw":"GET /Application/Home/View/images/home/copy2.png HTTP/1.1\r\nHost: glc.ceshishiping.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://glc.ceshishiping.top/\r\nCookie: PHPSESSID=6d5nvqgk0cej31u8apv5aaljed\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 22 Mar 2026 21:46:43 GMT\r\ncontent-type: image/png\r\ncontent-length: 269\r\nlast-modified: Mon, 24 Nov 2025 01:37:22 GMT\r\netag: \"6923b6d2-10d\"\r\nexpires: Tue, 21 Apr 2026 21:46:43 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":269,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 21 x 25, 8-bit/color RGBA, non-interlaced","md5":"8f3dfcc13b691d8c78a19a8ea47094a9","sha1":"74b617578aba532bdd910ce9dddd346eb8f11ab2","sha256":"bc3c4c27aa1f869529ddb29a65b36f29208dbf9f659b463e383c003a94e91265","sha512":"771688174d6f6cb81a726f7fc8191ae9efa37ce0f9bdf8d10f3362af3c7a5966313247f2b0cfdb1ca2de25e57a19b7907668addd2e6be761528a428970e36eda","ssdeep":"","tlshash":"cfd02bce854c487ebe89579221b6219114a72f0505146405ece01838615a96892e87f3","first_seen":"2026-03-22T21:48:44.933595Z","last_seen":"2026-03-23T02:29:37.74475Z","times_seen":2,"resource_available":false,"data":null}},"time_used":8842,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":973,"receive":7869,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"glc.ceshishiping.top/Application/Home/View/images/home/china.png","fqdn":"glc.ceshishiping.top","domain":"ceshishiping.top","tld":"top"},"ip":{"addr":"58.229.132.104","port":443,"asn":9318,"as":"SK Broadband Co Ltd","country":"South Korea","country_code":"KR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://glc.ceshishiping.top/","date":"2026-03-22T21:48:18.459Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"glc.ceshishiping.top","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 16 Jan 2026 15:12:32 GMT","end":"Thu, 16 Apr 2026 15:12:31 GMT"},"fingerprint":{"sha1":"EC:D5:46:07:68:F8:28:5F:48:11:6C:C6:EF:A5:03:85:99:7A:E2:4D","sha256":"3C:D3:F3:15:34:60:A4:95:A0:28:F8:32:74:67:D0:49:C8:84:7A:41:C1:CB:15:9C:44:83:87:02:C6:0B:44:8F"}}},"request":{"raw":"GET /Application/Home/View/images/home/china.png HTTP/1.1\r\nHost: glc.ceshishiping.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://glc.ceshishiping.top/\r\nCookie: PHPSESSID=6d5nvqgk0cej31u8apv5aaljed\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 22 Mar 2026 21:46:43 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 14 Apr 2022 00:48:04 GMT\r\nvary: Accept-Encoding\r\netag: W/\"62576f44-1356\"\r\nexpires: Tue, 21 Apr 2026 21:46:43 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4950,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 302 x 200, 8-bit/color RGBA, non-interlaced","md5":"1e957e9c52d3903d2fed3b7b0fc03211","sha1":"ae76f6324b63f56e39a2c9479ad88bf9815ea066","sha256":"574065ba1c9024dd3b518bafd2c7e3a7e8ae9727470f25052c4bf31e7897ae8b","sha512":"9857ac723fc22d5e7c1c7a6bebf936d23047a893a7367bfb39ec30bbc202bc80ccc074d1dbacde1ca5db37a7941625ddc5cb0e47d861db471938812fa5098b4a","ssdeep":"96:bAHqMH+epXZOAzmsE5NbZ7PdfgwlmsfyvGfiQwAbo:bAHH+epXZRzmt+VsaWiQRk","tlshash":"90a1c58f4607799b9c3b98a1251161c13e3e76351ad7026cecfb8860918e847d1eb0fb","first_seen":"2025-07-22T12:12:59.968218Z","last_seen":"2026-03-23T02:29:37.752014Z","times_seen":3,"resource_available":false,"data":null}},"time_used":914,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":914,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"glc.ceshishiping.top/Public/layer/layer.js","fqdn":"glc.ceshishiping.top","domain":"ceshishiping.top","tld":"top"},"ip":{"addr":"58.229.132.104","port":443,"asn":9318,"as":"SK Broadband Co Ltd","country":"South Korea","country_code":"KR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://glc.ceshishiping.top/","date":"2026-03-22T21:48:18.463Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"glc.ceshishiping.top","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 16 Jan 2026 15:12:32 GMT","end":"Thu, 16 Apr 2026 15:12:31 GMT"},"fingerprint":{"sha1":"EC:D5:46:07:68:F8:28:5F:48:11:6C:C6:EF:A5:03:85:99:7A:E2:4D","sha256":"3C:D3:F3:15:34:60:A4:95:A0:28:F8:32:74:67:D0:49:C8:84:7A:41:C1:CB:15:9C:44:83:87:02:C6:0B:44:8F"}}},"request":{"raw":"GET /Public/layer/layer.js HTTP/1.1\r\nHost: glc.ceshishiping.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://glc.ceshishiping.top/\r\nCookie: PHPSESSID=6d5nvqgk0cej31u8apv5aaljed\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 22 Mar 2026 21:46:43 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 11 Jan 2022 14:45:38 GMT\r\nvary: Accept-Encoding\r\netag: W/\"61dd9812-4daa\"\r\nexpires: Mon, 23 Mar 2026 09:46:43 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":19882,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (19785)","md5":"c105cceaf9853bfe46af3435d9400002","sha1":"db0d89c855346638b2b5f5a06e305402677c55a5","sha256":"95a75e4791d3283dea6df07e4d34e81ce46617184d94888eb0d467e27d143965","sha512":"40c8d78091cbc6828302cec8177ce1d2ed494ea460823b2d53a5914520a1a4061965e722892b4ac30bb141c8ce832eb9fae1b291352af272dd492e8c59e1d427","ssdeep":"384:rz5KTTrEpbdi/tkNX0pUhmdQKCznPoXMUnqJjcdm:r1KLebA/tkNM+myxpv","tlshash":"4092c46d754034962253a169821fba0f31f21d20eb078118f16bb0fd1dbcda5a2b7b6f","first_seen":"2025-07-22T12:12:59.97133Z","last_seen":"2026-03-23T02:29:37.811463Z","times_seen":7,"resource_available":true,"data":null}},"time_used":906,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":906,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}