{"report_id":"a759542d-2c28-462f-b4d3-7ee2f8f98523","version":6,"status":"done","tags":[],"date":"2026-04-07T13:53:37Z","url":{"schema":"https","addr":"trust-dafayule.com/","fqdn":"trust-dafayule.com","domain":"trust-dafayule.com","tld":"com"},"ip":{"addr":"38.239.27.43","port":0,"asn":134548,"as":"DXTL Tseung Kwan O Service","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"trust-dafayule.com/","fqdn":"trust-dafayule.com","domain":"trust-dafayule.com","tld":"com"},"title":"大发娱乐(中国)官方网站 - DAFA YULE","dom":{"size":40553,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (343)","md5":"462b78a432fece6c97ece371c9694e24","sha1":"d6b7ac8f3108e4650b102419a57cfe7ea7c3dc12","sha256":"cc4b25694fe3cb541cd190a270434c4bc513ff9b425995c25d819c46d7921101","sha512":"15cd4c0ab4e4f8145395bc95c5ca5678b0db3ad944a2251efd17858fd557e1bea79242ee4be9692c11cccbd23ae4ad012e793766a1b5cac0a7919cef2859ea67","ssdeep":"192:jK7AqBH6GMQ8a2cqUXbXaInwX46OeCxk8aW0zdgyHv+IEkvk7GIEHMDujUzn0dlT:m/mznv+PMdFIcmJyIu6iQZOiv2BtALs","tlshash":"3703b62a09f311961443b2a43bff2b0d6755c40bc94ac959bf9c138a9fc2b9548e378f","dom_hash":"domhash668c40d29f2e73ac2c87d6733463dc56","first_seen":"2026-04-07T13:53:42.943175Z","last_seen":"2026-04-07T13:53:42.943175Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"trust-dafayule.com/","fqdn":"trust-dafayule.com","domain":"trust-dafayule.com","tld":"com"},"ip":{"addr":"38.239.27.43","port":0,"asn":134548,"as":"DXTL Tseung Kwan O Service","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-05-12T13:53:37Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-07","alert":"Sinkholed","trigger":"trust-dafayule.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"cdnjs.cloudflare.com","ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2009-02-17","domain_rank":1222,"first_seen":"2012-05-23T12:49:49Z","last_seen":"2026-04-05T22:33:08.106483Z","alert_count":0,"request_count":3,"received_data":323638,"sent_data":1581,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"play.google.com","ip":{"addr":"142.251.143.142","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"1997-09-15","domain_rank":48,"first_seen":"2013-05-30T23:24:35Z","last_seen":"2026-04-06T00:23:30.187026Z","alert_count":0,"request_count":1,"received_data":5734,"sent_data":491,"comment":"","tags":null,"fingerprints":null},{"fqdn":"trust-dafayule.com","ip":{"addr":"38.239.27.43","port":443,"asn":134548,"as":"DXTL Tseung Kwan O Service","country":"United States","country_code":"US"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":5,"request_count":5,"received_data":1253402,"sent_data":2519,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"developer.apple.com","ip":{"addr":"17.253.39.143","port":443,"asn":6185,"as":"APPLE-AUSTIN","country":"Sweden","country_code":"SE"},"domain_registered":"1987-02-19","domain_rank":27727,"first_seen":"2012-06-25T15:34:34Z","last_seen":"2026-04-02T08:32:25.19373Z","alert_count":0,"request_count":1,"received_data":12224,"sent_data":505,"comment":"","tags":null,"fingerprints":[{"name":"Apple MapKit JS","description":"Apple MapKit JS lets you embed interactive maps directly into your websites across platforms and operating systems, including iOS and Android.","website":"https://developer.apple.com/maps/web/","common_platform_enumeration":"","icon":"Apple.svg","categories":["Maps"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"hm.baidu.com","ip":{"addr":"111.45.3.198","port":443,"asn":9808,"as":"China Mobile Communications Group Co., Ltd.","country":"China","country_code":"CN"},"domain_registered":"1999-10-11","domain_rank":54491,"first_seen":"2012-05-26T08:38:45Z","last_seen":"2026-04-06T04:32:17.512298Z","alert_count":0,"request_count":2,"received_data":30883,"sent_data":1195,"comment":"","tags":null,"fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"trust-dafayule.com/","fqdn":"trust-dafayule.com","domain":"trust-dafayule.com","tld":"com"},"ip":{"addr":"38.239.27.43","port":443,"asn":134548,"as":"DXTL Tseung Kwan O Service","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"47b084e62e63b3105da736cf8d94238e","sha1":"aa2ce57efd3da89bf32bd587ea2fe1f9c2f87e87","sha256":"c24ff6d7ef6d7be28ed985a150a9a8d8978309e6d60616790c626c2daab458de","sha512":"bf9f143278da3f00403477cb397991bce3f6f5d7308b1d06a1ac815511f7bcc7d68f22634265783ed814e3ce8eaee75e28b92a5d3a77286c521262074cc6d231","ssdeep":"","tlshash":"a0d0975f3c64283427b5043d21bfd98cf1a2244c607ed00481dee8855ab0fd10c3e7c8","size":254,"data":"","first_seen":"2026-01-27T02:26:25.755163Z","last_seen":"2026-05-23T07:38:05.590749Z","times_seen":104,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"trust-dafayule.com/","fqdn":"trust-dafayule.com","domain":"trust-dafayule.com","tld":"com"},"ip":{"addr":"38.239.27.43","port":443,"asn":134548,"as":"DXTL Tseung Kwan O Service","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"a4e3161f30ce552f8a6990896b53ccad","sha1":"19f0498c23d19cc133a79e03dea8a28a549b9bea","sha256":"87abaf98648b933999f6550efe201e0293a93e82b65f32547e2cf267426c902c","sha512":"12f1b10cc8a722a34c58ea182ef0b81d63a14ef3cf91d24f98e720cb0e409fc3b811f389ee197eaa6d378a25b8eab0499076bd6bc88c549a7b768efcffd879f4","ssdeep":"","tlshash":"3a41f23a497311368173a29b77ca43907b78018b2545da4b3f2c4b491f80e206af1fe6","size":2018,"data":"","first_seen":"2026-02-14T17:42:44.357094Z","last_seen":"2026-06-07T01:48:05.325425Z","times_seen":14,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hm.baidu.com/hm.js?3aff062eb3da49cce3596e658b13868c","fqdn":"hm.baidu.com","domain":"baidu.com","tld":"com"},"ip":{"addr":"111.45.3.198","port":443,"asn":9808,"as":"China Mobile Communications Group Co., Ltd.","country":"China","country_code":"CN"},"introduction_type":"scriptElement","is_inline":false,"md5":"36aff3fdc6b32c3da28985728744d7b9","sha1":"74686a94cfaa00f76aeb33a03efa108e8762ba5c","sha256":"7bb8fbb48f158e895a3df6c154fef80649d9a708727f46bae7078baa679096ee","sha512":"d7899f0c488c0b200efa7876bf5d1670576411d9b3ca8a325eb125db1fc918e923348a00337d6bb012b5e2e6ed498571c8f93089dd797a3a41ba1f00ed6f430d","ssdeep":"384:dQJSoLMJJTRl6s1JXFVCFI/TayvuodsZPIGm8XaR1JRwvutq1tGdc7M04gRw6:dQ4VJfHgMdvussZPIx82Rwvutcto07v","tlshash":"71d2d9e9b282713293a324a5153f324af07b5a54bd4968a4f11894c07d38fbb027bfdd","size":29901,"data":"","first_seen":"2026-04-07T13:53:42.970285Z","last_seen":"2026-04-07T13:53:42.970285Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"trust-dafayule.com/","fqdn":"trust-dafayule.com","domain":"trust-dafayule.com","tld":"com"},"ip":{"addr":"38.239.27.43","port":443,"asn":134548,"as":"DXTL Tseung Kwan O Service","country":"United States","country_code":"US"},"introduction_type":"Function","is_inline":false,"md5":"1c5c9160600df2d96d69a4ea16cec7ed","sha1":"3cf678c9135cc952ba6970ef545035bb757a443f","sha256":"a3520fe88e248d2b6c9c6db93309a037ef969fe297208e5bd7e49a55bb32c808","sha512":"2a298a8c2552c6a6c6f8d3f7327d2e9abfa87a0dbb27e9e528a8539b416155c0860f54f46464dfe7e5d49c7906a9eacdac7e5181b86ef15a83276a8f4fee0546","ssdeep":"","tlshash":"078004d531c35040475331d400571cd4503444f014444d544040d4511c55030d1154dc","size":37,"data":"","first_seen":"2023-04-11T21:49:14Z","last_seen":"2026-08-10T13:34:16.475058Z","times_seen":121766,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"trust-dafayule.com/","fqdn":"trust-dafayule.com","domain":"trust-dafayule.com","tld":"com"},"ip":{"addr":"38.239.27.43","port":443,"asn":134548,"as":"DXTL Tseung Kwan O Service","country":"United States","country_code":"US"},"introduction_type":"Function","is_inline":false,"md5":"1c5c9160600df2d96d69a4ea16cec7ed","sha1":"3cf678c9135cc952ba6970ef545035bb757a443f","sha256":"a3520fe88e248d2b6c9c6db93309a037ef969fe297208e5bd7e49a55bb32c808","sha512":"2a298a8c2552c6a6c6f8d3f7327d2e9abfa87a0dbb27e9e528a8539b416155c0860f54f46464dfe7e5d49c7906a9eacdac7e5181b86ef15a83276a8f4fee0546","ssdeep":"","tlshash":"078004d531c35040475331d400571cd4503444f014444d544040d4511c55030d1154dc","size":37,"data":"","first_seen":"2023-04-11T21:49:14Z","last_seen":"2026-08-10T13:34:16.475058Z","times_seen":121766,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"trust-dafayule.com/","fqdn":"trust-dafayule.com","domain":"trust-dafayule.com","tld":"com"},"ip":{"addr":"38.239.27.43","port":443,"asn":134548,"as":"DXTL Tseung Kwan O Service","country":"United States","country_code":"US"},"introduction_type":"Function","is_inline":false,"md5":"bea38914d0379cfb22fc4e8806b5e60a","sha1":"dae694bf41df944cc4ee58279af0405cd75a2a24","sha256":"1b3889d67f4bdd10965463cf4c5d8386f49e6352ecea82ba0b74e62a6f1eeea1","sha512":"11c37c35f405ea177338a74b7fe61922f26e03177e157e5937e6696e6f755018021e0cf228d2eed38f66852217a11574022de2d98ad4a73d3e61a47fedb1a1f6","ssdeep":"","tlshash":"b9e0c0cdf382008819d369ba9e16781c96a50d3339a94da85c8168532dcdab346d12ef","size":380,"data":"","first_seen":"2026-04-07T13:53:42.977862Z","last_seen":"2026-04-07T13:53:42.977862Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/font-awesome/6.0.0/webfonts/fa-brands-400.woff2","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://trust-dafayule.com/","date":"2026-04-07T13:53:17.419Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 14 Mar 2026 00:38:49 GMT","end":"Fri, 12 Jun 2026 01:38:45 GMT"},"fingerprint":{"sha1":"7A:4A:F6:D6:63:62:70:CA:51:C5:5A:06:41:17:71:BF:9D:2C:C9:42","sha256":"7F:F5:F5:FE:73:1F:E7:AF:1A:82:5B:59:EE:E8:E9:65:D6:87:68:61:8C:11:1E:94:4A:9A:C4:14:BD:4B:04:BA"}}},"request":{"raw":"GET /ajax/libs/font-awesome/6.0.0/webfonts/fa-brands-400.woff2 HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://trust-dafayule.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cdnjs.cloudflare.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 07 Apr 2026 13:53:17 GMT\r\ncontent-type: application/octet-stream; charset=utf-8\r\ncontent-length: 104544\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\netag: \"620188b3-19860\"\r\nlast-modified: Mon, 07 Feb 2022 21:01:39 GMT\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/kv\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 544133\r\nexpires: Sun, 28 Mar 2027 13:53:17 GMT\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=15780000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gj2Ja6J55LErUMNqv9GoDEUIe2DYxsw6cAoVn5NbtfSlcxLN2PJEFZ5yFzosdCuzx05UTOeQz5UyiPpPac4%2B36g2D19Yjbh1mA4NLdMgAnt76aG%2BmmnodAZWi0iBbXpR5wjlmaPd\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\ncf-ray: 9e898483db7fb512-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":104544,"size_decoded":0,"mime_type":"application/octet-stream; charset=utf-8","magic":"Web Open Font Format (Version 2), TrueType, length 104544, version 768.256","md5":"a9afdb72826cde196ddf29eb8f9d0f8f","sha1":"69fc982ace0b9fdd2cfa68c6628bcaad00f407fd","sha256":"29bc44694c394921d1f00271128a2e4cd8293516216e24eac07a73fa821fc1f5","sha512":"91414027bbd6fc01d2ee035d519530d017f34f9c8b9150a2e4a45386e3cfee2f4ecd07ab8f658b426e965536be75b3c6b396e8e65ab4fa33031779d3b0873dcd","ssdeep":"3072:V3ZSTBmqhFEpJTbnHMg1FZTRB/CClfbzXcW0FC3y0ew:ZZWBXwpFbsg1FZTRBbFMlFCDew","tlshash":"85a3128faa6fa70a2a1c79c5341418acf3102fd5c51e0be01474d9fff2385aa57685d6","first_seen":"2023-04-07T13:45:16Z","last_seen":"2026-08-10T18:34:15.922135Z","times_seen":5669,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"play.google.com/intl/en_us/badges/static/images/badges/en_badge_web_generic.png","fqdn":"play.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.143.142","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://trust-dafayule.com/","date":"2026-04-07T13:53:18.178Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 16 Mar 2026 08:36:32 GMT","end":"Mon, 08 Jun 2026 08:36:31 GMT"},"fingerprint":{"sha1":"DE:18:EF:31:96:48:61:26:47:8F:5F:EE:5F:C5:7E:A7:0F:31:50:C1","sha256":"66:4F:08:D2:25:D2:16:E2:5A:70:A2:AA:57:2F:9F:44:90:64:D2:15:65:C0:C5:57:C0:44:72:2C:97:F7:D5:4D"}}},"request":{"raw":"GET /intl/en_us/badges/static/images/badges/en_badge_web_generic.png HTTP/1.1\r\nHost: play.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://trust-dafayule.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncontent-type: image/png\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/uxe-owners-acl/play_google\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"uxe-owners-acl/play_google\"\r\nreport-to: {\"group\":\"uxe-owners-acl/play_google\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/uxe-owners-acl/play_google\"}]}\r\ncontent-length: 4904\r\ndate: Tue, 07 Apr 2026 13:53:18 GMT\r\nexpires: Tue, 07 Apr 2026 13:53:18 GMT\r\ncache-control: private, max-age=0\r\nlast-modified: Thu, 04 Aug 2022 06:08:00 GMT\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":4904,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 646 x 250, 8-bit colormap, non-interlaced","md5":"1e91d02cf5a902f38f2923c006d79281","sha1":"cb8126b32c2274e0394246b40bd0b7f9f847e44c","sha256":"f72611e2df8e88204009fd896d05d5e8e83c77009c63943bbffa169559934849","sha512":"54b69544dc55addc0b2ddc08418d1a0a34240697070fe47feae9e915c70d33ef662ce1b7154cbcad84019d22f3291f138cc7298224d381cc740c2097478d4042","ssdeep":"96:OdBnjzG7DZTxqIfy33nn/qf46vhPQuAgul5SZBsj51v1f:OdBnjwDZTx5fy33no4ShRjuX2sd1vt","tlshash":"b0a18e8f3e019ae0faca1277c6d3c835e4206c672c3767045a82f2ef51a25e7493e566","first_seen":"2023-05-03T20:05:42Z","last_seen":"2026-08-11T00:45:13.498665Z","times_seen":1845,"resource_available":false,"data":null}},"time_used":140,"timings":{"blocked":57,"dns":7,"connect":8,"send":0,"wait":18,"receive":0,"ssl":48},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"trust-dafayule.com/","fqdn":"trust-dafayule.com","domain":"trust-dafayule.com","tld":"com"},"ip":{"addr":"38.239.27.43","port":443,"asn":134548,"as":"DXTL Tseung Kwan O Service","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-04-07T13:53:15.539Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trust-wendingyule.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 04 Apr 2026 06:25:56 GMT","end":"Fri, 03 Jul 2026 06:25:55 GMT"},"fingerprint":{"sha1":"DD:34:C7:B3:E0:8C:50:E8:A3:E5:72:1B:FB:9B:D9:25:E3:AB:A2:A1","sha256":"59:00:A0:9A:D4:88:F1:67:F8:11:FC:A2:CF:48:75:93:43:67:A8:F5:3F:8F:9B:42:0B:D7:D9:87:31:74:ED:E7"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: trust-dafayule.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 07 Apr 2026 13:53:16 GMT\r\ncontent-type: text/html; charset=utf-8\r\nvary: Accept-Encoding\r\nset-cookie: server_name_session=4a78ef295466f6609ada5f734ed1124c; Max-Age=86400; httponly; path=/\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":41724,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (343), with CRLF, LF line terminators","md5":"6d51115c03be8605117b2409e96d204f","sha1":"5f1d0d2bf82185de0ac4ef579156544858863d89","sha256":"c0dd8818bf9073b216aa260568006fed2775b42c3ba2ae04292d2897aa1b3e51","sha512":"1a9b58bbddaef61f3bd7938dab73212335c656c6a252de018329e83870ac5db04ed6f06c80d00e291b9cb7f83bbe370d450b687b703a5ebc48745dd0bc7d9e97","ssdeep":"192:wK7An3OhdYFLJhA99G1+8O6DbNgHgn/zGzocvMWg3UwRBDrY5k3t+YB1KnaQpfua:XceyPj3nt2PvcSu0PxwWHX2y0AG+","tlshash":"0703b82a419061960273a3b8afb72b08f956805fd7025a55bf9c138b5ff2d9144a3fcf","first_seen":"2026-04-07T13:53:42.950731Z","last_seen":"2026-04-07T13:53:42.950731Z","times_seen":1,"resource_available":false,"data":null}},"time_used":2275,"timings":{"blocked":892,"dns":400,"connect":244,"send":0,"wait":487,"receive":0,"ssl":249},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-07","alert":"Sinkholed","trigger":"trust-dafayule.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trust-dafayule.com/d/images/47.jpg","fqdn":"trust-dafayule.com","domain":"trust-dafayule.com","tld":"com"},"ip":{"addr":"38.239.27.43","port":443,"asn":134548,"as":"DXTL Tseung Kwan O Service","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://trust-dafayule.com/","date":"2026-04-07T13:53:17.244Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trust-wendingyule.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 04 Apr 2026 06:25:56 GMT","end":"Fri, 03 Jul 2026 06:25:55 GMT"},"fingerprint":{"sha1":"DD:34:C7:B3:E0:8C:50:E8:A3:E5:72:1B:FB:9B:D9:25:E3:AB:A2:A1","sha256":"59:00:A0:9A:D4:88:F1:67:F8:11:FC:A2:CF:48:75:93:43:67:A8:F5:3F:8F:9B:42:0B:D7:D9:87:31:74:ED:E7"}}},"request":{"raw":"GET /d/images/47.jpg HTTP/1.1\r\nHost: trust-dafayule.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://trust-dafayule.com/\r\nCookie: server_name_session=4a78ef295466f6609ada5f734ed1124c\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 07 Apr 2026 13:53:17 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Fri, 03 Apr 2026 08:33:58 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69cf7b76-128a6\"\r\nexpires: Thu, 07 May 2026 13:53:17 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":75942,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1265x789, components 3","md5":"e936fca8ba5ef9993092199bb6cb5a9b","sha1":"2f9f16e35572a16ea34060693669e706b7be97ab","sha256":"88167840444c3b73fa9eb7bb1b7f2a282688132cb177f55924b9daae8e18e27b","sha512":"8f44e40e30ea5da7923f139466669f17dc777fb75dbeccb541367ed9c586f31e4d69ef7919fc4b3603cdff1194b6003990ea8ac2b3ba15704c46428dd17345f0","ssdeep":"1536:xwWyTUb2otKn9JCoVbjECoSsTXympNrMLu216YwwdiSGfmBy3Os:SHwohoJyoNQKW6VwTwOs","tlshash":"7873022c2f810f0afe443f3ab95dc72b5254751224d9d752fcd16a83da1e0e129e9bb8","first_seen":"2026-04-07T13:53:42.953677Z","last_seen":"2026-04-07T13:53:42.953677Z","times_seen":1,"resource_available":false,"data":null}},"time_used":247,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":247,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-07","alert":"Sinkholed","trigger":"trust-dafayule.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"developer.apple.com/app-store/marketing/guidelines/images/badge-download-on-the-app-store.svg","fqdn":"developer.apple.com","domain":"apple.com","tld":"com"},"ip":{"addr":"17.253.39.143","port":443,"asn":6185,"as":"APPLE-AUSTIN","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://trust-dafayule.com/","date":"2026-04-07T13:53:17.243Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"developer.apple.com","organization":"Apple Inc."},"issuer":{"commonName":"Apple Public EV Server ECC CA 1 - G1","organization":"Apple Inc."},"validity":{"start":"Wed, 25 Mar 2026 20:25:34 GMT","end":"Tue, 23 Jun 2026 19:58:04 GMT"},"fingerprint":{"sha1":"75:90:BC:2E:BC:A5:5E:B9:E9:9A:14:C0:9C:5E:C0:01:50:22:A2:E8","sha256":"C6:86:31:BD:63:87:E7:33:3D:90:E6:32:2B:6B:3C:D5:2D:8C:3F:71:DE:0E:24:91:60:3B:E7:DD:6B:52:E9:81"}}},"request":{"raw":"GET /app-store/marketing/guidelines/images/badge-download-on-the-app-store.svg HTTP/1.1\r\nHost: developer.apple.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://trust-dafayule.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: Apple\r\nDate: Tue, 07 Apr 2026 13:53:17 GMT\r\nContent-Type: image/svg+xml\r\nContent-Length: 10804\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains\r\nX-Content-Type-Options: nosniff\r\nLast-Modified: Fri, 30 Jan 2026 23:09:37 GMT\r\nAccept-Ranges: bytes\r\nX-XSS-Protection: 1; mode=block\r\nContent-Security-Policy: default-src 'self' data: blob: 'unsafe-inline' 'unsafe-eval' https://*.apple.com http://*.apple.com https://*.mzstatic.com https://*.apple-mapkit.com https://p-events-delivery.akamaized.net http://p-events-delivery.akamaized.net https://apple-events.akamaized.net https://mediaservices.cdn-apple.com http://mediaservices.cdn-apple.com https://wwdr-aws-dev.apple.com https://bricks.cdn-apple.com https://sfss.cdn-apple.com https://sf-saas.cdn-apple.com https://df-webapp-blue-ausw2.apple.com https://df-webapp-green-ausw2.apple.com https://devintserv.us-west-1a.app.apple.com https://devintserv.us-west-1a.app.apple.com/v1/query https://cdn.captionhub.com https://cdnjs.cloudflare.com\r\nCache-Control: max-age=600, public\r\nHost: developer.apple.com\r\nX-Frame-Options: SAMEORIGIN, SAMEORIGIN\r\nrqId: 19aac7cf5366b7b4f649f9b052e08bb6\r\nVia: http/1.1 sesto4-edge-mx-006.ts.apple.com (acdn/293.16398), https/1.1 sesto4-edge-fx-028.ts.apple.com (acdn/293.16398)\r\nX-Cache: hit-fresh, hit-stale\r\nCDNUUID: 80589f22-8a5f-4b2f-9b65-670e2a3e9632-4912555711\r\nAge: 0\r\nConnection: keep-alive\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apple MapKit JS","description":"Apple MapKit JS lets you embed interactive maps directly into your websites across platforms and operating systems, including iOS and Android.","website":"https://developer.apple.com/maps/web/","common_platform_enumeration":"","icon":"Apple.svg","categories":["Maps"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10804,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"2928664fe1fc6aca88583a6f606d60ba","sha1":"2f2fe1cbd0563b3ce3ea79fcdf1549ed244b3993","sha256":"a26fc5b38380272c92e9019a2eb8b45542a66814b3e2b203772db8904b9fb99f","sha512":"7d6f8b7e54a4da3cf81c767b4aa40c3b04bafe35f2dd77b85944de4442f0b1dd1a8eda0175deb4652cf055094acdc0d4b6e38abe51c52a3dfbf887481315b347","ssdeep":"192:v6+WE7QxvAjShzwzb7M1/myAYUNNdZnvGuQTF4U:v6+Pkxv44q/EH10U","tlshash":"7122a3b753748ad262d183c52d2e27a83b74a5feb22042c4778f155abf429b35439cd2","first_seen":"2023-05-03T18:10:19Z","last_seen":"2026-08-10T23:23:06.450374Z","times_seen":9566,"resource_available":false,"data":null}},"time_used":161,"timings":{"blocked":73,"dns":45,"connect":7,"send":0,"wait":11,"receive":1,"ssl":21},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"trust-dafayule.com/d/images/65.jpg","fqdn":"trust-dafayule.com","domain":"trust-dafayule.com","tld":"com"},"ip":{"addr":"38.239.27.43","port":443,"asn":134548,"as":"DXTL Tseung Kwan O Service","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://trust-dafayule.com/","date":"2026-04-07T13:53:17.246Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trust-wendingyule.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 04 Apr 2026 06:25:56 GMT","end":"Fri, 03 Jul 2026 06:25:55 GMT"},"fingerprint":{"sha1":"DD:34:C7:B3:E0:8C:50:E8:A3:E5:72:1B:FB:9B:D9:25:E3:AB:A2:A1","sha256":"59:00:A0:9A:D4:88:F1:67:F8:11:FC:A2:CF:48:75:93:43:67:A8:F5:3F:8F:9B:42:0B:D7:D9:87:31:74:ED:E7"}}},"request":{"raw":"GET /d/images/65.jpg HTTP/1.1\r\nHost: trust-dafayule.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://trust-dafayule.com/\r\nCookie: server_name_session=4a78ef295466f6609ada5f734ed1124c\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 07 Apr 2026 13:53:17 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Fri, 03 Apr 2026 08:33:58 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69cf7b76-8e7a\"\r\nexpires: Thu, 07 May 2026 13:53:17 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":36474,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 883x588, components 3","md5":"c449d30a5f15999e3489493d1832459d","sha1":"b8babf8be24075896718267ba61e636b34f0c990","sha256":"7cba9a83ff356bbbf0b876eb5f3d0d4036dcacbbe3e5610acc3af6066a358d61","sha512":"da4b336a7ab9faad1226021a15c2da86b45693a475e4c5e668a9ab840f49cfd5e13840f0ebc79af2801996fe8ad1c6041935b9b9870ad391d2a7ebf33dc061be","ssdeep":"768:C5qhhGnxMebZPVjKc4STmCW/erafchEQAhiIpWcJQR1dTtUEc:SqupxV97mJ/xfiEaIp3QjdZUL","tlshash":"eef2f2a9e31aaf64d114e1f3ba36b36151771e1d877f526e0c8101feb494062dea338a","first_seen":"2026-04-07T13:53:42.958838Z","last_seen":"2026-04-26T09:42:44.412474Z","times_seen":2,"resource_available":false,"data":null}},"time_used":734,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":734,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-07","alert":"Sinkholed","trigger":"trust-dafayule.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/font-awesome/6.0.0/webfonts/fa-solid-900.woff2","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://trust-dafayule.com/","date":"2026-04-07T13:53:17.377Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 14 Mar 2026 00:38:49 GMT","end":"Fri, 12 Jun 2026 01:38:45 GMT"},"fingerprint":{"sha1":"7A:4A:F6:D6:63:62:70:CA:51:C5:5A:06:41:17:71:BF:9D:2C:C9:42","sha256":"7F:F5:F5:FE:73:1F:E7:AF:1A:82:5B:59:EE:E8:E9:65:D6:87:68:61:8C:11:1E:94:4A:9A:C4:14:BD:4B:04:BA"}}},"request":{"raw":"GET /ajax/libs/font-awesome/6.0.0/webfonts/fa-solid-900.woff2 HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://trust-dafayule.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cdnjs.cloudflare.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 07 Apr 2026 13:53:17 GMT\r\ncontent-type: application/octet-stream; charset=utf-8\r\ncontent-length: 126828\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\netag: \"620188b3-1ef6c\"\r\nlast-modified: Mon, 07 Feb 2022 21:01:39 GMT\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/kv\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 8904\r\nexpires: Sun, 28 Mar 2027 13:53:17 GMT\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=15780000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1zKspt%2FnewHqS16Sp2W%2FAwfooHO0KhmGeClGm1BSHKhYqVWzt2TW%2FyxNzkYtdIyC95wgmLl%2FxMkW5bTEOn4XZkR%2Ft9GKkg%2F4n1gpRHL0qtyyOAKLQL8%2FJOBFf7pBUC8Xxw0ij89i\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\ncf-ray: 9e898483bb4fb512-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":126828,"size_decoded":0,"mime_type":"application/octet-stream; charset=utf-8","magic":"Web Open Font Format (Version 2), TrueType, length 126828, version 768.256","md5":"297973a488f688271dd223d542ba2697","sha1":"ed99d812e4c88826335f93acede3fad85c90fb54","sha256":"1b099f88c06ed0869872561c157f0ec9cbe133a0939d9ece4ee1e1f54bd4683d","sha512":"83c802972d9fee9dd7e3c0de42d8636c504e65ff20e43406bb446cc95a16acaa21789a03f0e2006148abfe47100bbd0c66aa4cf98f11e9b0220f1dcdb5204f46","ssdeep":"3072:caEaIjBfXHk79vCMuMZhQqmiutWxJfU52qiAx+SMfd:caEaIf3kxa5aaVMaHAScd","tlshash":"9dc3120ef3299411c6f0af104c63d6d627617389ffd548c767993e768aac9e70c28ea0","first_seen":"2023-04-10T14:50:44Z","last_seen":"2026-08-10T23:33:38.511659Z","times_seen":10923,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":17,"dns":1,"connect":0,"send":0,"wait":8,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"trust-dafayule.com/favicon.ico","fqdn":"trust-dafayule.com","domain":"trust-dafayule.com","tld":"com"},"ip":{"addr":"38.239.27.43","port":443,"asn":134548,"as":"DXTL Tseung Kwan O Service","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://trust-dafayule.com/","date":"2026-04-07T13:53:18.181Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trust-wendingyule.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 04 Apr 2026 06:25:56 GMT","end":"Fri, 03 Jul 2026 06:25:55 GMT"},"fingerprint":{"sha1":"DD:34:C7:B3:E0:8C:50:E8:A3:E5:72:1B:FB:9B:D9:25:E3:AB:A2:A1","sha256":"59:00:A0:9A:D4:88:F1:67:F8:11:FC:A2:CF:48:75:93:43:67:A8:F5:3F:8F:9B:42:0B:D7:D9:87:31:74:ED:E7"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: trust-dafayule.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://trust-dafayule.com/\r\nCookie: server_name_session=4a78ef295466f6609ada5f734ed1124c\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 07 Apr 2026 13:53:18 GMT\r\ncontent-type: image/x-icon\r\ncontent-length: 1966\r\nlast-modified: Fri, 03 Apr 2026 08:33:59 GMT\r\netag: \"69cf7b77-7ae\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1966,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 64x64 with PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced, 32 bits/pixel","md5":"64f0c873fc80552d864e68d054958d5c","sha1":"580eff727ef35c7f417dcc581410e1224da79ea5","sha256":"04915cd848c0d5e49f968dc63f2a7ced4cc290923a044c537f5fa141c39df3a8","sha512":"7c653fe8c12bf52ded2a8c23867fda1b268b6410070216a60b35bc4db9e76f807f2462a238794d02cfdb4835b5d25e807ab15a028b396f8e73828542316b357e","ssdeep":"","tlshash":"ce416c227ba0c4e4d036efa31ac313f305b18042f6cb039136cd12634d2a7412b07785","first_seen":"2026-04-05T21:17:09.221652Z","last_seen":"2026-07-03T00:59:31.772011Z","times_seen":166,"resource_available":false,"data":null}},"time_used":294,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":293,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-07","alert":"Sinkholed","trigger":"trust-dafayule.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hm.baidu.com/hm.gif?hca=4C27BBA8472E84ED\u0026cc=1\u0026ck=1\u0026cl=24-bit\u0026ds=1280x1024\u0026vl=1024\u0026et=0\u0026ja=0\u0026ln=en-us\u0026lo=0\u0026rnd=432205714\u0026si=3aff062eb3da49cce3596e658b13868c\u0026v=1.3.2\u0026lv=1\u0026sn=30243\u0026r=0\u0026ww=1280\u0026u=https%3A%2F%2Ftrust-dafayule.com%2F\u0026tt=%E5%A4%A7%E5%8F%91%E5%A8%B1%E4%B9%90(%E4%B8%AD%E5%9B%BD)%E5%AE%98%E6%96%B9%E7%BD%91%E7%AB%99%20-%20DAFA%20YULE","fqdn":"hm.baidu.com","domain":"baidu.com","tld":"com"},"ip":{"addr":"111.45.3.198","port":443,"asn":9808,"as":"China Mobile Communications Group Co., Ltd.","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://trust-dafayule.com/","date":"2026-04-07T13:53:18.403Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"baidu.com","organization":"Beijing Baidu Netcom Science Technology Co., Ltd"},"issuer":{"commonName":"GlobalSign RSA OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 09 Jul 2025 07:01:02 GMT","end":"Mon, 10 Aug 2026 07:01:01 GMT"},"fingerprint":{"sha1":"21:BF:66:0D:67:BE:7A:7F:49:48:05:30:F4:7F:09:F2:30:36:CA:63","sha256":"0D:82:2C:9A:90:5A:EF:E9:8F:37:12:C0:E0:26:30:EE:95:33:2C:45:5F:E7:74:5D:F0:8D:BC:79:F4:B0:A1:49"}}},"request":{"raw":"GET /hm.gif?hca=4C27BBA8472E84ED\u0026cc=1\u0026ck=1\u0026cl=24-bit\u0026ds=1280x1024\u0026vl=1024\u0026et=0\u0026ja=0\u0026ln=en-us\u0026lo=0\u0026rnd=432205714\u0026si=3aff062eb3da49cce3596e658b13868c\u0026v=1.3.2\u0026lv=1\u0026sn=30243\u0026r=0\u0026ww=1280\u0026u=https%3A%2F%2Ftrust-dafayule.com%2F\u0026tt=%E5%A4%A7%E5%8F%91%E5%A8%B1%E4%B9%90(%E4%B8%AD%E5%9B%BD)%E5%AE%98%E6%96%B9%E7%BD%91%E7%AB%99%20-%20DAFA%20YULE HTTP/1.1\r\nHost: hm.baidu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://trust-dafayule.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nCache-Control: private, max-age=0, no-cache\r\nContent-Length: 43\r\nContent-Type: image/gif\r\nDate: Tue, 07 Apr 2026 13:53:18 GMT\r\nP3p: CP=\"CURa ADMa DEVa PSAo PSDo OUR BUS UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR\"\r\nPragma: no-cache\r\nServer: apache\r\nSet-Cookie: HMACCOUNT=507F22B5E7EAE262; Path=/; Domain=hm.baidu.com; Expires=Sun, 18 Jan 2038 00:00:00 GMT\r\nStrict-Transport-Security: max-age=172800\r\nX-Content-Type-Options: nosniff\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"ad4b0f606e0f8465bc4c4c170b37e1a3","sha1":"50b30fd5f87c85fe5cba2635cb83316ca71250d7","sha256":"cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda","sha512":"ebfe0c0df4bcc167d5cb6ebdd379f9083df62bef63a23818e1c6adf0f64b65467ea58b7cd4d03cf0a1b1a2b07fb7b969bf35f25f1f8538cc65cf3eebdf8a0910","ssdeep":"","tlshash":"15900003fbc08002c2b2e0300b3b0380238ce2200aa8030b80aeb0acecaa3a20c03020","first_seen":"2023-04-05T02:54:03Z","last_seen":"2026-08-11T01:52:10.889666Z","times_seen":376555,"resource_available":true,"data":null}},"time_used":289,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":288,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/font-awesome/6.0.0/css/all.min.css","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://trust-dafayule.com/","date":"2026-04-07T13:53:17.241Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 14 Mar 2026 00:38:49 GMT","end":"Fri, 12 Jun 2026 01:38:45 GMT"},"fingerprint":{"sha1":"7A:4A:F6:D6:63:62:70:CA:51:C5:5A:06:41:17:71:BF:9D:2C:C9:42","sha256":"7F:F5:F5:FE:73:1F:E7:AF:1A:82:5B:59:EE:E8:E9:65:D6:87:68:61:8C:11:1E:94:4A:9A:C4:14:BD:4B:04:BA"}}},"request":{"raw":"GET /ajax/libs/font-awesome/6.0.0/css/all.min.css HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://trust-dafayule.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 07 Apr 2026 13:53:17 GMT\r\ncontent-type: text/css; charset=utf-8\r\ncontent-length: 15248\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"620188b3-3b90\"\r\nlast-modified: Mon, 07 Feb 2022 21:01:39 GMT\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/kv\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 19161\r\nexpires: Sun, 28 Mar 2027 13:53:17 GMT\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=15780000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QjmrhBKHTA%2BA92Qlc4r5ZmbLxLI%2B5ahLPGs3eJg2%2FHqrBsftUPVng3KmcBizK6s7e3szx9BXHrQALvDpircPxry0eaPOQJN7nCFkvcPm65t2%2BcMs98SkPE3NTGZ2n%2FdrQAxr0waL\"}]}\r\ncf-ray: 9e898482df07a0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":89220,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (65317)","md5":"dfb8fc36e102730fddf78b5494eb0035","sha1":"b513d9a39af2ee145f12c1ba03f9982960c47029","sha256":"8d321d88cb97fdedc3189506c25de9292c6e73a60ebaab496243346c6404480e","sha512":"f6eb006b5d0844ed078689e9c80215a63af294fbe80f088f52229d5a4e6ddcfca8958d5c39de03484d066beae2e00b93ae83d1e5a42f5d4f710baa8e3e7cc57a","ssdeep":"1536:iUMVM6MVMkMVM9MVMNMVMispxd1zJJ29Nll3IV7UHsR+z:Dd1NY95IV7UMR+z","tlshash":"8a93a9e9e04c05d56732c44baf99b37ca5b6f73cd5810da9f02f580c19d26a822c6f7a","first_seen":"2023-04-06T16:57:15Z","last_seen":"2026-08-11T00:04:11.037147Z","times_seen":13385,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":9,"dns":1,"connect":1,"send":0,"wait":8,"receive":1,"ssl":11},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"trust-dafayule.com/d/images/44.jpg","fqdn":"trust-dafayule.com","domain":"trust-dafayule.com","tld":"com"},"ip":{"addr":"38.239.27.43","port":443,"asn":134548,"as":"DXTL Tseung Kwan O Service","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://trust-dafayule.com/","date":"2026-04-07T13:53:17.247Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trust-wendingyule.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 04 Apr 2026 06:25:56 GMT","end":"Fri, 03 Jul 2026 06:25:55 GMT"},"fingerprint":{"sha1":"DD:34:C7:B3:E0:8C:50:E8:A3:E5:72:1B:FB:9B:D9:25:E3:AB:A2:A1","sha256":"59:00:A0:9A:D4:88:F1:67:F8:11:FC:A2:CF:48:75:93:43:67:A8:F5:3F:8F:9B:42:0B:D7:D9:87:31:74:ED:E7"}}},"request":{"raw":"GET /d/images/44.jpg HTTP/1.1\r\nHost: trust-dafayule.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://trust-dafayule.com/\r\nCookie: server_name_session=4a78ef295466f6609ada5f734ed1124c\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 07 Apr 2026 13:53:17 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Fri, 03 Apr 2026 08:33:58 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69cf7b76-10b7e1\"\r\nexpires: Thu, 07 May 2026 13:53:17 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1095649,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 6836x3565, components 3","md5":"a1c284d0d32e9dec65285f07a8855e70","sha1":"850b56c0ba6a55147d8e6fe7600b4be316436566","sha256":"b74f22cb01e64e77e888e776be4a86495957b7ab0b3f5f787d5bef42d6064d39","sha512":"c9629fc5faf4e176bb0e9ba6a17ea6f3035ca0bfcc49521c2dac5d7259ccebd2a86c09226fa7ddbfa23bda22945e782b19653be366e408eddba820ab41bf5d86","ssdeep":"24576:qlRQ8m90cfgGxUUUjUUFUUUAUUULUUUjUUFUUUAUUULUUUjUUFUUUAUUawK8Xza1:qlRQ8m9BfgGFw9tKb","tlshash":"6f2502062bd70b8ed5897b7a94424dd09c327e9030b0a573ca1ae53abd297f4ef54363","first_seen":"2026-04-07T13:53:42.967994Z","last_seen":"2026-05-20T08:02:53.759874Z","times_seen":2,"resource_available":false,"data":null}},"time_used":734,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":734,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-07","alert":"Sinkholed","trigger":"trust-dafayule.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hm.baidu.com/hm.js?3aff062eb3da49cce3596e658b13868c","fqdn":"hm.baidu.com","domain":"baidu.com","tld":"com"},"ip":{"addr":"111.45.3.198","port":443,"asn":9808,"as":"China Mobile Communications Group Co., Ltd.","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://trust-dafayule.com/","date":"2026-04-07T13:53:17.323Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"baidu.com","organization":"Beijing Baidu Netcom Science Technology Co., Ltd"},"issuer":{"commonName":"GlobalSign RSA OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 09 Jul 2025 07:01:02 GMT","end":"Mon, 10 Aug 2026 07:01:01 GMT"},"fingerprint":{"sha1":"21:BF:66:0D:67:BE:7A:7F:49:48:05:30:F4:7F:09:F2:30:36:CA:63","sha256":"0D:82:2C:9A:90:5A:EF:E9:8F:37:12:C0:E0:26:30:EE:95:33:2C:45:5F:E7:74:5D:F0:8D:BC:79:F4:B0:A1:49"}}},"request":{"raw":"GET /hm.js?3aff062eb3da49cce3596e658b13868c HTTP/1.1\r\nHost: hm.baidu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://trust-dafayule.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nCache-Control: max-age=0, must-revalidate\r\nContent-Encoding: gzip\r\nContent-Length: 11295\r\nContent-Type: application/javascript\r\nDate: Tue, 07 Apr 2026 13:53:18 GMT\r\nEtag: 44cafaa1d1819c5bd1883eb966f53156\r\nP3p: CP=\"CURa ADMa DEVa PSAo PSDo OUR BUS UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR\"\r\nServer: apache\r\nSet-Cookie: HMACCOUNT=4C27BBA8472E84ED; Path=/; Domain=hm.baidu.com; Expires=Sun, 18 Jan 2038 00:00:00 GMT\r\nStrict-Transport-Security: max-age=172800\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":29901,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (625)","md5":"36aff3fdc6b32c3da28985728744d7b9","sha1":"74686a94cfaa00f76aeb33a03efa108e8762ba5c","sha256":"7bb8fbb48f158e895a3df6c154fef80649d9a708727f46bae7078baa679096ee","sha512":"d7899f0c488c0b200efa7876bf5d1670576411d9b3ca8a325eb125db1fc918e923348a00337d6bb012b5e2e6ed498571c8f93089dd797a3a41ba1f00ed6f430d","ssdeep":"384:dQJSoLMJJTRl6s1JXFVCFI/TayvuodsZPIGm8XaR1JRwvutq1tGdc7M04gRw6:dQ4VJfHgMdvussZPIx82Rwvutcto07v","tlshash":"71d2d9e9b282713293a324a5153f324af07b5a54bd4968a4f11894c07d38fbb027bfdd","first_seen":"2026-04-07T13:53:42.970285Z","last_seen":"2026-04-07T13:53:42.970285Z","times_seen":1,"resource_available":true,"data":null}},"time_used":1662,"timings":{"blocked":685,"dns":4,"connect":224,"send":0,"wait":290,"receive":1,"ssl":455},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}