{"report_id":"b2132722-44b4-4dc9-aaae-04922298515c","version":6,"status":"done","tags":[],"date":"2026-02-10T20:48:38Z","url":{"schema":"http","addr":"gg657.com","fqdn":"gg657.com","domain":"gg657.com","tld":"com"},"ip":{"addr":"104.21.38.151","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"gg657.com/","fqdn":"gg657.com","domain":"gg657.com","tld":"com"},"title":"免费看A片网站-日韩大黄片在线播放-欧美国产精品小视频-亚洲中文字幕在线观看","dom":{"size":31993,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"6ee5478ccfc6b58737c529cd6d6d3a3c","sha1":"5d9169a4e3a75243eac7c495fbbb3581c407b149","sha256":"d598751f6eee6509b6d94875b86c3db4644f74a53e6749e2ea3ac9385780c318","sha512":"b170406961184df1bceceb0fea935694ee2445f1f04b173eb9ee76d3a13392f11f44aa0d31eec613a3fb9296c1387f304a303caf33aaeebaa7c1bf3683f54d42","ssdeep":"192:SqMNPOb4btVZ5ZVNr5XK3+FQsNRPOb4btVZ5ZVNr5XK3u/gxFpsDvXaPVb4btVZ6:SqMNPEWpZKQNRPEWpZKbyaP5WpZKRAGJ","tlshash":"a1e202f3d7e6d03a1265d0c0c964fea8d40364afcea36d46f8ed1a566f48fe25a03548","dom_hash":"domhash6ec89553ea3f84b777d612925951773c","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"gg657.com","fqdn":"gg657.com","domain":"gg657.com","tld":"com"},"ip":{"addr":"104.21.38.151","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-03-17T20:48:38Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-10","alert":"Phishing Block","trigger":"a3wxxmvs9.axn39smf89dff.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null},"summary":[{"fqdn":"www.pcenern.com","ip":{"addr":"161.129.35.190","port":443,"asn":40065,"as":"CNSERVERS","country":"United States","country_code":"US"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2025-11-09T20:20:41.125109Z","last_seen":"2026-02-05T00:53:31.310601Z","alert_count":0,"request_count":1,"received_data":717950,"sent_data":454,"comment":"","tags":null,"fingerprints":null},{"fqdn":"www.nntxskm.com","ip":{"addr":"161.129.35.210","port":443,"asn":40065,"as":"CNSERVERS","country":"United States","country_code":"US"},"domain_registered":"2025-10-09","domain_rank":0,"first_seen":"2025-11-28T05:01:32.655535Z","last_seen":"2026-02-05T00:53:29.98598Z","alert_count":0,"request_count":1,"received_data":382627,"sent_data":454,"comment":"","tags":null,"fingerprints":null},{"fqdn":"bpyyllqqj7.kmqianneng66.com","ip":{"addr":"198.2.227.151","port":9988,"asn":54600,"as":"PEG-SV","country":"United States","country_code":"US"},"domain_registered":"2023-09-29","domain_rank":0,"first_seen":"2024-04-25T08:55:42Z","last_seen":"2026-02-05T00:53:30.262785Z","alert_count":0,"request_count":1,"received_data":237360,"sent_data":470,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"www.niubixxx.xyz","ip":{"addr":"104.21.58.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2018-10-29","domain_rank":0,"first_seen":"2022-08-13T15:52:27Z","last_seen":"2026-02-05T00:53:31.016102Z","alert_count":0,"request_count":1,"received_data":215679,"sent_data":424,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"2026tu.myxuanxuan.com","ip":{"addr":"43.152.43.121","port":443,"asn":139341,"as":"ACE","country":"Singapore","country_code":"SG"},"domain_registered":"2016-04-10","domain_rank":0,"first_seen":"2026-01-26T20:19:42.17682Z","last_seen":"2026-02-09T21:34:29.678917Z","alert_count":0,"request_count":1,"received_data":213042,"sent_data":442,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"img.meituan.net","ip":{"addr":"138.113.181.188","port":443,"asn":54994,"as":"ML-1432-54994","country":"Sweden","country_code":"SE"},"domain_registered":"2010-01-25","domain_rank":189994,"first_seen":"2017-02-03T02:36:44Z","last_seen":"2026-02-06T01:39:39.753847Z","alert_count":0,"request_count":2,"received_data":1101471,"sent_data":885,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}]},{"fqdn":"mbh888.12img363608.com","ip":{"addr":"156.231.116.173","port":5658,"asn":984,"as":"OWS","country":"Japan","country_code":"JP"},"domain_registered":"2025-12-17","domain_rank":0,"first_seen":"2025-12-19T05:07:05.703209Z","last_seen":"2026-02-04T09:38:51.108268Z","alert_count":0,"request_count":1,"received_data":303790,"sent_data":448,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"d3h6umz9v49bqq.cloudfront.net","ip":{"addr":"54.192.209.14","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2008-04-25","domain_rank":0,"first_seen":"2025-09-22T06:11:16.179578Z","last_seen":"2026-02-05T00:53:30.479763Z","alert_count":0,"request_count":1,"received_data":72113,"sent_data":448,"comment":"","tags":null,"fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}]},{"fqdn":"img.alicdn.com","ip":{"addr":"47.246.44.177","port":443,"asn":24429,"as":"Zhejiang Taobao Network Co.,Ltd","country":"Sweden","country_code":"SE"},"domain_registered":"2008-06-25","domain_rank":61670,"first_seen":"2015-03-04T07:06:39Z","last_seen":"2026-02-04T11:51:12.125011Z","alert_count":0,"request_count":6,"received_data":4271238,"sent_data":2916,"comment":"","tags":null,"fingerprints":[{"name":"Tengine","description":"Tengine is a web server which is based on the Nginx HTTP server.","website":"https://tengine.taobao.org","common_platform_enumeration":"","icon":"Tengine.png","categories":["Web servers"]}]},{"fqdn":"888mbh.12img958763.com","ip":{"addr":"156.231.116.173","port":5658,"asn":984,"as":"OWS","country":"Japan","country_code":"JP"},"domain_registered":"2025-12-17","domain_rank":0,"first_seen":"2025-12-18T04:56:01.861294Z","last_seen":"2026-02-09T06:36:09.935909Z","alert_count":0,"request_count":1,"received_data":350435,"sent_data":450,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"gg657.com","ip":{"addr":"172.67.223.235","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2024-04-16","domain_rank":0,"first_seen":"2026-02-10T20:48:41.508244Z","last_seen":"2026-02-10T20:48:41.508244Z","alert_count":0,"request_count":3,"received_data":16029,"sent_data":1309,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"a3wxxmvs9.axn39smf89dff.com","ip":{"addr":"23.145.232.113","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"domain_registered":"2025-10-15","domain_rank":0,"first_seen":"2025-10-21T10:53:20.727092Z","last_seen":"2026-02-05T00:53:31.186879Z","alert_count":1,"request_count":1,"received_data":394067,"sent_data":446,"comment":"","tags":null,"fingerprints":null},{"fqdn":"img.xmshengchao.com","ip":{"addr":"172.247.84.2","port":1688,"asn":40065,"as":"CNSERVERS","country":"United States","country_code":"US"},"domain_registered":"2016-07-01","domain_rank":1701637,"first_seen":"2025-06-05T07:33:58.312013Z","last_seen":"2026-02-08T05:12:42.979327Z","alert_count":0,"request_count":2,"received_data":1213180,"sent_data":942,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"aksnig.popppo.cn","ip":{"addr":"107.149.207.124","port":443,"asn":398823,"as":"PEG-LA","country":"United States","country_code":"US"},"domain_registered":"2024-11-05","domain_rank":0,"first_seen":"2026-02-10T10:53:37.734967Z","last_seen":"2026-02-10T10:53:37.734967Z","alert_count":0,"request_count":1,"received_data":642722,"sent_data":461,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"niubixxx.xyz","ip":{"addr":"172.67.153.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2018-10-29","domain_rank":1731228,"first_seen":"2018-12-02T01:02:32Z","last_seen":"2026-02-05T00:53:30.520211Z","alert_count":0,"request_count":3,"received_data":182890,"sent_data":1278,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"xm888.12img250769.com","ip":{"addr":"156.231.116.173","port":5658,"asn":984,"as":"OWS","country":"Japan","country_code":"JP"},"domain_registered":"2025-12-17","domain_rank":0,"first_seen":"2025-12-18T04:56:01.846008Z","last_seen":"2026-02-08T09:20:52.923853Z","alert_count":0,"request_count":1,"received_data":308656,"sent_data":449,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"gg666jj666.com","ip":{"addr":"104.160.179.194","port":443,"asn":46844,"as":"SHARKTECH","country":"United States","country_code":"US"},"domain_registered":"2026-02-03","domain_rank":0,"first_seen":"2026-02-04T19:37:59.330587Z","last_seen":"2026-02-04T19:37:59.330587Z","alert_count":0,"request_count":1,"received_data":403534,"sent_data":454,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"789113.top","ip":{"addr":"198.204.238.229","port":443,"asn":33387,"as":"NOCIX","country":"United States","country_code":"US"},"domain_registered":"2025-08-25","domain_rank":0,"first_seen":"2025-09-14T03:15:48.606091Z","last_seen":"2026-02-05T00:53:29.791679Z","alert_count":0,"request_count":1,"received_data":716867,"sent_data":430,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"aksns.jzkts.xyz","ip":{"addr":"107.149.207.124","port":443,"asn":398823,"as":"PEG-LA","country":"United States","country_code":"US"},"domain_registered":"2021-09-10","domain_rank":0,"first_seen":"2026-02-10T20:48:41.495783Z","last_seen":"2026-02-10T20:48:41.495784Z","alert_count":0,"request_count":1,"received_data":559166,"sent_data":460,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"img.shsrdzs.com","ip":{"addr":"172.247.84.2","port":7988,"asn":40065,"as":"CNSERVERS","country":"United States","country_code":"US"},"domain_registered":"2024-03-04","domain_rank":1954131,"first_seen":"2025-06-29T14:46:21.542905Z","last_seen":"2026-02-08T09:20:53.095101Z","alert_count":0,"request_count":1,"received_data":1859553,"sent_data":467,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"www.n556789.com","ip":{"addr":"38.182.168.121","port":443,"asn":40065,"as":"CNSERVERS","country":"United States","country_code":"US"},"domain_registered":"2025-12-25","domain_rank":0,"first_seen":"2026-01-06T03:15:19.363704Z","last_seen":"2026-02-09T21:34:29.583149Z","alert_count":0,"request_count":1,"received_data":228882,"sent_data":427,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"pg888.12img707989.com","ip":{"addr":"156.231.116.173","port":5658,"asn":984,"as":"OWS","country":"Japan","country_code":"JP"},"domain_registered":"2025-12-17","domain_rank":0,"first_seen":"2025-12-18T04:56:01.819009Z","last_seen":"2026-02-06T06:29:08.703279Z","alert_count":0,"request_count":1,"received_data":762372,"sent_data":447,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"www.niubixxx.com","ip":{"addr":"104.21.85.171","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2018-10-17","domain_rank":0,"first_seen":"2020-04-06T16:12:15Z","last_seen":"2026-02-05T00:53:30.688754Z","alert_count":0,"request_count":10,"received_data":729162,"sent_data":4121,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"xx333hh888.com","ip":{"addr":"104.160.179.194","port":443,"asn":46844,"as":"SHARKTECH","country":"United States","country_code":"US"},"domain_registered":"2026-02-03","domain_rank":0,"first_seen":"2026-02-05T00:53:29.159085Z","last_seen":"2026-02-05T00:53:29.159086Z","alert_count":0,"request_count":2,"received_data":1392204,"sent_data":908,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"gg657.com/","fqdn":"gg657.com","domain":"gg657.com","tld":"com"},"ip":{"addr":"172.67.223.235","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"0fd2ae53f1d39ee2d3de94afd8c19e91","sha1":"dd2c22656adae0472b2a5d47758b7bd9cf95c6e2","sha256":"76386c1cf1417ea1a9cc39d2e3e7768879b65e5f38fba5364556e76b214cb3b1","sha512":"1ce995596b283f9379e3ca04c5d328c841263c9401aaade6a5947520a047f2c168c74c37cb54a53fb40c2013dd4731e56412035beeaede3c5f58f9cddbeab627","ssdeep":"","tlshash":"5a800000c2023abc0c0202200a0cfe000c02cea0002cb0080a00ccb2bca0acb00ec2ce","size":33,"data":"","first_seen":"2023-03-07T12:21:10Z","last_seen":"2026-06-21T02:28:57.775924Z","times_seen":576,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.niubixxx.com/seo/tui.js","fqdn":"www.niubixxx.com","domain":"niubixxx.com","tld":"com"},"ip":{"addr":"104.21.85.171","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"76fe2f178991f93e84f37c0b7a058f71","sha1":"831f6c49502623384b279715cc3591c8fc120439","sha256":"d7f87f257013976c4f13edc4568a42da9ca2f906011e1ca5a79fc9c273320007","sha512":"c2edfa916cbef857fa992051061179b9987fe1575d2eb2af8ea988337292771242503d66f345ac81096334ffd7143ec7708c64daae7d3beffb7d925fb88355e3","ssdeep":"","tlshash":"083158d35bb08367172122eca881fb74b8a7e0fadc4b2f81593f1d0be440644284e89f","size":1715,"data":"","first_seen":"2026-02-07T17:10:36.688035Z","last_seen":"2026-02-16T23:56:25.13732Z","times_seen":14,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.niubixxx.com/seo/alltop.js","fqdn":"www.niubixxx.com","domain":"niubixxx.com","tld":"com"},"ip":{"addr":"104.21.85.171","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"85b3224db9681cd9fac17b292e124b38","sha1":"c7161e730d7b9bc766c4bd97f54cf83ea1520db3","sha256":"9349f94b4430e267b9cc732d8082d7bc4f15c03f8cf154948762a0c6d0d40ba8","sha512":"9499d97930a223667c19d268945521405460941b4f7649066e655ac4702cc0093e28d47beb8adab70ff9290d3858fb3252983eed5ffce0c137301e40f48f4bed","ssdeep":"","tlshash":"fbd02b3b1e73f229253440516474c5f839b8843aef17a9c1dc9b9c300188f99081d880","size":276,"data":"","first_seen":"2024-05-15T22:59:32Z","last_seen":"2026-06-18T03:04:50.837336Z","times_seen":249,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gg657.com/","fqdn":"gg657.com","domain":"gg657.com","tld":"com"},"ip":{"addr":"172.67.223.235","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"3a1dc448ac26a6faff1a3a08b67a56ae","sha1":"9aa2cc237c31d134453ff0e938b2c7a771d1656e","sha256":"154a7dca6b4ddc60e329fa7c884fe0147d70fe2fd2c04dc638bf464832056827","sha512":"99dddf30d886dfc95547c82333e119ec68520268aa86c097ceea54a08521ce06191763cfd4b980362b03b1fd0a0bcfb7c7b857da45a9f2c265d601b41e41b887","ssdeep":"","tlshash":"6db0029d110279a677e31052745387a11d7985bb9c852a49712f1da60766a1cc143a41","size":103,"data":"","first_seen":"2023-03-09T21:52:32Z","last_seen":"2026-06-05T02:30:33.69408Z","times_seen":262,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.niubixxx.com/seo/top.js","fqdn":"www.niubixxx.com","domain":"niubixxx.com","tld":"com"},"ip":{"addr":"104.21.85.171","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"89e76a882a96ca322676c7e7513fc7cf","sha1":"f7441018207cf6c2284e7b9fd85f5a3926c2a8fd","sha256":"3789b155ef60fdde106152c17b429b815049b77f8d00fb27134ff0a6da170e9e","sha512":"eb03d837054a59a394cac17438b20a84d10f061aa8b4f9501565b0eea6337da057cdb7cd2ce134c254a31365cd218acb890086f0d41f4e54f8ef5bde68b6b34a","ssdeep":"","tlshash":"d5d02b3b1e73f229253440916474c5f839b8843aef17a9c5dc9b5c300188fd9081d880","size":274,"data":"","first_seen":"2024-05-15T22:59:32Z","last_seen":"2026-06-18T03:04:50.845178Z","times_seen":249,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gg657.com/","fqdn":"gg657.com","domain":"gg657.com","tld":"com"},"ip":{"addr":"172.67.223.235","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"d445cea2569c1e1d6ccb5303e6abe5ef","sha1":"342192c32d94a21ecf8a98f328820a36f1c098f6","sha256":"4b5be23e7f6d5e060a213af434f6919529228362fac05b55b58b2df76ffad852","sha512":"51d4eb3f204678743b8ff33499a6ef39624d8bcb4490a1bc6c0cefc0a21701cc31e98e13189799bed55b9c1da13cbcb5b798d1c2e3a9eb005dba95020513a8b1","ssdeep":"","tlshash":"2fc002dbf1460c3205db66bb72104385387891025c1211459e1c26955575e49c9ffa59","size":158,"data":"","first_seen":"2023-03-09T21:52:33Z","last_seen":"2026-06-05T02:30:33.695131Z","times_seen":262,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.niubixxx.com/seo/hengfu.js","fqdn":"www.niubixxx.com","domain":"niubixxx.com","tld":"com"},"ip":{"addr":"104.21.85.171","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"709816febddca0878a385da1d39fa11c","sha1":"266cb27ea749757d88e32dd811c7b108795547bb","sha256":"41d49334e37d0e3eb04e3e3bd401a89a8a83aeb35ff56aa3754777f2d79eb7a7","sha512":"cad47deab39eb78395a7cc097a02e38a8cca7f70dbe3e8bb5b53bb5eb01a148f34288ed18b8e39747870f012b6040e545787b15f3ad56d1664deb0df303f101e","ssdeep":"96:Kk7GF7GEVRWAtV1z/bwphMX8q/Kc2I4kO5:n7O7fVRDtV1z/FKJ/","tlshash":"5be1e2e316f1a2365b2543c0a4eaffb8f063f4fe9d438d65ccbe1a344480631256999c","size":6869,"data":"","first_seen":"2026-02-10T20:49:06.318685Z","last_seen":"2026-02-11T22:48:51.327165Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.niubixxx.com/seo/hengfu.js","fqdn":"www.niubixxx.com","domain":"niubixxx.com","tld":"com"},"ip":{"addr":"104.21.85.171","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"709816febddca0878a385da1d39fa11c","sha1":"266cb27ea749757d88e32dd811c7b108795547bb","sha256":"41d49334e37d0e3eb04e3e3bd401a89a8a83aeb35ff56aa3754777f2d79eb7a7","sha512":"cad47deab39eb78395a7cc097a02e38a8cca7f70dbe3e8bb5b53bb5eb01a148f34288ed18b8e39747870f012b6040e545787b15f3ad56d1664deb0df303f101e","ssdeep":"96:Kk7GF7GEVRWAtV1z/bwphMX8q/Kc2I4kO5:n7O7fVRDtV1z/FKJ/","tlshash":"5be1e2e316f1a2365b2543c0a4eaffb8f063f4fe9d438d65ccbe1a344480631256999c","size":6869,"data":"","first_seen":"2026-02-10T20:49:06.318685Z","last_seen":"2026-02-11T22:48:51.327165Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gg657.com/","fqdn":"gg657.com","domain":"gg657.com","tld":"com"},"ip":{"addr":"172.67.223.235","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"225d498e8b78e1995345e88c8c3c63e9","sha1":"28ab8364a4de9394ef5d33f804d7016ebd070412","sha256":"dc89dde92affb0430d5cd2145b7cfa557b5f99c91cd946a3ee6a39a0f0c29528","sha512":"5e0832ff892c3de76298a37ba65e09964a47ac24452642e735cc5793aa9cfe530a129ce0caf163aca2938623bee1c18542738ade82eafd06bddc3fa51b00f19c","ssdeep":"","tlshash":"64c04cdbf1460c3005df757bb21443847c14d0069c125045ed1c36914535e49c9fffa9","size":149,"data":"","first_seen":"2023-03-09T21:52:33Z","last_seen":"2026-06-05T02:30:33.695747Z","times_seen":261,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gg657.com/","fqdn":"gg657.com","domain":"gg657.com","tld":"com"},"ip":{"addr":"172.67.223.235","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"7d3f8fb6cae8c1688ed95ede81d585a5","sha1":"b4a5641ed1f6553cb93b70b980508e99d351e701","sha256":"88359ea66fe936b64f5e3e2ef5bca995d09e2008d46b1826a312488517fa6fa1","sha512":"ed0c7cf147a1f67937173e869eafb5dd599142927e24046361c38ee1e22807eed5011f52f9021c5d78181ba1a502d69683d7f2894c9af8c31ea8d65f6d2dc86c","ssdeep":"","tlshash":"0ac002dfb1460c3106eb66bb7210c7c5382492021c9221459f1c26995575e89c9bfa59","size":167,"data":"","first_seen":"2023-03-09T21:52:33Z","last_seen":"2026-06-05T02:30:33.696725Z","times_seen":260,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.niubixxx.com/seo/gg.js","fqdn":"www.niubixxx.com","domain":"niubixxx.com","tld":"com"},"ip":{"addr":"104.21.85.171","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"715790ea16bb9acd2a00689542f8cba9","sha1":"db0deecd4c9beeaa8ac3c742ad195eccfb6c1213","sha256":"e7b2e617225d163bd7aecfbc10de6197b54d3830e838a5cff175bd321a80bb0d","sha512":"a55c772a8437fe33cca8c7aa208f579ba62c813d25c740613dc2d364d256c703b5431d1809986fcdca0f4e01d290fc40e3eedbb40ea7993c8f2075e22ad0316a","ssdeep":"","tlshash":"ba31922b07c8501b5a34d1dfac348b49b676c4bfeb079c90f92c18a03b896a9049e6c5","size":1716,"data":"","first_seen":"2026-02-07T17:10:36.684262Z","last_seen":"2026-03-01T06:58:06.971884Z","times_seen":27,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.niubixxx.xyz/static/js/_www.js?1300081","fqdn":"www.niubixxx.xyz","domain":"niubixxx.xyz","tld":"xyz"},"ip":{"addr":"104.21.58.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"0cf8734e6c06dd7f151dc3a85d183801","sha1":"0fe9ba5ee99266634916c72908f514660ce23142","sha256":"4d124ffed6c610238127d63c3470977a11650d67a84e0b55bdfbe19f3eb61cbe","sha512":"f0bc0fd4867888af76e58e3e4fca4fbba6ae158f19c7d8686b67c94717cf2bca076ef67cd6b1f01c876a503d30a15744ebb76c8e3e3b2730ef7fcd67f368f308","ssdeep":"6144:GMmRGaGWMYosLfH76LZLWPiICWp17y8+w8u:INtH/7y8+w8u","tlshash":"44244a887750b0a152e721a6526f8206b3776819b90ac0d4b166d8e77dbca4c037fffd","size":215004,"data":"","first_seen":"2023-04-07T06:53:28Z","last_seen":"2026-06-18T03:04:50.883433Z","times_seen":269,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.niubixxx.com/seo/hengfu.js","fqdn":"www.niubixxx.com","domain":"niubixxx.com","tld":"com"},"ip":{"addr":"104.21.85.171","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"709816febddca0878a385da1d39fa11c","sha1":"266cb27ea749757d88e32dd811c7b108795547bb","sha256":"41d49334e37d0e3eb04e3e3bd401a89a8a83aeb35ff56aa3754777f2d79eb7a7","sha512":"cad47deab39eb78395a7cc097a02e38a8cca7f70dbe3e8bb5b53bb5eb01a148f34288ed18b8e39747870f012b6040e545787b15f3ad56d1664deb0df303f101e","ssdeep":"96:Kk7GF7GEVRWAtV1z/bwphMX8q/Kc2I4kO5:n7O7fVRDtV1z/FKJ/","tlshash":"5be1e2e316f1a2365b2543c0a4eaffb8f063f4fe9d438d65ccbe1a344480631256999c","size":6869,"data":"","first_seen":"2026-02-10T20:49:06.318685Z","last_seen":"2026-02-11T22:48:51.327165Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.niubixxx.com/seo/allbottom.js","fqdn":"www.niubixxx.com","domain":"niubixxx.com","tld":"com"},"ip":{"addr":"104.21.85.171","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"33270951f01a3a4d875764a26da9e3e1","sha1":"1ac0dbf89c7779d60eadf414032fd5d38330a005","sha256":"5daa0fc6b414fdb5889dbf09e2b6271ac0c7310b8ac17d96103c0cc20d06912e","sha512":"a1ada9177725cf78fed2126666cc7a314794a996f7a504f1a39633b786dafdf8f3557dfca44f4a13ac7868b49409bbae8c65f5f91f49360d4063b548154e15b2","ssdeep":"","tlshash":"25e0abab0eb2f128263441d5b864eebc75b4c07aff4398c2ccab0c304084bb9041d980","size":415,"data":"","first_seen":"2026-02-07T17:10:36.673584Z","last_seen":"2026-03-03T01:28:14.176336Z","times_seen":28,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":[{"md5":"1a05878383ea5dda25f2d0686ef2af7e","sha1":"3ebf203f705073d9dc53eb0a06993f0dc219d648","sha256":"4c4ab94a043cfc5c1cf3f174e3dd6df9949fa15bcdf904267fac929404c7516f","sha512":"e2595ca7d3e4a523bf99970f189d88b01d979c7b477954694b3ccbcf75f9b49828ee68abdbfd85de6b1578354dc74381272a962f7e221e3e3e7f891dfd81570f","ssdeep":"","tlshash":"15a012839a846112021021cc84819a14040744d59c8976825412080aa400244550e0ce","size":80,"data":"","first_seen":"2025-12-25T23:55:21.652479Z","last_seen":"2026-06-05T02:30:33.766943Z","times_seen":148,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"a0f56348411a00e60703c2effb03383d","sha1":"c13374c472356343a871a8267ad1be729510647d","sha256":"76e7464fd5b1e33a8abc378aaaad487523806aa2c77ad4cf3e22915fb5845ae5","sha512":"2d1a5566175b8f8150d3f37113095c0baa6488a3b45643046afbeef67f3b4b6944a25bc3a837bc3ee2b3b258e319385e01b07b290d4926840a73ca8c48a86ad7","ssdeep":"","tlshash":"7ba0222b0ec3c80880008ac8c032e00cc002a82fc380cccaccf028a23f00bcf0c2f000","size":85,"data":"","first_seen":"2024-05-15T22:59:32Z","last_seen":"2026-06-05T02:30:33.702873Z","times_seen":242,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"fab6a6691bd94fc9740c7821b363699d","sha1":"74303ee9a680e550bab7ab3dfc715582411018b7","sha256":"094416650b284f7ba1fe23bd7046c3986a458cd62e3692be9199cb4193e5e94c","sha512":"274f0c9800ff59e76436c3daf8a965529c9e7e2282f6b1d37c183692b579bbdaf6dc492a2c1be218de0faabc1b9878640e37a38b31a1ad723236993c1a9f6307","ssdeep":"","tlshash":"65a0222300a00a8a0388e08cc000ab0a000320b00f802002e0208c08380030822030ce","size":65,"data":"","first_seen":"2026-02-07T17:10:36.730805Z","last_seen":"2026-02-16T23:56:25.182914Z","times_seen":14,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"9d8c104692c4b492eb1f8d62edd24f84","sha1":"ebfc42ccabc6abd460882bda97e3d87ee2775cda","sha256":"5bfed0acd477f2643dc04040f083cb9d5c247764ce42cdbf284247243aef057c","sha512":"924f234e5ec889356cfefc6ad357b0b09da0cd2da1da9a09d65d56d5005e0801d0601be9c904582f50704ab47ebae9f5c3c81f4a22819cae5f073533cd464df4","ssdeep":"","tlshash":"35a0228300a00c0a032ca28cc000ab28820320f00f802002e0220e08380030820020ca","size":65,"data":"","first_seen":"2026-02-07T17:10:36.703887Z","last_seen":"2026-02-16T23:56:25.16014Z","times_seen":14,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"449bb0a3e74ec9c2e192c5509215ce7b","sha1":"96efdc84980e9a9c65337ea9fe523a960f3cdec5","sha256":"6987480625446a153f2e4db5f9e0da127dbcb3b94e164c47abc2a9100f837d01","sha512":"91c648bc4eaa5de049011f6e7695d109e286f604d81e862f6c4711ecb97501e193cc490fb6e2a59e8929676952d4c69251f769d72dfdb3b7ae65001132434792","ssdeep":"","tlshash":"a9b012b38ba651187219c0c4d401febce00334fdacd3b008c8f117065e043a55706dc6","size":109,"data":"","first_seen":"2026-02-07T17:10:36.707324Z","last_seen":"2026-03-05T06:48:59.450345Z","times_seen":30,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"61ebcd325e24bc721b727b7cf6860ada","sha1":"03dfd01a0a86dbc04fc3580c39079977007af025","sha256":"0273c907d7feab85bd9edfdeca112269a0c84df658b3eb37b937ff0f7a8b6a9c","sha512":"cfd0cc02d8ff2310b1fd9b80783fcf95dee09cb6a3903c23d00429e00b9f0ee24d48652eb3f0c11700846bb6996341ae1b7ac990e9a3c66248e1fb482b095cea","ssdeep":"","tlshash":"76d0a7f372a39b6112c951b6c446be54c80774c579c3126588563976a518a045740504","size":218,"data":"","first_seen":"2025-12-10T09:29:04.286759Z","last_seen":"2026-02-24T13:02:45.444393Z","times_seen":77,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"73ca9f542484d1fb14f4e864d61b204a","sha1":"959fa6e43d1b3a6b649815007988e3a40c716896","sha256":"7323912a340acdcf0d7a5082e9a8191c7c5d31477b29531ba73ecce210b45a68","sha512":"6ac1bfcdfa8710b1c7ad2f73bc0aaec152201ffc61864168216d1d41adfbfcbe73dc361aa5c93198922799db49bbfdf3b8ae05c9a609ff6e6b95eb2d90325a2b","ssdeep":"","tlshash":"84d023c751ffab4d119f49d9500dfdd4900570c81dd53681dfe457247504b14954119d","size":216,"data":"","first_seen":"2025-12-10T09:29:04.316993Z","last_seen":"2026-03-28T10:28:53.933656Z","times_seen":96,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"470ccc443705d1c5ef967c4689579f9a","sha1":"b122b4ee3f6560e4a7c7b523fab0a4e2ec3724d6","sha256":"8457acc66ce925234cbf3c72bb179dfe94b2423efe42bfbed2acd564770dcc10","sha512":"89443cafa2080cffcf40694a5d8852ade6ab16d6b6a577e3807502f77ba30f042f568b13fc137cc022e325de8c90951ae5404b887a94a1145411d79fcf88c842","ssdeep":"","tlshash":"48c02bf3918ea136610842c9e007ff98e00634ddee81b804c9f7a3647a00336dd1145b","size":143,"data":"","first_seen":"2026-02-10T10:54:10.84995Z","last_seen":"2026-02-14T23:15:17.615132Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"9bf6f7ea027d82ffd3e42c8ce420975d","sha1":"d8eae26df14cd88c56897a4ff71d5a4052b4885f","sha256":"348845d8804b5c895e2a2938423ed17b2dc4cd3aad9f966c13e0ed89223b2f90","sha512":"e91f142b2f5958a9f484138cda59ad43865a7c798d6bd1ae312b84fc58793978209321983c4236b8cd848a4335fd0daf10ff68f4ec137798e1d1160e3b0ed71a","ssdeep":"","tlshash":"81300000000000000000000000000000000c0000000000000330000000000000000000","size":5,"data":"","first_seen":"2023-03-07T01:03:35Z","last_seen":"2026-06-07T06:02:26.710484Z","times_seen":5122,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"7786e61a6e0432d24e648cc32388d1ba","sha1":"5658d8c4d0fa07b2044121c3f2f8abfcda84a24a","sha256":"7f2db5a971bfe321679f49abb9ea31063d06859f167016709ec9c523cfc3bca3","sha512":"d16b7060de7f2ed2f8c04e43105340f65d5ce6e921651d89b6e181fabbb048884c4a87388cd7bacf81187a861f2f1da15d5461ae5b7b5a631d8279228d1ed904","ssdeep":"","tlshash":"8aa0124399841536023026ce44419e14480756c11c8576815c120c0aa410244540a0ce","size":85,"data":"","first_seen":"2025-12-25T23:55:21.645059Z","last_seen":"2026-06-05T02:30:33.744095Z","times_seen":148,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"fc50190bf7e784c19f031634161f2ef3","sha1":"6bed5bdc4c466d12a108331e2e9ac90b21680c46","sha256":"23747f3b2797049f6ab8b369f07c960a1db21b1b4b9f98b120e352578f5f032f","sha512":"50be5988573d360511387bc34dd75fa9864749b37f41912c9fec958fc839af503099efffaadac17a6cd624eb31cf8d11e5f8ab150b888f3b7b8cf312290dbac6","ssdeep":"","tlshash":"00b02bb387801574112540c0d081bea894033cc8cc82b48484a311175500310638a089","size":128,"data":"","first_seen":"2025-12-25T23:55:21.615782Z","last_seen":"2026-02-19T12:35:04.071333Z","times_seen":52,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"dcb97b73f43cb8fae08d5c675c32585d","sha1":"354597b4c2c3ed7247d9775290f86489c73884a3","sha256":"bc05cef509c9b796919a111858799670c42728e2084ab8ee770c07b4424df3c7","sha512":"a1b817b8625e9eae581c16986212119a758a9c63c51c6a98ea18a50049c866a0dbec41909ad9f9f7a37c521fa9ae739f5eb16cedab6f9ee52a783d5b9575b175","ssdeep":"","tlshash":"81c08c7382a1a039351a01c0b69aab5ca00339c84ca2784084b7466a7200330428088a","size":140,"data":"","first_seen":"2026-02-10T20:49:06.374282Z","last_seen":"2026-02-11T22:48:51.366552Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"77108bcdaf600c8860ba7368ec389458","sha1":"128004dea03ba86fbc62ab29257e8a1a351bd032","sha256":"cceffe55268824e1356f1899f0e3f799aedffb4fa0264aebb940a7e9232b2914","sha512":"97c103a62257d18ff80fe25bc5db1d68084ff91d17248fc8fe663c72a1a2bf46fd29dffde8268401a1eba900db7a99a50e824a13aedddcbcb128d9572784ac8d","ssdeep":"","tlshash":"23b09b674752d4542b454185e166ff7990073cc89c5160c9c4f51b196240737d615145","size":129,"data":"","first_seen":"2026-02-07T17:10:36.724229Z","last_seen":"2026-03-25T22:14:00.889312Z","times_seen":43,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"e85c3c34a0726144f78dcedc9a77b2ad","sha1":"54ff32e7ca93a3825ef540eef03db0f4631ff51b","sha256":"f9ef46068319850a5127a268140908cf4bc72c5e5418b77545e3c359587b9a0d","sha512":"70a0fc15b739d207eda6642590c8e8ed5e9e1631f9e3a36d68c28e8d51dc68a0a26be62c72ae6f5393975a40ec35fdf3223c487fdc1dd133e1ec8864ba7928b0","ssdeep":"","tlshash":"55c080635d97d5142564c0c06656edf4d01177dd0dc752c18dbc26c60110b154761ac1","size":165,"data":"","first_seen":"2026-02-07T17:10:36.732019Z","last_seen":"2026-02-11T22:48:51.359134Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"8fc4c400d4b36f76808eab3b9099d879","sha1":"dcca5ca04c3acd7bbedd16c4d7184df163c20253","sha256":"935b25560c59e410b1152a68dea79d8a2c6ebd4254bdc1df2b1814df309a8812","sha512":"3e1dae7b874c9ccca049cd2d45aa1233f8b12d793c13a32b21b0a41bd918e536213188a608306383939d4c73a2762286d6eb74227d930ae797ba9a9fc9056796","ssdeep":"","tlshash":"a8c080e393939157922c51c0f40b7a9db44634ddfdd5a940c8a5fe305b113246126155","size":180,"data":"","first_seen":"2026-02-10T10:54:10.825217Z","last_seen":"2026-02-14T23:15:17.590693Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"973128534859ea2a3b59128f2ced41b2","sha1":"687d461be2c8929918713b4f3fc113e097823750","sha256":"3d7abafe077c24a0f818a0635c21502976e65554941cc3907f8ffc9a51ac36bb","sha512":"5130ff8458238fb308399a5d565ad35f12a3e4d347ec319df963477a9635fcdaa18d093e900ed71caa9734e2b4ecce702836a749135888c0f7e1ecc39f8f54c1","ssdeep":"","tlshash":"b2a0113a2a22a02c2c302003808088082208028e332e2cc28ea0ec32aa0aa880028880","size":78,"data":"","first_seen":"2025-06-04T21:28:34.780317Z","last_seen":"2026-06-05T02:30:33.78567Z","times_seen":206,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"5d16392923dfc574b5240556c128d2f5","sha1":"1bf1c89609ee90e8c52840b9c27fb17ef01558af","sha256":"f705a7ce64a1f53179772943f1ba2225002414e5d8ffc0f6ce788e8320362ab8","sha512":"d363e37fd5e32f9ae85a48b1d3f0461062d571ee4f447a36e7cfbed4cc1507bb324303ea520fa532e98a236bb9f34b873261710e5bb3768016e825f052be7e23","ssdeep":"","tlshash":"0650000c0000000c0c000c03c3000000000000003000ccc03c00000000000c00000000","size":9,"data":"","first_seen":"2026-02-10T20:49:06.380351Z","last_seen":"2026-02-10T20:49:06.380351Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"78d0079f127ce4640b78af6d87f5d127","sha1":"3f4ba61f1f05f6ff403e20196344d64b78252970","sha256":"4bde0c88ae3846e41e1575538b767aee19d873c1642d850e54b537fdd99de459","sha512":"b35c50899d13246d72f14d6f809d1b6fa0695fd1207e709954fe111567a9f8877d9363981417b33201f82dbc482325d4b362d68b449019e0a40be5c0a032ce01","ssdeep":"","tlshash":"bda01213029028150215d08990045784450721bcdb421051a4610d163a4035516020c9","size":84,"data":"","first_seen":"2026-02-07T17:10:36.73514Z","last_seen":"2026-02-16T23:56:25.172175Z","times_seen":14,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"39ee278c2440369fc3f748f2f8111ab5","sha1":"501349a404c69efbf7f39be373e8ca81d5fca57e","sha256":"0b9adea8c35c1fa164eb179265ea00744dd6073cc4b1c7ab95ec82556a2dcf26","sha512":"ecf65dc163b1252b173fd072ab08cdf0a523b2e21de6e5c69e64965e0606ae0d1a654eda021b2ce3c873954f12eefce308f07c086ecd8767d5648f398a8a0f2b","ssdeep":"","tlshash":"16c02bb3dbf182da81294187a1f2bfb4900234e8dec37000c0e5651401503544282089","size":142,"data":"","first_seen":"2026-02-07T17:10:36.723113Z","last_seen":"2026-03-28T10:28:53.966558Z","times_seen":46,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"0a6f21070d132c169f62b90338157582","sha1":"c8da3d3362423d7f4d0a629342d541806528119a","sha256":"33551dc47b01981e92ae9b6b9f094fd8b096c27d6d6e9daf1370e1bee76ad173","sha512":"b31de0fa2a12fe56ada6c936a98a2bf40595456a30cfa0ecdbe8e3f544a205f59a8b4dab3d31ff527fffddf210e4878f16bc2612101171c2d6c786d25bab9a03","ssdeep":"","tlshash":"3bc0807746459577751640dde45bff94f40139df4ad57d41c47a6723040032852a5155","size":168,"data":"","first_seen":"2026-02-10T20:49:06.383647Z","last_seen":"2026-03-06T23:27:18.09791Z","times_seen":26,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"b1380471464a8aa30c773afba68bd189","sha1":"fd8001f173a1866056383c53148c76b9f980c4db","sha256":"6d6f8c6a14af5e969e3d5ae5290223eb599fd566a9efccec5b51646ddaad0d74","sha512":"b7591a9ab814fc936f0d4fa0d453235dfbb376e7554806794c3d10e1602a0a5f3d9627be4c2272dabd7962c3d852b8869a4d89b3542fb1c9d256bebd1260d435","ssdeep":"","tlshash":"f4c08ca343e1d8285725c2c0f152ef24e00329cc8ea26084d8eb022622023258b01448","size":150,"data":"","first_seen":"2024-08-01T19:59:48Z","last_seen":"2026-06-05T02:30:33.82122Z","times_seen":236,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"9ffa3fd9e5a340cb2419abb101b19cde","sha1":"e796eb78f23044ceb5a3c16cc8a3b7bc4f1b5569","sha256":"df40f0fd4c3a926cef66aca8ee16a4f8c4a325860240337b5032a20ffe6b18f1","sha512":"67ab1e2236a8d3d2f5b3bd9018dc057ffd73e31cfc279007f695518ad6ced798f083a0c3d8dbb2d9177cec25393c9aea6bc288dfd22c694eb473267b7cf396b7","ssdeep":"","tlshash":"57c0c0de83c9c80c111bc8c5c3cb5f8150043cc8c8bf3444c1330301d9003233e05250","size":185,"data":"","first_seen":"2024-05-15T22:59:32Z","last_seen":"2026-06-05T02:30:33.742887Z","times_seen":242,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"87c859b4b3b86bf29fe4399b8098ec0d","sha1":"8b58533e1664ec6b548eda366efd18b620149fda","sha256":"4f46abf7b2bf6106aa34596051ec909a84da28bc5c1d8493dfce41ddd2407692","sha512":"5b28faa58826f8269ae610780d2b7fa9257566ace29da64b09d5a3c8b981a2931b89902e9de3f1c8ce107851b5a6070af3c79030933afd8452453ee9d4e76bf3","ssdeep":"","tlshash":"b1d022d3a3c15416677a0080e84b7cf880ab68cc4ec27945e8ea3b551988ba062aa0d5","size":201,"data":"","first_seen":"2026-02-07T17:10:36.727266Z","last_seen":"2026-03-06T23:27:18.098713Z","times_seen":31,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"5c0dad64548a15786e4644879c07ff58","sha1":"9e953e6cedda9b9142ecdc92bb0e7d64c8f0dd74","sha256":"310ddbf56facc1fbd4d11023974e44cf7772b6a7d559262c8ce9123eacaa8cee","sha512":"9796364daba1f6cb5876dd26c146748a6e221ed0dae3534ab8eac46dcfbbd8bbb7802897811551338b6834907669140cf8b3d0af6928c3e1f92f2b49ad37db94","ssdeep":"","tlshash":"d0a0024b029fc9b66c2585d8b3a98e90e4126459c29284d5dfe74b172a647239527101","size":64,"data":"","first_seen":"2024-05-15T22:59:33Z","last_seen":"2026-06-05T02:30:33.823239Z","times_seen":242,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"db94c29b876a67eaa3ceacca37d8a6eb","sha1":"66f703ba92af44444f94349710ed9e73c7ef6938","sha256":"258fade9c3cd6ad7a6f7191ffc3ecc02a3dc117c9619c00a011928a523d48800","sha512":"63e2c85f949ea0dc39b64eeb99dfa8c22107c4d508be8e61f8a8b01dad362e9240056c7888df22928a7779513413f9141e3a516abbe5ab3346f7bed9f777483c","ssdeep":"","tlshash":"53a0124389841d16022025ce44429e14540759d12c85768158220c0aa800284540a0cf","size":85,"data":"","first_seen":"2025-12-25T23:55:21.655597Z","last_seen":"2026-06-05T02:30:33.833352Z","times_seen":148,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"a0196d79ed7f0a1c11dd8318531ed039","sha1":"68f87176de76abf8851aea0a8c6250837862fd09","sha256":"d466ed52f68d3a8e087e741389bf9469d0d64f13d99d1302ea7aeca828af1abe","sha512":"23faa0291610cf21b8d4522950e549ac34448df53a39381847e215b34b2f7851fa7c74e3684a95dc56a19ec4f90aa8af858ec16d69a648b4d85254ee9afc9db2","ssdeep":"","tlshash":"8fc080f34741516d524dc0c8c057dd68e00378d9559f658084bf351a1014f5247550e0","size":166,"data":"","first_seen":"2025-12-30T11:43:03.34338Z","last_seen":"2026-03-20T22:51:51.524431Z","times_seen":70,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"340399b28711a758101990c417dba81d","sha1":"43d3763c25cb3d11799ae300ca50a9b3042fc55b","sha256":"d807c02566234cefb9c781bd0c3d45ad47bc86f160fdefa4aed786064d34e29e","sha512":"e6f3941b6043ef4cda2c37b1d2ca07f4e5bdc744dc12822edd7fb3fb826742cba85ea98e18630379ec79c0672b08ebabe00e55af146da26644c6ae0aacd59dd6","ssdeep":"","tlshash":"43c080f2cf85c63b517f0588e299d955d04314ed9c82f806d465361d7a0b751d11e554","size":174,"data":"","first_seen":"2026-01-05T02:20:38.258986Z","last_seen":"2026-02-16T23:56:25.160685Z","times_seen":39,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"77d49192735e37a84a5aff61a61b2dbd","sha1":"e7273321962019190970dd7ef0b1384fe9841c05","sha256":"11a8d78501de4d88a4c93082122ec48f5d9904045354ac69fd237920e80074d0","sha512":"02e423f6b03bf78d2ea0d7007b250ac898c648e7723794c781e1ce533c1b81b7f7ac73186da18b0e3a0f2622d53342e40b1f4d49758b4b22bdc26edaae0d9474","ssdeep":"","tlshash":"19d02243c281800a27098888f407fe64d0033add6c8b2a869abe7baa32452fa56144a0","size":199,"data":"","first_seen":"2025-12-30T11:43:03.26636Z","last_seen":"2026-02-13T03:07:57.185074Z","times_seen":38,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"45dccd5466b477673f9cce4566b8a193","sha1":"c6852edaaae20c2fe3caac9b5818c8241805d68c","sha256":"be515ce9a1149be64c9fdbf60ed109f3ff7536c2356a7b688a1cc0f3a6d60d6b","sha512":"e9155047c1bfcd1e677da9c0633e046f8130ebc32ab33ccd996384c5b642d63c756cf7b3cb3fa6239ec7d44b274c87d959bbc1dc18fe9da94c8a833eeaa07e35","ssdeep":"","tlshash":"cac080934599f644627d80d160f3add5e44279c65dd37845ccf6154611403558584641","size":168,"data":"","first_seen":"2025-12-30T11:43:03.269881Z","last_seen":"2026-03-20T22:51:51.538711Z","times_seen":70,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"40fde9df4b62f93b5b33cabf47f27727","sha1":"78c447ad03279385c9e4a176c978dfb227224fbd","sha256":"a52bf7c73d0656b2a73b3f33c13d092def974835f2305402ac472e496acce688","sha512":"6de70f93b01053e2aae7e30e63ab0a5517f7991bed06004489feaef4d6864159dbd7b26db60a8d68fb6f7243b45611548241697c0906046dbb0ae8091a5d1581","ssdeep":"","tlshash":"8fc08c6346d6963baa0d02c8d1426e999006bcee6e81b001c0f91a681904b24930a004","size":148,"data":"","first_seen":"2026-02-07T17:10:36.746707Z","last_seen":"2026-02-24T13:02:45.457954Z","times_seen":23,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"89fd07cdd5243587a429c0d5fbbb7e0d","sha1":"677c30e7409c037381cf0ad8ec1ed3db87df2485","sha256":"58723d6c0b390927a6362e0128519666b496b9219f7bafd942574af74bcf4cca","sha512":"9776f929f61c85b39ab440dcc1316a7ff015c3e39dc6357863e8335a994c8a27b5c9dd689425d30dbac01aaf5572c5cca5c16b3800b19304df7e445ad0fe4166","ssdeep":"","tlshash":"31c08057c1c484196a2950c8c9167fd4c50529debc911190cd252f443525fe73783150","size":169,"data":"","first_seen":"2026-02-07T17:10:36.706135Z","last_seen":"2026-03-06T23:27:18.094255Z","times_seen":31,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"ea8a03d6b5144f910ab92ef9883af1e9","sha1":"77585dbe1015df6dcd7bd99459d8617ce7278e8d","sha256":"83eb9591cb89e2101a017c7548299b0695a9870d438cae894122ec59ab3a50fd","sha512":"e9f0a204c4827e9fb6772b419232102ce6cc344f069aaf8f93fc8b95a25a6549bc72365141f5b281d5239a96cef74035fea6743ac3a42a412a118be896012af3","ssdeep":"","tlshash":"1ed023b35192812533294471755d7c79d01e2cdc458274116af6352555406648545450","size":201,"data":"","first_seen":"2026-02-07T17:10:36.702494Z","last_seen":"2026-03-05T06:48:59.433183Z","times_seen":30,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"32e6e140ef90d4db50fa0d01882697d8","sha1":"5d005d53c9c4631b4bafe2391ce7515ff68ba8fe","sha256":"66daef9484ecd2b749590cf5a279dd62442b57c8dbeec8470eae97a013067a2e","sha512":"e7982a8c0433e008396c99f7d1e5a168bf4092c728c27c3da2f5b6d59a11767c78dfcf9fbb404b9d4cd0297462d891eef03bf182f861c0ef88a2ad4bb138c97b","ssdeep":"","tlshash":"00c080975785627c723bc0c0d2d7fdd4d0072cc944c33554cc752b0750953549f51791","size":173,"data":"","first_seen":"2026-01-02T13:05:57.594613Z","last_seen":"2026-03-20T22:51:51.594343Z","times_seen":68,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"b2cf6e5b01dc32fe198592bee6641812","sha1":"8bc1ff48eddf86c3b8c7a6cdbb6d1771c96f2d99","sha256":"a15b2aa4bcb67bb5cbd556ec53fd0f44170c0c9cbe0050acdbcd0e34c68e4eb5","sha512":"5a6f9c8315c433abbba0bee55b8025c67a0306b8f5c30ea58a0ae14cd48f799724c6dbce4a546339b639f483c961f540c5a6a22237016b6f5548c1af9e8602dc","ssdeep":"","tlshash":"bdc080534ac545b5633d11c4c1556f58e31135c45c91b4fad5f526023504314560d285","size":160,"data":"","first_seen":"2026-01-29T03:12:00.679399Z","last_seen":"2026-06-05T02:30:33.760834Z","times_seen":116,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"8e1958e9b16270204f93054c26486696","sha1":"15bd30f1d338dcfabed181f09f04c6fd6df7d00b","sha256":"89ae8581154ab0f13e200a6498043b47b4aa7eaa08d357996d613339e536e76e","sha512":"c3d5323bb10a9c962ae82dd8048e3c0db53cf6834d4c49c69b2bea93ec7fa1806ac8fbcc6b60a9cb4bd14747332bf48e7279013989e36874b42b285680e87548","ssdeep":"","tlshash":"93c02b6345a4c87a511d80c0f05eff8ac40335dcde837080d0202b0071047183222841","size":139,"data":"","first_seen":"2026-02-07T17:10:36.721263Z","last_seen":"2026-02-16T23:56:25.162649Z","times_seen":14,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"5437a660e6231664d25f5553ff258d09","sha1":"188932c8a5eb59da51d8172eb7728abe21f73929","sha256":"6369717baf589beea5aa8ae08f39c1a114fd1e8835c04fb9ddd96ddb1b45854f","sha512":"d2cb4f59714576bc8671a89bd27bc7f4196030bb31cadc49253a7f7496c3be0464c5afaae881dfab7ecbb9ae9a0af17ebad2260a9cc2097a56fa6739d17b7308","ssdeep":"","tlshash":"b3a01243c9842212221436cd49419a14140780c51c8577c258120c0eec00340540e0cf","size":83,"data":"","first_seen":"2025-12-25T23:55:21.610269Z","last_seen":"2026-06-05T02:30:33.846288Z","times_seen":148,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"ee5d0ea4a97208caa16f04d86f6a549d","sha1":"2c1c7bc9a51e322ab67f7bf49865eb21cd4d0fd8","sha256":"9a7c492bb00c96adfeaab76ef10ec90a44a29293f81ac9023c34df800a9778ea","sha512":"02cfb9059815f9424f18ae7664a1f5b0ba5478baf6b7eecdd44feee6078fadb8a9773439565aee286eb40a47cfd2dc9f7402507d658f048fb1ceb0528d98bada","ssdeep":"","tlshash":"35a0128389841922022029fd4481eb15040b40c12c8576865413080ae400284600b0ce","size":83,"data":"","first_seen":"2025-12-25T23:55:21.625066Z","last_seen":"2026-06-05T02:30:33.80004Z","times_seen":148,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"5ea445190d329c8a910677e1d0bac8fd","sha1":"30461824c0b5ff6c486a4467552c4df55245206a","sha256":"84b61b423587768d387538d40f95de96c5afdc8ef4dbf24a300c101612194965","sha512":"e5028ade06030d0713e8ac5632c2f90505623cf40b0e14f7f6851aa456547606288e3bfbaf46f6cb0fa1ffd3d58bc04ed10b03e0c9e153cced3f53afdaee7259","ssdeep":"","tlshash":"62a0113a2a22a02c2830200b808888082a08028e332e2cc28ea2ec32a20aa800028880","size":79,"data":"","first_seen":"2023-03-08T20:17:34Z","last_seen":"2026-06-05T02:30:33.867565Z","times_seen":274,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"eb5a9145420a18a8fa6e5a9bbf3464b6","sha1":"d35d7bc74ee3c731748f711ee2cf4d975a29a9e0","sha256":"2aedb32bbea1df4657ad56563660ea8785e82619d62081906649b42457991406","sha512":"e011aa2cacc38e069b3cc9e62d618a4d029bc956d7469c836e185acbd7f2871d4a1405b64d527a62b109365edabdf268493be3157fc254090260e9e0ce5e5426","ssdeep":"","tlshash":"a6c02bf313c2d15e110880ccf015fe28e83374ec4c63648484b8691c1700718426045c","size":143,"data":"","first_seen":"2026-02-10T20:49:06.399886Z","last_seen":"2026-02-13T03:07:56.531105Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"47ba5b1a9dda4592b3749975ac23a9ad","sha1":"5d61df61419664d74da3b3297bf0fa6743157319","sha256":"df19bd6f11b598affeaebca3c292efce21c0b3895600ebc3f94330682d465751","sha512":"2a998f0a9258d54276363c2329201d36a3b4ac98f2e095df821ff1b91beddf136220483c18b0c8f162eb1df2e4d801302a309380ef5e9918ef78a23a3c14e10e","ssdeep":"","tlshash":"3fc08ce346924721b21a00c08556bea8e40338ed8ec3206384b22a16d90c3b84b80160","size":154,"data":"","first_seen":"2026-02-07T17:10:36.743021Z","last_seen":"2026-02-13T03:07:56.63098Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"c39f37791295cbe614d242a90a3e1d8e","sha1":"50fa490feddd8a114c5537aeec74ec97d86e3f0e","sha256":"9b956f57c730b110fd7e047d2b77cea25a6ccac8a3b4c2979f5b861ec901e7ae","sha512":"a2c09b1a832451dee2b1c99ee0b7fc942b8e0f011f8a8c4ccb469daf34552859d5b48da3b8c36827ecd25a1ca5bb956762b4878f78e64c92b500e903dc1cad67","ssdeep":"","tlshash":"d370008228c000223023008802e8028020c002038c80288080f0822003808000082c82","size":21,"data":"","first_seen":"2023-03-09T21:52:33Z","last_seen":"2026-06-05T02:30:33.818477Z","times_seen":262,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"61edfed442275f26f5ec8bcb52d53af9","sha1":"40a3a7720bb3c6659bb043a20582e42af36a8ed4","sha256":"47c0639816889634d0dcb4984f3fcbe6ca957388cb19ce12135cc05d53653c81","sha512":"a107ba6d317c83137b8b85989a0f2d2662bf2fdb1c3c6f346c84e8e505b8442831cac0b12c947a2f8bbdf5e07c83ba608c1d8d61d26575bea046d4beeb8ff353","ssdeep":"","tlshash":"adb01253da841112022021cc4a41de68080745c25cc6bbc26413881ea400344710a1ce","size":89,"data":"","first_seen":"2025-12-25T23:55:21.64425Z","last_seen":"2026-06-05T02:30:33.79081Z","times_seen":148,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"cad9f2919d0708e7941ccfc6a9a1a03e","sha1":"0be5952a6c1102fcd4291d5794145cd3a4a05acb","sha256":"5d5287801225c6f2b788658d2e1fb68adb4239b56caddad21f35c5e40181d60c","sha512":"9ae27fed7607deb99a7156dd87b70e27ac696cdf5b2154f60ca7e2a22b5b5bb0abb966b2013a34f1c81e473dccadf8177f19097df23939a9fdf10d3ab76f036e","ssdeep":"","tlshash":"1690041f153771347034d007510454cd0140c003535307c5f5331d75544d45d35300d0","size":41,"data":"","first_seen":"2023-03-08T20:17:34Z","last_seen":"2026-06-05T02:30:33.701745Z","times_seen":274,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"488d3487052a21d3883877370fa65019","sha1":"8085ea00ce070110f76d104b7861f36056d25646","sha256":"80499f0d273155515b6627b0b96ee2d6d5c290f261be7a05241c58b424d8e3fd","sha512":"97fef6eaccc0ead20257e05cd3b10ef5f786ac35ceba109a0568cdbe1a52f92aac37e4c474820b073d977b5cd5b5a0cabf431b7762fcc460158d498c81c28770","ssdeep":"","tlshash":"8ec09b63ced56d64121545c4d1cabf78d51275cc5d913605886317163600758d326149","size":135,"data":"","first_seen":"2025-10-21T10:53:56.568947Z","last_seen":"2026-05-29T07:52:36.240438Z","times_seen":171,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"2277d9b6ffd3679d8e2ccf9928fd94b9","sha1":"973c2d5d25f18ba35736f0e5df1881ace0f31457","sha256":"e8a6985ae0da3071be2aa48435fb9a1a1c1531ef0a919884e87e69ea0ae0b9ba","sha512":"0e79e83be3d670df41cd6cd6ce604b9a34e54d30bb5db446ebabbbf57df1a805fce99e894ae4ba0f0ac8729e3c8ca076803e8899a3edc9a64fe128192700d894","ssdeep":"","tlshash":"2cc08c9743a7a2b807585286a1626ea8f0412cd9cc47f488c4f21529a944234c606781","size":154,"data":"","first_seen":"2026-01-05T02:20:38.246168Z","last_seen":"2026-02-24T13:02:45.462679Z","times_seen":48,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"540f992b1bbe14799ff2d9116f3b8068","sha1":"5e2c236b506cf6b1ac130821a5253c5d74ed7615","sha256":"35b1d87ba23b35975847a72b5b2b4b8cf859f6f42d3c9c156b35f5d7cad12a26","sha512":"ab7d7936b56d0e320a8a858b38a416a6e8ea7b769302c4790cfbf1fc2d2371e53fff0eb074c471b9b984e3a26c8af102be64d463862f3f9b770fb2938312648c","ssdeep":"","tlshash":"f0d022a28aca053e3b6d40e4c9acadd4d00aacccc9827d3488313f61a9917d6b3819c9","size":199,"data":"","first_seen":"2026-01-23T11:05:40.361612Z","last_seen":"2026-03-20T22:51:51.577573Z","times_seen":47,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"5be8891b706bbe19c064c0dec46dfd4a","sha1":"ca75df1e9c3978986d94a6a5c6ce7eea0790e1a7","sha256":"8f7e27a413599b919403979196081aff9e4cba1ad710ca9a8a4d67bdf18dbfbb","sha512":"9faf99b7b2d69e42b2772b370cd5a647fdcf536c365a915ec0448e7be40b1352d60265309106343a3a55b626bc19d205568f74090691c06764ccb21a36308d8b","ssdeep":"","tlshash":"cbb09ba647c5951461258598e451de58d10135c4a9d12001c8e11a1515007645106941","size":109,"data":"","first_seen":"2026-02-07T17:10:36.729627Z","last_seen":"2026-03-03T01:28:14.254994Z","times_seen":28,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"5ef3893073563c1d1abcd7b29d7970b6","sha1":"179f9c467ea18ed432b78751b03510e91abbd0eb","sha256":"430df61c8ff5b0f824abe3aad6153da1b359ceb591d1de9c3faede7aee620772","sha512":"8d8a7bc6371c070d0e5c75a9d07cb25d0f0877625ea3da22bf9c044ea64c1b11991d517ccfdb2b87d76f0d85403ba2f850bcecad0b4f7ccc9fefea4ba0ca6782","ssdeep":"","tlshash":"b190041f053f71347434d003510054cd0140c003131307c5f5315d755c0d05d35300d0","size":42,"data":"","first_seen":"2025-06-04T21:28:34.841926Z","last_seen":"2026-06-05T02:30:33.891416Z","times_seen":206,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"d1c7305c9606e3b7c427218554cc1b8f","sha1":"8e1cde849c392df8cf6cde546ac644b55fce46f4","sha256":"9a4e3451418571403b7f353d7e93326b666121bdc8057dc29b0ecaaafc0bc590","sha512":"ef200fcc532c51fe7affc8ea6b4e8333eb06f95d25d0dceb8d5e481e479364348a373634341b80053ad5dc603e5bf760d530e3ee7f19628c84a993ae0e85618a","ssdeep":"","tlshash":"eaa02223c8a0080e0328a0cce800bf0a000b20b0af823002e0200c0a3800308a0030cb","size":67,"data":"","first_seen":"2026-02-07T17:10:36.749981Z","last_seen":"2026-02-16T23:56:25.173105Z","times_seen":14,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"3fb2d831ace77b43f711b0d1931c8fb7","sha1":"f6ed3be4218f0beaae7d549fed59697879aada32","sha256":"9f724881bccae83dbd1450cf21c63d60e404ddcd0213e9da6e17653dbfebf456","sha512":"c3dd5e9d54038aae640d8a1c110c2d280c7da19f8fc58de1e329ebe55b063090ebf6c401cad0727b08eecdc3c1488f0fd001ba00f9ca6b569e74a8dfeab99dfa","ssdeep":"","tlshash":"0ab01263dac4291a022121ce45419e64040741c15c877b836413080aeb00384700a0ce","size":92,"data":"","first_seen":"2025-12-25T23:55:21.623282Z","last_seen":"2026-06-05T02:30:33.853477Z","times_seen":148,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"bbe01017b041b1e802dc265ff4746092","sha1":"583f257edae55a5dbc61f7f47ac4b315d7a2ec05","sha256":"003f3ea01f22d848f5c1d3d56bc5166726ec0931f6b7b214d3a1468e1267cc91","sha512":"ffca9619d8beafd3dd76049827279bdd75d3552c953afb1ec5b27b3fe1edbe0b080c378898393aaa27127ba9cc422947ce63c3f28894b3a8537eebf5458f0ebd","ssdeep":"","tlshash":"0fa02473d7c4c1031334411cd401df1c400311d05c51140370510c1d3f003d47000ccf","size":71,"data":"","first_seen":"2026-02-07T17:10:36.715035Z","last_seen":"2026-03-03T01:28:14.311189Z","times_seen":28,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"f479c079de4fde494ed55c54154d1005","sha1":"e19e3099bba761029bfbac967dbda83bfe9d71a1","sha256":"57800e5a092181cf86edb219c8b46023fca1b2ef5ee32d482f823b0fb37511eb","sha512":"6b8b103ee53411cfc5e5866b296c75ae94fda3bb391e79eee9cd98701a16b1fa0d7260e5098f3fefbfdf540285a8cd5125d9e928de7d17125be2b49e3da8df29","ssdeep":"","tlshash":"80b012438bc4353a1222a5cf44419f94580bb9edad8676d16863091bb64039c550b0ce","size":102,"data":"","first_seen":"2025-12-25T23:55:21.651566Z","last_seen":"2026-06-05T02:30:33.746543Z","times_seen":148,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"bb7346af50ea97b715ad92834c2af42a","sha1":"6d679eb7f4472963869e3a9d597af9621bece3fc","sha256":"260a74723a36ef0095aae3cd9de61afb306a386dc734d09009491cc9743b898b","sha512":"ff8fde05030e0309f05343acb75a2715c8235b184085cac790c984a97a9a8785bad48de351e17ee1cd41e601e1279a7a0ee76de1f05ef4790f11d94a39148927","ssdeep":"","tlshash":"6ca01243c984111a121021ce44419e14542790c55c85be8164120c0ea800345600a0ce","size":85,"data":"","first_seen":"2025-12-25T23:55:21.624176Z","last_seen":"2026-06-05T02:30:33.865431Z","times_seen":148,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"console":null},"http":[{"url":{"schema":"https","addr":"img.meituan.net/portalweb/238abd85f48b94e7e0c50803152eb9fe387943.gif","fqdn":"img.meituan.net","domain":"meituan.net","tld":"net"},"ip":{"addr":"138.113.181.188","port":443,"asn":54994,"as":"ML-1432-54994","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gg657.com/","date":"2026-02-10T20:48:14.221Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.meituan.net","organization":"北京三快科技有限公司"},"issuer":{"commonName":"GlobalSign RSA OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 03 Jun 2025 10:52:10 GMT","end":"Sat, 27 Jun 2026 07:00:02 GMT"},"fingerprint":{"sha1":"0C:29:B8:8B:74:6A:6C:C5:4B:6B:8C:7E:F5:C5:E8:A7:B1:26:B8:CB","sha256":"40:B3:D3:3A:FB:0A:FF:94:27:86:35:5E:B7:62:00:AE:DE:30:88:34:15:60:5F:60:9F:C0:E2:9D:2E:BB:5C:83"}}},"request":{"raw":"GET /portalweb/238abd85f48b94e7e0c50803152eb9fe387943.gif HTTP/1.1\r\nHost: img.meituan.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 10 Feb 2026 20:48:14 GMT\r\ncontent-type: image/webp\r\ncontent-length: 382422\r\nserver: openresty\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,OPTIONS,HEAD\r\naccess-control-allow-private-network: true\r\ncache-control: max-age=5184000\r\nm-traceid: w6ghpw54o68rg7xarzo8\r\nlast-modified: Thu, 02 Apr 2026 01:38:53 +0000\r\ntiming-allow-origin: *\r\nx-via: 1.1 PS-HKG-04MKz81:4 (Cdn Cache Server V2.0), 1.1 PSdgflkfFRA1bc200:13 (Cdn Cache Server V2.0), 0.0 PS-ARN-01C8L93:15 (Cdn Cache Server V2.0)\r\nx-response-cache: edge_hit\r\nage: 1\r\nx-cache: HIT from cache.51cdn.com\r\nx-ws-request-id: 698b998e_PS-ARN-01C8L93_41532-44743\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":382422,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"4a35ab6c976eeef8d9f14ef3b229078d","sha1":"c3cd2c58cf238b44432087a19228aeb0964e7e1b","sha256":"33c0fa164ae1c714b1d56917c882c7043251abea8bd4710bedf45a6a23fd4df9","sha512":"53d4e029734e67720ad124f895e501d92646ad988aedd4a56747edc8492d436614b14911f405e7c38027e1b849e7614946685a203910ba54e3be1bc61df91b9c","ssdeep":"6144:zUHKiY9IfinTdJ65tAfinTdGUHKiY9IfinTdbxw8s6N6xw8s6NLxw8s6NPDQuq5x:zl+4L6D84Ml+4Bxw8Ngxw8N9xw8NVDQz","tlshash":"b78422d8f82b623af60ebb7648c2c623d70e5b5995d2bc424dc3543e2067a1a1cd63d7","first_seen":"2025-11-28T05:01:58.425474Z","last_seen":"2026-06-05T02:30:33.651078Z","times_seen":173,"resource_available":false,"data":null}},"time_used":216,"timings":{"blocked":0,"dns":149,"connect":8,"send":0,"wait":9,"receive":31,"ssl":18},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.niubixxx.com/seo/hengfu.js","fqdn":"www.niubixxx.com","domain":"niubixxx.com","tld":"com"},"ip":{"addr":"104.21.85.171","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gg657.com/","date":"2026-02-10T20:48:13.062Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"niubixxx.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 28 Jan 2026 14:45:58 GMT","end":"Tue, 28 Apr 2026 15:44:39 GMT"},"fingerprint":{"sha1":"84:5D:FA:92:FE:9F:81:36:90:25:D5:6F:B9:CF:85:CD:8F:DB:82:C0","sha256":"41:67:B4:C7:BB:62:41:39:6C:A5:B5:6E:62:7D:B9:FB:AC:51:9A:23:03:9A:0B:72:1C:AA:FF:CE:1A:C0:46:41"}}},"request":{"raw":"GET /seo/hengfu.js HTTP/1.1\r\nHost: www.niubixxx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gg657.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 10 Feb 2026 20:48:13 GMT\r\nserver: cloudflare\r\nlast-modified: Tue, 10 Feb 2026 15:31:35 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HK7gY%2BIgyzpV7RnlrhDBIu9bEd%2F0vnX%2FZHXVm4ovCpiqlKFfGrbRRnIfoLha6fAfWd4W2c6L%2BuOMRjaA3iizBfvznM96z%2BKBdsOVlGne\"}]}\r\ncontent-encoding: br\r\ncontent-type: application/javascript\r\nage: 1290\r\ncache-control: max-age=1800\r\ncf-cache-status: HIT\r\ncf-ray: 9cbe7751af68568e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6869,"size_decoded":0,"mime_type":"application/javascript","magic":"HTML document, ASCII text","md5":"709816febddca0878a385da1d39fa11c","sha1":"266cb27ea749757d88e32dd811c7b108795547bb","sha256":"41d49334e37d0e3eb04e3e3bd401a89a8a83aeb35ff56aa3754777f2d79eb7a7","sha512":"cad47deab39eb78395a7cc097a02e38a8cca7f70dbe3e8bb5b53bb5eb01a148f34288ed18b8e39747870f012b6040e545787b15f3ad56d1664deb0df303f101e","ssdeep":"96:Kk7GF7GEVRWAtV1z/bwphMX8q/Kc2I4kO5:n7O7fVRDtV1z/FKJ/","tlshash":"5be1e2e316f1a2365b2543c0a4eaffb8f063f4fe9d438d65ccbe1a344480631256999c","first_seen":"2026-02-10T20:49:06.318685Z","last_seen":"2026-02-11T22:48:51.327165Z","times_seen":3,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xx333hh888.com/6c01476708844aff970a7e369cb7e49f.gif","fqdn":"xx333hh888.com","domain":"xx333hh888.com","tld":"com"},"ip":{"addr":"104.160.179.194","port":443,"asn":46844,"as":"SHARKTECH","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gg657.com/","date":"2026-02-10T20:48:13.139Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xx333hh888.com","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Tue, 03 Feb 2026 00:00:00 GMT","end":"Mon, 04 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"6B:8E:F0:BF:59:B2:CE:45:40:63:AC:EB:8B:19:A8:9A:87:E8:6D:2C","sha256":"10:2F:49:32:B0:B4:EC:93:31:8B:84:FE:C2:8D:20:EC:BC:04:32:71:94:A9:CA:CB:DD:FE:5E:DC:36:80:12:60"}}},"request":{"raw":"GET /6c01476708844aff970a7e369cb7e49f.gif HTTP/1.1\r\nHost: xx333hh888.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gg657.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 10 Feb 2026 20:48:14 GMT\r\ncontent-type: image/gif\r\ncontent-length: 538715\r\nlast-modified: Tue, 03 Feb 2026 15:36:06 GMT\r\netag: \"698215e6-8385b\"\r\npsc-cache-status: HIT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":538715,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 960 x 80","md5":"d8d5571bbed6542643ed30ea0af1a60e","sha1":"6a928739d1c2af967cdf39308304d49b4221b8e9","sha256":"aab3f1c5ca28aa17ff50bea2ca633a30a0fe3c57e981a756226fdbee0224de6d","sha512":"43c9984b351d91c05e173def09b7b779c43e134d03b2412bbe1c444228d0e7672ce23ca66c5feae08e748883e384db320f8dc82f52197df2c565c43013ed8a19","ssdeep":"12288:92tlZGAVaUCAVaUCAVaUCAVIx+D51ZFs51ZFs51ZFs7llltxFOx0rxFOx0rxFO+:4tjGqWqWqWqIm13c13c13SnnX","tlshash":"cab412b7933f6ccc9237bca6b0d3a2a5482e59dba64877c1b1c8775e434cd29614242f","first_seen":"2026-02-07T17:10:36.623915Z","last_seen":"2026-04-11T15:40:30.039787Z","times_seen":58,"resource_available":false,"data":null}},"time_used":3603,"timings":{"blocked":1272,"dns":812,"connect":161,"send":0,"wait":465,"receive":570,"ssl":318},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mbh888.12img363608.com:5658/8888/mbh/ky80.gif","fqdn":"mbh888.12img363608.com","domain":"12img363608.com","tld":"com"},"ip":{"addr":"156.231.116.173","port":5658,"asn":984,"as":"OWS","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gg657.com/","date":"2026-02-10T20:48:13.181Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mbh888.12img363608.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 17 Dec 2025 05:06:14 GMT","end":"Tue, 17 Mar 2026 05:06:13 GMT"},"fingerprint":{"sha1":"9D:D0:0E:D6:52:40:66:D8:68:5C:81:8D:F0:CE:EE:77:B2:79:81:7F","sha256":"26:7B:EC:67:8D:D7:E3:2F:0B:27:46:9C:2B:A8:5A:2C:69:54:FC:35:FC:E2:73:49:40:C5:43:E4:37:4B:3B:11"}}},"request":{"raw":"GET /8888/mbh/ky80.gif HTTP/1.1\r\nHost: mbh888.12img363608.com:5658\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gg657.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 10 Feb 2026 20:48:14 GMT\r\ncontent-type: image/gif\r\ncontent-length: 303217\r\nstrict-transport-security: max-age=31536000\r\nlast-modified: Mon, 02 Feb 2026 06:39:47 GMT\r\netag: \"698046b3-4a071\"\r\nexpires: Thu, 12 Mar 2026 15:39:22 GMT\r\ncache-control: max-age=2592000\r\nserver: nginx\r\nx-cache-status: HIT\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\naccess-control-expose-headers: *\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1728000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":303217,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 960 x 80","md5":"fa174d77f4710335b495790601de0682","sha1":"7429969ecc623b3016b80b665f27a5bcad958dd9","sha256":"173e875fda240c4d4a01853ac9baf6f1c7e084bb5311d99c8b94596646889cf5","sha512":"f851a0308cf3e9ef18fe4458421f3ccab909389451cb3cfc29550514e8e5afc58d83e2f51466ca62dd6241a8606c8da7837dd0f1e673099c02fa4bb0fd7067d6","ssdeep":"6144:5Rv5KmZeJ7JkzuyZeJ7JkzuyZeJ7W5plm2C32C32C32C32C+vkfsSkfsSkfsSkw:r4eC6C63333j6","tlshash":"9e5412afa07ce4dc3dc5220506becf8a591f54774799a6a36eb56011bfc130cba89dc2","first_seen":"2026-01-31T13:52:03.069243Z","last_seen":"2026-03-20T22:51:51.502272Z","times_seen":59,"resource_available":false,"data":null}},"time_used":2776,"timings":{"blocked":-1,"dns":591,"connect":289,"send":0,"wait":300,"receive":1296,"ssl":299},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.pcenern.com/images/693167ac1e12c259bd4ed1a4.gif","fqdn":"www.pcenern.com","domain":"pcenern.com","tld":"com"},"ip":{"addr":"161.129.35.190","port":443,"asn":40065,"as":"CNSERVERS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gg657.com/","date":"2026-02-10T20:48:13.186Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pcenern.com","organization":""},"issuer":{"commonName":"ZeroSSL ECC Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Fri, 12 Dec 2025 00:00:00 GMT","end":"Thu, 12 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"A2:B8:20:1E:78:96:5A:8C:63:50:D5:0B:E6:1C:9A:2B:1E:26:87:6A","sha256":"E5:A2:10:84:E2:E9:93:9A:14:A1:2B:F5:BE:72:88:5D:66:D0:38:41:7D:BA:AC:0D:26:45:6D:58:0D:89:C6:D3"}}},"request":{"raw":"GET /images/693167ac1e12c259bd4ed1a4.gif HTTP/1.1\r\nHost: www.pcenern.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gg657.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\ncontent-length: 0\r\nreferrer-policy: no-referrer\r\ncache-control: max-age=600\r\nlocation: https://img.meituan.net/portalweb/e8e1ebf34b5a477751935426487f5f371929021.gif\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":null,"data":{"size":717744,"size_decoded":0,"mime_type":"image/webp","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-21T02:29:43.67316Z","times_seen":16596636,"resource_available":true,"data":null}},"time_used":1960,"timings":{"blocked":-1,"dns":952,"connect":315,"send":0,"wait":200,"receive":0,"ssl":491},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"niubixxx.xyz/img/tv2.gif","fqdn":"niubixxx.xyz","domain":"niubixxx.xyz","tld":"xyz"},"ip":{"addr":"172.67.153.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gg657.com/","date":"2026-02-10T20:48:13.232Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"niubixxx.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 29 Jan 2026 11:29:57 GMT","end":"Wed, 29 Apr 2026 12:27:11 GMT"},"fingerprint":{"sha1":"FB:B8:B0:62:8B:65:83:47:DC:92:86:D4:4E:D5:38:F9:66:87:25:43","sha256":"12:C7:D4:49:F6:54:D8:3E:81:74:98:15:95:3E:E0:F4:53:0D:60:62:D2:E6:60:5E:F6:9B:E3:68:24:8A:DC:A0"}}},"request":{"raw":"GET /img/tv2.gif HTTP/1.1\r\nHost: niubixxx.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 10 Feb 2026 20:48:13 GMT\r\nserver: cloudflare\r\nlast-modified: Mon, 04 Jul 2022 10:49:21 GMT\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\ncontent-length: 62865\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/gif\r\nage: 1290\r\ncache-control: max-age=1800\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Itlbky8CPKgrGNPSCQuw%2BExet0XGnqkGJr3Nya6PzREsX%2FQ7etx7w2oM01zyk5RtY8Wp%2FHKUeqi84oIP7rpn0TO%2FRImG2tY54%2FM%3D\"}]}\r\ncf-ray: 9cbe7752bf6f56be-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":62865,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 980 x 100","md5":"fffae0809d4489dcb6623cecbab2027b","sha1":"a944da8ab6bd31839d34c34b77f0e5fa8c93b9f0","sha256":"c0b59b45c8faa70b7e31e522711a144fba97f4e4dfe9ada14053edd9ec2fe32e","sha512":"579b5e4889f1bf1826b086d75d0a7edea5d8426b483b3e13218ad7e9fa4cb5c53375bdc655cc11c949ad0df1165a7dd0cdc6a36bb735303289a8bacef442a18f","ssdeep":"1536:aT9jpS8Rn/pfe7fT5kDuNvrGWDKGCLCy7Wa:aRjpS8fkfuAzGWJVha","tlshash":"465302d1d50ee934d3b969cc8fd8c2e89e69a244242d5e4d5e3010839db8f4e75a32ba","first_seen":"2023-05-28T16:47:00Z","last_seen":"2026-06-18T03:04:50.845628Z","times_seen":271,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.alicdn.com/imgextra/i4/O1CN01t4bXPK1DwkPP59fbe_!!6000000000281-1-cib.gif","fqdn":"img.alicdn.com","domain":"alicdn.com","tld":"com"},"ip":{"addr":"47.246.44.177","port":443,"asn":24429,"as":"Zhejiang Taobao Network Co.,Ltd","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gg657.com/","date":"2026-02-10T20:48:14.749Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tbcdn.cn","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Fri, 28 Nov 2025 03:07:13 GMT","end":"Sat, 18 Jul 2026 09:41:04 GMT"},"fingerprint":{"sha1":"01:40:62:EF:8C:E5:C1:8A:19:4C:8D:B6:F5:C2:24:7F:DC:C0:9C:8A","sha256":"60:3C:41:A0:78:62:E6:5E:82:F0:FA:CF:5C:C9:D3:22:E4:64:EE:1A:EE:C7:CC:BA:DD:25:08:90:6F:CC:C4:F2"}}},"request":{"raw":"GET /imgextra/i4/O1CN01t4bXPK1DwkPP59fbe_!!6000000000281-1-cib.gif HTTP/1.1\r\nHost: img.alicdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://gg657.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: Tengine\r\ncontent-type: image/gif\r\ncontent-length: 1859138\r\ndate: Sun, 28 Dec 2025 08:10:17 GMT\r\npicasso-ret-code: SUCCESS\r\npicasso-cache-info: L3-HIT\r\nrequest-time: 0.005\r\ntraceid: a3b53a9c17669094174134097e\r\nx-powered-by: Picasso\r\npicasso-image-type: normal\r\npicasso-fmt: gif2avif\r\ncache-control: max-age=31536000\r\nvia: ens-cache2.l2de4[0,7,200-0,H], ens-cache23.l2de4[9,0], ens-cache4.se2[0,1,200-0,H], ens-cache7.se2[4,0]\r\naccess-control-allow-origin: *\r\nage: 3847077\r\nali-swift-global-savetime: 1766909417\r\nx-cache: HIT TCP_HIT dirn:10:161890175\r\nx-swift-savetime: Fri, 02 Jan 2026 01:29:28 GMT\r\nx-swift-cachetime: 31128049\r\nback_uri: /imgextra/i4/O1CN01t4bXPK1DwkPP59fbe_!!6000000000281-1-cib.gif_.avif\r\nvary: Accept\r\ns-rt: 4\r\ntiming-allow-origin: *\r\neagleid: 2ff62c9b17707564947543460e\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Tengine","description":"Tengine is a web server which is based on the Nginx HTTP server.","website":"https://tengine.taobao.org","common_platform_enumeration":"","icon":"Tengine.png","categories":["Web servers"]}],"data":{"size":1859138,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 960 x 120","md5":"ea1cada50ee289391dde01705e4adaa7","sha1":"d5269ede3ef278d2e3585376809ad46f4cc382f0","sha256":"bddd4171ae54c857258a045facc4e0e738e17cc2185873a77ba2d9d575ef708d","sha512":"6fa2f650525e00eea1947e7cad5fbedcb4593da85e97f9250cafb9dc289d49ef87ecdc763438a855525960aecb0024149424a7d71f5529a40085a983036e352f","ssdeep":"24576:CxcEs9MxDI535MmeU6oxRDpuCqrDp9fN+k2uWwN:CG/teMRDpCr5+RuWwN","tlshash":"8525334083ce13d7fc3b54b3b05789e44b89282d3859de35fe95f862ca382a1561afd8","first_seen":"2025-09-09T13:16:38.75657Z","last_seen":"2026-06-09T04:18:21.214698Z","times_seen":691,"resource_available":false,"data":null}},"time_used":110,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":85,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.meituan.net/portalweb/e8e1ebf34b5a477751935426487f5f371929021.gif","fqdn":"img.meituan.net","domain":"meituan.net","tld":"net"},"ip":{"addr":"138.113.181.188","port":443,"asn":54994,"as":"ML-1432-54994","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gg657.com/","date":"2026-02-10T20:48:15.141Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.meituan.net","organization":"北京三快科技有限公司"},"issuer":{"commonName":"GlobalSign RSA OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 03 Jun 2025 10:52:10 GMT","end":"Sat, 27 Jun 2026 07:00:02 GMT"},"fingerprint":{"sha1":"0C:29:B8:8B:74:6A:6C:C5:4B:6B:8C:7E:F5:C5:E8:A7:B1:26:B8:CB","sha256":"40:B3:D3:3A:FB:0A:FF:94:27:86:35:5E:B7:62:00:AE:DE:30:88:34:15:60:5F:60:9F:C0:E2:9D:2E:BB:5C:83"}}},"request":{"raw":"GET /portalweb/e8e1ebf34b5a477751935426487f5f371929021.gif HTTP/1.1\r\nHost: img.meituan.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 10 Feb 2026 20:48:15 GMT\r\ncontent-type: image/webp\r\ncontent-length: 717744\r\nserver: openresty\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,OPTIONS,HEAD\r\naccess-control-allow-private-network: true\r\ncache-control: max-age=5184000\r\nm-traceid: 4q6dalh4m4roa6k15rki\r\nlast-modified: Sun, 15 Feb 2026 15:50:52 +0000\r\ntiming-allow-origin: *\r\nx-via: 1.1 dianxun230:13 (Cdn Cache Server V2.0), 0.0 PS-ARN-01C8L93:15 (Cdn Cache Server V2.0)\r\nx-response-cache: edge_hit\r\nage: 1\r\nx-cache: HIT from cache.51cdn.com\r\nx-ws-request-id: 698b998f_PS-ARN-01C8L93_41532-44791\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":717744,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"d9d57c7fd9cf4444936ffd97c86b8e51","sha1":"9ba41a0eff58d5e9f32171197e914090929cf10a","sha256":"9ef0a8ae66922c1f031797954ed367e82c2355cde1a5009bb8ecbcab78c3e539","sha512":"4880157a7791242df0b478dce92f331a713d2ff5f39586a7c53a49cbbf41a7a676127b466558c03c3f161fd262c200f3e10e55ba453acaba1859d3f552f9c0de","ssdeep":"12288:OvakL41wxbkxbStnVLVIdHFfyhUx07aHsOAUf6jhiWrD9QEiLtVgtguA7igbxp:aLL41wAmVLVIdlfyhUxgYAtUk9e0COO3","tlshash":"83e423aa1673cda4efec5421cb8130bded818d381eed5edfb940db24b22421d9e27525","first_seen":"2025-12-07T01:12:19.49904Z","last_seen":"2026-06-15T23:08:34.734454Z","times_seen":218,"resource_available":false,"data":null}},"time_used":36,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":13,"receive":22,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.niubixxx.com/seo/tui.js","fqdn":"www.niubixxx.com","domain":"niubixxx.com","tld":"com"},"ip":{"addr":"104.21.85.171","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gg657.com/","date":"2026-02-10T20:48:12.510Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"niubixxx.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 28 Jan 2026 14:45:58 GMT","end":"Tue, 28 Apr 2026 15:44:39 GMT"},"fingerprint":{"sha1":"84:5D:FA:92:FE:9F:81:36:90:25:D5:6F:B9:CF:85:CD:8F:DB:82:C0","sha256":"41:67:B4:C7:BB:62:41:39:6C:A5:B5:6E:62:7D:B9:FB:AC:51:9A:23:03:9A:0B:72:1C:AA:FF:CE:1A:C0:46:41"}}},"request":{"raw":"GET /seo/tui.js HTTP/1.1\r\nHost: www.niubixxx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gg657.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 10 Feb 2026 20:48:12 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Sat, 07 Feb 2026 09:25:49 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2xWGaizqOzgyT%2BEE2ipxozhwP3JvW0%2BhDQb6RtVjxyfPyonvCMZedqYHvcxomMmwQySHWzleg3WYodjrGIZev6blWfyWfdW37WSCX56o\"}]}\r\nage: 1292\r\ncache-control: max-age=1800\r\ncf-cache-status: HIT\r\ncontent-encoding: br\r\ncf-ray: 9cbe774e7eb856cb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1715,"size_decoded":0,"mime_type":"application/javascript","magic":"HTML document, Unicode text, UTF-8 text","md5":"76fe2f178991f93e84f37c0b7a058f71","sha1":"831f6c49502623384b279715cc3591c8fc120439","sha256":"d7f87f257013976c4f13edc4568a42da9ca2f906011e1ca5a79fc9c273320007","sha512":"c2edfa916cbef857fa992051061179b9987fe1575d2eb2af8ea988337292771242503d66f345ac81096334ffd7143ec7708c64daae7d3beffb7d925fb88355e3","ssdeep":"","tlshash":"083158d35bb08367172122eca881fb74b8a7e0fadc4b2f81593f1d0be440644284e89f","first_seen":"2026-02-07T17:10:36.688035Z","last_seen":"2026-02-16T23:56:25.13732Z","times_seen":14,"resource_available":true,"data":null}},"time_used":105,"timings":{"blocked":47,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":41},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"888mbh.12img958763.com:5658/8888/mbh/960x80.gif","fqdn":"888mbh.12img958763.com","domain":"12img958763.com","tld":"com"},"ip":{"addr":"156.231.116.173","port":5658,"asn":984,"as":"OWS","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gg657.com/","date":"2026-02-10T20:48:13.179Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"888mbh.12img958763.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 17 Dec 2025 05:06:14 GMT","end":"Tue, 17 Mar 2026 05:06:13 GMT"},"fingerprint":{"sha1":"77:31:9B:C3:74:A1:19:D3:19:C6:04:7F:6B:4D:D9:9D:23:B1:B0:3D","sha256":"9F:B1:B1:99:DF:86:E5:CC:45:2A:56:9C:A5:0B:68:3C:4D:DA:52:CF:21:7F:89:34:42:A7:AF:A9:C9:C9:93:EA"}}},"request":{"raw":"GET /8888/mbh/960x80.gif HTTP/1.1\r\nHost: 888mbh.12img958763.com:5658\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gg657.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 10 Feb 2026 20:48:14 GMT\r\ncontent-type: image/gif\r\ncontent-length: 349862\r\nstrict-transport-security: max-age=31536000\r\nlast-modified: Fri, 30 Jan 2026 13:22:19 GMT\r\netag: \"697cb08b-556a6\"\r\nexpires: Thu, 12 Mar 2026 13:18:02 GMT\r\ncache-control: max-age=2592000\r\nserver: nginx\r\nx-cache-status: HIT\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\naccess-control-expose-headers: *\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1728000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":349862,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 960 x 80","md5":"bb6e59b414807b540ef9f9282fb4f357","sha1":"d4b4592dcf23ed848bbcde93f12ecfd68641f3b1","sha256":"67b833457c9253dd40a8be1e54c39977ad79fcc564055e547f574c8f504dfd1d","sha512":"c73b4d4f814784e7ed117b7ec7d3fee0f390698e60b1ddb89666a1dac4d7644a5a2afd13827b09789b58b755969c44e51c761f9061503ed5757551405d06c0f0","ssdeep":"6144:8pZ7AvQPd7AvQPd7AvQPd7AvQGC24BXESXmtdmCVPJAZJVnRsfRsfRsfRn:K1Ave5Ave5Ave5AvqV2TTxeVR666n","tlshash":"5e74128be8fc697f445d0975be9956d073882cbac9ba0077310ab0cddf43f56987a068","first_seen":"2026-02-01T11:39:05.645408Z","last_seen":"2026-06-09T12:48:45.444802Z","times_seen":94,"resource_available":false,"data":null}},"time_used":2909,"timings":{"blocked":-1,"dns":675,"connect":295,"send":0,"wait":289,"receive":1347,"ssl":301},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gg657.com/","fqdn":"gg657.com","domain":"gg657.com","tld":"com"},"ip":{"addr":"172.67.223.235","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-02-10T20:48:12.106Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gg657.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 27 Jan 2026 15:43:59 GMT","end":"Mon, 27 Apr 2026 16:41:29 GMT"},"fingerprint":{"sha1":"8E:F6:69:C1:DA:98:2F:47:A1:6B:D2:DF:A1:21:A7:F5:03:61:20:D4","sha256":"DD:A7:7E:C6:E7:C6:DF:21:18:67:9C:B4:1E:55:FF:21:3D:F9:BD:32:E0:10:7E:A9:57:00:C4:F9:9A:17:2A:AE"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: gg657.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 10 Feb 2026 20:48:12 GMT\r\ncontent-type: text/html\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=m28EvYcpTHK4FL9sfo7xJs6Z4SOnIpW0JW75gVZsPO76I%2BEiHo%2Fzze%2BUtNOCO5gTb6lG%2FH03FXBeFyUuKz9KwsXWNtHJbqs9nA%3D%3D\"}]}\r\nlast-modified: Tue, 10 Feb 2026 08:27:57 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 9cbe774bd9ff4e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13105,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with CRLF line terminators","md5":"f438a1449d6219ce1f3f9b5fb06a82cd","sha1":"3b133a8e56c78b2b3efd915615d756f644ffc3b7","sha256":"204f0da7f1c098e0fa67cc79bc65cb18dc5fb5a464618d4b04a73ebd63f0112f","sha512":"e9e5b04d9272e62b1f47f6819ef51847351c54fb2cf2241a5bde746e4ffb1764a3c440a0d69342da547a5891798b28032da61f6b43ac2f0002e9b95b863e2ab6","ssdeep":"96:54CfO/b8wqEF4vx050+ZomrwjyCudZkJhjv3/hiM:54ZPnF4vx05HZRrGyXZAD1","tlshash":"244252532ac5d8160272c2d287f4a7acfe15e183eda61905b9ac378faff4e518d9f104","first_seen":"2026-02-10T10:54:10.784758Z","last_seen":"2026-02-11T22:48:51.323953Z","times_seen":4,"resource_available":false,"data":null}},"time_used":237,"timings":{"blocked":24,"dns":1,"connect":1,"send":0,"wait":188,"receive":0,"ssl":20},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xm888.12img250769.com:5658/8888/xm/5088/80.gif","fqdn":"xm888.12img250769.com","domain":"12img250769.com","tld":"com"},"ip":{"addr":"156.231.116.173","port":5658,"asn":984,"as":"OWS","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gg657.com/","date":"2026-02-10T20:48:13.152Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xm888.12img250769.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 17 Dec 2025 05:06:16 GMT","end":"Tue, 17 Mar 2026 05:06:15 GMT"},"fingerprint":{"sha1":"D7:AF:15:72:1D:0F:37:8E:37:55:DA:95:14:9A:E3:C9:B4:9E:2B:8A","sha256":"21:60:DD:71:53:37:7E:B7:15:A1:18:3E:23:72:48:F5:2A:E9:E8:DB:81:76:13:C8:29:3B:92:33:32:28:93:A6"}}},"request":{"raw":"GET /8888/xm/5088/80.gif HTTP/1.1\r\nHost: xm888.12img250769.com:5658\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gg657.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 10 Feb 2026 20:48:14 GMT\r\ncontent-type: image/gif\r\ncontent-length: 308083\r\nstrict-transport-security: max-age=31536000\r\nlast-modified: Mon, 16 Sep 2024 13:02:02 GMT\r\netag: \"66e82c4a-4b373\"\r\nexpires: Thu, 12 Mar 2026 13:07:46 GMT\r\ncache-control: max-age=2592000\r\nserver: nginx\r\nx-cache-status: HIT\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\naccess-control-expose-headers: *\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1728000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":308083,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 960 x 80","md5":"83fe69097dc96cf2bc1776292a81592f","sha1":"e11e5631d21dc74a5224096f8aaaa4dbc96f659c","sha256":"a236aeca76b74f56d17f4a841d22a933f03b9ea3287cc3efcd80b21b99288f6e","sha512":"856fb8252591003e647885e830437dea9e03306758570fbed6a1e5f7e07eb8bc3dbd616e93202821f413fe0390320beb48d9d076a717c1a5a2edbb8717f7af6b","ssdeep":"6144:71rsix3jix3jixfC61Mc6yGlXSg+1HUWXmy6yGlWhChChCa:2ixzixzixJ1iyGAyTyGAUUUa","tlshash":"eb641235b8b7317439274c377b89ef649da6af4f222d48ca1f74fc2684ca08d5958b42","first_seen":"2024-09-23T12:40:49Z","last_seen":"2026-06-20T11:53:07.668161Z","times_seen":1361,"resource_available":false,"data":null}},"time_used":2397,"timings":{"blocked":-1,"dns":217,"connect":290,"send":0,"wait":289,"receive":1298,"ssl":300},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.niubixxx.com/seo/hengfu.js","fqdn":"www.niubixxx.com","domain":"niubixxx.com","tld":"com"},"ip":{"addr":"104.21.85.171","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gg657.com/","date":"2026-02-10T20:48:13.221Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"niubixxx.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 28 Jan 2026 14:45:58 GMT","end":"Tue, 28 Apr 2026 15:44:39 GMT"},"fingerprint":{"sha1":"84:5D:FA:92:FE:9F:81:36:90:25:D5:6F:B9:CF:85:CD:8F:DB:82:C0","sha256":"41:67:B4:C7:BB:62:41:39:6C:A5:B5:6E:62:7D:B9:FB:AC:51:9A:23:03:9A:0B:72:1C:AA:FF:CE:1A:C0:46:41"}}},"request":{"raw":"GET /seo/hengfu.js HTTP/1.1\r\nHost: www.niubixxx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gg657.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 10 Feb 2026 20:48:13 GMT\r\nserver: cloudflare\r\nlast-modified: Tue, 10 Feb 2026 15:31:35 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FEbwpee7KDOtgXQk0Juev8sh12I1kXxncnllded93fv5bX5Imiaq0bYmY7JBnLLB2p5YM23vlfC%2FuSxCv%2FL9fuBicw5tVKETRWFTfk0Z\"}]}\r\ncontent-encoding: br\r\ncontent-type: application/javascript\r\nage: 1290\r\ncache-control: max-age=1800\r\ncf-cache-status: HIT\r\ncf-ray: 9cbe7752af85568e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6869,"size_decoded":0,"mime_type":"application/javascript","magic":"HTML document, ASCII text","md5":"709816febddca0878a385da1d39fa11c","sha1":"266cb27ea749757d88e32dd811c7b108795547bb","sha256":"41d49334e37d0e3eb04e3e3bd401a89a8a83aeb35ff56aa3754777f2d79eb7a7","sha512":"cad47deab39eb78395a7cc097a02e38a8cca7f70dbe3e8bb5b53bb5eb01a148f34288ed18b8e39747870f012b6040e545787b15f3ad56d1664deb0df303f101e","ssdeep":"96:Kk7GF7GEVRWAtV1z/bwphMX8q/Kc2I4kO5:n7O7fVRDtV1z/FKJ/","tlshash":"5be1e2e316f1a2365b2543c0a4eaffb8f063f4fe9d438d65ccbe1a344480631256999c","first_seen":"2026-02-10T20:49:06.318685Z","last_seen":"2026-02-11T22:48:51.327165Z","times_seen":3,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.niubixxx.com/img/227.gif","fqdn":"www.niubixxx.com","domain":"niubixxx.com","tld":"com"},"ip":{"addr":"104.21.85.171","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gg657.com/","date":"2026-02-10T20:48:13.162Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"niubixxx.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 28 Jan 2026 14:45:58 GMT","end":"Tue, 28 Apr 2026 15:44:39 GMT"},"fingerprint":{"sha1":"84:5D:FA:92:FE:9F:81:36:90:25:D5:6F:B9:CF:85:CD:8F:DB:82:C0","sha256":"41:67:B4:C7:BB:62:41:39:6C:A5:B5:6E:62:7D:B9:FB:AC:51:9A:23:03:9A:0B:72:1C:AA:FF:CE:1A:C0:46:41"}}},"request":{"raw":"GET /img/227.gif HTTP/1.1\r\nHost: www.niubixxx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gg657.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 10 Feb 2026 20:48:13 GMT\r\nserver: cloudflare\r\nlast-modified: Fri, 21 Jun 2024 18:43:41 GMT\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\ncontent-length: 667059\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/gif\r\nage: 1290\r\ncache-control: max-age=1800\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jGLSEmGISdQCAKKOg9lx%2F08mE39SLF6sdVfDNGszuhHXnBGw%2F3SJSWkTESeohINOZsJbUa2x8vbleYDOJ4PBRPMYTFUZU7eDRfpM2vfQ\"}]}\r\ncf-ray: 9cbe77521f6c568e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":667059,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 2400 x 194","md5":"71cf1cecc52190cb9244f7f7ab750e53","sha1":"66aafd6b891e35a38086667e96c1b75ec6794adf","sha256":"0fc182ecd48d5484dffafe97b430397e9ef46f90f8d65ea0f148fd29a4778a3b","sha512":"2d74133b0f4389449c10c25215f4b5a2bb5cdb23079bec71c75ca2487d33b7b4a3d3c383ad02c6132365ba60792dd39fdb498986e77ff3c863f99670e872ed6c","ssdeep":"12288:TJrazxTdiFm3KewjDebh8fWnok1g2Zc37l0sbFjHxjZt5V0N75uH2sjhzx:lraziwEOh8f+9VZ60aLFY75uBjhN","tlshash":"82e42393b012d1964b065b711b08f6286a4fefdc3a4109175f8c73a5ad3bbaf91f0c66","first_seen":"2024-08-01T19:59:50Z","last_seen":"2026-06-18T03:04:50.88275Z","times_seen":244,"resource_available":false,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":22,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.nntxskm.com/images/692326c235c23d33c0b794ac.gif","fqdn":"www.nntxskm.com","domain":"nntxskm.com","tld":"com"},"ip":{"addr":"161.129.35.210","port":443,"asn":40065,"as":"CNSERVERS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gg657.com/","date":"2026-02-10T20:48:13.138Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nntxskm.com","organization":""},"issuer":{"commonName":"ZeroSSL ECC Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Fri, 12 Dec 2025 00:00:00 GMT","end":"Thu, 12 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"DA:B9:E7:94:3F:C8:11:89:AE:D3:4C:62:D7:E8:39:1B:E6:50:03:CA","sha256":"66:A1:EC:EE:B1:19:80:B8:AC:B8:E8:98:D1:84:0A:82:BD:5B:7E:18:30:6C:34:F6:4E:2D:C5:D2:22:85:8F:43"}}},"request":{"raw":"GET /images/692326c235c23d33c0b794ac.gif HTTP/1.1\r\nHost: www.nntxskm.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gg657.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\ncontent-length: 0\r\nreferrer-policy: no-referrer\r\ncache-control: max-age=600\r\nlocation: https://img.meituan.net/portalweb/238abd85f48b94e7e0c50803152eb9fe387943.gif\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":null,"data":{"size":382422,"size_decoded":0,"mime_type":"image/webp","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-21T02:29:43.67316Z","times_seen":16596636,"resource_available":true,"data":null}},"time_used":1975,"timings":{"blocked":874,"dns":140,"connect":202,"send":0,"wait":202,"receive":0,"ssl":553},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gg666jj666.com/7a1463665f9f42b194eab657df34ac23.gif","fqdn":"gg666jj666.com","domain":"gg666jj666.com","tld":"com"},"ip":{"addr":"104.160.179.194","port":443,"asn":46844,"as":"SHARKTECH","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gg657.com/","date":"2026-02-10T20:48:13.142Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gg666jj666.com","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Tue, 03 Feb 2026 00:00:00 GMT","end":"Mon, 04 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"87:56:4C:E8:F8:A1:97:17:48:F1:CF:13:32:56:2B:F4:F0:E4:0E:DF","sha256":"14:C2:6E:72:C2:70:04:1B:87:AC:A7:A1:52:35:12:C9:59:06:64:27:B1:7E:A6:D4:76:C0:DD:B7:CA:CD:78:91"}}},"request":{"raw":"GET /7a1463665f9f42b194eab657df34ac23.gif HTTP/1.1\r\nHost: gg666jj666.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gg657.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 10 Feb 2026 20:48:14 GMT\r\ncontent-type: image/gif\r\ncontent-length: 403208\r\nlast-modified: Wed, 04 Feb 2026 06:49:27 GMT\r\netag: \"6982ebf7-62708\"\r\npsc-cache-status: HIT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":403208,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 960 x 80","md5":"8fee4dc663865b5a7dccece69ac780a5","sha1":"773314d137bb2ca004b0ca13faff0d58709e4ce8","sha256":"225a4dbbaf9f6cf88dae35e44ae92e72c00f474f74ca34c910d1bc23ba700150","sha512":"85a58e4b0eb720458b26f163451f7da6594949f0bdc2bbe411d77d9862487573c866ce412bd669fcc918d49df146fd362c8b7fd50ba0cb58de805c9a3fbe3b4d","ssdeep":"6144:gxlXrCqUBhQmCqUBhQmCqUBhQmCqURKJgE2KJgE2KJgE2KJg6lY7nKuHoc7nKuHQ:8zU+0U+0U+0p///Ao8o8oj","tlshash":"748412e772f498e5e7c32f31f672085885aa5c449c4e615ae28c698fd18803dd2679fc","first_seen":"2026-02-07T17:10:36.584278Z","last_seen":"2026-04-12T18:37:14.352018Z","times_seen":91,"resource_available":false,"data":null}},"time_used":3859,"timings":{"blocked":1509,"dns":1049,"connect":145,"send":0,"wait":225,"receive":592,"ssl":336},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"789113.top/1011/960x100.gif","fqdn":"789113.top","domain":"789113.top","tld":"top"},"ip":{"addr":"198.204.238.229","port":443,"asn":33387,"as":"NOCIX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gg657.com/","date":"2026-02-10T20:48:13.169Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"789111.top","organization":""},"issuer":{"commonName":"Certum Domain Validation CA SHA2","organization":"Unizeto Technologies S.A."},"validity":{"start":"Mon, 25 Aug 2025 09:41:24 GMT","end":"Tue, 25 Aug 2026 09:41:23 GMT"},"fingerprint":{"sha1":"AB:F9:06:D7:EF:E7:91:E9:68:F6:C2:88:86:EC:C9:6E:61:B2:FA:CE","sha256":"0C:CB:40:4D:06:2B:64:17:78:FC:D5:08:51:DE:30:C9:91:09:9A:40:E1:2D:3B:C1:C0:9E:CF:1A:ED:FE:8E:CE"}}},"request":{"raw":"GET /1011/960x100.gif HTTP/1.1\r\nHost: 789113.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gg657.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 10 Feb 2026 20:48:14 GMT\r\ncontent-type: image/gif\r\ncontent-length: 716520\r\nlast-modified: Sat, 11 Oct 2025 08:51:59 GMT\r\netag: \"68ea1aaf-aeee8\"\r\nexpires: Thu, 12 Mar 2026 20:48:14 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":716520,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 960 x 100","md5":"d78adfef3a3f836cff8978b0070a79ce","sha1":"92fea6bf7982e92acdbb94e0523ebda0de8812ab","sha256":"9416576b36463fec53efb77f11e471bd2e9a027acc58fe9904311e3d2a6fa82c","sha512":"7738b1f895f57ccae99df361387b05f0ee94dcbeb93fcc5350fdca149d453a7ad80776994e8074fc1aea2a848e5f2fdacc3f00e229d390a812ffe792cf2686a1","ssdeep":"12288:t7PynPQnPQnPQnPQK0lKKKK7UTTWUTTWUTTWUTTWUTT7:tSAAAh8kKkKkKkKkv","tlshash":"54e412079fe051bc69a99954944343cc9a342a4839e7876192e6b0f502fc7efc6b60ff","first_seen":"2025-10-21T10:53:56.489793Z","last_seen":"2026-06-15T11:41:57.106207Z","times_seen":186,"resource_available":false,"data":null}},"time_used":1737,"timings":{"blocked":-1,"dns":461,"connect":114,"send":0,"wait":115,"receive":623,"ssl":423},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.niubixxx.com/seo/dz.jpg","fqdn":"www.niubixxx.com","domain":"niubixxx.com","tld":"com"},"ip":{"addr":"104.21.85.171","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gg657.com/","date":"2026-02-10T20:48:13.064Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"niubixxx.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 28 Jan 2026 14:45:58 GMT","end":"Tue, 28 Apr 2026 15:44:39 GMT"},"fingerprint":{"sha1":"84:5D:FA:92:FE:9F:81:36:90:25:D5:6F:B9:CF:85:CD:8F:DB:82:C0","sha256":"41:67:B4:C7:BB:62:41:39:6C:A5:B5:6E:62:7D:B9:FB:AC:51:9A:23:03:9A:0B:72:1C:AA:FF:CE:1A:C0:46:41"}}},"request":{"raw":"GET /seo/dz.jpg HTTP/1.1\r\nHost: www.niubixxx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 10 Feb 2026 20:48:13 GMT\r\nserver: cloudflare\r\nlast-modified: Mon, 31 Mar 2025 10:22:37 GMT\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\ncontent-length: 30793\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/jpeg\r\nage: 1291\r\ncache-control: max-age=1800\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xt%2Fx65lje%2F%2F9utSZncQdGveBgslcFTtN%2F7uyi8zWkStcCawzpnrPbdKNX87KAnkhBikY613s0eppd%2BeV2Hwp1ugRkDqI1pRT8ddsuZ%2BD\"}]}\r\ncf-ray: 9cbe7751af69568e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":30793,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 980x100, components 3","md5":"643586ee86bfec27cfeb953fbb424a77","sha1":"f79ceff8ad9d3cd770f1b0b7926e0db851ea2926","sha256":"1e1955472f3c889434cbeebf883c450185500227b987185d9b39cda993d347e2","sha512":"ca0af2af2a8d9f0647037ae83d7f198c4d86d0a0d34c9c587ecda231fc8867faac19c19de9b3ab30bb3f6edb00cfe24e4b1d61c3e09ecabcb643026b456d64ca","ssdeep":"768:xsFgGlhE238PpcyhFDWvFDs7TeRB1hMbisThSfAOgA7:QjhEBzhodDsXeDP+2A8","tlshash":"01d2d08522c20e13db79e338eb15d3125b16e5e9e635bf2a64d709462e643b803ab1d4","first_seen":"2025-04-01T22:11:02.454523Z","last_seen":"2026-06-18T03:04:50.807433Z","times_seen":216,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xx333hh888.com/46e1f8413a164298b27fda785f120230.gif","fqdn":"xx333hh888.com","domain":"xx333hh888.com","tld":"com"},"ip":{"addr":"104.160.179.194","port":443,"asn":46844,"as":"SHARKTECH","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gg657.com/","date":"2026-02-10T20:48:13.144Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xx333hh888.com","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Tue, 03 Feb 2026 00:00:00 GMT","end":"Mon, 04 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"6B:8E:F0:BF:59:B2:CE:45:40:63:AC:EB:8B:19:A8:9A:87:E8:6D:2C","sha256":"10:2F:49:32:B0:B4:EC:93:31:8B:84:FE:C2:8D:20:EC:BC:04:32:71:94:A9:CA:CB:DD:FE:5E:DC:36:80:12:60"}}},"request":{"raw":"GET /46e1f8413a164298b27fda785f120230.gif HTTP/1.1\r\nHost: xx333hh888.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gg657.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 10 Feb 2026 20:48:14 GMT\r\ncontent-type: image/gif\r\ncontent-length: 852837\r\nlast-modified: Sat, 07 Feb 2026 09:23:02 GMT\r\netag: \"69870476-d0365\"\r\npsc-cache-status: HIT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":852837,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 960 x 120","md5":"a4856dcead44ce49610cae8e0fa5fcb4","sha1":"6b437f9f07d5e35f407bd9d0130ceb39653533b6","sha256":"a1bc124c98c10bcfe8291a90e54159f86b9f451ea0bde1a10613b3d5a1b60f74","sha512":"f6f7b3bcad47133181e80ec632250af3d2e3baea3687d6f41084422955c578c59bc6e8093e3a3cb627fd468825e207f7f9a8645c130e24f9c1f26f9e94c16722","ssdeep":"24576:IyKu7VgXdSHg2LSHg2LSH8KK1KvY1vY1vE:TKjAHg2WHg2WHtvY1vY1vE","tlshash":"8205231acbff5153e557f3b1ed12b04e168b182a30b84470585d3f8a31e29ee3297da6","first_seen":"2026-02-07T17:10:36.633586Z","last_seen":"2026-04-04T15:42:51.476501Z","times_seen":70,"resource_available":false,"data":null}},"time_used":3591,"timings":{"blocked":1196,"dns":806,"connect":162,"send":0,"wait":317,"receive":859,"ssl":244},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aksns.jzkts.xyz/images/f1zo342nxe2cqfvv1z2yhng4zkhpsj.gif","fqdn":"aksns.jzkts.xyz","domain":"jzkts.xyz","tld":"xyz"},"ip":{"addr":"107.149.207.124","port":443,"asn":398823,"as":"PEG-LA","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gg657.com/","date":"2026-02-10T20:48:13.156Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aksns.jzkts.xyz","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Feb 2026 07:45:49 GMT","end":"Mon, 11 May 2026 07:45:48 GMT"},"fingerprint":{"sha1":"FF:CA:78:1C:B5:41:1D:94:00:FC:18:CC:F6:2E:6F:89:65:50:2D:4A","sha256":"16:B2:1B:F5:3E:05:92:75:BC:AC:C8:66:76:94:D1:CF:97:A3:B2:9F:4C:62:C5:62:8F:32:6F:3F:C4:02:93:54"}}},"request":{"raw":"GET /images/f1zo342nxe2cqfvv1z2yhng4zkhpsj.gif HTTP/1.1\r\nHost: aksns.jzkts.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gg657.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 10 Feb 2026 20:48:14 GMT\r\ncontent-type: image/gif\r\ncontent-length: 558798\r\nstrict-transport-security: max-age=31536000\r\nlast-modified: Tue, 30 Dec 2025 15:16:26 GMT\r\netag: \"6953ecca-886ce\"\r\nexpires: Thu, 12 Mar 2026 08:45:30 GMT\r\ncache-control: max-age=2592000\r\nserver: nginx\r\nx-cache-status: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":558798,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 960 x 80","md5":"8d17edd33f2367da8c068082b35b202b","sha1":"bd6f23fde71d714923aa31082a6d8b25b9829c82","sha256":"12ea1b9aa6bc4249c3e53cd55dc140d532bad18be456701d84adfb5421b80a77","sha512":"71a7c9e28f369e891d3a2d0924d5d20e916ffb2d709f5761d8a35a90d5d10ddc747351ec771342870167f745b9118ced8f9c76bfaeeb74166c668f6fdd93cde2","ssdeep":"12288:GUm4dpAQ9XbQiUg68A3nkBGayNAiV5EVMe4:NddWNiUiAB54E","tlshash":"d6c4230243b59a227881a63a7e2ffddfcfad51d87a43f62b095f18b14091934f8907e5","first_seen":"2025-02-23T11:07:28.04595Z","last_seen":"2026-06-21T02:07:57.784568Z","times_seen":703,"resource_available":false,"data":null}},"time_used":1861,"timings":{"blocked":-1,"dns":440,"connect":173,"send":0,"wait":161,"receive":914,"ssl":170},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"a3wxxmvs9.axn39smf89dff.com/imgs/960-80.gif","fqdn":"a3wxxmvs9.axn39smf89dff.com","domain":"axn39smf89dff.com","tld":"com"},"ip":{"addr":"23.145.232.113","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gg657.com/","date":"2026-02-10T20:48:13.187Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"a3wxxmvs9.axn39smf89dff.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 15 Dec 2025 05:45:55 GMT","end":"Sun, 15 Mar 2026 05:45:54 GMT"},"fingerprint":{"sha1":"9D:ED:F1:1F:1B:F4:55:73:71:60:F5:4B:F7:D3:17:3A:1C:ED:92:60","sha256":"04:99:6C:FB:DB:25:41:B7:C9:21:DD:59:E8:A6:EE:33:64:F7:F2:69:64:C5:98:C2:4C:14:9D:66:93:FF:6F:5C"}}},"request":{"raw":"GET /imgs/960-80.gif HTTP/1.1\r\nHost: a3wxxmvs9.axn39smf89dff.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gg657.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 10 Feb 2026 20:48:15 GMT\r\ncontent-type: image/gif\r\ncontent-length: 393741\r\nlast-modified: Tue, 10 Jun 2025 12:13:37 GMT\r\netag: \"68482171-6020d\"\r\nexpires: Tue, 10 Mar 2026 08:51:23 GMT\r\ncache-control: max-age=2592000\r\nserver: jiduncdn\r\nx-cache-status: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":393741,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 960 x 80","md5":"06f461d326eedea39ad5ac1891258903","sha1":"f75e174aa8b592bda1763e7fb9fa09db58903394","sha256":"86265dbe0102d6b684aabd28da8086358b32a7941bb267d923ab7a0d1f241ce2","sha512":"b0fd49b8f87abdcaa53b60ad52f6befc6f5224765f1460ee7308f56962fdc4205934989d272daee92f103d0a5a4714982143e5d5de51b29ccba1bb616527bbcd","ssdeep":"6144:y/d/Vd/Vd/Vd/VdkAAcCdAd/29h+Hh+H0:yBVBVBVBVfCdAd+3YP","tlshash":"908412dbe92e7cc4a471ca09c4930e500ca96eab6fe54d2257353edb62d23a8cd01ddd","first_seen":"2025-07-17T11:44:28.358017Z","last_seen":"2026-06-21T00:31:27.740099Z","times_seen":366,"resource_available":false,"data":null}},"time_used":3235,"timings":{"blocked":-1,"dns":1117,"connect":262,"send":0,"wait":263,"receive":1057,"ssl":535},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-10","alert":"Phishing Block","trigger":"a3wxxmvs9.axn39smf89dff.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gg657.com/js/seajump.js","fqdn":"gg657.com","domain":"gg657.com","tld":"com"},"ip":{"addr":"172.67.223.235","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gg657.com/","date":"2026-02-10T20:48:12.498Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gg657.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 27 Jan 2026 15:43:59 GMT","end":"Mon, 27 Apr 2026 16:41:29 GMT"},"fingerprint":{"sha1":"8E:F6:69:C1:DA:98:2F:47:A1:6B:D2:DF:A1:21:A7:F5:03:61:20:D4","sha256":"DD:A7:7E:C6:E7:C6:DF:21:18:67:9C:B4:1E:55:FF:21:3D:F9:BD:32:E0:10:7E:A9:57:00:C4:F9:9A:17:2A:AE"}}},"request":{"raw":"GET /js/seajump.js HTTP/1.1\r\nHost: gg657.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gg657.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/html\r\nlast-modified: Fri, 16 Feb 2024 11:13:35 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nserver: cloudflare\r\ndate: Tue, 10 Feb 2026 20:48:12 GMT\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pIwjW9HT2xvToo1Hv4WyPfmetfYkVeFYMbPtuHTTAMYJN28rgFgOCaBkMYi5K7rFmmKh1RE6lr7lVDQP2XR4druW01D4GTg%3D\"}]}\r\ncf-ray: 9cbe774e0cbab503-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":187,"size_decoded":0,"mime_type":"text/html","magic":"JavaScript source, Unicode text, UTF-8 text, with CRLF line terminators","md5":"1a16725b8a7482f027f444d2f6f268fa","sha1":"1359167fdf581f9d39d37a9ea799607da82681ae","sha256":"fea4581422f1bc446f44c92007066fa82883b9b5492e221e54aeac79bad43dd0","sha512":"f2bd4cd68e623a9d7ab82c95278928cfcdbab01bb1fc19fe762cb43dfef1718ebda07deacd525347b54aedbf5444286b2d5d9c18b01dd157e099f40f71378a8a","ssdeep":"","tlshash":"e2d0221c2c93808101b141218373d804b51660930308c98ab88c02926f3036c088fad9","first_seen":"2025-04-08T08:56:05.156842Z","last_seen":"2026-06-18T03:04:50.875569Z","times_seen":216,"resource_available":true,"data":null}},"time_used":361,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":361,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.niubixxx.com/seo/alltop.js","fqdn":"www.niubixxx.com","domain":"niubixxx.com","tld":"com"},"ip":{"addr":"104.21.85.171","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gg657.com/","date":"2026-02-10T20:48:12.522Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"niubixxx.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 28 Jan 2026 14:45:58 GMT","end":"Tue, 28 Apr 2026 15:44:39 GMT"},"fingerprint":{"sha1":"84:5D:FA:92:FE:9F:81:36:90:25:D5:6F:B9:CF:85:CD:8F:DB:82:C0","sha256":"41:67:B4:C7:BB:62:41:39:6C:A5:B5:6E:62:7D:B9:FB:AC:51:9A:23:03:9A:0B:72:1C:AA:FF:CE:1A:C0:46:41"}}},"request":{"raw":"GET /seo/alltop.js HTTP/1.1\r\nHost: www.niubixxx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gg657.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 10 Feb 2026 20:48:12 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Fri, 21 Jun 2024 17:24:57 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Y6WsqezPl64mgJr18SxbNUfgFNIRFVWOysivnYBaXZz2U5H7vKJdJbe%2Bmt6swMPlnG0v3om%2BuZo5ipkIQadTNW2QTt42vB%2B0P9jLsHyb\"}]}\r\nage: 1292\r\ncache-control: max-age=1800\r\ncf-cache-status: HIT\r\ncontent-encoding: br\r\ncf-ray: 9cbe774e7eb456cb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":276,"size_decoded":0,"mime_type":"application/javascript","magic":"HTML document, ASCII text","md5":"85b3224db9681cd9fac17b292e124b38","sha1":"c7161e730d7b9bc766c4bd97f54cf83ea1520db3","sha256":"9349f94b4430e267b9cc732d8082d7bc4f15c03f8cf154948762a0c6d0d40ba8","sha512":"9499d97930a223667c19d268945521405460941b4f7649066e655ac4702cc0093e28d47beb8adab70ff9290d3858fb3252983eed5ffce0c137301e40f48f4bed","ssdeep":"","tlshash":"fbd02b3b1e73f229253440516474c5f839b8843aef17a9c1dc9b9c300188f99081d880","first_seen":"2024-05-15T22:59:32Z","last_seen":"2026-06-18T03:04:50.837336Z","times_seen":249,"resource_available":true,"data":null}},"time_used":67,"timings":{"blocked":-1,"dns":3,"connect":1,"send":0,"wait":18,"receive":0,"ssl":44},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.niubixxx.com/seo/allbottom.js","fqdn":"www.niubixxx.com","domain":"niubixxx.com","tld":"com"},"ip":{"addr":"104.21.85.171","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gg657.com/","date":"2026-02-10T20:48:12.525Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"niubixxx.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 28 Jan 2026 14:45:58 GMT","end":"Tue, 28 Apr 2026 15:44:39 GMT"},"fingerprint":{"sha1":"84:5D:FA:92:FE:9F:81:36:90:25:D5:6F:B9:CF:85:CD:8F:DB:82:C0","sha256":"41:67:B4:C7:BB:62:41:39:6C:A5:B5:6E:62:7D:B9:FB:AC:51:9A:23:03:9A:0B:72:1C:AA:FF:CE:1A:C0:46:41"}}},"request":{"raw":"GET /seo/allbottom.js HTTP/1.1\r\nHost: www.niubixxx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gg657.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 10 Feb 2026 20:48:12 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Sat, 07 Feb 2026 09:26:13 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tTgOQ1hODbPzYqwW2QQgFf2ghelXRnjZ%2F%2FG0aNhvXy8r2QeyFBI6j%2FtJbiNMKAsXR9vdW5oyPRh%2FK9xqJ7bgFpeWYc8%2Fx3vNefXZexzP\"}]}\r\nage: 1292\r\ncache-control: max-age=1800\r\ncf-cache-status: HIT\r\ncontent-encoding: br\r\ncf-ray: 9cbe774e8ec156cb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":415,"size_decoded":0,"mime_type":"application/javascript","magic":"HTML document, ASCII text","md5":"33270951f01a3a4d875764a26da9e3e1","sha1":"1ac0dbf89c7779d60eadf414032fd5d38330a005","sha256":"5daa0fc6b414fdb5889dbf09e2b6271ac0c7310b8ac17d96103c0cc20d06912e","sha512":"a1ada9177725cf78fed2126666cc7a314794a996f7a504f1a39633b786dafdf8f3557dfca44f4a13ac7868b49409bbae8c65f5f91f49360d4063b548154e15b2","ssdeep":"","tlshash":"25e0abab0eb2f128263441d5b864eebc75b4c07aff4398c2ccab0c304084bb9041d980","first_seen":"2026-02-07T17:10:36.673584Z","last_seen":"2026-03-03T01:28:14.176336Z","times_seen":28,"resource_available":true,"data":null}},"time_used":68,"timings":{"blocked":-1,"dns":3,"connect":5,"send":0,"wait":13,"receive":0,"ssl":40},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.xmshengchao.com:1688/images/cd6e0e47-1268-4b45-903a-8faf14e1db0c","fqdn":"img.xmshengchao.com","domain":"xmshengchao.com","tld":"com"},"ip":{"addr":"172.247.84.2","port":1688,"asn":40065,"as":"CNSERVERS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gg657.com/","date":"2026-02-10T20:48:13.177Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.xmshengchao.com","organization":""},"issuer":{"commonName":"Certum Domain Validation CA SHA2","organization":"Unizeto Technologies S.A."},"validity":{"start":"Sat, 31 May 2025 11:05:28 GMT","end":"Tue, 30 Jun 2026 11:05:27 GMT"},"fingerprint":{"sha1":"20:11:F7:D1:C5:30:B5:EB:08:8E:C5:2F:C2:70:DE:32:B4:55:ED:B8","sha256":"76:6B:96:31:6E:51:97:FA:AF:A9:7D:37:14:82:36:87:44:16:66:C5:8B:33:EC:CB:E2:32:1B:91:FB:4E:64:0B"}}},"request":{"raw":"GET /images/cd6e0e47-1268-4b45-903a-8faf14e1db0c HTTP/1.1\r\nHost: img.xmshengchao.com:1688\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gg657.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, POST, PUT, DELETE\r\naccess-control-allow-origin: *\r\ncache-control: max-age=86400\r\ndate: Tue, 10 Feb 2026 20:48:14 GMT\r\nlocation: https://img.alicdn.com/imgextra/i4/O1CN0182xGwu1E7ju21f8IB_!!6000000000305-1-cib.gif\r\nserver: nginx\r\nstrict-transport-security: max-age=31536000\r\nx-cache: HIT\r\ncontent-length: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":891105,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-21T02:29:43.67316Z","times_seen":16596636,"resource_available":true,"data":null}},"time_used":1332,"timings":{"blocked":-1,"dns":518,"connect":169,"send":0,"wait":354,"receive":0,"ssl":286},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.alicdn.com/imgextra/i4/2215385720025/O1CN01H8neQu1C3V1JUAaln_!!2215385720025-1-chatting.gif","fqdn":"img.alicdn.com","domain":"alicdn.com","tld":"com"},"ip":{"addr":"47.246.44.177","port":443,"asn":24429,"as":"Zhejiang Taobao Network Co.,Ltd","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gg657.com/","date":"2026-02-10T20:48:13.188Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tbcdn.cn","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Fri, 28 Nov 2025 03:07:13 GMT","end":"Sat, 18 Jul 2026 09:41:04 GMT"},"fingerprint":{"sha1":"01:40:62:EF:8C:E5:C1:8A:19:4C:8D:B6:F5:C2:24:7F:DC:C0:9C:8A","sha256":"60:3C:41:A0:78:62:E6:5E:82:F0:FA:CF:5C:C9:D3:22:E4:64:EE:1A:EE:C7:CC:BA:DD:25:08:90:6F:CC:C4:F2"}}},"request":{"raw":"GET /imgextra/i4/2215385720025/O1CN01H8neQu1C3V1JUAaln_!!2215385720025-1-chatting.gif HTTP/1.1\r\nHost: img.alicdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gg657.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: Tengine\r\ncontent-type: image/gif\r\ncontent-length: 618225\r\ndate: Fri, 23 Jan 2026 10:46:36 GMT\r\npicasso-ret-code: SUCCESS\r\npicasso-cache-info: L3-HIT\r\nrequest-time: 0.003\r\ntraceid: a3b5fe9d17691651958233397e\r\nx-powered-by: Picasso\r\npicasso-image-type: normal\r\npicasso-fmt: gif2avif\r\ncache-control: max-age=31536000\r\nvia: ens-cache12.l2de4[0,0,200-0,H], ens-cache8.l2de4[1,0], ens-cache6.se2[0,1,200-0,H], ens-cache7.se2[7,0]\r\naccess-control-allow-origin: *\r\nage: 1591297\r\nali-swift-global-savetime: 1769165196\r\nx-cache: HIT TCP_HIT dirn:9:432425407\r\nx-swift-savetime: Fri, 23 Jan 2026 11:04:57 GMT\r\nx-swift-cachetime: 31534899\r\nback_uri: /imgextra/i4/2215385720025/O1CN01H8neQu1C3V1JUAaln_!!2215385720025-1-chatting.gif_.avif\r\nvary: Accept\r\ns-rt: 7\r\ntiming-allow-origin: *\r\neagleid: 2ff62c9b17707564935232464e\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Tengine","description":"Tengine is a web server which is based on the Nginx HTTP server.","website":"https://tengine.taobao.org","common_platform_enumeration":"","icon":"Tengine.png","categories":["Web servers"]}],"data":{"size":618225,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 960 x 60","md5":"b45d57ae6ae0f92dbe76db9dbf86982f","sha1":"d509f089b4a106e4f48be0f990e3c9ec0ffa8b33","sha256":"6404e7fdbc87c3cb1717710f2f3a0ddd09e1f03e706f2d57ba04b4d2d9cfd056","sha512":"af3461f6fa336a925ae74df33da9fe9b5fac8ab7da1ac7dcf906c3455c57e584c74315845b93dc3b6df8b3c620396eaa8ec4cfa26da7ef2281374676fade8339","ssdeep":"12288:uhn0Yd302AnesxgBbexk5DdIONSiezVg+vOMBa4UQ/XZikrz:Wn0Yx0RneGieZgTvHkX","tlshash":"dad4239af26c980bf15928fc296fc48a5cd8541d4678f93788b7f921f38493d2136b86","first_seen":"2025-12-29T21:36:31.970908Z","last_seen":"2026-03-20T22:51:51.509604Z","times_seen":71,"resource_available":false,"data":null}},"time_used":496,"timings":{"blocked":-1,"dns":294,"connect":20,"send":0,"wait":117,"receive":29,"ssl":35},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.niubixxx.com/seo/hengfu.js","fqdn":"www.niubixxx.com","domain":"niubixxx.com","tld":"com"},"ip":{"addr":"104.21.85.171","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gg657.com/","date":"2026-02-10T20:48:13.193Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"niubixxx.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 28 Jan 2026 14:45:58 GMT","end":"Tue, 28 Apr 2026 15:44:39 GMT"},"fingerprint":{"sha1":"84:5D:FA:92:FE:9F:81:36:90:25:D5:6F:B9:CF:85:CD:8F:DB:82:C0","sha256":"41:67:B4:C7:BB:62:41:39:6C:A5:B5:6E:62:7D:B9:FB:AC:51:9A:23:03:9A:0B:72:1C:AA:FF:CE:1A:C0:46:41"}}},"request":{"raw":"GET /seo/hengfu.js HTTP/1.1\r\nHost: www.niubixxx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gg657.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 10 Feb 2026 20:48:13 GMT\r\nserver: cloudflare\r\nlast-modified: Tue, 10 Feb 2026 15:31:35 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Xj5Dvvnji6lKdmEoXsyEFs8FD%2FK06%2BdgCF9PeCyFMBryoIgYttCvvNWjL1G%2FP6hiFsSS8BGoemyG3p%2FFQRFBdbuSIoS2QRmF5VfSYEEa\"}]}\r\ncontent-encoding: br\r\ncontent-type: application/javascript\r\nage: 1290\r\ncache-control: max-age=1800\r\ncf-cache-status: HIT\r\ncf-ray: 9cbe77526f7e568e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6869,"size_decoded":0,"mime_type":"application/javascript","magic":"HTML document, ASCII text","md5":"709816febddca0878a385da1d39fa11c","sha1":"266cb27ea749757d88e32dd811c7b108795547bb","sha256":"41d49334e37d0e3eb04e3e3bd401a89a8a83aeb35ff56aa3754777f2d79eb7a7","sha512":"cad47deab39eb78395a7cc097a02e38a8cca7f70dbe3e8bb5b53bb5eb01a148f34288ed18b8e39747870f012b6040e545787b15f3ad56d1664deb0df303f101e","ssdeep":"96:Kk7GF7GEVRWAtV1z/bwphMX8q/Kc2I4kO5:n7O7fVRDtV1z/FKJ/","tlshash":"5be1e2e316f1a2365b2543c0a4eaffb8f063f4fe9d438d65ccbe1a344480631256999c","first_seen":"2026-02-10T20:49:06.318685Z","last_seen":"2026-02-11T22:48:51.327165Z","times_seen":3,"resource_available":true,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.alicdn.com/imgextra/i4/O1CN01BjC39J1VkzHdLJRwF_!!6000000002692-1-cib.gif","fqdn":"img.alicdn.com","domain":"alicdn.com","tld":"com"},"ip":{"addr":"47.246.44.177","port":443,"asn":24429,"as":"Zhejiang Taobao Network Co.,Ltd","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gg657.com/","date":"2026-02-10T20:48:14.478Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tbcdn.cn","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Fri, 28 Nov 2025 03:07:13 GMT","end":"Sat, 18 Jul 2026 09:41:04 GMT"},"fingerprint":{"sha1":"01:40:62:EF:8C:E5:C1:8A:19:4C:8D:B6:F5:C2:24:7F:DC:C0:9C:8A","sha256":"60:3C:41:A0:78:62:E6:5E:82:F0:FA:CF:5C:C9:D3:22:E4:64:EE:1A:EE:C7:CC:BA:DD:25:08:90:6F:CC:C4:F2"}}},"request":{"raw":"GET /imgextra/i4/O1CN01BjC39J1VkzHdLJRwF_!!6000000002692-1-cib.gif HTTP/1.1\r\nHost: img.alicdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://gg657.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: Tengine\r\ncontent-type: image/gif\r\ncontent-length: 321245\r\ndate: Tue, 14 Oct 2025 15:46:45 GMT\r\npicasso-ret-code: SUCCESS\r\npicasso-cache-info: L3-HIT\r\nrequest-time: 0.003\r\ntraceid: 9b66a79b17604568054984523e\r\nx-powered-by: Picasso\r\npicasso-image-type: normal\r\npicasso-fmt: gif2avif\r\ncache-control: max-age=31536000\r\nvia: ens-cache4.l2de3[0,0,200-0,H], ens-cache3.l2de3[2,0], ens-cache17.se2[0,1,200-0,H], ens-cache7.se2[3,0]\r\naccess-control-allow-origin: *\r\nage: 10299689\r\nali-swift-global-savetime: 1760456805\r\nx-cache: HIT TCP_HIT dirn:8:161397380\r\nx-swift-savetime: Fri, 31 Oct 2025 16:22:51 GMT\r\nx-swift-cachetime: 30065034\r\nback_uri: /imgextra/i4/O1CN01BjC39J1VkzHdLJRwF_!!6000000002692-1-cib.gif_.avif\r\nvary: Accept\r\ns-rt: 3\r\ntiming-allow-origin: *\r\neagleid: 2ff62c9b17707564944873247e\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Tengine","description":"Tengine is a web server which is based on the Nginx HTTP server.","website":"https://tengine.taobao.org","common_platform_enumeration":"","icon":"Tengine.png","categories":["Web servers"]}],"data":{"size":321245,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 960 x 120","md5":"c94867987c3ebf3383767af1b3f017fa","sha1":"338f063d7909d789d44c20b06022d33b85cdcac8","sha256":"0ae3f0fb6c602fff8fe49bb2b6faf56fcbc371050f0a641959064a41aecd9336","sha512":"d4ba11703a5877d8be760f2b7ae58f2dc144cab19879d6a9885d4f082735083537fc9120045b7b561b37fb3a9c6c3f78aa1b1e19c578676159c3ba5da0e90306","ssdeep":"6144:lJ939BXQSyIxXQSyIxXQSyIxXQSyOT9Hv89559AzmsAzmsAzmd:dtBnyIxnyIxnyIxnyUUvaan","tlshash":"5f64f1f6dbb1c10bfb25233ae8ce7152c9a1a161b596fe634e0813015e7fd41a6dc368","first_seen":"2025-04-27T22:02:41.601985Z","last_seen":"2026-06-20T21:43:00.545221Z","times_seen":1487,"resource_available":false,"data":null}},"time_used":39,"timings":{"blocked":2,"dns":0,"connect":0,"send":0,"wait":25,"receive":12,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"d3h6umz9v49bqq.cloudfront.net/xhtd/960x80.gif","fqdn":"d3h6umz9v49bqq.cloudfront.net","domain":"d3h6umz9v49bqq.cloudfront.net","tld":"cloudfront.net"},"ip":{"addr":"54.192.209.14","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gg657.com/","date":"2026-02-10T20:48:16.260Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cloudfront.net","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Mon, 05 May 2025 00:00:00 GMT","end":"Thu, 23 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"8F:00:F1:34:A7:1E:27:1C:CF:CD:A6:53:8B:C4:82:B0:68:BC:C8:72","sha256":"60:38:9D:24:9E:41:8F:23:AC:D9:14:5C:A3:47:7E:AF:07:DB:9F:2D:6A:8C:0D:08:E9:24:8A:8E:49:A9:4D:28"}}},"request":{"raw":"GET /xhtd/960x80.gif HTTP/1.1\r\nHost: d3h6umz9v49bqq.cloudfront.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gg657.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/gif\r\ncontent-length: 71616\r\ndate: Sun, 01 Feb 2026 07:13:23 GMT\r\nlast-modified: Thu, 11 Dec 2025 03:48:40 GMT\r\netag: \"f92b1bda269d95e21d08e1c5dfa64939\"\r\nx-amz-server-side-encryption: AES256\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 a0228782537cf4c86245da194c3750e4.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: Lj78nWAccNfcnEhios76r2wvGXcTJ7Y08kHaAr2XDWpGUTsh2cQWDg==\r\nage: 826493\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":71616,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 960 x 80","md5":"f92b1bda269d95e21d08e1c5dfa64939","sha1":"48c43ed2815e799baf0e59d68484136612912298","sha256":"f54c4c682f3ddef1b2c4c22578e131fa0bb5e5fb94f81bf8c2551582ae344e23","sha512":"07685abcfb27493a740aa88a2442ce524d7df78b55963131bd3c353ae12157da14a4c332305d4334334a8675100c6603cfe98bb6c49b40ecb66f3f7cbef4675e","ssdeep":"1536:nevXisDdRV0f21MdcOi74BvvunU3H6GnpJ5VtnwpYFzsBJkzsJs:neqsDdRVeS7svh3H6oTHwpbBJkF","tlshash":"21630227da51ce64def82d1955f571bef61901e2c1c4f729f2488f603a7449bab9c203","first_seen":"2025-12-28T09:14:47.007665Z","last_seen":"2026-06-15T03:11:21.560298Z","times_seen":327,"resource_available":false,"data":null}},"time_used":574,"timings":{"blocked":12,"dns":539,"connect":1,"send":0,"wait":3,"receive":8,"ssl":8},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.niubixxx.com/seo/gg.js","fqdn":"www.niubixxx.com","domain":"niubixxx.com","tld":"com"},"ip":{"addr":"104.21.85.171","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gg657.com/","date":"2026-02-10T20:48:12.508Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"niubixxx.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 28 Jan 2026 14:45:58 GMT","end":"Tue, 28 Apr 2026 15:44:39 GMT"},"fingerprint":{"sha1":"84:5D:FA:92:FE:9F:81:36:90:25:D5:6F:B9:CF:85:CD:8F:DB:82:C0","sha256":"41:67:B4:C7:BB:62:41:39:6C:A5:B5:6E:62:7D:B9:FB:AC:51:9A:23:03:9A:0B:72:1C:AA:FF:CE:1A:C0:46:41"}}},"request":{"raw":"GET /seo/gg.js HTTP/1.1\r\nHost: www.niubixxx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gg657.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 10 Feb 2026 20:48:12 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Fri, 06 Feb 2026 13:46:09 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4YilJ26dJL0ZnqKc5yCjgP9aMoPzgwRMm8pWg7q6wC8eUa0kZxfKVqHGltx0akgPNX%2FQLTden3rgnuE0XO9RfpjIpo5ZZt3x%2BTcXgS7S\"}]}\r\nage: 1292\r\ncache-control: max-age=1800\r\ncf-cache-status: HIT\r\ncontent-encoding: br\r\ncf-ray: 9cbe774e7ea756cb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1716,"size_decoded":0,"mime_type":"application/javascript","magic":"HTML document, Unicode text, UTF-8 text","md5":"715790ea16bb9acd2a00689542f8cba9","sha1":"db0deecd4c9beeaa8ac3c742ad195eccfb6c1213","sha256":"e7b2e617225d163bd7aecfbc10de6197b54d3830e838a5cff175bd321a80bb0d","sha512":"a55c772a8437fe33cca8c7aa208f579ba62c813d25c740613dc2d364d256c703b5431d1809986fcdca0f4e01d290fc40e3eedbb40ea7993c8f2075e22ad0316a","ssdeep":"","tlshash":"ba31922b07c8501b5a34d1dfac348b49b676c4bfeb079c90f92c18a03b896a9049e6c5","first_seen":"2026-02-07T17:10:36.684262Z","last_seen":"2026-03-01T06:58:06.971884Z","times_seen":27,"resource_available":true,"data":null}},"time_used":124,"timings":{"blocked":41,"dns":11,"connect":1,"send":0,"wait":25,"receive":0,"ssl":42},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.niubixxx.com/seo/top.js","fqdn":"www.niubixxx.com","domain":"niubixxx.com","tld":"com"},"ip":{"addr":"104.21.85.171","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gg657.com/","date":"2026-02-10T20:48:12.525Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"niubixxx.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 28 Jan 2026 14:45:58 GMT","end":"Tue, 28 Apr 2026 15:44:39 GMT"},"fingerprint":{"sha1":"84:5D:FA:92:FE:9F:81:36:90:25:D5:6F:B9:CF:85:CD:8F:DB:82:C0","sha256":"41:67:B4:C7:BB:62:41:39:6C:A5:B5:6E:62:7D:B9:FB:AC:51:9A:23:03:9A:0B:72:1C:AA:FF:CE:1A:C0:46:41"}}},"request":{"raw":"GET /seo/top.js HTTP/1.1\r\nHost: www.niubixxx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gg657.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 10 Feb 2026 20:48:12 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Fri, 21 Jun 2024 17:25:11 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qgyrbYJXo%2FyXSrwZmVFfKzQaTvne5SysQSDqm1kWCFs1xO%2BeOBHtKa4F12ErzVVQGCQoJu8iUve%2FtDL0LHTBN9xFIdtsiSyizsLJLRyu\"}]}\r\nage: 1292\r\ncache-control: max-age=1800\r\ncf-cache-status: HIT\r\ncontent-encoding: br\r\ncf-ray: 9cbe774eaede56cb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":274,"size_decoded":0,"mime_type":"application/javascript","magic":"HTML document, ASCII text","md5":"89e76a882a96ca322676c7e7513fc7cf","sha1":"f7441018207cf6c2284e7b9fd85f5a3926c2a8fd","sha256":"3789b155ef60fdde106152c17b429b815049b77f8d00fb27134ff0a6da170e9e","sha512":"eb03d837054a59a394cac17438b20a84d10f061aa8b4f9501565b0eea6337da057cdb7cd2ce134c254a31365cd218acb890086f0d41f4e54f8ef5bde68b6b34a","ssdeep":"","tlshash":"d5d02b3b1e73f229253440916474c5f839b8843aef17a9c5dc9b5c300188fd9081d880","first_seen":"2024-05-15T22:59:32Z","last_seen":"2026-06-18T03:04:50.845178Z","times_seen":249,"resource_available":true,"data":null}},"time_used":87,"timings":{"blocked":-1,"dns":3,"connect":5,"send":0,"wait":10,"receive":0,"ssl":56},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.shsrdzs.com:7988/images/f33efac9-d8cd-42b3-8d69-703bf3a205b1","fqdn":"img.shsrdzs.com","domain":"shsrdzs.com","tld":"com"},"ip":{"addr":"172.247.84.2","port":7988,"asn":40065,"as":"CNSERVERS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gg657.com/","date":"2026-02-10T20:48:13.173Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.shsrdzs.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 07 Dec 2025 15:54:55 GMT","end":"Sat, 07 Mar 2026 15:54:54 GMT"},"fingerprint":{"sha1":"3E:46:7A:71:11:59:D9:4A:CA:9F:16:C0:DD:26:A0:2B:79:89:FE:79","sha256":"C8:F5:AF:03:06:71:C1:E7:D5:57:BD:59:ED:94:0D:09:55:7E:74:9E:3F:45:A0:8F:B8:04:BE:0C:61:4D:C3:74"}}},"request":{"raw":"GET /images/f33efac9-d8cd-42b3-8d69-703bf3a205b1 HTTP/1.1\r\nHost: img.shsrdzs.com:7988\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gg657.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, POST, PUT, DELETE\r\naccess-control-allow-origin: *\r\ncache-control: max-age=86400\r\ndate: Tue, 10 Feb 2026 20:48:14 GMT\r\nlocation: https://img.alicdn.com/imgextra/i4/O1CN01t4bXPK1DwkPP59fbe_!!6000000000281-1-cib.gif\r\nserver: nginx\r\nstrict-transport-security: max-age=31536000\r\nx-cache: HIT\r\ncontent-length: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1859138,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-21T02:29:43.67316Z","times_seen":16596636,"resource_available":true,"data":null}},"time_used":1467,"timings":{"blocked":-1,"dns":763,"connect":167,"send":0,"wait":350,"receive":0,"ssl":187},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.alicdn.com/imgextra/i3/2215209493335/O1CN01lLoG9T1aVU01cSziE_!!2215209493335-1-chatting.gif","fqdn":"img.alicdn.com","domain":"alicdn.com","tld":"com"},"ip":{"addr":"47.246.44.177","port":443,"asn":24429,"as":"Zhejiang Taobao Network Co.,Ltd","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gg657.com/","date":"2026-02-10T20:48:15.033Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tbcdn.cn","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Fri, 28 Nov 2025 03:07:13 GMT","end":"Sat, 18 Jul 2026 09:41:04 GMT"},"fingerprint":{"sha1":"01:40:62:EF:8C:E5:C1:8A:19:4C:8D:B6:F5:C2:24:7F:DC:C0:9C:8A","sha256":"60:3C:41:A0:78:62:E6:5E:82:F0:FA:CF:5C:C9:D3:22:E4:64:EE:1A:EE:C7:CC:BA:DD:25:08:90:6F:CC:C4:F2"}}},"request":{"raw":"GET /imgextra/i3/2215209493335/O1CN01lLoG9T1aVU01cSziE_!!2215209493335-1-chatting.gif HTTP/1.1\r\nHost: img.alicdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://gg657.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: Tengine\r\ncontent-type: image/gif\r\ncontent-length: 212686\r\ndate: Sun, 25 Jan 2026 16:11:39 GMT\r\nlast-modified: Sun, 25 Jan 2026 15:17:56 GMT\r\npicasso-ret-code: SUCCESS\r\npicasso-cache-info: L4-HIT\r\nrequest-time: 0.023\r\ntraceid: 4f85b0a117693574996103182e\r\nx-powered-by: Picasso\r\npicasso-image-type: normal\r\npicasso-fmt: gif2avif\r\ncache-control: max-age=31536000\r\nvia: ens-cache9.l2de4[0,0,200-0,H], ens-cache22.l2de4[1,0], ens-cache4.se2[0,0,200-0,H], ens-cache7.se2[3,0]\r\naccess-control-allow-origin: *\r\nage: 1398995\r\nali-swift-global-savetime: 1769357499\r\nx-cache: HIT TCP_MEM_HIT dirn:-2:-2\r\nx-swift-savetime: Sun, 25 Jan 2026 16:36:08 GMT\r\nx-swift-cachetime: 31534531\r\nback_uri: /imgextra/i3/2215209493335/O1CN01lLoG9T1aVU01cSziE_!!2215209493335-1-chatting.gif_.avif\r\nvary: Accept\r\ns-rt: 3\r\ntiming-allow-origin: *\r\neagleid: 2ff62c9b17707564950233705e\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Tengine","description":"Tengine is a web server which is based on the Nginx HTTP server.","website":"https://tengine.taobao.org","common_platform_enumeration":"","icon":"Tengine.png","categories":["Web servers"]}],"data":{"size":212686,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 960 x 80","md5":"f529cbd5ecbc61e74bd6fb0b18643046","sha1":"d3f2249c992c3e82bf0baf060dcd8de5a4009169","sha256":"91a313d69c6ae01b3cdd2173bd824267d2f729ffbf3eb76fa804a915b4a1a9bb","sha512":"89d3d490df832753143a3214fe5c11689b4c127def4bb0ebf4da957e1f8779d30d25722a8fabc5189e710277100263a005763e9a00525840962de41ad85b91f6","ssdeep":"6144:ZTW5xKRPKkfTW5xKRPKkfTNLtGz0IJzDGz0IK1RJqQsK1RJqQh:9W5oN5LW5oN5Ncz2zA1RJVB1RJVh","tlshash":"50241314a036c1afa87dd4226760977f9395e4d2cabb43e1edbc49ad114be04f0cb4ad","first_seen":"2025-07-21T12:24:21.066664Z","last_seen":"2026-06-16T15:14:23.69922Z","times_seen":1047,"resource_available":false,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aksnig.popppo.cn/images/o49ltnhnna9a3rsn0mjlqxzoajcegn.gif","fqdn":"aksnig.popppo.cn","domain":"popppo.cn","tld":"cn"},"ip":{"addr":"107.149.207.124","port":443,"asn":398823,"as":"PEG-LA","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gg657.com/","date":"2026-02-10T20:48:13.158Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aksnig.popppo.cn","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Feb 2026 07:30:14 GMT","end":"Mon, 11 May 2026 07:30:13 GMT"},"fingerprint":{"sha1":"9A:25:7C:1A:8B:43:A1:06:50:0E:AB:07:34:AB:4E:EB:35:AC:2D:68","sha256":"92:45:45:F8:7E:CE:90:B8:81:56:A8:26:F4:67:97:BB:29:67:C7:61:EA:D9:CA:D9:F7:84:EA:63:26:D9:5D:B0"}}},"request":{"raw":"GET /images/o49ltnhnna9a3rsn0mjlqxzoajcegn.gif HTTP/1.1\r\nHost: aksnig.popppo.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gg657.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 10 Feb 2026 20:48:14 GMT\r\ncontent-type: image/gif\r\ncontent-length: 642354\r\nstrict-transport-security: max-age=31536000\r\nlast-modified: Thu, 22 Jan 2026 14:52:41 GMT\r\netag: \"697239b9-9cd32\"\r\nexpires: Thu, 12 Mar 2026 08:30:34 GMT\r\ncache-control: max-age=2592000\r\nserver: nginx\r\nx-cache-status: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":642354,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 960 x 80","md5":"2c643dfd108ed9a53c3fcd428cbe66d5","sha1":"3cbff6bb2c961fe0a94d8c54f4c30db6fe3fd701","sha256":"45514474bc5eef13da3c42acc96b21696d342522f173c435ef69b6a55f80df23","sha512":"3a0bd50bcf68d928b2a1b01780b0bd9e9fe0774a092479aa6bd81a9b095d4592622b4bc259f451026cf4fd257a7ecc0ab107ee87febe3295b47f1013b6cea98e","ssdeep":"12288:WqwphqwphqwphqwmqVrcLOPY2QqVrcLOPY2QqVrcLOPY2QqVrcLOPY2kGXgMXgMH:PUgUgUgJqVcLNqVcLNqVcLNqVcLRhXXM","tlshash":"cfd4238c52fb5cd042b0a8e548acd77f000d95f6496e44d3ab02f982ba4d6ebdd81e7d","first_seen":"2024-06-16T17:39:28Z","last_seen":"2026-06-21T02:07:57.77608Z","times_seen":1472,"resource_available":false,"data":null}},"time_used":1872,"timings":{"blocked":-1,"dns":439,"connect":173,"send":0,"wait":333,"receive":755,"ssl":171},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.n556789.com/1234.gif","fqdn":"www.n556789.com","domain":"n556789.com","tld":"com"},"ip":{"addr":"38.182.168.121","port":443,"asn":40065,"as":"CNSERVERS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gg657.com/","date":"2026-02-10T20:48:13.148Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"www.n556789.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 25 Dec 2025 05:55:55 GMT","end":"Wed, 25 Mar 2026 05:55:54 GMT"},"fingerprint":{"sha1":"CA:AD:66:CA:EA:59:5E:FB:A2:33:88:E2:E8:EF:12:46:7D:44:B0:CE","sha256":"C3:DB:F9:09:6D:F1:74:19:73:AF:6D:50:CB:17:29:5E:75:6B:88:DB:E0:F1:D4:E0:E5:70:BE:E8:18:4B:C7:47"}}},"request":{"raw":"GET /1234.gif HTTP/1.1\r\nHost: www.n556789.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gg657.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/onex\r\nDate: Tue, 10 Feb 2026 20:48:14 GMT\r\nContent-Type: image/gif\r\nContent-Length: 228560\r\nConnection: keep-alive\r\nLast-Modified: Thu, 22 Jan 2026 10:30:30 GMT\r\nVary: Accept-Encoding\r\nETag: \"6971fc46-37cd0\"\r\nExpires: Fri, 06 Mar 2026 17:11:33 GMT\r\nX-One-Cache: HIT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":228560,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 980 x 80","md5":"e3e09f32868ccc8be59d38f5dd91a7ff","sha1":"30c7da2ca07b37b2926066350acf685d9af31171","sha256":"845c8b77791dfce48b20c78402cef1a62ed23f3115b5543a946e804089b0c119","sha512":"e7f7d4a3441fc58cc41791c24a8f1eb15aff1ab44ad29082ff759f73e87e2494391cbb3ef1c651ad76e7076d48f78929c3dc28515243746491574b04b816efa2","ssdeep":"6144:a7gyOnzH2Pm5EVy0i6zXR3wxsiE3ddEUmpp0MswS:ugfiO5EVy0rR3wUPX","tlshash":"73241287d1b529fcbc334ca62c644f491bc8bcb22a9cc156fd7563dfbb86a843054886","first_seen":"2026-02-07T17:10:36.594117Z","last_seen":"2026-06-21T02:07:57.782823Z","times_seen":143,"resource_available":false,"data":null}},"time_used":1946,"timings":{"blocked":-1,"dns":691,"connect":154,"send":0,"wait":188,"receive":587,"ssl":325},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bpyyllqqj7.kmqianneng66.com:9988/JS2XW7c7x4nfyo1yvP5jaBeXQ9Uhxu.gif","fqdn":"bpyyllqqj7.kmqianneng66.com","domain":"kmqianneng66.com","tld":"com"},"ip":{"addr":"198.2.227.151","port":9988,"asn":54600,"as":"PEG-SV","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gg657.com/","date":"2026-02-10T20:48:13.165Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bpyyllqqj7.kmqianneng66.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 02 Dec 2025 16:27:52 GMT","end":"Mon, 02 Mar 2026 16:27:51 GMT"},"fingerprint":{"sha1":"CB:DF:FF:EB:BC:E0:8F:C9:6A:B7:6B:8D:35:BA:E3:72:20:87:8B:81","sha256":"7E:7E:32:C4:05:4C:26:1B:C3:5C:7A:99:B5:49:55:F8:83:66:78:F7:80:A7:69:07:F8:8A:FA:48:AC:0F:1E:1E"}}},"request":{"raw":"GET /JS2XW7c7x4nfyo1yvP5jaBeXQ9Uhxu.gif HTTP/1.1\r\nHost: bpyyllqqj7.kmqianneng66.com:9988\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gg657.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: openresty\r\nDate: Tue, 10 Feb 2026 20:48:14 GMT\r\nContent-Type: image/gif\r\nContent-Length: 236975\r\nConnection: keep-alive\r\nLast-Modified: Fri, 20 Sep 2024 13:34:50 GMT\r\nETag: \"66ed79fa-39daf\"\r\nExpires: Fri, 06 Mar 2026 12:25:58 GMT\r\nCache-Control: max-age=2592000\r\nStrict-Transport-Security: max-age=31536000\r\nVia: mycdn\r\nCDN-Cache: HIT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":236975,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 960 x 60","md5":"7ccbf2ac639505e0654f457a77099d72","sha1":"3d29e2be6b8a8aa9326b7afaacdf9c5d736c6eff","sha256":"c80d7badb5f81716f759b1091d8da8fef332379d859de82769f6f6d946c654f0","sha512":"a928b05ed4c3183eb05ce3e5b39e3d334401b1d18935c0f344d0f54468b4ef147f1512a67ab712c79f72fa95691e41052d74a14c30aa216576c72e3fa12db4cd","ssdeep":"6144:V9+Y3BfrvfrnifyDrNDsN41FiW+U6EfgV7xoFAc6UvbN:VD3x51sO3IUDYxoLRh","tlshash":"2a34126a8078d4a38a5f37eb71facfe39454d6546a9b43121e87126326c64bf40cf23d","first_seen":"2024-09-20T19:52:41Z","last_seen":"2026-06-18T03:04:50.832261Z","times_seen":365,"resource_available":false,"data":null}},"time_used":2126,"timings":{"blocked":-1,"dns":1003,"connect":152,"send":0,"wait":313,"receive":496,"ssl":162},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.alicdn.com/imgextra/i4/O1CN0182xGwu1E7ju21f8IB_!!6000000000305-1-cib.gif","fqdn":"img.alicdn.com","domain":"alicdn.com","tld":"com"},"ip":{"addr":"47.246.44.177","port":443,"asn":24429,"as":"Zhejiang Taobao Network Co.,Ltd","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gg657.com/","date":"2026-02-10T20:48:14.508Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tbcdn.cn","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Fri, 28 Nov 2025 03:07:13 GMT","end":"Sat, 18 Jul 2026 09:41:04 GMT"},"fingerprint":{"sha1":"01:40:62:EF:8C:E5:C1:8A:19:4C:8D:B6:F5:C2:24:7F:DC:C0:9C:8A","sha256":"60:3C:41:A0:78:62:E6:5E:82:F0:FA:CF:5C:C9:D3:22:E4:64:EE:1A:EE:C7:CC:BA:DD:25:08:90:6F:CC:C4:F2"}}},"request":{"raw":"GET /imgextra/i4/O1CN0182xGwu1E7ju21f8IB_!!6000000000305-1-cib.gif HTTP/1.1\r\nHost: img.alicdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://gg657.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: Tengine\r\ncontent-type: image/gif\r\ncontent-length: 891105\r\ndate: Fri, 07 Nov 2025 06:35:26 GMT\r\npicasso-ret-code: SUCCESS\r\npicasso-cache-info: L3-HIT\r\nrequest-time: 0.002\r\ntraceid: a3b55cf217624973261255121e\r\nx-powered-by: Picasso\r\npicasso-image-type: normal\r\npicasso-fmt: gif2avif\r\ncache-control: max-age=31536000\r\nvia: ens-cache14.l2de3[0,0,200-0,H], ens-cache14.l2de3[1,0], ens-cache3.se2[0,0,200-0,H], ens-cache7.se2[2,0]\r\naccess-control-allow-origin: *\r\nage: 8259168\r\nali-swift-global-savetime: 1762497326\r\nx-cache: HIT TCP_MEM_HIT dirn:-2:-2\r\nx-swift-savetime: Fri, 07 Nov 2025 06:44:42 GMT\r\nx-swift-cachetime: 31535444\r\nback_uri: /imgextra/i4/O1CN0182xGwu1E7ju21f8IB_!!6000000000305-1-cib.gif_.avif\r\nvary: Accept\r\ns-rt: 2\r\ntiming-allow-origin: *\r\neagleid: 2ff62c9b17707564945113262e\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Tengine","description":"Tengine is a web server which is based on the Nginx HTTP server.","website":"https://tengine.taobao.org","common_platform_enumeration":"","icon":"Tengine.png","categories":["Web servers"]}],"data":{"size":891105,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 960 x 120","md5":"a380f3d46bc8d4b57fe3b8dbe955bcf0","sha1":"d87a08f56df388b0c2c065a35929b8fd70f11e37","sha256":"0b39699bf6264367e7ce8f5b84b7f4736531b6e4d533d64a4c4562abfdf52047","sha512":"af494a5522c71b009756ee0be8714d0d5ce38d3dfd10bcf9383ac9adfee9806fca03fed7ef9fb71b648ec74f847e6cc5c73532e0f7b9ae9f1e4d34b1d046d436","ssdeep":"12288:7EpeO/GbYnAzZhfK8pJE87smH0O4RsbSM2YUseFfVp8Q79RCNFygrpV+29TxcYNf:Y34ZhfDpaEkO+z5sofVuFyEpVNTxcY1","tlshash":"21152389c70b6401d4ddf5bc2cf656772f33248045a4f5e0b8de9a5da22017eaeb89cb","first_seen":"2025-11-07T23:18:50.584015Z","last_seen":"2026-06-18T22:53:50.832997Z","times_seen":479,"resource_available":false,"data":null}},"time_used":130,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":107,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"niubixxx.xyz/static/css/_pc_theme.css?1300081","fqdn":"niubixxx.xyz","domain":"niubixxx.xyz","tld":"xyz"},"ip":{"addr":"172.67.153.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://gg657.com/","date":"2026-02-10T20:48:12.504Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"niubixxx.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 29 Jan 2026 11:29:57 GMT","end":"Wed, 29 Apr 2026 12:27:11 GMT"},"fingerprint":{"sha1":"FB:B8:B0:62:8B:65:83:47:DC:92:86:D4:4E:D5:38:F9:66:87:25:43","sha256":"12:C7:D4:49:F6:54:D8:3E:81:74:98:15:95:3E:E0:F4:53:0D:60:62:D2:E6:60:5E:F6:9B:E3:68:24:8A:DC:A0"}}},"request":{"raw":"GET /static/css/_pc_theme.css?1300081 HTTP/1.1\r\nHost: niubixxx.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gg657.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 10 Feb 2026 20:48:12 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Thu, 04 Aug 2022 15:09:26 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xTco%2F7er%2BmCBrYwnYYe05ErbF1yDv3vdUG4t1aRkN%2F5SdZjm%2BRfeBq6G9rhrbhiyQlML9dTRFBHV1BdAoWOrP8%2FwXbS8ZJd%2BBF8%3D\"}]}\r\nage: 1292\r\ncache-control: max-age=1800\r\ncf-cache-status: HIT\r\ncontent-encoding: br\r\ncf-ray: 9cbe774f1f0856bb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":98489,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"9041f90d3e8d912556e3e81aee52e3be","sha1":"f43477c6f560a3599b8caf3fc657ebc2434de5f4","sha256":"90ab58189cc280969f6e69edbbf2b38f636226ce7a18db9f41730060ed0b320b","sha512":"b23cc242622fe94e5789eeab3be938963e68d6857faa959c431b062429a70fed09baf0acecb20625592f556c0afd23b4bc3eb6c02845b93f87921a5693e31a35","ssdeep":"1536:Xgrr9GZppuKRqNv3Jct1hsKnTfNy6rnH0eKPOHMOH8MAAp2pYedYZI5p9Jtqoyrq:wrr9gppuKl2XJtZBfwWxDHzFp","tlshash":"c3a3d8339349205c732bd71ae6c2bbac7e28f153d5a70faef51671388bc64961162b4c","first_seen":"2023-04-07T06:53:28Z","last_seen":"2026-06-18T03:04:50.84615Z","times_seen":233,"resource_available":false,"data":null}},"time_used":323,"timings":{"blocked":153,"dns":57,"connect":4,"send":0,"wait":11,"receive":0,"ssl":90},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.niubixxx.xyz/static/js/_www.js?1300081","fqdn":"www.niubixxx.xyz","domain":"niubixxx.xyz","tld":"xyz"},"ip":{"addr":"104.21.58.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gg657.com/","date":"2026-02-10T20:48:12.521Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"niubixxx.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 29 Jan 2026 11:29:57 GMT","end":"Wed, 29 Apr 2026 12:27:11 GMT"},"fingerprint":{"sha1":"FB:B8:B0:62:8B:65:83:47:DC:92:86:D4:4E:D5:38:F9:66:87:25:43","sha256":"12:C7:D4:49:F6:54:D8:3E:81:74:98:15:95:3E:E0:F4:53:0D:60:62:D2:E6:60:5E:F6:9B:E3:68:24:8A:DC:A0"}}},"request":{"raw":"GET /static/js/_www.js?1300081 HTTP/1.1\r\nHost: www.niubixxx.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gg657.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 10 Feb 2026 20:48:12 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Thu, 04 Aug 2022 12:54:14 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LA5xgJ2X55PIltABPaBSihNqhmwaVu5Onsk8Z8Z8ooSCyTBD%2BxrbEdUZemm7R8yBaql9fuPMkv9BuxRZcXQLyqns%2B2dZLDs0vWjgU4cVCRw%3D\"}]}\r\nage: 1292\r\ncache-control: max-age=1800\r\ncf-cache-status: HIT\r\ncontent-encoding: br\r\ncf-ray: 9cbe774f1b41a0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":215060,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (31946)","md5":"0cf8734e6c06dd7f151dc3a85d183801","sha1":"0fe9ba5ee99266634916c72908f514660ce23142","sha256":"4d124ffed6c610238127d63c3470977a11650d67a84e0b55bdfbe19f3eb61cbe","sha512":"f0bc0fd4867888af76e58e3e4fca4fbba6ae158f19c7d8686b67c94717cf2bca076ef67cd6b1f01c876a503d30a15744ebb76c8e3e3b2730ef7fcd67f368f308","ssdeep":"6144:GMmRGaGWMYosLfH76LZLWPiICWp17y8+w8u:INtH/7y8+w8u","tlshash":"44244a887750b0a152e721a6526f8206b3776819b90ac0d4b166d8e77dbca4c037fffd","first_seen":"2023-04-07T06:53:28Z","last_seen":"2026-06-18T03:04:50.883433Z","times_seen":269,"resource_available":true,"data":null}},"time_used":166,"timings":{"blocked":-1,"dns":47,"connect":5,"send":0,"wait":18,"receive":0,"ssl":90},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pg888.12img707989.com:5658/8888/pg507/80.gif","fqdn":"pg888.12img707989.com","domain":"12img707989.com","tld":"com"},"ip":{"addr":"156.231.116.173","port":5658,"asn":984,"as":"OWS","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gg657.com/","date":"2026-02-10T20:48:13.154Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pg888.12img707989.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 17 Dec 2025 05:06:11 GMT","end":"Tue, 17 Mar 2026 05:06:10 GMT"},"fingerprint":{"sha1":"9A:73:1D:86:2C:A6:46:E1:B0:0F:85:6C:CE:30:A9:E1:76:05:DB:BF","sha256":"22:01:98:57:34:8D:38:6D:46:21:3C:87:A9:BC:8A:2A:B1:ED:21:EB:D2:A2:A7:78:42:6E:E0:F3:A5:0E:D1:17"}}},"request":{"raw":"GET /8888/pg507/80.gif HTTP/1.1\r\nHost: pg888.12img707989.com:5658\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gg657.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 10 Feb 2026 20:48:14 GMT\r\ncontent-type: image/gif\r\ncontent-length: 761799\r\nstrict-transport-security: max-age=31536000\r\nlast-modified: Sat, 19 Apr 2025 08:20:28 GMT\r\netag: \"68035ccc-b9fc7\"\r\nexpires: Thu, 12 Mar 2026 13:15:30 GMT\r\ncache-control: max-age=2592000\r\nserver: nginx\r\nx-cache-status: HIT\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\naccess-control-expose-headers: *\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1728000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":761799,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 960 x 80","md5":"882998dc044a88fc9c665d8d417fb5b7","sha1":"d1541ed879daa6b35442f3767e8167d29decdd32","sha256":"7cd5b59a4ababd5029397754e912d0b0e9f3f6b0b2b18136d2ce7ce05406a8ea","sha512":"24e8c06894b4dd0368e1d774cd82975ad99ec1c3ed22371794c9161c0b20061ea18fcabd72c7fd134ff2397595db76123cd4b0e6b96441688e975edcb4f68c2e","ssdeep":"12288:w+zzzz8LaxmTArEaxmTArEaxmTArEaxmTArEaxmTvd7o7o7o7oOD25////D:w+zzzz8L5ArE5ArE5ArE5ArE54I////D","tlshash":"c6f423f7faf8e246b111d41e738379990632f5a48ab3b8caf04d251ce67e0db901d958","first_seen":"2025-04-23T19:37:43.602292Z","last_seen":"2026-06-20T11:53:07.665643Z","times_seen":2173,"resource_available":false,"data":null}},"time_used":2777,"timings":{"blocked":-1,"dns":215,"connect":290,"send":0,"wait":289,"receive":1679,"ssl":299},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.xmshengchao.com:1688/images/edd38a54-e0af-4d32-88d6-e9ce82c33192","fqdn":"img.xmshengchao.com","domain":"xmshengchao.com","tld":"com"},"ip":{"addr":"172.247.84.2","port":1688,"asn":40065,"as":"CNSERVERS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gg657.com/","date":"2026-02-10T20:48:13.178Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.xmshengchao.com","organization":""},"issuer":{"commonName":"Certum Domain Validation CA SHA2","organization":"Unizeto Technologies S.A."},"validity":{"start":"Sat, 31 May 2025 11:05:28 GMT","end":"Tue, 30 Jun 2026 11:05:27 GMT"},"fingerprint":{"sha1":"20:11:F7:D1:C5:30:B5:EB:08:8E:C5:2F:C2:70:DE:32:B4:55:ED:B8","sha256":"76:6B:96:31:6E:51:97:FA:AF:A9:7D:37:14:82:36:87:44:16:66:C5:8B:33:EC:CB:E2:32:1B:91:FB:4E:64:0B"}}},"request":{"raw":"GET /images/edd38a54-e0af-4d32-88d6-e9ce82c33192 HTTP/1.1\r\nHost: img.xmshengchao.com:1688\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gg657.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, POST, PUT, DELETE\r\naccess-control-allow-origin: *\r\ncache-control: max-age=86400\r\ndate: Tue, 10 Feb 2026 20:48:14 GMT\r\nlocation: https://img.alicdn.com/imgextra/i4/O1CN01BjC39J1VkzHdLJRwF_!!6000000002692-1-cib.gif\r\nserver: nginx\r\nstrict-transport-security: max-age=31536000\r\nx-cache: HIT\r\ncontent-length: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":321245,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-21T02:29:43.67316Z","times_seen":16596636,"resource_available":true,"data":null}},"time_used":1317,"timings":{"blocked":-1,"dns":516,"connect":169,"send":0,"wait":338,"receive":0,"ssl":292},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gg657.com/favicon.ico","fqdn":"gg657.com","domain":"gg657.com","tld":"com"},"ip":{"addr":"172.67.223.235","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gg657.com/","date":"2026-02-10T20:48:16.270Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gg657.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 27 Jan 2026 15:43:59 GMT","end":"Mon, 27 Apr 2026 16:41:29 GMT"},"fingerprint":{"sha1":"8E:F6:69:C1:DA:98:2F:47:A1:6B:D2:DF:A1:21:A7:F5:03:61:20:D4","sha256":"DD:A7:7E:C6:E7:C6:DF:21:18:67:9C:B4:1E:55:FF:21:3D:F9:BD:32:E0:10:7E:A9:57:00:C4:F9:9A:17:2A:AE"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: gg657.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gg657.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: image/x-icon\r\nlast-modified: Fri, 16 Feb 2024 03:03:09 GMT\r\npriority: u=6,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ndate: Tue, 10 Feb 2026 20:48:16 GMT\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"10f414ac8460da1:0\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=N6%2B%2FttBLZ7DGHjrDZzvcN2lq2K8T1ypCCULNByEkWV6nDFNj1HMQnrMQDXG1vtEpSM4mD33zQe%2FtA1lrr1m%2FWwpzZNFFfSI%3D\"}]}\r\ncf-ray: 9cbe7765adf6b503-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":894,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 16x16, 24 bits/pixel","md5":"85bcb5a8dbce75621354e0603ed7a45a","sha1":"fba5ab097ff35dcda395e7e4ed76474b4a04a20a","sha256":"2e85e4b42155cb983cb7ba0de1f73f9d5712b8569f1f26bd65a1f756ccde97ab","sha512":"83fbd71545c7e42ad4db6c81cfee75ed4ca2a3807422e876d5f3b2d546f4991c5908d5fd8ae615e08ff7aad73104cd46846f7ffa03a38640e34b5d9f5b04c08c","ssdeep":"","tlshash":"711141c03764cc81cb698770221fb021022fce46b0a353a91c9027989d96d9a529de88","first_seen":"2023-05-28T16:47:00Z","last_seen":"2026-06-18T03:04:50.874737Z","times_seen":294,"resource_available":false,"data":null}},"time_used":369,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":369,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"niubixxx.xyz/static/css/_swiper.css?1300081","fqdn":"niubixxx.xyz","domain":"niubixxx.xyz","tld":"xyz"},"ip":{"addr":"172.67.153.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://gg657.com/","date":"2026-02-10T20:48:12.507Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"niubixxx.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 29 Jan 2026 11:29:57 GMT","end":"Wed, 29 Apr 2026 12:27:11 GMT"},"fingerprint":{"sha1":"FB:B8:B0:62:8B:65:83:47:DC:92:86:D4:4E:D5:38:F9:66:87:25:43","sha256":"12:C7:D4:49:F6:54:D8:3E:81:74:98:15:95:3E:E0:F4:53:0D:60:62:D2:E6:60:5E:F6:9B:E3:68:24:8A:DC:A0"}}},"request":{"raw":"GET /static/css/_swiper.css?1300081 HTTP/1.1\r\nHost: niubixxx.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gg657.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 10 Feb 2026 20:48:12 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Thu, 04 Aug 2022 11:35:34 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GKaPGh7oITRJAnYxeDsLyYT3gSENOwB7xi0D3NZRv%2B90gmAkAxyknhqruUMtRQ9yfjnNeLxxb%2FrxQzKUKJI3zTVeMD%2F%2ByLiIn6o%3D\"}]}\r\nage: 1292\r\ncache-control: max-age=1800\r\ncf-cache-status: HIT\r\ncontent-encoding: br\r\ncf-ray: 9cbe774f1f0556bb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19678,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (19678), with no line terminators","md5":"6af94f4f4edcb1ad75e8657fc5dd6ada","sha1":"d693aa251413c81c1741429e69177feb09114111","sha256":"9b117ef60d65bdca025fefb996ec9aff7b0c32b1a419035ca4a607309217e4fd","sha512":"775b6fb616c4b2070633d08905cdafd3714c10a1a833712302aa2029b855be307cf4d66ede1f5debe0908be6462ea3ca298b5d022c0f0ff36cf7d4534d4e07e1","ssdeep":"192:WSB8JOywyJCLnvaOxSTjy9cwaAufJeRxwd4l9:WSuOy3OQjy9cwaAnG4l9","tlshash":"d0924e2c17012057b6330f198bd99778db24c9835e4369ef6740de08cbbb96922af767","first_seen":"2023-04-07T06:53:28Z","last_seen":"2026-06-18T03:04:50.808066Z","times_seen":269,"resource_available":false,"data":null}},"time_used":319,"timings":{"blocked":149,"dns":55,"connect":4,"send":0,"wait":15,"receive":0,"ssl":38},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.alicdn.com/imgextra/i3/O1CN01whCNsz1JMSilHnWL7_!!3883661014-1-fleamarket.gif","fqdn":"img.alicdn.com","domain":"alicdn.com","tld":"com"},"ip":{"addr":"47.246.44.177","port":443,"asn":24429,"as":"Zhejiang Taobao Network Co.,Ltd","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gg657.com/","date":"2026-02-10T20:48:13.147Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tbcdn.cn","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Fri, 28 Nov 2025 03:07:13 GMT","end":"Sat, 18 Jul 2026 09:41:04 GMT"},"fingerprint":{"sha1":"01:40:62:EF:8C:E5:C1:8A:19:4C:8D:B6:F5:C2:24:7F:DC:C0:9C:8A","sha256":"60:3C:41:A0:78:62:E6:5E:82:F0:FA:CF:5C:C9:D3:22:E4:64:EE:1A:EE:C7:CC:BA:DD:25:08:90:6F:CC:C4:F2"}}},"request":{"raw":"GET /imgextra/i3/O1CN01whCNsz1JMSilHnWL7_!!3883661014-1-fleamarket.gif HTTP/1.1\r\nHost: img.alicdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gg657.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: Tengine\r\ncontent-type: image/gif\r\ncontent-length: 363734\r\ndate: Wed, 10 Dec 2025 10:15:43 GMT\r\npicasso-ret-code: SUCCESS\r\npicasso-cache-info: L3-HIT\r\nrequest-time: 0.001\r\ntraceid: a3b5839717653617431612953e\r\nx-powered-by: Picasso\r\npicasso-image-type: normal\r\npicasso-fmt: gif2avif\r\ncache-control: max-age=31536000\r\nvia: ens-cache26.l2de4[0,0,200-0,H], ens-cache10.l2de4[2,0], ens-cache11.se2[0,1,200-0,H], ens-cache7.se2[4,0]\r\naccess-control-allow-origin: *\r\nage: 5394750\r\nali-swift-global-savetime: 1765361743\r\nx-cache: HIT TCP_HIT dirn:9:93006357\r\nx-swift-savetime: Wed, 10 Dec 2025 14:35:55 GMT\r\nx-swift-cachetime: 31520388\r\nback_uri: /imgextra/i3/O1CN01whCNsz1JMSilHnWL7_!!3883661014-1-fleamarket.gif_.avif\r\nvary: Accept\r\ns-rt: 4\r\ntiming-allow-origin: *\r\neagleid: 2ff62c9b17707564935252465e\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Tengine","description":"Tengine is a web server which is based on the Nginx HTTP server.","website":"https://tengine.taobao.org","common_platform_enumeration":"","icon":"Tengine.png","categories":["Web servers"]}],"data":{"size":363734,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 960 x 80","md5":"d7ff515e03937b7f3d05dc1e5e0574ec","sha1":"b2ca8abf36ccabdfa5096bd7314f176b5cf18224","sha256":"dcdc794ff4619e6d8829268fec978d1a9e427a0ad1862cfbd8e2c64ad97b7b74","sha512":"da1f2927b88b142146afc53c691c4bc73cb27806dc5788eb1423d560d1ea1da63b97b8072f87139410bdd4ece9b0ad21871387afc578fbdbd1b248aca59ac7d6","ssdeep":"6144:LihnjhcYUvVYQLjyjiR/ScK8VHgxKm3yipYKY8Z+gKDJpRNiglCXwOeny6tcpTuE:LiFjp2VlLjlRqvcmTB0rDWjwOetcCS8o","tlshash":"8474238f864e0d083f77b918895a59d6354bbd709e6883354a734df7a6943de900ccf2","first_seen":"2025-12-13T16:22:24.895871Z","last_seen":"2026-03-06T23:27:18.014022Z","times_seen":55,"resource_available":false,"data":null}},"time_used":880,"timings":{"blocked":372,"dns":336,"connect":21,"send":0,"wait":24,"receive":89,"ssl":32},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"2026tu.myxuanxuan.com/sx2026-xwmgdv2tiq","fqdn":"2026tu.myxuanxuan.com","domain":"myxuanxuan.com","tld":"com"},"ip":{"addr":"43.152.43.121","port":443,"asn":139341,"as":"ACE","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gg657.com/","date":"2026-02-10T20:48:13.182Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"2026tu.myxuanxuan.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Sun, 18 Jan 2026 00:00:00 GMT","end":"Mon, 18 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"89:A5:51:BC:5F:09:A7:47:86:8A:45:EC:EE:78:46:C6:17:A3:08:CD","sha256":"02:BE:A0:16:7A:20:13:EB:60:A2:1D:D0:AF:87:4C:A4:41:0C:07:C7:1A:35:F8:CA:F3:EC:E7:F0:21:5F:15:C7"}}},"request":{"raw":"GET /sx2026-xwmgdv2tiq HTTP/1.1\r\nHost: 2026tu.myxuanxuan.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gg657.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\nserver: nginx\r\ndate: Tue, 10 Feb 2026 20:46:50 GMT\r\ncontent-type: text/html\r\nlocation: https://img.alicdn.com/imgextra/i3/2215209493335/O1CN01lLoG9T1aVU01cSziE_!!2215209493335-1-chatting.gif\r\ncontent-length: 138\r\nx-nws-log-uuid: 294925610651180446\r\nx-cache-lookup: Cache Miss\r\nstrict-transport-security: max-age=1;\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":212686,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-21T02:29:43.67316Z","times_seen":16596636,"resource_available":true,"data":null}},"time_used":1846,"timings":{"blocked":-1,"dns":1481,"connect":16,"send":0,"wait":253,"receive":0,"ssl":95},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}