{"report_id":"b7066d6a-5e54-47f9-8906-1c3d79722a95","version":6,"status":"done","tags":[],"date":"2025-12-21T09:24:14Z","url":{"schema":"http","addr":"bee91.top/vodplay/jbd-275-1-1","fqdn":"bee91.top","domain":"bee91.top","tld":"top"},"ip":{"addr":"104.19.61.144","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"bee91.top/vodplay/jbd-275-1-1","fqdn":"bee91.top","domain":"bee91.top","tld":"top"},"title":"JBD-275 蛇縛の未亡人慕情 忘れ得ぬ夫の遺産 加藤椿 - 爱蜜TV | 高清AV | 免費AV","dom":{"size":12583,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (6870)","md5":"69438e853b8f9aaf50fb59f2c9f2f352","sha1":"0f64af954f0808e66c18ba774231625fe9789a50","sha256":"176deadb41cbc55f3f3ab89b3b65ea7ed2582e0b908ebf7b7860f4eb949f90a5","sha512":"d0e2957a11e7f08a58edf157433079aeb0a65d03668a8a4fe1dd5cbe02f6285c157057b55a813b1031189fbb83c1241ec6d1ef16e785636c637009c2e1132fb0","ssdeep":"384:DU6FmOiChih5KhzHGc6M2DECtZR3M5Oe1dNmglBgAOLUlUjUXUyim8Y:DU6FmOiBhZAV3SgE+","tlshash":"3942b0b498096a1e431b4dc864a3a74f31ead30aee83d558b7fc57e56fc9c608c051eb","dom_hash":"domhasheaa116c3a1d9eadbc3ad032ad5cdee96","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"bee91.top/vodplay/jbd-275-1-1","fqdn":"bee91.top","domain":"bee91.top","tld":"top"},"ip":{"addr":"104.19.61.144","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-01-25T09:24:14Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"tq2tmylv9quqkoe"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":4}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-21","alert":"Sinkholed","trigger":"bee91.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-21","alert":"Sinkholed","trigger":"home.bee91.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-21","alert":"Sinkholed","trigger":"assets.bee91.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-21","alert":"Sinkholed","trigger":"t.y7im.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"t.y7im.sbs","ip":{"addr":"172.67.140.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-04-20","domain_rank":0,"first_seen":"2025-07-21T12:44:42.900364Z","last_seen":"2025-12-16T02:03:56.969557Z","alert_count":1,"request_count":1,"received_data":749,"sent_data":417,"comment":"","tags":null,"fingerprints":[{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"bee91.top","ip":{"addr":"104.19.238.248","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-01-08","domain_rank":0,"first_seen":"2025-07-23T08:11:19.058156Z","last_seen":"2025-12-20T04:20:47.857417Z","alert_count":28,"request_count":28,"received_data":1454513,"sent_data":14391,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"home.bee91.top","ip":{"addr":"104.21.90.76","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-01-08","domain_rank":0,"first_seen":"2025-07-23T08:11:19.057292Z","last_seen":"2025-12-20T06:05:50.379073Z","alert_count":6,"request_count":6,"received_data":2107397,"sent_data":2694,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"assets.bee91.top","ip":{"addr":"172.67.153.205","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-01-08","domain_rank":0,"first_seen":"2025-07-23T08:11:19.059801Z","last_seen":"2025-12-20T04:20:47.705172Z","alert_count":29,"request_count":30,"received_data":2315137,"sent_data":13542,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.251.38.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2025-12-14T22:13:59.416786Z","alert_count":0,"request_count":6,"received_data":97668,"sent_data":3106,"comment":"","tags":null,"fingerprints":null},{"fqdn":"cloudlogobox.com","ip":{"addr":"103.224.182.214","port":443,"asn":133618,"as":"Trellian Pty. Limited","country":"United States","country_code":"US"},"domain_registered":"2024-02-24","domain_rank":151034,"first_seen":"2022-01-18T09:46:06Z","last_seen":"2025-12-18T20:46:13.047196Z","alert_count":0,"request_count":1,"received_data":246,"sent_data":468,"comment":"","tags":null,"fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"bee91.top/static/js/player.js?t=a20251221","fqdn":"bee91.top","domain":"bee91.top","tld":"top"},"ip":{"addr":"104.19.238.248","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ee70b623bd8b1c7b432ba051d022ceb3","sha1":"84b100d4876878317f1721ce5b4c64f00fb53eed","sha256":"1ad942843af46445fd57d7547245ae519bfb5544336a1a3fa0176dddd443e7ca","sha512":"fb7ca00fdbe0a76b7cfca26097b1c6a0e765010e1a577f141505f06b73397b4d5da6bd8023bdf7fb3625279acde46e5f950fef5b151881817a845a0d9eaa34a8","ssdeep":"192:fIsrTuODlRkRtyu5cPqLCI0IIkUcdat58MIOy1Xi:fQdwue5uI","tlshash":"4502561717af1412d2fab86a5fab4c0a6628c307464186eabe3d75dc8fc4435163af78","size":8786,"data":"","first_seen":"2024-12-14T09:46:09.477643Z","last_seen":"2026-04-04T21:56:05.540007Z","times_seen":353,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bee91.top/static/js/playerconfig.js?t=20251221","fqdn":"bee91.top","domain":"bee91.top","tld":"top"},"ip":{"addr":"104.19.238.248","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"dd98ea13e9d025876f5ea0f6cc54f476","sha1":"c1fa960e143ae316defa6fa71e9c4d0537002f08","sha256":"dffc9dc63286b052d4461fd68c6c7093ffacbe898cb6537ff1f31792cd5cbc6b","sha512":"c66b9bc2d685f18a58f3b0f0dae89ef99ec7388afd9d6221d9f5a9c1b0e653629fe7f2e6ed34425130fb78c8e5e84a2a2066bf7af9556197d86e399848f4a326","ssdeep":"","tlshash":"bd31fd1b8f4a2835c3f750f8dde42e1649df0bb8b191dad96c26bcb83aec125b600008","size":1572,"data":"","first_seen":"2024-12-14T09:46:09.484359Z","last_seen":"2026-04-04T21:56:05.580551Z","times_seen":353,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bee91.top/vodplay/jbd-275-1-1","fqdn":"bee91.top","domain":"bee91.top","tld":"top"},"ip":{"addr":"104.19.238.248","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"4b3bb261e516636a965b7afa065ec6a3","sha1":"7cf93e4de8878625c916539912599256e0f33226","sha256":"ac06220268932b12b9a1d9b466813e1fba04f55792dd4dc35758751aeab4cfd6","sha512":"b70b975fbc4a14865d6a9c4f1932638832283adb89bb956094419a1ac4af0788c734a83c1b4f9435264be7795b6a07780b1c32e1c414312791ed3ddb3d88e810","ssdeep":"","tlshash":"52b01210850e30028c473be10e4b4c063add1550406f069119c4d676c34f8000308cee","size":91,"data":"","first_seen":"2025-10-07T12:55:10.443164Z","last_seen":"2026-03-11T03:09:48.569777Z","times_seen":37,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bee91.top/static/player/ckplayer/js/ckplayer.min.js","fqdn":"bee91.top","domain":"bee91.top","tld":"top"},"ip":{"addr":"104.19.238.248","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"b0c58a0c77921e6e04e18a2594d67f8a","sha1":"2aa94a801d0f546f546d24030a81e972a9f15988","sha256":"fe806dee46b6873f6baa4c1ad391b8c6e1b4ad721d3f527eef35986e619bf935","sha512":"38b6f029472a5c095159e0f486b3171847ad7b3cb36bcfd9ffcbbcf38c1b47ec29001b109049d45194b5de15f220d4ef925454e6781e997a5e6061720ff2851d","ssdeep":"3072:/aTnI9R2dfcZHlOpZ+iJAOgXmO00B9SP6mSdt:/aTnI9R2dfcZHlOpfeOFO0gSPi","tlshash":"14d3ea447b4164b9c3e793ff196e16127178d6b28505b014f13abedcee304431ab7aae","size":138948,"data":"","first_seen":"2024-08-29T17:29:32.964775Z","last_seen":"2026-04-04T21:56:05.572615Z","times_seen":463,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bee91.top/template/jable/ads/bottom.js","fqdn":"bee91.top","domain":"bee91.top","tld":"top"},"ip":{"addr":"104.19.238.248","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"e36940d60d22618acdefb6e8adb5e2f6","sha1":"462f5d7746bff89f20c07be12826ce4a1846644b","sha256":"feaf9aa9d017fc5473347ece941d8877d88512675b3be9e291c77d6625453771","sha512":"5fe64910d7fbb88336bf3a782690561fb4e13ada3f01a76f6476652e50c51a9d5d70aacccbdd0828c031d8737382f003839de78d4c785ae680f6f6230c0173d0","ssdeep":"","tlshash":"fa41601a0690008b603121f2fea79118d771e1176f18d477b5dc0e30bfba8d8b96a8bc","size":2335,"data":"","first_seen":"2025-11-19T00:36:29.211808Z","last_seen":"2026-01-04T14:38:16.650434Z","times_seen":462,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bee91.top/static/js/jquery.js","fqdn":"bee91.top","domain":"bee91.top","tld":"top"},"ip":{"addr":"104.19.238.248","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"397754ba49e9e0cf4e7c190da78dda05","sha1":"ae49e56999d82802727455f0ba83b63acd90a22b","sha256":"c12f6098e641aaca96c60215800f18f5671039aecf812217fab3c0d152f6adb4","sha512":"8c64754f77507ab2c24a6fc818419b9dd3f0ceccc9065290e41afdbee0743f0da2cb13b2fbb00afa525c082f1e697cb3ffd76ef9b902cb81d7c41ca1c641dffb","ssdeep":"1536:dnu00HWWaRxkqJg09pYxoxDKMXJrg8hXXO4dK3kyfiLJBhdSZE+I+Qg7rbaN1RUx:ddkWgoBhcZRQgmW42qe","tlshash":"8c932bdd72d2b03257ab30bd106f540ff2361959280d8850f268d8f9bc79a49a277f6d","size":92629,"data":"","first_seen":"2023-03-07T01:02:08Z","last_seen":"2026-04-06T08:11:42.927702Z","times_seen":60860,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bee91.top/vodplay/jbd-275-1-1","fqdn":"bee91.top","domain":"bee91.top","tld":"top"},"ip":{"addr":"104.19.238.248","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"8075aadeede8de34443572fe16f568a1","sha1":"5b5f2f7f1adc1b8752c4df8ca0419815066f445c","sha256":"12ee75095438967276ca8d805a2995cf6997fbcdc6d7ac3cedc421a06038d497","sha512":"ed25643802f117811b97538685bd4f2b32010a9bea6016e90547cedead3c792b3b6e5dd7cd3c503bde03d3fde637d1197a9a0820256d1441a4cf8d52f82a4044","ssdeep":"","tlshash":"8fe020dad38eda4c82050b86660d3c56d20d382d5af0c5affc36cb7c59c90f29655d94","size":362,"data":"","first_seen":"2025-12-21T09:24:26.606555Z","last_seen":"2025-12-21T09:24:26.606555Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bee91.top/static/player/ckplayer.html","fqdn":"bee91.top","domain":"bee91.top","tld":"top"},"ip":{"addr":"104.19.238.248","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"ef857b294a9a5e2a3ddb374c8695e937","sha1":"3d7b96bf386fcafe1eb3cc4e1bb27d0160b81111","sha256":"8431ac57782fd36cab39690a363d26a710bca9577b07b72e94a98fb4081ba2b1","sha512":"07fa9f84ca369995b10e793f38c6ec90ba284e3f46fdd09e3b22e1d4547abef71ae34a6cb822bce48e223b6621cc37d1cab8933dacb8083330f09fd6c1dde093","ssdeep":"","tlshash":"d631408812b854ba8d132ae02f2072da3231015b4644af34fa0fa76dbf4d8264962bd7","size":1551,"data":"","first_seen":"2025-09-23T05:20:44.052777Z","last_seen":"2026-01-25T12:46:25.305263Z","times_seen":280,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bee91.top/template/jable/ads/play_ads.js","fqdn":"bee91.top","domain":"bee91.top","tld":"top"},"ip":{"addr":"104.19.238.248","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"15387f298f3ea9de570394447d76e77c","sha1":"d38b2aaa8b91c4d2d40a257e7c5d2cb75289c231","sha256":"7619790f87fe690eb0d89b0e114f80a39548e8acd0fbf1d7e1d35e9f9b332035","sha512":"bad5771c9b68182e0958ef1c3884a38b4051dd27a070a10b31d352437a2be715f320e8b4fe16d901c1d7a6f50e222e033fdcbb599d3017678ca258a22751bbf4","ssdeep":"","tlshash":"4041311c53810197507a12f2ffa78199c238d0037e28d9a67add1d45fffe8c9ba598b8","size":2281,"data":"","first_seen":"2025-11-19T02:12:14.360381Z","last_seen":"2026-01-04T07:07:05.952349Z","times_seen":205,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bee91.top/static/player/ckplayer.js","fqdn":"bee91.top","domain":"bee91.top","tld":"top"},"ip":{"addr":"104.19.238.248","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9adfb5de4e8c0e2a6759d9db2ae4a99e","sha1":"cc16d5d71465fc96d89f9f858af5ffafc234b4c1","sha256":"12869d8af68840602fbd7df5f12cf8dcbeea9bc5d514f0aefc80629a5145efbc","sha512":"43ff1b5b7b518dcaf5ab6fbee702a23d499b3ffbdffd3aebf08845d865dddb6475c52c88960b11e8ebd3beed761a5e19f118084421e11d4e99a6ffdf9d2397cb","ssdeep":"","tlshash":"5bd02b46e148f80c84666194e1f589543b429c57a703e724d5633438045c1771d1173c","size":270,"data":"","first_seen":"2024-12-14T09:46:09.432667Z","last_seen":"2026-04-04T21:56:05.575597Z","times_seen":353,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bee91.top/template/jable/ads/top.js","fqdn":"bee91.top","domain":"bee91.top","tld":"top"},"ip":{"addr":"104.19.238.248","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"79fe358e90e7c7d0a70971d52807a804","sha1":"a89b804129c02d8dc8fcd962697e2965fc8a1f0e","sha256":"6c40f8441828caf57241196f6e6eee6a909dcd1d5369cebb595b8e08589a7666","sha512":"bdee4d75b56645f58e3abd9029b50d005f0219c24df801ea111c4022466bea14b778b54f38ec00282c7a05922dbc55b7eb58acf9d96007339d2aba61be9f61e9","ssdeep":"","tlshash":"3141322a0aa10147501220f4ff9b911ce729d1077f19e86779dc1e15bfda8d9bc7d8b8","size":2334,"data":"","first_seen":"2025-11-19T00:36:29.202304Z","last_seen":"2026-01-04T14:38:16.565296Z","times_seen":448,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bee91.top/vodplay/jbd-275-1-1","fqdn":"bee91.top","domain":"bee91.top","tld":"top"},"ip":{"addr":"104.19.238.248","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"e5550d42abf6cfef7b39fdb2ba2040cf","sha1":"3a19168a0d0a914d5443e266515c5b81cb3bc811","sha256":"42ffab5a38847313d2c07b60b651e88d3c0241758d16004cee83209c0dd0ab4b","sha512":"692df7d7302db1de09af5de0d4f2413e162f5798221f714ccdfbeba194a18d4f058e49a6aa8d6a3dd9fd646775b9785985a2f9cacea2fe93a3c3945d0d79bc83","ssdeep":"","tlshash":"f2f05cb4374a1d19c94461c28cca9097fffc3120a4486748d7d8cf5993bcaa503878bb","size":472,"data":"","first_seen":"2025-12-21T09:24:26.608036Z","last_seen":"2025-12-21T09:24:26.608036Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bee91.top/vodplay/jbd-275-1-1","fqdn":"bee91.top","domain":"bee91.top","tld":"top"},"ip":{"addr":"104.19.238.248","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"ea47b176360722efe5adf04fe7f9dbf1","sha1":"055f6d7f12e483a281a2eae29b1530a2210d8b8c","sha256":"add40708a352649cd4bdd4dc74cd95453dbc437496ec5a88464da23cf2343709","sha512":"84e07650db87b68367f0ff40a290556f8ee9f2de19399d8bd38137fe11c2ca5717499c05072538e87cf3304e14aadf7a883f4689ba024397d7508b80d7e7394e","ssdeep":"","tlshash":"dae0d8dbfb4c112e9172301025be21c8182c50b0e5011d63fdf966151850d5a26916fe","size":385,"data":"","first_seen":"2023-07-29T14:18:19Z","last_seen":"2026-04-06T08:35:14.005814Z","times_seen":925,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bee91.top/static/player/ckplayer.html","fqdn":"bee91.top","domain":"bee91.top","tld":"top"},"ip":{"addr":"104.19.238.248","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"737be44a64f4663ea3ebfccab0aaf195","sha1":"2db2b498e878b1539ad56d5d14adfb66b46e6053","sha256":"1224f7d35a00ad5dee6cb2c65d06b2e43c24cf09b338ffbc801482a3e4935a6a","sha512":"2ef1a7d654dbc150bfbefd13b8385dee0ddf4856371e6ad7229b07ff1ebed0c2c8c54b91b4a150f37a4f91dddaffccd05fdbf6a21307537312751641c4982a57","ssdeep":"","tlshash":"3a50000000000000000000c000003000f0000000000c0300f003300c000c0000300000","size":8,"data":"","first_seen":"2023-11-23T12:38:20Z","last_seen":"2026-04-04T21:56:05.589351Z","times_seen":469,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bee91.top/assets/js/site.js?date=20250101","fqdn":"bee91.top","domain":"bee91.top","tld":"top"},"ip":{"addr":"104.19.238.248","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"f8b495210dd4ca62bb1582841c0424f8","sha1":"019370db450b0af7d72874a82f76d0162adb7c34","sha256":"8f1691a6aa345b07b45f97ec32e05d83054692c2562c4b1d8879238af6b7b0e1","sha512":"89f414bbd6bf94cc92cd55af46eefccaa329df23608fa0bfb0c5d606fc1f39bab642b9b839167f904f5019da9336efbeb3a472fe253c5357886bc7557600d5f5","ssdeep":"6144:V0ZPWOXgDKMZOuGtAmsS/V9DwbnF6e3iLf1anqkC1ZicMFakHsV/Vg+BxTBqGWVU:kWjD9OuGap4B+sT","tlshash":"c1843b8d7390747246eb20b5503f520bb2376869a5098068b46dd8fd2dbce8d227bf7d","size":399044,"data":"","first_seen":"2025-01-11T09:42:40.658941Z","last_seen":"2026-04-06T08:35:13.970743Z","times_seen":916,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bee91.top/static/player/ckplayer/hls.js/hls.min.js","fqdn":"bee91.top","domain":"bee91.top","tld":"top"},"ip":{"addr":"104.19.238.248","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"6593f342fb3e6ad1efffc85c21175425","sha1":"ddcb29f5de3106cbe5c9dd0f2a1cca5843531918","sha256":"21385688792c22abf0f50a865a6a693fdd4c18272690c76e4f28932e0d1ee732","sha512":"10dd7bc22c4dface48dd7d88bbe7e0643b8676ebc5c5c83260bb5ed8f59b6ec2daaf6131eaae24b68a2ddb1b0c355b631983644039552ae9d3b5029647c4d32a","ssdeep":"3072:T5DW2QUC58cjDlzxpGLAbLS7zR2QeN3B2/KQp4P2EBoFbR02P:T5DW2QUNKlGLAbLYzRSRB6e2EBqbR02","tlshash":"2a643cedb6a5606643c2b1a5903f52176337790a3009c1acfa2be5d75db884eb03bf74","size":321724,"data":"","first_seen":"2023-03-10T02:32:33Z","last_seen":"2026-04-04T21:56:05.550585Z","times_seen":453,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":[{"md5":"a9e24f3258fecac69fad37a6885b9589","sha1":"f1fb70fea99118dea4cc83a491dc738680d8023f","sha256":"41b4ec87610c8dca9de8139ec6512242f006f3b75dd0c1cf11e8fafdd6a62865","sha512":"8b7344ff653b0ff01339f075bd27a65bec4f848dc2ccd88dba20542a158af912ab71d944ea89517d300590d5a03ec2f2c2f9c217cae4551c2a3bcd369ad5d6d4","ssdeep":"","tlshash":"9d011521520d3028d857b260f1f0de8c1735488bab224f68c8737c31a18947e1825d6d","size":713,"data":"","first_seen":"2023-03-07T01:15:08Z","last_seen":"2026-04-05T21:37:19.359846Z","times_seen":2780,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"a049e2fa0501c4bacc3c90dae0e09dc9","sha1":"5f845d36bd5baf25c89c04a86d007a4667309282","sha256":"e4d1116181a763e19221bf9a436460dc26b824cd728cc11a1d13347c6d6d93c5","sha512":"f22fe7bab8561c9108723b6e47c7d9357545c6df38415d4a642741dff511ce8e6a9673409c070669b0cbf3334009b1ccd62a930c936fc8281f78233e2dd67401","ssdeep":"","tlshash":"6c900205ad14f454041158c80070e51864608554a129e698e1a529484e182890d45511","size":50,"data":"","first_seen":"2023-03-12T23:50:07Z","last_seen":"2026-04-04T21:56:05.595548Z","times_seen":775,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]},"http":[{"url":{"schema":"https","addr":"bee91.top/assets/images/flag/jp.svg","fqdn":"bee91.top","domain":"bee91.top","tld":"top"},"ip":{"addr":"104.19.238.248","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bee91.top/vodplay/jbd-275-1-1","date":"2025-12-21T09:23:48.534Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bee91.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 31 Oct 2025 05:59:59 GMT","end":"Thu, 29 Jan 2026 06:57:41 GMT"},"fingerprint":{"sha1":"9E:01:4F:2E:AA:DE:59:B7:49:23:AA:2D:C5:8C:B9:57:4B:53:E4:2E","sha256":"21:B8:25:B5:37:A5:0A:B2:F1:C2:92:99:70:95:1B:86:D8:74:BD:B2:1A:E8:D4:67:31:E9:24:49:E9:1F:80:EA"}}},"request":{"raw":"GET /assets/images/flag/jp.svg HTTP/1.1\r\nHost: bee91.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bee91.top/vodplay/jbd-275-1-1\r\nCookie: mystyle=white; is_white=1; langType=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 21 Dec 2025 09:23:48 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Sun, 06 Oct 2024 15:22:53 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=e3TqBtKAz83Epl7UtiD04QJmODsSFEfd0aApbHCyu6pkeQCmSu5%2FTGC2H%2BxlqVB8j%2FmUCd2JGWQDPlYFC3%2FpNUDZGHlUrC4dcA%3D%3D\"}]}\r\nage: 561\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\netag: W/\"6702ab4d-a7\"\r\ncontent-encoding: br\r\ncf-ray: 9b1652a43fcd783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":167,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"5e54da52229b46f4d00f0ce3911bba95","sha1":"883ce263a58d140869784f5f887bf3c005ac632a","sha256":"6711bcdf50847d19075bbe6a8ca84c1f89f90baeef4ddde477aad315a41b3eff","sha512":"647990c901148359147bd1eb080986ba32229d59cbe60f2d943544363da6f7a206bcaa396185098632ca305d1f8a1cbe788f7794281c61fbe05fba4950214e79","ssdeep":"","tlshash":"23c08055f1dd5504955685141e5e30c5555751c911d002c5d0400c157d4a5ce7c035e5","first_seen":"2023-05-09T19:02:06Z","last_seen":"2026-04-06T08:35:13.97277Z","times_seen":1008,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-21","alert":"Sinkholed","trigger":"bee91.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bee91.top/assets/images/avatar.svg","fqdn":"bee91.top","domain":"bee91.top","tld":"top"},"ip":{"addr":"104.19.238.248","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bee91.top/vodplay/jbd-275-1-1","date":"2025-12-21T09:23:48.535Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bee91.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 31 Oct 2025 05:59:59 GMT","end":"Thu, 29 Jan 2026 06:57:41 GMT"},"fingerprint":{"sha1":"9E:01:4F:2E:AA:DE:59:B7:49:23:AA:2D:C5:8C:B9:57:4B:53:E4:2E","sha256":"21:B8:25:B5:37:A5:0A:B2:F1:C2:92:99:70:95:1B:86:D8:74:BD:B2:1A:E8:D4:67:31:E9:24:49:E9:1F:80:EA"}}},"request":{"raw":"GET /assets/images/avatar.svg HTTP/1.1\r\nHost: bee91.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bee91.top/vodplay/jbd-275-1-1\r\nCookie: mystyle=white; is_white=1; langType=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 21 Dec 2025 09:23:48 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Mon, 07 Oct 2024 18:08:01 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=M99DalTgc2JMHqIOCQhfDKtYSNX77ZTHAirFiwEGDPyMLcAAR80S6%2B8Dzfwd%2BS5LPy5nNpcVDIva7WEDBss8LgbK9E8NFmB4Kg%3D%3D\"}]}\r\nage: 561\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\netag: W/\"67042381-3d6\"\r\ncontent-encoding: br\r\ncf-ray: 9b1652a43fcf783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":982,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"433b52c1065019a2dc84177fc667c7b8","sha1":"589034fb93d845ac495dffb63d083304b4b5ee06","sha256":"2a7a23c57b4ce4f9d4c9143c7685e2405a307265971507e2d8a5ac286f82f5e0","sha512":"da4d7f1c3675bd77f7cc74dc29e058465b4d482aed2aea16de78afd7e64a920160b23fb4f94999a53f0cc9069531e62593d3e88d65a034cb109d6a40d11e8c56","ssdeep":"","tlshash":"6211e1e8c1dc8030ca7883a4a27874f58a0ca1eed1d187df7289a07a21366e8f11b550","first_seen":"2023-05-07T18:04:55Z","last_seen":"2026-04-06T06:27:38.70173Z","times_seen":1094,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-21","alert":"Sinkholed","trigger":"bee91.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bee91.top/assets/icon/apple-touch-icon.png?v=8","fqdn":"bee91.top","domain":"bee91.top","tld":"top"},"ip":{"addr":"104.19.238.248","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bee91.top/vodplay/jbd-275-1-1","date":"2025-12-21T09:23:48.705Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bee91.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 31 Oct 2025 05:59:59 GMT","end":"Thu, 29 Jan 2026 06:57:41 GMT"},"fingerprint":{"sha1":"9E:01:4F:2E:AA:DE:59:B7:49:23:AA:2D:C5:8C:B9:57:4B:53:E4:2E","sha256":"21:B8:25:B5:37:A5:0A:B2:F1:C2:92:99:70:95:1B:86:D8:74:BD:B2:1A:E8:D4:67:31:E9:24:49:E9:1F:80:EA"}}},"request":{"raw":"GET /assets/icon/apple-touch-icon.png?v=8 HTTP/1.1\r\nHost: bee91.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bee91.top/vodplay/jbd-275-1-1\r\nCookie: mystyle=white; is_white=1; langType=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 21 Dec 2025 09:23:48 GMT\r\ncontent-type: image/png\r\nserver: cloudflare\r\nlast-modified: Sun, 10 Nov 2024 10:15:36 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\netag: W/\"673087c8-22a5\"\r\nexpires: Mon, 19 Jan 2026 06:05:25 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\nage: 98303\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0aIHJbJc2q2CZYbKdi07uOFKXyv9DOFQIecDOljN8LER0lWtHJJLBYR0kA8KSx8JHqnPLUpdQPaI9kJZRTMQWxWA9Yra%2F%2Bhalg%3D%3D\"}]}\r\ncf-ray: 9b1652a56a48783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8869,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 108 x 108, 8-bit/color RGBA, non-interlaced","md5":"f8da8ab3f67296158ffddd3c57204e95","sha1":"c6dc39a320f34a3383c790654095d54c2424537d","sha256":"d06da588f8a9a513e8d51bd797c70faf5bc24a25c70abf4e2bf2b17553d6f6c2","sha512":"b22861a40d99228cab6cce383145c38d90643b90bc67f982f542deeaad042d27a4cf08510c034dc902cf385819f9605f372ce1d9dbdc74c8654620a32ad2d9cc","ssdeep":"192:A4mQO5pZMzSS/zEEXWMhXJ8Aq7a+pJCZCwPZ8qqmcn:A4mbhMn/vX/DjuaukkEZNLcn","tlshash":"1602be3e85a1aaece26e451f79025382e8f2002eadc23eff038dcdd13e15295554471b","first_seen":"2024-11-17T04:14:16.46366Z","last_seen":"2026-04-06T08:35:13.983274Z","times_seen":898,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-21","alert":"Sinkholed","trigger":"bee91.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"home.bee91.top/video/18000/18981/3addcd9cdee215b9.ts","fqdn":"home.bee91.top","domain":"bee91.top","tld":"top"},"ip":{"addr":"104.21.90.76","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://bee91.top/static/player/ckplayer.html","date":"2025-12-21T09:23:48.891Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bee91.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 31 Oct 2025 05:59:59 GMT","end":"Thu, 29 Jan 2026 06:57:41 GMT"},"fingerprint":{"sha1":"9E:01:4F:2E:AA:DE:59:B7:49:23:AA:2D:C5:8C:B9:57:4B:53:E4:2E","sha256":"21:B8:25:B5:37:A5:0A:B2:F1:C2:92:99:70:95:1B:86:D8:74:BD:B2:1A:E8:D4:67:31:E9:24:49:E9:1F:80:EA"}}},"request":{"raw":"GET /video/18000/18981/3addcd9cdee215b9.ts HTTP/1.1\r\nHost: home.bee91.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://bee91.top\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bee91.top/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 21 Dec 2025 09:23:48 GMT\r\ncontent-type: video/mp2t\r\ncontent-length: 16\r\nserver: cloudflare\r\nlast-modified: Fri, 21 Mar 2025 20:02:53 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"67ddc5ed-10\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Content-Type, Authorization\r\naccess-control-allow-credentials: true\r\naccept-ranges: bytes\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VRlNjLzvoISl8bIPkbOTuWfW8DbFqXxBL5kRhKC0ve7gvYXi%2FH1Yp3ocJ8XTfPLs65VtIzWm7fe8xb9T2jWBtGTgucNaMGnAaEsGfg%3D%3D\"}]}\r\ncf-ray: 9b1652a69fdab51e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16,"size_decoded":0,"mime_type":"video/mp2t","magic":"data","md5":"183f598096b96ec882865f96d7d2277b","sha1":"6fd0ebbbe99faa019b80c1b6c9dbbefd027e5ead","sha256":"f1c9ede84fceee09759fd9a1805453117cf84113a7f36952563b96ba78696fc1","sha512":"5ce292209c76554be63a90e2dc4e5c83a76300cc621c6c4ea0591906669882f5cac50fba79a89e9a1cbb6614c868e7249e7e702e8f40a7adb12056b02caa794a","ssdeep":"","tlshash":"a36000f00030000c303c03303000f00c00f003c0cc30033cc0c0ccc00000300cc0c000","first_seen":"2025-12-21T09:24:26.555409Z","last_seen":"2025-12-21T09:24:26.555409Z","times_seen":1,"resource_available":false,"data":null}},"time_used":96,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":96,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-21","alert":"Sinkholed","trigger":"home.bee91.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"assets.bee91.top/upload/video/51397/320x180/1.jpg","fqdn":"assets.bee91.top","domain":"bee91.top","tld":"top"},"ip":{"addr":"172.67.153.205","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bee91.top/vodplay/jbd-275-1-1","date":"2025-12-21T09:23:49.248Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bee91.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 31 Oct 2025 05:59:59 GMT","end":"Thu, 29 Jan 2026 06:57:41 GMT"},"fingerprint":{"sha1":"9E:01:4F:2E:AA:DE:59:B7:49:23:AA:2D:C5:8C:B9:57:4B:53:E4:2E","sha256":"21:B8:25:B5:37:A5:0A:B2:F1:C2:92:99:70:95:1B:86:D8:74:BD:B2:1A:E8:D4:67:31:E9:24:49:E9:1F:80:EA"}}},"request":{"raw":"GET /upload/video/51397/320x180/1.jpg HTTP/1.1\r\nHost: assets.bee91.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bee91.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 21 Dec 2025 09:23:49 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 41419\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Wed, 25 Jun 2025 02:20:47 GMT\r\netag: \"685b5cff-a1cb\"\r\naccept-ranges: bytes\r\nexpires: Mon, 22 Dec 2025 09:23:49 GMT\r\ncache-control: max-age=86400\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KPdOnhGYFhr7OTpxpMhWxOKFEeuvrFqSz7W9tRQg%2Fv7CwW25LOdSzsOY2Wg5Bf9VVM4Yet3AFU0K9UJ9NUBQ5ZEBBrKGvofUKTXyPhEF\"}]}\r\ncf-ray: 9b1652a8ce235690-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":41419,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 320x180, components 3","md5":"617906aac9659646f41393747dff9276","sha1":"71fa06a4d8d6a80a626745998e86bbc987643a19","sha256":"cb698a19d1d0ed18f01f8cdcbe59c1a279b4d32e099586cdd080b75433c7cbea","sha512":"eaf862a9436800e9110947a8c768a50cd436152a38a8c83e465229c70f103716d2e0d834dfb602532a04a3f00f6aace275cf1ee1c139fbf37dc4b66ce285fa7f","ssdeep":"768:zi7l+uzSrSkxo7dTCFQ2qpdd4dLeSf9dNXzJY+hIil/vlIVLiZ7Z2WWNw//a:oirxC7hCFQ2qfd4dnrBy+hVvlOiZ7Z83","tlshash":"5603f1530a2039d07b4c33c416779e4081f25aab7e934d6119fff4619eaa7df823da41","first_seen":"2025-11-17T10:42:14.365507Z","last_seen":"2025-12-21T09:24:26.556218Z","times_seen":2,"resource_available":false,"data":null}},"time_used":249,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":130,"receive":119,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-21","alert":"Sinkholed","trigger":"assets.bee91.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"home.bee91.top/video/18000/18981/18981976.ts","fqdn":"home.bee91.top","domain":"bee91.top","tld":"top"},"ip":{"addr":"104.21.90.76","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://bee91.top/static/player/ckplayer.html","date":"2025-12-21T09:23:49.495Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bee91.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 31 Oct 2025 05:59:59 GMT","end":"Thu, 29 Jan 2026 06:57:41 GMT"},"fingerprint":{"sha1":"9E:01:4F:2E:AA:DE:59:B7:49:23:AA:2D:C5:8C:B9:57:4B:53:E4:2E","sha256":"21:B8:25:B5:37:A5:0A:B2:F1:C2:92:99:70:95:1B:86:D8:74:BD:B2:1A:E8:D4:67:31:E9:24:49:E9:1F:80:EA"}}},"request":{"raw":"GET /video/18000/18981/18981976.ts HTTP/1.1\r\nHost: home.bee91.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://bee91.top\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bee91.top/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 21 Dec 2025 09:23:49 GMT\r\ncontent-type: video/mp2t\r\ncontent-length: 669856\r\nserver: cloudflare\r\nlast-modified: Fri, 21 Mar 2025 20:03:00 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"67ddc5f4-a38a0\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Content-Type, Authorization\r\naccess-control-allow-credentials: true\r\naccept-ranges: bytes\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5kAkvg1UF%2FQOouDeiAM%2B5PCdbwVqwsVH4BOZ4YEEv%2BxRkXrAxD8ObIGG9%2FpjOVwoz4ibcBWrrfLqrkN3xf11JQhtF1xnaWZcYjoOyw%3D%3D\"}]}\r\ncf-ray: 9b1652aa5a5eb51e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":669856,"size_decoded":0,"mime_type":"video/mp2t","magic":"data","md5":"3591debb560b2d472606cbf5ec83cbfe","sha1":"988a9ae7877edbf850319d01489425fd0099bab4","sha256":"3b9b62e02a137154255ba95690c9f29b943ea9f75196dea24be8f379e35fe4e8","sha512":"ae7bdcf4c61ad2f5179f1be7b37ceecb531d40082e93e08ca98feb5c0a36822f086b6a3b67477b858576b7722c0150f2d9256b1d152ae19c8c8b86689c479500","ssdeep":"12288:ThlygBEbNosmKXRXtu1tKxh3fV7n8gf95qyybx66UUeI850MMiyyU4h2wFt:CgBEbiX1tKxhfNvf95q7x6lUp8XMLyJt","tlshash":"bbe42376efce0dfc2980d796692402d1c680b647b11b3dddac18e7d67a54932e1cf8a2","first_seen":"2025-12-21T09:24:26.557487Z","last_seen":"2025-12-21T09:24:26.557487Z","times_seen":1,"resource_available":false,"data":null}},"time_used":87,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":59,"receive":28,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-21","alert":"Sinkholed","trigger":"home.bee91.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"assets.bee91.top/upload/video/41767/320x180/1.jpg","fqdn":"assets.bee91.top","domain":"bee91.top","tld":"top"},"ip":{"addr":"172.67.153.205","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bee91.top/vodplay/jbd-275-1-1","date":"2025-12-21T09:23:49.506Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bee91.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 31 Oct 2025 05:59:59 GMT","end":"Thu, 29 Jan 2026 06:57:41 GMT"},"fingerprint":{"sha1":"9E:01:4F:2E:AA:DE:59:B7:49:23:AA:2D:C5:8C:B9:57:4B:53:E4:2E","sha256":"21:B8:25:B5:37:A5:0A:B2:F1:C2:92:99:70:95:1B:86:D8:74:BD:B2:1A:E8:D4:67:31:E9:24:49:E9:1F:80:EA"}}},"request":{"raw":"GET /upload/video/41767/320x180/1.jpg HTTP/1.1\r\nHost: assets.bee91.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bee91.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 21 Dec 2025 09:23:49 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 38263\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Sun, 08 Dec 2024 16:35:49 GMT\r\netag: \"6755cae5-9577\"\r\naccept-ranges: bytes\r\nexpires: Mon, 22 Dec 2025 09:23:49 GMT\r\ncache-control: max-age=86400\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gbFuh7qPZxPD5QQd2wVMOSxBlly5sQuT2acUSsTASGHQ4sxFV%2BthFGALXbMs9tlJmAR3t96pG5txiVKCukIiid5nYfea9or9tU0OFgM%2B\"}]}\r\ncf-ray: 9b1652aa6f685690-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":38263,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 320x180, components 3","md5":"570394265ff6147856b32c224c6481cf","sha1":"04bbc12c135f422b45fa3322f23513919533523f","sha256":"be6a3c89d5caef0fccbd7d491071fe8bc8e630d42fd3d839e7b78a0bcb77957c","sha512":"657960bc7ddff3a431c4201deda7034762e20fa3299f5d359c7c5cfc27935883682d3b0edbf56ba0ede5997be4787eaf34474950e0f9df5babb8c5ec5c6128c8","ssdeep":"768:l/8lu6iBKSZCtByeoPH1KLqUhymXQAMzz6YK9HNkK9xJvsSNUFjjtvL0nNeAHB:58U68KSiByPPWymXJMaYotkKPNAxjtva","tlshash":"3703f141cdc508e1fd604d0857297fde3aea7d0d8243db6e90cfcbba41784a4e5589a5","first_seen":"2025-12-21T09:24:26.558432Z","last_seen":"2025-12-21T09:24:26.558432Z","times_seen":1,"resource_available":false,"data":null}},"time_used":185,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":127,"receive":58,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-21","alert":"Sinkholed","trigger":"assets.bee91.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bee91.top/assets/images/flag/en.svg","fqdn":"bee91.top","domain":"bee91.top","tld":"top"},"ip":{"addr":"104.19.238.248","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bee91.top/vodplay/jbd-275-1-1","date":"2025-12-21T09:23:48.535Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bee91.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 31 Oct 2025 05:59:59 GMT","end":"Thu, 29 Jan 2026 06:57:41 GMT"},"fingerprint":{"sha1":"9E:01:4F:2E:AA:DE:59:B7:49:23:AA:2D:C5:8C:B9:57:4B:53:E4:2E","sha256":"21:B8:25:B5:37:A5:0A:B2:F1:C2:92:99:70:95:1B:86:D8:74:BD:B2:1A:E8:D4:67:31:E9:24:49:E9:1F:80:EA"}}},"request":{"raw":"GET /assets/images/flag/en.svg HTTP/1.1\r\nHost: bee91.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bee91.top/vodplay/jbd-275-1-1\r\nCookie: mystyle=white; is_white=1; langType=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 21 Dec 2025 09:23:48 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Sun, 06 Oct 2024 15:23:00 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\netag: \"6702ab54-2fca\"\r\ncontent-encoding: gzip\r\nage: 561\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dDwo0gVaRucOeauVd4KANFbnNwXebDGxMhyZgkMP37ntXTE00sZZTgF0%2Fn83olOcrxvll90rzseKpAAZwT3bK8OA0osp9r9c6Q%3D%3D\"}]}\r\ncf-ray: 9b1652a43fce783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12234,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"6744dbaa0d1f677a70099be7c55b7322","sha1":"68e497a197e97ab48d931e3ca4568d920018283f","sha256":"eb173b50ed398345d10caf5ea90f585196f8d8e51d6b70e63bd02d1087c7febd","sha512":"142376ff471131f5cfc83d80f0a2e4fe54228649475f7627844028964e0e8c8e76c520570c10c4a0356be322a7188d49c74b083f80e7582936b7ce6257dd713d","ssdeep":"96:N7XAVV8qj5RBtqjruJy1j8f49lj9u6QqSjr+NJNXJGIf44Vj3ZEAjZuPxbj7vh:dNqantQI5ckEYJd8h","tlshash":"46423be93534f2ecd5c81d5d3f3b868754af592d6f9ac09b039ee84842ae8d03a49f50","first_seen":"2023-05-11T06:06:59Z","last_seen":"2026-04-06T08:35:13.977051Z","times_seen":962,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-21","alert":"Sinkholed","trigger":"bee91.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bee91.top/template/jable/ads/bottom.js","fqdn":"bee91.top","domain":"bee91.top","tld":"top"},"ip":{"addr":"104.19.238.248","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bee91.top/vodplay/jbd-275-1-1","date":"2025-12-21T09:23:48.538Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bee91.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 31 Oct 2025 05:59:59 GMT","end":"Thu, 29 Jan 2026 06:57:41 GMT"},"fingerprint":{"sha1":"9E:01:4F:2E:AA:DE:59:B7:49:23:AA:2D:C5:8C:B9:57:4B:53:E4:2E","sha256":"21:B8:25:B5:37:A5:0A:B2:F1:C2:92:99:70:95:1B:86:D8:74:BD:B2:1A:E8:D4:67:31:E9:24:49:E9:1F:80:EA"}}},"request":{"raw":"GET /template/jable/ads/bottom.js HTTP/1.1\r\nHost: bee91.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bee91.top/vodplay/jbd-275-1-1\r\nCookie: mystyle=white; is_white=1; langType=1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 21 Dec 2025 09:23:48 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Tue, 18 Nov 2025 13:43:35 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\netag: \"691c7807-91f\"\r\nexpires: Sun, 21 Dec 2025 16:02:16 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\nage: 19291\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KT5eVwiC5u%2Bjfi3LXzHEHLgd9%2BHuevxQs9IfoQwcuNkupuYsN%2FycoyM3SHseCO0C%2F70ir0RWRR8nWRgh5ck3n3C%2FV0rShEIjCg%3D%3D\"}]}\r\ncf-ray: 9b1652a43fe0783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2335,"size_decoded":0,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text, with very long lines (463), with CRLF line terminators","md5":"e36940d60d22618acdefb6e8adb5e2f6","sha1":"462f5d7746bff89f20c07be12826ce4a1846644b","sha256":"feaf9aa9d017fc5473347ece941d8877d88512675b3be9e291c77d6625453771","sha512":"5fe64910d7fbb88336bf3a782690561fb4e13ada3f01a76f6476652e50c51a9d5d70aacccbdd0828c031d8737382f003839de78d4c785ae680f6f6230c0173d0","ssdeep":"","tlshash":"fa41601a0690008b603121f2fea79118d771e1176f18d477b5dc0e30bfba8d8b96a8bc","first_seen":"2025-11-19T00:36:29.211808Z","last_seen":"2026-01-04T14:38:16.650434Z","times_seen":462,"resource_available":true,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-21","alert":"Sinkholed","trigger":"bee91.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bee91.top/assets/js/site.js?date=20250101","fqdn":"bee91.top","domain":"bee91.top","tld":"top"},"ip":{"addr":"104.19.238.248","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bee91.top/vodplay/jbd-275-1-1","date":"2025-12-21T09:23:48.549Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bee91.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 31 Oct 2025 05:59:59 GMT","end":"Thu, 29 Jan 2026 06:57:41 GMT"},"fingerprint":{"sha1":"9E:01:4F:2E:AA:DE:59:B7:49:23:AA:2D:C5:8C:B9:57:4B:53:E4:2E","sha256":"21:B8:25:B5:37:A5:0A:B2:F1:C2:92:99:70:95:1B:86:D8:74:BD:B2:1A:E8:D4:67:31:E9:24:49:E9:1F:80:EA"}}},"request":{"raw":"GET /assets/js/site.js?date=20250101 HTTP/1.1\r\nHost: bee91.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bee91.top/vodplay/jbd-275-1-1\r\nCookie: mystyle=white; is_white=1; langType=1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 21 Dec 2025 09:23:48 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Tue, 24 Dec 2024 09:23:39 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\netag: \"676a7d9b-616c4\"\r\nexpires: Sun, 21 Dec 2025 16:02:16 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\nage: 19291\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2p%2FljmLu%2FlTVNKNWmUyXgPoBs%2FjOZwOqygUxZmscA4PLFAPwzKs7QiDJWfQEechaZGmb4%2FXQ0rqzK5BPw8sTwO8Jq1wm0YkICg%3D%3D\"}]}\r\ncf-ray: 9b1652a45808783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":399044,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"f8b495210dd4ca62bb1582841c0424f8","sha1":"019370db450b0af7d72874a82f76d0162adb7c34","sha256":"8f1691a6aa345b07b45f97ec32e05d83054692c2562c4b1d8879238af6b7b0e1","sha512":"89f414bbd6bf94cc92cd55af46eefccaa329df23608fa0bfb0c5d606fc1f39bab642b9b839167f904f5019da9336efbeb3a472fe253c5357886bc7557600d5f5","ssdeep":"6144:V0ZPWOXgDKMZOuGtAmsS/V9DwbnF6e3iLf1anqkC1ZicMFakHsV/Vg+BxTBqGWVU:kWjD9OuGap4B+sT","tlshash":"c1843b8d7390747246eb20b5503f520bb2376869a5098068b46dd8fd2dbce8d227bf7d","first_seen":"2025-01-11T09:42:40.658941Z","last_seen":"2026-04-06T08:35:13.970743Z","times_seen":916,"resource_available":true,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-21","alert":"Sinkholed","trigger":"bee91.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bee91.top/static/player/ckplayer.html","fqdn":"bee91.top","domain":"bee91.top","tld":"top"},"ip":{"addr":"104.19.238.248","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://bee91.top/vodplay/jbd-275-1-1","date":"2025-12-21T09:23:48.608Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bee91.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 31 Oct 2025 05:59:59 GMT","end":"Thu, 29 Jan 2026 06:57:41 GMT"},"fingerprint":{"sha1":"9E:01:4F:2E:AA:DE:59:B7:49:23:AA:2D:C5:8C:B9:57:4B:53:E4:2E","sha256":"21:B8:25:B5:37:A5:0A:B2:F1:C2:92:99:70:95:1B:86:D8:74:BD:B2:1A:E8:D4:67:31:E9:24:49:E9:1F:80:EA"}}},"request":{"raw":"GET /static/player/ckplayer.html HTTP/1.1\r\nHost: bee91.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bee91.top/vodplay/jbd-275-1-1\r\nCookie: mystyle=white; is_white=1; langType=1\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 21 Dec 2025 09:23:48 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\nlast-modified: Mon, 23 Jun 2025 08:32:58 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qYmsAmZ446kWnOgC2DGTulfsk1BH3eAVgxccP%2BjBazHNiznFG%2BEYOUK0gdCZkQbk1eXZByhXaNxq2cX7ILvzjEDd2%2Fx0emPDwg%3D%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 9b1652a4c912783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4041,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text","md5":"b80279905898c6e429cd66ced158f43b","sha1":"cff995310e913b841de26b60597a9559f1899c3a","sha256":"4548c3280cdc18fae64e54762f8ad674dcac1cd3499e99ed415850d9f242c56e","sha512":"0e15fe6a16ad2553c7be513c9bd3e266d1e7d5c8b2a26107bee8e5408a227525c31950f3e37e7afb69521262767f1bcba2700f5067ec45839aa4bc092616d2c6","ssdeep":"","tlshash":"c481b7411d136857950342e42bb1b248317181178389de74fe9db76cef4c145cdb2bda","first_seen":"2025-09-23T05:20:43.900499Z","last_seen":"2026-01-25T12:46:25.193847Z","times_seen":283,"resource_available":false,"data":null}},"time_used":64,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":64,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-21","alert":"Sinkholed","trigger":"bee91.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.251.38.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://bee91.top/vodplay/jbd-275-1-1","date":"2025-12-21T09:23:48.770Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:53:13 GMT","end":"Wed, 25 Feb 2026 15:53:12 GMT"},"fingerprint":{"sha1":"5A:E3:E3:B6:18:F9:10:0B:5B:11:FA:CB:BF:0C:9B:5C:0E:34:70:78","sha256":"FC:46:B0:C1:1E:B2:21:60:D9:7E:6A:ED:42:56:B2:CF:2A:E4:D2:F1:1C:63:63:98:2B:A3:0F:6C:4A:98:74:D6"}}},"request":{"raw":"GET /s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://bee91.top\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bee91.top/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 15552\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 20 Dec 2025 10:41:26 GMT\r\nexpires: Sun, 20 Dec 2026 10:41:26 GMT\r\ncache-control: public, max-age=31536000\r\nage: 81742\r\nlast-modified: Mon, 16 Oct 2017 17:33:02 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":15552,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 15552, version 1.0","md5":"285467176f7fe6bb6a9c6873b3dad2cc","sha1":"ea04e4ff5142ddd69307c183def721a160e0a64e","sha256":"5a8c1e7681318caa29e9f44e8a6e271f6a4067a2703e9916dfd4fe9099241db7","sha512":"5f9bb763406ea8ce978ec675bd51a0263e9547021ea71188dbd62f0212eb00c1421b750d3b94550b50425bebff5f881c41299f6a33bbfa12fb1ff18c12bc7ff1","ssdeep":"384:HDKhlQ8AGL0dgUoEGBQTc7r6QYMkyr/iobA2E4/jKcJZI7lhzi:jslQ+LhUoTB0Qr6Qjkg/DmcJufzi","tlshash":"8462e103f2bc4c01e786193ebb5870237205272619efa67780ce7ea4c65ec81a39b457","first_seen":"2023-04-05T04:58:40Z","last_seen":"2026-04-06T07:27:15.576956Z","times_seen":338636,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"assets.bee91.top/upload/video/646/320x180/1.jpg","fqdn":"assets.bee91.top","domain":"bee91.top","tld":"top"},"ip":{"addr":"172.67.153.205","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bee91.top/vodplay/jbd-275-1-1","date":"2025-12-21T09:23:49.507Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bee91.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 31 Oct 2025 05:59:59 GMT","end":"Thu, 29 Jan 2026 06:57:41 GMT"},"fingerprint":{"sha1":"9E:01:4F:2E:AA:DE:59:B7:49:23:AA:2D:C5:8C:B9:57:4B:53:E4:2E","sha256":"21:B8:25:B5:37:A5:0A:B2:F1:C2:92:99:70:95:1B:86:D8:74:BD:B2:1A:E8:D4:67:31:E9:24:49:E9:1F:80:EA"}}},"request":{"raw":"GET /upload/video/646/320x180/1.jpg HTTP/1.1\r\nHost: assets.bee91.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bee91.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 21 Dec 2025 09:23:49 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 43254\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Mon, 27 Jan 2025 22:18:06 GMT\r\netag: \"6798061e-a8f6\"\r\naccept-ranges: bytes\r\nexpires: Mon, 22 Dec 2025 09:23:49 GMT\r\ncache-control: max-age=86400\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PRsi%2BudymMz6WkQ4YT4x2RyJAbVUWFRlWAjwut6PbS0PJC%2FG8b353fP16eeEKahumnhY733xeJ8Mvcvng6b8tEdbO%2BOkcpbIW1xK4NV5\"}]}\r\ncf-ray: 9b1652aa6f695690-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":43254,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 320x180, components 3","md5":"9c494597b3fc4593a722418613b482d7","sha1":"c123ab20c7a1b8e1952ef5df10c19da714833bac","sha256":"5ddb473f4943e866cf9586f2ddb87df7c207e630d6ce526b469eedf1642ec6bf","sha512":"0c2b42540a66414a8592b7737431dc44a1a02962a700678200505c8270c6444f8b6279cb38f2d13eb573e5f1b64e7150b18fd36e75fa1d1c55b36d0587b29e96","ssdeep":"768:+VT0YFY80/hSdWOtqc+JzJvYIZxg1ZLfumZJIaRAhPEW8C:+rFY80/kdWOtK1mZh9W7","tlshash":"f413025ee2eb5cdd7675f4610c892ab717f16a8a704faf7863d498021fb6a4060b8188","first_seen":"2025-12-21T09:24:26.561528Z","last_seen":"2025-12-21T09:24:26.561528Z","times_seen":1,"resource_available":false,"data":null}},"time_used":245,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":127,"receive":118,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-21","alert":"Sinkholed","trigger":"assets.bee91.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"assets.bee91.top/upload/video/26166/320x180/1.jpg","fqdn":"assets.bee91.top","domain":"bee91.top","tld":"top"},"ip":{"addr":"172.67.153.205","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bee91.top/vodplay/jbd-275-1-1","date":"2025-12-21T09:23:50.517Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bee91.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 31 Oct 2025 05:59:59 GMT","end":"Thu, 29 Jan 2026 06:57:41 GMT"},"fingerprint":{"sha1":"9E:01:4F:2E:AA:DE:59:B7:49:23:AA:2D:C5:8C:B9:57:4B:53:E4:2E","sha256":"21:B8:25:B5:37:A5:0A:B2:F1:C2:92:99:70:95:1B:86:D8:74:BD:B2:1A:E8:D4:67:31:E9:24:49:E9:1F:80:EA"}}},"request":{"raw":"GET /upload/video/26166/320x180/1.jpg HTTP/1.1\r\nHost: assets.bee91.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bee91.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 21 Dec 2025 09:23:50 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 47474\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Wed, 12 Mar 2025 16:48:53 GMT\r\netag: \"67d1baf5-b972\"\r\naccept-ranges: bytes\r\nexpires: Mon, 22 Dec 2025 09:23:50 GMT\r\ncache-control: max-age=86400\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=by%2BCGy5Zb62ZsdlXe8KAsiCUtRjiH5%2FgI6v%2FytjjMq6bWMtYMjxbp%2Bgx9rN2dZAz9CwEozrcwbyMsev6gFAK%2FwGa9N%2FZIOUobaOQNWYH\"}]}\r\ncf-ray: 9b1652b0bb925690-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":47474,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 320x180, components 3","md5":"b5ef01d750d8f57b19cf526a056c4b45","sha1":"ea479e55f14a21126109aa3f5b65f7875cee2b5f","sha256":"d26ed630b3c787123fad2af7af071571d77144c907308f33544cd6ac0b514626","sha512":"83edc89b834381e948641d082dc646176a05c8d9648f6c90af51e5edcba52ebb17eba2a39a0095172961cafdc955472a1fa25d8bf907cf49da0943916a9b7dd4","ssdeep":"768:aze9x1bsNj8c1ryUdti3z6cbyGDjOTM90DmFIbeBzZbh6Y7gl:aC9vbDEsjb3XqM9ysIiRel","tlshash":"4323f118f5febc0e24479e3e84fe4e6e8ddc8123e061a8594f8cd3464f79198d89851b","first_seen":"2025-12-21T05:40:56.895126Z","last_seen":"2025-12-21T09:24:26.562511Z","times_seen":2,"resource_available":false,"data":null}},"time_used":128,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":48,"receive":80,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-21","alert":"Sinkholed","trigger":"assets.bee91.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"assets.bee91.top/upload/video/30101/320x180/1.jpg","fqdn":"assets.bee91.top","domain":"bee91.top","tld":"top"},"ip":{"addr":"172.67.153.205","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bee91.top/vodplay/jbd-275-1-1","date":"2025-12-21T09:23:48.864Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bee91.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 31 Oct 2025 05:59:59 GMT","end":"Thu, 29 Jan 2026 06:57:41 GMT"},"fingerprint":{"sha1":"9E:01:4F:2E:AA:DE:59:B7:49:23:AA:2D:C5:8C:B9:57:4B:53:E4:2E","sha256":"21:B8:25:B5:37:A5:0A:B2:F1:C2:92:99:70:95:1B:86:D8:74:BD:B2:1A:E8:D4:67:31:E9:24:49:E9:1F:80:EA"}}},"request":{"raw":"GET /upload/video/30101/320x180/1.jpg HTTP/1.1\r\nHost: assets.bee91.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bee91.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 21 Dec 2025 09:23:48 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 47235\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Tue, 04 Mar 2025 23:05:49 GMT\r\netag: \"67c7874d-b883\"\r\naccept-ranges: bytes\r\nexpires: Mon, 22 Dec 2025 09:23:48 GMT\r\ncache-control: max-age=86400\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Sy9SZ07u%2Bo%2BYI80b1PTMVmODiY7WsEwY5GtZV5KTROjPqLOBXZtH5i%2BpoA7ievrXZzLZwgGqGO2eXeW4jG%2BZ4fePr1R%2FYrlQwPZC6mlQ\"}]}\r\ncf-ray: 9b1652a67c9c5690-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":47235,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 320x180, components 3","md5":"1a0469c3089bc461fc535b664cedb9c2","sha1":"0968f3c36917eaacc0a56981acaec7312043407c","sha256":"ef35c5046f6b1d6430ba1963c2df3a8be745d080db865f516ec88bd690de63e7","sha512":"33dc6c68dda62b038944f945a5251a890b7d879894fff13fbba0dd096fc551877d1f24d7702ece785da0d0aa9f15b65e559a08aa5a29a2103f791c4e36a2ec94","ssdeep":"768:I7KaUDhG6Bj5NQj7aNehxATMZ5v6bejKQq7j14XRD3Dt+Awex04hPkEY:Da7y5N9YPjC5QqX14X93DkAwex04hsT","tlshash":"6b23024c142d98eff50a3c310a54ade17de37709e727502464cfae67872697e2aa190e","first_seen":"2025-12-21T09:24:26.564743Z","last_seen":"2025-12-21T09:24:26.564743Z","times_seen":1,"resource_available":false,"data":null}},"time_used":218,"timings":{"blocked":7,"dns":0,"connect":0,"send":0,"wait":113,"receive":98,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-21","alert":"Sinkholed","trigger":"assets.bee91.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.251.38.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://bee91.top/vodplay/jbd-275-1-1","date":"2025-12-21T09:23:48.575Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:53:13 GMT","end":"Wed, 25 Feb 2026 15:53:12 GMT"},"fingerprint":{"sha1":"5A:E3:E3:B6:18:F9:10:0B:5B:11:FA:CB:BF:0C:9B:5C:0E:34:70:78","sha256":"FC:46:B0:C1:1E:B2:21:60:D9:7E:6A:ED:42:56:B2:CF:2A:E4:D2:F1:1C:63:63:98:2B:A3:0F:6C:4A:98:74:D6"}}},"request":{"raw":"GET /s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://bee91.top\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bee91.top/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 15344\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 20 Dec 2025 10:57:41 GMT\r\nexpires: Sun, 20 Dec 2026 10:57:41 GMT\r\ncache-control: public, max-age=31536000\r\nage: 80767\r\nlast-modified: Mon, 16 Oct 2017 17:32:55 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":15344,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 15344, version 1.0","md5":"5d4aeb4e5f5ef754e307d7ffaef688bd","sha1":"06db651cdf354c64a7383ea9c77024ef4fb4cef8","sha256":"3e253b66056519aa065b00a453bac37ac5ed8f3e6fe7b542e93a9dcdcc11d0bc","sha512":"7eb7c301df79d35a6a521fae9d3dccc0a695d3480b4d34c7d262dd0c67abec8437ed40e2920625e98aaeafba1d908dec69c3b07494ec7c29307de49e91c2ef48","ssdeep":"384:ctE5KIuhGO+DSdXwye6i9Xm81v4vMHCbppV0pr3Ll9/w:cqrVO++tw/9CICFbQLlxw","tlshash":"5162e16aef76dc7e4f1af1361c01b45404462290ba6155eff00d6e1d4eed1aff461392","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-06T08:06:50.903633Z","times_seen":536376,"resource_available":true,"data":null}},"time_used":135,"timings":{"blocked":60,"dns":1,"connect":8,"send":0,"wait":9,"receive":6,"ssl":49},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bee91.top/static/player/ckplayer/hls.js/hls.min.js","fqdn":"bee91.top","domain":"bee91.top","tld":"top"},"ip":{"addr":"104.19.238.248","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bee91.top/static/player/ckplayer.html","date":"2025-12-21T09:23:48.766Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bee91.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 31 Oct 2025 05:59:59 GMT","end":"Thu, 29 Jan 2026 06:57:41 GMT"},"fingerprint":{"sha1":"9E:01:4F:2E:AA:DE:59:B7:49:23:AA:2D:C5:8C:B9:57:4B:53:E4:2E","sha256":"21:B8:25:B5:37:A5:0A:B2:F1:C2:92:99:70:95:1B:86:D8:74:BD:B2:1A:E8:D4:67:31:E9:24:49:E9:1F:80:EA"}}},"request":{"raw":"GET /static/player/ckplayer/hls.js/hls.min.js HTTP/1.1\r\nHost: bee91.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bee91.top/static/player/ckplayer.html\r\nCookie: mystyle=white; is_white=1; langType=1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 21 Dec 2025 09:23:48 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Tue, 11 Oct 2022 00:46:49 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\netag: \"6344bcf9-4e8bc\"\r\nexpires: Sun, 21 Dec 2025 16:02:17 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\nage: 19291\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=D%2BkX5Nl9ZZUVAPoR4KRaVjveIclbNG4yzAQxjmnKX4SEwLZeF0GZ7AIlcLqfSYUQvlrx%2FjaoILL4lgfeGWe2w52yYHM7Cu5%2Bow%3D%3D\"}]}\r\ncf-ray: 9b1652a5cb29783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":321724,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"6593f342fb3e6ad1efffc85c21175425","sha1":"ddcb29f5de3106cbe5c9dd0f2a1cca5843531918","sha256":"21385688792c22abf0f50a865a6a693fdd4c18272690c76e4f28932e0d1ee732","sha512":"10dd7bc22c4dface48dd7d88bbe7e0643b8676ebc5c5c83260bb5ed8f59b6ec2daaf6131eaae24b68a2ddb1b0c355b631983644039552ae9d3b5029647c4d32a","ssdeep":"3072:T5DW2QUC58cjDlzxpGLAbLS7zR2QeN3B2/KQp4P2EBoFbR02P:T5DW2QUNKlGLAbLYzRSRB6e2EBqbR02","tlshash":"2a643cedb6a5606643c2b1a5903f52176337790a3009c1acfa2be5d75db884eb03bf74","first_seen":"2023-03-10T02:32:33Z","last_seen":"2026-04-04T21:56:05.550585Z","times_seen":453,"resource_available":true,"data":null}},"time_used":6,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-21","alert":"Sinkholed","trigger":"bee91.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"assets.bee91.top/upload/video/47408/320x180/1.jpg","fqdn":"assets.bee91.top","domain":"bee91.top","tld":"top"},"ip":{"addr":"172.67.153.205","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bee91.top/vodplay/jbd-275-1-1","date":"2025-12-21T09:23:49.061Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bee91.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 31 Oct 2025 05:59:59 GMT","end":"Thu, 29 Jan 2026 06:57:41 GMT"},"fingerprint":{"sha1":"9E:01:4F:2E:AA:DE:59:B7:49:23:AA:2D:C5:8C:B9:57:4B:53:E4:2E","sha256":"21:B8:25:B5:37:A5:0A:B2:F1:C2:92:99:70:95:1B:86:D8:74:BD:B2:1A:E8:D4:67:31:E9:24:49:E9:1F:80:EA"}}},"request":{"raw":"GET /upload/video/47408/320x180/1.jpg HTTP/1.1\r\nHost: assets.bee91.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bee91.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 21 Dec 2025 09:23:49 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 35433\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Tue, 25 Mar 2025 03:46:48 GMT\r\netag: \"67e22728-8a69\"\r\naccept-ranges: bytes\r\nexpires: Mon, 22 Dec 2025 09:23:49 GMT\r\ncache-control: max-age=86400\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=65CpD8yGI%2FNtQTMjb9M0oakvMwTgly%2F%2BVOeGkprbjehVdpbQTCs7Hy83DsDUKiAVPLwsqI5JQSj785eodd1rFJJf6xB%2BDYRzzzufAAna\"}]}\r\ncf-ray: 9b1652a7ad745690-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":35433,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 320x180, components 3","md5":"5809c97001a3e8fa03dd5a611d35e5cb","sha1":"beea83b92bef6233222de9384af0221a3512d356","sha256":"5b30b0ce1370769405042818626c72a975b10e059c29677873fbacbf095d581f","sha512":"30c912d27873c1e9c9ac84198ec512b22be68c47c173addf1a15588c32e6aa758eefbe81cae455d6600df5dd0595f58ca864c99b3990ce15f26fca6aa5cbb9dc","ssdeep":"768:7quLCySAhka2Fije6Q3+xqK8ch1sKUKfZlr9AGfhIvJX2xOmN:imkQdG+xq4vsK9XdIpkOmN","tlshash":"d8f2f10306500deaf847b93a4662ef8b23fc81655b593f67314ada7afbddc52141c1a2","first_seen":"2025-12-21T09:24:26.56964Z","last_seen":"2025-12-21T09:24:26.56964Z","times_seen":1,"resource_available":false,"data":null}},"time_used":141,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":98,"receive":43,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-21","alert":"Sinkholed","trigger":"assets.bee91.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"assets.bee91.top/upload/video/37430/320x180/1.jpg","fqdn":"assets.bee91.top","domain":"bee91.top","tld":"top"},"ip":{"addr":"172.67.153.205","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bee91.top/vodplay/jbd-275-1-1","date":"2025-12-21T09:23:48.862Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bee91.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 31 Oct 2025 05:59:59 GMT","end":"Thu, 29 Jan 2026 06:57:41 GMT"},"fingerprint":{"sha1":"9E:01:4F:2E:AA:DE:59:B7:49:23:AA:2D:C5:8C:B9:57:4B:53:E4:2E","sha256":"21:B8:25:B5:37:A5:0A:B2:F1:C2:92:99:70:95:1B:86:D8:74:BD:B2:1A:E8:D4:67:31:E9:24:49:E9:1F:80:EA"}}},"request":{"raw":"GET /upload/video/37430/320x180/1.jpg HTTP/1.1\r\nHost: assets.bee91.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bee91.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 21 Dec 2025 09:23:48 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 38333\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Mon, 06 Jan 2025 06:30:40 GMT\r\netag: \"677b7890-95bd\"\r\naccept-ranges: bytes\r\nexpires: Mon, 22 Dec 2025 09:23:48 GMT\r\ncache-control: max-age=86400\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=iGEfFG1WkmIWT8VoQo1GERQGcKmXwLHxuNVPwA7WnUhazg%2Bz7Y2l0vdAlY8VVlXqTpDdGPqDM3pWZseb5gUj3HGWn91Nnv4OxL%2BwxWWY\"}]}\r\ncf-ray: 9b1652a67ca45690-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":38333,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 320x180, components 3","md5":"67f2805a1e93c495dbd4527c7e83e1f9","sha1":"39a131136219e79f96cdee4f4a1835fdb56b626b","sha256":"c9c2140dc7190ed897ff526861bd5c2afd5756da75a2e3348f2f7e3281756dfa","sha512":"cb89091b2480cf5643982359a30459cafe1598cc563e6c383b8ccd196b9800e1706247b96486d2883cf1f3fbe4d44d8f923ec31616924c8b41021b1e553b7796","ssdeep":"768:OztoDpMBc7z9308l4w8NJT9+q75BLViWqv4q8YJAnG/we7gwdZT:b57lQJMq/od4qFJAGoXC","tlshash":"8803f0571e0557f4fce6830a8672ee18b6a2513668ceb324dde005c8ffc0eb95de9609","first_seen":"2025-01-11T09:42:40.638233Z","last_seen":"2025-12-21T09:24:26.570649Z","times_seen":3,"resource_available":false,"data":null}},"time_used":174,"timings":{"blocked":17,"dns":0,"connect":4,"send":0,"wait":95,"receive":44,"ssl":13},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-21","alert":"Sinkholed","trigger":"assets.bee91.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"assets.bee91.top/upload/video/47941/320x180/1.jpg","fqdn":"assets.bee91.top","domain":"bee91.top","tld":"top"},"ip":{"addr":"172.67.153.205","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bee91.top/vodplay/jbd-275-1-1","date":"2025-12-21T09:23:48.863Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bee91.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 31 Oct 2025 05:59:59 GMT","end":"Thu, 29 Jan 2026 06:57:41 GMT"},"fingerprint":{"sha1":"9E:01:4F:2E:AA:DE:59:B7:49:23:AA:2D:C5:8C:B9:57:4B:53:E4:2E","sha256":"21:B8:25:B5:37:A5:0A:B2:F1:C2:92:99:70:95:1B:86:D8:74:BD:B2:1A:E8:D4:67:31:E9:24:49:E9:1F:80:EA"}}},"request":{"raw":"GET /upload/video/47941/320x180/1.jpg HTTP/1.1\r\nHost: assets.bee91.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bee91.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 21 Dec 2025 09:23:48 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 35238\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Fri, 07 Feb 2025 05:14:51 GMT\r\netag: \"67a596cb-89a6\"\r\naccept-ranges: bytes\r\nexpires: Mon, 22 Dec 2025 09:23:48 GMT\r\ncache-control: max-age=86400\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oQ3p2%2FwFUOwuXwjNMcTtCU03wt5mRpt0tra%2FkxEjyriacIxW5sYkvN9W2ih5hg0Bj7FyqjM5irn9p08Ze%2FvM3EPxEK8y6sHsirzCl1fq\"}]}\r\ncf-ray: 9b1652a67c995690-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":35238,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 320x180, components 3","md5":"35f019d39f860c3a366866cdb33a2794","sha1":"4c5006fdcc3023ae4c6ee6cb2c989a36a3c3f18f","sha256":"1524771d8b08a2e1d4723e0039e2ed325df28337172339a598ed7442f0e87413","sha512":"d5b918367e9c480f4721590a7cfaad34c74463909f093afc7873b7e61f55070098576ff734858efc34b716b370862f3494d8ce6c1715eb04cfa4a5c858636426","ssdeep":"768:wdj9PgAMfHQndLEerYv2sjdoRz39jHhmZZACEdUd4I9HdPbyQDxhM3ei:Uj9PgH4dLejSpzhfVAPbyybi","tlshash":"36f202022ae595cdad5d3375e1066c59e7f03942783c764fb2c0ef286e4a542bc4d624","first_seen":"2025-11-15T10:21:24.502569Z","last_seen":"2025-12-21T09:24:26.57185Z","times_seen":2,"resource_available":false,"data":null}},"time_used":142,"timings":{"blocked":8,"dns":0,"connect":0,"send":0,"wait":94,"receive":40,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-21","alert":"Sinkholed","trigger":"assets.bee91.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cloudlogobox.com/rtbfeed.php?001e67e03bf5","fqdn":"cloudlogobox.com","domain":"cloudlogobox.com","tld":"com"},"ip":{"addr":"103.224.182.214","port":443,"asn":133618,"as":"Trellian Pty. Limited","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bee91.top/vodplay/jbd-275-1-1","date":"2025-12-21T09:23:49.696Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"superduolingo.click","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Oct 2025 12:23:53 GMT","end":"Tue, 20 Jan 2026 12:23:52 GMT"},"fingerprint":{"sha1":"6D:14:DC:2D:09:D2:55:C1:12:95:81:06:58:5A:79:33:AD:1A:16:10","sha256":"06:30:98:F9:A4:1C:DC:30:E0:1C:48:7A:AC:75:27:FC:98:7F:D7:83:43:34:0D:8D:83:AD:7E:30:E6:16:09:8F"}}},"request":{"raw":"GET /rtbfeed.php?001e67e03bf5 HTTP/1.1\r\nHost: cloudlogobox.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://bee91.top\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bee91.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\ndate: Sun, 21 Dec 2025 09:23:50 GMT\r\nserver: Apache\r\nset-cookie: __tad=1766309030.8331290; expires=Wed, 19 Dec 2035 09:23:50 GMT; Max-Age=315360000\r\ncontent-length: 0\r\ncontent-type: text/html; charset=UTF-8\r\nconnection: close\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-06T08:11:44.873372Z","times_seen":13414019,"resource_available":true,"data":null}},"time_used":1111,"timings":{"blocked":466,"dns":132,"connect":161,"send":0,"wait":179,"receive":0,"ssl":172},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bee91.top/assets/css/player.css","fqdn":"bee91.top","domain":"bee91.top","tld":"top"},"ip":{"addr":"104.19.238.248","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://bee91.top/vodplay/jbd-275-1-1","date":"2025-12-21T09:23:48.531Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bee91.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 31 Oct 2025 05:59:59 GMT","end":"Thu, 29 Jan 2026 06:57:41 GMT"},"fingerprint":{"sha1":"9E:01:4F:2E:AA:DE:59:B7:49:23:AA:2D:C5:8C:B9:57:4B:53:E4:2E","sha256":"21:B8:25:B5:37:A5:0A:B2:F1:C2:92:99:70:95:1B:86:D8:74:BD:B2:1A:E8:D4:67:31:E9:24:49:E9:1F:80:EA"}}},"request":{"raw":"GET /assets/css/player.css HTTP/1.1\r\nHost: bee91.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bee91.top/vodplay/jbd-275-1-1\r\nCookie: mystyle=white; is_white=1; langType=1\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 21 Dec 2025 09:23:48 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Fri, 14 Mar 2025 14:57:30 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\netag: \"67d443da-44f\"\r\nexpires: Sun, 21 Dec 2025 16:02:16 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\nage: 19291\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NLnzXT1yaveMjHNCYtp6lWeR17P2fv%2Fmo6Hn8PpiUlxk%2FiHfJKgwvQ8zDFDCl7t3nS7T6qjpx9Nv%2FR8t%2F7gzaAgu2STMqayA4A%3D%3D\"}]}\r\ncf-ray: 9b1652a43fc3783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1103,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text","md5":"9d5c35d8bb76de793add20e9cbae45f4","sha1":"772644779497db16a7d0c6b57455c91bf8ae8c5e","sha256":"27733e27c5c98a9c84c341577d8b507fc687a17b579819f68f013c40208de490","sha512":"b838a0ec4ccceeaa2652ad5be298d427cdaeae774773a56c0e1aeecea14e2562c2607fbe4d27b1e1496bd798018171b9414eb69d5082ae15e239ca6a55ae125a","ssdeep":"","tlshash":"af11bec10c1768c438a7f2b097ff8eec926c5047560ac42c7799b5804f083ee85b36c2","first_seen":"2025-09-23T05:20:43.697687Z","last_seen":"2026-04-04T21:56:05.575057Z","times_seen":352,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-21","alert":"Sinkholed","trigger":"bee91.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bee91.top/static/js/playerconfig.js?t=20251221","fqdn":"bee91.top","domain":"bee91.top","tld":"top"},"ip":{"addr":"104.19.238.248","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bee91.top/vodplay/jbd-275-1-1","date":"2025-12-21T09:23:48.536Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bee91.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 31 Oct 2025 05:59:59 GMT","end":"Thu, 29 Jan 2026 06:57:41 GMT"},"fingerprint":{"sha1":"9E:01:4F:2E:AA:DE:59:B7:49:23:AA:2D:C5:8C:B9:57:4B:53:E4:2E","sha256":"21:B8:25:B5:37:A5:0A:B2:F1:C2:92:99:70:95:1B:86:D8:74:BD:B2:1A:E8:D4:67:31:E9:24:49:E9:1F:80:EA"}}},"request":{"raw":"GET /static/js/playerconfig.js?t=20251221 HTTP/1.1\r\nHost: bee91.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bee91.top/vodplay/jbd-275-1-1\r\nCookie: mystyle=white; is_white=1; langType=1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 21 Dec 2025 09:23:48 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Sun, 15 Dec 2024 17:31:15 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\netag: W/\"675f1263-624\"\r\nexpires: Sun, 21 Dec 2025 16:02:16 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\nage: 19291\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CH4WxhCuwSQNYXFP6ViYXvK9keNxZXB%2BerfRitMtbKsf1WASIiMQB5S%2B%2Ft8l3uW9g%2BOPluzqlqJkAdzyvmxSoO%2FqbMDjWDQ8wA%3D%3D\"}]}\r\ncf-ray: 9b1652a43fd0783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1572,"size_decoded":0,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text, with very long lines (1082), with CRLF, LF line terminators","md5":"dd98ea13e9d025876f5ea0f6cc54f476","sha1":"c1fa960e143ae316defa6fa71e9c4d0537002f08","sha256":"dffc9dc63286b052d4461fd68c6c7093ffacbe898cb6537ff1f31792cd5cbc6b","sha512":"c66b9bc2d685f18a58f3b0f0dae89ef99ec7388afd9d6221d9f5a9c1b0e653629fe7f2e6ed34425130fb78c8e5e84a2a2066bf7af9556197d86e399848f4a326","ssdeep":"","tlshash":"bd31fd1b8f4a2835c3f750f8dde42e1649df0bb8b191dad96c26bcb83aec125b600008","first_seen":"2024-12-14T09:46:09.484359Z","last_seen":"2026-04-04T21:56:05.580551Z","times_seen":353,"resource_available":true,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-21","alert":"Sinkholed","trigger":"bee91.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"assets.bee91.top/upload/video/29466/320x180/1.jpg","fqdn":"assets.bee91.top","domain":"bee91.top","tld":"top"},"ip":{"addr":"172.67.153.205","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bee91.top/vodplay/jbd-275-1-1","date":"2025-12-21T09:23:48.858Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bee91.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 31 Oct 2025 05:59:59 GMT","end":"Thu, 29 Jan 2026 06:57:41 GMT"},"fingerprint":{"sha1":"9E:01:4F:2E:AA:DE:59:B7:49:23:AA:2D:C5:8C:B9:57:4B:53:E4:2E","sha256":"21:B8:25:B5:37:A5:0A:B2:F1:C2:92:99:70:95:1B:86:D8:74:BD:B2:1A:E8:D4:67:31:E9:24:49:E9:1F:80:EA"}}},"request":{"raw":"GET /upload/video/29466/320x180/1.jpg HTTP/1.1\r\nHost: assets.bee91.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bee91.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 21 Dec 2025 09:23:48 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 49839\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Thu, 06 Mar 2025 22:45:02 GMT\r\netag: \"67ca256e-c2af\"\r\naccept-ranges: bytes\r\nexpires: Mon, 22 Dec 2025 09:23:48 GMT\r\ncache-control: max-age=86400\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KLibk3lXb5gQlaJmk7Jh5pP9QW%2FQTTq41ejvqTy047zLOdqJQD7LQzTI443Qv%2B5hbkiiq9AIbBDnvfj%2F%2B5S1PRXriflHOpP3tP7l%2Bnh2\"}]}\r\ncf-ray: 9b1652a67c965690-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":49839,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 320x180, components 3","md5":"23daccaa6265be0877d9633301491c55","sha1":"df89f2578beb5ced759d28ee64d9d9e142cbf2d3","sha256":"52e6d218b15143348e383f60b2a1998125603b9eaaa4d73e51cd8960e2ff08dc","sha512":"0ec5e6c9089794cf497990b786b0388fd63d4fd5760ceb74cadc4588cdcbc0b4bb58beba68621424e91ef6f528b023b3d65502fb4b052264f4c24d7097dcc8a1","ssdeep":"768:YLXsnoG0bBbbOo4XX5IGq/xwpYc6UL++V6pr/shs0cOVW2n7mH9PPeAcswFMbjRZ:YPtbbgXJqZwpq0jSDshfXOJPntw8FZ","tlshash":"b32301d12be5723eddbc22eee2c589604dc09ca491c913c6eac51d31e6752b302e5f9d","first_seen":"2025-12-21T09:24:26.57465Z","last_seen":"2026-01-25T04:20:40.297379Z","times_seen":2,"resource_available":false,"data":null}},"time_used":198,"timings":{"blocked":12,"dns":0,"connect":1,"send":0,"wait":94,"receive":80,"ssl":10},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-21","alert":"Sinkholed","trigger":"assets.bee91.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"assets.bee91.top/upload/video/18864/320x180/1.jpg","fqdn":"assets.bee91.top","domain":"bee91.top","tld":"top"},"ip":{"addr":"172.67.153.205","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bee91.top/vodplay/jbd-275-1-1","date":"2025-12-21T09:23:49.061Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bee91.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 31 Oct 2025 05:59:59 GMT","end":"Thu, 29 Jan 2026 06:57:41 GMT"},"fingerprint":{"sha1":"9E:01:4F:2E:AA:DE:59:B7:49:23:AA:2D:C5:8C:B9:57:4B:53:E4:2E","sha256":"21:B8:25:B5:37:A5:0A:B2:F1:C2:92:99:70:95:1B:86:D8:74:BD:B2:1A:E8:D4:67:31:E9:24:49:E9:1F:80:EA"}}},"request":{"raw":"GET /upload/video/18864/320x180/1.jpg HTTP/1.1\r\nHost: assets.bee91.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bee91.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 21 Dec 2025 09:23:49 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 40888\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Fri, 21 Mar 2025 00:18:50 GMT\r\netag: \"67dcb06a-9fb8\"\r\naccept-ranges: bytes\r\nexpires: Mon, 22 Dec 2025 09:23:49 GMT\r\ncache-control: max-age=86400\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=t3JBapM6%2FBHJZlO8QV1VkD6D6hgtYxhz%2FYnzlwc5Ogx3XOIpI692rQEJkW54agA%2F1Ysadwj40w5Ur1wx%2BRYWpCL3ykj1Ng9mHiKyA83w\"}]}\r\ncf-ray: 9b1652a7ad735690-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":40888,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 320x180, components 3","md5":"74eb18aa47fad5f17f9913932472b130","sha1":"aced79d2110c28c6b0c8069b3756f1e4d4d5d1d2","sha256":"4c7151d045a37c220f2b9f8f1253855aa1b0b8f3995df2304ec3cdb58f234068","sha512":"eb36ebcc2cd78260863dc720859fc5d1367e95e847d999cc9af67471ee8de32288a3e3bbf627c0670458e4fbe38070536032f29f2114a4dcd81b10ea2a7542dd","ssdeep":"768:RjXAeM069N6Y/wpp+YR4nciGZuHx2VEK+d5I75TpVQcIfcTezq1V5n6:1weM5oYwvinO+dcXQcIfkezq1Xn6","tlshash":"b303f13f1b0c5b9eb07c5a6e011c0ea056e4db5afe66026f45cdafcad7b85cae141601","first_seen":"2025-12-21T09:24:26.575554Z","last_seen":"2025-12-21T09:24:26.575554Z","times_seen":1,"resource_available":false,"data":null}},"time_used":279,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":162,"receive":117,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-21","alert":"Sinkholed","trigger":"assets.bee91.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"assets.bee91.top/upload/video/49063/320x180/1.jpg","fqdn":"assets.bee91.top","domain":"bee91.top","tld":"top"},"ip":{"addr":"172.67.153.205","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bee91.top/vodplay/jbd-275-1-1","date":"2025-12-21T09:23:49.249Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bee91.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 31 Oct 2025 05:59:59 GMT","end":"Thu, 29 Jan 2026 06:57:41 GMT"},"fingerprint":{"sha1":"9E:01:4F:2E:AA:DE:59:B7:49:23:AA:2D:C5:8C:B9:57:4B:53:E4:2E","sha256":"21:B8:25:B5:37:A5:0A:B2:F1:C2:92:99:70:95:1B:86:D8:74:BD:B2:1A:E8:D4:67:31:E9:24:49:E9:1F:80:EA"}}},"request":{"raw":"GET /upload/video/49063/320x180/1.jpg HTTP/1.1\r\nHost: assets.bee91.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bee91.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 21 Dec 2025 09:23:49 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 37899\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Wed, 02 Apr 2025 05:38:47 GMT\r\netag: \"67eccd67-940b\"\r\naccept-ranges: bytes\r\nexpires: Mon, 22 Dec 2025 09:23:49 GMT\r\ncache-control: max-age=86400\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kpTrKaC1zAuY8RLq0oDB2D0uX7jdIWBoRY3I5deicTQ0zzvaSoieJUmjH%2BHOvHFDjp3u1B0v13a4qvOeJ5SVM1kTGZHlkbnMeMEgN%2BlV\"}]}\r\ncf-ray: 9b1652a8ce245690-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":37899,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 320x180, components 3","md5":"5dd3f949ed4a493c33611b3a86068cc8","sha1":"a05ba25a0189cdfbce5c1c7e269deea305ce7701","sha256":"f4b4df73cf183587624fdde2e16e88a82e48922ec731c2653ef7d0150f3d6a57","sha512":"272cfee7b35d12d80bc6f37ffa163c881a291f44f7141356bf01cb85173ef2a7fd978c0d0d9f18b0c0f0cafbb09faaf1e18230c9302d043cf91bb34f68609782","ssdeep":"768:Btw588kSlBBWT5+hseT3iN0uQmn8d4n418U6nkJjLCvj3gZvu6byThnP:288k6BBWkh5TVFi851pjLCrgFuYy1nP","tlshash":"7803f10583e64dd276fb8a784b145e3972d609118e3d4ab07dd2f0e83dd6619f3fa0a2","first_seen":"2025-12-21T05:40:56.842657Z","last_seen":"2025-12-21T09:24:26.576484Z","times_seen":2,"resource_available":false,"data":null}},"time_used":134,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":93,"receive":41,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-21","alert":"Sinkholed","trigger":"assets.bee91.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"assets.bee91.top/video/18000/18981/thumb.ts","fqdn":"assets.bee91.top","domain":"bee91.top","tld":"top"},"ip":{"addr":"172.67.153.205","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bee91.top/static/player/ckplayer.html","date":"2025-12-21T09:23:49.366Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bee91.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 31 Oct 2025 05:59:59 GMT","end":"Thu, 29 Jan 2026 06:57:41 GMT"},"fingerprint":{"sha1":"9E:01:4F:2E:AA:DE:59:B7:49:23:AA:2D:C5:8C:B9:57:4B:53:E4:2E","sha256":"21:B8:25:B5:37:A5:0A:B2:F1:C2:92:99:70:95:1B:86:D8:74:BD:B2:1A:E8:D4:67:31:E9:24:49:E9:1F:80:EA"}}},"request":{"raw":"GET /video/18000/18981/thumb.ts HTTP/1.1\r\nHost: assets.bee91.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bee91.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 21 Dec 2025 09:23:49 GMT\r\ncontent-type: video/mp2t\r\ncontent-length: 981343\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Fri, 21 Mar 2025 20:02:53 GMT\r\netag: \"67ddc5ed-ef95f\"\r\naccept-ranges: bytes\r\nexpires: Mon, 22 Dec 2025 09:23:49 GMT\r\ncache-control: max-age=86400\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yxrLnteDyfJpWGtS07X1Gymmp8%2Bz26tB8K0wasahw%2FatF%2FMn3ZpEOjvfybcFH1EorNQqWQAz14DFC7uaxWrASwbSK6V5i0WEc0rITySE\"}]}\r\ncf-ray: 9b1652a98eb25690-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":981343,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 95\", baseline, precision 8, 2130x1680, components 3","md5":"469cca7a4cce2a4e6365e9dcfc955d1b","sha1":"d5aae4e544581d3c2a79367cbb36f9b75b93fe37","sha256":"0b9e6d987c0f8ff055542dce84cca715c4bbcbff16e2b0928e7cae9b4722af28","sha512":"e407e43c174b1c9d9ea6f88d2547157210ad887cb813d29e113213049380f50f4f40e886b5cfdfac1b38267e1e5274a94bdc032ed09c0794fad0d1b3a489a594","ssdeep":"24576:DOvBVqBix3gnYLp2QlhrCuEu3qnvebDrH:DOJ9BZ1L7+vezH","tlshash":"47252386ba1153e34e0db79a6e07d94daff48b5cabc0758840671e09b7e5b360c6f06c","first_seen":"2025-12-21T09:24:26.577132Z","last_seen":"2025-12-21T09:24:26.577132Z","times_seen":1,"resource_available":false,"data":null}},"time_used":395,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":127,"receive":268,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-21","alert":"Sinkholed","trigger":"assets.bee91.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"assets.bee91.top/upload/video/31506/320x180/1.jpg","fqdn":"assets.bee91.top","domain":"bee91.top","tld":"top"},"ip":{"addr":"172.67.153.205","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bee91.top/vodplay/jbd-275-1-1","date":"2025-12-21T09:23:50.517Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bee91.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 31 Oct 2025 05:59:59 GMT","end":"Thu, 29 Jan 2026 06:57:41 GMT"},"fingerprint":{"sha1":"9E:01:4F:2E:AA:DE:59:B7:49:23:AA:2D:C5:8C:B9:57:4B:53:E4:2E","sha256":"21:B8:25:B5:37:A5:0A:B2:F1:C2:92:99:70:95:1B:86:D8:74:BD:B2:1A:E8:D4:67:31:E9:24:49:E9:1F:80:EA"}}},"request":{"raw":"GET /upload/video/31506/320x180/1.jpg HTTP/1.1\r\nHost: assets.bee91.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bee91.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 21 Dec 2025 09:23:50 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 42145\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Mon, 03 Mar 2025 04:32:02 GMT\r\netag: \"67c530c2-a4a1\"\r\naccept-ranges: bytes\r\nexpires: Mon, 22 Dec 2025 09:23:50 GMT\r\ncache-control: max-age=86400\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NGHQbTFTrCALVHfAoOf%2Fh3PhReNQLTB8KX%2FEYCgDZBv7JZPEsMnoAy9SzV41q%2FiBAyetik1bMDldzpFeZIbSTHgqmSLyvosAvIKVPN71\"}]}\r\ncf-ray: 9b1652b0bb915690-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":42145,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 320x180, components 3","md5":"8b89d1135a26c10d757a3a05a161385d","sha1":"9ffc297ebb7e1295b86bdc3e950ce305f86a5577","sha256":"d7655272f4dd59f29446108f37d6255d406abf1ed89b9579028c86e1c61a7d50","sha512":"d25dad664105ce411fde78d1c2205b9ae703cf671e7bbf4e94d0fb5cb252d9c505338f1b177810f241854c2ea42933cfae821d0f4ebf0e16a1738d3d5919667d","ssdeep":"768:vWs91732x+mDIrrP79fo+PO0Nr+vIEsREOLTXQ8yinoss:vBj7msmDIfPJfoH0N0LsREOo8yinoss","tlshash":"ad13f13301d9e3da7e75b2b58b219f0621c76455ed1009068a877e39abf5164cb7f0cb","first_seen":"2025-11-19T03:33:35.323464Z","last_seen":"2025-12-21T09:24:26.578015Z","times_seen":2,"resource_available":false,"data":null}},"time_used":243,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":127,"receive":116,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-21","alert":"Sinkholed","trigger":"assets.bee91.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bee91.top/static/player/ckplayer/css/images/ckplayer.48.png","fqdn":"bee91.top","domain":"bee91.top","tld":"top"},"ip":{"addr":"104.19.238.248","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bee91.top/static/player/ckplayer.html","date":"2025-12-21T09:23:48.751Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bee91.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 31 Oct 2025 05:59:59 GMT","end":"Thu, 29 Jan 2026 06:57:41 GMT"},"fingerprint":{"sha1":"9E:01:4F:2E:AA:DE:59:B7:49:23:AA:2D:C5:8C:B9:57:4B:53:E4:2E","sha256":"21:B8:25:B5:37:A5:0A:B2:F1:C2:92:99:70:95:1B:86:D8:74:BD:B2:1A:E8:D4:67:31:E9:24:49:E9:1F:80:EA"}}},"request":{"raw":"GET /static/player/ckplayer/css/images/ckplayer.48.png HTTP/1.1\r\nHost: bee91.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bee91.top/static/player/ckplayer/css/ckplayer.css\r\nCookie: mystyle=white; is_white=1; langType=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 21 Dec 2025 09:23:48 GMT\r\ncontent-type: image/png\r\nserver: cloudflare\r\nlast-modified: Tue, 11 Oct 2022 00:46:49 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\netag: W/\"6344bcf9-2b7c\"\r\nexpires: Mon, 19 Jan 2026 04:20:23 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\nage: 104605\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YbnSRbBS2JE1ys66xnLU4kK%2FEEp6%2FsQVgWEmVWKar%2B%2FXA56pp3rRQyiYrnW6%2Bfdc%2BT6BdfDWeihfVLx7JXTaORrPjOgWkanbKg%3D%3D\"}]}\r\ncf-ray: 9b1652a5bafe783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11132,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1851 x 48, 8-bit/color RGBA, non-interlaced","md5":"ac0bcbb0f38c5123cc3c783fd592d212","sha1":"259baec95e714b59f5ce58700b8ff01283c21898","sha256":"25fec9855bd4b8dfdfbe1ab0d71e9db83b6ed1937215021ef4abbe8f59bc188e","sha512":"6d0c07390ac9970f6ebc41a946afd2ab40a28869b9db78bc33981c5e6eb7069e1ebbcb34976f1f457ffb56bff2313d39a1b7a4f2abef9a3c1f370bcc5113907a","ssdeep":"192:DSI6PP4Q16KQ9qpanJwCZK6FBevbtm6+cpLbNa4Dg7IZsuSP73cZS/bvLY/ODB88:2I6PP4QnAqpwJwCA5p+gagrXO73iS7LJ","tlshash":"9032ae71a8f8d8d6ec234473b548efa3cf4bb0a952e344a4c4d5990d5c89c745dc114b","first_seen":"2023-11-23T12:38:21Z","last_seen":"2026-04-04T21:56:05.57346Z","times_seen":460,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-21","alert":"Sinkholed","trigger":"bee91.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"assets.bee91.top/upload/video/46998/320x180/1.jpg","fqdn":"assets.bee91.top","domain":"bee91.top","tld":"top"},"ip":{"addr":"172.67.153.205","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bee91.top/vodplay/jbd-275-1-1","date":"2025-12-21T09:23:48.861Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bee91.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 31 Oct 2025 05:59:59 GMT","end":"Thu, 29 Jan 2026 06:57:41 GMT"},"fingerprint":{"sha1":"9E:01:4F:2E:AA:DE:59:B7:49:23:AA:2D:C5:8C:B9:57:4B:53:E4:2E","sha256":"21:B8:25:B5:37:A5:0A:B2:F1:C2:92:99:70:95:1B:86:D8:74:BD:B2:1A:E8:D4:67:31:E9:24:49:E9:1F:80:EA"}}},"request":{"raw":"GET /upload/video/46998/320x180/1.jpg HTTP/1.1\r\nHost: assets.bee91.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bee91.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 21 Dec 2025 09:23:48 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 40937\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Sun, 23 Mar 2025 19:27:59 GMT\r\netag: \"67e060bf-9fe9\"\r\naccept-ranges: bytes\r\nexpires: Mon, 22 Dec 2025 09:23:48 GMT\r\ncache-control: max-age=86400\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OrCl4L5wv%2Bxka8FqBew3ZOjpbb2WNCNf9y4dv%2FrgJqP8mnNDdkB760JjKxlKQ0%2B2NKKt6zMUYvK657e%2FOP6GXL%2ByTuL3aB5shqS%2BxPxN\"}]}\r\ncf-ray: 9b1652a67ca35690-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":40937,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 320x180, components 3","md5":"d519fb96e8e63b0a80c87629c5879b2a","sha1":"020392041b9d796667f1ba95531a454aa6e6410e","sha256":"f022dd7603e758a0e2e915f8fe0278ef7d89acd757a24381e9ac9af0a5d8c501","sha512":"0988ba2d0abe16135ea178e1a1f8714a7a0638ba624c902fe49d509be23a999e0a5a624655c17f57b4987c29cf9ca95def5e27c6aeed3fcc5045cb843c1c3e50","ssdeep":"768:Z0KN+R4/2cDsyO0Voguon5Ht7C+/90dBn1vz2xgFfN9T5875W3ZyTYaSdS4r5WJD:Z0KN+MDsVUVt7C+/90bn1vz2xgFf8Wpu","tlshash":"4e03f190c48acfca74075371c5892ef26eb13ae8aba0cf9d5ee935196f7474c90a0a41","first_seen":"2025-12-21T09:24:26.579512Z","last_seen":"2025-12-22T09:43:24.438447Z","times_seen":2,"resource_available":false,"data":null}},"time_used":205,"timings":{"blocked":17,"dns":0,"connect":2,"send":0,"wait":90,"receive":81,"ssl":14},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-21","alert":"Sinkholed","trigger":"assets.bee91.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"assets.bee91.top/upload/video/49498/320x180/1.jpg","fqdn":"assets.bee91.top","domain":"bee91.top","tld":"top"},"ip":{"addr":"172.67.153.205","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bee91.top/vodplay/jbd-275-1-1","date":"2025-12-21T09:23:49.251Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bee91.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 31 Oct 2025 05:59:59 GMT","end":"Thu, 29 Jan 2026 06:57:41 GMT"},"fingerprint":{"sha1":"9E:01:4F:2E:AA:DE:59:B7:49:23:AA:2D:C5:8C:B9:57:4B:53:E4:2E","sha256":"21:B8:25:B5:37:A5:0A:B2:F1:C2:92:99:70:95:1B:86:D8:74:BD:B2:1A:E8:D4:67:31:E9:24:49:E9:1F:80:EA"}}},"request":{"raw":"GET /upload/video/49498/320x180/1.jpg HTTP/1.1\r\nHost: assets.bee91.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bee91.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 21 Dec 2025 09:23:49 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 40420\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Tue, 08 Apr 2025 10:07:50 GMT\r\netag: \"67f4f576-9de4\"\r\naccept-ranges: bytes\r\nexpires: Mon, 22 Dec 2025 09:23:49 GMT\r\ncache-control: max-age=86400\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xC5NM4hP6wtc3UyATnsorY0IosOgw1jr4GBG7yiuGOJ07hFqPlHD2ISA%2BET80dd8yYeGeuL4d%2Bu6GBIJIAbbb7W%2B5oFouEw0vh3txyFO\"}]}\r\ncf-ray: 9b1652a8ce275690-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":40420,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 320x180, components 3","md5":"19d9a0f903b3259ae4015d2b0f5bf45e","sha1":"da4a0b98f314cbc40476e94bcd8396980355a032","sha256":"8de4ea3437f349d7957c721e57393f3afc7e5d60b03bf2fc527539b5d81b656a","sha512":"39c85586a113fde5b55f1bf68c4f10e6ac9e43df7c0ddf67c73a468e052e9324a5a43724eb563359dfc8ecbfef3b45317309453a168d34ef2c3d5d84dec0a3be","ssdeep":"768:o7+6218dTppci7QPJCgnE6CIGShKnK/3ks5OLsbmA2FDIli5VDgEIFpX:o7+eTXci7QPxnE6HGShK2lQimhRIlibs","tlshash":"51030248606607d076cd47273792294bbfe367c9a6019caba8d3f839d972ef57b00182","first_seen":"2025-12-21T09:24:26.580294Z","last_seen":"2025-12-21T09:24:26.580294Z","times_seen":1,"resource_available":false,"data":null}},"time_used":241,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":126,"receive":115,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-21","alert":"Sinkholed","trigger":"assets.bee91.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"assets.bee91.top/upload/video/36460/320x180/1.jpg","fqdn":"assets.bee91.top","domain":"bee91.top","tld":"top"},"ip":{"addr":"172.67.153.205","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bee91.top/vodplay/jbd-275-1-1","date":"2025-12-21T09:23:49.508Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bee91.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 31 Oct 2025 05:59:59 GMT","end":"Thu, 29 Jan 2026 06:57:41 GMT"},"fingerprint":{"sha1":"9E:01:4F:2E:AA:DE:59:B7:49:23:AA:2D:C5:8C:B9:57:4B:53:E4:2E","sha256":"21:B8:25:B5:37:A5:0A:B2:F1:C2:92:99:70:95:1B:86:D8:74:BD:B2:1A:E8:D4:67:31:E9:24:49:E9:1F:80:EA"}}},"request":{"raw":"GET /upload/video/36460/320x180/1.jpg HTTP/1.1\r\nHost: assets.bee91.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bee91.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 21 Dec 2025 09:23:49 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 40450\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Thu, 20 Feb 2025 02:37:53 GMT\r\netag: \"67b69581-9e02\"\r\naccept-ranges: bytes\r\nexpires: Mon, 22 Dec 2025 09:23:49 GMT\r\ncache-control: max-age=86400\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pf6DLN%2FNSkXgKzcNPO8%2F13Zbt%2B0HQ8bDb%2Fe3QXcMm53ab2LryZQfWlNFybZxkSB%2BYZ93MTjy19FqdORJsRBKmHcxKR9tc01Z78bcMBa7\"}]}\r\ncf-ray: 9b1652aa6f6b5690-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":40450,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 320x180, components 3","md5":"83531e6986a0f4915f2e91a30d0fd90a","sha1":"1f547d619cdcd674ddf2cf5d96b345e23d3fa875","sha256":"309d09e0d19332c440e4999c4d2345ed1c9652c8cf7fc45d203bb9d31c33e693","sha512":"119d5aee7070fda1da1a5aed07acf60848a58300e074a2028b83f800184229b20ed6025e9db856a37031c2a8d78ee856396483994471323edf065bdbe8cbfc54","ssdeep":"768:JWatOR7AukuOYy9Sefxxvmp2coOUmmnYfvTJNZ/GOCFLvcCDJR:mAukV9Lfv226URnYfvTjdOpv/","tlshash":"5403f1535076abeef3278139680e8977c3f5dbda388f1859395c524cd187dca4118aca","first_seen":"2025-11-23T15:52:53.807124Z","last_seen":"2025-12-21T09:24:26.581421Z","times_seen":2,"resource_available":false,"data":null}},"time_used":180,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":101,"receive":79,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-21","alert":"Sinkholed","trigger":"assets.bee91.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmWUlfBBc4.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.251.38.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://bee91.top/vodplay/jbd-275-1-1","date":"2025-12-21T09:23:48.577Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:53:13 GMT","end":"Wed, 25 Feb 2026 15:53:12 GMT"},"fingerprint":{"sha1":"5A:E3:E3:B6:18:F9:10:0B:5B:11:FA:CB:BF:0C:9B:5C:0E:34:70:78","sha256":"FC:46:B0:C1:1E:B2:21:60:D9:7E:6A:ED:42:56:B2:CF:2A:E4:D2:F1:1C:63:63:98:2B:A3:0F:6C:4A:98:74:D6"}}},"request":{"raw":"GET /s/roboto/v18/KFOlCnqEu92Fr1MmWUlfBBc4.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://bee91.top\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bee91.top/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 15436\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 20 Dec 2025 10:39:15 GMT\r\nexpires: Sun, 20 Dec 2026 10:39:15 GMT\r\ncache-control: public, max-age=31536000\r\nage: 81873\r\nlast-modified: Mon, 16 Oct 2017 17:33:12 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":15436,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 15436, version 1.0","md5":"037d830416495def72b7881024c14b7b","sha1":"619389190b3cafafb5db94113990350acc8a0278","sha256":"1d5b7c64458f4af91dcfee0354be47adde1f739b5aded03a7ab6068a1bb6ca97","sha512":"c8d2808945a9bf2e6ad36c7749313467ff390f195448c326c4d4d7a4a635a11e2ddf4d0779be2db274f1d1d9d022b1f837294f1e12c9f87e3eac8a95cfd8872f","ssdeep":"384:uJ/qNyGt74AcZEG+69hFFHDJ1CggakKt0y:+q/kAc+ohFx9YgB2y","tlshash":"6e62d017f1fe5110ded279ba7e4f003b18e194e6eb308ab8412789266e4c18dacf8d35","first_seen":"2023-04-07T06:04:51Z","last_seen":"2026-04-06T08:35:13.96341Z","times_seen":7472,"resource_available":true,"data":null}},"time_used":141,"timings":{"blocked":65,"dns":0,"connect":9,"send":0,"wait":9,"receive":2,"ssl":55},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bee91.top/static/player/ckplayer.js","fqdn":"bee91.top","domain":"bee91.top","tld":"top"},"ip":{"addr":"104.19.238.248","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bee91.top/vodplay/jbd-275-1-1","date":"2025-12-21T09:23:48.588Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bee91.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 31 Oct 2025 05:59:59 GMT","end":"Thu, 29 Jan 2026 06:57:41 GMT"},"fingerprint":{"sha1":"9E:01:4F:2E:AA:DE:59:B7:49:23:AA:2D:C5:8C:B9:57:4B:53:E4:2E","sha256":"21:B8:25:B5:37:A5:0A:B2:F1:C2:92:99:70:95:1B:86:D8:74:BD:B2:1A:E8:D4:67:31:E9:24:49:E9:1F:80:EA"}}},"request":{"raw":"GET /static/player/ckplayer.js HTTP/1.1\r\nHost: bee91.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bee91.top/vodplay/jbd-275-1-1\r\nCookie: mystyle=white; is_white=1; langType=1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 21 Dec 2025 09:23:48 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Fri, 08 Nov 2024 18:33:41 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nexpires: Sun, 21 Dec 2025 16:02:17 GMT\r\ncache-control: max-age=43200\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=C%2FxrkQgBiEhnLV00cxYw3tqo587pceWaUyEvS86bHgwLKh6PH%2Ft%2FoAnIYgnHlWEyPwzMPiqDxI15dmAwOxM7yp2bjMtqYWmt%2FQ%3D%3D\"}]}\r\nage: 19291\r\ncf-cache-status: HIT\r\netag: W/\"672e5985-10e\"\r\ncontent-encoding: br\r\ncf-ray: 9b1652a4a8c4783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":270,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with CRLF line terminators","md5":"9adfb5de4e8c0e2a6759d9db2ae4a99e","sha1":"cc16d5d71465fc96d89f9f858af5ffafc234b4c1","sha256":"12869d8af68840602fbd7df5f12cf8dcbeea9bc5d514f0aefc80629a5145efbc","sha512":"43ff1b5b7b518dcaf5ab6fbee702a23d499b3ffbdffd3aebf08845d865dddb6475c52c88960b11e8ebd3beed761a5e19f118084421e11d4e99a6ffdf9d2397cb","ssdeep":"","tlshash":"5bd02b46e148f80c84666194e1f589543b429c57a703e724d5633438045c1771d1173c","first_seen":"2024-12-14T09:46:09.432667Z","last_seen":"2026-04-04T21:56:05.575597Z","times_seen":353,"resource_available":true,"data":null}},"time_used":6,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-21","alert":"Sinkholed","trigger":"bee91.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"assets.bee91.top/upload/video/30967/320x180/1.jpg","fqdn":"assets.bee91.top","domain":"bee91.top","tld":"top"},"ip":{"addr":"172.67.153.205","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bee91.top/vodplay/jbd-275-1-1","date":"2025-12-21T09:23:48.863Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bee91.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 31 Oct 2025 05:59:59 GMT","end":"Thu, 29 Jan 2026 06:57:41 GMT"},"fingerprint":{"sha1":"9E:01:4F:2E:AA:DE:59:B7:49:23:AA:2D:C5:8C:B9:57:4B:53:E4:2E","sha256":"21:B8:25:B5:37:A5:0A:B2:F1:C2:92:99:70:95:1B:86:D8:74:BD:B2:1A:E8:D4:67:31:E9:24:49:E9:1F:80:EA"}}},"request":{"raw":"GET /upload/video/30967/320x180/1.jpg HTTP/1.1\r\nHost: assets.bee91.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bee91.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 21 Dec 2025 09:23:49 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 38830\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Mon, 03 Mar 2025 02:04:02 GMT\r\netag: \"67c50e12-97ae\"\r\naccept-ranges: bytes\r\nexpires: Mon, 22 Dec 2025 09:23:48 GMT\r\ncache-control: max-age=86400\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uryKOY9uJMnsfFo9%2Bk7n3LxH9Lx5FIkZYEG4A0Ru8q3ENne3piX9Qw7sLxn0K4k8mKGnElNIf4KwIgRNqkcZTXaIeBwlba51Rtbvon0W\"}]}\r\ncf-ray: 9b1652a67c9b5690-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":38830,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 320x180, components 3","md5":"27d04ba3823a7b3e682d42257af44d45","sha1":"59d58479bd60560f0d85b9dd4dcac46718755ebf","sha256":"1f35a5ac22c65f8f5afd5ec7892ab3c00aba58bdc75751aac3feeb33caa77427","sha512":"2cb9dfb185ac21666127598e78456a03dd129be22721bdd3de2ebeb98b1dd165e30aa6de836b5a017ae5aab9575d48dcb584f2ef50eb4e6fd10658e757eefe77","ssdeep":"768:pz+Hi/h/SxYIlV8g/pQaTpW2Xlrx3Fp4P3PUYUzq:pzZ/t6zKaTg21rvCP8YD","tlshash":"a703f1b1cbc6dec4d8707167bd252d9391af5e00b125c7c4a28f56183d28dc9de790a6","first_seen":"2025-12-21T09:24:26.583413Z","last_seen":"2025-12-21T09:24:26.583413Z","times_seen":1,"resource_available":false,"data":null}},"time_used":202,"timings":{"blocked":8,"dns":0,"connect":0,"send":0,"wait":134,"receive":60,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-21","alert":"Sinkholed","trigger":"assets.bee91.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"assets.bee91.top/upload/video/26833/320x180/1.jpg","fqdn":"assets.bee91.top","domain":"bee91.top","tld":"top"},"ip":{"addr":"172.67.153.205","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bee91.top/vodplay/jbd-275-1-1","date":"2025-12-21T09:23:49.252Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bee91.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 31 Oct 2025 05:59:59 GMT","end":"Thu, 29 Jan 2026 06:57:41 GMT"},"fingerprint":{"sha1":"9E:01:4F:2E:AA:DE:59:B7:49:23:AA:2D:C5:8C:B9:57:4B:53:E4:2E","sha256":"21:B8:25:B5:37:A5:0A:B2:F1:C2:92:99:70:95:1B:86:D8:74:BD:B2:1A:E8:D4:67:31:E9:24:49:E9:1F:80:EA"}}},"request":{"raw":"GET /upload/video/26833/320x180/1.jpg HTTP/1.1\r\nHost: assets.bee91.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bee91.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 21 Dec 2025 09:23:49 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 40086\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Tue, 11 Mar 2025 12:47:52 GMT\r\netag: \"67d030f8-9c96\"\r\naccept-ranges: bytes\r\nexpires: Mon, 22 Dec 2025 09:23:49 GMT\r\ncache-control: max-age=86400\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0jRDGX%2BEERIkSrgR2y7Mj17BJzd6td8LAIHuc2X7y%2FdqJlmlHJSosBWHbzdKk6pNuZ8CQu0T1nJOrie6kA5RMaZA%2BwcuPsbqtpRb0xei\"}]}\r\ncf-ray: 9b1652a8de2c5690-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":40086,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 320x180, components 3","md5":"3e7cc3582f0541b606a9d086eb72c45c","sha1":"499af8dbb2f38de42a0a53d75989a15b80b80182","sha256":"eb45798de32490b81aac741a0dc2cb80a4e6e8b58be1a71a07285517fa4acb66","sha512":"787076698ba078788f95054f05a68810ab4b7db61180f11f17972398e87b2aa4cef62556cf6b59e3015ebfa00e4995aaddc4d25f1f79e30b0a80ab9509932a25","ssdeep":"768:AQgdQbBG+6rMfHwHG1Dh/KdynyQFgh7e95nGLTF4P+ZfuSq3W9cc:AQgdQbgM0GKaFgRe95nKR48ftq3Wac","tlshash":"9e03025d25d811d9f3ab0d4fbbbcfe278dd2e815ad29801595f0382363816ce2c16e13","first_seen":"2025-12-21T06:26:16.475636Z","last_seen":"2025-12-21T09:24:26.584226Z","times_seen":2,"resource_available":false,"data":null}},"time_used":138,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":95,"receive":43,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-21","alert":"Sinkholed","trigger":"assets.bee91.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bee91.top/assets/css/app.css?15","fqdn":"bee91.top","domain":"bee91.top","tld":"top"},"ip":{"addr":"104.19.238.248","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://bee91.top/vodplay/jbd-275-1-1","date":"2025-12-21T09:23:48.531Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bee91.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 31 Oct 2025 05:59:59 GMT","end":"Thu, 29 Jan 2026 06:57:41 GMT"},"fingerprint":{"sha1":"9E:01:4F:2E:AA:DE:59:B7:49:23:AA:2D:C5:8C:B9:57:4B:53:E4:2E","sha256":"21:B8:25:B5:37:A5:0A:B2:F1:C2:92:99:70:95:1B:86:D8:74:BD:B2:1A:E8:D4:67:31:E9:24:49:E9:1F:80:EA"}}},"request":{"raw":"GET /assets/css/app.css?15 HTTP/1.1\r\nHost: bee91.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bee91.top/vodplay/jbd-275-1-1\r\nCookie: mystyle=white; is_white=1; langType=1\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 21 Dec 2025 09:23:48 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Fri, 14 Mar 2025 15:13:12 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\netag: \"67d44788-3f752\"\r\nexpires: Sun, 21 Dec 2025 16:02:16 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\nage: 19291\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6UYmTL5I0cXj2%2FOf0dU%2BKXyEJJqrnNaWVT4BCbOixj6kM8O8Px1Ozrej2cmCDX5vzW%2BV9ufTQroXWAjQ1kFF6TRIqVMQqqoyQg%3D%3D\"}]}\r\ncf-ray: 9b1652a43fbf783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":259922,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65406)","md5":"1f333c5f48d4a8407167d53e32152836","sha1":"8654ba128685e59bdde820c06d0a50b8ed9054c6","sha256":"f15df76214461b2369e38bc282b538023b0709f6ef2285286b9eae164d0325a7","sha512":"ab4834af926bed33d42599afe2aae9c0706a393ab99a99d6c361cc4f19432a54ff31d129c92e4dc0993e191012faa796c12f5d4e3c228ef69dbed851417084b1","ssdeep":"1536:KFNVwOUPBycgS0DnDEBi8rNcuSEL/pO/0/wUENM6HN2659I3m48CN+Hdis:aN2PPvK0oUENM6HN26jam48CN+Hdis","tlshash":"ec4497a3f590311ca067c61992d0bafd263ec142e6221ffbf51777658b866cb0673a0d","first_seen":"2025-09-16T01:00:39.938422Z","last_seen":"2026-01-30T11:08:39.880851Z","times_seen":667,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-21","alert":"Sinkholed","trigger":"bee91.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.251.38.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://bee91.top/vodplay/jbd-275-1-1","date":"2025-12-21T09:23:48.585Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:53:13 GMT","end":"Wed, 25 Feb 2026 15:53:12 GMT"},"fingerprint":{"sha1":"5A:E3:E3:B6:18:F9:10:0B:5B:11:FA:CB:BF:0C:9B:5C:0E:34:70:78","sha256":"FC:46:B0:C1:1E:B2:21:60:D9:7E:6A:ED:42:56:B2:CF:2A:E4:D2:F1:1C:63:63:98:2B:A3:0F:6C:4A:98:74:D6"}}},"request":{"raw":"GET /s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://bee91.top\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bee91.top/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 15552\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 20 Dec 2025 10:41:26 GMT\r\nexpires: Sun, 20 Dec 2026 10:41:26 GMT\r\ncache-control: public, max-age=31536000\r\nage: 81742\r\nlast-modified: Mon, 16 Oct 2017 17:33:02 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":15552,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 15552, version 1.0","md5":"285467176f7fe6bb6a9c6873b3dad2cc","sha1":"ea04e4ff5142ddd69307c183def721a160e0a64e","sha256":"5a8c1e7681318caa29e9f44e8a6e271f6a4067a2703e9916dfd4fe9099241db7","sha512":"5f9bb763406ea8ce978ec675bd51a0263e9547021ea71188dbd62f0212eb00c1421b750d3b94550b50425bebff5f881c41299f6a33bbfa12fb1ff18c12bc7ff1","ssdeep":"384:HDKhlQ8AGL0dgUoEGBQTc7r6QYMkyr/iobA2E4/jKcJZI7lhzi:jslQ+LhUoTB0Qr6Qjkg/DmcJufzi","tlshash":"8462e103f2bc4c01e786193ebb5870237205272619efa67780ce7ea4c65ec81a39b457","first_seen":"2023-04-05T04:58:40Z","last_seen":"2026-04-06T07:27:15.576956Z","times_seen":338636,"resource_available":false,"data":null}},"time_used":106,"timings":{"blocked":48,"dns":1,"connect":8,"send":0,"wait":8,"receive":2,"ssl":39},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"assets.bee91.top/videos/202004/04/300160282/originalph5e888a6b80824_s.jpg","fqdn":"assets.bee91.top","domain":"bee91.top","tld":"top"},"ip":{"addr":"172.67.153.205","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bee91.top/vodplay/jbd-275-1-1","date":"2025-12-21T09:23:49.253Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bee91.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 31 Oct 2025 05:59:59 GMT","end":"Thu, 29 Jan 2026 06:57:41 GMT"},"fingerprint":{"sha1":"9E:01:4F:2E:AA:DE:59:B7:49:23:AA:2D:C5:8C:B9:57:4B:53:E4:2E","sha256":"21:B8:25:B5:37:A5:0A:B2:F1:C2:92:99:70:95:1B:86:D8:74:BD:B2:1A:E8:D4:67:31:E9:24:49:E9:1F:80:EA"}}},"request":{"raw":"GET /videos/202004/04/300160282/originalph5e888a6b80824_s.jpg HTTP/1.1\r\nHost: assets.bee91.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bee91.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 21 Dec 2025 09:23:49 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 13819\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Sun, 15 Jun 2025 17:39:25 GMT\r\netag: \"684f054d-35fb\"\r\naccept-ranges: bytes\r\nexpires: Mon, 22 Dec 2025 09:23:49 GMT\r\ncache-control: max-age=86400\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jrb%2FagM0dhj%2FFXasE8%2B7viloSMonwtbdDYRiphZhFwfRKxUQoeCgM07MER2aqtiHOZnYDan8qeBCD%2FgHqobKZLKX%2BroiblHmEwfG%2FNil\"}]}\r\ncf-ray: 9b1652a8de2d5690-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13819,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 320x180, components 3","md5":"32b0061ef028c9e1d8ce8d03f38d222a","sha1":"a1341fdc4f7274ac18c2b52f49e025f64f27c461","sha256":"b32ed3b312a71fcf708ebc5ac674d41191878bdb1456eb66be87ec820fe51e7f","sha512":"543ea1a17d62b2021b9f3b8f2e986a229931f73c444fa9b104ca526c1a9dc1d1815454bd8ba377c5211db3ee5fbfcf125ff95211e631a9f8462128c2b31fd3fe","ssdeep":"192:8CJiSohqpbfie95uPDhWsQCMbwnt1MUlj1n6JSeyJ+ovpXJqjwBwOrSSahnGJj08:8CJiZajQ0UntSUl1zeylpJhwOiGquR","tlshash":"1652d0b05764c5d0bb3b25f7cd2cbf213fc8dd1001e2a98a69c467490a681dd2af6878","first_seen":"2025-12-21T09:24:26.585537Z","last_seen":"2026-03-15T23:31:00.935616Z","times_seen":2,"resource_available":false,"data":null}},"time_used":139,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":96,"receive":43,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-21","alert":"Sinkholed","trigger":"assets.bee91.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"assets.bee91.top/upload/video/36622/320x180/1.jpg","fqdn":"assets.bee91.top","domain":"bee91.top","tld":"top"},"ip":{"addr":"172.67.153.205","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bee91.top/vodplay/jbd-275-1-1","date":"2025-12-21T09:23:49.507Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bee91.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 31 Oct 2025 05:59:59 GMT","end":"Thu, 29 Jan 2026 06:57:41 GMT"},"fingerprint":{"sha1":"9E:01:4F:2E:AA:DE:59:B7:49:23:AA:2D:C5:8C:B9:57:4B:53:E4:2E","sha256":"21:B8:25:B5:37:A5:0A:B2:F1:C2:92:99:70:95:1B:86:D8:74:BD:B2:1A:E8:D4:67:31:E9:24:49:E9:1F:80:EA"}}},"request":{"raw":"GET /upload/video/36622/320x180/1.jpg HTTP/1.1\r\nHost: assets.bee91.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bee91.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 21 Dec 2025 09:23:49 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 40006\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Wed, 19 Feb 2025 07:02:13 GMT\r\netag: \"67b581f5-9c46\"\r\naccept-ranges: bytes\r\nexpires: Mon, 22 Dec 2025 09:23:49 GMT\r\ncache-control: max-age=86400\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pX059IIYAABcU03i9VYreQugrQpt7Ga9pI3p4v3UiPH8qXLEKHwiv6mb%2BTdfBCTYCihWWkVP3pfaG%2B3svA3q%2FXpkl5zIZbMFLz6lGxWE\"}]}\r\ncf-ray: 9b1652aa6f6a5690-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":40006,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 320x180, components 3","md5":"8e4f059198a0c40824955551b329f0a0","sha1":"0ae6445665c949ef972ab891aefda170cac5afc8","sha256":"bb52950ad81f9b3f3218d485cd5812506375e309bb4c6b56f8ea5981d5463ec2","sha512":"cebfccb6f820237c035fa8eab7a3b09462cdd9e9dbd21f0bca2b82c12f0428302dcac78a2445f151ee4ba43df68679ca26739bd55b295a05c977237539e332a3","ssdeep":"768:CkobQPFHg6md8l7K9Zd+XuqKePl/DAK2NelP+GxHZCZENqWiofQgoG:OQP63mkZd+exMlrAK2wwEH8aiY","tlshash":"a703f2070ba613df939040408f9d4fdf14e511359e6e52d52ec62a2fb866e3b896b13f","first_seen":"2025-12-21T09:24:26.586415Z","last_seen":"2025-12-21T09:24:26.586415Z","times_seen":1,"resource_available":false,"data":null}},"time_used":129,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":89,"receive":40,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bee91.top/vodplay/jbd-275-1-1","fqdn":"bee91.top","domain":"bee91.top","tld":"top"},"ip":{"addr":"104.19.238.248","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-12-21T09:23:47.931Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bee91.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 31 Oct 2025 05:59:59 GMT","end":"Thu, 29 Jan 2026 06:57:41 GMT"},"fingerprint":{"sha1":"9E:01:4F:2E:AA:DE:59:B7:49:23:AA:2D:C5:8C:B9:57:4B:53:E4:2E","sha256":"21:B8:25:B5:37:A5:0A:B2:F1:C2:92:99:70:95:1B:86:D8:74:BD:B2:1A:E8:D4:67:31:E9:24:49:E9:1F:80:EA"}}},"request":{"raw":"GET /vodplay/jbd-275-1-1 HTTP/1.1\r\nHost: bee91.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 21 Dec 2025 09:23:48 GMT\r\ncontent-type: text/html; charset=utf-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\nset-cookie: mystyle=white; path=/\nis_white=1; path=/\nlangType=1; path=/\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tNaUIfAAMr%2Fr%2FQ%2FAWZPMH0MiReJfGJcVrnwSmvBYGIfKoA%2FQZOqAaokKlT4%2FK71ahvJWxqZjp2XdAxJlE%2F0uvuaVkyAKDCF9Sg%3D%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 9b1652a0aeed783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":80903,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (827)","md5":"b1254c0da78e6eaf776d035fe0f8f762","sha1":"ccb7fb495d96b864eb56b74538482e2c8a8a0f2a","sha256":"65f5e72889017a4dd66d5840a88f520e0e9396f6054eb8b5d63f7e4bc963f3fa","sha512":"65209ef551473abf533133791a3dbfe9c3d2cc6b3589b01585195a0c281c2bf816dcf1fbdaf21007f1dcdc3194b04795bbc43d3da09971bd408caec509115bc2","ssdeep":"768:j3KqKnRgJhaceNJeW2vJXDpN/QXoU0rZFNEjmYRdd3VXSqJ5OGHIIFJ:j3aRA0a6tnFJ","tlshash":"e573413190cd1e3f423322d69621b3ec608f7eb6d9664262f3ff4b518791d86e81647a","first_seen":"2025-12-21T09:24:26.587555Z","last_seen":"2025-12-21T09:24:26.587555Z","times_seen":1,"resource_available":false,"data":null}},"time_used":503,"timings":{"blocked":10,"dns":0,"connect":1,"send":0,"wait":483,"receive":0,"ssl":8},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-21","alert":"Sinkholed","trigger":"bee91.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bee91.top/assets/images/logo.png","fqdn":"bee91.top","domain":"bee91.top","tld":"top"},"ip":{"addr":"104.19.238.248","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bee91.top/vodplay/jbd-275-1-1","date":"2025-12-21T09:23:48.532Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bee91.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 31 Oct 2025 05:59:59 GMT","end":"Thu, 29 Jan 2026 06:57:41 GMT"},"fingerprint":{"sha1":"9E:01:4F:2E:AA:DE:59:B7:49:23:AA:2D:C5:8C:B9:57:4B:53:E4:2E","sha256":"21:B8:25:B5:37:A5:0A:B2:F1:C2:92:99:70:95:1B:86:D8:74:BD:B2:1A:E8:D4:67:31:E9:24:49:E9:1F:80:EA"}}},"request":{"raw":"GET /assets/images/logo.png HTTP/1.1\r\nHost: bee91.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bee91.top/vodplay/jbd-275-1-1\r\nCookie: mystyle=white; is_white=1; langType=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 21 Dec 2025 09:23:48 GMT\r\ncontent-type: image/png\r\nserver: cloudflare\r\nlast-modified: Sun, 10 Nov 2024 10:15:37 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\netag: W/\"673087c9-4ad6\"\r\nexpires: Mon, 19 Jan 2026 04:20:22 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\nage: 104605\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zWG7mSYfmHSm205YuLkqNlgT3M%2BH3FwzHmsYV%2BTTY67gSWjsY4WyxcmuerAa%2Fp8Wf7C1LyYgfJ4Oc2PMnChqOc9ZPL1LEvmjIg%3D%3D\"}]}\r\ncf-ray: 9b1652a43fc6783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19158,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 388 x 102, 8-bit/color RGBA, non-interlaced","md5":"5dbefff1d27ecf25dd33478607f2c938","sha1":"c569cf11cb38fe5acbafb9d6a8e202e63d6c97db","sha256":"be506ab9fdb4416c94d2f475c2f6439b890f6e34af99b1b0a7725dbe0ec285f1","sha512":"8d152ed7c140870ff7e79902d6e4374e41af54b520befb33c813cc7c8a8d5ee140c35f3024c664bc3de0578d0f29e9a2000e773b84b77e585b61befe599a4c1b","ssdeep":"384:EEZTYmmMVUqg0VxiC7Xm8uQBvcUaEVlGggs0aCiTfbnyH:AqNgOxiCDMCaEVlxgsr/LjG","tlshash":"9a82c0ca28637e6a1a5321f3767d572dd11d02ef97f4a2d9b26c08721d40828f4b6ed8","first_seen":"2024-11-17T04:14:16.461166Z","last_seen":"2026-04-06T08:35:13.965797Z","times_seen":916,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-21","alert":"Sinkholed","trigger":"bee91.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bee91.top/assets/images/flag/zh.svg","fqdn":"bee91.top","domain":"bee91.top","tld":"top"},"ip":{"addr":"104.19.238.248","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bee91.top/vodplay/jbd-275-1-1","date":"2025-12-21T09:23:48.534Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bee91.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 31 Oct 2025 05:59:59 GMT","end":"Thu, 29 Jan 2026 06:57:41 GMT"},"fingerprint":{"sha1":"9E:01:4F:2E:AA:DE:59:B7:49:23:AA:2D:C5:8C:B9:57:4B:53:E4:2E","sha256":"21:B8:25:B5:37:A5:0A:B2:F1:C2:92:99:70:95:1B:86:D8:74:BD:B2:1A:E8:D4:67:31:E9:24:49:E9:1F:80:EA"}}},"request":{"raw":"GET /assets/images/flag/zh.svg HTTP/1.1\r\nHost: bee91.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bee91.top/vodplay/jbd-275-1-1\r\nCookie: mystyle=white; is_white=1; langType=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 21 Dec 2025 09:23:48 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Sun, 06 Oct 2024 15:22:49 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\netag: \"6702ab49-41c\"\r\ncontent-encoding: gzip\r\nage: 561\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UDv6j%2FOQaLZJmv6D0jfrVfBIjuRTXl%2Bgb40m7fd1svNAMeDNJrrqkcXR40KCYUoPlTgyis1RRKWcHntmqh%2F3F%2FlsF7RoUp9Xzw%3D%3D\"}]}\r\ncf-ray: 9b1652a43fc8783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1052,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"8d337f4350c38fd37d22d0a810550e3a","sha1":"ec83f3907e52cbaf61c433e136a526be9ef8950e","sha256":"332be00cf31fd522b0696886d40d4fe5b95a89467f2eafb9c475ec8d41ec6ebc","sha512":"62ebf4268ac37837a2f729ac786b544c7225ed845f8fd5d3e841181383de5817afa1d47d50f602446ac18fc934a38b33eafad3176b67d66e7c1afb91fdcd0671","ssdeep":"","tlshash":"2b1112d8cb36a264fcc897ad3b1dec4d761215dd6543c5adc36d17c42189c1c4699c92","first_seen":"2023-08-14T19:20:12Z","last_seen":"2026-04-06T08:35:13.97755Z","times_seen":1030,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-21","alert":"Sinkholed","trigger":"bee91.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"t.y7im.sbs/Vcode-sitestats-id-2-t-3","fqdn":"t.y7im.sbs","domain":"y7im.sbs","tld":"sbs"},"ip":{"addr":"172.67.140.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bee91.top/vodplay/jbd-275-1-1","date":"2025-12-21T09:23:48.549Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"y7im.sbs","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 29 Oct 2025 01:44:36 GMT","end":"Tue, 27 Jan 2026 02:43:12 GMT"},"fingerprint":{"sha1":"7A:1B:E1:D0:0B:01:E1:51:EB:A7:0B:78:C9:60:54:1F:C6:88:C9:10","sha256":"EF:CA:C9:66:5A:60:9D:90:90:4D:01:4F:73:C3:28:66:3C:49:C4:92:3D:02:6B:0A:66:45:F5:01:3A:62:AA:47"}}},"request":{"raw":"GET /Vcode-sitestats-id-2-t-3 HTTP/1.1\r\nHost: t.y7im.sbs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bee91.top/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 21 Dec 2025 09:23:48 GMT\r\ncontent-type: text/html; charset=utf-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\nset-cookie: PHPSESSID=dldll6lg2koo0t3qto9rv69f62; path=/\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\npragma: no-cache\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RNo%2BYNqM%2FZAO1zWT5doun5iJnjZ8dgQ009yL%2Bi6sj%2FkerIm1W7vH9Q7ZNmm7IJxNwFdX%2Bw7Xwt6KFEdSRy7vaJiJoaBBeiO3\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 9b1652a46f0a56cb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-06T08:11:44.873372Z","times_seen":13414019,"resource_available":true,"data":null}},"time_used":85,"timings":{"blocked":-1,"dns":0,"connect":1,"send":0,"wait":71,"receive":0,"ssl":12},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-21","alert":"Sinkholed","trigger":"t.y7im.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bee91.top/vodplay/jbd-275-1-1?mode=async\u0026action=js_online_status\u0026rand=1766309028862","fqdn":"bee91.top","domain":"bee91.top","tld":"top"},"ip":{"addr":"104.19.238.248","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bee91.top/vodplay/jbd-275-1-1","date":"2025-12-21T09:23:48.865Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bee91.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 31 Oct 2025 05:59:59 GMT","end":"Thu, 29 Jan 2026 06:57:41 GMT"},"fingerprint":{"sha1":"9E:01:4F:2E:AA:DE:59:B7:49:23:AA:2D:C5:8C:B9:57:4B:53:E4:2E","sha256":"21:B8:25:B5:37:A5:0A:B2:F1:C2:92:99:70:95:1B:86:D8:74:BD:B2:1A:E8:D4:67:31:E9:24:49:E9:1F:80:EA"}}},"request":{"raw":"GET /vodplay/jbd-275-1-1?mode=async\u0026action=js_online_status\u0026rand=1766309028862 HTTP/1.1\r\nHost: bee91.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bee91.top/vodplay/jbd-275-1-1\r\nCookie: mystyle=white; is_white=1; langType=1; kt_tcookie=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 21 Dec 2025 09:23:48 GMT\r\ncontent-type: text/html;charset=utf-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ydGwvgZB4XB42jTLlMhWaSe4Mg7x6wme7tZHYxrK9WOeKh7ZnJI3NylkBv4odQDwg0fVVLSrZ%2Fx67F9MLonZg3t%2FaI%2F11ommKw%3D%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 9b1652a66c96783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"7f46165474d11ee5836777d85df2cdab","sha1":"2dbc2fd2358e1ea1b7a6bc08ea647b9a337ac92d","sha256":"f6fc84c9f21c24907d6bee6eec38cabab5fa9a7be8c4a7827fe9e56f245bd2d5","sha512":"bf73164d9941ba1afcf8027913aef0631fc001a2170b76746027a552ece3c0e3a665ccc61f2f0bfbc60669bbdf9ce7f560493bc0f1c494e6eddcf03f3c0b53ac","ssdeep":"","tlshash":"ee4000000000000000000000000000000000000300000c00c0000000000030c3000000","first_seen":"2023-08-15T00:40:37Z","last_seen":"2026-04-06T08:35:13.997316Z","times_seen":918,"resource_available":false,"data":null}},"time_used":110,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":109,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-21","alert":"Sinkholed","trigger":"bee91.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"assets.bee91.top/upload/video/22232/320x180/1.jpg","fqdn":"assets.bee91.top","domain":"bee91.top","tld":"top"},"ip":{"addr":"172.67.153.205","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bee91.top/vodplay/jbd-275-1-1","date":"2025-12-21T09:23:48.864Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bee91.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 31 Oct 2025 05:59:59 GMT","end":"Thu, 29 Jan 2026 06:57:41 GMT"},"fingerprint":{"sha1":"9E:01:4F:2E:AA:DE:59:B7:49:23:AA:2D:C5:8C:B9:57:4B:53:E4:2E","sha256":"21:B8:25:B5:37:A5:0A:B2:F1:C2:92:99:70:95:1B:86:D8:74:BD:B2:1A:E8:D4:67:31:E9:24:49:E9:1F:80:EA"}}},"request":{"raw":"GET /upload/video/22232/320x180/1.jpg HTTP/1.1\r\nHost: assets.bee91.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bee91.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 21 Dec 2025 09:23:49 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 44702\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Tue, 18 Mar 2025 09:51:35 GMT\r\netag: \"67d94227-ae9e\"\r\naccept-ranges: bytes\r\nexpires: Mon, 22 Dec 2025 09:23:48 GMT\r\ncache-control: max-age=86400\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1YYIHmvqqNYoB29cJASeeFdpj20AlKmnIezwNiXzQ9LVzh39LSK%2FgGAz0ucOpBVvpJxnxhRy9198LqKiAHPlJjBgPa8pZqjkKeLtQqus\"}]}\r\ncf-ray: 9b1652a67c9d5690-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":44702,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 320x180, components 3","md5":"f60eb47ac4bcfbb5606791f87b388833","sha1":"c8988dd5288c18b52309dda79d813a907c96b9cf","sha256":"d3c517898f1da8b2325319ed12d4d57f6fa4cafc11022caed98d57cd7232d5d9","sha512":"a1b18e2942590f738541283b70645fd7e7a1f534fcaa197da2126f6e7b672e95153e47f4c97b41920b9160898df2669d6382cff106436efb7a879ea9e902341b","ssdeep":"768:nnEKC7mUEG3CZLyyfpsTi+XhFV2QBqssnfqTk1o+BB6S6kJXnJjsvW:npht90xhFV2QxsfqI11BT6kJ3JAe","tlshash":"0113f1a57cf5b6c8b896ecd81b4a0de4dfb243f0a857f9584543e503c8b00a8f6b641c","first_seen":"2025-12-21T09:24:26.590012Z","last_seen":"2025-12-21T09:24:26.590012Z","times_seen":1,"resource_available":false,"data":null}},"time_used":265,"timings":{"blocked":7,"dns":0,"connect":0,"send":0,"wait":142,"receive":116,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-21","alert":"Sinkholed","trigger":"assets.bee91.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"home.bee91.top/video/18000/18981/18981974.ts","fqdn":"home.bee91.top","domain":"bee91.top","tld":"top"},"ip":{"addr":"104.21.90.76","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://bee91.top/static/player/ckplayer.html","date":"2025-12-21T09:23:48.989Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bee91.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 31 Oct 2025 05:59:59 GMT","end":"Thu, 29 Jan 2026 06:57:41 GMT"},"fingerprint":{"sha1":"9E:01:4F:2E:AA:DE:59:B7:49:23:AA:2D:C5:8C:B9:57:4B:53:E4:2E","sha256":"21:B8:25:B5:37:A5:0A:B2:F1:C2:92:99:70:95:1B:86:D8:74:BD:B2:1A:E8:D4:67:31:E9:24:49:E9:1F:80:EA"}}},"request":{"raw":"GET /video/18000/18981/18981974.ts HTTP/1.1\r\nHost: home.bee91.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://bee91.top\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bee91.top/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 21 Dec 2025 09:23:49 GMT\r\ncontent-type: video/mp2t\r\ncontent-length: 466624\r\nserver: cloudflare\r\nlast-modified: Fri, 21 Mar 2025 20:03:00 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"67ddc5f4-71ec0\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Content-Type, Authorization\r\naccess-control-allow-credentials: true\r\naccept-ranges: bytes\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=70WpPYRPqQKiAoqaoplf10n0JAZRWELSe0cLNMscezcSTV3ktaXBEglkNPMSmmfsfLTzZNx6wNuKl1X0LW5fcT0bgEnfN1FVAbOp5w%3D%3D\"}]}\r\ncf-ray: 9b1652a72836b51e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":466624,"size_decoded":0,"mime_type":"video/mp2t","magic":"data","md5":"e401aa9584b0d61129b18c6f36adde32","sha1":"a96ab489344c51501d75644a3b87ad4552e99908","sha256":"f4baec43b39a0c73f9757f56151c81e0d918b29c4c9d1e8611f58a16b9a7afc6","sha512":"857557c67ba3a721b28a6bd97eb8b014bb3d365c089cab8b4a7ad2e445c646507b7d646cb1dfbec3e287dbbb83d521cc987b12092b2732a3a0566bd761a41efe","ssdeep":"12288:xvfyfu740hAsIrwMqsgKQ7BAhMXHzBXdmqAfUxGbJ:xA2nA3wMv3Q7OKTBN3nxGbJ","tlshash":"35a423cd13425f5eacecfe977d357818c6e2f5861a74a03708a2971798c0910b9f86eb","first_seen":"2025-12-21T09:24:26.590893Z","last_seen":"2025-12-21T09:24:26.590893Z","times_seen":1,"resource_available":false,"data":null}},"time_used":346,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":79,"receive":267,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-21","alert":"Sinkholed","trigger":"home.bee91.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"assets.bee91.top/upload/video/20221/320x180/1.jpg","fqdn":"assets.bee91.top","domain":"bee91.top","tld":"top"},"ip":{"addr":"172.67.153.205","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bee91.top/vodplay/jbd-275-1-1","date":"2025-12-21T09:23:49.250Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bee91.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 31 Oct 2025 05:59:59 GMT","end":"Thu, 29 Jan 2026 06:57:41 GMT"},"fingerprint":{"sha1":"9E:01:4F:2E:AA:DE:59:B7:49:23:AA:2D:C5:8C:B9:57:4B:53:E4:2E","sha256":"21:B8:25:B5:37:A5:0A:B2:F1:C2:92:99:70:95:1B:86:D8:74:BD:B2:1A:E8:D4:67:31:E9:24:49:E9:1F:80:EA"}}},"request":{"raw":"GET /upload/video/20221/320x180/1.jpg HTTP/1.1\r\nHost: assets.bee91.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bee91.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 21 Dec 2025 09:23:49 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 50080\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Thu, 20 Mar 2025 00:07:56 GMT\r\netag: \"67db5c5c-c3a0\"\r\naccept-ranges: bytes\r\nexpires: Mon, 22 Dec 2025 09:23:49 GMT\r\ncache-control: max-age=86400\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7zWlBziO7jyPGDK7ElaDDcKEhziQpfGLEtTj5cDj8gomWRT4DSjJ%2FWQfwH19oRkubnlO5hdVUNluL6uhUyHnpzUJ2zhoOSqRpLz%2B0CBR\"}]}\r\ncf-ray: 9b1652a8ce265690-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":50080,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 320x180, components 3","md5":"48540ba273e98794ba2cdc4628b46fe1","sha1":"1b749060cd490ea274a9b2148f83057a4d2b914a","sha256":"adb1f315c8391bcbf7276beb43d31e0b035c4648fd493d8ccfa951a9f2eb7e30","sha512":"a96bc372535ace7bf6962b5808f9049c572599b04ee7d2885789c2359899df13d6deef8a3472e51cdf649dbe0d54caaee47be48bf5172141df1b490a72405dda","ssdeep":"768:rGm61UxLjvDCAYhUMQjcwWs0h/3lu1CdutGV3p+4JuZalbSeEe8nkra44FMD5+jO:CC3IUPihNiKlQ8geESraz+50g6HJo","tlshash":"ea23020b422c44c9d5e090a78b9eed4349db22956ef07563bcb2648039b6b635ce7b27","first_seen":"2025-12-21T09:24:26.591696Z","last_seen":"2026-01-17T07:43:30.682016Z","times_seen":2,"resource_available":false,"data":null}},"time_used":208,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":109,"receive":99,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-21","alert":"Sinkholed","trigger":"assets.bee91.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bee91.top/assets/images/placeholder-md.jpg","fqdn":"bee91.top","domain":"bee91.top","tld":"top"},"ip":{"addr":"104.19.238.248","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bee91.top/vodplay/jbd-275-1-1","date":"2025-12-21T09:23:48.537Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bee91.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 31 Oct 2025 05:59:59 GMT","end":"Thu, 29 Jan 2026 06:57:41 GMT"},"fingerprint":{"sha1":"9E:01:4F:2E:AA:DE:59:B7:49:23:AA:2D:C5:8C:B9:57:4B:53:E4:2E","sha256":"21:B8:25:B5:37:A5:0A:B2:F1:C2:92:99:70:95:1B:86:D8:74:BD:B2:1A:E8:D4:67:31:E9:24:49:E9:1F:80:EA"}}},"request":{"raw":"GET /assets/images/placeholder-md.jpg HTTP/1.1\r\nHost: bee91.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bee91.top/vodplay/jbd-275-1-1\r\nCookie: mystyle=white; is_white=1; langType=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 21 Dec 2025 09:23:48 GMT\r\ncontent-type: image/jpeg\r\nserver: cloudflare\r\nlast-modified: Sun, 06 Oct 2024 15:26:59 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\netag: W/\"6702ac43-3909\"\r\nexpires: Mon, 19 Jan 2026 04:20:22 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\nage: 104605\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=a2txn%2Frg%2F493hM7M3f3nfSFb2JCSrg9Wg2MWQuorHTPTQF9ofJntIL30sTAgRwt7g2T7Ah0fVwEyiShobeGWlUnhdlRTzdyrrQ%3D%3D\"}]}\r\ncf-ray: 9b1652a43fdc783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14601,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CS5.1 Windows, datetime=2019:03:31 18:12:59], progressive, precision 8, 336x188, components 3","md5":"ac9ea1a555198470671238d214b2e489","sha1":"4a22f147e57e2781e0b302ac2c156d1999793cdb","sha256":"58be1d54819c76bc997fee25de298613a1565c7f6c8ef01629511315422b7468","sha512":"3c6797f9a97cbe694ccb57bea81651d76061adcb806ae62dcd9fc58114f2784763b0b5b0a97d10b7a5f9e299a177d49546be3737308830ff15c66d6549684cd5","ssdeep":"192:X0qYNMtKwZyKPy4lmJGYNMtKwZyPknviI:XRYNg7U1i9YNg7U8nviI","tlshash":"2262ea39af61ee22f4f0d73444e1dba5b3226b14f3636b42748d7a293770ad14d0e246","first_seen":"2023-05-08T11:53:04Z","last_seen":"2026-04-06T08:35:13.994115Z","times_seen":1214,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-21","alert":"Sinkholed","trigger":"bee91.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bee91.top/template/jable/ads/top.js","fqdn":"bee91.top","domain":"bee91.top","tld":"top"},"ip":{"addr":"104.19.238.248","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bee91.top/vodplay/jbd-275-1-1","date":"2025-12-21T09:23:48.538Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bee91.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 31 Oct 2025 05:59:59 GMT","end":"Thu, 29 Jan 2026 06:57:41 GMT"},"fingerprint":{"sha1":"9E:01:4F:2E:AA:DE:59:B7:49:23:AA:2D:C5:8C:B9:57:4B:53:E4:2E","sha256":"21:B8:25:B5:37:A5:0A:B2:F1:C2:92:99:70:95:1B:86:D8:74:BD:B2:1A:E8:D4:67:31:E9:24:49:E9:1F:80:EA"}}},"request":{"raw":"GET /template/jable/ads/top.js HTTP/1.1\r\nHost: bee91.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bee91.top/vodplay/jbd-275-1-1\r\nCookie: mystyle=white; is_white=1; langType=1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 21 Dec 2025 09:23:48 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Tue, 18 Nov 2025 13:43:35 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\netag: \"691c7807-91e\"\r\nexpires: Sun, 21 Dec 2025 16:02:16 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\nage: 19291\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DN07toGyzT7H08KRrllHbIM2ftVEsjIhRWd3tabsJeJTjjd1P48xToMviaoQsezDsEk5hWB4oqLgs1lUUsIprdwYsQN9e2YL3Q%3D%3D\"}]}\r\ncf-ray: 9b1652a43fde783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2334,"size_decoded":0,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text, with very long lines (462), with CRLF, LF line terminators","md5":"79fe358e90e7c7d0a70971d52807a804","sha1":"a89b804129c02d8dc8fcd962697e2965fc8a1f0e","sha256":"6c40f8441828caf57241196f6e6eee6a909dcd1d5369cebb595b8e08589a7666","sha512":"bdee4d75b56645f58e3abd9029b50d005f0219c24df801ea111c4022466bea14b778b54f38ec00282c7a05922dbc55b7eb58acf9d96007339d2aba61be9f61e9","ssdeep":"","tlshash":"3141322a0aa10147501220f4ff9b911ce729d1077f19e86779dc1e15bfda8d9bc7d8b8","first_seen":"2025-11-19T00:36:29.202304Z","last_seen":"2026-01-04T14:38:16.565296Z","times_seen":448,"resource_available":true,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-21","alert":"Sinkholed","trigger":"bee91.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bee91.top/static/player/ckplayer/js/ckplayer.min.js","fqdn":"bee91.top","domain":"bee91.top","tld":"top"},"ip":{"addr":"104.19.238.248","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bee91.top/static/player/ckplayer.html","date":"2025-12-21T09:23:48.710Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bee91.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 31 Oct 2025 05:59:59 GMT","end":"Thu, 29 Jan 2026 06:57:41 GMT"},"fingerprint":{"sha1":"9E:01:4F:2E:AA:DE:59:B7:49:23:AA:2D:C5:8C:B9:57:4B:53:E4:2E","sha256":"21:B8:25:B5:37:A5:0A:B2:F1:C2:92:99:70:95:1B:86:D8:74:BD:B2:1A:E8:D4:67:31:E9:24:49:E9:1F:80:EA"}}},"request":{"raw":"GET /static/player/ckplayer/js/ckplayer.min.js HTTP/1.1\r\nHost: bee91.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bee91.top/static/player/ckplayer.html\r\nCookie: mystyle=white; is_white=1; langType=1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 21 Dec 2025 09:23:48 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Tue, 11 Oct 2022 00:46:49 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\netag: \"6344bcf9-21ee2\"\r\nexpires: Sun, 21 Dec 2025 16:02:17 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\nage: 19291\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Vh4wkLI%2BnmAPZWTxT4mcSAwTkg66%2FX59b7YMyxJDuFwNYWlw%2FpWbRe%2BwvAs60oMDqLvzLVBE8IqOH1KnNdsgAzeS2lJTDMWgKw%3D%3D\"}]}\r\ncf-ray: 9b1652a56a5e783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":138978,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65432), with CRLF line terminators","md5":"b0c58a0c77921e6e04e18a2594d67f8a","sha1":"2aa94a801d0f546f546d24030a81e972a9f15988","sha256":"fe806dee46b6873f6baa4c1ad391b8c6e1b4ad721d3f527eef35986e619bf935","sha512":"38b6f029472a5c095159e0f486b3171847ad7b3cb36bcfd9ffcbbcf38c1b47ec29001b109049d45194b5de15f220d4ef925454e6781e997a5e6061720ff2851d","ssdeep":"3072:/aTnI9R2dfcZHlOpZ+iJAOgXmO00B9SP6mSdt:/aTnI9R2dfcZHlOpfeOFO0gSPi","tlshash":"14d3ea447b4164b9c3e793ff196e16127178d6b28505b014f13abedcee304431ab7aae","first_seen":"2024-08-29T17:29:32.964775Z","last_seen":"2026-04-04T21:56:05.572615Z","times_seen":463,"resource_available":true,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-21","alert":"Sinkholed","trigger":"bee91.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.251.38.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://bee91.top/vodplay/jbd-275-1-1","date":"2025-12-21T09:23:48.769Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:53:13 GMT","end":"Wed, 25 Feb 2026 15:53:12 GMT"},"fingerprint":{"sha1":"5A:E3:E3:B6:18:F9:10:0B:5B:11:FA:CB:BF:0C:9B:5C:0E:34:70:78","sha256":"FC:46:B0:C1:1E:B2:21:60:D9:7E:6A:ED:42:56:B2:CF:2A:E4:D2:F1:1C:63:63:98:2B:A3:0F:6C:4A:98:74:D6"}}},"request":{"raw":"GET /s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://bee91.top\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bee91.top/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 15344\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 20 Dec 2025 10:57:41 GMT\r\nexpires: Sun, 20 Dec 2026 10:57:41 GMT\r\ncache-control: public, max-age=31536000\r\nage: 80767\r\nlast-modified: Mon, 16 Oct 2017 17:32:55 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":15344,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 15344, version 1.0","md5":"5d4aeb4e5f5ef754e307d7ffaef688bd","sha1":"06db651cdf354c64a7383ea9c77024ef4fb4cef8","sha256":"3e253b66056519aa065b00a453bac37ac5ed8f3e6fe7b542e93a9dcdcc11d0bc","sha512":"7eb7c301df79d35a6a521fae9d3dccc0a695d3480b4d34c7d262dd0c67abec8437ed40e2920625e98aaeafba1d908dec69c3b07494ec7c29307de49e91c2ef48","ssdeep":"384:ctE5KIuhGO+DSdXwye6i9Xm81v4vMHCbppV0pr3Ll9/w:cqrVO++tw/9CICFbQLlxw","tlshash":"5162e16aef76dc7e4f1af1361c01b45404462290ba6155eff00d6e1d4eed1aff461392","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-06T08:06:50.903633Z","times_seen":536376,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"assets.bee91.top/upload/video/35134/320x180/1.jpg","fqdn":"assets.bee91.top","domain":"bee91.top","tld":"top"},"ip":{"addr":"172.67.153.205","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bee91.top/vodplay/jbd-275-1-1","date":"2025-12-21T09:23:49.252Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bee91.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 31 Oct 2025 05:59:59 GMT","end":"Thu, 29 Jan 2026 06:57:41 GMT"},"fingerprint":{"sha1":"9E:01:4F:2E:AA:DE:59:B7:49:23:AA:2D:C5:8C:B9:57:4B:53:E4:2E","sha256":"21:B8:25:B5:37:A5:0A:B2:F1:C2:92:99:70:95:1B:86:D8:74:BD:B2:1A:E8:D4:67:31:E9:24:49:E9:1F:80:EA"}}},"request":{"raw":"GET /upload/video/35134/320x180/1.jpg HTTP/1.1\r\nHost: assets.bee91.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bee91.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 21 Dec 2025 09:23:49 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 38514\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Wed, 26 Feb 2025 23:38:21 GMT\r\netag: \"67bfa5ed-9672\"\r\naccept-ranges: bytes\r\nexpires: Mon, 22 Dec 2025 09:23:49 GMT\r\ncache-control: max-age=86400\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Zk%2BrM4Jaeaj90T7zykRtPcY2atSkpxPKOP8rrcPPRhEP5d5gS1VR5L42p0mtnKWOlf6C5%2B4vRaQfr5ZmejICnfGmth9w5%2BBG2v5QDyiv\"}]}\r\ncf-ray: 9b1652a8de2a5690-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":38514,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 320x180, components 3","md5":"e46fc2456011caaf89e2917ceef9293d","sha1":"f119ae22ff12fc2d57b7564e32188936daf4253c","sha256":"81751cc7cef9bad7ce52e5c273b2317facbb9b05a7fa44707817395d279e8f27","sha512":"7360c216da208fc709a62d49f3aaafe36096b1008696e330f5c2fece86c908fecc258f37be6e99ba48661de945803a59b539c28b43f0675b06e3473855a41642","ssdeep":"768:YQajLRzx96dQ2au3xVYmwdz5srWzKVmUFJ7PUO0gvb0wA2L0qq6r:Y/tz6dQ2JX61sKef7c+bkYAe","tlshash":"f603f11af8dd88c27b733d6c756bcdb542f091deeac94433c1603269561cda4be097a8","first_seen":"2025-12-21T09:24:26.593998Z","last_seen":"2025-12-21T09:24:26.593998Z","times_seen":1,"resource_available":false,"data":null}},"time_used":125,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":86,"receive":39,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-21","alert":"Sinkholed","trigger":"assets.bee91.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"assets.bee91.top/upload/video/18981/preview.jpg","fqdn":"assets.bee91.top","domain":"bee91.top","tld":"top"},"ip":{"addr":"172.67.153.205","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bee91.top/static/player/ckplayer.html","date":"2025-12-21T09:23:49.364Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bee91.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 31 Oct 2025 05:59:59 GMT","end":"Thu, 29 Jan 2026 06:57:41 GMT"},"fingerprint":{"sha1":"9E:01:4F:2E:AA:DE:59:B7:49:23:AA:2D:C5:8C:B9:57:4B:53:E4:2E","sha256":"21:B8:25:B5:37:A5:0A:B2:F1:C2:92:99:70:95:1B:86:D8:74:BD:B2:1A:E8:D4:67:31:E9:24:49:E9:1F:80:EA"}}},"request":{"raw":"GET /upload/video/18981/preview.jpg HTTP/1.1\r\nHost: assets.bee91.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bee91.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 21 Dec 2025 09:23:49 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 188390\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Fri, 21 Mar 2025 20:02:53 GMT\r\netag: \"67ddc5ed-2dfe6\"\r\naccept-ranges: bytes\r\nexpires: Mon, 22 Dec 2025 09:23:49 GMT\r\ncache-control: max-age=86400\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qV5HFpD9NvBLPnYSfsjGpuZKbq0xilCVSwXkD5EfI2pTU3PyJ%2BFJSeL%2BK5elXw9NtGtl9Tl6cbU3D5NB6JcQ9ovWVryP92UkalhjaoRA\"}]}\r\ncf-ray: 9b1652a98eae5690-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":188390,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 800x538, components 3","md5":"c0266072927494a8d2433c8f8f19c49c","sha1":"6045f5be9c4a6c273876d8e9a527d004f28ea88c","sha256":"8b49997c74d9265562907eae110ef21e9c78f89b55ae3254a726b30ee7a17223","sha512":"7b0f6e76ea254ca9cb7d005ff8fcffbee5780c9b4737863e713a2c74d6d28c96fd35096f3b9037c48b83a68f2d2386e5c8655b9c3ba0fed6e6535e2841105795","ssdeep":"3072:OOiGChwAvnTI0wFb74DEc+I2N8+GDDQMTehF3ulvuRfxa6d6qpLSZqwgZ5rA/Vb6:OT3bPTrGX4Z+JN1Ypahx4ma6c/IpAdM9","tlshash":"a40423e797563b25b7ce443d963d619812874223b69727f7b62c38332201c6ea4bc5c7","first_seen":"2023-12-07T08:35:09Z","last_seen":"2025-12-21T09:24:26.59475Z","times_seen":25,"resource_available":false,"data":null}},"time_used":321,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":139,"receive":182,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-21","alert":"Sinkholed","trigger":"assets.bee91.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bee91.top/static/js/player.js?t=a20251221","fqdn":"bee91.top","domain":"bee91.top","tld":"top"},"ip":{"addr":"104.19.238.248","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bee91.top/vodplay/jbd-275-1-1","date":"2025-12-21T09:23:48.536Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bee91.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 31 Oct 2025 05:59:59 GMT","end":"Thu, 29 Jan 2026 06:57:41 GMT"},"fingerprint":{"sha1":"9E:01:4F:2E:AA:DE:59:B7:49:23:AA:2D:C5:8C:B9:57:4B:53:E4:2E","sha256":"21:B8:25:B5:37:A5:0A:B2:F1:C2:92:99:70:95:1B:86:D8:74:BD:B2:1A:E8:D4:67:31:E9:24:49:E9:1F:80:EA"}}},"request":{"raw":"GET /static/js/player.js?t=a20251221 HTTP/1.1\r\nHost: bee91.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bee91.top/vodplay/jbd-275-1-1\r\nCookie: mystyle=white; is_white=1; langType=1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 21 Dec 2025 09:23:48 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Sun, 10 Nov 2024 08:09:50 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\netag: W/\"67306a4e-2255\"\r\nexpires: Sun, 21 Dec 2025 16:02:16 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\nage: 19291\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fnRrjyuby57ifFdBZcAc1xKq8Ewl3DyIW%2BFPCbyi22IllbXvVlirjbB3iGyvbZwSPW4HVbte8zF5EwZ2J2APlYOV2OLU7Z2eFw%3D%3D\"}]}\r\ncf-ray: 9b1652a43fd3783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8789,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (2677)","md5":"ee70b623bd8b1c7b432ba051d022ceb3","sha1":"84b100d4876878317f1721ce5b4c64f00fb53eed","sha256":"1ad942843af46445fd57d7547245ae519bfb5544336a1a3fa0176dddd443e7ca","sha512":"fb7ca00fdbe0a76b7cfca26097b1c6a0e765010e1a577f141505f06b73397b4d5da6bd8023bdf7fb3625279acde46e5f950fef5b151881817a845a0d9eaa34a8","ssdeep":"192:fIsrTuODlRkRtyu5cPqLCI0IIkUcdat58MIOy1Xi:fQdwue5uI","tlshash":"4502561717af1412d2fab86a5fab4c0a6628c307464186eabe3d75dc8fc4435163af78","first_seen":"2024-12-14T09:46:09.477643Z","last_seen":"2026-04-04T21:56:05.540007Z","times_seen":353,"resource_available":true,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-21","alert":"Sinkholed","trigger":"bee91.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmWUlfBBc4.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.251.38.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://bee91.top/vodplay/jbd-275-1-1","date":"2025-12-21T09:23:48.770Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:53:13 GMT","end":"Wed, 25 Feb 2026 15:53:12 GMT"},"fingerprint":{"sha1":"5A:E3:E3:B6:18:F9:10:0B:5B:11:FA:CB:BF:0C:9B:5C:0E:34:70:78","sha256":"FC:46:B0:C1:1E:B2:21:60:D9:7E:6A:ED:42:56:B2:CF:2A:E4:D2:F1:1C:63:63:98:2B:A3:0F:6C:4A:98:74:D6"}}},"request":{"raw":"GET /s/roboto/v18/KFOlCnqEu92Fr1MmWUlfBBc4.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://bee91.top\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bee91.top/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 15436\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 20 Dec 2025 10:39:15 GMT\r\nexpires: Sun, 20 Dec 2026 10:39:15 GMT\r\ncache-control: public, max-age=31536000\r\nage: 81873\r\nlast-modified: Mon, 16 Oct 2017 17:33:12 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":15436,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 15436, version 1.0","md5":"037d830416495def72b7881024c14b7b","sha1":"619389190b3cafafb5db94113990350acc8a0278","sha256":"1d5b7c64458f4af91dcfee0354be47adde1f739b5aded03a7ab6068a1bb6ca97","sha512":"c8d2808945a9bf2e6ad36c7749313467ff390f195448c326c4d4d7a4a635a11e2ddf4d0779be2db274f1d1d9d022b1f837294f1e12c9f87e3eac8a95cfd8872f","ssdeep":"384:uJ/qNyGt74AcZEG+69hFFHDJ1CggakKt0y:+q/kAc+ohFx9YgB2y","tlshash":"6e62d017f1fe5110ded279ba7e4f003b18e194e6eb308ab8412789266e4c18dacf8d35","first_seen":"2023-04-07T06:04:51Z","last_seen":"2026-04-06T08:35:13.96341Z","times_seen":7472,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"assets.bee91.top/upload/video/44326/320x180/1.jpg","fqdn":"assets.bee91.top","domain":"bee91.top","tld":"top"},"ip":{"addr":"172.67.153.205","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bee91.top/vodplay/jbd-275-1-1","date":"2025-12-21T09:23:48.862Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bee91.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 31 Oct 2025 05:59:59 GMT","end":"Thu, 29 Jan 2026 06:57:41 GMT"},"fingerprint":{"sha1":"9E:01:4F:2E:AA:DE:59:B7:49:23:AA:2D:C5:8C:B9:57:4B:53:E4:2E","sha256":"21:B8:25:B5:37:A5:0A:B2:F1:C2:92:99:70:95:1B:86:D8:74:BD:B2:1A:E8:D4:67:31:E9:24:49:E9:1F:80:EA"}}},"request":{"raw":"GET /upload/video/44326/320x180/1.jpg HTTP/1.1\r\nHost: assets.bee91.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bee91.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 21 Dec 2025 09:23:48 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 38911\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Mon, 02 Dec 2024 21:58:17 GMT\r\netag: \"674e2d79-97ff\"\r\naccept-ranges: bytes\r\nexpires: Mon, 22 Dec 2025 09:23:48 GMT\r\ncache-control: max-age=86400\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1HSWvPPVIjgIdZjC5IbqLV%2FSo9A%2F5%2FY4Mdgny7KVk1gVig%2BquKWaYl2lKCB3Yw99qXj7vBpWsb5a70oAV3MV05EL6%2Fc5jWzi7zz6WS%2B0\"}]}\r\ncf-ray: 9b1652a67ca25690-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":38911,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 320x180, components 3","md5":"74c802ea324c7b32fc384aefbba597eb","sha1":"614e97252b0de45ca57cc7cf8435f71e913c8d93","sha256":"9a8f5be4e0cc1a58d4365a174fd31f08ef5bdb933ef10dfcf6fb0d832d99f7bb","sha512":"5669abe1d56bceda23f531c8fff7de527b105df37f2b0f7aed861972ace8e2288775c9a93d35dccbf7fa4aeb604301f40bdad7511d8b88569010f6de5df5fec7","ssdeep":"768:6ESISmTDGhoMnx6Yim0vW/k6WcSyLxMYhEyB0wTSAnIyL/AkwUPfeGrZfa:BJGrn8ok6We1EyBxTznfLoG/rZi","tlshash":"bc03f1975329e9e0bcecceca84c10e5c6adc75afec758d481cd423c7ea17572a5e9802","first_seen":"2025-12-21T09:24:26.596076Z","last_seen":"2025-12-21T09:24:26.596076Z","times_seen":1,"resource_available":false,"data":null}},"time_used":159,"timings":{"blocked":14,"dns":0,"connect":2,"send":0,"wait":89,"receive":40,"ssl":11},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-21","alert":"Sinkholed","trigger":"assets.bee91.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bee91.top/static/player/ckplayer/css/ckplayer.css","fqdn":"bee91.top","domain":"bee91.top","tld":"top"},"ip":{"addr":"104.19.238.248","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://bee91.top/static/player/ckplayer.html","date":"2025-12-21T09:23:48.709Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bee91.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 31 Oct 2025 05:59:59 GMT","end":"Thu, 29 Jan 2026 06:57:41 GMT"},"fingerprint":{"sha1":"9E:01:4F:2E:AA:DE:59:B7:49:23:AA:2D:C5:8C:B9:57:4B:53:E4:2E","sha256":"21:B8:25:B5:37:A5:0A:B2:F1:C2:92:99:70:95:1B:86:D8:74:BD:B2:1A:E8:D4:67:31:E9:24:49:E9:1F:80:EA"}}},"request":{"raw":"GET /static/player/ckplayer/css/ckplayer.css HTTP/1.1\r\nHost: bee91.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bee91.top/static/player/ckplayer.html\r\nCookie: mystyle=white; is_white=1; langType=1\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 21 Dec 2025 09:23:48 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Mon, 23 Jun 2025 06:46:49 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\netag: \"6858f859-aa29\"\r\nexpires: Sun, 21 Dec 2025 16:02:17 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\nage: 19291\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=k8%2FfBQvuC0PZ1qllZavP%2FnXchSRzS%2BuKqv1i%2BBRKDVvGRZHopRaibjjV1fQFessNCIiVHNgoMFcpnUKcvRUEKUmjNROj6joSmQ%3D%3D\"}]}\r\ncf-ray: 9b1652a56a5d783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":43561,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (303)","md5":"98966ff0de9eaf17c4e1e3485a29786a","sha1":"5e28ae916ea5bcd218d3da2e96bc77f4b4919158","sha256":"d7c2f3285ef62c6108634d19acc3b1ab700c2acefebb5e16a36366d312515256","sha512":"4d42163b3a23e27faa4d71f98abd4b33f4b4e2ca66eae07c6fc7e1ed800f364bfaea5c3761e3776ae5650a43951dc50dc341eab56b078123fa18cfe5c6de9c5c","ssdeep":"384:HK2ZBgo3+X4lFDzVaEHAWMVzlnbNItPWQRQ05IIrOzBfh6VjNGprF3l:HbZBgE+X4lFYnVlnbNAPWurOzL6VIR","tlshash":"dd13ac0b81263ccca037a5d9b5d5a3c537ad8c3e6c5d7b98f1a134ad8b8ca4d6c5334a","first_seen":"2025-09-23T05:20:43.902577Z","last_seen":"2026-01-25T12:46:25.268939Z","times_seen":283,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-21","alert":"Sinkholed","trigger":"bee91.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"assets.bee91.top/upload/video/16430/320x180/1.jpg","fqdn":"assets.bee91.top","domain":"bee91.top","tld":"top"},"ip":{"addr":"172.67.153.205","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bee91.top/vodplay/jbd-275-1-1","date":"2025-12-21T09:23:48.860Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bee91.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 31 Oct 2025 05:59:59 GMT","end":"Thu, 29 Jan 2026 06:57:41 GMT"},"fingerprint":{"sha1":"9E:01:4F:2E:AA:DE:59:B7:49:23:AA:2D:C5:8C:B9:57:4B:53:E4:2E","sha256":"21:B8:25:B5:37:A5:0A:B2:F1:C2:92:99:70:95:1B:86:D8:74:BD:B2:1A:E8:D4:67:31:E9:24:49:E9:1F:80:EA"}}},"request":{"raw":"GET /upload/video/16430/320x180/1.jpg HTTP/1.1\r\nHost: assets.bee91.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bee91.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 21 Dec 2025 09:23:48 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 40780\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Mon, 14 Jul 2025 08:33:40 GMT\r\netag: \"6874c0e4-9f4c\"\r\naccept-ranges: bytes\r\nexpires: Mon, 22 Dec 2025 09:23:48 GMT\r\ncache-control: max-age=86400\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8h5aC%2FqqsGFd9i4evrUVzstqjf5RXvf7pWADwOvA3pBzSn3dDJWh3th7S6JYqMaewERmgwLJVDJ1y0%2B8c2UmNMwiXSg9FFLP6VGVQSfm\"}]}\r\ncf-ray: 9b1652a67ca05690-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":40780,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 320x180, components 3","md5":"ce28055fd02ffe2f7f4e4583268283fd","sha1":"b08a643c343ae23d657b0fcc287935cac3d37d28","sha256":"3d508d6994bcb8a3d845ee0d941aea886837743e28aef1e32e66648b9dba2221","sha512":"561d59dcb31bead021b8f454f991389aaa0bcd0986f28b88e55a718516c88c571d26e4572d48ec71cdb6d9cba7645ddb1ce157792cdafce5df7f8d01f1be2023","ssdeep":"768:ddMq/NqVCsNDlEP33bEz8lwmFVT3dwkQUbPYgmMfkwfP/z1QsagyhT:dmqF2pRYbEzGTtcqnf/z1QjJhT","tlshash":"2b03f1bd501723cf35de88a3c5ae67de641ff22380897c9a2759a3477453b7bd205a01","first_seen":"2025-12-21T09:24:26.597511Z","last_seen":"2025-12-21T09:24:26.597511Z","times_seen":1,"resource_available":false,"data":null}},"time_used":237,"timings":{"blocked":16,"dns":0,"connect":1,"send":0,"wait":108,"receive":97,"ssl":13},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-21","alert":"Sinkholed","trigger":"assets.bee91.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"assets.bee91.top/upload/video/645/320x180/1.jpg","fqdn":"assets.bee91.top","domain":"bee91.top","tld":"top"},"ip":{"addr":"172.67.153.205","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bee91.top/vodplay/jbd-275-1-1","date":"2025-12-21T09:23:48.863Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bee91.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 31 Oct 2025 05:59:59 GMT","end":"Thu, 29 Jan 2026 06:57:41 GMT"},"fingerprint":{"sha1":"9E:01:4F:2E:AA:DE:59:B7:49:23:AA:2D:C5:8C:B9:57:4B:53:E4:2E","sha256":"21:B8:25:B5:37:A5:0A:B2:F1:C2:92:99:70:95:1B:86:D8:74:BD:B2:1A:E8:D4:67:31:E9:24:49:E9:1F:80:EA"}}},"request":{"raw":"GET /upload/video/645/320x180/1.jpg HTTP/1.1\r\nHost: assets.bee91.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bee91.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 21 Dec 2025 09:23:49 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 40198\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Mon, 27 Jan 2025 22:18:39 GMT\r\netag: \"6798063f-9d06\"\r\naccept-ranges: bytes\r\nexpires: Mon, 22 Dec 2025 09:23:48 GMT\r\ncache-control: max-age=86400\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=219mIPZz4Fhupn9dklX%2Boc4HY3L8X%2BCW9G6LFY0uxwHZe6mQD5C3E1R%2Bu7zbm%2BcLGPYbRnl06Rn%2Fc255ed5%2BifTMewLF8HkEFAlVflpg\"}]}\r\ncf-ray: 9b1652a67ca65690-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":40198,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 320x180, components 3","md5":"46ac62ce671ad9781d4884a9c565fd4e","sha1":"4585b799b25dca0cd745998292f0b8b7ca0235f0","sha256":"17f4d695e6665f7ecff2018c813ad2c4635e5b2c5c0e2df45d231ee3fcd85d5d","sha512":"15e143192f65f56d4da797cbcf2660098e883c4c7f3d3a0d3a7419bfaf0481f7c9e721a6a196773bbb36fb504fc1e29d7be7102ec84cca20b5155ad08278b79c","ssdeep":"768:DMdR6jebKqxAAcIbKBXTdYhyfdo7W5inYR43S7KTzxXY2:DnnqxAAdKPeyS7LYR3KTG2","tlshash":"f203e147374dec80f81643082947df5d2ce86a3f39aa56c9f6fb9013a889daf11ed941","first_seen":"2025-12-21T04:58:29.564493Z","last_seen":"2025-12-21T09:24:26.598403Z","times_seen":2,"resource_available":false,"data":null}},"time_used":275,"timings":{"blocked":17,"dns":2,"connect":2,"send":0,"wait":126,"receive":116,"ssl":11},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-21","alert":"Sinkholed","trigger":"assets.bee91.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bee91.top/static/js/jquery.js","fqdn":"bee91.top","domain":"bee91.top","tld":"top"},"ip":{"addr":"104.19.238.248","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bee91.top/vodplay/jbd-275-1-1","date":"2025-12-21T09:23:48.532Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bee91.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 31 Oct 2025 05:59:59 GMT","end":"Thu, 29 Jan 2026 06:57:41 GMT"},"fingerprint":{"sha1":"9E:01:4F:2E:AA:DE:59:B7:49:23:AA:2D:C5:8C:B9:57:4B:53:E4:2E","sha256":"21:B8:25:B5:37:A5:0A:B2:F1:C2:92:99:70:95:1B:86:D8:74:BD:B2:1A:E8:D4:67:31:E9:24:49:E9:1F:80:EA"}}},"request":{"raw":"GET /static/js/jquery.js HTTP/1.1\r\nHost: bee91.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bee91.top/vodplay/jbd-275-1-1\r\nCookie: mystyle=white; is_white=1; langType=1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 21 Dec 2025 09:23:48 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Sat, 05 Mar 2022 14:56:43 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\netag: \"62237a2b-169d5\"\r\nexpires: Sun, 21 Dec 2025 16:02:16 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\nage: 19291\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CikUDKWlAwcQtf760H%2F5IkkoEWRbCcProeGhPFny461U%2F%2B0sH2hRRLL1Fqj7mMyd5%2FEyHfxcsvZYcj22o4ycuqJQQpZhqJ1%2FNw%3D%3D\"}]}\r\ncf-ray: 9b1652a43fc4783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":92629,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (32089)","md5":"397754ba49e9e0cf4e7c190da78dda05","sha1":"ae49e56999d82802727455f0ba83b63acd90a22b","sha256":"c12f6098e641aaca96c60215800f18f5671039aecf812217fab3c0d152f6adb4","sha512":"8c64754f77507ab2c24a6fc818419b9dd3f0ceccc9065290e41afdbee0743f0da2cb13b2fbb00afa525c082f1e697cb3ffd76ef9b902cb81d7c41ca1c641dffb","ssdeep":"1536:dnu00HWWaRxkqJg09pYxoxDKMXJrg8hXXO4dK3kyfiLJBhdSZE+I+Qg7rbaN1RUx:ddkWgoBhcZRQgmW42qe","tlshash":"8c932bdd72d2b03257ab30bd106f540ff2361959280d8850f268d8f9bc79a49a277f6d","first_seen":"2023-03-07T01:02:08Z","last_seen":"2026-04-06T08:11:42.927702Z","times_seen":60860,"resource_available":true,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-21","alert":"Sinkholed","trigger":"bee91.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bee91.top/static/player/prestrain.html","fqdn":"bee91.top","domain":"bee91.top","tld":"top"},"ip":{"addr":"104.19.238.248","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://bee91.top/vodplay/jbd-275-1-1","date":"2025-12-21T09:23:48.607Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bee91.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 31 Oct 2025 05:59:59 GMT","end":"Thu, 29 Jan 2026 06:57:41 GMT"},"fingerprint":{"sha1":"9E:01:4F:2E:AA:DE:59:B7:49:23:AA:2D:C5:8C:B9:57:4B:53:E4:2E","sha256":"21:B8:25:B5:37:A5:0A:B2:F1:C2:92:99:70:95:1B:86:D8:74:BD:B2:1A:E8:D4:67:31:E9:24:49:E9:1F:80:EA"}}},"request":{"raw":"GET /static/player/prestrain.html HTTP/1.1\r\nHost: bee91.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bee91.top/vodplay/jbd-275-1-1\r\nCookie: mystyle=white; is_white=1; langType=1\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 21 Dec 2025 09:23:48 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\nlast-modified: Sat, 09 Nov 2024 18:32:31 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oInK9LT3yairjpcG9iUxwaf6BghVvKOv0tCfl%2BZdPf%2BVbr18DS%2Flkypx67prlV6JyuvuSM%2BF1Q2RcO5Ze0FNavtBbVEGH2IiOg%3D%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 9b1652a4c90a783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":595,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text","md5":"f9c50425c048dc5146e6dea498f5f08d","sha1":"fc626bffae1a0d58fc3b14e12a248fc7e7f3279e","sha256":"406eb38e6751a2051300f8d1a096146ace1de3d6201fa1717d71a75d4d103a28","sha512":"5fe16f1dfc4667eaec9b4e0097bb157dba961a670da4087fdfc38f3f69a938eb6e75984ff962d6ed381a9ca0c417d81c7ee33b9f59ac3eddbca6420ef23fbc82","ssdeep":"","tlshash":"fef0dcb0a0f50352da01090507c0fb8a2fa17483b28e4458b08ee6be4fc899bc5b3f5c","first_seen":"2025-09-23T05:20:44.010419Z","last_seen":"2026-04-04T21:56:05.558347Z","times_seen":352,"resource_available":false,"data":null}},"time_used":43,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":43,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-21","alert":"Sinkholed","trigger":"bee91.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"home.bee91.top/video/18000/18981/home.m3u8","fqdn":"home.bee91.top","domain":"bee91.top","tld":"top"},"ip":{"addr":"104.21.90.76","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://bee91.top/static/player/ckplayer.html","date":"2025-12-21T09:23:48.809Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bee91.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 31 Oct 2025 05:59:59 GMT","end":"Thu, 29 Jan 2026 06:57:41 GMT"},"fingerprint":{"sha1":"9E:01:4F:2E:AA:DE:59:B7:49:23:AA:2D:C5:8C:B9:57:4B:53:E4:2E","sha256":"21:B8:25:B5:37:A5:0A:B2:F1:C2:92:99:70:95:1B:86:D8:74:BD:B2:1A:E8:D4:67:31:E9:24:49:E9:1F:80:EA"}}},"request":{"raw":"GET /video/18000/18981/home.m3u8 HTTP/1.1\r\nHost: home.bee91.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://bee91.top\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bee91.top/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 21 Dec 2025 09:23:48 GMT\r\ncontent-type: application/x-mpegURL\r\ncontent-length: 927\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-disposition: inline; filename=\"home.m3u8\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Content-Type, Authorization\r\naccess-control-allow-credentials: true\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3OuAmWT5z%2B745p%2FKeywKtJn%2B%2BEgh3nzUO5r3KllvzrHGbnc8BV1k%2FLSpF8Gmw3k0MRtVANAc7XB2gQt6T6UXsb21t3klueSUo6q%2Fcg%3D%3D\"}]}\r\ncf-ray: 9b1652a61f9ab51e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":927,"size_decoded":0,"mime_type":"application/x-mpegurl","magic":"M3U playlist, ASCII text","md5":"a77069d3d90a5d87b5eb28589cc6c36a","sha1":"270e82cbf970f55e46d11e898af027797180adf9","sha256":"097438f36a33f39f33ec6e99aa3150b2f592335403906435e0e76cbf0a936b0c","sha512":"0ec9019fe73299b7b8f8fd87749ef53f3c7e0c480f7f860264b227e2d0ec80b7469db919d40fbb30ceaccd4354da2056fd55ba961c808ef7d38bff779723cc36","ssdeep":"","tlshash":"fd1125cab1083b838e588fa6f30330d49149fd3208c2e8c122d067da0e3ebe665c852d","first_seen":"2025-12-21T09:24:26.599981Z","last_seen":"2025-12-21T09:24:26.599981Z","times_seen":1,"resource_available":false,"data":null}},"time_used":85,"timings":{"blocked":10,"dns":0,"connect":1,"send":0,"wait":65,"receive":0,"ssl":8},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-21","alert":"Sinkholed","trigger":"home.bee91.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"assets.bee91.top/upload/video/22050/320x180/1.jpg","fqdn":"assets.bee91.top","domain":"bee91.top","tld":"top"},"ip":{"addr":"172.67.153.205","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bee91.top/vodplay/jbd-275-1-1","date":"2025-12-21T09:23:49.060Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bee91.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 31 Oct 2025 05:59:59 GMT","end":"Thu, 29 Jan 2026 06:57:41 GMT"},"fingerprint":{"sha1":"9E:01:4F:2E:AA:DE:59:B7:49:23:AA:2D:C5:8C:B9:57:4B:53:E4:2E","sha256":"21:B8:25:B5:37:A5:0A:B2:F1:C2:92:99:70:95:1B:86:D8:74:BD:B2:1A:E8:D4:67:31:E9:24:49:E9:1F:80:EA"}}},"request":{"raw":"GET /upload/video/22050/320x180/1.jpg HTTP/1.1\r\nHost: assets.bee91.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bee91.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 21 Dec 2025 09:23:49 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 36474\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Thu, 20 Mar 2025 01:08:55 GMT\r\netag: \"67db6aa7-8e7a\"\r\naccept-ranges: bytes\r\nexpires: Mon, 22 Dec 2025 09:23:49 GMT\r\ncache-control: max-age=86400\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=x7Z%2BHEIiqnp%2Fy8heKIFTgRFVBA61ZIwIb2xRvP89pq41AP5KfMCUHw1s%2FJDMBJx%2FHLjkqNBjDu2MeVhjN%2BHIvtw29%2BbeylFyAmO3HPE3\"}]}\r\ncf-ray: 9b1652a7ad725690-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":36474,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 320x180, components 3","md5":"c1af986285ce899d001eb343be8aafe7","sha1":"7a56b6450b52860f0ec7914e5d3d26478a2afe69","sha256":"525e558e5b28589ac7c676488d362bbf52bee144b87c6fe5604b4e8e6d725e7b","sha512":"5691dca02d71216ae48f4c9a12e18b164ae35defd3888820d446284ee47452db11205c81dd0a754de794e91d370265a8c64461d7618e8e09fbd7b48882f6f384","ssdeep":"768:rZNWal8OUOCapdmYSEroXEF3ZQAbRJrc5b8zTRDb:dNPCOCapo0z1rcyRv","tlshash":"d4f2f1414b0fafcbfc7e413598f44b28c6e2ac166b4b8ce57ac34219949538e73516da","first_seen":"2025-12-21T09:24:26.600765Z","last_seen":"2025-12-21T09:24:26.600765Z","times_seen":1,"resource_available":false,"data":null}},"time_used":131,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":91,"receive":40,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-21","alert":"Sinkholed","trigger":"assets.bee91.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"assets.bee91.top/upload/video/49088/320x180/1.jpg","fqdn":"assets.bee91.top","domain":"bee91.top","tld":"top"},"ip":{"addr":"172.67.153.205","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bee91.top/vodplay/jbd-275-1-1","date":"2025-12-21T09:23:49.252Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bee91.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 31 Oct 2025 05:59:59 GMT","end":"Thu, 29 Jan 2026 06:57:41 GMT"},"fingerprint":{"sha1":"9E:01:4F:2E:AA:DE:59:B7:49:23:AA:2D:C5:8C:B9:57:4B:53:E4:2E","sha256":"21:B8:25:B5:37:A5:0A:B2:F1:C2:92:99:70:95:1B:86:D8:74:BD:B2:1A:E8:D4:67:31:E9:24:49:E9:1F:80:EA"}}},"request":{"raw":"GET /upload/video/49088/320x180/1.jpg HTTP/1.1\r\nHost: assets.bee91.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bee91.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 21 Dec 2025 09:23:49 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 44288\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Wed, 02 Apr 2025 05:03:01 GMT\r\netag: \"67ecc505-ad00\"\r\naccept-ranges: bytes\r\nexpires: Mon, 22 Dec 2025 09:23:49 GMT\r\ncache-control: max-age=86400\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=n%2FqNNQgcj5TwRUYux9Huqnk3bx9Cyz37Tmfvhqc9lfjayXnINI3%2F9oyo6J%2FGd%2B%2B02U2RUo%2FP4y3B4IOoBmxOBE9T6DRZ%2FZ0aFjqhgoRb\"}]}\r\ncf-ray: 9b1652a8de2b5690-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":44288,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 320x180, components 3","md5":"58831d6cadfb302f52e6feba7fe0a235","sha1":"47a39d39a4a7650a7eb3a8d6be56e3136f695114","sha256":"565cf2f06b0e05680c3ec35252d83cd7b4acd052dfa0e86781feb149547e5351","sha512":"04565b4a6a89fd915c5ca10d800bc9d5d94206b42995f702f8ae8ce16344e2ce3d0ea33351264d2e0d561a2b474d08519f28f0c75229f29503c56c351a85fb66","ssdeep":"768:NfgVaWT3LgLBfKhg8jPqFqktK8jJmgBC8XYJLH0AH4RO79zXvnb/:1gVdgL8imPCW8Nmgc8XYdHtrxzfnb/","tlshash":"4c13f23845d35ee3f8a5ed9817c38b765bc2b7020d8413211f9592e6a13b1a77e9238a","first_seen":"2025-12-08T09:07:34.625644Z","last_seen":"2025-12-21T09:24:26.601604Z","times_seen":2,"resource_available":false,"data":null}},"time_used":238,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":124,"receive":114,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-21","alert":"Sinkholed","trigger":"assets.bee91.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"home.bee91.top/video/18000/18981/18981975.ts","fqdn":"home.bee91.top","domain":"bee91.top","tld":"top"},"ip":{"addr":"104.21.90.76","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://bee91.top/static/player/ckplayer.html","date":"2025-12-21T09:23:49.367Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bee91.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 31 Oct 2025 05:59:59 GMT","end":"Thu, 29 Jan 2026 06:57:41 GMT"},"fingerprint":{"sha1":"9E:01:4F:2E:AA:DE:59:B7:49:23:AA:2D:C5:8C:B9:57:4B:53:E4:2E","sha256":"21:B8:25:B5:37:A5:0A:B2:F1:C2:92:99:70:95:1B:86:D8:74:BD:B2:1A:E8:D4:67:31:E9:24:49:E9:1F:80:EA"}}},"request":{"raw":"GET /video/18000/18981/18981975.ts HTTP/1.1\r\nHost: home.bee91.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://bee91.top\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bee91.top/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 21 Dec 2025 09:23:49 GMT\r\ncontent-type: video/mp2t\r\ncontent-length: 482608\r\nserver: cloudflare\r\nlast-modified: Fri, 21 Mar 2025 20:03:00 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"67ddc5f4-75d30\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Content-Type, Authorization\r\naccess-control-allow-credentials: true\r\naccept-ranges: bytes\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PhCisQcuNOvWYsOoKSLnaiLXjlWyexoFJ0rB1hGv240%2BYLiMFz8aTL%2BIEZh994ePbVIKA3HfNeNp2oj9KHDK7EarMCkn%2BuJCjUVfyg%3D%3D\"}]}\r\ncf-ray: 9b1652a989d1b51e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":482608,"size_decoded":0,"mime_type":"video/mp2t","magic":"data","md5":"6a5bb2f07123ac7ada1706c9018acd79","sha1":"833b1da843c3948d6286c09fc4d160546c519d67","sha256":"4c32839005ff0dbf60bdfe528d57078d5130de66683ca7501feb4bd5c285f2d5","sha512":"8768960c36acc5c36657d30748216c52e586f58c77d7f4471eb614201253b85710edd910505ace33e8a04bcab2fc5999b7bd87ee87fdf27bf4693ae13b42ff80","ssdeep":"6144:BTtY9qku5awm0t3t9aIDf3yr8RwAHPKYm9czfX0c7XkFD1OwALF8haO4hP5eywNq:497QLXdRwAHiYTfEFDdAYWhwc60jjZ","tlshash":"a0a423ae19c854e0a73c08e43c9e67a558f441be76bd9f82353be6c706bc690d54e313","first_seen":"2025-12-21T09:24:26.602531Z","last_seen":"2025-12-21T09:24:26.602531Z","times_seen":1,"resource_available":false,"data":null}},"time_used":115,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":59,"receive":56,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-21","alert":"Sinkholed","trigger":"home.bee91.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bee91.top/template/jable/ads/play_ads.js","fqdn":"bee91.top","domain":"bee91.top","tld":"top"},"ip":{"addr":"104.19.238.248","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bee91.top/vodplay/jbd-275-1-1","date":"2025-12-21T09:23:48.537Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bee91.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 31 Oct 2025 05:59:59 GMT","end":"Thu, 29 Jan 2026 06:57:41 GMT"},"fingerprint":{"sha1":"9E:01:4F:2E:AA:DE:59:B7:49:23:AA:2D:C5:8C:B9:57:4B:53:E4:2E","sha256":"21:B8:25:B5:37:A5:0A:B2:F1:C2:92:99:70:95:1B:86:D8:74:BD:B2:1A:E8:D4:67:31:E9:24:49:E9:1F:80:EA"}}},"request":{"raw":"GET /template/jable/ads/play_ads.js HTTP/1.1\r\nHost: bee91.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bee91.top/vodplay/jbd-275-1-1\r\nCookie: mystyle=white; is_white=1; langType=1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 21 Dec 2025 09:23:48 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Tue, 18 Nov 2025 13:43:35 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\netag: \"691c7807-8e9\"\r\nexpires: Sun, 21 Dec 2025 16:02:16 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\nage: 19291\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=acI%2BaQg5ehG6avg5I9gFxeBrJ021Tw4LKIGxRdFNlseYyp9cQ5tvHWrCc96%2F7pHUhjHhQKd8OC5%2B9XBTvJ4TRWvwxfcuKcvFHQ%3D%3D\"}]}\r\ncf-ray: 9b1652a43fd6783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2281,"size_decoded":0,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text, with CRLF line terminators","md5":"15387f298f3ea9de570394447d76e77c","sha1":"d38b2aaa8b91c4d2d40a257e7c5d2cb75289c231","sha256":"7619790f87fe690eb0d89b0e114f80a39548e8acd0fbf1d7e1d35e9f9b332035","sha512":"bad5771c9b68182e0958ef1c3884a38b4051dd27a070a10b31d352437a2be715f320e8b4fe16d901c1d7a6f50e222e033fdcbb599d3017678ca258a22751bbf4","ssdeep":"","tlshash":"4041311c53810197507a12f2ffa78199c238d0037e28d9a67add1d45fffe8c9ba598b8","first_seen":"2025-11-19T02:12:14.360381Z","last_seen":"2026-01-04T07:07:05.952349Z","times_seen":205,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-21","alert":"Sinkholed","trigger":"bee91.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bee91.top/assets/icon/favicon-16x16.png","fqdn":"bee91.top","domain":"bee91.top","tld":"top"},"ip":{"addr":"104.19.238.248","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bee91.top/vodplay/jbd-275-1-1","date":"2025-12-21T09:23:48.706Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bee91.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 31 Oct 2025 05:59:59 GMT","end":"Thu, 29 Jan 2026 06:57:41 GMT"},"fingerprint":{"sha1":"9E:01:4F:2E:AA:DE:59:B7:49:23:AA:2D:C5:8C:B9:57:4B:53:E4:2E","sha256":"21:B8:25:B5:37:A5:0A:B2:F1:C2:92:99:70:95:1B:86:D8:74:BD:B2:1A:E8:D4:67:31:E9:24:49:E9:1F:80:EA"}}},"request":{"raw":"GET /assets/icon/favicon-16x16.png HTTP/1.1\r\nHost: bee91.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bee91.top/vodplay/jbd-275-1-1\r\nCookie: mystyle=white; is_white=1; langType=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 21 Dec 2025 09:23:48 GMT\r\ncontent-type: image/png\r\ncontent-length: 603\r\nserver: cloudflare\r\nlast-modified: Sun, 10 Nov 2024 10:15:36 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"673087c8-25b\"\r\nexpires: Mon, 19 Jan 2026 04:20:23 GMT\r\ncache-control: max-age=2592000\r\naccept-ranges: bytes\r\nage: 104605\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yAdTYSGG055RLltWCRH7MVkiOhjQcCCEhVyUyoLQ%2B8mZa%2F7pNwqs%2B8D6A8LQldJwVQv9sWZD%2FWwSa3LdsOjEKnIB5RTk2%2BOyGQ%3D%3D\"}]}\r\ncf-ray: 9b1652a56a4b783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":603,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced","md5":"791585e1153709298436e9f5b7b65bba","sha1":"2cf6ea790b9d21f1e65f512271c160ba83947063","sha256":"1dac8050b08bed27e31b26f6705de645827c26da7fed6c4823756bb660f6c303","sha512":"d1fcedef6eca6b61cbfbefdcc8356adff712a4fbfff31e49138aaebce0e872acdb2f514ba522d59e90b8fae0b9d099f9f9c5c18ff8687731787185799890a86c","ssdeep":"","tlshash":"f1f0b713055cbdfdc2ade43943727f150d400a8581011dc1712366926f15dec4c4eb10","first_seen":"2024-11-17T04:14:16.44978Z","last_seen":"2026-04-06T08:35:13.95939Z","times_seen":900,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-21","alert":"Sinkholed","trigger":"bee91.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"home.bee91.top/video/18000/18981/18981975.ts","fqdn":"home.bee91.top","domain":"bee91.top","tld":"top"},"ip":{"addr":"104.21.90.76","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://bee91.top/static/player/ckplayer.html","date":"2025-12-21T09:23:49.596Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bee91.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 31 Oct 2025 05:59:59 GMT","end":"Thu, 29 Jan 2026 06:57:41 GMT"},"fingerprint":{"sha1":"9E:01:4F:2E:AA:DE:59:B7:49:23:AA:2D:C5:8C:B9:57:4B:53:E4:2E","sha256":"21:B8:25:B5:37:A5:0A:B2:F1:C2:92:99:70:95:1B:86:D8:74:BD:B2:1A:E8:D4:67:31:E9:24:49:E9:1F:80:EA"}}},"request":{"raw":"GET /video/18000/18981/18981975.ts HTTP/1.1\r\nHost: home.bee91.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://bee91.top\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bee91.top/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 21 Dec 2025 09:23:49 GMT\r\ncontent-type: video/mp2t\r\ncontent-length: 482608\r\nserver: cloudflare\r\nlast-modified: Fri, 21 Mar 2025 20:03:00 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"67ddc5f4-75d30\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Content-Type, Authorization\r\naccess-control-allow-credentials: true\r\naccept-ranges: bytes\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QwTNVO0l7%2FeQyHB29WmEWvDuckslYnaeAn10dubdsHVcwwZXtaEou7iTEsImbhBMqc5x4iVat2SOxbuoPjhOZ%2Fhsiy3WhKx%2BRdpmjw%3D%3D\"}]}\r\ncf-ray: 9b1652aafab9b51e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":482608,"size_decoded":0,"mime_type":"video/mp2t","magic":"data","md5":"6a5bb2f07123ac7ada1706c9018acd79","sha1":"833b1da843c3948d6286c09fc4d160546c519d67","sha256":"4c32839005ff0dbf60bdfe528d57078d5130de66683ca7501feb4bd5c285f2d5","sha512":"8768960c36acc5c36657d30748216c52e586f58c77d7f4471eb614201253b85710edd910505ace33e8a04bcab2fc5999b7bd87ee87fdf27bf4693ae13b42ff80","ssdeep":"6144:BTtY9qku5awm0t3t9aIDf3yr8RwAHPKYm9czfX0c7XkFD1OwALF8haO4hP5eywNq:497QLXdRwAHiYTfEFDdAYWhwc60jjZ","tlshash":"a0a423ae19c854e0a73c08e43c9e67a558f441be76bd9f82353be6c706bc690d54e313","first_seen":"2025-12-21T09:24:26.602531Z","last_seen":"2025-12-21T09:24:26.602531Z","times_seen":1,"resource_available":false,"data":null}},"time_used":67,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":58,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-21","alert":"Sinkholed","trigger":"home.bee91.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bee91.top/static/player/ckplayer/css/images/loading.png","fqdn":"bee91.top","domain":"bee91.top","tld":"top"},"ip":{"addr":"104.19.238.248","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bee91.top/static/player/ckplayer.html","date":"2025-12-21T09:23:48.750Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bee91.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 31 Oct 2025 05:59:59 GMT","end":"Thu, 29 Jan 2026 06:57:41 GMT"},"fingerprint":{"sha1":"9E:01:4F:2E:AA:DE:59:B7:49:23:AA:2D:C5:8C:B9:57:4B:53:E4:2E","sha256":"21:B8:25:B5:37:A5:0A:B2:F1:C2:92:99:70:95:1B:86:D8:74:BD:B2:1A:E8:D4:67:31:E9:24:49:E9:1F:80:EA"}}},"request":{"raw":"GET /static/player/ckplayer/css/images/loading.png HTTP/1.1\r\nHost: bee91.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bee91.top/static/player/ckplayer/css/ckplayer.css\r\nCookie: mystyle=white; is_white=1; langType=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 21 Dec 2025 09:23:48 GMT\r\ncontent-type: image/png\r\nserver: cloudflare\r\nlast-modified: Tue, 11 Oct 2022 00:46:49 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\netag: W/\"6344bcf9-1062\"\r\nexpires: Mon, 19 Jan 2026 04:20:23 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\nage: 104605\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=h6TxekwLo8KYo7E30Fpz%2B%2FoB51fY5N1Kq%2Bxri1dhyRPNsdl%2F%2FY5GRJ%2FI4r7lTShMuzptGSHBjIPuhdvrsHFqeKlE%2B5t9dc35Bg%3D%3D\"}]}\r\ncf-ray: 9b1652a5bafb783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4194,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 128 x 128, 8-bit/color RGBA, non-interlaced","md5":"acdc185c20160546e51d5af5574dd80a","sha1":"bdac4da0b6d25bf28270481effc4409772e05b00","sha256":"cdb39427f96ce608ee922d376d72a270bbcb636db21043382642ee47791a0af7","sha512":"ec0296625501379c259de6f63b0e634d513aa65a44e14608c2f05d5aa94cd36b447bdf0ab97a02a955354eb178c19b9a8dc7fd9de78579ca4a7342355bacab0d","ssdeep":"96:6oCT2su8/MbwlMee4I1JzLYkSBoXVzP9DrkiCbWWNsIwLGE:Mebtei/nYpBolBkHb/NDwyE","tlshash":"5d816e51bab8fc16cfa9eec104fba43b93b389d19f947c441dad489d1691270329e18f","first_seen":"2023-11-23T12:38:21Z","last_seen":"2026-04-04T21:56:05.569332Z","times_seen":466,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-21","alert":"Sinkholed","trigger":"bee91.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"assets.bee91.top/upload/video/29719/320x180/1.jpg","fqdn":"assets.bee91.top","domain":"bee91.top","tld":"top"},"ip":{"addr":"172.67.153.205","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bee91.top/vodplay/jbd-275-1-1","date":"2025-12-21T09:23:49.252Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bee91.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 31 Oct 2025 05:59:59 GMT","end":"Thu, 29 Jan 2026 06:57:41 GMT"},"fingerprint":{"sha1":"9E:01:4F:2E:AA:DE:59:B7:49:23:AA:2D:C5:8C:B9:57:4B:53:E4:2E","sha256":"21:B8:25:B5:37:A5:0A:B2:F1:C2:92:99:70:95:1B:86:D8:74:BD:B2:1A:E8:D4:67:31:E9:24:49:E9:1F:80:EA"}}},"request":{"raw":"GET /upload/video/29719/320x180/1.jpg HTTP/1.1\r\nHost: assets.bee91.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bee91.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 21 Dec 2025 09:23:49 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 38379\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Fri, 07 Mar 2025 00:40:06 GMT\r\netag: \"67ca4066-95eb\"\r\naccept-ranges: bytes\r\nexpires: Mon, 22 Dec 2025 09:23:49 GMT\r\ncache-control: max-age=86400\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hmWSb%2FsejDvk64zp73wJZr9vVxnnvdFyMRZF3RWw7ZczMD4Pq4%2FiNvWHsiEe1imwXvUkmOySlCuC5uq8wwAvltfOjIru%2BHIVXFLaEf3F\"}]}\r\ncf-ray: 9b1652a8ce285690-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":38379,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 320x180, components 3","md5":"0db2ee5142aef6481d78d2c7aad3d3bc","sha1":"00d0b59e495a3e9c0d7dc9d1773332130f3736b6","sha256":"68d0b9243422cda42b2cca666dc2ee2050cbf49f0701dcb0daf218a66f9d0181","sha512":"dc201d1cdff7771f180cf7b29adaa15b964adbf011512d3672d74d43397bac00cd5194a7701967b7dbe74d4d4acff52fb619688d072fde716dd086bf27998835","ssdeep":"768:RCeoy0dClbwT93VnSLuNZoCoWm9BAXs0eXvB7SPWxr9rZz9NkISD4:R8y0ibwTCLu7IAG57SuxX9NPSc","tlshash":"950302f3b7690ef6b00db87d0766be2615d1cf7e638541ee2a4155c8087d8a4b01238b","first_seen":"2025-12-21T09:24:26.604888Z","last_seen":"2025-12-22T20:27:22.584652Z","times_seen":2,"resource_available":false,"data":null}},"time_used":163,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":113,"receive":50,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-21","alert":"Sinkholed","trigger":"assets.bee91.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bee91.top/static/player/ckplayer/css/images/play.png","fqdn":"bee91.top","domain":"bee91.top","tld":"top"},"ip":{"addr":"104.19.238.248","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bee91.top/static/player/ckplayer.html","date":"2025-12-21T09:23:49.365Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bee91.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 31 Oct 2025 05:59:59 GMT","end":"Thu, 29 Jan 2026 06:57:41 GMT"},"fingerprint":{"sha1":"9E:01:4F:2E:AA:DE:59:B7:49:23:AA:2D:C5:8C:B9:57:4B:53:E4:2E","sha256":"21:B8:25:B5:37:A5:0A:B2:F1:C2:92:99:70:95:1B:86:D8:74:BD:B2:1A:E8:D4:67:31:E9:24:49:E9:1F:80:EA"}}},"request":{"raw":"GET /static/player/ckplayer/css/images/play.png HTTP/1.1\r\nHost: bee91.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bee91.top/static/player/ckplayer/css/ckplayer.css\r\nCookie: mystyle=white; is_white=1; langType=1; kt_tcookie=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 21 Dec 2025 09:23:49 GMT\r\ncontent-type: image/png\r\nserver: cloudflare\r\nlast-modified: Tue, 11 Oct 2022 00:46:49 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\netag: W/\"6344bcf9-97b\"\r\nexpires: Mon, 19 Jan 2026 04:20:24 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\nage: 104604\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XcaMPG1kzOePGIrzlQfXED9tjJn52a%2BRjQBA9K2zdQxEctynSB3qwNE8s4c32UOcgh819C4LMqR9h7M%2F1Q4CCqfQAJlRz096%2FQ%3D%3D\"}]}\r\ncf-ray: 9b1652a98c0a783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2427,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 128 x 128, 8-bit/color RGBA, non-interlaced","md5":"7840001eb72f05a0d5807123d3ac4662","sha1":"bfda957a651c3bf5e9e2ce3b58b6b1e9ef68707e","sha256":"bbaec8970b6cb45947db44c719243c62c12e0f8a02712900701d332cc59a5c5f","sha512":"717700b1b6af9d8cdc3f8b3d3feb8fca3b73f2c088e46ba084483fdd746a1bc9fb1cef1a2b21d6bc2ac3515e6faf9fbab2c15664034958140b9d000f260dd78a","ssdeep":"","tlshash":"21413d16f0ff739514c8eb8054e57217ed0028a5d074e00ae48fe85bae725f0691e9db","first_seen":"2023-11-28T13:11:11Z","last_seen":"2026-04-04T21:56:05.544439Z","times_seen":385,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-21","alert":"Sinkholed","trigger":"bee91.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}}]}