{"report_id":"c111b4dc-dc4d-4e37-a268-c46aa4d61170","version":6,"status":"done","tags":[],"date":"2024-01-01T15:19:21Z","url":{"schema":"http","addr":"uboy.cc/zRVZ","fqdn":"uboy.cc","domain":"uboy.cc","tld":"cc"},"ip":{"addr":"104.18.96.3","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"http","addr":"ccuwe1229m.vvak022c.cn/zRVZ","fqdn":"ccuwe1229m.vvak022c.cn","domain":"vvak022c.cn","tld":"cn"},"title":"U蓝"},"submit":{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":""},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-10-26T05:43:00Z","useragent":"Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0","referer":"","cookies":null,"exit_node":"default"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":null},"summary":[{"fqdn":"u.cccyttt.xyz","ip":{"addr":"154.91.86.5","port":80,"asn":0,"as":"","country":"Hong Kong","country_code":"HK"},"domain_registered":"2023-09-01","domain_rank":0,"first_seen":"2023-11-24 09:48:50","last_seen":"2023-11-24 09:48:51","alert_count":0,"request_count":7,"received_data":1282110,"sent_data":3062,"comment":"","tags":null,"fingerprints":null},{"fqdn":"ccuwe1229m.vvak022c.cn","ip":{"addr":"156.251.51.39","port":0,"asn":399077,"as":"TERAEXCH","country":"Seychelles","country_code":"SC"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":8,"received_data":172093,"sent_data":2965,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":[{"sensor_name":"suricata","title":"","description":"","date":"2024-01-01T15:18:52Z","timestamp":1704122332,"ip_dst":{"addr":"Internal IP","port":53,"asn":0,"as":"","country":"","country_code":"zz"},"ip_src":{"addr":"Client IP","port":40406,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"medium","alert":"ET DNS Query for .cc TLD","source":"{\"timestamp\":\"2024-01-01T15:18:52.011875+0000\",\"flow_id\":136016645860963,\"in_iface\":\"lxdbr0\",\"event_type\":\"alert\",\"src_ip\":\"10.70.215.22\",\"src_port\":40406,\"dest_ip\":\"10.70.215.1\",\"dest_port\":53,\"proto\":\"UDP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2027758,\"rev\":5,\"signature\":\"ET DNS Query for .cc TLD\",\"category\":\"Potentially Bad Traffic\",\"severity\":2,\"metadata\":{\"affected_product\":[\"Any\"],\"attack_target\":[\"Client_Endpoint\"],\"created_at\":[\"2019_07_26\"],\"deployment\":[\"Perimeter\"],\"former_category\":[\"DNS\"],\"signature_severity\":[\"Minor\"],\"updated_at\":[\"2020_09_17\"]}},\"dns\":{\"query\":[{\"type\":\"query\",\"id\":19,\"rrname\":\"uboy.cc\",\"rrtype\":\"A\",\"tx_id\":0}]},\"app_proto\":\"dns\",\"flow\":{\"pkts_toserver\":1,\"pkts_toclient\":0,\"bytes_toserver\":78,\"bytes_toclient\":0,\"start\":\"2024-01-01T15:18:52.011875+0000\"}}"},{"sensor_name":"suricata","title":"","description":"","date":"2024-01-01T15:18:52Z","timestamp":1704122332,"ip_dst":{"addr":"Internal IP","port":53,"asn":0,"as":"","country":"","country_code":"zz"},"ip_src":{"addr":"Client IP","port":47890,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"medium","alert":"ET DNS Query for .cc TLD","source":"{\"timestamp\":\"2024-01-01T15:18:52.012019+0000\",\"flow_id\":414369181347571,\"in_iface\":\"lxdbr0\",\"event_type\":\"alert\",\"src_ip\":\"10.70.215.22\",\"src_port\":47890,\"dest_ip\":\"10.70.215.1\",\"dest_port\":53,\"proto\":\"UDP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2027758,\"rev\":5,\"signature\":\"ET DNS Query for .cc TLD\",\"category\":\"Potentially Bad Traffic\",\"severity\":2,\"metadata\":{\"affected_product\":[\"Any\"],\"attack_target\":[\"Client_Endpoint\"],\"created_at\":[\"2019_07_26\"],\"deployment\":[\"Perimeter\"],\"former_category\":[\"DNS\"],\"signature_severity\":[\"Minor\"],\"updated_at\":[\"2020_09_17\"]}},\"dns\":{\"query\":[{\"type\":\"query\",\"id\":27359,\"rrname\":\"uboy.cc\",\"rrtype\":\"AAAA\",\"tx_id\":0}]},\"app_proto\":\"dns\",\"flow\":{\"pkts_toserver\":1,\"pkts_toclient\":0,\"bytes_toserver\":78,\"bytes_toclient\":0,\"start\":\"2024-01-01T15:18:52.012019+0000\"}}"}]}],"analyzer":[{"sensor_name":"infosec_yara","type":"yara","description":"Public InfoSec YARA rules","link":"","alerts":null},{"sensor_name":"openphish","type":"url","description":"OpenPhish","link":"","alerts":null},{"sensor_name":"phishtank","type":"url","description":"PhishTank","link":"","alerts":null},{"sensor_name":"mnemonic_dns","type":"domain","description":"mnemonic secure dns","link":"","alerts":null},{"sensor_name":"quad9","type":"domain","description":"Quad9 DNS","link":"","alerts":null},{"sensor_name":"threatfox","type":"url","description":"ThreatFox","link":"","alerts":null}],"urlquery":null},"javascript":{"script":[{"url":{"schema":"http","addr":"ccuwe1229m.vvak022c.cn/zRVZ","fqdn":"ccuwe1229m.vvak022c.cn","domain":"vvak022c.cn","tld":"cn"},"ip":{"addr":"156.251.51.39","port":80,"asn":399077,"as":"TERAEXCH","country":"Seychelles","country_code":"SC"},"introduction_type":"scriptElement","is_inline":true,"md5":"e0f4ed28cc97b9e89229c36c7025a616","sha1":"46139a68ef64b3e7949f74374e49e756c72b48b3","sha256":"dfbc21e4e035e91a9fd4a1e813d4144d11ddb8ecc09e4b6da9dce28973a1c94b","sha512":"7bd8ed9a7e334da2ae1aeccba31aae760ea49dff3c640215c0288fd313c5d416da8c138de37f26611f9092989a66c5fdbea1330bc697d273ca47df6437b0b3d3","ssdeep":"","tlshash":"c74174d936d4f578828354e5103f306ab17a2d76053ee4e0934ae8f5bc38c584016fa6","size":2364,"data":"","first_seen":"2024-01-01T16:19:30Z","last_seen":"2025-02-16T01:38:39.977753Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"ccuwe1229m.vvak022c.cn/static/js/2.e07579a8.chunk.js","fqdn":"ccuwe1229m.vvak022c.cn","domain":"vvak022c.cn","tld":"cn"},"ip":{"addr":"156.251.51.108","port":80,"asn":399077,"as":"TERAEXCH","country":"Seychelles","country_code":"SC"},"introduction_type":"scriptElement","is_inline":false,"md5":"2d6cd3ecb48885b44da50599225c9e71","sha1":"7dc8795d045ad1ecbf5ce8535afed727b313d027","sha256":"d58ed2f93f6c32fda98fb95d8380aa55957ea98073170dd8088e12c682610111","sha512":"f1d751e6c17ab5fdac48556de77a3aa231b0d554ebef64443804b92d66da3e11d649a227023b31e165e88c66287b9f0050ffca206d83320fb9ece99ef0de917e","ssdeep":"6144:xdxKpZTXF3ft17CKgs96T5Lqo7A5ad7UuTgjrCA2N6503H7:nxICawfToe6503b","tlshash":"02843ac97695f06217f321b2507f100bb37a692a280d8450f221ecdabdb955ea13bf7d","size":386823,"data":"","first_seen":"2024-08-20T14:23:40.689279Z","last_seen":"2024-08-20T14:23:40.689279Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"ccuwe1229m.vvak022c.cn/static/js/main.ae1e851b.chunk.js","fqdn":"ccuwe1229m.vvak022c.cn","domain":"vvak022c.cn","tld":"cn"},"ip":{"addr":"156.251.51.108","port":80,"asn":399077,"as":"TERAEXCH","country":"Seychelles","country_code":"SC"},"introduction_type":"scriptElement","is_inline":false,"md5":"4b11dd3821417756385857a7e176537e","sha1":"f516dc70307c2e524aa8d377e737e2113fb72e1f","sha256":"46d7b6403a175741ab711461a1d0b8378b86aacebd45f01f7af0ebea6a3936db","sha512":"25893ec17e1e7b0ad50f4de13fc5aedafa8dfec938f6df7a3274d6b0aad65d858faec30608a0390f24c5c67b439127218c5969349ee1d536dad6aa8c9e285e1a","ssdeep":"384:1tiwMu2Ep7LLQqI+SK9EU8YSkY3XlfevIU0HFC:/iwThp7Aqh9EUaXlfevr","tlshash":"fe82e86cf046f9de666b1ad1e42f102df9272941f68ee820e0b1f5c4751854ca713fab","size":17863,"data":"","first_seen":"2024-08-20T14:23:40.691253Z","last_seen":"2024-08-20T14:23:40.691253Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"http","addr":"ccuwe1229m.vvak022c.cn/","fqdn":"ccuwe1229m.vvak022c.cn","domain":"vvak022c.cn","tld":"cn"},"ip":{"addr":"156.251.51.39","port":0,"asn":399077,"as":"TERAEXCH","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2024-01-01T15:18:59.143929473Z","timestamp":1704122339143,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET / HTTP/1.1\r\nHost: ccuwe1229m.vvak022c.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: NgxFence\r\nDate: Mon, 01 Jan 2024 15:19:00 GMT\r\nContent-Type: text/html\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Thu, 21 Dec 2023 10:23:04 GMT\r\nETag: W/\"65841208-b72\"\r\nX-Cache: DYNAMIC\r\nContent-Encoding: gzip\r\n","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":1478,"size_decoded":2930,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (2928), with no line terminators","md5":"4273b2a0ed0d4f06955b3a639219060a","sha1":"964855375095f4f99bebc51ee0212f53e1d581ca","sha256":"c78541803bf60ce03b0a6e846bbcf59f6f1c76a9b8915b0b1ebe9bbb9f9da8ff","sha512":"7987d89fe8f4b3d45c0736bb9c6421e9d0bf24cc7dc1459f2bf26826136c5a7acd6b9d0e8336d813a073b2fe37b218c29d38b336f66ef97e1ff3a62273c90249","ssdeep":"","tlshash":"b051d9d43a90f86c835158e8183f7029f179293a453af8d09359d8f5ad78d49851bfa4","first_seen":"2024-08-20T14:23:40.680535Z","last_seen":"2024-08-20T14:23:40.680535Z","times_seen":1,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"ccuwe1229m.vvak022c.cn/zRVZ","fqdn":"ccuwe1229m.vvak022c.cn","domain":"vvak022c.cn","tld":"cn"},"ip":{"addr":"156.251.51.39","port":80,"asn":399077,"as":"TERAEXCH","country":"Seychelles","country_code":"SC"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2024-01-01T15:18:59.262Z","timestamp":1704122339262,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /zRVZ HTTP/1.1\r\nHost: ccuwe1229m.vvak022c.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: NgxFence\r\nDate: Mon, 01 Jan 2024 15:19:03 GMT\r\nContent-Type: text/html\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Thu, 21 Dec 2023 10:23:04 GMT\r\nETag: W/\"65841208-b72\"\r\nX-Cache: DYNAMIC\r\nContent-Encoding: gzip\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1478,"size_decoded":2930,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (2928), with no line terminators","md5":"4273b2a0ed0d4f06955b3a639219060a","sha1":"964855375095f4f99bebc51ee0212f53e1d581ca","sha256":"c78541803bf60ce03b0a6e846bbcf59f6f1c76a9b8915b0b1ebe9bbb9f9da8ff","sha512":"7987d89fe8f4b3d45c0736bb9c6421e9d0bf24cc7dc1459f2bf26826136c5a7acd6b9d0e8336d813a073b2fe37b218c29d38b336f66ef97e1ff3a62273c90249","ssdeep":"","tlshash":"b051d9d43a90f86c835158e8183f7029f179293a453af8d09359d8f5ad78d49851bfa4","first_seen":"2024-08-20T14:23:40.680535Z","last_seen":"2024-08-20T14:23:40.680535Z","times_seen":1,"resource_available":false,"data":null}},"time_used":3275,"timings":{"blocked":616,"dns":352,"connect":263,"send":0,"wait":2043,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"ccuwe1229m.vvak022c.cn/static/css/main.5f79a58a.chunk.css","fqdn":"ccuwe1229m.vvak022c.cn","domain":"vvak022c.cn","tld":"cn"},"ip":{"addr":"156.251.51.39","port":80,"asn":399077,"as":"TERAEXCH","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"http://ccuwe1229m.vvak022c.cn/zRVZ","date":"2024-01-01T15:19:02.047Z","timestamp":1704122342047,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /static/css/main.5f79a58a.chunk.css HTTP/1.1\r\nHost: ccuwe1229m.vvak022c.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://ccuwe1229m.vvak022c.cn/zRVZ\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: NgxFence\r\nDate: Mon, 01 Jan 2024 15:19:04 GMT\r\nContent-Type: text/css\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Thu, 21 Dec 2023 10:23:04 GMT\r\nETag: W/\"65841208-3b83\"\r\nX-Cache: HIT\r\nContent-Encoding: gzip\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":4230,"size_decoded":15235,"mime_type":"text/css","magic":"ASCII text, with very long lines (15183)","md5":"c4b41b4417c82fb7638ed5fa1e103c56","sha1":"5a664b716a786775d20f76ec68de18d9df7b7112","sha256":"0a5a3c1df39073a9bc4db9b2ee39a2d612bb025b1c5a18e9583a2bd1ba1af49a","sha512":"f42fe9db21e72cce7556414cb5667adb87c3bad710f97a9a38bcd869fd1ef0270c53d0f3678b20439ac7dac36eafbc2179db27c50efdeec193601601f5c35236","ssdeep":"96:2qy8msBZ5eQxXETJoB/b2E5LuXqm4Yx/akUg5z81k/cm2lglFewgEtaaKSgVZfXs:2umGHe8ET62VXP4TVxgqsZS6hb","tlshash":"d36243368651212dd16f8616b5cdbc9c8e28c442f263ceede266317bcfc62d7326534a","first_seen":"2024-08-20T14:23:40.687986Z","last_seen":"2024-08-20T14:23:40.687986Z","times_seen":1,"resource_available":false,"data":null}},"time_used":261,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":260,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"ccuwe1229m.vvak022c.cn/static/js/2.e07579a8.chunk.js","fqdn":"ccuwe1229m.vvak022c.cn","domain":"vvak022c.cn","tld":"cn"},"ip":{"addr":"156.251.51.108","port":80,"asn":399077,"as":"TERAEXCH","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://ccuwe1229m.vvak022c.cn/zRVZ","date":"2024-01-01T15:19:02.049Z","timestamp":1704122342049,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /static/js/2.e07579a8.chunk.js HTTP/1.1\r\nHost: ccuwe1229m.vvak022c.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://ccuwe1229m.vvak022c.cn/zRVZ\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: NgxFence\r\nDate: Mon, 01 Jan 2024 15:19:06 GMT\r\nContent-Type: application/javascript\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Thu, 21 Dec 2023 10:23:04 GMT\r\nETag: W/\"65841208-5e707\"\r\nX-Cache: HIT\r\nContent-Encoding: gzip\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":150123,"size_decoded":386823,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (65462)","md5":"2d6cd3ecb48885b44da50599225c9e71","sha1":"7dc8795d045ad1ecbf5ce8535afed727b313d027","sha256":"d58ed2f93f6c32fda98fb95d8380aa55957ea98073170dd8088e12c682610111","sha512":"f1d751e6c17ab5fdac48556de77a3aa231b0d554ebef64443804b92d66da3e11d649a227023b31e165e88c66287b9f0050ffca206d83320fb9ece99ef0de917e","ssdeep":"6144:xdxKpZTXF3ft17CKgs96T5Lqo7A5ad7UuTgjrCA2N6503H7:nxICawfToe6503b","tlshash":"02843ac97695f06217f321b2507f100bb37a692a280d8450f221ecdabdb955ea13bf7d","first_seen":"2024-08-20T14:23:40.689279Z","last_seen":"2024-08-20T14:23:40.689279Z","times_seen":1,"resource_available":true,"data":null}},"time_used":4047,"timings":{"blocked":372,"dns":1,"connect":387,"send":0,"wait":2351,"receive":936,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"ccuwe1229m.vvak022c.cn/static/css/2.6c9e3c5b.chunk.css","fqdn":"ccuwe1229m.vvak022c.cn","domain":"vvak022c.cn","tld":"cn"},"ip":{"addr":"156.251.51.108","port":80,"asn":399077,"as":"TERAEXCH","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"http://ccuwe1229m.vvak022c.cn/zRVZ","date":"2024-01-01T15:19:02.034Z","timestamp":1704122342034,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /static/css/2.6c9e3c5b.chunk.css HTTP/1.1\r\nHost: ccuwe1229m.vvak022c.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://ccuwe1229m.vvak022c.cn/zRVZ\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: NgxFence\r\nDate: Mon, 01 Jan 2024 15:19:06 GMT\r\nContent-Type: text/css\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Thu, 21 Dec 2023 10:23:04 GMT\r\nETag: W/\"65841208-333d\"\r\nX-Cache: HIT\r\nContent-Encoding: gzip\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":3103,"size_decoded":13117,"mime_type":"text/css","magic":"ASCII text, with very long lines (10121)","md5":"a4d935cad4d0dedbb6d75cfd65095142","sha1":"23b932617766ef9aa46fc4666cb9d3ef9e494ac7","sha256":"f1db562049fba318bb165ce05493a9aefb9a2dc73864771c8f5f308735d73185","sha512":"016eaa4d53dd867e14607ceae5b5a3c34a943bfdc1dbf2603f9eefc9340463b95ad4d9a96b64ead7fe8f7ba4be5569c53f0457c328b424a981015d2bcf48d451","ssdeep":"96:I+VlKnPZwFXO3YlgsU+eHeQEezHXnigC3e2dLOx07OX5ZsZC6hjhLXvG0J:I+zKP4XhvsHbnigFx4hJ","tlshash":"084287eb88c11749a5234e334bcc4a54db79c9a3a5725cedb2913c4fcb42b98235b35b","first_seen":"2024-01-01T16:19:30Z","last_seen":"2025-06-11T10:32:08.643013Z","times_seen":15,"resource_available":false,"data":null}},"time_used":3801,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3164,"receive":637,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"ccuwe1229m.vvak022c.cn/favicon.ico","fqdn":"ccuwe1229m.vvak022c.cn","domain":"vvak022c.cn","tld":"cn"},"ip":{"addr":"156.251.51.108","port":80,"asn":399077,"as":"TERAEXCH","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://ccuwe1229m.vvak022c.cn/zRVZ","date":"2024-01-01T15:19:04.695Z","timestamp":1704122344695,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: ccuwe1229m.vvak022c.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://ccuwe1229m.vvak022c.cn/zRVZ\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: NgxFence\r\nDate: Mon, 01 Jan 2024 15:19:08 GMT\r\nContent-Type: text/html\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Thu, 21 Dec 2023 10:23:04 GMT\r\nETag: W/\"65841208-b72\"\r\nX-Cache: HIT\r\nContent-Encoding: gzip\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1478,"size_decoded":2930,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (2928), with no line terminators","md5":"4273b2a0ed0d4f06955b3a639219060a","sha1":"964855375095f4f99bebc51ee0212f53e1d581ca","sha256":"c78541803bf60ce03b0a6e846bbcf59f6f1c76a9b8915b0b1ebe9bbb9f9da8ff","sha512":"7987d89fe8f4b3d45c0736bb9c6421e9d0bf24cc7dc1459f2bf26826136c5a7acd6b9d0e8336d813a073b2fe37b218c29d38b336f66ef97e1ff3a62273c90249","ssdeep":"","tlshash":"b051d9d43a90f86c835158e8183f7029f179293a453af8d09359d8f5ad78d49851bfa4","first_seen":"2024-08-20T14:23:40.680535Z","last_seen":"2024-08-20T14:23:40.680535Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1534,"timings":{"blocked":1134,"dns":0,"connect":0,"send":0,"wait":400,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"ccuwe1229m.vvak022c.cn/static/js/main.ae1e851b.chunk.js","fqdn":"ccuwe1229m.vvak022c.cn","domain":"vvak022c.cn","tld":"cn"},"ip":{"addr":"156.251.51.108","port":80,"asn":399077,"as":"TERAEXCH","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://ccuwe1229m.vvak022c.cn/zRVZ","date":"2024-01-01T15:19:02.050Z","timestamp":1704122342050,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /static/js/main.ae1e851b.chunk.js HTTP/1.1\r\nHost: ccuwe1229m.vvak022c.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://ccuwe1229m.vvak022c.cn/zRVZ\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: NgxFence\r\nDate: Mon, 01 Jan 2024 15:19:07 GMT\r\nContent-Type: application/javascript\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Thu, 21 Dec 2023 10:23:04 GMT\r\nETag: W/\"65841208-45c7\"\r\nX-Cache: HIT\r\nContent-Encoding: gzip\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":7650,"size_decoded":17863,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (17863), with no line terminators","md5":"4b11dd3821417756385857a7e176537e","sha1":"f516dc70307c2e524aa8d377e737e2113fb72e1f","sha256":"46d7b6403a175741ab711461a1d0b8378b86aacebd45f01f7af0ebea6a3936db","sha512":"25893ec17e1e7b0ad50f4de13fc5aedafa8dfec938f6df7a3274d6b0aad65d858faec30608a0390f24c5c67b439127218c5969349ee1d536dad6aa8c9e285e1a","ssdeep":"384:1tiwMu2Ep7LLQqI+SK9EU8YSkY3XlfevIU0HFC:/iwThp7Aqh9EUaXlfevr","tlshash":"fe82e86cf046f9de666b1ad1e42f102df9272941f68ee820e0b1f5c4751854ca713fab","first_seen":"2024-08-20T14:23:40.691253Z","last_seen":"2024-08-20T14:23:40.691253Z","times_seen":1,"resource_available":true,"data":null}},"time_used":9632,"timings":{"blocked":449,"dns":0,"connect":466,"send":0,"wait":2856,"receive":5861,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"ccuwe1229m.vvak022c.cn/pc/web/info","fqdn":"ccuwe1229m.vvak022c.cn","domain":"vvak022c.cn","tld":"cn"},"ip":{"addr":"156.251.51.108","port":80,"asn":399077,"as":"TERAEXCH","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"http://ccuwe1229m.vvak022c.cn/zRVZ","date":"2024-01-01T15:19:11.287Z","timestamp":1704122351287,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /pc/web/info HTTP/1.1\r\nHost: ccuwe1229m.vvak022c.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nVCODE: zRVZ\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://ccuwe1229m.vvak022c.cn/zRVZ\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 \r\nServer: NgxFence\r\nDate: Mon, 01 Jan 2024 15:19:13 GMT\r\nContent-Type: application/json\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers, accept-encoding\r\nX-Cache: DYNAMIC\r\nContent-Encoding: gzip\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":427,"size_decoded":492,"mime_type":"application/json","magic":"JSON data","md5":"b86371b80772104e6d12cf5ecc1e89f9","sha1":"2cff0334b48833386f6ac5caad60c0c496dc5f2f","sha256":"798d1392e1322886b8493c66fa80a68f8ef3250b64293dd9a838d6b67ad29bed","sha512":"b1350f65227cfe883b6fb08c2bc117b1c609ff901b25a5733bfcd04ce96d92c8abcdfaae4982003d06f1a6e44b50594118d4939ae7ed7ba287d26fa7438e938c","ssdeep":"","tlshash":"b6f0541afd24dcd228716b3a597f0440044d5e3e98d94e82ece7b124c435653b02d82a","first_seen":"2024-08-20T14:23:40.692264Z","last_seen":"2024-08-20T14:23:40.692264Z","times_seen":1,"resource_available":false,"data":null}},"time_used":427,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":427,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"u.cccyttt.xyz/web/images/cooperate.png","fqdn":"u.cccyttt.xyz","domain":"cccyttt.xyz","tld":"xyz"},"ip":{"addr":"154.91.86.5","port":80,"asn":0,"as":"","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"http://ccuwe1229m.vvak022c.cn/zRVZ","date":"2024-01-01T15:19:11.738Z","timestamp":1704122351738,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /web/images/cooperate.png HTTP/1.1\r\nHost: u.cccyttt.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nOrigin: http://ccuwe1229m.vvak022c.cn\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://ccuwe1229m.vvak022c.cn/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: openresty\r\nDate: Mon, 01 Jan 2024 15:19:14 GMT\r\nContent-Type: image/png\r\nContent-Length: 9032\r\nConnection: keep-alive\r\nAccept-Ranges: bytes\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Expose-Headers: X-Log, X-Reqid\r\nCache-Control: public, max-age=31536000\r\nContent-Disposition: inline; filename=\"cooperate.png\"; filename*=utf-8''cooperate.png\r\nContent-Md5: rJ0pTkgpmPW+mFx0hqp0VA==\r\nContent-Transfer-Encoding: binary\r\nETag: \"FgUH91wYaKW4LCrIkSeYs4UDaclW\"\r\nLast-Modified: Fri, 15 Sep 2023 04:06:17 GMT\r\nVary: Origin\r\nX-Reqid: S1kAADivaLpAQqYX\r\nX-Svr: IO\r\nX-Qiniu-Zone: 1\r\nX-Log: X-Log\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":9032,"size_decoded":9032,"mime_type":"image/png","magic":"data","md5":"ac9d294e482998f5be985c7486aa7454","sha1":"0507f75c1868a5b82c2ac8912798b3850369c956","sha256":"df2d38104f6c085e07261496b77783d5630fd460c794681fcc7419b9d4389644","sha512":"f3c64d2749307a8e491327c3aa76bdf261354ec410c3109cc929cc507409d8a9a25519ed9b851f6c72decb2ea951f1724013eb8492ecd70fbe02b7c70234802a","ssdeep":"192:g4c9oZ3m5Bz1wDfDiCxeZubd8kZynD6RpJ0gp+jWWIhphUt+3XlRbB:pc9oZ3mP5Yuae4bd3c2RpO6FWSYt+3XF","tlshash":"1a12bfec8df63b363efb45f340205204bd1e7b136a488a9062b0a52ab0753c1619e71f","first_seen":"2024-08-20T14:23:40.693307Z","last_seen":"2025-05-17T09:06:32.974173Z","times_seen":4,"resource_available":false,"data":null}},"time_used":1912,"timings":{"blocked":757,"dns":371,"connect":388,"send":0,"wait":395,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"u.cccyttt.xyz/web/images/android-btn-web.png","fqdn":"u.cccyttt.xyz","domain":"cccyttt.xyz","tld":"xyz"},"ip":{"addr":"154.91.86.5","port":80,"asn":0,"as":"","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"http://ccuwe1229m.vvak022c.cn/zRVZ","date":"2024-01-01T15:19:11.747Z","timestamp":1704122351747,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"OPTIONS /web/images/android-btn-web.png HTTP/1.1\r\nHost: u.cccyttt.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: vcode\r\nReferer: http://ccuwe1229m.vvak022c.cn/\r\nOrigin: http://ccuwe1229m.vvak022c.cn\r\nDNT: 1\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: openresty\r\nDate: Mon, 01 Jan 2024 15:19:14 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\nAccess-Control-Allow-Headers: Vcode\r\nAccess-Control-Allow-Methods: GET\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Max-Age: 2592000\r\nVary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nX-Reqid: A38AAIkELLtAQqYX\r\nX-Svr: IO\r\nX-Qiniu-Zone: 1\r\nX-Log: X-Log\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"image/png","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-24T17:07:59.023654Z","times_seen":15665480,"resource_available":true,"data":null}},"time_used":1928,"timings":{"blocked":760,"dns":363,"connect":399,"send":0,"wait":404,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"u.cccyttt.xyz/web/images/ios-btn-web.png","fqdn":"u.cccyttt.xyz","domain":"cccyttt.xyz","tld":"xyz"},"ip":{"addr":"154.91.86.5","port":80,"asn":0,"as":"","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"http://ccuwe1229m.vvak022c.cn/zRVZ","date":"2024-01-01T15:19:11.748Z","timestamp":1704122351748,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"OPTIONS /web/images/ios-btn-web.png HTTP/1.1\r\nHost: u.cccyttt.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: vcode\r\nReferer: http://ccuwe1229m.vvak022c.cn/\r\nOrigin: http://ccuwe1229m.vvak022c.cn\r\nDNT: 1\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: openresty\r\nDate: Mon, 01 Jan 2024 15:19:14 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\nAccess-Control-Allow-Headers: Vcode\r\nAccess-Control-Allow-Methods: GET\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Max-Age: 2592000\r\nVary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nX-Reqid: S1kAAHDx-rtAQqYX\r\nX-Svr: IO\r\nX-Qiniu-Zone: 1\r\nX-Log: X-Log\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"image/png","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-24T17:07:59.023654Z","times_seen":15665480,"resource_available":true,"data":null}},"time_used":1948,"timings":{"blocked":767,"dns":369,"connect":408,"send":0,"wait":404,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"u.cccyttt.xyz/web/images/webText.png","fqdn":"u.cccyttt.xyz","domain":"cccyttt.xyz","tld":"xyz"},"ip":{"addr":"154.91.86.5","port":80,"asn":0,"as":"","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"http://ccuwe1229m.vvak022c.cn/zRVZ","date":"2024-01-01T15:19:11.736Z","timestamp":1704122351736,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /web/images/webText.png HTTP/1.1\r\nHost: u.cccyttt.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nOrigin: http://ccuwe1229m.vvak022c.cn\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://ccuwe1229m.vvak022c.cn/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: openresty\r\nDate: Mon, 01 Jan 2024 15:19:13 GMT\r\nContent-Type: image/png\r\nContent-Length: 49455\r\nConnection: keep-alive\r\nAccept-Ranges: bytes\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Expose-Headers: X-Log, X-Reqid\r\nCache-Control: public, max-age=31536000\r\nContent-Disposition: inline; filename=\"webText.png\"; filename*=utf-8''webText.png\r\nContent-Md5: A+CQX3MpSrJ+O3GuigzX5A==\r\nContent-Transfer-Encoding: binary\r\nETag: \"FiTEI2govKgG27H_E0THEzEcZ31q\"\r\nLast-Modified: Fri, 15 Sep 2023 04:06:17 GMT\r\nVary: Origin\r\nX-Reqid: A38AAEbIpKpAQqYX\r\nX-Svr: IO\r\nX-Qiniu-Zone: 1\r\nX-Log: X-Log\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":49455,"size_decoded":49455,"mime_type":"image/png","magic":"data","md5":"03e0905f73294ab27e3b71ae8a0cd7e4","sha1":"24c4236828bca806dbb1ff1344c713311c677d6a","sha256":"20c3af5486c0f1cebcf321299cc8d98bcac22976dcc369899cc08222be97fcfd","sha512":"9f9437e024019d4902f5df7d24f5474849dfbf789338c7daf263412e53e0c847a61bdd4b3f2ad5648e9b31f1fb139ff412fe6b2868962e4a792035bce9ac2b09","ssdeep":"768:xSypbX4huAYzQwiMv9axXI22Vi36+KLy9v8WiC5YSd0W/rMmbXfimwosbZ+Wf7ji:xSyehpYcwiENVu6+KLgUwUmbG+Wf2x","tlshash":"d423f009b6a280d9b9d224a2691987c8c1c47f943fcac9cf1683f7c51b731e1cb4b629","first_seen":"2024-08-20T14:23:40.695362Z","last_seen":"2025-05-17T09:06:32.971284Z","times_seen":3,"resource_available":false,"data":null}},"time_used":2045,"timings":{"blocked":631,"dns":372,"connect":260,"send":0,"wait":262,"receive":520,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"u.cccyttt.xyz/web/images/android-btn-web.png","fqdn":"u.cccyttt.xyz","domain":"cccyttt.xyz","tld":"xyz"},"ip":{"addr":"154.91.86.5","port":80,"asn":0,"as":"","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"http://ccuwe1229m.vvak022c.cn/zRVZ","date":"2024-01-01T15:19:11.747Z","timestamp":1704122351747,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /web/images/android-btn-web.png HTTP/1.1\r\nHost: u.cccyttt.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nVCODE: zRVZ\r\nOrigin: http://ccuwe1229m.vvak022c.cn\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://ccuwe1229m.vvak022c.cn/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: openresty\r\nDate: Mon, 01 Jan 2024 15:19:14 GMT\r\nContent-Type: image/png\r\nContent-Length: 4031\r\nConnection: keep-alive\r\nAccept-Ranges: bytes\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Expose-Headers: X-Log, X-Reqid\r\nCache-Control: public, max-age=31536000\r\nContent-Disposition: inline; filename=\"android-btn-web.png\"; filename*=utf-8''android-btn-web.png\r\nContent-Md5: v+9L13vylggzdh1nvxue1A==\r\nContent-Transfer-Encoding: binary\r\nETag: \"Fl5NSa-CyamqbFk1WmdgVl9ZIb2x\"\r\nLast-Modified: Fri, 15 Sep 2023 04:06:17 GMT\r\nVary: Origin\r\nX-Reqid: 8H8AAG8JAdRAQqYX\r\nX-Svr: IO\r\nX-Qiniu-Zone: 1\r\nX-Log: X-Log\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":4031,"size_decoded":4031,"mime_type":"image/png","magic":"data","md5":"bfef4bd77bf2960833761d67bf1b9ed4","sha1":"5e4d49af82c9a9aa6c59355a6760565f5921bdb1","sha256":"4f8c1b1b2ca9b63ae67c92dcac951362a35edbcfbd18d8a80fde3d289cccdf70","sha512":"d13f7d612d497d71f1b8ecc3a12dcec3353962dbc3321d81ea27f0f3e5e4e778b8a7aa248b9c2956c4079b18da749b648156a55e7acd71ec1305af8dfe5b38ab","ssdeep":"","tlshash":"fd818e88685ce01d91c5cb3f72b0594565c73c3fb8482e1014ac380dab795913e55ecf","first_seen":"2024-08-20T14:23:40.696358Z","last_seen":"2025-05-17T09:06:32.962284Z","times_seen":4,"resource_available":false,"data":null}},"time_used":1928,"timings":{"blocked":760,"dns":363,"connect":399,"send":0,"wait":404,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"u.cccyttt.xyz/web/images/ios-btn-web.png","fqdn":"u.cccyttt.xyz","domain":"cccyttt.xyz","tld":"xyz"},"ip":{"addr":"154.91.86.5","port":80,"asn":0,"as":"","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"http://ccuwe1229m.vvak022c.cn/zRVZ","date":"2024-01-01T15:19:11.748Z","timestamp":1704122351748,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /web/images/ios-btn-web.png HTTP/1.1\r\nHost: u.cccyttt.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nVCODE: zRVZ\r\nOrigin: http://ccuwe1229m.vvak022c.cn\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://ccuwe1229m.vvak022c.cn/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: openresty\r\nDate: Mon, 01 Jan 2024 15:19:14 GMT\r\nContent-Type: image/png\r\nContent-Length: 3651\r\nConnection: keep-alive\r\nAccept-Ranges: bytes\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Expose-Headers: X-Log, X-Reqid\r\nCache-Control: public, max-age=31536000\r\nContent-Disposition: inline; filename=\"ios-btn-web.png\"; filename*=utf-8''ios-btn-web.png\r\nContent-Md5: LnVZKdxVeCv88kSKaE+DQA==\r\nContent-Transfer-Encoding: binary\r\nETag: \"FqQonIyWGrU7Mt2VvSVPgg2RRT6-\"\r\nLast-Modified: Fri, 15 Sep 2023 04:06:17 GMT\r\nVary: Origin\r\nX-Reqid: S1kAAISEWdNAQqYX\r\nX-Svr: IO\r\nX-Qiniu-Zone: 1\r\nX-Log: X-Log\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":3651,"size_decoded":3651,"mime_type":"image/png","magic":"data","md5":"2e755929dc55782bfcf2448a684f8340","sha1":"a4289c8c961ab53b32dd95bd254f820d91453ebe","sha256":"e0a30914c06e14201ce0e82bcdce38c00d0a58359fefc7b172c6e7f50e397d6c","sha512":"d3ce18292cc36ea31e537c4b638b1c44497d91da1c8f62022a57320f2ac4702de7f4a8a083828a602d91e54874643277fd99a9139220a5a5bb1ba272f98f84c1","ssdeep":"","tlshash":"97714d1dad54141e60bed614945bbdb2c0d25e4c2028b84fe69dfc490e77052b4b0676","first_seen":"2024-08-20T14:23:40.697238Z","last_seen":"2025-05-17T09:06:32.955598Z","times_seen":4,"resource_available":false,"data":null}},"time_used":1948,"timings":{"blocked":767,"dns":369,"connect":408,"send":0,"wait":404,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"u.cccyttt.xyz/web/images/web-img.png","fqdn":"u.cccyttt.xyz","domain":"cccyttt.xyz","tld":"xyz"},"ip":{"addr":"154.91.86.5","port":80,"asn":0,"as":"","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"http://ccuwe1229m.vvak022c.cn/zRVZ","date":"2024-01-01T15:19:11.733Z","timestamp":1704122351733,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /web/images/web-img.png HTTP/1.1\r\nHost: u.cccyttt.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nOrigin: http://ccuwe1229m.vvak022c.cn\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://ccuwe1229m.vvak022c.cn/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: openresty\r\nDate: Mon, 01 Jan 2024 15:19:13 GMT\r\nContent-Type: image/png\r\nContent-Length: 1212061\r\nConnection: keep-alive\r\nAccept-Ranges: bytes\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Expose-Headers: X-Log, X-Reqid\r\nCache-Control: public, max-age=31536000\r\nContent-Disposition: inline; filename=\"web-img.png\"; filename*=utf-8''web-img.png\r\nContent-Md5: ddXGlXhSe6ZjDERkBqfBrw==\r\nContent-Transfer-Encoding: binary\r\nETag: \"FpagrUTNEAiHoIX0cjb5Nhk2cbC8\"\r\nLast-Modified: Fri, 15 Sep 2023 04:06:17 GMT\r\nVary: Origin\r\nX-Reqid: A38AAFHEf6pAQqYX\r\nX-Svr: IO\r\nX-Qiniu-Zone: 1\r\nX-Log: X-Log\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1212061,"size_decoded":1212061,"mime_type":"image/png","magic":"data","md5":"75d5c69578527ba6630c446406a7c1af","sha1":"96a0ad44cd100887a085f47236f936193671b0bc","sha256":"c68c9edcefceca4663b9152ae6faaee8c7445f6921304e17b3f08835e6a1e66f","sha512":"a59a85d93d3f40b72322015a21b7f268dd595467492c6f286e941fe1866c3c54e8df23592498c9cccb8ce3edc8198a4dadf456ad79a2bdd5e3186640071c81b5","ssdeep":"24576:3zrhAQja67VHQ6WquonN3sWefcWy271VZPdJWx/QbYA6D7Lw:3BfHQ6FnqfZy25l8x6YP70","tlshash":"e6453333456d51263a50ad38eb394c120599bf2a0dd62b2f07ebe1a03f069b5df64b1f","first_seen":"2024-08-20T14:23:40.698091Z","last_seen":"2025-05-17T09:06:32.972552Z","times_seen":2,"resource_available":false,"data":null}},"time_used":3113,"timings":{"blocked":634,"dns":376,"connect":260,"send":0,"wait":264,"receive":1579,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}