{"report_id":"cad701f3-7586-471b-a5ab-586384c979f3","version":6,"status":"done","tags":[],"date":"2026-03-07T06:33:12Z","url":{"schema":"http","addr":"wsu.rqtqsp9.lol/cn/home/web/index.php/vod/play/id/975713/sid/1/nid/1.html","fqdn":"wsu.rqtqsp9.lol","domain":"rqtqsp9.lol","tld":"lol"},"ip":{"addr":"154.17.5.86","port":0,"asn":906,"as":"DMIT","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"wsu.rqtqsp9.lol/cn/home/web/","fqdn":"wsu.rqtqsp9.lol","domain":"rqtqsp9.lol","tld":"lol"},"title":"人妻偷情视频","dom":{"size":130052,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (8824)","md5":"254dc9728cc591e98e0f97863e624e7d","sha1":"8525a397511208f4d240a4cd72c32f7098151d8d","sha256":"de0321619d6101e57a1587dccd6baf05b620ef1244bc83ce00ae8648d7e370ba","sha512":"e351df5f72cc428f84c2a3f22f80417744930b03b811633f055bf325d8e211369bcc1f1c3bdd01dddf79330a3c3bea081464373febf6bc05ecbb1d3c33ee5aab","ssdeep":"768:suthf8r21nKfzuX4PKBzuFlGDQOp6a2BLlGRNXIzx7oey5AU5DLvTgsou:suthf8rYyP2+MDQOWLlGRbx5Xou","tlshash":"71d33015b2e66f2a236e0cdf5da42f7da27b6936d6bb3190d2f707654282cc1930391c","dom_hash":"domhash99324480ed201347ecd7242b636baf4f","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"wsu.rqtqsp9.lol/cn/home/web/index.php/vod/play/id/975713/sid/1/nid/1.html","fqdn":"wsu.rqtqsp9.lol","domain":"rqtqsp9.lol","tld":"lol"},"ip":{"addr":"154.17.5.86","port":0,"asn":906,"as":"DMIT","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-04-11T06:33:12Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":null},"summary":[{"fqdn":"d18wfmxtvthwf6.cloudfront.net","ip":{"addr":"54.192.209.4","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2008-04-25","domain_rank":0,"first_seen":"2025-10-19T14:31:41.989548Z","last_seen":"2026-03-02T03:05:13.284748Z","alert_count":0,"request_count":2,"received_data":557564,"sent_data":909,"comment":"","tags":null,"fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}]},{"fqdn":"txdy.hznunxc.com","ip":{"addr":"157.185.128.120","port":443,"asn":54994,"as":"ML-1432-54994","country":"France","country_code":"FR"},"domain_registered":"2025-07-15","domain_rank":0,"first_seen":"2026-02-12T23:34:46.222479Z","last_seen":"2026-03-06T10:32:29.455701Z","alert_count":0,"request_count":1,"received_data":120302,"sent_data":437,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"img1212.syhze.com","ip":{"addr":"205.198.65.15","port":443,"asn":138997,"as":"Eons Data Communications Limited","country":"Hong Kong","country_code":"HK"},"domain_registered":"2014-05-15","domain_rank":0,"first_seen":"2025-12-21T08:33:05.525239Z","last_seen":"2026-03-07T01:42:14.214173Z","alert_count":0,"request_count":2,"received_data":940974,"sent_data":894,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"img.alicdn.com","ip":{"addr":"47.246.44.178","port":443,"asn":24429,"as":"Zhejiang Taobao Network Co.,Ltd","country":"Sweden","country_code":"SE"},"domain_registered":"2008-06-25","domain_rank":61670,"first_seen":"2015-03-04T07:06:39Z","last_seen":"2026-03-04T23:10:25.092548Z","alert_count":0,"request_count":11,"received_data":3295109,"sent_data":5408,"comment":"","tags":null,"fingerprints":[{"name":"Tengine","description":"Tengine is a web server which is based on the Nginx HTTP server.","website":"https://tengine.taobao.org","common_platform_enumeration":"","icon":"Tengine.png","categories":["Web servers"]}]},{"fqdn":"wsu.rqtqsp9.lol","ip":{"addr":"142.171.24.239","port":443,"asn":35916,"as":"MULTA-ASN1","country":"United States","country_code":"US"},"domain_registered":"2026-02-08","domain_rank":0,"first_seen":"2026-03-07T02:35:39.116213Z","last_seen":"2026-03-07T02:35:39.116213Z","alert_count":0,"request_count":36,"received_data":1227290,"sent_data":18626,"comment":"","tags":null,"fingerprints":[{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}]},{"fqdn":"d3ccefxs96519j.cloudfront.net","ip":{"addr":"108.157.232.9","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2008-04-25","domain_rank":0,"first_seen":"2025-06-30T07:13:17.425046Z","last_seen":"2026-03-06T18:33:33.366879Z","alert_count":0,"request_count":1,"received_data":96183,"sent_data":454,"comment":"","tags":null,"fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}]},{"fqdn":"img1.ah7907.com","ip":{"addr":"47.242.20.187","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"domain_registered":"2024-08-29","domain_rank":0,"first_seen":"2025-11-08T09:13:57.808607Z","last_seen":"2026-03-06T18:33:33.708453Z","alert_count":0,"request_count":4,"received_data":631360,"sent_data":1764,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"fsffbhd.4000522777.xn--fiqs8s","ip":{"addr":"104.26.7.77","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-07-31","domain_rank":0,"first_seen":"2026-02-08T15:30:41.519119Z","last_seen":"2026-03-02T14:58:29.631081Z","alert_count":0,"request_count":2,"received_data":1166240,"sent_data":978,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"img.meituan.net","ip":{"addr":"163.171.134.109","port":443,"asn":54994,"as":"ML-1432-54994","country":"Sweden","country_code":"SE"},"domain_registered":"2010-01-25","domain_rank":189994,"first_seen":"2017-02-03T02:36:44Z","last_seen":"2026-03-06T03:12:30.353861Z","alert_count":0,"request_count":1,"received_data":407470,"sent_data":442,"comment":"","tags":null,"fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"www.jkuntupiaxxzz.com","ip":{"addr":"64.112.76.43","port":443,"asn":6939,"as":"HURRICANE","country":"United States","country_code":"US"},"domain_registered":"2026-01-21","domain_rank":0,"first_seen":"2026-01-28T07:38:35.46468Z","last_seen":"2026-03-06T12:09:51.961938Z","alert_count":0,"request_count":2,"received_data":23516,"sent_data":980,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"dq38rjje7qjm3.cloudfront.net","ip":{"addr":"65.9.60.143","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2008-04-25","domain_rank":0,"first_seen":"2025-03-24T19:11:01.50764Z","last_seen":"2026-03-06T23:17:34.307628Z","alert_count":0,"request_count":1,"received_data":94060,"sent_data":454,"comment":"","tags":null,"fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}]},{"fqdn":"pg888.12img707989.com","ip":{"addr":"205.198.65.15","port":5658,"asn":138997,"as":"Eons Data Communications Limited","country":"Hong Kong","country_code":"HK"},"domain_registered":"2025-12-17","domain_rank":0,"first_seen":"2025-12-18T04:56:01.819009Z","last_seen":"2026-03-06T10:32:29.6222Z","alert_count":0,"request_count":1,"received_data":732708,"sent_data":456,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"11221.xn--gps-8y0gm25n.xn--55qx5d","ip":{"addr":"27.155.113.137","port":443,"asn":133774,"as":"Fuzhou","country":"China","country_code":"CN"},"domain_registered":"2025-04-18","domain_rank":0,"first_seen":"2025-12-03T14:43:28.608781Z","last_seen":"2026-03-07T00:44:22.321285Z","alert_count":0,"request_count":1,"received_data":596934,"sent_data":464,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"fdhdfgfghfdgdhfgdghfdgfg.zhuanshutupian458.com","ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2025-12-18","domain_rank":0,"first_seen":"2026-01-09T02:45:23.4071Z","last_seen":"2026-03-06T15:02:46.621404Z","alert_count":0,"request_count":1,"received_data":0,"sent_data":489,"comment":"","tags":null,"fingerprints":null},{"fqdn":"www.mdynieu.com","ip":{"addr":"82.40.34.135","port":443,"asn":5089,"as":"Virgin Media","country":"United Kingdom","country_code":"GB"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2025-11-07T12:04:46.874157Z","last_seen":"2026-03-02T14:58:31.744236Z","alert_count":0,"request_count":1,"received_data":407041,"sent_data":460,"comment":"","tags":null,"fingerprints":null},{"fqdn":"2026tu.myxuanxuan.com","ip":{"addr":"43.174.14.42","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"domain_registered":"2016-04-10","domain_rank":0,"first_seen":"2026-01-26T20:19:42.17682Z","last_seen":"2026-03-03T01:49:52.828292Z","alert_count":0,"request_count":1,"received_data":643926,"sent_data":448,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"pic.sex8sex844.com","ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-02-25","domain_rank":0,"first_seen":"2025-11-17T08:50:51.130806Z","last_seen":"2026-03-03T22:51:28.469404Z","alert_count":0,"request_count":2,"received_data":220878,"sent_data":902,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"11224.xn--gps-8y0gm25n.xn--55qx5d","ip":{"addr":"116.211.128.174","port":443,"asn":58563,"as":"CHINANET Hubei province network","country":"China","country_code":"CN"},"domain_registered":"2025-04-18","domain_rank":0,"first_seen":"2025-12-12T01:01:33.916178Z","last_seen":"2026-03-02T14:58:30.066784Z","alert_count":0,"request_count":1,"received_data":568606,"sent_data":464,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"wsu.rqtqsp9.lol/cn/home/web/static/js/jquery.js","fqdn":"wsu.rqtqsp9.lol","domain":"rqtqsp9.lol","tld":"lol"},"ip":{"addr":"142.171.24.239","port":443,"asn":35916,"as":"MULTA-ASN1","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"397754ba49e9e0cf4e7c190da78dda05","sha1":"ae49e56999d82802727455f0ba83b63acd90a22b","sha256":"c12f6098e641aaca96c60215800f18f5671039aecf812217fab3c0d152f6adb4","sha512":"8c64754f77507ab2c24a6fc818419b9dd3f0ceccc9065290e41afdbee0743f0da2cb13b2fbb00afa525c082f1e697cb3ffd76ef9b902cb81d7c41ca1c641dffb","ssdeep":"1536:dnu00HWWaRxkqJg09pYxoxDKMXJrg8hXXO4dK3kyfiLJBhdSZE+I+Qg7rbaN1RUx:ddkWgoBhcZRQgmW42qe","tlshash":"8c932bdd72d2b03257ab30bd106f540ff2361959280d8850f268d8f9bc79a49a277f6d","size":92629,"data":"","first_seen":"2023-03-07T01:02:08Z","last_seen":"2026-04-04T15:48:44.569044Z","times_seen":60616,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wsu.rqtqsp9.lol/cn/home/web/","fqdn":"wsu.rqtqsp9.lol","domain":"rqtqsp9.lol","tld":"lol"},"ip":{"addr":"142.171.24.239","port":443,"asn":35916,"as":"MULTA-ASN1","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"e8c900332d4e296b96c4bbf857f43cd9","sha1":"c68d0a32c7eeb0d60d336988362ef1aa2099a489","sha256":"f31bdc3d113f966b60a79a47806708fa4f7cdd5145638452023add747d9becfa","sha512":"22edc4c2706f44c8c84fcbfdc94193a8cf66ef47af4c3ee14e11ccf563c3c0b4a635701ff69c359f64437595f82294fcacd7393d07a0a803c3edc2a6d57bbf3b","ssdeep":"","tlshash":"72b09b81350d549505170635d0777b1977313f54d57455408654b5a19517f0cb067b14","size":127,"data":"","first_seen":"2023-03-07T14:15:35Z","last_seen":"2026-04-04T12:57:38.490969Z","times_seen":5483,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wsu.rqtqsp9.lol/cn/home/web/static/js/jquery.js","fqdn":"wsu.rqtqsp9.lol","domain":"rqtqsp9.lol","tld":"lol"},"ip":{"addr":"142.171.24.239","port":443,"asn":35916,"as":"MULTA-ASN1","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"397754ba49e9e0cf4e7c190da78dda05","sha1":"ae49e56999d82802727455f0ba83b63acd90a22b","sha256":"c12f6098e641aaca96c60215800f18f5671039aecf812217fab3c0d152f6adb4","sha512":"8c64754f77507ab2c24a6fc818419b9dd3f0ceccc9065290e41afdbee0743f0da2cb13b2fbb00afa525c082f1e697cb3ffd76ef9b902cb81d7c41ca1c641dffb","ssdeep":"1536:dnu00HWWaRxkqJg09pYxoxDKMXJrg8hXXO4dK3kyfiLJBhdSZE+I+Qg7rbaN1RUx:ddkWgoBhcZRQgmW42qe","tlshash":"8c932bdd72d2b03257ab30bd106f540ff2361959280d8850f268d8f9bc79a49a277f6d","size":92629,"data":"","first_seen":"2023-03-07T01:02:08Z","last_seen":"2026-04-04T15:48:44.569044Z","times_seen":60616,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wsu.rqtqsp9.lol/cn/home/web/static/js/home.js","fqdn":"wsu.rqtqsp9.lol","domain":"rqtqsp9.lol","tld":"lol"},"ip":{"addr":"142.171.24.239","port":443,"asn":35916,"as":"MULTA-ASN1","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"5d23e8ddd7a43f468e387306bcf92221","sha1":"96726ef7e6e3b6703d2663c2bc5755acad948c4d","sha256":"5b3260a226d13b437b3222f7a1e2f7d2b677391c9677f54793b651f42c90a499","sha512":"a2acaa04d165ef65edcd1ebe80586bfc0dad7f428d71e4b40082c61fbdf72ebd9f9cc859a1e79e44b318809da4dfc46e76fd6fcc103b0809741cb106e5ac81fe","ssdeep":"768:hRzcTTu8ehbZLbhpa6aDb7z9SsbhkeuLr9GiFIw4TQvZ:hRoXdeC6lqihZ","tlshash":"a2f2a45dbaf3146050b3317a4fbf5508227a815f590ddd88fe2e01a44fc4a4eba66bbc","size":36897,"data":"","first_seen":"2025-05-09T21:00:38.535085Z","last_seen":"2026-04-04T12:57:38.447298Z","times_seen":4592,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wsu.rqtqsp9.lol/cn/home/web/","fqdn":"wsu.rqtqsp9.lol","domain":"rqtqsp9.lol","tld":"lol"},"ip":{"addr":"142.171.24.239","port":443,"asn":35916,"as":"MULTA-ASN1","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"55c6d9b0ae053a41cca2d0e30faffa09","sha1":"f429987a87fcafef59622fde435145cef1d2e51f","sha256":"83dd71e4480d83540ca15931900a03b3997ee3eba6373a51a7f1659d091ff2ea","sha512":"0df5e66e1611a7bd236ae8164864ad6470679c1746fa69f377b8481fda889ed0fafc4fc19994d8137a2627e3962c0ffa201ca0583efd3b1d5df4711b0d948a0a","ssdeep":"","tlshash":"a6c08cc502f6a280cf16818c42304f87bb036532c71600fedc8c8e64078015c2004c79","size":158,"data":"","first_seen":"2025-11-13T02:39:16.289091Z","last_seen":"2026-03-14T10:16:44.307134Z","times_seen":51,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wsu.rqtqsp9.lol/cn/home/web/template/90sdyy_dc_pc/asset/js/attach.js","fqdn":"wsu.rqtqsp9.lol","domain":"rqtqsp9.lol","tld":"lol"},"ip":{"addr":"142.171.24.239","port":443,"asn":35916,"as":"MULTA-ASN1","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"7883897dcde412ed4f504ef9416ae533","sha1":"2a228427aa6a5914d96f71887a611b8300b069d4","sha256":"f7384070fb8779e615abc4cef747152648170f9745bea327bda8ad7af799d611","sha512":"c9ef975b5eca4b91dd1f9876302229f953fc8961ef9c2cb4aac5c88ddf4378d927c0a549bf255fc8c71b45e65c145f27eb8f7cb45c7e08c557504d0bc1e5984c","ssdeep":"","tlshash":"4c11ab64b050048091b32dde68ff92cd6327b310d405174cb6ad88542fe979efc2a46e","size":1003,"data":"","first_seen":"2025-09-25T11:29:08.142099Z","last_seen":"2026-03-14T15:42:54.412671Z","times_seen":66,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wsu.rqtqsp9.lol/cn/home/web/template/90sdyy_dc_pc/asset/js/global.js?v=","fqdn":"wsu.rqtqsp9.lol","domain":"rqtqsp9.lol","tld":"lol"},"ip":{"addr":"142.171.24.239","port":443,"asn":35916,"as":"MULTA-ASN1","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"28ea52d14439e5a65651aad04ffdf4c3","sha1":"e6100154bac6261acb4e7f7f14cc38a2ca5d53e4","sha256":"3a7f298306397d1945de1d0730659e75d3041968d6047712fcdffc74efb2b2a9","sha512":"985421e58f0d5d60858f2e234159e4bef969a5760857a4d4bd460f16fa5a8582feaf2e4a2bd56eb63b4fe8620c9b2f62d8d4ff5d7b761dd55d471ddc96d791e0","ssdeep":"768:8wO6yOHHjkKI2JEXFvlWHRJsJ1k5YkkfLp:82j7EWHrVkfLp","tlshash":"e503635cf9952ea1a27b73a78cbb7c19d377047301258750f6bd36816f362889192cbc","size":41189,"data":"","first_seen":"2023-03-12T23:38:28Z","last_seen":"2026-03-15T14:56:28.251269Z","times_seen":248,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wsu.rqtqsp9.lol/cn/home/web/static/js/jquery.lazyload.js","fqdn":"wsu.rqtqsp9.lol","domain":"rqtqsp9.lol","tld":"lol"},"ip":{"addr":"142.171.24.239","port":443,"asn":35916,"as":"MULTA-ASN1","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"9dfc308833c7ae64a6e0e6bd33fb51d7","sha1":"527e4dbceb22c063ed1bc5bd2ec362d9a412892a","sha256":"f3a5e91219434ff92ae7b36b9582136a75f56b605ebeb54bac21efdfea4466d1","sha512":"383aec26af4153c8d03cf7ab898378d5be2d509fcc12e87daaccaf2a51f145ac57b08c3001db895ed95b24e807c5290d256e5570a519b2c478185b9472d27578","ssdeep":"","tlshash":"d641e5863f027534f179a9ad430f52096127d03b92d58dd1b089d8ecfcf86579a3698b","size":2232,"data":"","first_seen":"2023-03-07T01:02:08Z","last_seen":"2026-04-04T12:57:38.403151Z","times_seen":18871,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wsu.rqtqsp9.lol/cn/home/web/template/90sdyy_dc_pc/asset/js/global.js?v=","fqdn":"wsu.rqtqsp9.lol","domain":"rqtqsp9.lol","tld":"lol"},"ip":{"addr":"142.171.24.239","port":443,"asn":35916,"as":"MULTA-ASN1","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"28ea52d14439e5a65651aad04ffdf4c3","sha1":"e6100154bac6261acb4e7f7f14cc38a2ca5d53e4","sha256":"3a7f298306397d1945de1d0730659e75d3041968d6047712fcdffc74efb2b2a9","sha512":"985421e58f0d5d60858f2e234159e4bef969a5760857a4d4bd460f16fa5a8582feaf2e4a2bd56eb63b4fe8620c9b2f62d8d4ff5d7b761dd55d471ddc96d791e0","ssdeep":"768:8wO6yOHHjkKI2JEXFvlWHRJsJ1k5YkkfLp:82j7EWHrVkfLp","tlshash":"e503635cf9952ea1a27b73a78cbb7c19d377047301258750f6bd36816f362889192cbc","size":41189,"data":"","first_seen":"2023-03-12T23:38:28Z","last_seen":"2026-03-15T14:56:28.251269Z","times_seen":248,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wsu.rqtqsp9.lol/cn/home/web/index.php/vod/play/id/975713/sid/1/nid/1.html","fqdn":"wsu.rqtqsp9.lol","domain":"rqtqsp9.lol","tld":"lol"},"ip":{"addr":"142.171.24.239","port":443,"asn":35916,"as":"MULTA-ASN1","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"e8c900332d4e296b96c4bbf857f43cd9","sha1":"c68d0a32c7eeb0d60d336988362ef1aa2099a489","sha256":"f31bdc3d113f966b60a79a47806708fa4f7cdd5145638452023add747d9becfa","sha512":"22edc4c2706f44c8c84fcbfdc94193a8cf66ef47af4c3ee14e11ccf563c3c0b4a635701ff69c359f64437595f82294fcacd7393d07a0a803c3edc2a6d57bbf3b","ssdeep":"","tlshash":"72b09b81350d549505170635d0777b1977313f54d57455408654b5a19517f0cb067b14","size":127,"data":"","first_seen":"2023-03-07T14:15:35Z","last_seen":"2026-04-04T12:57:38.490969Z","times_seen":5483,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wsu.rqtqsp9.lol/cn/home/web/index.php/vod/play/id/975713/sid/1/nid/1.html","fqdn":"wsu.rqtqsp9.lol","domain":"rqtqsp9.lol","tld":"lol"},"ip":{"addr":"142.171.24.239","port":443,"asn":35916,"as":"MULTA-ASN1","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"c66dbed613328f6cf0811a2d7718818b","sha1":"d1f0d4c55a3bbda4ddb720396d74955ff29b9791","sha256":"a681ae32e4f4fab56f2d0da2610f5e09ca76a6580ddd7f40a3486f3932436389","sha512":"5bae5d4c39f0b54ef7aa2d87e4926225c4bbcc23efc45d27f2b2ebdbf308b27fff84a18dbf1031c473107b123ea99d4e2c5636c1a7d0a495d3d5dd61f7ef4d73","ssdeep":"","tlshash":"14c08cc602f6e280cb1a829c42304fafae036522c71500fe8c988eec09c015c2004cad","size":162,"data":"","first_seen":"2025-11-13T02:39:16.287327Z","last_seen":"2026-03-14T15:42:54.455386Z","times_seen":63,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wsu.rqtqsp9.lol/cn/home/web/template/90sdyy_dc_pc/asset/js/sidebar.js","fqdn":"wsu.rqtqsp9.lol","domain":"rqtqsp9.lol","tld":"lol"},"ip":{"addr":"142.171.24.239","port":443,"asn":35916,"as":"MULTA-ASN1","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"f942d7cacc22cab07d6ddea78e442512","sha1":"72f110642fd0fc0c75145497b126c6a50d3a4993","sha256":"29df69085cecb8d89a5d131757ffe9dfff68395c6f53b2dca0bea4ef2b7a6645","sha512":"f76891d3378731aa01006396ec3dc94b7e55bc2445e5175511621efaf064a192c0374d878f624ef03e91c43f571bd8ab820deff40baa0748a8ef1374a67eda3d","ssdeep":"192:FEz96DqfVOXEuPHB+qC9YkG3a6+XrvM+rd:y3SalvM+rd","tlshash":"5ff1866e3b107139e09bf5cbe4cf5028913a8a6b57c68078835cd4e81d6276881e3fdd","size":7603,"data":"","first_seen":"2025-05-09T20:52:52.971838Z","last_seen":"2026-03-15T14:56:28.243196Z","times_seen":362,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wsu.rqtqsp9.lol/cn/home/web/template/90sdyy_dc_pc/asset/js/jquery.js?v=","fqdn":"wsu.rqtqsp9.lol","domain":"rqtqsp9.lol","tld":"lol"},"ip":{"addr":"142.171.24.239","port":443,"asn":35916,"as":"MULTA-ASN1","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"51a2e575444dfd1b46049074e8097ec9","sha1":"ab5cc19ec6273d9247ccd6461577fc0c4e2a539f","sha256":"6ebc65139f53a6bb9f5f16cf8ae6c21865dfb3d5f3f7bf0bbacb8d8d502f8275","sha512":"0b93d6e78d4059a60ab46c121529338bc191eef35cfca051ca82541857db78432598c24c7a7379e1a3abfd7467b027a5c98d27bec66099ad7039a69d541e0e44","ssdeep":"3072:d4J+Z3jL5TCOaLTwkiFdnCVQwda98HryLqRkhOeDRz4Sz:NZzEOAM+zda98HrRRkhnDRz4Sz","tlshash":"0104078df25172a296f330a952bf810a71775896b408d8b4b0a488d57dbcd9c027ff7a","size":187180,"data":"","first_seen":"2023-03-12T23:38:28Z","last_seen":"2026-03-15T14:56:28.263609Z","times_seen":403,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wsu.rqtqsp9.lol/cn/home/web/static/js/jquery.autocomplete.js","fqdn":"wsu.rqtqsp9.lol","domain":"rqtqsp9.lol","tld":"lol"},"ip":{"addr":"142.171.24.239","port":443,"asn":35916,"as":"MULTA-ASN1","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"932466cf2976a99330383be9ffe8ca6b","sha1":"732c55aa5bbb6efb63fad871db9773139929d0e6","sha256":"22a879d897b0c6559e8a4f0e1d7f8866471478740a5b5cace3c29c97c8fdaf18","sha512":"e1ea60c13642bbc8ed8cd448007d5096c4067596b1fee2bea55f1fea765bab59f97f92fa973bdd329ccf78087be301325b14a206592a76c3699128459559159b","ssdeep":"384:EC8MJlHqBlgr2qMrLXej2Jy7fwaoSXo0TviE:Ed7Dr7OtZTqE","tlshash":"d3b2ec0979e3226292a7707e8faf0008b676a557240cdd50bd1ca7d02f54938b6f7fe9","size":25108,"data":"","first_seen":"2023-04-07T04:49:34Z","last_seen":"2026-04-04T12:57:38.428389Z","times_seen":20008,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wsu.rqtqsp9.lol/abc/fixed_ui_ad7b03.js","fqdn":"wsu.rqtqsp9.lol","domain":"rqtqsp9.lol","tld":"lol"},"ip":{"addr":"142.171.24.239","port":443,"asn":35916,"as":"MULTA-ASN1","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"1d9bae76ae35abf890ddd36f74a88b58","sha1":"81a9202191b517b1c93098e6aeffe201bf0b1328","sha256":"5474eb3db72d8196868e5e434f383f9f7eb74e2a847682980b6b77b8224f31a1","sha512":"cbae894eafbcadcb084dbf5d756fee33c9127e915e84d327652fd0b393099da42113b20f5003835438e88c3ae8015d27e4cae8c8552735df8718e0fc5ab7f63d","ssdeep":"96:KdrFrabWXgMwEQxg23RgE+fE7Tzg2TCuNJkiT8oP5VYb5G6JS/lWrNfosKQwX:oBBwXm23RgffwT86CuNJb5VGGg+gplwX","tlshash":"a4b1735e79e33096892331b59fff150836319013620add907c0d92646fa5b9416b2fe9","size":5585,"data":"","first_seen":"2026-03-07T06:33:17.667915Z","last_seen":"2026-03-07T06:33:17.667915Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wsu.rqtqsp9.lol/cn/home/web/template/90sdyy_dc_pc/asset/js/jquery.js?v=","fqdn":"wsu.rqtqsp9.lol","domain":"rqtqsp9.lol","tld":"lol"},"ip":{"addr":"142.171.24.239","port":443,"asn":35916,"as":"MULTA-ASN1","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"51a2e575444dfd1b46049074e8097ec9","sha1":"ab5cc19ec6273d9247ccd6461577fc0c4e2a539f","sha256":"6ebc65139f53a6bb9f5f16cf8ae6c21865dfb3d5f3f7bf0bbacb8d8d502f8275","sha512":"0b93d6e78d4059a60ab46c121529338bc191eef35cfca051ca82541857db78432598c24c7a7379e1a3abfd7467b027a5c98d27bec66099ad7039a69d541e0e44","ssdeep":"3072:d4J+Z3jL5TCOaLTwkiFdnCVQwda98HryLqRkhOeDRz4Sz:NZzEOAM+zda98HrRRkhnDRz4Sz","tlshash":"0104078df25172a296f330a952bf810a71775896b408d8b4b0a488d57dbcd9c027ff7a","size":187180,"data":"","first_seen":"2023-03-12T23:38:28Z","last_seen":"2026-03-15T14:56:28.263609Z","times_seen":403,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wsu.rqtqsp9.lol/cn/home/web/static/js/jquery.autocomplete.js","fqdn":"wsu.rqtqsp9.lol","domain":"rqtqsp9.lol","tld":"lol"},"ip":{"addr":"142.171.24.239","port":443,"asn":35916,"as":"MULTA-ASN1","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"932466cf2976a99330383be9ffe8ca6b","sha1":"732c55aa5bbb6efb63fad871db9773139929d0e6","sha256":"22a879d897b0c6559e8a4f0e1d7f8866471478740a5b5cace3c29c97c8fdaf18","sha512":"e1ea60c13642bbc8ed8cd448007d5096c4067596b1fee2bea55f1fea765bab59f97f92fa973bdd329ccf78087be301325b14a206592a76c3699128459559159b","ssdeep":"384:EC8MJlHqBlgr2qMrLXej2Jy7fwaoSXo0TviE:Ed7Dr7OtZTqE","tlshash":"d3b2ec0979e3226292a7707e8faf0008b676a557240cdd50bd1ca7d02f54938b6f7fe9","size":25108,"data":"","first_seen":"2023-04-07T04:49:34Z","last_seen":"2026-04-04T12:57:38.428389Z","times_seen":20008,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wsu.rqtqsp9.lol/cn/home/web/index.php/vod/play/id/975713/sid/1/nid/1.html","fqdn":"wsu.rqtqsp9.lol","domain":"rqtqsp9.lol","tld":"lol"},"ip":{"addr":"142.171.24.239","port":443,"asn":35916,"as":"MULTA-ASN1","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"23253f727b9ee43e298155b631b0e725","sha1":"9de43bbad8b82963a059f201bb0ba7719f64f1bf","sha256":"6ef66881cffbd5933df96c7d204d6bd41606eb2cacc7bb61d5106dc1c20497a3","sha512":"cfee5dfc8b1e68aeecf463aa607f1186fc382e679d63759ebfd5dd8fa54d63ebb456a3386803c682459830d5c163d056878e5ec6613581c1f1271733fa81cec9","ssdeep":"","tlshash":"47d02345d7752824e43d39ce9cd474090014b1152f7f0b02d28c0ed8cc679131423ccf","size":218,"data":"","first_seen":"2025-05-21T23:54:25.01557Z","last_seen":"2026-03-15T14:56:28.295927Z","times_seen":268,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wsu.rqtqsp9.lol/cn/home/web/static/js/home.js","fqdn":"wsu.rqtqsp9.lol","domain":"rqtqsp9.lol","tld":"lol"},"ip":{"addr":"142.171.24.239","port":443,"asn":35916,"as":"MULTA-ASN1","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"5d23e8ddd7a43f468e387306bcf92221","sha1":"96726ef7e6e3b6703d2663c2bc5755acad948c4d","sha256":"5b3260a226d13b437b3222f7a1e2f7d2b677391c9677f54793b651f42c90a499","sha512":"a2acaa04d165ef65edcd1ebe80586bfc0dad7f428d71e4b40082c61fbdf72ebd9f9cc859a1e79e44b318809da4dfc46e76fd6fcc103b0809741cb106e5ac81fe","ssdeep":"768:hRzcTTu8ehbZLbhpa6aDb7z9SsbhkeuLr9GiFIw4TQvZ:hRoXdeC6lqihZ","tlshash":"a2f2a45dbaf3146050b3317a4fbf5508227a815f590ddd88fe2e01a44fc4a4eba66bbc","size":36897,"data":"","first_seen":"2025-05-09T21:00:38.535085Z","last_seen":"2026-04-04T12:57:38.447298Z","times_seen":4592,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wsu.rqtqsp9.lol/cn/home/web/template/90sdyy_dc_pc/asset/js/qrcode.js","fqdn":"wsu.rqtqsp9.lol","domain":"rqtqsp9.lol","tld":"lol"},"ip":{"addr":"142.171.24.239","port":443,"asn":35916,"as":"MULTA-ASN1","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"3b0526fc6b2d25a7e6c1ad14b70f8ac4","sha1":"348a37b5060a536f1d7a0c3e1a28448a09aca139","sha256":"f43d2d36358b6c3d192e24ea38095c4452d4cc025147261932088bda5c3ebcf1","sha512":"afe77f81eabe62d12a15316ce6098c88fbed3ee045fabe189cccad821c4d64a0dfc610eba54d89d49886440f2f2fdb22106550724574ceed756f4931e2069b4c","ssdeep":"384:SlHSlyl+y99JJ5WZSgwKsvPTPPVhFp9AAdTRUPekQGemZR79yHHqsgl41+gNftP3:uHPl+yl7WgvPTPP9pkQGemZR7QWKNh","tlshash":"1b92a685b6c452b4a252ace20c1f109be27598226c1e8564eb31d5d3bdf8fd68436fac","size":21058,"data":"","first_seen":"2025-07-23T01:20:51.099141Z","last_seen":"2026-03-15T14:56:28.270659Z","times_seen":232,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wsu.rqtqsp9.lol/cn/home/web/index.php/vod/play/id/975713/sid/1/nid/1.html","fqdn":"wsu.rqtqsp9.lol","domain":"rqtqsp9.lol","tld":"lol"},"ip":{"addr":"142.171.24.239","port":443,"asn":35916,"as":"MULTA-ASN1","country":"United States","country_code":"US"},"introduction_type":"domTimer","is_inline":false,"md5":"32e5e3027391eec7089b0bab08876469","sha1":"7499899fb8897af90792580c5704aa25e94beac7","sha256":"0b964545d835ac06d946fee9e13468de7353284a0c5cc03d18f6b054d1883ba6","sha512":"f3744e2ad5c69a0395e70234f42e72e6c62b1b4d2c8bfe5e4adc3e7fbbdd67a3c8f07c9fd8475a827ccec4a3a7b460a959b999136aede07ea34111c5efb4a500","ssdeep":"","tlshash":"2d5000000000c0000c00000c30000c0c00000000000000c030cc000000000000000030","size":8,"data":"","first_seen":"2025-09-25T11:29:08.15772Z","last_seen":"2026-03-14T15:42:54.453047Z","times_seen":66,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wsu.rqtqsp9.lol/cn/home/web/index.php/vod/play/id/975713/sid/1/nid/1.html","fqdn":"wsu.rqtqsp9.lol","domain":"rqtqsp9.lol","tld":"lol"},"ip":{"addr":"142.171.24.239","port":443,"asn":35916,"as":"MULTA-ASN1","country":"United States","country_code":"US"},"introduction_type":"domTimer","is_inline":false,"md5":"32e5e3027391eec7089b0bab08876469","sha1":"7499899fb8897af90792580c5704aa25e94beac7","sha256":"0b964545d835ac06d946fee9e13468de7353284a0c5cc03d18f6b054d1883ba6","sha512":"f3744e2ad5c69a0395e70234f42e72e6c62b1b4d2c8bfe5e4adc3e7fbbdd67a3c8f07c9fd8475a827ccec4a3a7b460a959b999136aede07ea34111c5efb4a500","ssdeep":"","tlshash":"2d5000000000c0000c00000c30000c0c00000000000000c030cc000000000000000030","size":8,"data":"","first_seen":"2025-09-25T11:29:08.15772Z","last_seen":"2026-03-14T15:42:54.453047Z","times_seen":66,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wsu.rqtqsp9.lol/cn/home/web/index.php/vod/play/id/975713/sid/1/nid/1.html","fqdn":"wsu.rqtqsp9.lol","domain":"rqtqsp9.lol","tld":"lol"},"ip":{"addr":"142.171.24.239","port":443,"asn":35916,"as":"MULTA-ASN1","country":"United States","country_code":"US"},"introduction_type":"domTimer","is_inline":false,"md5":"32e5e3027391eec7089b0bab08876469","sha1":"7499899fb8897af90792580c5704aa25e94beac7","sha256":"0b964545d835ac06d946fee9e13468de7353284a0c5cc03d18f6b054d1883ba6","sha512":"f3744e2ad5c69a0395e70234f42e72e6c62b1b4d2c8bfe5e4adc3e7fbbdd67a3c8f07c9fd8475a827ccec4a3a7b460a959b999136aede07ea34111c5efb4a500","ssdeep":"","tlshash":"2d5000000000c0000c00000c30000c0c00000000000000c030cc000000000000000030","size":8,"data":"","first_seen":"2025-09-25T11:29:08.15772Z","last_seen":"2026-03-14T15:42:54.453047Z","times_seen":66,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wsu.rqtqsp9.lol/cn/home/web/static/js/jquery.lazyload.js","fqdn":"wsu.rqtqsp9.lol","domain":"rqtqsp9.lol","tld":"lol"},"ip":{"addr":"142.171.24.239","port":443,"asn":35916,"as":"MULTA-ASN1","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"9dfc308833c7ae64a6e0e6bd33fb51d7","sha1":"527e4dbceb22c063ed1bc5bd2ec362d9a412892a","sha256":"f3a5e91219434ff92ae7b36b9582136a75f56b605ebeb54bac21efdfea4466d1","sha512":"383aec26af4153c8d03cf7ab898378d5be2d509fcc12e87daaccaf2a51f145ac57b08c3001db895ed95b24e807c5290d256e5570a519b2c478185b9472d27578","ssdeep":"","tlshash":"d641e5863f027534f179a9ad430f52096127d03b92d58dd1b089d8ecfcf86579a3698b","size":2232,"data":"","first_seen":"2023-03-07T01:02:08Z","last_seen":"2026-04-04T12:57:38.403151Z","times_seen":18871,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null},"http":[{"url":{"schema":"https","addr":"pg888.12img707989.com:5658/8888/pg507/pg120.gif","fqdn":"pg888.12img707989.com","domain":"12img707989.com","tld":"com"},"ip":{"addr":"205.198.65.15","port":5658,"asn":138997,"as":"Eons Data Communications Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wsu.rqtqsp9.lol/cn/home/web/","date":"2026-03-07T06:32:54.974Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pg888.12img707989.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 16 Feb 2026 04:24:03 GMT","end":"Sun, 17 May 2026 04:24:02 GMT"},"fingerprint":{"sha1":"A2:78:04:63:2B:CA:BE:C2:FB:3F:31:EE:5D:22:4F:D0:20:B7:2D:A4","sha256":"D3:2A:FB:29:36:10:8B:B7:D5:60:5A:68:5E:02:82:D8:14:1F:89:6A:00:EA:73:6D:19:85:46:E9:F3:1A:D2:F1"}}},"request":{"raw":"GET /8888/pg507/pg120.gif HTTP/1.1\r\nHost: pg888.12img707989.com:5658\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wsu.rqtqsp9.lol/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 07 Mar 2026 06:32:55 GMT\r\ncontent-type: image/gif\r\ncontent-length: 732135\r\nstrict-transport-security: max-age=31536000\r\nlast-modified: Mon, 05 May 2025 10:11:05 GMT\r\netag: \"68188eb9-b2be7\"\r\nexpires: Mon, 06 Apr 2026 05:15:40 GMT\r\ncache-control: max-age=2592000\r\nserver: nginx\r\nx-cache-status: HIT\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\naccess-control-expose-headers: *\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1728000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":732135,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 960 x 120","md5":"d812f0151d7042065067e76fe039facc","sha1":"a48f9c692fa3916903db45819d4050f52d747a33","sha256":"849c1d8c67e9a3151b4a14d3b70e23e4abc3649dcac2e397587afedc70dcf25e","sha512":"a082dff74f4a12e121b6f185ba58d228399af7fa6f50df9d8a891c42d01724d7381842985926980c2e35d1f4b352ff7b425000682f6bdbb0038153d9893ff43f","ssdeep":"12288:RzuTwzuTwzuTwzuTFs9yJuVwrVwrVwrVwrV5eGrQSoSoSoSKDu4OVDu4OVDu4OVQ:RuTeuTeuTeuTFw1WrWrWrWrjeGkSoSoV","tlshash":"43f42339d14794a6938b0a7b9f1411a46305de26a7f220398327f987bc46793ffdb80d","first_seen":"2025-11-21T00:36:15.392801Z","last_seen":"2026-04-04T15:25:57.438535Z","times_seen":7865,"resource_available":false,"data":null}},"time_used":2436,"timings":{"blocked":-1,"dns":129,"connect":267,"send":0,"wait":267,"receive":1497,"ssl":275},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.alicdn.com/imgextra/i1/2217565595682/O1CN01JKJBL71rqPYr9sHRK_!!2217565595682.gif","fqdn":"img.alicdn.com","domain":"alicdn.com","tld":"com"},"ip":{"addr":"47.246.44.178","port":443,"asn":24429,"as":"Zhejiang Taobao Network Co.,Ltd","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wsu.rqtqsp9.lol/cn/home/web/","date":"2026-03-07T06:32:56.484Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tbcdn.cn","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Fri, 28 Nov 2025 03:07:13 GMT","end":"Sat, 18 Jul 2026 09:41:04 GMT"},"fingerprint":{"sha1":"01:40:62:EF:8C:E5:C1:8A:19:4C:8D:B6:F5:C2:24:7F:DC:C0:9C:8A","sha256":"60:3C:41:A0:78:62:E6:5E:82:F0:FA:CF:5C:C9:D3:22:E4:64:EE:1A:EE:C7:CC:BA:DD:25:08:90:6F:CC:C4:F2"}}},"request":{"raw":"GET /imgextra/i1/2217565595682/O1CN01JKJBL71rqPYr9sHRK_!!2217565595682.gif HTTP/1.1\r\nHost: img.alicdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wsu.rqtqsp9.lol/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: Tengine\r\ncontent-type: image/gif\r\ncontent-length: 71518\r\ndate: Sun, 04 Jan 2026 07:16:14 GMT\r\npicasso-ret-code: SUCCESS\r\npicasso-cache-info: L3-HIT\r\nrequest-time: 0.001\r\ntraceid: a3b5839717675109745792448e\r\nx-powered-by: Picasso\r\npicasso-image-type: normal\r\npicasso-fmt: gif2avif\r\ncache-control: max-age=31536000\r\nvia: ens-cache26.l2de4[0,-1,200-0,H], ens-cache31.l2de4[1,0], ens-cache4.se2[0,0,200-0,H], ens-cache8.se2[2,0]\r\naccess-control-allow-origin: *\r\nage: 5354202\r\nali-swift-global-savetime: 1767510974\r\nx-cache: HIT TCP_MEM_HIT dirn:-2:-2\r\nx-swift-savetime: Sun, 04 Jan 2026 07:19:12 GMT\r\nx-swift-cachetime: 31535822\r\nback_uri: /imgextra/i1/2217565595682/O1CN01JKJBL71rqPYr9sHRK_!!2217565595682.gif_.avif\r\nvary: Accept\r\ns-rt: 2\r\ntiming-allow-origin: *\r\neagleid: 2ff62c9c17728651764734275e\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Tengine","description":"Tengine is a web server which is based on the Nginx HTTP server.","website":"https://tengine.taobao.org","common_platform_enumeration":"","icon":"Tengine.png","categories":["Web servers"]}],"data":{"size":71518,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 960 x 120","md5":"77124bec289e16c03715536db0a93a69","sha1":"5de89ae0a04b1f38fad10253e63173c0b686ad35","sha256":"a3485681d348a07947e41b4b1f4ae28733254265db0fd08ac9db716c3733c769","sha512":"5690c31f2995495454b1e9f46b74b696c0418985c5d49d8ab68975b731876e461df8cd05bb027cf3d871191a500bd273b649d037e9e1719c890784e368206c54","ssdeep":"1536:E8dgdKUYKUsoK6sIET9wjMr/JF+aPbqiuYZtJvfDD:E+zUvwhEBwjM7+YyYZtJvfDD","tlshash":"8e630233a165d51fd223253ca591909dba377fe1cd6671f9f6c7cf478a08083c9aa828","first_seen":"2026-01-04T07:53:55.650353Z","last_seen":"2026-04-04T15:25:57.279824Z","times_seen":4021,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":9,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wsu.rqtqsp9.lol/cn/home/web/static/js/jquery.lazyload.js","fqdn":"wsu.rqtqsp9.lol","domain":"rqtqsp9.lol","tld":"lol"},"ip":{"addr":"142.171.24.239","port":443,"asn":35916,"as":"MULTA-ASN1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://wsu.rqtqsp9.lol/cn/home/web/","date":"2026-03-07T06:32:53.586Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.rqtqsp9.lol","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Feb 2026 04:57:07 GMT","end":"Sat, 09 May 2026 04:57:06 GMT"},"fingerprint":{"sha1":"CA:AE:D0:F4:85:B9:CD:C6:DD:C1:BA:BB:34:68:B2:F8:74:CB:0A:8B","sha256":"B8:18:09:A9:23:92:E8:BB:44:F2:8C:F5:5D:FC:3A:10:C5:F7:FA:7E:49:AC:0C:C1:07:98:8E:56:85:C3:15:7D"}}},"request":{"raw":"GET /cn/home/web/static/js/jquery.lazyload.js HTTP/1.1\r\nHost: wsu.rqtqsp9.lol\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://wsu.rqtqsp9.lol/cn/home/web/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: https://www.xzylm.com\r\ncontent-type: application/javascript\r\ncontent-length: 2232\r\nlast-modified: Tue, 23 Jan 2018 00:08:40 GMT\r\nvary: Accept-Encoding\r\ncache-control: public, max-age=2592000\r\naccept-ranges: bytes\r\nvia: http/1.1 traffic_server (https://www.xzylm.com [cRs f ])\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":2232,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (2230)","md5":"9dfc308833c7ae64a6e0e6bd33fb51d7","sha1":"527e4dbceb22c063ed1bc5bd2ec362d9a412892a","sha256":"f3a5e91219434ff92ae7b36b9582136a75f56b605ebeb54bac21efdfea4466d1","sha512":"383aec26af4153c8d03cf7ab898378d5be2d509fcc12e87daaccaf2a51f145ac57b08c3001db895ed95b24e807c5290d256e5570a519b2c478185b9472d27578","ssdeep":"","tlshash":"d641e5863f027534f179a9ad430f52096127d03b92d58dd1b089d8ecfcf86579a3698b","first_seen":"2023-03-07T01:02:08Z","last_seen":"2026-04-04T12:57:38.403151Z","times_seen":18871,"resource_available":true,"data":null}},"time_used":185,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":185,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pic.sex8sex844.com/20260304/aLhHkgq1/1.jpg","fqdn":"pic.sex8sex844.com","domain":"sex8sex844.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wsu.rqtqsp9.lol/cn/home/web/","date":"2026-03-07T06:32:53.987Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sex8sex844.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 12 Jan 2026 15:46:46 GMT","end":"Sun, 12 Apr 2026 16:37:24 GMT"},"fingerprint":{"sha1":"CA:21:68:94:80:0A:96:76:16:85:A4:3D:1E:21:00:EF:F3:79:F9:FC","sha256":"62:D4:A3:B0:8E:B2:A7:89:1A:51:D0:7A:FA:35:60:2A:4B:8D:42:3D:01:6C:01:6D:15:40:7C:56:4B:DB:5A:6F"}}},"request":{"raw":"GET /20260304/aLhHkgq1/1.jpg HTTP/1.1\r\nHost: pic.sex8sex844.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wsu.rqtqsp9.lol/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 07 Mar 2026 06:32:54 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 209547\r\nserver: cloudflare\r\nlast-modified: Thu, 05 Mar 2026 04:10:02 GMT\r\ncontent-disposition: attachment; filename=\"1.jpg\"\r\netag: \"69a9021a-3328b\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: X-Requested-With\r\naccess-control-allow-methods: POST, GET, OPTIONS\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UGXfCiSUlhJWaAFg8OgYxMBZgrZkvplDpgohkHap29Xn%2F5okjqvMJLQzLGqS1R71omjE1r6LMteVwI7WDXJM9HkYIlQRGN9%2FkJ9JDbeU0rFhqg%3D%3D\"}]}\r\ncf-ray: 9d8790c9c91b23eb-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":209547,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 718x404, components 3","md5":"220b9403b9765aac4aeabc0c452370d7","sha1":"cebc30a7bdbfc0fb882a01b6523e2008eecef7ae","sha256":"901ece76126ea482df63979e3f878486644d40717e97a8702e0f88ef4f8a985f","sha512":"41c3b3b8e7d30964bd3e93f3b1066c966c54df1b79a3f9f144a4495849bad7f6ab29c1350c2adf0fe50a1fb1bdd8295a784241ebb3f2c2fd50052948157cebe7","ssdeep":"3072:nGz4P7THK4y4Wy3FGfI/I/hkzvT2RtsXX734Ti3MoTqQrH1qb:nGzi743KFGfIg59RCb34TjQzc","tlshash":"412402345b09e9fc460cac06cc476bca4341d7ea55ad03859b77d246b2eeb72e688d33","first_seen":"2026-03-07T02:35:44.263472Z","last_seen":"2026-03-07T06:33:17.649573Z","times_seen":2,"resource_available":false,"data":null}},"time_used":669,"timings":{"blocked":53,"dns":3,"connect":4,"send":0,"wait":552,"receive":7,"ssl":42},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"11221.xn--gps-8y0gm25n.xn--55qx5d/d/11221?_t=1766049818","fqdn":"11221.xn--gps-8y0gm25n.xn--55qx5d","domain":"11221.xn--gps-8y0gm25n.xn--55qx5d","tld":""},"ip":{"addr":"27.155.113.137","port":443,"asn":133774,"as":"Fuzhou","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wsu.rqtqsp9.lol/cn/home/web/","date":"2026-03-07T06:32:54.910Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.xn--gps-8y0gm25n.xn--55qx5d","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 07 Jan 2026 14:22:13 GMT","end":"Tue, 07 Apr 2026 14:22:12 GMT"},"fingerprint":{"sha1":"01:F6:A8:64:D2:BF:90:49:78:62:32:E0:6F:0D:E9:33:66:39:30:EF","sha256":"5D:E4:BC:B9:AE:B1:76:CF:D1:39:B2:34:04:CA:CA:2F:97:94:D8:E3:B1:2D:D1:41:C3:4B:27:0D:1C:BF:03:26"}}},"request":{"raw":"GET /d/11221?_t=1766049818 HTTP/1.1\r\nHost: 11221.xn--gps-8y0gm25n.xn--55qx5d\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wsu.rqtqsp9.lol/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\ndate: Sat, 07 Mar 2026 06:32:55 GMT\r\ncontent-type: text/html\r\ncontent-length: 145\r\nlocation: https://fsffbhd.4000522777.xn--fiqs8s/9acf3f15aa2f10616fcec1e9f8124088.gif?_t=1766049818\r\ncache-control: public, max-age=900\r\nexpires: Saturday, 07-Mar-2026 06:32:55 GMT\r\nstrict-transport-security: max-age=31536000\r\nx-via-jsl: e7be9b3,-\r\nset-cookie: __jsluid_s=5369757186d6d7dee8530da5f79ef05d; max-age=31536000; path=/; HttpOnly; SameSite=None; secure\r\nx-cache: miss\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":596432,"size_decoded":0,"mime_type":"image/webp","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T15:49:33.06692Z","times_seen":13337345,"resource_available":true,"data":null}},"time_used":2148,"timings":{"blocked":896,"dns":327,"connect":292,"send":0,"wait":335,"receive":0,"ssl":295},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.alicdn.com/imgextra/i4/2207246784654/O1CN014PyHeq1kFaOP6Xhwn_!!2207246784654.gif","fqdn":"img.alicdn.com","domain":"alicdn.com","tld":"com"},"ip":{"addr":"47.246.44.178","port":443,"asn":24429,"as":"Zhejiang Taobao Network Co.,Ltd","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wsu.rqtqsp9.lol/cn/home/web/","date":"2026-03-07T06:32:56.647Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tbcdn.cn","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Fri, 28 Nov 2025 03:07:13 GMT","end":"Sat, 18 Jul 2026 09:41:04 GMT"},"fingerprint":{"sha1":"01:40:62:EF:8C:E5:C1:8A:19:4C:8D:B6:F5:C2:24:7F:DC:C0:9C:8A","sha256":"60:3C:41:A0:78:62:E6:5E:82:F0:FA:CF:5C:C9:D3:22:E4:64:EE:1A:EE:C7:CC:BA:DD:25:08:90:6F:CC:C4:F2"}}},"request":{"raw":"GET /imgextra/i4/2207246784654/O1CN014PyHeq1kFaOP6Xhwn_!!2207246784654.gif HTTP/1.1\r\nHost: img.alicdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wsu.rqtqsp9.lol/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: Tengine\r\ncontent-type: image/gif\r\ncontent-length: 292628\r\ndate: Tue, 11 Nov 2025 08:54:59 GMT\r\npicasso-ret-code: SUCCESS\r\npicasso-cache-info: L3-HIT\r\nrequest-time: 0.001\r\ntraceid: 2ff6319517628512988766131e\r\nx-powered-by: Picasso\r\npicasso-image-type: normal\r\npicasso-fmt: gif2avif\r\ncache-control: max-age=31536000\r\nvia: ens-cache6.l2de3[0,0,200-0,H], ens-cache5.l2de3[0,0], ens-cache20.se2[0,0,200-0,H], ens-cache8.se2[2,0]\r\naccess-control-allow-origin: *\r\nage: 10013877\r\nali-swift-global-savetime: 1762851299\r\nx-cache: HIT TCP_MEM_HIT dirn:-2:-2\r\nx-swift-savetime: Tue, 11 Nov 2025 09:03:40 GMT\r\nx-swift-cachetime: 31535479\r\nback_uri: /imgextra/i4/2207246784654/O1CN014PyHeq1kFaOP6Xhwn_!!2207246784654.gif_.avif\r\nvary: Accept\r\ns-rt: 2\r\ntiming-allow-origin: *\r\neagleid: 2ff62c9c17728651766364397e\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Tengine","description":"Tengine is a web server which is based on the Nginx HTTP server.","website":"https://tengine.taobao.org","common_platform_enumeration":"","icon":"Tengine.png","categories":["Web servers"]}],"data":{"size":292628,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 960 x 120","md5":"3a29654deae45805d8794954abbb5044","sha1":"42691fc8287fde23d6f03fb34434deabb343df14","sha256":"cc2627b8bf79a940675f68df3fcdb91bf14a94b98c1938dd334c2bfc62538bb3","sha512":"b272db82b275b8f2f0fe414b1f339432bc2663520931f602714e2ede08e8b655f766060cff98dda94f176180b3bcdc53a6e382c4faa10ce67ca13e8008f65353","ssdeep":"6144:Nq0IoTY/D/9IDmn8IDVS+jIDmn0JVr3AW9DuCDP:LTcNl5H03QuDuCDP","tlshash":"3c541216e3668b1f117098c1a1f16d7efaedaa1736f5aef1450c4c42053f9e8a339c62","first_seen":"2025-11-09T02:30:37.967304Z","last_seen":"2026-04-04T15:25:57.340317Z","times_seen":7807,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":10,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wsu.rqtqsp9.lol/cn/home/web/static/js/home.js","fqdn":"wsu.rqtqsp9.lol","domain":"rqtqsp9.lol","tld":"lol"},"ip":{"addr":"142.171.24.239","port":443,"asn":35916,"as":"MULTA-ASN1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://wsu.rqtqsp9.lol/cn/home/web/index.php/vod/play/id/975713/sid/1/nid/1.html","date":"2026-03-07T06:32:49.445Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.rqtqsp9.lol","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Feb 2026 04:57:07 GMT","end":"Sat, 09 May 2026 04:57:06 GMT"},"fingerprint":{"sha1":"CA:AE:D0:F4:85:B9:CD:C6:DD:C1:BA:BB:34:68:B2:F8:74:CB:0A:8B","sha256":"B8:18:09:A9:23:92:E8:BB:44:F2:8C:F5:5D:FC:3A:10:C5:F7:FA:7E:49:AC:0C:C1:07:98:8E:56:85:C3:15:7D"}}},"request":{"raw":"GET /cn/home/web/static/js/home.js HTTP/1.1\r\nHost: wsu.rqtqsp9.lol\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wsu.rqtqsp9.lol/cn/home/web/index.php/vod/play/id/975713/sid/1/nid/1.html\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: https://www.xzylm.com\r\ncontent-type: application/javascript\r\ncontent-length: 36897\r\nlast-modified: Thu, 27 Mar 2025 13:21:20 GMT\r\nvary: Accept-Encoding\r\ncache-control: public, max-age=2592000\r\naccept-ranges: bytes\r\nvia: http/1.1 traffic_server (https://www.xzylm.com [cRs f ])\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":36897,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (2677)","md5":"5d23e8ddd7a43f468e387306bcf92221","sha1":"96726ef7e6e3b6703d2663c2bc5755acad948c4d","sha256":"5b3260a226d13b437b3222f7a1e2f7d2b677391c9677f54793b651f42c90a499","sha512":"a2acaa04d165ef65edcd1ebe80586bfc0dad7f428d71e4b40082c61fbdf72ebd9f9cc859a1e79e44b318809da4dfc46e76fd6fcc103b0809741cb106e5ac81fe","ssdeep":"768:hRzcTTu8ehbZLbhpa6aDb7z9SsbhkeuLr9GiFIw4TQvZ:hRoXdeC6lqihZ","tlshash":"a2f2a45dbaf3146050b3317a4fbf5508227a815f590ddd88fe2e01a44fc4a4eba66bbc","first_seen":"2025-05-09T21:00:38.535085Z","last_seen":"2026-04-04T12:57:38.447298Z","times_seen":4592,"resource_available":true,"data":null}},"time_used":621,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":569,"receive":52,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wsu.rqtqsp9.lol/favicon.ico","fqdn":"wsu.rqtqsp9.lol","domain":"rqtqsp9.lol","tld":"lol"},"ip":{"addr":"142.171.24.239","port":443,"asn":35916,"as":"MULTA-ASN1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wsu.rqtqsp9.lol/cn/home/web/index.php/vod/play/id/975713/sid/1/nid/1.html","date":"2026-03-07T06:32:50.574Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.rqtqsp9.lol","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Feb 2026 04:57:07 GMT","end":"Sat, 09 May 2026 04:57:06 GMT"},"fingerprint":{"sha1":"CA:AE:D0:F4:85:B9:CD:C6:DD:C1:BA:BB:34:68:B2:F8:74:CB:0A:8B","sha256":"B8:18:09:A9:23:92:E8:BB:44:F2:8C:F5:5D:FC:3A:10:C5:F7:FA:7E:49:AC:0C:C1:07:98:8E:56:85:C3:15:7D"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: wsu.rqtqsp9.lol\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wsu.rqtqsp9.lol/cn/home/web/index.php/vod/play/id/975713/sid/1/nid/1.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: https://www.xzylm.com\r\ncontent-type: image/x-icon\r\ncontent-length: 38078\r\nlast-modified: Sat, 23 Jan 2021 07:43:02 GMT\r\naccept-ranges: bytes\r\nvia: http/1.1 traffic_server (https://www.xzylm.com [cRs f ])\r\ncache-control: public, max-age=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":38078,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 96x96, 32 bits/pixel","md5":"98cbc70772dd8c7683f544e193cc16c7","sha1":"6eefc595a21d7456a64393e3f5a90eeda6582689","sha256":"20847268b764f52773014f7f48d143c40cd984a6c523788b7e8fc5c7d7762431","sha512":"e99acadb27c7f851528b7ead0662fb2d39955d6a276f02bed4f19a3aa77a683953134d1add9a3e63bbf7534bdeb3f9472d8fbe10096bf477f2b90b8f1bfb5433","ssdeep":"192:iQlym4FXdmvV+b+UlYrwCpopyHyTJFJHiJl/oetA:iCx4zOopzJjHec","tlshash":"3e03e067bed0b3f6e5a6c8f0e54981fb84036c065b805c97938f7d6fb0b132866d1a58","first_seen":"2025-07-23T01:20:51.047244Z","last_seen":"2026-03-15T14:56:28.28702Z","times_seen":243,"resource_available":false,"data":null}},"time_used":162,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":156,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wsu.rqtqsp9.lol/abc/data_d52ebc.json","fqdn":"wsu.rqtqsp9.lol","domain":"rqtqsp9.lol","tld":"lol"},"ip":{"addr":"142.171.24.239","port":443,"asn":35916,"as":"MULTA-ASN1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://wsu.rqtqsp9.lol/cn/home/web/","date":"2026-03-07T06:32:53.916Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.rqtqsp9.lol","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Feb 2026 04:57:07 GMT","end":"Sat, 09 May 2026 04:57:06 GMT"},"fingerprint":{"sha1":"CA:AE:D0:F4:85:B9:CD:C6:DD:C1:BA:BB:34:68:B2:F8:74:CB:0A:8B","sha256":"B8:18:09:A9:23:92:E8:BB:44:F2:8C:F5:5D:FC:3A:10:C5:F7:FA:7E:49:AC:0C:C1:07:98:8E:56:85:C3:15:7D"}}},"request":{"raw":"GET /abc/data_d52ebc.json HTTP/1.1\r\nHost: wsu.rqtqsp9.lol\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://wsu.rqtqsp9.lol/cn/home/web/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: https://www.xzylm.com\r\ndate: Sat, 07 Mar 2026 06:33:02 GMT\r\ncontent-type: application/json; charset=utf-8\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=300\r\nage: 0\r\nvia: http/1.1 traffic_server (https://www.xzylm.com [cSsSfU])\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":9708,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"ef8f567d28fedcbdd737060221a5b52c","sha1":"3bde400a63bc48a2fd2a108b6871d14e01c83df6","sha256":"5ba0a51e78e4f2c8dfa5def70a86dd49ad28b3ef20435730040647f9fceaddd7","sha512":"626930d0ed82bb2171becea146d58f613460b8db170ad6794b2553275d00e7ffb7b7a56dfb637331ced4af0b2b72cbd754bd232534550fd78e273a7c52bac0ba","ssdeep":"96:fFKqW7S7oVcvXcv0m0hffPOcPFPXTPXXWGHOQjQvMI1Mm7hhMqfzQOdIQZvdkmwf:f47Lc/c8Jf7ztNEvn8OfQrwlSfvj4Y","tlshash":"72126bb737f9697cf6b452c55b0a7f69578d3027884c938727cdec3484b81aa620b463","first_seen":"2026-03-07T05:23:33.194657Z","last_seen":"2026-03-07T08:50:55.30576Z","times_seen":17,"resource_available":false,"data":null}},"time_used":160,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":160,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.alicdn.com/imgextra/i4/4183327079/O1CN015le7R022AEsJ5jGju_!!4183327079.gif","fqdn":"img.alicdn.com","domain":"alicdn.com","tld":"com"},"ip":{"addr":"47.246.44.178","port":443,"asn":24429,"as":"Zhejiang Taobao Network Co.,Ltd","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wsu.rqtqsp9.lol/cn/home/web/","date":"2026-03-07T06:32:54.970Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tbcdn.cn","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Fri, 28 Nov 2025 03:07:13 GMT","end":"Sat, 18 Jul 2026 09:41:04 GMT"},"fingerprint":{"sha1":"01:40:62:EF:8C:E5:C1:8A:19:4C:8D:B6:F5:C2:24:7F:DC:C0:9C:8A","sha256":"60:3C:41:A0:78:62:E6:5E:82:F0:FA:CF:5C:C9:D3:22:E4:64:EE:1A:EE:C7:CC:BA:DD:25:08:90:6F:CC:C4:F2"}}},"request":{"raw":"GET /imgextra/i4/4183327079/O1CN015le7R022AEsJ5jGju_!!4183327079.gif HTTP/1.1\r\nHost: img.alicdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wsu.rqtqsp9.lol/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: Tengine\r\ncontent-type: image/gif\r\ncontent-length: 442163\r\ndate: Tue, 03 Mar 2026 08:23:21 GMT\r\npicasso-ret-code: SUCCESS\r\npicasso-cache-info: L3-HIT\r\nrequest-time: 0.002\r\ntraceid: 2ff6309f17725262013815622e\r\nx-powered-by: Picasso\r\npicasso-image-type: normal\r\npicasso-fmt: gif2avif\r\ncache-control: max-age=31536000\r\nvia: ens-cache1.l2de4[0,0,200-0,H], ens-cache37.l2de4[1,0], ens-cache12.se2[0,0,200-0,H], ens-cache8.se2[2,0]\r\naccess-control-allow-origin: *\r\nage: 338974\r\nali-swift-global-savetime: 1772526201\r\nx-cache: HIT TCP_MEM_HIT dirn:-2:-2\r\nx-swift-savetime: Tue, 03 Mar 2026 08:32:25 GMT\r\nx-swift-cachetime: 31535456\r\nback_uri: /imgextra/i4/4183327079/O1CN015le7R022AEsJ5jGju_!!4183327079.gif_.avif\r\nvary: Accept\r\ns-rt: 2\r\ntiming-allow-origin: *\r\neagleid: 2ff62c9c17728651750373099e\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Tengine","description":"Tengine is a web server which is based on the Nginx HTTP server.","website":"https://tengine.taobao.org","common_platform_enumeration":"","icon":"Tengine.png","categories":["Web servers"]}],"data":{"size":442163,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 960 x 120","md5":"a959dff57b5058e20b52d9eee9856451","sha1":"f429b441579c13a080de49602a836dc091809ed6","sha256":"b55482457dcd5b1a75ccd8af9902c9d9ccf11451e79300f43b4bef9a94260474","sha512":"cb38c08e2b12d580f0a3425f51b2d1af7914d8914881fd188915ad897d7d150000c7c807edf0ee7c4e003333ae6491a1693f369c2932d220549d896a00154db5","ssdeep":"12288:MbOF/O5B0GXiLvxLv9Qu2R3J0rKuDmQvmQP8AtpW6:sb0xdQJ0zdv4sW6","tlshash":"6c9423bb6dfb9054a8130fa829e7061ccb80de8446ec2a79a9571ff7189872cbd1c855","first_seen":"2026-03-07T00:44:39.681251Z","last_seen":"2026-04-04T15:25:57.392955Z","times_seen":1787,"resource_available":false,"data":null}},"time_used":154,"timings":{"blocked":-1,"dns":40,"connect":7,"send":0,"wait":13,"receive":42,"ssl":46},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wsu.rqtqsp9.lol/cn/home/web/template/90sdyy_dc_pc/asset/css/style.css","fqdn":"wsu.rqtqsp9.lol","domain":"rqtqsp9.lol","tld":"lol"},"ip":{"addr":"142.171.24.239","port":443,"asn":35916,"as":"MULTA-ASN1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://wsu.rqtqsp9.lol/cn/home/web/index.php/vod/play/id/975713/sid/1/nid/1.html","date":"2026-03-07T06:32:49.433Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.rqtqsp9.lol","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Feb 2026 04:57:07 GMT","end":"Sat, 09 May 2026 04:57:06 GMT"},"fingerprint":{"sha1":"CA:AE:D0:F4:85:B9:CD:C6:DD:C1:BA:BB:34:68:B2:F8:74:CB:0A:8B","sha256":"B8:18:09:A9:23:92:E8:BB:44:F2:8C:F5:5D:FC:3A:10:C5:F7:FA:7E:49:AC:0C:C1:07:98:8E:56:85:C3:15:7D"}}},"request":{"raw":"GET /cn/home/web/template/90sdyy_dc_pc/asset/css/style.css HTTP/1.1\r\nHost: wsu.rqtqsp9.lol\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wsu.rqtqsp9.lol/cn/home/web/index.php/vod/play/id/975713/sid/1/nid/1.html\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: https://www.xzylm.com\r\ncontent-type: text/css\r\ncontent-length: 51677\r\nlast-modified: Fri, 12 Jul 2019 09:12:22 GMT\r\nvary: Accept-Encoding\r\ncache-control: public, max-age=2592000\r\naccept-ranges: bytes\r\nvia: http/1.1 traffic_server (https://www.xzylm.com [cHs f ])\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":51677,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (5730)","md5":"a019afdba3b04de1901d7d7a7ef0d5a1","sha1":"e2afe6bb226e47cbd1e31fff910ffd2d405e77c3","sha256":"c19661c0caf553538f009b4909224af8783cce012aad0db57ead06772ede55ac","sha512":"75efc845d4e951192be9f0dfd0a9dc258d97e0455591c6c9cf1274158a33f3722faf29f90d533c4ca822d240e20452b69a72df0011ec2229d440150ac7906bb1","ssdeep":"1536:UkRGo0TX3vNwX3x+JwGak2soC3fmcbLul/60nLCb1fIQxj98w6QH+qGQwwa7gGZt:fRiTX3vNwX3x+JwGak2soC3fmcbLul/F","tlshash":"043376ddaa641c48673d42dbae6937e94a2810597f1fce9ee1933e34c27688010f3d96","first_seen":"2025-07-23T01:20:51.064891Z","last_seen":"2026-03-15T14:56:28.274392Z","times_seen":247,"resource_available":false,"data":null}},"time_used":705,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":654,"receive":51,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wsu.rqtqsp9.lol/cn/home/web/template/90sdyy_dc_pc/asset/css/golds.css","fqdn":"wsu.rqtqsp9.lol","domain":"rqtqsp9.lol","tld":"lol"},"ip":{"addr":"142.171.24.239","port":443,"asn":35916,"as":"MULTA-ASN1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://wsu.rqtqsp9.lol/cn/home/web/index.php/vod/play/id/975713/sid/1/nid/1.html","date":"2026-03-07T06:32:49.437Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.rqtqsp9.lol","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Feb 2026 04:57:07 GMT","end":"Sat, 09 May 2026 04:57:06 GMT"},"fingerprint":{"sha1":"CA:AE:D0:F4:85:B9:CD:C6:DD:C1:BA:BB:34:68:B2:F8:74:CB:0A:8B","sha256":"B8:18:09:A9:23:92:E8:BB:44:F2:8C:F5:5D:FC:3A:10:C5:F7:FA:7E:49:AC:0C:C1:07:98:8E:56:85:C3:15:7D"}}},"request":{"raw":"GET /cn/home/web/template/90sdyy_dc_pc/asset/css/golds.css HTTP/1.1\r\nHost: wsu.rqtqsp9.lol\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wsu.rqtqsp9.lol/cn/home/web/index.php/vod/play/id/975713/sid/1/nid/1.html\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: https://www.xzylm.com\r\ncontent-type: text/css\r\ncontent-length: 1803\r\nlast-modified: Sat, 08 Dec 2018 15:18:58 GMT\r\nvary: Accept-Encoding\r\ncache-control: public, max-age=2592000\r\naccept-ranges: bytes\r\nvia: http/1.1 traffic_server (https://www.xzylm.com [cHs f ])\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1803,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (1803), with no line terminators","md5":"0e90b7ac6e9d49983c5086ac5b63c825","sha1":"039e0949f260bfb54911e1ec3e91f48341da95be","sha256":"b0824ef75408bab5e1ddc54ed84b41c55ecc1e99c2d593e783d8f65554c87c1a","sha512":"351a3739fafc28ffc83258a1bd4025a785d1ba34a9d392167922da0174e5e0bf55242796af15530e4cea4fc619fed7303daadab1c313ec39ae563d345dacb4c6","ssdeep":"","tlshash":"06313ea9f8ca1c0f3b1fc56e7c51f5b4842f52804a488b78ad373374e2324d5355326a","first_seen":"2024-11-30T20:52:31.737717Z","last_seen":"2026-03-15T14:56:28.248734Z","times_seen":397,"resource_available":false,"data":null}},"time_used":652,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":652,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fdhdfgfghfdgdhfgdghfdgfg.zhuanshutupian458.com/storage/assets/img_960f3a1202.gif","fqdn":"fdhdfgfghfdgdhfgdghfdgfg.zhuanshutupian458.com","domain":"zhuanshutupian458.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wsu.rqtqsp9.lol/cn/home/web/","date":"2026-03-07T06:32:54.939Z","timestamp":0,"http_version":"","security_state":"broken","security_info":null,"request":{"raw":"GET /storage/assets/img_960f3a1202.gif HTTP/1.1\r\nHost: fdhdfgfghfdgdhfgdghfdgfg.zhuanshutupian458.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wsu.rqtqsp9.lol/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T15:49:33.06692Z","times_seen":13337345,"resource_available":true,"data":null}},"time_used":362,"timings":{"blocked":0,"dns":1,"connect":158,"send":0,"wait":0,"receive":0,"ssl":162},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pic.sex8sex844.com/20260304/hC4fgPcr/1.jpg","fqdn":"pic.sex8sex844.com","domain":"sex8sex844.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wsu.rqtqsp9.lol/cn/home/web/","date":"2026-03-07T06:32:54.046Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sex8sex844.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 12 Jan 2026 15:46:46 GMT","end":"Sun, 12 Apr 2026 16:37:24 GMT"},"fingerprint":{"sha1":"CA:21:68:94:80:0A:96:76:16:85:A4:3D:1E:21:00:EF:F3:79:F9:FC","sha256":"62:D4:A3:B0:8E:B2:A7:89:1A:51:D0:7A:FA:35:60:2A:4B:8D:42:3D:01:6C:01:6D:15:40:7C:56:4B:DB:5A:6F"}}},"request":{"raw":"GET /20260304/hC4fgPcr/1.jpg HTTP/1.1\r\nHost: pic.sex8sex844.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wsu.rqtqsp9.lol/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 07 Mar 2026 06:32:54 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 9530\r\nserver: cloudflare\r\nlast-modified: Thu, 05 Mar 2026 04:10:07 GMT\r\ncontent-disposition: attachment; filename=\"1.jpg\"\r\netag: \"69a9021f-253a\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: X-Requested-With\r\naccess-control-allow-methods: POST, GET, OPTIONS\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uu6VRFicQY04%2BphVmlNBudrJZEsZst9e%2BYfbDpA%2B%2BCHy7sNvq0QLlBlQOOxGyxHJAbcjxpj9sGyo4RbaCiz8gcpaoUe0VaG%2BLnWtAakoO3OKog%3D%3D\"}]}\r\ncf-ray: 9d8790c9c93323eb-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9530,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, comment: \"Lavc58.39.100\", baseline, precision 8, 320x180, components 3","md5":"3e2d707a26eb0019619777ab7ce2dc7e","sha1":"19978bd04c4862c1281e0027a12004dcc12f8ce4","sha256":"f61490800b2acce6d43c1cef2cc0dbf1728073b99320784f8334021a38bb773c","sha512":"094e320d592dc146553e7a6cdba24c31dc3c9c2ee350968b6264568352b3c824c52040d61dc730ec7aae76bc43ef76a98102a1f3a97e42f9a290f9545b16c158","ssdeep":"192:72d0zR01Pnldk5EQtSqQThAg8xf06YqT0uYyiyKO/1UKadqAS6:7K4Oyhgyr0PytKo1tK","tlshash":"fb12af80e7abc5a7c36466b11e4172d90ff0a1531d93cfb1e5d2a1bd271b129bcb5213","first_seen":"2026-03-07T02:35:44.281304Z","last_seen":"2026-03-07T06:33:17.655121Z","times_seen":2,"resource_available":false,"data":null}},"time_used":582,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":581,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wsu.rqtqsp9.lol/cn/home/web/index.php/ajax/hits?mid=1\u0026id=\u0026type=update","fqdn":"wsu.rqtqsp9.lol","domain":"rqtqsp9.lol","tld":"lol"},"ip":{"addr":"142.171.24.239","port":443,"asn":35916,"as":"MULTA-ASN1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://wsu.rqtqsp9.lol/cn/home/web/index.php/vod/play/id/975713/sid/1/nid/1.html","date":"2026-03-07T06:32:50.346Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.rqtqsp9.lol","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Feb 2026 04:57:07 GMT","end":"Sat, 09 May 2026 04:57:06 GMT"},"fingerprint":{"sha1":"CA:AE:D0:F4:85:B9:CD:C6:DD:C1:BA:BB:34:68:B2:F8:74:CB:0A:8B","sha256":"B8:18:09:A9:23:92:E8:BB:44:F2:8C:F5:5D:FC:3A:10:C5:F7:FA:7E:49:AC:0C:C1:07:98:8E:56:85:C3:15:7D"}}},"request":{"raw":"GET /cn/home/web/index.php/ajax/hits?mid=1\u0026id=\u0026type=update HTTP/1.1\r\nHost: wsu.rqtqsp9.lol\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Requested-With: XMLHttpRequest\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wsu.rqtqsp9.lol/cn/home/web/index.php/vod/play/id/975713/sid/1/nid/1.html\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: https://www.xzylm.com\r\ndate: Sat, 07 Mar 2026 06:32:58 GMT\r\ncontent-type: application/json; charset=utf-8\r\nvary: Accept-Encoding\r\nx-frame-options: Deny\r\ncontent-encoding: gzip\r\nage: 0\r\nvia: http/1.1 traffic_server (https://www.xzylm.com [c sSf ])\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":34,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"400d8f13c402ed6e12384a9a8fb3f77e","sha1":"02cc03f663acd6e77a4535cbc8e0f92fce4f1bae","sha256":"2286b9108b57a64bc393bcb859bc5922007acf01ed9833c24414a05abd89290e","sha512":"f570fc84862b7732a6b1cd43ad07fc10e7195f36a0f3a6ee503ecca484a2b65b29c809ae6df59280131e11057fca53c3fdba267c0e59108f8ad92a9d66e19912","ssdeep":"","tlshash":"938004c1341d41434415100c553f41d540557454410007041c5c1331044c5c44005010","first_seen":"2024-01-22T03:09:01Z","last_seen":"2026-03-14T15:42:54.389658Z","times_seen":71,"resource_available":false,"data":null}},"time_used":219,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":219,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"d3ccefxs96519j.cloudfront.net/MGM/980x120.gif","fqdn":"d3ccefxs96519j.cloudfront.net","domain":"d3ccefxs96519j.cloudfront.net","tld":"cloudfront.net"},"ip":{"addr":"108.157.232.9","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wsu.rqtqsp9.lol/cn/home/web/","date":"2026-03-07T06:32:57.409Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cloudfront.net","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Mon, 05 May 2025 00:00:00 GMT","end":"Thu, 23 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"8F:00:F1:34:A7:1E:27:1C:CF:CD:A6:53:8B:C4:82:B0:68:BC:C8:72","sha256":"60:38:9D:24:9E:41:8F:23:AC:D9:14:5C:A3:47:7E:AF:07:DB:9F:2D:6A:8C:0D:08:E9:24:8A:8E:49:A9:4D:28"}}},"request":{"raw":"GET /MGM/980x120.gif HTTP/1.1\r\nHost: d3ccefxs96519j.cloudfront.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wsu.rqtqsp9.lol/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/gif\r\ncontent-length: 95663\r\nlast-modified: Fri, 08 Aug 2025 06:03:40 GMT\r\nx-amz-server-side-encryption: AES256\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\ndate: Fri, 06 Mar 2026 01:37:40 GMT\r\netag: \"5a8005b75112b36916f21318ae457043\"\r\nvary: accept-encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 4a97b39292c0cc77b857d41135aea32a.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN56-P2\r\nx-amz-cf-id: cUYp3uNjiuc3qRcqFXXFYlrT-bZISFKgVoianKaJavW9IV_T5_OLxQ==\r\nage: 104118\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":95663,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 980 x 120","md5":"5a8005b75112b36916f21318ae457043","sha1":"180f1ab095baa331066bf1708261d848d55789bf","sha256":"21b3d38760be3d6aaa1088bd68000cf9a0bd24b91baa7e4a93647a97f4f07e7d","sha512":"64180ea90a0dfec12e275bf1f6b3674bfcb69393177e726cbd5c6b03bc091acb7ad77429f6154f96e6071db087131f467c507c1fd95224faac5660fa71635d45","ssdeep":"1536:E2YoK+ONw4XmLHmnjNZ3CTtyO+cL2g1nB+VFS0O6QXkHv288jVG187LWL:77zONw4XqGnB1CxyO+c6cB0O6S6v288s","tlshash":"6c931279b8e135395715549e88ea6b0229ec29a1dff8d5e0fd3ffbe012400fba084752","first_seen":"2025-11-17T16:26:00.337909Z","last_seen":"2026-04-04T15:25:57.321922Z","times_seen":6317,"resource_available":false,"data":null}},"time_used":163,"timings":{"blocked":47,"dns":50,"connect":10,"send":0,"wait":9,"receive":12,"ssl":32},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wsu.rqtqsp9.lol/cn/home/web/template/90sdyy_dc_pc/asset/js/jquery.js?v=","fqdn":"wsu.rqtqsp9.lol","domain":"rqtqsp9.lol","tld":"lol"},"ip":{"addr":"142.171.24.239","port":443,"asn":35916,"as":"MULTA-ASN1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://wsu.rqtqsp9.lol/cn/home/web/index.php/vod/play/id/975713/sid/1/nid/1.html","date":"2026-03-07T06:32:49.448Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.rqtqsp9.lol","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Feb 2026 04:57:07 GMT","end":"Sat, 09 May 2026 04:57:06 GMT"},"fingerprint":{"sha1":"CA:AE:D0:F4:85:B9:CD:C6:DD:C1:BA:BB:34:68:B2:F8:74:CB:0A:8B","sha256":"B8:18:09:A9:23:92:E8:BB:44:F2:8C:F5:5D:FC:3A:10:C5:F7:FA:7E:49:AC:0C:C1:07:98:8E:56:85:C3:15:7D"}}},"request":{"raw":"GET /cn/home/web/template/90sdyy_dc_pc/asset/js/jquery.js?v= HTTP/1.1\r\nHost: wsu.rqtqsp9.lol\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wsu.rqtqsp9.lol/cn/home/web/index.php/vod/play/id/975713/sid/1/nid/1.html\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: https://www.xzylm.com\r\ncontent-type: application/javascript\r\ncontent-length: 187180\r\nlast-modified: Sat, 08 Dec 2018 15:15:17 GMT\r\nvary: Accept-Encoding\r\ncache-control: public, max-age=2592000\r\naccept-ranges: bytes\r\nvia: http/1.1 traffic_server (https://www.xzylm.com [cHs f ])\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":187180,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"51a2e575444dfd1b46049074e8097ec9","sha1":"ab5cc19ec6273d9247ccd6461577fc0c4e2a539f","sha256":"6ebc65139f53a6bb9f5f16cf8ae6c21865dfb3d5f3f7bf0bbacb8d8d502f8275","sha512":"0b93d6e78d4059a60ab46c121529338bc191eef35cfca051ca82541857db78432598c24c7a7379e1a3abfd7467b027a5c98d27bec66099ad7039a69d541e0e44","ssdeep":"3072:d4J+Z3jL5TCOaLTwkiFdnCVQwda98HryLqRkhOeDRz4Sz:NZzEOAM+zda98HrRRkhnDRz4Sz","tlshash":"0104078df25172a296f330a952bf810a71775896b408d8b4b0a488d57dbcd9c027ff7a","first_seen":"2023-03-12T23:38:28Z","last_seen":"2026-03-15T14:56:28.263609Z","times_seen":403,"resource_available":true,"data":null}},"time_used":831,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":696,"receive":135,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.alicdn.com/imgextra/i2/O1CN01vSQFbP1rGgfuXaTU7_!!2216598935604-1-fleamarket.gif","fqdn":"img.alicdn.com","domain":"alicdn.com","tld":"com"},"ip":{"addr":"47.246.44.178","port":443,"asn":24429,"as":"Zhejiang Taobao Network Co.,Ltd","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wsu.rqtqsp9.lol/cn/home/web/","date":"2026-03-07T06:32:55.004Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tbcdn.cn","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Fri, 28 Nov 2025 03:07:13 GMT","end":"Sat, 18 Jul 2026 09:41:04 GMT"},"fingerprint":{"sha1":"01:40:62:EF:8C:E5:C1:8A:19:4C:8D:B6:F5:C2:24:7F:DC:C0:9C:8A","sha256":"60:3C:41:A0:78:62:E6:5E:82:F0:FA:CF:5C:C9:D3:22:E4:64:EE:1A:EE:C7:CC:BA:DD:25:08:90:6F:CC:C4:F2"}}},"request":{"raw":"GET /imgextra/i2/O1CN01vSQFbP1rGgfuXaTU7_!!2216598935604-1-fleamarket.gif HTTP/1.1\r\nHost: img.alicdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wsu.rqtqsp9.lol/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: Tengine\r\ncontent-type: image/gif\r\ncontent-length: 303863\r\ndate: Tue, 24 Feb 2026 09:21:40 GMT\r\npicasso-ret-code: SUCCESS\r\npicasso-cache-info: L3-HIT\r\nrequest-time: 0.002\r\ntraceid: 9b66a79b17719248998917462e\r\nx-powered-by: Picasso\r\npicasso-image-type: normal\r\npicasso-fmt: gif2avif\r\ncache-control: max-age=31536000\r\nvia: ens-cache28.l2de4[0,0,200-0,H], ens-cache22.l2de4[4,0], ens-cache3.se2[0,0,200-0,H], ens-cache8.se2[2,0]\r\naccess-control-allow-origin: *\r\nage: 940275\r\nali-swift-global-savetime: 1771924900\r\nx-cache: HIT TCP_MEM_HIT dirn:-2:-2\r\nx-swift-savetime: Tue, 24 Feb 2026 09:25:40 GMT\r\nx-swift-cachetime: 31535760\r\nback_uri: /imgextra/i2/O1CN01vSQFbP1rGgfuXaTU7_!!2216598935604-1-fleamarket.gif_.avif\r\nvary: Accept\r\ns-rt: 2\r\ntiming-allow-origin: *\r\neagleid: 2ff62c9c17728651750673130e\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Tengine","description":"Tengine is a web server which is based on the Nginx HTTP server.","website":"https://tengine.taobao.org","common_platform_enumeration":"","icon":"Tengine.png","categories":["Web servers"]}],"data":{"size":303863,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 960 x 120","md5":"de72cd3f9bb03e02f5ed7c191fc47e25","sha1":"1f1da79e3ea10cc974149b4fd61236d7aaf0cbba","sha256":"88bc662ac1dc810b16d8c81e024975ec22af3497c510036158f5799da1b4b874","sha512":"be2488a9b17fc4ac4ca2e24177ed9bd673b6514929df0344fa626af305073862d30fa0bfcb290f4b09984e51dd7790dc6af53ace8b9e68a936771f982b7d3da7","ssdeep":"6144:0yBudqBvMzajcmhzfOmZIJ6MLkrN78j6Z8BdaAR50OsE8uZr:1B4qBvRjcmhCSI8ZS6CR50OsEhB","tlshash":"0254232e919b11304cd6a6383d7e66f700f6dc7509a143125dfba6cda4979bc2ce8ca1","first_seen":"2026-02-24T09:59:59.817588Z","last_seen":"2026-03-15T07:53:53.563962Z","times_seen":1005,"resource_available":false,"data":null}},"time_used":143,"timings":{"blocked":-1,"dns":20,"connect":21,"send":0,"wait":28,"receive":7,"ssl":64},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wsu.rqtqsp9.lol/cn/home/web/template/90sdyy_dc_pc/asset/img/logo_golden.png","fqdn":"wsu.rqtqsp9.lol","domain":"rqtqsp9.lol","tld":"lol"},"ip":{"addr":"142.171.24.239","port":443,"asn":35916,"as":"MULTA-ASN1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wsu.rqtqsp9.lol/cn/home/web/index.php/vod/play/id/975713/sid/1/nid/1.html","date":"2026-03-07T06:32:49.447Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.rqtqsp9.lol","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Feb 2026 04:57:07 GMT","end":"Sat, 09 May 2026 04:57:06 GMT"},"fingerprint":{"sha1":"CA:AE:D0:F4:85:B9:CD:C6:DD:C1:BA:BB:34:68:B2:F8:74:CB:0A:8B","sha256":"B8:18:09:A9:23:92:E8:BB:44:F2:8C:F5:5D:FC:3A:10:C5:F7:FA:7E:49:AC:0C:C1:07:98:8E:56:85:C3:15:7D"}}},"request":{"raw":"GET /cn/home/web/template/90sdyy_dc_pc/asset/img/logo_golden.png HTTP/1.1\r\nHost: wsu.rqtqsp9.lol\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wsu.rqtqsp9.lol/cn/home/web/index.php/vod/play/id/975713/sid/1/nid/1.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: https://www.xzylm.com\r\ncontent-type: image/png\r\ncontent-length: 6687\r\nlast-modified: Fri, 12 Jul 2019 07:25:54 GMT\r\nvary: Accept-Encoding\r\ncache-control: public, max-age=2592000\r\naccept-ranges: bytes\r\nvia: http/1.1 traffic_server (https://www.xzylm.com [cRs f ])\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":6687,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 335 x 109, 8-bit/color RGBA, non-interlaced","md5":"b0a3e4fe894a0101b02b95a6d80a73ab","sha1":"f144267145d5a87f8a8dd815adf021bd42a3c955","sha256":"50d0c620ef6178b6008ddf8331b5f04c2e70cbbdbfe4782ffdb7b5ca69f4006f","sha512":"2ba3c961551704738a8e0ab4f3f118c2feab218c488e07abd8157ec267a978499773ef6237046235b933f074132c9276750a86e2b2b0ba37636db6cc631042c3","ssdeep":"192:R44HWMXtmETiUg8jds3f1K7Bv3ksr7JTyi8apuy2k:RsctmE+MstUvksrkw","tlshash":"f2d18d1dff048cc6d689f54129ec9217b8f227e8b1e59768908b80e36d333e5a0876d3","first_seen":"2025-07-23T01:20:51.058559Z","last_seen":"2026-03-15T14:56:28.239197Z","times_seen":240,"resource_available":false,"data":null}},"time_used":621,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":621,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img1.ah7907.com/tyctyc388-960x120.gif","fqdn":"img1.ah7907.com","domain":"ah7907.com","tld":"com"},"ip":{"addr":"47.242.20.187","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wsu.rqtqsp9.lol/cn/home/web/","date":"2026-03-07T06:32:55.014Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img1.ah7907.com","organization":""},"issuer":{"commonName":"Certum DV TLS G2 R39 CA","organization":"Asseco Data Systems S.A."},"validity":{"start":"Thu, 06 Nov 2025 07:27:15 GMT","end":"Sun, 06 Dec 2026 07:27:14 GMT"},"fingerprint":{"sha1":"EE:18:15:48:CE:4E:22:9F:18:59:AB:6E:5E:C0:0D:4E:AF:C2:86:22","sha256":"65:F5:69:07:04:80:B4:E3:E7:D0:C5:50:2E:02:11:1C:02:89:6E:83:40:00:DD:00:37:08:E9:9C:1C:A3:4D:59"}}},"request":{"raw":"GET /tyctyc388-960x120.gif HTTP/1.1\r\nHost: img1.ah7907.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wsu.rqtqsp9.lol/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 307 Temporary Redirect\r\nserver: NgxFence\r\ndate: Sat, 07 Mar 2026 06:32:56 GMT\r\ncontent-type: text/html; charset=utf-8\r\ncontent-length: 0\r\nlocation: https://img.alicdn.com/imgextra/i1/2217565595682/O1CN01JKJBL71rqPYr9sHRK_!!2217565595682.gif\r\nx-cache-status: HIT\r\nstrict-transport-security: max-age=31536000; includeSubdomains; preload\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"307","status_text":"Temporary Redirect","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":71518,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T15:49:33.06692Z","times_seen":13337345,"resource_available":true,"data":null}},"time_used":1497,"timings":{"blocked":-1,"dns":302,"connect":277,"send":0,"wait":616,"receive":0,"ssl":300},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wsu.rqtqsp9.lol/cn/home/web/index.php/comment/ajax?rid=undefined\u0026mid=undefined\u0026page=1","fqdn":"wsu.rqtqsp9.lol","domain":"rqtqsp9.lol","tld":"lol"},"ip":{"addr":"142.171.24.239","port":443,"asn":35916,"as":"MULTA-ASN1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://wsu.rqtqsp9.lol/cn/home/web/index.php/vod/play/id/975713/sid/1/nid/1.html","date":"2026-03-07T06:32:50.343Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.rqtqsp9.lol","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Feb 2026 04:57:07 GMT","end":"Sat, 09 May 2026 04:57:06 GMT"},"fingerprint":{"sha1":"CA:AE:D0:F4:85:B9:CD:C6:DD:C1:BA:BB:34:68:B2:F8:74:CB:0A:8B","sha256":"B8:18:09:A9:23:92:E8:BB:44:F2:8C:F5:5D:FC:3A:10:C5:F7:FA:7E:49:AC:0C:C1:07:98:8E:56:85:C3:15:7D"}}},"request":{"raw":"GET /cn/home/web/index.php/comment/ajax?rid=undefined\u0026mid=undefined\u0026page=1 HTTP/1.1\r\nHost: wsu.rqtqsp9.lol\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Requested-With: XMLHttpRequest\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wsu.rqtqsp9.lol/cn/home/web/index.php/vod/play/id/975713/sid/1/nid/1.html\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\nserver: https://www.xzylm.com\r\ndate: Sat, 07 Mar 2026 06:32:58 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nage: 0\r\nvia: http/1.1 traffic_server (https://www.xzylm.com [c s f ])\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":null,"data":{"size":17703,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"89e6bca383ae3342bcb7a0e819b32960","sha1":"113ab0b9bb6741a5cc25e43dda8fd4dfe2b2798e","sha256":"836833ae7470545a12fd73f0785a9f17c9711b8d30b46aba3bf3c81ead19e4ab","sha512":"b123004ec35dc020e60db609e9a17b00df8079e76989bf7ee36d257be84879983d53c67b13ee0f20c86907e7ea3cade0ef262b49db7598acbb4cd7759f4e0e5c","ssdeep":"192:1uNGtwnLFR45u5ntr9XVNPnZ0wrpcFmCbHfr3MvMNyxe86BWe3raHUu82TAoZou/:1jteFvdv1jofHanTFufft4f","tlshash":"9472835b4ef212171016e57273f13b5ae672d60bc64e8da43d9c3ba0cf80f90568fa99","first_seen":"2026-03-07T02:35:44.279229Z","last_seen":"2026-03-07T06:33:17.658506Z","times_seen":2,"resource_available":false,"data":null}},"time_used":224,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":224,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.alicdn.com/imgextra/i3/2215209493335/O1CN010JTbhN1aVU01WrBDj_!!2215209493335-1-chatting.gif","fqdn":"img.alicdn.com","domain":"alicdn.com","tld":"com"},"ip":{"addr":"47.246.44.178","port":443,"asn":24429,"as":"Zhejiang Taobao Network Co.,Ltd","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wsu.rqtqsp9.lol/cn/home/web/","date":"2026-03-07T06:32:56.162Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tbcdn.cn","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Fri, 28 Nov 2025 03:07:13 GMT","end":"Sat, 18 Jul 2026 09:41:04 GMT"},"fingerprint":{"sha1":"01:40:62:EF:8C:E5:C1:8A:19:4C:8D:B6:F5:C2:24:7F:DC:C0:9C:8A","sha256":"60:3C:41:A0:78:62:E6:5E:82:F0:FA:CF:5C:C9:D3:22:E4:64:EE:1A:EE:C7:CC:BA:DD:25:08:90:6F:CC:C4:F2"}}},"request":{"raw":"GET /imgextra/i3/2215209493335/O1CN010JTbhN1aVU01WrBDj_!!2215209493335-1-chatting.gif HTTP/1.1\r\nHost: img.alicdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wsu.rqtqsp9.lol/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: Tengine\r\ncontent-type: image/gif\r\ncontent-length: 643569\r\ndate: Sun, 25 Jan 2026 16:50:48 GMT\r\npicasso-ret-code: SUCCESS\r\npicasso-cache-info: L3-HIT\r\nrequest-time: 0.002\r\ntraceid: 2ff6309e17693598481316951e\r\nx-powered-by: Picasso\r\npicasso-image-type: normal\r\npicasso-fmt: gif2avif\r\ncache-control: max-age=31536000\r\nvia: ens-cache39.l2de4[0,0,200-0,H], ens-cache18.l2de4[1,0], ens-cache11.se2[0,0,200-0,H], ens-cache8.se2[2,0]\r\naccess-control-allow-origin: *\r\nage: 3505328\r\nali-swift-global-savetime: 1769359848\r\nx-cache: HIT TCP_MEM_HIT dirn:-2:-2\r\nx-swift-savetime: Sun, 25 Jan 2026 16:54:37 GMT\r\nx-swift-cachetime: 31535771\r\nback_uri: /imgextra/i3/2215209493335/O1CN010JTbhN1aVU01WrBDj_!!2215209493335-1-chatting.gif_.avif\r\nvary: Accept\r\ns-rt: 2\r\ntiming-allow-origin: *\r\neagleid: 2ff62c9c17728651761504027e\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Tengine","description":"Tengine is a web server which is based on the Nginx HTTP server.","website":"https://tengine.taobao.org","common_platform_enumeration":"","icon":"Tengine.png","categories":["Web servers"]}],"data":{"size":643569,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 960 x 120","md5":"f5919b3ac13cce9d56f7966003e826d8","sha1":"75c040dace5ddc741ddcbda8e0bc74fcbff417bc","sha256":"739605b51e61972ae4e03385a848c5cc0561d639eadb33e424567f7f3b9d8f88","sha512":"5864eaf234c1b5816f6faeb6ef6f499154110340a9c412a742b35f4304a7cdba4cb88efbe61887c10593e96737a895d6cd466cd8fe990edce43338535123cd17","ssdeep":"12288:E2PPPsqKfJQrQrQrQFUpPnn9uVK49uVK49uVK49uVKZRV7YC:E2PPPJQc9KK49KK49KK49KKZX7H","tlshash":"c2d41338875b6ab15d82fe6c4ce1a0d980f951df53b74669e7c09c30936a31fb382b64","first_seen":"2024-10-04T10:32:36.972611Z","last_seen":"2026-04-04T15:25:57.320242Z","times_seen":8019,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":16,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.alicdn.com/imgextra/i2/2207246784654/O1CN010a6y4d1kFaOOgMqmk_!!2207246784654.gif","fqdn":"img.alicdn.com","domain":"alicdn.com","tld":"com"},"ip":{"addr":"47.246.44.178","port":443,"asn":24429,"as":"Zhejiang Taobao Network Co.,Ltd","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wsu.rqtqsp9.lol/cn/home/web/","date":"2026-03-07T06:32:56.168Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tbcdn.cn","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Fri, 28 Nov 2025 03:07:13 GMT","end":"Sat, 18 Jul 2026 09:41:04 GMT"},"fingerprint":{"sha1":"01:40:62:EF:8C:E5:C1:8A:19:4C:8D:B6:F5:C2:24:7F:DC:C0:9C:8A","sha256":"60:3C:41:A0:78:62:E6:5E:82:F0:FA:CF:5C:C9:D3:22:E4:64:EE:1A:EE:C7:CC:BA:DD:25:08:90:6F:CC:C4:F2"}}},"request":{"raw":"GET /imgextra/i2/2207246784654/O1CN010a6y4d1kFaOOgMqmk_!!2207246784654.gif HTTP/1.1\r\nHost: img.alicdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wsu.rqtqsp9.lol/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: Tengine\r\ncontent-type: image/gif\r\ncontent-length: 44406\r\ndate: Sat, 08 Nov 2025 08:42:46 GMT\r\npicasso-ret-code: SUCCESS\r\npicasso-cache-info: L3-HIT\r\nrequest-time: 0.002\r\ntraceid: a3b55ca117625913666853618e\r\nx-powered-by: Picasso\r\npicasso-image-type: normal\r\npicasso-fmt: gif2avif\r\ncache-control: max-age=31536000\r\nvia: ens-cache2.l2de3[0,0,200-0,H], ens-cache11.l2de3[1,0], ens-cache9.se2[0,0,200-0,H], ens-cache8.se2[2,0]\r\naccess-control-allow-origin: *\r\nage: 10273810\r\nali-swift-global-savetime: 1762591366\r\nx-cache: HIT TCP_MEM_HIT dirn:-2:-2\r\nx-swift-savetime: Sat, 08 Nov 2025 09:25:38 GMT\r\nx-swift-cachetime: 31533428\r\nback_uri: /imgextra/i2/2207246784654/O1CN010a6y4d1kFaOOgMqmk_!!2207246784654.gif_.avif\r\nvary: Accept\r\ns-rt: 2\r\ntiming-allow-origin: *\r\neagleid: 2ff62c9c17728651761574034e\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Tengine","description":"Tengine is a web server which is based on the Nginx HTTP server.","website":"https://tengine.taobao.org","common_platform_enumeration":"","icon":"Tengine.png","categories":["Web servers"]}],"data":{"size":44406,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 960 x 120","md5":"7fe888844a25455b732401ff74cfd8ab","sha1":"8d19e04de42c10ba020a85c53ce0a89e68228df8","sha256":"f85ce364be6d1d2dd090b2fc02ab3e6dc3013b61a85576e4c0eb4ad8fa408e31","sha512":"a046e5c42fbd73895fe7f7add8d2511b9f5aa297d99ec108c8f47cd4546a16af813bfc54314c865b4c13a74c7be17429c341d1ecc327ee344074221732ba2d2e","ssdeep":"768:/6Qbzz7QUHPIskU5/Eg59QCK5Py43ZKFbVeI0D0gwKjewJ+Tsxfz0JWOyndv7mzv:ykQnskU9lXFK5P3ZKFbV10YRKjdfzOgW","tlshash":"3813013d7682d0410e2e367675f0c638fb9ad9dac96d34dbba795528644403c7c0939b","first_seen":"2025-11-09T02:30:37.980535Z","last_seen":"2026-04-04T15:25:57.457665Z","times_seen":7888,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":21,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wsu.rqtqsp9.lol/cn/home/web/template/90sdyy_dc_pc/asset/js/global.js?v=","fqdn":"wsu.rqtqsp9.lol","domain":"rqtqsp9.lol","tld":"lol"},"ip":{"addr":"142.171.24.239","port":443,"asn":35916,"as":"MULTA-ASN1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://wsu.rqtqsp9.lol/cn/home/web/index.php/vod/play/id/975713/sid/1/nid/1.html","date":"2026-03-07T06:32:49.449Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.rqtqsp9.lol","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Feb 2026 04:57:07 GMT","end":"Sat, 09 May 2026 04:57:06 GMT"},"fingerprint":{"sha1":"CA:AE:D0:F4:85:B9:CD:C6:DD:C1:BA:BB:34:68:B2:F8:74:CB:0A:8B","sha256":"B8:18:09:A9:23:92:E8:BB:44:F2:8C:F5:5D:FC:3A:10:C5:F7:FA:7E:49:AC:0C:C1:07:98:8E:56:85:C3:15:7D"}}},"request":{"raw":"GET /cn/home/web/template/90sdyy_dc_pc/asset/js/global.js?v= HTTP/1.1\r\nHost: wsu.rqtqsp9.lol\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wsu.rqtqsp9.lol/cn/home/web/index.php/vod/play/id/975713/sid/1/nid/1.html\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: https://www.xzylm.com\r\ncontent-type: application/javascript\r\ncontent-length: 41189\r\nlast-modified: Sun, 09 Dec 2018 04:49:09 GMT\r\nvary: Accept-Encoding\r\ncache-control: public, max-age=2592000\r\naccept-ranges: bytes\r\nvia: http/1.1 traffic_server (https://www.xzylm.com [cHs f ])\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":41189,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (4059), with CRLF line terminators","md5":"28ea52d14439e5a65651aad04ffdf4c3","sha1":"e6100154bac6261acb4e7f7f14cc38a2ca5d53e4","sha256":"3a7f298306397d1945de1d0730659e75d3041968d6047712fcdffc74efb2b2a9","sha512":"985421e58f0d5d60858f2e234159e4bef969a5760857a4d4bd460f16fa5a8582feaf2e4a2bd56eb63b4fe8620c9b2f62d8d4ff5d7b761dd55d471ddc96d791e0","ssdeep":"768:8wO6yOHHjkKI2JEXFvlWHRJsJ1k5YkkfLp:82j7EWHrVkfLp","tlshash":"e503635cf9952ea1a27b73a78cbb7c19d377047301258750f6bd36816f362889192cbc","first_seen":"2023-03-12T23:38:28Z","last_seen":"2026-03-15T14:56:28.251269Z","times_seen":248,"resource_available":true,"data":null}},"time_used":842,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":830,"receive":12,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wsu.rqtqsp9.lol/cn/home/web/template/90sdyy_dc_pc/asset/css/golds.css","fqdn":"wsu.rqtqsp9.lol","domain":"rqtqsp9.lol","tld":"lol"},"ip":{"addr":"142.171.24.239","port":443,"asn":35916,"as":"MULTA-ASN1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://wsu.rqtqsp9.lol/cn/home/web/","date":"2026-03-07T06:32:53.584Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.rqtqsp9.lol","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Feb 2026 04:57:07 GMT","end":"Sat, 09 May 2026 04:57:06 GMT"},"fingerprint":{"sha1":"CA:AE:D0:F4:85:B9:CD:C6:DD:C1:BA:BB:34:68:B2:F8:74:CB:0A:8B","sha256":"B8:18:09:A9:23:92:E8:BB:44:F2:8C:F5:5D:FC:3A:10:C5:F7:FA:7E:49:AC:0C:C1:07:98:8E:56:85:C3:15:7D"}}},"request":{"raw":"GET /cn/home/web/template/90sdyy_dc_pc/asset/css/golds.css HTTP/1.1\r\nHost: wsu.rqtqsp9.lol\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://wsu.rqtqsp9.lol/cn/home/web/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: https://www.xzylm.com\r\ncontent-type: text/css\r\ncontent-length: 1803\r\nlast-modified: Sat, 08 Dec 2018 15:18:58 GMT\r\nvary: Accept-Encoding\r\ncache-control: public, max-age=2592000\r\naccept-ranges: bytes\r\nvia: http/1.1 traffic_server (https://www.xzylm.com [cRs f ])\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1803,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (1803), with no line terminators","md5":"0e90b7ac6e9d49983c5086ac5b63c825","sha1":"039e0949f260bfb54911e1ec3e91f48341da95be","sha256":"b0824ef75408bab5e1ddc54ed84b41c55ecc1e99c2d593e783d8f65554c87c1a","sha512":"351a3739fafc28ffc83258a1bd4025a785d1ba34a9d392167922da0174e5e0bf55242796af15530e4cea4fc619fed7303daadab1c313ec39ae563d345dacb4c6","ssdeep":"","tlshash":"06313ea9f8ca1c0f3b1fc56e7c51f5b4842f52804a488b78ad373374e2324d5355326a","first_seen":"2024-11-30T20:52:31.737717Z","last_seen":"2026-03-15T14:56:28.248734Z","times_seen":397,"resource_available":false,"data":null}},"time_used":164,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":164,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.alicdn.com/imgextra/i1/4183327079/O1CN018KuqHz22AEs9TacwK_!!4183327079.gif","fqdn":"img.alicdn.com","domain":"alicdn.com","tld":"com"},"ip":{"addr":"47.246.44.178","port":443,"asn":24429,"as":"Zhejiang Taobao Network Co.,Ltd","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wsu.rqtqsp9.lol/cn/home/web/","date":"2026-03-07T06:32:54.896Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tbcdn.cn","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Fri, 28 Nov 2025 03:07:13 GMT","end":"Sat, 18 Jul 2026 09:41:04 GMT"},"fingerprint":{"sha1":"01:40:62:EF:8C:E5:C1:8A:19:4C:8D:B6:F5:C2:24:7F:DC:C0:9C:8A","sha256":"60:3C:41:A0:78:62:E6:5E:82:F0:FA:CF:5C:C9:D3:22:E4:64:EE:1A:EE:C7:CC:BA:DD:25:08:90:6F:CC:C4:F2"}}},"request":{"raw":"GET /imgextra/i1/4183327079/O1CN018KuqHz22AEs9TacwK_!!4183327079.gif HTTP/1.1\r\nHost: img.alicdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wsu.rqtqsp9.lol/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: Tengine\r\ncontent-type: image/gif\r\ncontent-length: 403606\r\ndate: Fri, 13 Feb 2026 05:15:30 GMT\r\npicasso-ret-code: SUCCESS\r\npicasso-cache-info: L3-HIT\r\nrequest-time: 0.001\r\ntraceid: 2ff602a017709597307166529e\r\nx-powered-by: Picasso\r\npicasso-image-type: normal\r\npicasso-fmt: gif2avif\r\ncache-control: max-age=31536000\r\nvia: ens-cache9.l2de4[0,0,200-0,H], ens-cache21.l2de4[1,0], ens-cache13.se2[0,0,200-0,H], ens-cache8.se2[2,0]\r\naccess-control-allow-origin: *\r\nage: 1905445\r\nali-swift-global-savetime: 1770959730\r\nx-cache: HIT TCP_MEM_HIT dirn:-2:-2\r\nx-swift-savetime: Fri, 13 Feb 2026 05:15:46 GMT\r\nx-swift-cachetime: 31535984\r\nback_uri: /imgextra/i1/4183327079/O1CN018KuqHz22AEs9TacwK_!!4183327079.gif_.avif\r\nvary: Accept\r\ns-rt: 2\r\ntiming-allow-origin: *\r\neagleid: 2ff62c9c17728651751363204e\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Tengine","description":"Tengine is a web server which is based on the Nginx HTTP server.","website":"https://tengine.taobao.org","common_platform_enumeration":"","icon":"Tengine.png","categories":["Web servers"]}],"data":{"size":403606,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 960 x 120","md5":"d0bbd6e83f13d75dfd204a1757309ff3","sha1":"e038ef39d13d339f32a585f16bb2c65ba607093e","sha256":"9a3c716b0b97716ba8136b243a3468b50aa62cc130b43e213a54a5ba7ec584db","sha512":"43143383b5711607d3ae0f52732f519740355a23c0c4d2675828f1d6833b94e9be3f08b3fea365f4d2d38310a887306992a9ff7318f7e50128cfcc47052c9fb0","ssdeep":"6144:z+H10Njx+v7YjWPE8zi+PEoTXoSzqoSNEyzNaJG97ztF8M7zMM9e3ZXKGLSgLnZt:zo6VxLzZoTdVygU9Xz8MXe64z9t","tlshash":"c584235252134f3e81aa071ed92e5c883c6ad886d612eb23977fc875b7019dd9234eb3","first_seen":"2026-02-13T06:47:10.3791Z","last_seen":"2026-04-04T15:25:57.512951Z","times_seen":2181,"resource_available":false,"data":null}},"time_used":541,"timings":{"blocked":251,"dns":104,"connect":22,"send":0,"wait":19,"receive":8,"ssl":102},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wsu.rqtqsp9.lol/cn/home/web/template/90sdyy_dc_pc/asset/js/jquery.js?v=","fqdn":"wsu.rqtqsp9.lol","domain":"rqtqsp9.lol","tld":"lol"},"ip":{"addr":"142.171.24.239","port":443,"asn":35916,"as":"MULTA-ASN1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://wsu.rqtqsp9.lol/cn/home/web/","date":"2026-03-07T06:32:53.589Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.rqtqsp9.lol","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Feb 2026 04:57:07 GMT","end":"Sat, 09 May 2026 04:57:06 GMT"},"fingerprint":{"sha1":"CA:AE:D0:F4:85:B9:CD:C6:DD:C1:BA:BB:34:68:B2:F8:74:CB:0A:8B","sha256":"B8:18:09:A9:23:92:E8:BB:44:F2:8C:F5:5D:FC:3A:10:C5:F7:FA:7E:49:AC:0C:C1:07:98:8E:56:85:C3:15:7D"}}},"request":{"raw":"GET /cn/home/web/template/90sdyy_dc_pc/asset/js/jquery.js?v= HTTP/1.1\r\nHost: wsu.rqtqsp9.lol\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://wsu.rqtqsp9.lol/cn/home/web/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: https://www.xzylm.com\r\ncontent-type: application/javascript\r\ncontent-length: 187180\r\nlast-modified: Sat, 08 Dec 2018 15:15:17 GMT\r\nvary: Accept-Encoding\r\ncache-control: public, max-age=2592000\r\naccept-ranges: bytes\r\nvia: http/1.1 traffic_server (https://www.xzylm.com [cRs f ])\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":187180,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"51a2e575444dfd1b46049074e8097ec9","sha1":"ab5cc19ec6273d9247ccd6461577fc0c4e2a539f","sha256":"6ebc65139f53a6bb9f5f16cf8ae6c21865dfb3d5f3f7bf0bbacb8d8d502f8275","sha512":"0b93d6e78d4059a60ab46c121529338bc191eef35cfca051ca82541857db78432598c24c7a7379e1a3abfd7467b027a5c98d27bec66099ad7039a69d541e0e44","ssdeep":"3072:d4J+Z3jL5TCOaLTwkiFdnCVQwda98HryLqRkhOeDRz4Sz:NZzEOAM+zda98HrRRkhnDRz4Sz","tlshash":"0104078df25172a296f330a952bf810a71775896b408d8b4b0a488d57dbcd9c027ff7a","first_seen":"2023-03-12T23:38:28Z","last_seen":"2026-03-15T14:56:28.263609Z","times_seen":403,"resource_available":true,"data":null}},"time_used":239,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":197,"receive":42,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wsu.rqtqsp9.lol/favicon.ico","fqdn":"wsu.rqtqsp9.lol","domain":"rqtqsp9.lol","tld":"lol"},"ip":{"addr":"142.171.24.239","port":443,"asn":35916,"as":"MULTA-ASN1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wsu.rqtqsp9.lol/cn/home/web/","date":"2026-03-07T06:32:54.727Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.rqtqsp9.lol","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Feb 2026 04:57:07 GMT","end":"Sat, 09 May 2026 04:57:06 GMT"},"fingerprint":{"sha1":"CA:AE:D0:F4:85:B9:CD:C6:DD:C1:BA:BB:34:68:B2:F8:74:CB:0A:8B","sha256":"B8:18:09:A9:23:92:E8:BB:44:F2:8C:F5:5D:FC:3A:10:C5:F7:FA:7E:49:AC:0C:C1:07:98:8E:56:85:C3:15:7D"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: wsu.rqtqsp9.lol\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://wsu.rqtqsp9.lol/cn/home/web/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: https://www.xzylm.com\r\ncontent-type: image/x-icon\r\ncontent-length: 38078\r\nlast-modified: Sat, 23 Jan 2021 07:43:02 GMT\r\naccept-ranges: bytes\r\nvia: http/1.1 traffic_server (https://www.xzylm.com [cRs f ])\r\ncache-control: public, max-age=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":38078,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 96x96, 32 bits/pixel","md5":"98cbc70772dd8c7683f544e193cc16c7","sha1":"6eefc595a21d7456a64393e3f5a90eeda6582689","sha256":"20847268b764f52773014f7f48d143c40cd984a6c523788b7e8fc5c7d7762431","sha512":"e99acadb27c7f851528b7ead0662fb2d39955d6a276f02bed4f19a3aa77a683953134d1add9a3e63bbf7534bdeb3f9472d8fbe10096bf477f2b90b8f1bfb5433","ssdeep":"192:iQlym4FXdmvV+b+UlYrwCpopyHyTJFJHiJl/oetA:iCx4zOopzJjHec","tlshash":"3e03e067bed0b3f6e5a6c8f0e54981fb84036c065b805c97938f7d6fb0b132866d1a58","first_seen":"2025-07-23T01:20:51.047244Z","last_seen":"2026-03-15T14:56:28.28702Z","times_seen":243,"resource_available":false,"data":null}},"time_used":159,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":154,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img1.ah7907.com/bt960120a.gif","fqdn":"img1.ah7907.com","domain":"ah7907.com","tld":"com"},"ip":{"addr":"47.242.20.187","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wsu.rqtqsp9.lol/cn/home/web/","date":"2026-03-07T06:32:54.931Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img1.ah7907.com","organization":""},"issuer":{"commonName":"Certum DV TLS G2 R39 CA","organization":"Asseco Data Systems S.A."},"validity":{"start":"Thu, 06 Nov 2025 07:27:15 GMT","end":"Sun, 06 Dec 2026 07:27:14 GMT"},"fingerprint":{"sha1":"EE:18:15:48:CE:4E:22:9F:18:59:AB:6E:5E:C0:0D:4E:AF:C2:86:22","sha256":"65:F5:69:07:04:80:B4:E3:E7:D0:C5:50:2E:02:11:1C:02:89:6E:83:40:00:DD:00:37:08:E9:9C:1C:A3:4D:59"}}},"request":{"raw":"GET /bt960120a.gif HTTP/1.1\r\nHost: img1.ah7907.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wsu.rqtqsp9.lol/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 307 Temporary Redirect\r\nserver: NgxFence\r\ndate: Sat, 07 Mar 2026 06:32:56 GMT\r\ncontent-type: text/html; charset=utf-8\r\ncontent-length: 0\r\nlocation: https://img.alicdn.com/imgextra/i4/2207246784654/O1CN014PyHeq1kFaOP6Xhwn_!!2207246784654.gif\r\nx-cache-status: HIT\r\nstrict-transport-security: max-age=31536000; includeSubdomains; preload\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"307","status_text":"Temporary Redirect","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":292628,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T15:49:33.06692Z","times_seen":13337345,"resource_available":true,"data":null}},"time_used":2647,"timings":{"blocked":922,"dns":370,"connect":275,"send":0,"wait":778,"receive":0,"ssl":298},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.mdynieu.com/images/69146317ec12e29e413cb55f.gif","fqdn":"www.mdynieu.com","domain":"mdynieu.com","tld":"com"},"ip":{"addr":"82.40.34.135","port":443,"asn":5089,"as":"Virgin Media","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wsu.rqtqsp9.lol/cn/home/web/","date":"2026-03-07T06:32:54.975Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mdynieu.com","organization":""},"issuer":{"commonName":"ZeroSSL ECC Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Fri, 12 Dec 2025 00:00:00 GMT","end":"Thu, 12 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"A0:E7:35:D4:DC:48:E4:5E:1B:FF:4B:B6:D3:6D:0D:58:B1:F6:27:29","sha256":"D2:17:69:66:D0:31:B0:DE:3F:24:F3:24:DB:38:FC:40:63:C5:36:DC:5B:B0:8F:60:02:55:7A:68:1D:EA:44:7C"}}},"request":{"raw":"GET /images/69146317ec12e29e413cb55f.gif HTTP/1.1\r\nHost: www.mdynieu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wsu.rqtqsp9.lol/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\ncontent-length: 0\r\nreferrer-policy: no-referrer\r\ncache-control: max-age=600\r\nlocation: https://img.meituan.net/portalweb/27a1e3a72fece63c3ff55f2c96c993a5588276.gif\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":null,"data":{"size":406836,"size_decoded":0,"mime_type":"image/webp","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T15:49:33.06692Z","times_seen":13337345,"resource_available":true,"data":null}},"time_used":961,"timings":{"blocked":-1,"dns":41,"connect":238,"send":0,"wait":238,"receive":0,"ssl":443},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wsu.rqtqsp9.lol/cn/home/web/template/90sdyy_dc_pc/asset/css/style.css","fqdn":"wsu.rqtqsp9.lol","domain":"rqtqsp9.lol","tld":"lol"},"ip":{"addr":"142.171.24.239","port":443,"asn":35916,"as":"MULTA-ASN1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://wsu.rqtqsp9.lol/cn/home/web/","date":"2026-03-07T06:32:53.578Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.rqtqsp9.lol","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Feb 2026 04:57:07 GMT","end":"Sat, 09 May 2026 04:57:06 GMT"},"fingerprint":{"sha1":"CA:AE:D0:F4:85:B9:CD:C6:DD:C1:BA:BB:34:68:B2:F8:74:CB:0A:8B","sha256":"B8:18:09:A9:23:92:E8:BB:44:F2:8C:F5:5D:FC:3A:10:C5:F7:FA:7E:49:AC:0C:C1:07:98:8E:56:85:C3:15:7D"}}},"request":{"raw":"GET /cn/home/web/template/90sdyy_dc_pc/asset/css/style.css HTTP/1.1\r\nHost: wsu.rqtqsp9.lol\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://wsu.rqtqsp9.lol/cn/home/web/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: https://www.xzylm.com\r\ncontent-type: text/css\r\ncontent-length: 51677\r\nlast-modified: Fri, 12 Jul 2019 09:12:22 GMT\r\nvary: Accept-Encoding\r\ncache-control: public, max-age=2592000\r\naccept-ranges: bytes\r\nvia: http/1.1 traffic_server (https://www.xzylm.com [cRs f ])\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":51677,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (5730)","md5":"a019afdba3b04de1901d7d7a7ef0d5a1","sha1":"e2afe6bb226e47cbd1e31fff910ffd2d405e77c3","sha256":"c19661c0caf553538f009b4909224af8783cce012aad0db57ead06772ede55ac","sha512":"75efc845d4e951192be9f0dfd0a9dc258d97e0455591c6c9cf1274158a33f3722faf29f90d533c4ca822d240e20452b69a72df0011ec2229d440150ac7906bb1","ssdeep":"1536:UkRGo0TX3vNwX3x+JwGak2soC3fmcbLul/60nLCb1fIQxj98w6QH+qGQwwa7gGZt:fRiTX3vNwX3x+JwGak2soC3fmcbLul/F","tlshash":"043376ddaa641c48673d42dbae6937e94a2810597f1fce9ee1933e34c27688010f3d96","first_seen":"2025-07-23T01:20:51.064891Z","last_seen":"2026-03-15T14:56:28.274392Z","times_seen":247,"resource_available":false,"data":null}},"time_used":165,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":155,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"d18wfmxtvthwf6.cloudfront.net/pg/980x120.gif","fqdn":"d18wfmxtvthwf6.cloudfront.net","domain":"d18wfmxtvthwf6.cloudfront.net","tld":"cloudfront.net"},"ip":{"addr":"54.192.209.4","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wsu.rqtqsp9.lol/cn/home/web/","date":"2026-03-07T06:32:57.408Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cloudfront.net","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Mon, 05 May 2025 00:00:00 GMT","end":"Thu, 23 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"8F:00:F1:34:A7:1E:27:1C:CF:CD:A6:53:8B:C4:82:B0:68:BC:C8:72","sha256":"60:38:9D:24:9E:41:8F:23:AC:D9:14:5C:A3:47:7E:AF:07:DB:9F:2D:6A:8C:0D:08:E9:24:8A:8E:49:A9:4D:28"}}},"request":{"raw":"GET /pg/980x120.gif HTTP/1.1\r\nHost: d18wfmxtvthwf6.cloudfront.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wsu.rqtqsp9.lol/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/gif\r\ncontent-length: 340665\r\nlast-modified: Wed, 14 May 2025 14:12:32 GMT\r\nx-amz-server-side-encryption: AES256\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\ndate: Fri, 06 Mar 2026 01:27:11 GMT\r\netag: \"b4c14c37321b858948f5616dbb436738\"\r\nvary: accept-encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 42f63300fbd68ad2da1e182d0d6d6948.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: 7XIU-CVSqQIFhejoo5ZA5pMo78n1Ez93Yd9rMJoB5PqwVnBZpi-Bgg==\r\nage: 104747\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":340665,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 980 x 120","md5":"b4c14c37321b858948f5616dbb436738","sha1":"e98847771ba3752949935dc11f4c7d4d8c14c787","sha256":"f5c79e791b436ecf1ad188dbe87ad4b35d3b9956bcf766600fb134f2a014131f","sha512":"a197f0fbc291afe3bcae5d35d05a23269e80fb7828215f41244c6136b63656c239fe6d24b4e2d6dc1ba713f06c7dfea763904a794043aba806c273f3311dc6e4","ssdeep":"6144:gFli6a0djJW4zenv4zenEO1LDyD3/wGR/Yi/wGR/Yi/wGRz3VkvJ6KI7KqmQIkX5:5p+3SSSJiD3/Z/Z/HMJ1IbI1I1kU1","tlshash":"4a741314e221ad80fe3a923b49f1c8f1a53d56f498afa9770661e7d4c6f44d0bf448e2","first_seen":"2026-02-01T06:13:19.223962Z","last_seen":"2026-03-15T12:50:18.76148Z","times_seen":1922,"resource_available":false,"data":null}},"time_used":117,"timings":{"blocked":24,"dns":58,"connect":1,"send":0,"wait":2,"receive":12,"ssl":17},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fsffbhd.4000522777.xn--fiqs8s/9acf3f15aa2f10616fcec1e9f8124088.gif?_t=1766049818","fqdn":"fsffbhd.4000522777.xn--fiqs8s","domain":"fsffbhd.4000522777.xn--fiqs8s","tld":""},"ip":{"addr":"104.26.7.77","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wsu.rqtqsp9.lol/cn/home/web/","date":"2026-03-07T06:32:56.171Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"4000522777.xn--fiqs8s","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Feb 2026 07:30:32 GMT","end":"Sat, 09 May 2026 07:30:31 GMT"},"fingerprint":{"sha1":"FF:0F:4B:0B:66:7A:99:CF:94:C0:49:3D:85:E5:C9:86:98:B7:37:5A","sha256":"43:BD:60:69:CF:8C:1A:A9:8F:2A:45:8B:67:9B:D8:CE:5E:AD:46:40:6D:E0:09:85:5F:16:F0:2D:FD:A5:D2:8E"}}},"request":{"raw":"GET /9acf3f15aa2f10616fcec1e9f8124088.gif?_t=1766049818 HTTP/1.1\r\nHost: fsffbhd.4000522777.xn--fiqs8s\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wsu.rqtqsp9.lol/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 07 Mar 2026 06:32:56 GMT\r\ncontent-type: image/webp\r\ncontent-length: 596432\r\nserver: cloudflare\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ehjpVqhNyEIOMDE9iUV%2BnOERHM%2BpApSXB0zokOvHSNZ0rM9MOWKn1F8ggFPRirDAU%2FJYHgWQvw9BxmFp3CBp11dvkpzMaP2HvX4HoV71tLuwagSjypREJ4LNdlg%3D\"}]}\r\nlast-modified: Fri, 12 Dec 2025 13:55:30 GMT\r\netag: \"693c1ed2-b42e7\"\r\naccept-ranges: bytes\r\ncf-bgj: imgq:100,h2pri\r\ncf-polished: ok, orig_size=738023\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=1;i=?0,cf-chb=(782;u=3;i=?0 1954;u=4;i=?0 77885;u=5;i=?0)\r\nvary: accept, accept-encoding\r\nage: 5560\r\ncache-control: max-age=31536000\r\ncf-cache-status: HIT\r\ncf-ray: 9d8790d73a02120a-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":596432,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"70e27bd33ccc423d6ca629fe1a2694a3","sha1":"8f9b122d30952f553d18eb43f1a0d8fa43616f05","sha256":"2e4d5ced9b2775a2fcf90c86296064a475d629e3abfa9bc388d4c7e58a924b5a","sha512":"ccc4192c2f2d5bfdf26a698e8c1b065b607055b3c5cff1a3a3b5bbfa8cc0b1631d7d281bf5028d596a6ffd4f757b5f362015caa1b480563f58d7f8a32c3e79b4","ssdeep":"12288:o+1WCsh1cclbxyjPvVfdwCAqlH3JbHk55dJt9uMYpNlR:oush1cobxcGOHW5J5YT","tlshash":"32c42345e8fe2db59265a33cacf61a129dd700e96cd520591c9aff633ce0a4705ecf48","first_seen":"2026-02-12T00:35:26.594188Z","last_seen":"2026-04-04T15:25:57.357303Z","times_seen":2172,"resource_available":false,"data":null}},"time_used":60,"timings":{"blocked":21,"dns":0,"connect":0,"send":0,"wait":9,"receive":30,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wsu.rqtqsp9.lol/000/flink/analytics.php","fqdn":"wsu.rqtqsp9.lol","domain":"rqtqsp9.lol","tld":"lol"},"ip":{"addr":"142.171.24.239","port":443,"asn":35916,"as":"MULTA-ASN1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://wsu.rqtqsp9.lol/cn/home/web/","date":"2026-03-07T06:32:53.800Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.rqtqsp9.lol","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Feb 2026 04:57:07 GMT","end":"Sat, 09 May 2026 04:57:06 GMT"},"fingerprint":{"sha1":"CA:AE:D0:F4:85:B9:CD:C6:DD:C1:BA:BB:34:68:B2:F8:74:CB:0A:8B","sha256":"B8:18:09:A9:23:92:E8:BB:44:F2:8C:F5:5D:FC:3A:10:C5:F7:FA:7E:49:AC:0C:C1:07:98:8E:56:85:C3:15:7D"}}},"request":{"raw":"POST /000/flink/analytics.php HTTP/1.1\r\nHost: wsu.rqtqsp9.lol\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/javascript, */*; q=0.01\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://wsu.rqtqsp9.lol/cn/home/web/\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 120\r\nOrigin: https://wsu.rqtqsp9.lol\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":120,"data":"referrer=https%3A%2F%2Fwsu.rqtqsp9.lol%2Fcn%2Fhome%2Fweb%2Findex.php%2Fvod%2Fplay%2Fid%2F975713%2Fsid%2F1%2Fnid%2F1.html"}},"response":{"raw":"HTTP/2 204 No Content\r\nserver: https://www.xzylm.com\r\ndate: Sat, 07 Mar 2026 06:33:02 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nage: 0\r\nvia: http/1.1 traffic_server (https://www.xzylm.com [cMs f ])\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T15:49:33.06692Z","times_seen":13337345,"resource_available":true,"data":null}},"time_used":154,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":154,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.alicdn.com/imgextra/i3/4183327079/O1CN01Jh4YeU22AEs6UM5mZ_!!4183327079.gif","fqdn":"img.alicdn.com","domain":"alicdn.com","tld":"com"},"ip":{"addr":"47.246.44.178","port":443,"asn":24429,"as":"Zhejiang Taobao Network Co.,Ltd","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wsu.rqtqsp9.lol/cn/home/web/","date":"2026-03-07T06:32:54.963Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tbcdn.cn","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Fri, 28 Nov 2025 03:07:13 GMT","end":"Sat, 18 Jul 2026 09:41:04 GMT"},"fingerprint":{"sha1":"01:40:62:EF:8C:E5:C1:8A:19:4C:8D:B6:F5:C2:24:7F:DC:C0:9C:8A","sha256":"60:3C:41:A0:78:62:E6:5E:82:F0:FA:CF:5C:C9:D3:22:E4:64:EE:1A:EE:C7:CC:BA:DD:25:08:90:6F:CC:C4:F2"}}},"request":{"raw":"GET /imgextra/i3/4183327079/O1CN01Jh4YeU22AEs6UM5mZ_!!4183327079.gif HTTP/1.1\r\nHost: img.alicdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wsu.rqtqsp9.lol/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: Tengine\r\ncontent-type: image/gif\r\ncontent-length: 300651\r\ndate: Fri, 06 Feb 2026 11:12:05 GMT\r\npicasso-ret-code: SUCCESS\r\npicasso-cache-info: L3-HIT\r\nrequest-time: 0.001\r\ntraceid: a3b55ced17703763248572315e\r\nx-powered-by: Picasso\r\npicasso-image-type: normal\r\npicasso-fmt: gif2avif\r\ncache-control: max-age=31536000\r\nvia: ens-cache9.l2de4[0,0,200-0,H], ens-cache21.l2de4[2,0], ens-cache9.se2[0,0,200-0,H], ens-cache8.se2[6,0]\r\naccess-control-allow-origin: *\r\nage: 2488850\r\nali-swift-global-savetime: 1770376325\r\nx-cache: HIT TCP_MEM_HIT dirn:-2:-2\r\nx-swift-savetime: Fri, 06 Feb 2026 16:04:39 GMT\r\nx-swift-cachetime: 31518446\r\nback_uri: /imgextra/i3/4183327079/O1CN01Jh4YeU22AEs6UM5mZ_!!4183327079.gif_.avif\r\nvary: Accept\r\ns-rt: 6\r\ntiming-allow-origin: *\r\neagleid: 2ff62c9c17728651751353203e\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Tengine","description":"Tengine is a web server which is based on the Nginx HTTP server.","website":"https://tengine.taobao.org","common_platform_enumeration":"","icon":"Tengine.png","categories":["Web servers"]}],"data":{"size":300651,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 960 x 120","md5":"8a47d4e0340db7d8001c1c2c39716b93","sha1":"0fc8202a98d51793df1755c0bdb9ed54294a8519","sha256":"4a6044bb59cb58f446ba34163ea45c5079c9c1a556c3f2bc626440f638efaf30","sha512":"7277d622b154e4756836791b83a92294ece23d66f15b7450937a0525679433e4f90622b04e6a37bc2db1aa067060c3e07fa066fbfe0660ba3c926b54ff52cb2f","ssdeep":"6144:v1p2LgPnLX3nnLXnXw3esj1ls34FfhavVHf7lYJkxmWYQAYg:v1pXXbXXw3eGXH5M7yixDY6g","tlshash":"9f5423c4f7e76f3eaf9218f3296f34883669c81d91f4813a1e86b1eb16231591434d3a","first_seen":"2026-02-07T11:16:48.410559Z","last_seen":"2026-04-04T15:25:57.319273Z","times_seen":2205,"resource_available":false,"data":null}},"time_used":242,"timings":{"blocked":-1,"dns":50,"connect":21,"send":0,"wait":29,"receive":6,"ssl":63},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img1.ah7907.com/ky61-960x120.gif","fqdn":"img1.ah7907.com","domain":"ah7907.com","tld":"com"},"ip":{"addr":"47.242.20.187","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wsu.rqtqsp9.lol/cn/home/web/","date":"2026-03-07T06:32:55.012Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img1.ah7907.com","organization":""},"issuer":{"commonName":"Certum DV TLS G2 R39 CA","organization":"Asseco Data Systems S.A."},"validity":{"start":"Thu, 06 Nov 2025 07:27:15 GMT","end":"Sun, 06 Dec 2026 07:27:14 GMT"},"fingerprint":{"sha1":"EE:18:15:48:CE:4E:22:9F:18:59:AB:6E:5E:C0:0D:4E:AF:C2:86:22","sha256":"65:F5:69:07:04:80:B4:E3:E7:D0:C5:50:2E:02:11:1C:02:89:6E:83:40:00:DD:00:37:08:E9:9C:1C:A3:4D:59"}}},"request":{"raw":"GET /ky61-960x120.gif HTTP/1.1\r\nHost: img1.ah7907.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wsu.rqtqsp9.lol/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 307 Temporary Redirect\r\nserver: NgxFence\r\ndate: Sat, 07 Mar 2026 06:32:55 GMT\r\ncontent-type: text/html; charset=utf-8\r\ncontent-length: 0\r\nlocation: https://img.alicdn.com/imgextra/i2/2207246784654/O1CN010a6y4d1kFaOOgMqmk_!!2207246784654.gif\r\nx-cache-status: HIT\r\nstrict-transport-security: max-age=31536000; includeSubdomains; preload\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"307","status_text":"Temporary Redirect","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":44406,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T15:49:33.06692Z","times_seen":13337345,"resource_available":true,"data":null}},"time_used":1150,"timings":{"blocked":-1,"dns":306,"connect":270,"send":0,"wait":272,"receive":0,"ssl":301},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.meituan.net/portalweb/27a1e3a72fece63c3ff55f2c96c993a5588276.gif","fqdn":"img.meituan.net","domain":"meituan.net","tld":"net"},"ip":{"addr":"163.171.134.109","port":443,"asn":54994,"as":"ML-1432-54994","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wsu.rqtqsp9.lol/cn/home/web/","date":"2026-03-07T06:32:55.921Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.meituan.net","organization":"北京三快科技有限公司"},"issuer":{"commonName":"GlobalSign RSA OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 03 Jun 2025 10:52:10 GMT","end":"Sat, 27 Jun 2026 07:00:02 GMT"},"fingerprint":{"sha1":"0C:29:B8:8B:74:6A:6C:C5:4B:6B:8C:7E:F5:C5:E8:A7:B1:26:B8:CB","sha256":"40:B3:D3:3A:FB:0A:FF:94:27:86:35:5E:B7:62:00:AE:DE:30:88:34:15:60:5F:60:9F:C0:E2:9D:2E:BB:5C:83"}}},"request":{"raw":"GET /portalweb/27a1e3a72fece63c3ff55f2c96c993a5588276.gif HTTP/1.1\r\nHost: img.meituan.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 07 Mar 2026 06:32:56 GMT\r\ncontent-type: image/webp\r\ncontent-length: 406836\r\nserver: openresty\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,OPTIONS,HEAD\r\naccess-control-allow-private-network: true\r\ncache-control: max-age=5184000\r\nm-traceid: stnbw2foodf7203m9zij\r\nlast-modified: Fri, 05 Dec 2025 07:15:26 +0000\r\ntiming-allow-origin: *\r\nx-via: 1.1 PS-HKG-04JZz35:6 (Cdn Cache Server V2.0), 0.0 PSrdsdgemSTO1sw92:0 (Cdn Cache Server V2.0)\r\nx-response-cache: edge_hit\r\nage: 1\r\nx-cache: HIT from cache.51cdn.com\r\nx-ws-request-id: 69abc698_PSrdsdgemSTO1sw92_10616-41090\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":406836,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"34578e43aadd0f0be311cfc623f3391e","sha1":"895f4361fbcd073db0535c831ba4424822b131a9","sha256":"b762e8d34521fe2e17fbbf032cc05edb46f8b217bbcf7bf030c6b98a50d66760","sha512":"a9cfe1c1e668f7de244195d0b606c8adeaad8f2a940629a72c1d552b6c238797219dc0e05fa423bec6fb3580686e402e4f352b2f1983b04e48b03642dc445cdd","ssdeep":"12288:v1HhfMhcKYspUXuT184HQIOO+EP/WvWG7/:dBfI/dwIIEWvWG7/","tlshash":"448423aadb664e34d5904c2fc1fb890fc4c476e9e3f716e69b36a9098bf7253448e040","first_seen":"2025-11-06T09:50:46.694344Z","last_seen":"2026-04-04T13:29:05.000019Z","times_seen":6868,"resource_available":false,"data":null}},"time_used":304,"timings":{"blocked":130,"dns":106,"connect":7,"send":0,"wait":9,"receive":34,"ssl":15},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fsffbhd.4000522777.xn--fiqs8s/ea980b9daf2cbb13355e4431bbc43384.gif?_t=1765444375","fqdn":"fsffbhd.4000522777.xn--fiqs8s","domain":"fsffbhd.4000522777.xn--fiqs8s","tld":""},"ip":{"addr":"104.26.7.77","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wsu.rqtqsp9.lol/cn/home/web/","date":"2026-03-07T06:32:56.160Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"4000522777.xn--fiqs8s","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Feb 2026 07:30:32 GMT","end":"Sat, 09 May 2026 07:30:31 GMT"},"fingerprint":{"sha1":"FF:0F:4B:0B:66:7A:99:CF:94:C0:49:3D:85:E5:C9:86:98:B7:37:5A","sha256":"43:BD:60:69:CF:8C:1A:A9:8F:2A:45:8B:67:9B:D8:CE:5E:AD:46:40:6D:E0:09:85:5F:16:F0:2D:FD:A5:D2:8E"}}},"request":{"raw":"GET /ea980b9daf2cbb13355e4431bbc43384.gif?_t=1765444375 HTTP/1.1\r\nHost: fsffbhd.4000522777.xn--fiqs8s\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wsu.rqtqsp9.lol/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 07 Mar 2026 06:32:56 GMT\r\ncontent-type: image/webp\r\ncontent-length: 568104\r\nserver: cloudflare\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gFsMBTWuYtJIFP7sp%2FvUINxdgVepTAyjuXF0w9hgXG3PvvUq8aQ0%2F7%2Fu2WocREk7ocgUQ4gw%2BKETFPolgVl3XCbAWcqmZPw3kQ1PZSc7f788tmdH25Uf3PTvT6A%3D\"}]}\r\nlast-modified: Fri, 12 Dec 2025 11:26:10 GMT\r\netag: \"693bfbd2-abcad\"\r\naccept-ranges: bytes\r\npriority: u=1;i=?0,cf-chb=(782;u=3;i=?0 1954;u=4;i=?0 75633;u=5;i=?0)\r\ncf-bgj: imgq:100,h2pri\r\ncf-polished: ok, orig_size=703661\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nvary: accept, accept-encoding\r\nage: 5561\r\ncache-control: max-age=31536000\r\ncf-cache-status: HIT\r\ncf-ray: 9d8790d739fe120a-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":568104,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"1925ddbac61bd86167e56762d9865272","sha1":"3af84806b787154f360260c48cd5dcb428c26f88","sha256":"d85767c20babde062fe404802a0e76670418dcbc3d1dbae7e07c9809deb1c5aa","sha512":"1d3f0b1ff9e05269e1842604c29e236cd598cb2af33daa07916cfad00591377d58ac51a385ca7d688e98fdd38f7b61eeb9fc7eb58ce6013a2764182198954399","ssdeep":"12288:U70AA6kUL5fzQs1R6fQQpOFpO0qidVKdSLIJ6UXErHh0Ob9Mu:RAA6kUFMs1nQiFqGVIJxXEV0ObWu","tlshash":"d3c42312f3d1f034f1f4b22986aa0786ad58999f1d4466412bb0f8edb2da1d5d1b0cdb","first_seen":"2026-02-10T10:56:09.274713Z","last_seen":"2026-04-04T15:25:57.460988Z","times_seen":1105,"resource_available":false,"data":null}},"time_used":95,"timings":{"blocked":32,"dns":1,"connect":1,"send":0,"wait":7,"receive":20,"ssl":31},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wsu.rqtqsp9.lol/cn/home/web/index.php/vod/play/id/975713/sid/1/nid/1.html","fqdn":"wsu.rqtqsp9.lol","domain":"rqtqsp9.lol","tld":"lol"},"ip":{"addr":"142.171.24.239","port":443,"asn":35916,"as":"MULTA-ASN1","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-07T06:32:48.628Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.rqtqsp9.lol","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Feb 2026 04:57:07 GMT","end":"Sat, 09 May 2026 04:57:06 GMT"},"fingerprint":{"sha1":"CA:AE:D0:F4:85:B9:CD:C6:DD:C1:BA:BB:34:68:B2:F8:74:CB:0A:8B","sha256":"B8:18:09:A9:23:92:E8:BB:44:F2:8C:F5:5D:FC:3A:10:C5:F7:FA:7E:49:AC:0C:C1:07:98:8E:56:85:C3:15:7D"}}},"request":{"raw":"GET /cn/home/web/index.php/vod/play/id/975713/sid/1/nid/1.html HTTP/1.1\r\nHost: wsu.rqtqsp9.lol\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: https://www.xzylm.com\r\ncontent-type: text/html; charset=utf-8\r\nvary: Accept-Encoding\r\nx-frame-options: Deny\r\ncontent-encoding: gzip\r\ncontent-length: 3521\r\nvia: http/1.1 traffic_server (https://www.xzylm.com [cRs f ])\r\ncache-control: public, max-age=3600\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}],"data":{"size":13666,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with CRLF, LF line terminators","md5":"fca1afcf84d4da97ab90db85fb876be6","sha1":"f8996f51f5e7a90115e41c61940b113f33f6cc3c","sha256":"c6aa50e130c4fdbd71073c64584dfd21e1211176a94874cbfdf86f0d0bd36b92","sha512":"005278bc3d6e34eccbb130ad79448636cfce2fcd6bd33699b06e8a4ddb019a1220b57b931c901a18a9a2fa10075ad5add55fea9e5d43b0cc13ab5b767f005fcf","ssdeep":"384:9Nthf8dh7DkFNJlkdhCPcOHx9r3Tg2oRkGJ:9Nthf8/oNGCPcOHx9r3Tg2oRkGJ","tlshash":"e0523402f5c66e23522e49deee706f7df1b6ba30c70b7890e2f34565c285ec4550aa1e","first_seen":"2026-03-07T06:33:17.663533Z","last_seen":"2026-03-09T03:31:44.248601Z","times_seen":2,"resource_available":true,"data":null}},"time_used":922,"timings":{"blocked":384,"dns":58,"connect":152,"send":0,"wait":152,"receive":2,"ssl":171},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wsu.rqtqsp9.lol/cn/home/web/template/90sdyy_dc_pc/asset/js/sidebar.js","fqdn":"wsu.rqtqsp9.lol","domain":"rqtqsp9.lol","tld":"lol"},"ip":{"addr":"142.171.24.239","port":443,"asn":35916,"as":"MULTA-ASN1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://wsu.rqtqsp9.lol/cn/home/web/index.php/vod/play/id/975713/sid/1/nid/1.html","date":"2026-03-07T06:32:49.452Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.rqtqsp9.lol","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Feb 2026 04:57:07 GMT","end":"Sat, 09 May 2026 04:57:06 GMT"},"fingerprint":{"sha1":"CA:AE:D0:F4:85:B9:CD:C6:DD:C1:BA:BB:34:68:B2:F8:74:CB:0A:8B","sha256":"B8:18:09:A9:23:92:E8:BB:44:F2:8C:F5:5D:FC:3A:10:C5:F7:FA:7E:49:AC:0C:C1:07:98:8E:56:85:C3:15:7D"}}},"request":{"raw":"GET /cn/home/web/template/90sdyy_dc_pc/asset/js/sidebar.js HTTP/1.1\r\nHost: wsu.rqtqsp9.lol\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wsu.rqtqsp9.lol/cn/home/web/index.php/vod/play/id/975713/sid/1/nid/1.html\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: https://www.xzylm.com\r\ncontent-type: application/javascript\r\ncontent-length: 7603\r\nlast-modified: Sat, 08 Dec 2018 15:15:31 GMT\r\nvary: Accept-Encoding\r\ncache-control: public, max-age=2592000\r\naccept-ranges: bytes\r\nvia: http/1.1 traffic_server (https://www.xzylm.com [cRs f ])\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":7603,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (7603), with no line terminators","md5":"f942d7cacc22cab07d6ddea78e442512","sha1":"72f110642fd0fc0c75145497b126c6a50d3a4993","sha256":"29df69085cecb8d89a5d131757ffe9dfff68395c6f53b2dca0bea4ef2b7a6645","sha512":"f76891d3378731aa01006396ec3dc94b7e55bc2445e5175511621efaf064a192c0374d878f624ef03e91c43f571bd8ab820deff40baa0748a8ef1374a67eda3d","ssdeep":"192:FEz96DqfVOXEuPHB+qC9YkG3a6+XrvM+rd:y3SalvM+rd","tlshash":"5ff1866e3b107139e09bf5cbe4cf5028913a8a6b57c68078835cd4e81d6276881e3fdd","first_seen":"2025-05-09T20:52:52.971838Z","last_seen":"2026-03-15T14:56:28.243196Z","times_seen":362,"resource_available":true,"data":null}},"time_used":843,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":835,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"txdy.hznunxc.com/960x120.gif","fqdn":"txdy.hznunxc.com","domain":"hznunxc.com","tld":"com"},"ip":{"addr":"157.185.128.120","port":443,"asn":54994,"as":"ML-1432-54994","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wsu.rqtqsp9.lol/cn/home/web/","date":"2026-03-07T06:32:54.977Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"txdy.hznunxc.com","organization":""},"issuer":{"commonName":"TrustAsia DV TLS RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Wed, 11 Feb 2026 00:00:00 GMT","end":"Mon, 11 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"90:1B:5C:BB:4A:86:94:97:1F:FD:C6:4E:1E:49:73:4B:A8:80:1F:A7","sha256":"AF:92:C9:25:B6:70:75:C0:04:EC:5E:04:B8:5F:6F:C1:11:04:3A:C3:D6:3E:61:46:65:D5:81:E5:D9:BE:03:37"}}},"request":{"raw":"GET /960x120.gif HTTP/1.1\r\nHost: txdy.hznunxc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wsu.rqtqsp9.lol/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 07 Mar 2026 06:32:55 GMT\r\ncontent-type: image/gif\r\ncontent-length: 119760\r\nexpires: Sat, 14 Mar 2026 12:28:02 GMT\r\nserver: nginx\r\nlast-modified: Mon, 29 Dec 2025 06:33:05 GMT\r\nvary: Accept-Encoding\r\netag: \"695220a1-1d3d0\"\r\ncache-control: max-age=2592000\r\naccept-ranges: bytes\r\nvia: 1.1 PS-ORD-04i3e151:8 (W), 1.1 PS-FRA-01uMN61:10 (W), 0.0 PS-CDG-04gzn111:3 (W)\r\nage: 1965893\r\nx-px: ht PS-CDG-04gzn111none\r\nx-ws-request-id: 69abc697_PS-CDG-04gzn111_39604-37828\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":119760,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 960 x 120","md5":"149b6d51518d57a39011a6971132ffa2","sha1":"529eeaead1047e4eddd186cfad5015aa987c4e14","sha256":"72c2db6b6259e584134783af7112131d031638bd29be489d53f58d7db2a8b7fb","sha512":"2e2e211b2e27bb10b1deed4cb4460866eeaff5ae5bcac6a550d7906225add955ad68ae8efdf5133d8fb7783a29d00cb72d170af8305c4fd510b5e3ea5a0a155f","ssdeep":"3072:l/GDzsUvQAUdTbhVQ3VFYDAoY/JJM6jqYm433v1:u4UI3TbKVcYDMFQ339","tlshash":"36c3123b424b4782376d70b07bf1e6058186800eae7a3597a562ca870fb1e7585ddc93","first_seen":"2025-12-29T08:49:02.459481Z","last_seen":"2026-04-04T15:25:57.273623Z","times_seen":4445,"resource_available":false,"data":null}},"time_used":677,"timings":{"blocked":-1,"dns":28,"connect":38,"send":0,"wait":77,"receive":50,"ssl":484},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wsu.rqtqsp9.lol/cn/home/web/","fqdn":"wsu.rqtqsp9.lol","domain":"rqtqsp9.lol","tld":"lol"},"ip":{"addr":"142.171.24.239","port":443,"asn":35916,"as":"MULTA-ASN1","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-07T06:32:53.352Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.rqtqsp9.lol","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Feb 2026 04:57:07 GMT","end":"Sat, 09 May 2026 04:57:06 GMT"},"fingerprint":{"sha1":"CA:AE:D0:F4:85:B9:CD:C6:DD:C1:BA:BB:34:68:B2:F8:74:CB:0A:8B","sha256":"B8:18:09:A9:23:92:E8:BB:44:F2:8C:F5:5D:FC:3A:10:C5:F7:FA:7E:49:AC:0C:C1:07:98:8E:56:85:C3:15:7D"}}},"request":{"raw":"GET /cn/home/web/ HTTP/1.1\r\nHost: wsu.rqtqsp9.lol\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wsu.rqtqsp9.lol/cn/home/web/index.php/vod/play/id/975713/sid/1/nid/1.html\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: https://www.xzylm.com\r\ncontent-type: text/html;charset=utf-8\r\nvary: Accept-Encoding\r\nx-frame-options: Deny\r\ncontent-encoding: gzip\r\ncontent-length: 16064\r\nvia: http/1.1 traffic_server (https://www.xzylm.com [cHs f ])\r\ncache-control: public, max-age=3600\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}],"data":{"size":117443,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with CRLF, LF line terminators","md5":"fa1949bec6f1a402247f27de13fbc507","sha1":"eef0a4e19f99f4e035453f68e148f096b4964dc7","sha256":"27a340d6321f4cf74f4394d6639282b394ab85c5eb466fea888024ae0f9fe76e","sha512":"e0bd876afa6c6cba722a24cdac89724ac048bd265b886abec82670f63bb6f0b17233c47a511f4447fae9382cd2f285eb3c17e55a32aa10e1701fc6f6045dd99b","ssdeep":"768:INthf8jTNBSV6WPK4zuFlGDQOp6a2BLlGRNXIzx7TulAY1vHbTg0os:INthf8jTOPh+MDQOWLlGRPlfos","tlshash":"9fb3fe25b2e67f2a23ae0cdf5da42b7da27b6936d6fb3190d2f747554281c809302d1c","first_seen":"2026-03-07T06:33:17.665406Z","last_seen":"2026-03-07T06:33:17.665406Z","times_seen":1,"resource_available":true,"data":null}},"time_used":176,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":176,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wsu.rqtqsp9.lol/cn/home/web/template/90sdyy_dc_pc/html/abc/a_pc.css","fqdn":"wsu.rqtqsp9.lol","domain":"rqtqsp9.lol","tld":"lol"},"ip":{"addr":"142.171.24.239","port":443,"asn":35916,"as":"MULTA-ASN1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://wsu.rqtqsp9.lol/cn/home/web/","date":"2026-03-07T06:32:53.580Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.rqtqsp9.lol","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Feb 2026 04:57:07 GMT","end":"Sat, 09 May 2026 04:57:06 GMT"},"fingerprint":{"sha1":"CA:AE:D0:F4:85:B9:CD:C6:DD:C1:BA:BB:34:68:B2:F8:74:CB:0A:8B","sha256":"B8:18:09:A9:23:92:E8:BB:44:F2:8C:F5:5D:FC:3A:10:C5:F7:FA:7E:49:AC:0C:C1:07:98:8E:56:85:C3:15:7D"}}},"request":{"raw":"GET /cn/home/web/template/90sdyy_dc_pc/html/abc/a_pc.css HTTP/1.1\r\nHost: wsu.rqtqsp9.lol\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://wsu.rqtqsp9.lol/cn/home/web/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: https://www.xzylm.com\r\ncontent-type: text/css\r\ncontent-length: 1272\r\nlast-modified: Tue, 12 Mar 2024 10:09:57 GMT\r\nvary: Accept-Encoding\r\ncache-control: public, max-age=2592000\r\naccept-ranges: bytes\r\nvia: http/1.1 traffic_server (https://www.xzylm.com [cRs f ])\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1272,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"9b19f07bae716cbe7579d9182258a573","sha1":"2530f24042dc44d61704b0d5722eac9d2b413263","sha256":"f471118fb9a3cea28b5b02878ddccaa1e15d5e7761690242a7c8c1f5a877b6e3","sha512":"009c8b9700abaf2eed63c706aaff08a9306d91ef110e14fe1a28075e2abe71e8f7e219f0f2ec5127994b55db0ee4d2a5f9ec1fa146f313947be897c735aa6cd4","ssdeep":"","tlshash":"a721383237666488d90fe2edaeb5e77c2e1e4090bf0f4d7e64603624938e69505b36c9","first_seen":"2023-10-19T00:50:43Z","last_seen":"2026-04-04T12:57:38.456374Z","times_seen":5402,"resource_available":false,"data":null}},"time_used":164,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":164,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wsu.rqtqsp9.lol/cn/home/web/static/js/jquery.js","fqdn":"wsu.rqtqsp9.lol","domain":"rqtqsp9.lol","tld":"lol"},"ip":{"addr":"142.171.24.239","port":443,"asn":35916,"as":"MULTA-ASN1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://wsu.rqtqsp9.lol/cn/home/web/","date":"2026-03-07T06:32:53.585Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.rqtqsp9.lol","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Feb 2026 04:57:07 GMT","end":"Sat, 09 May 2026 04:57:06 GMT"},"fingerprint":{"sha1":"CA:AE:D0:F4:85:B9:CD:C6:DD:C1:BA:BB:34:68:B2:F8:74:CB:0A:8B","sha256":"B8:18:09:A9:23:92:E8:BB:44:F2:8C:F5:5D:FC:3A:10:C5:F7:FA:7E:49:AC:0C:C1:07:98:8E:56:85:C3:15:7D"}}},"request":{"raw":"GET /cn/home/web/static/js/jquery.js HTTP/1.1\r\nHost: wsu.rqtqsp9.lol\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://wsu.rqtqsp9.lol/cn/home/web/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: https://www.xzylm.com\r\ncontent-type: application/javascript\r\ncontent-length: 92629\r\nlast-modified: Thu, 04 Aug 2016 14:39:10 GMT\r\nvary: Accept-Encoding\r\ncache-control: public, max-age=2592000\r\naccept-ranges: bytes\r\nvia: http/1.1 traffic_server (https://www.xzylm.com [cRs f ])\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":92629,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (32089)","md5":"397754ba49e9e0cf4e7c190da78dda05","sha1":"ae49e56999d82802727455f0ba83b63acd90a22b","sha256":"c12f6098e641aaca96c60215800f18f5671039aecf812217fab3c0d152f6adb4","sha512":"8c64754f77507ab2c24a6fc818419b9dd3f0ceccc9065290e41afdbee0743f0da2cb13b2fbb00afa525c082f1e697cb3ffd76ef9b902cb81d7c41ca1c641dffb","ssdeep":"1536:dnu00HWWaRxkqJg09pYxoxDKMXJrg8hXXO4dK3kyfiLJBhdSZE+I+Qg7rbaN1RUx:ddkWgoBhcZRQgmW42qe","tlshash":"8c932bdd72d2b03257ab30bd106f540ff2361959280d8850f268d8f9bc79a49a277f6d","first_seen":"2023-03-07T01:02:08Z","last_seen":"2026-04-04T15:48:44.569044Z","times_seen":60616,"resource_available":true,"data":null}},"time_used":184,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":165,"receive":19,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wsu.rqtqsp9.lol/cn/home/web/template/90sdyy_dc_pc/asset/js/attach.js","fqdn":"wsu.rqtqsp9.lol","domain":"rqtqsp9.lol","tld":"lol"},"ip":{"addr":"142.171.24.239","port":443,"asn":35916,"as":"MULTA-ASN1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://wsu.rqtqsp9.lol/cn/home/web/index.php/vod/play/id/975713/sid/1/nid/1.html","date":"2026-03-07T06:32:49.451Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.rqtqsp9.lol","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Feb 2026 04:57:07 GMT","end":"Sat, 09 May 2026 04:57:06 GMT"},"fingerprint":{"sha1":"CA:AE:D0:F4:85:B9:CD:C6:DD:C1:BA:BB:34:68:B2:F8:74:CB:0A:8B","sha256":"B8:18:09:A9:23:92:E8:BB:44:F2:8C:F5:5D:FC:3A:10:C5:F7:FA:7E:49:AC:0C:C1:07:98:8E:56:85:C3:15:7D"}}},"request":{"raw":"GET /cn/home/web/template/90sdyy_dc_pc/asset/js/attach.js HTTP/1.1\r\nHost: wsu.rqtqsp9.lol\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wsu.rqtqsp9.lol/cn/home/web/index.php/vod/play/id/975713/sid/1/nid/1.html\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: https://www.xzylm.com\r\ncontent-type: application/javascript\r\ncontent-length: 1003\r\nlast-modified: Sat, 08 Dec 2018 15:15:29 GMT\r\ncache-control: public, max-age=2592000\r\naccept-ranges: bytes\r\nvia: http/1.1 traffic_server (https://www.xzylm.com [cHs f ])\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1003,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (678)","md5":"7883897dcde412ed4f504ef9416ae533","sha1":"2a228427aa6a5914d96f71887a611b8300b069d4","sha256":"f7384070fb8779e615abc4cef747152648170f9745bea327bda8ad7af799d611","sha512":"c9ef975b5eca4b91dd1f9876302229f953fc8961ef9c2cb4aac5c88ddf4378d927c0a549bf255fc8c71b45e65c145f27eb8f7cb45c7e08c557504d0bc1e5984c","ssdeep":"","tlshash":"4c11ab64b050048091b32dde68ff92cd6327b310d405174cb6ad88542fe979efc2a46e","first_seen":"2025-09-25T11:29:08.142099Z","last_seen":"2026-03-14T15:42:54.412671Z","times_seen":66,"resource_available":true,"data":null}},"time_used":850,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":850,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wsu.rqtqsp9.lol/abc/fixed_ui_ad7b03.js","fqdn":"wsu.rqtqsp9.lol","domain":"rqtqsp9.lol","tld":"lol"},"ip":{"addr":"142.171.24.239","port":443,"asn":35916,"as":"MULTA-ASN1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://wsu.rqtqsp9.lol/cn/home/web/","date":"2026-03-07T06:32:53.588Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.rqtqsp9.lol","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Feb 2026 04:57:07 GMT","end":"Sat, 09 May 2026 04:57:06 GMT"},"fingerprint":{"sha1":"CA:AE:D0:F4:85:B9:CD:C6:DD:C1:BA:BB:34:68:B2:F8:74:CB:0A:8B","sha256":"B8:18:09:A9:23:92:E8:BB:44:F2:8C:F5:5D:FC:3A:10:C5:F7:FA:7E:49:AC:0C:C1:07:98:8E:56:85:C3:15:7D"}}},"request":{"raw":"GET /abc/fixed_ui_ad7b03.js HTTP/1.1\r\nHost: wsu.rqtqsp9.lol\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://wsu.rqtqsp9.lol/cn/home/web/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: https://www.xzylm.com\r\ncontent-type: application/javascript; charset=utf-8\r\nvary: Accept-Encoding\r\ncache-control: public, max-age=2592000\r\ncontent-length: 5585\r\nvia: http/1.1 traffic_server (https://www.xzylm.com [cHs f ])\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":5585,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text","md5":"1d9bae76ae35abf890ddd36f74a88b58","sha1":"81a9202191b517b1c93098e6aeffe201bf0b1328","sha256":"5474eb3db72d8196868e5e434f383f9f7eb74e2a847682980b6b77b8224f31a1","sha512":"cbae894eafbcadcb084dbf5d756fee33c9127e915e84d327652fd0b393099da42113b20f5003835438e88c3ae8015d27e4cae8c8552735df8718e0fc5ab7f63d","ssdeep":"96:KdrFrabWXgMwEQxg23RgE+fE7Tzg2TCuNJkiT8oP5VYb5G6JS/lWrNfosKQwX:oBBwXm23RgffwT86CuNJb5VGGg+gplwX","tlshash":"a4b1735e79e33096892331b59fff150836319013620add907c0d92646fa5b9416b2fe9","first_seen":"2026-03-07T06:33:17.667915Z","last_seen":"2026-03-07T06:33:17.667915Z","times_seen":1,"resource_available":true,"data":null}},"time_used":240,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":240,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.alicdn.com/imgextra/i4/4183327079/O1CN011SH9va22AErRbNeqF_!!4183327079.gif","fqdn":"img.alicdn.com","domain":"alicdn.com","tld":"com"},"ip":{"addr":"47.246.44.178","port":443,"asn":24429,"as":"Zhejiang Taobao Network Co.,Ltd","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wsu.rqtqsp9.lol/cn/home/web/","date":"2026-03-07T06:32:55.000Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tbcdn.cn","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Fri, 28 Nov 2025 03:07:13 GMT","end":"Sat, 18 Jul 2026 09:41:04 GMT"},"fingerprint":{"sha1":"01:40:62:EF:8C:E5:C1:8A:19:4C:8D:B6:F5:C2:24:7F:DC:C0:9C:8A","sha256":"60:3C:41:A0:78:62:E6:5E:82:F0:FA:CF:5C:C9:D3:22:E4:64:EE:1A:EE:C7:CC:BA:DD:25:08:90:6F:CC:C4:F2"}}},"request":{"raw":"GET /imgextra/i4/4183327079/O1CN011SH9va22AErRbNeqF_!!4183327079.gif HTTP/1.1\r\nHost: img.alicdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wsu.rqtqsp9.lol/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: Tengine\r\ncontent-type: image/gif\r\ncontent-length: 218186\r\ndate: Tue, 10 Feb 2026 08:16:14 GMT\r\npicasso-ret-code: SUCCESS\r\npicasso-cache-info: L3-HIT\r\nrequest-time: 0.094\r\ntraceid: a3b5019d17707113743023013e\r\nx-powered-by: Picasso\r\npicasso-image-type: normal\r\npicasso-fmt: gif2avif\r\ncache-control: max-age=31536000\r\nvia: ens-cache19.l2de4[0,0,200-0,H], ens-cache2.l2de4[1,0], ens-cache17.se2[0,0,200-0,H], ens-cache8.se2[2,0]\r\naccess-control-allow-origin: *\r\nage: 2153801\r\nali-swift-global-savetime: 1770711374\r\nx-cache: HIT TCP_MEM_HIT dirn:-2:-2\r\nx-swift-savetime: Tue, 10 Feb 2026 08:18:40 GMT\r\nx-swift-cachetime: 31535854\r\nback_uri: /imgextra/i4/4183327079/O1CN011SH9va22AErRbNeqF_!!4183327079.gif_.avif\r\nvary: Accept\r\ns-rt: 2\r\ntiming-allow-origin: *\r\neagleid: 2ff62c9c17728651750723138e\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Tengine","description":"Tengine is a web server which is based on the Nginx HTTP server.","website":"https://tengine.taobao.org","common_platform_enumeration":"","icon":"Tengine.png","categories":["Web servers"]}],"data":{"size":218186,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 960 x 120","md5":"c746674e75d4ad03a61fdb261ee49376","sha1":"8cf71520c90c49746b49b3d4172bec815f88ee9c","sha256":"d6c1f96b8762b8f0d419fae7639ee8e519f2c0714d3a765288cd08bc58d4424f","sha512":"03a5ca97a917978cfb706777139f3cc069c6c8e06b09872c9783baa4aee2a701bc49ded5b8713748d6a90ff3f79ab0dd6aaf497e6863f44abe03e32cac5721fd","ssdeep":"3072:n9qyzDgNNsg1X0jksIxGcivXXfG2Qk6hBKofVLHhLHd6DlzLgkHEXLZ0EUHQ5JC+:nkQkTkwsmivXMk6hE8VT6z9EMHQPH7","tlshash":"dd2413479e0f1c4665c41b1ab473a3b71b32cb9cfa83506e43667e7b81a84b97207937","first_seen":"2026-02-10T10:56:09.229979Z","last_seen":"2026-04-04T15:25:57.38549Z","times_seen":2204,"resource_available":false,"data":null}},"time_used":156,"timings":{"blocked":-1,"dns":23,"connect":21,"send":0,"wait":34,"receive":5,"ssl":62},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"2026tu.myxuanxuan.com/mt2026-8qssd0z7qb","fqdn":"2026tu.myxuanxuan.com","domain":"myxuanxuan.com","tld":"com"},"ip":{"addr":"43.174.14.42","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wsu.rqtqsp9.lol/cn/home/web/","date":"2026-03-07T06:32:55.013Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"2026tu.myxuanxuan.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Sun, 18 Jan 2026 00:00:00 GMT","end":"Mon, 18 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"89:A5:51:BC:5F:09:A7:47:86:8A:45:EC:EE:78:46:C6:17:A3:08:CD","sha256":"02:BE:A0:16:7A:20:13:EB:60:A2:1D:D0:AF:87:4C:A4:41:0C:07:C7:1A:35:F8:CA:F3:EC:E7:F0:21:5F:15:C7"}}},"request":{"raw":"GET /mt2026-8qssd0z7qb HTTP/1.1\r\nHost: 2026tu.myxuanxuan.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wsu.rqtqsp9.lol/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\nserver: nginx\r\ndate: Sat, 07 Mar 2026 06:32:43 GMT\r\ncontent-type: text/html\r\nlocation: https://img.alicdn.com/imgextra/i3/2215209493335/O1CN010JTbhN1aVU01WrBDj_!!2215209493335-1-chatting.gif\r\ncontent-length: 138\r\nx-nws-log-uuid: 3164910960509987570\r\nx-cache-lookup: Cache Miss\r\nstrict-transport-security: max-age=1;\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":643569,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T15:49:33.06692Z","times_seen":13337345,"resource_available":true,"data":null}},"time_used":1077,"timings":{"blocked":-1,"dns":220,"connect":247,"send":0,"wait":334,"receive":0,"ssl":275},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.jkuntupiaxxzz.com/upload/vod/20260306-22/ca6ef7b2cefa8bd66d738538a9e12333.jpg","fqdn":"www.jkuntupiaxxzz.com","domain":"jkuntupiaxxzz.com","tld":"com"},"ip":{"addr":"64.112.76.43","port":443,"asn":6939,"as":"HURRICANE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wsu.rqtqsp9.lol/cn/home/web/","date":"2026-03-07T06:32:54.045Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jkuntupiaxxzz.com","organization":""},"issuer":{"commonName":"Certum DV TLS G2 R39 CA","organization":"Asseco Data Systems S.A."},"validity":{"start":"Wed, 21 Jan 2026 12:48:17 GMT","end":"Sat, 20 Feb 2027 12:48:16 GMT"},"fingerprint":{"sha1":"13:B6:FB:03:73:AC:FB:95:B6:AC:D3:EE:C1:74:7E:9C:AC:34:45:34","sha256":"D4:F4:9C:80:D3:FC:BE:AF:59:CE:B4:39:CB:48:78:3E:9E:82:EE:02:8C:F2:13:C4:96:BD:34:C4:AA:F6:D2:54"}}},"request":{"raw":"GET /upload/vod/20260306-22/ca6ef7b2cefa8bd66d738538a9e12333.jpg HTTP/1.1\r\nHost: www.jkuntupiaxxzz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wsu.rqtqsp9.lol/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 07 Mar 2026 06:32:54 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 11298\r\nConnection: keep-alive\r\nLast-Modified: Fri, 06 Mar 2026 03:36:53 GMT\r\nVary: Accept-Encoding\r\nETag: \"69aa4bd5-2c22\"\r\nExpires: Sun, 05 Apr 2026 04:02:53 GMT\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Credentials: true\r\nCache-Control: max-age=2592000, public, max-age=15768000\r\nCache: HIT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":11298,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 292x163, components 3","md5":"00d9a771cf82688810ea8ba61ee01493","sha1":"6fa52613fc2c55d3f636be6e10cee436dcf0e6ce","sha256":"d65082d2fc7a1b2e0d3c808113b584287ae06a5fb0f38363165ee293df90a44f","sha512":"bd49b77d932ef25dc98b9a889b63c98746156c4f903811c0c4eef27c5081dd1794ca1d24529187eb72d51837272be1464df99a92ba6662725f1a1c9a3638cf73","ssdeep":"192:ix34sqsP5nMWofthcZYNNWcpg8CB5Eyw7wxzP04nHEYtHpe0uMZysuH2JQ97l3en:iR7kmmPP2oKxzP0kPH80pzdfZ","tlshash":"73329fb6cc41e20be87e342ea322cdbb411a5983155a25febedbac41463d1721593c3f","first_seen":"2026-03-07T02:35:44.269685Z","last_seen":"2026-03-11T09:30:56.338126Z","times_seen":3,"resource_available":false,"data":null}},"time_used":540,"timings":{"blocked":-1,"dns":9,"connect":150,"send":0,"wait":179,"receive":1,"ssl":201},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"11224.xn--gps-8y0gm25n.xn--55qx5d/d/11224?_t=1765444375","fqdn":"11224.xn--gps-8y0gm25n.xn--55qx5d","domain":"11224.xn--gps-8y0gm25n.xn--55qx5d","tld":""},"ip":{"addr":"116.211.128.174","port":443,"asn":58563,"as":"CHINANET Hubei province network","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wsu.rqtqsp9.lol/cn/home/web/","date":"2026-03-07T06:32:54.976Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.xn--gps-8y0gm25n.xn--55qx5d","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 07 Jan 2026 14:22:13 GMT","end":"Tue, 07 Apr 2026 14:22:12 GMT"},"fingerprint":{"sha1":"01:F6:A8:64:D2:BF:90:49:78:62:32:E0:6F:0D:E9:33:66:39:30:EF","sha256":"5D:E4:BC:B9:AE:B1:76:CF:D1:39:B2:34:04:CA:CA:2F:97:94:D8:E3:B1:2D:D1:41:C3:4B:27:0D:1C:BF:03:26"}}},"request":{"raw":"GET /d/11224?_t=1765444375 HTTP/1.1\r\nHost: 11224.xn--gps-8y0gm25n.xn--55qx5d\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wsu.rqtqsp9.lol/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\ndate: Sat, 07 Mar 2026 06:32:55 GMT\r\ncontent-type: text/html\r\ncontent-length: 145\r\nlocation: https://fsffbhd.4000522777.xn--fiqs8s/ea980b9daf2cbb13355e4431bbc43384.gif?_t=1765444375\r\ncache-control: public, max-age=900\r\nexpires: Saturday, 07-Mar-2026 06:32:55 GMT\r\nstrict-transport-security: max-age=31536000\r\nx-via-jsl: badc901,-\r\nset-cookie: __jsluid_s=01a6b3c02e8cf3d6af38861bfcdbe27a; max-age=31536000; path=/; HttpOnly; SameSite=None; secure\r\nx-cache: miss\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":568104,"size_decoded":0,"mime_type":"image/webp","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T15:49:33.06692Z","times_seen":13337345,"resource_available":true,"data":null}},"time_used":1084,"timings":{"blocked":-1,"dns":261,"connect":255,"send":0,"wait":303,"receive":0,"ssl":264},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wsu.rqtqsp9.lol/cn/home/web/static/js/jquery.js","fqdn":"wsu.rqtqsp9.lol","domain":"rqtqsp9.lol","tld":"lol"},"ip":{"addr":"142.171.24.239","port":443,"asn":35916,"as":"MULTA-ASN1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://wsu.rqtqsp9.lol/cn/home/web/index.php/vod/play/id/975713/sid/1/nid/1.html","date":"2026-03-07T06:32:49.439Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.rqtqsp9.lol","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Feb 2026 04:57:07 GMT","end":"Sat, 09 May 2026 04:57:06 GMT"},"fingerprint":{"sha1":"CA:AE:D0:F4:85:B9:CD:C6:DD:C1:BA:BB:34:68:B2:F8:74:CB:0A:8B","sha256":"B8:18:09:A9:23:92:E8:BB:44:F2:8C:F5:5D:FC:3A:10:C5:F7:FA:7E:49:AC:0C:C1:07:98:8E:56:85:C3:15:7D"}}},"request":{"raw":"GET /cn/home/web/static/js/jquery.js HTTP/1.1\r\nHost: wsu.rqtqsp9.lol\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wsu.rqtqsp9.lol/cn/home/web/index.php/vod/play/id/975713/sid/1/nid/1.html\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: https://www.xzylm.com\r\ncontent-type: application/javascript\r\ncontent-length: 92629\r\nlast-modified: Thu, 04 Aug 2016 14:39:10 GMT\r\nvary: Accept-Encoding\r\ncache-control: public, max-age=2592000\r\naccept-ranges: bytes\r\nvia: http/1.1 traffic_server (https://www.xzylm.com [cRs f ])\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":92629,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (32089)","md5":"397754ba49e9e0cf4e7c190da78dda05","sha1":"ae49e56999d82802727455f0ba83b63acd90a22b","sha256":"c12f6098e641aaca96c60215800f18f5671039aecf812217fab3c0d152f6adb4","sha512":"8c64754f77507ab2c24a6fc818419b9dd3f0ceccc9065290e41afdbee0743f0da2cb13b2fbb00afa525c082f1e697cb3ffd76ef9b902cb81d7c41ca1c641dffb","ssdeep":"1536:dnu00HWWaRxkqJg09pYxoxDKMXJrg8hXXO4dK3kyfiLJBhdSZE+I+Qg7rbaN1RUx:ddkWgoBhcZRQgmW42qe","tlshash":"8c932bdd72d2b03257ab30bd106f540ff2361959280d8850f268d8f9bc79a49a277f6d","first_seen":"2023-03-07T01:02:08Z","last_seen":"2026-04-04T15:48:44.569044Z","times_seen":60616,"resource_available":true,"data":null}},"time_used":514,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":212,"receive":302,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wsu.rqtqsp9.lol/000/flink/analytics.php","fqdn":"wsu.rqtqsp9.lol","domain":"rqtqsp9.lol","tld":"lol"},"ip":{"addr":"142.171.24.239","port":443,"asn":35916,"as":"MULTA-ASN1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://wsu.rqtqsp9.lol/cn/home/web/index.php/vod/play/id/975713/sid/1/nid/1.html","date":"2026-03-07T06:32:50.187Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.rqtqsp9.lol","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Feb 2026 04:57:07 GMT","end":"Sat, 09 May 2026 04:57:06 GMT"},"fingerprint":{"sha1":"CA:AE:D0:F4:85:B9:CD:C6:DD:C1:BA:BB:34:68:B2:F8:74:CB:0A:8B","sha256":"B8:18:09:A9:23:92:E8:BB:44:F2:8C:F5:5D:FC:3A:10:C5:F7:FA:7E:49:AC:0C:C1:07:98:8E:56:85:C3:15:7D"}}},"request":{"raw":"POST /000/flink/analytics.php HTTP/1.1\r\nHost: wsu.rqtqsp9.lol\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/javascript, */*; q=0.01\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 9\r\nOrigin: https://wsu.rqtqsp9.lol\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wsu.rqtqsp9.lol/cn/home/web/index.php/vod/play/id/975713/sid/1/nid/1.html\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":9,"data":"referrer="}},"response":{"raw":"HTTP/2 204 No Content\r\nserver: https://www.xzylm.com\r\ndate: Sat, 07 Mar 2026 06:32:58 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nage: 0\r\nvia: http/1.1 traffic_server (https://www.xzylm.com [cMs f ])\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T15:49:33.06692Z","times_seen":13337345,"resource_available":true,"data":null}},"time_used":156,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":156,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wsu.rqtqsp9.lol/cn/home/web/static/js/home.js","fqdn":"wsu.rqtqsp9.lol","domain":"rqtqsp9.lol","tld":"lol"},"ip":{"addr":"142.171.24.239","port":443,"asn":35916,"as":"MULTA-ASN1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://wsu.rqtqsp9.lol/cn/home/web/","date":"2026-03-07T06:32:53.588Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.rqtqsp9.lol","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Feb 2026 04:57:07 GMT","end":"Sat, 09 May 2026 04:57:06 GMT"},"fingerprint":{"sha1":"CA:AE:D0:F4:85:B9:CD:C6:DD:C1:BA:BB:34:68:B2:F8:74:CB:0A:8B","sha256":"B8:18:09:A9:23:92:E8:BB:44:F2:8C:F5:5D:FC:3A:10:C5:F7:FA:7E:49:AC:0C:C1:07:98:8E:56:85:C3:15:7D"}}},"request":{"raw":"GET /cn/home/web/static/js/home.js HTTP/1.1\r\nHost: wsu.rqtqsp9.lol\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://wsu.rqtqsp9.lol/cn/home/web/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: https://www.xzylm.com\r\ncontent-type: application/javascript\r\ncontent-length: 36897\r\nlast-modified: Thu, 27 Mar 2025 13:21:20 GMT\r\nvary: Accept-Encoding\r\ncache-control: public, max-age=2592000\r\naccept-ranges: bytes\r\nvia: http/1.1 traffic_server (https://www.xzylm.com [cRs f ])\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":36897,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (2677)","md5":"5d23e8ddd7a43f468e387306bcf92221","sha1":"96726ef7e6e3b6703d2663c2bc5755acad948c4d","sha256":"5b3260a226d13b437b3222f7a1e2f7d2b677391c9677f54793b651f42c90a499","sha512":"a2acaa04d165ef65edcd1ebe80586bfc0dad7f428d71e4b40082c61fbdf72ebd9f9cc859a1e79e44b318809da4dfc46e76fd6fcc103b0809741cb106e5ac81fe","ssdeep":"768:hRzcTTu8ehbZLbhpa6aDb7z9SsbhkeuLr9GiFIw4TQvZ:hRoXdeC6lqihZ","tlshash":"a2f2a45dbaf3146050b3317a4fbf5508227a815f590ddd88fe2e01a44fc4a4eba66bbc","first_seen":"2025-05-09T21:00:38.535085Z","last_seen":"2026-04-04T12:57:38.447298Z","times_seen":4592,"resource_available":true,"data":null}},"time_used":195,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":191,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img1212.syhze.com/8888/xm/5088/120.gif","fqdn":"img1212.syhze.com","domain":"syhze.com","tld":"com"},"ip":{"addr":"205.198.65.15","port":443,"asn":138997,"as":"Eons Data Communications Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wsu.rqtqsp9.lol/cn/home/web/","date":"2026-03-07T06:32:54.956Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img1212.syhze.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 20 Feb 2026 05:10:16 GMT","end":"Thu, 21 May 2026 05:10:15 GMT"},"fingerprint":{"sha1":"0E:AF:BB:57:33:D9:8E:52:FC:E0:72:FB:99:E6:06:AE:75:3F:77:CD","sha256":"73:97:CE:47:3B:96:59:73:01:A9:E5:B5:E4:AA:29:99:2E:75:1A:0E:52:57:08:31:66:51:91:6E:D4:8A:EC:94"}}},"request":{"raw":"GET /8888/xm/5088/120.gif HTTP/1.1\r\nHost: img1212.syhze.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wsu.rqtqsp9.lol/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 07 Mar 2026 06:32:55 GMT\r\ncontent-type: image/gif\r\ncontent-length: 443228\r\nstrict-transport-security: max-age=31536000\r\nlast-modified: Mon, 16 Sep 2024 13:02:03 GMT\r\netag: \"66e82c4b-6c35c\"\r\nexpires: Mon, 06 Apr 2026 05:15:21 GMT\r\ncache-control: max-age=2592000\r\nserver: nginx\r\nx-cache-status: HIT\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\naccess-control-expose-headers: *\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1728000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":443228,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 960 x 120","md5":"6dfeb48901b7cd79256ac55ca0e057ad","sha1":"7f5be548b85f2c58a5a75f89831a60372e1fd49e","sha256":"077c10e1c5dda6d69f6cdb1cd61bd9b88d46ab20a09a0d1cd575348b422a80f6","sha512":"eb336246e254747a2ba6cc9ce2a793aa4919f2dce04f7327f82f33fbf1b7177a0a828bb4fdb687af252189476332345f9ca15e7a1163b0c572194b8b27464c45","ssdeep":"12288:bITYwMITYwMITwzFWFbSimWFbSimWFFL851b251b251b251ba:sYwTYwTakQcQc/87272727a","tlshash":"bb9412d3e4ea2823c6a62244ca9df7d57f411156653ea3d79b6b3f100e52d22e0ced09","first_seen":"2025-11-21T00:36:15.409425Z","last_seen":"2026-04-04T15:25:57.338806Z","times_seen":8016,"resource_available":false,"data":null}},"time_used":2237,"timings":{"blocked":-1,"dns":93,"connect":248,"send":0,"wait":250,"receive":1387,"ssl":258},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.alicdn.com/imgextra/i1/2207246784654/O1CN016SCogX1kFaOO1vIZt_!!2207246784654.gif","fqdn":"img.alicdn.com","domain":"alicdn.com","tld":"com"},"ip":{"addr":"47.246.44.178","port":443,"asn":24429,"as":"Zhejiang Taobao Network Co.,Ltd","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wsu.rqtqsp9.lol/cn/home/web/","date":"2026-03-07T06:32:56.625Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tbcdn.cn","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Fri, 28 Nov 2025 03:07:13 GMT","end":"Sat, 18 Jul 2026 09:41:04 GMT"},"fingerprint":{"sha1":"01:40:62:EF:8C:E5:C1:8A:19:4C:8D:B6:F5:C2:24:7F:DC:C0:9C:8A","sha256":"60:3C:41:A0:78:62:E6:5E:82:F0:FA:CF:5C:C9:D3:22:E4:64:EE:1A:EE:C7:CC:BA:DD:25:08:90:6F:CC:C4:F2"}}},"request":{"raw":"GET /imgextra/i1/2207246784654/O1CN016SCogX1kFaOO1vIZt_!!2207246784654.gif HTTP/1.1\r\nHost: img.alicdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wsu.rqtqsp9.lol/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: Tengine\r\ncontent-type: image/gif\r\ncontent-length: 221348\r\ndate: Thu, 13 Nov 2025 10:05:50 GMT\r\nlast-modified: Thu, 13 Nov 2025 09:36:51 GMT\r\npicasso-ret-code: SUCCESS\r\npicasso-cache-info: L4-HIT\r\nrequest-time: 0.107\r\ntraceid: a3b5f39617630283506058409e\r\nx-powered-by: Picasso\r\npicasso-image-type: normal\r\npicasso-fmt: gif2avif\r\ncache-control: max-age=31536000\r\nvia: ens-cache9.l2de3[0,0,200-0,H], ens-cache15.l2de3[1,0], ens-cache20.se2[0,0,200-0,H], ens-cache8.se2[2,0]\r\naccess-control-allow-origin: *\r\nage: 9836826\r\nali-swift-global-savetime: 1763028350\r\nx-cache: HIT TCP_MEM_HIT dirn:-2:-2\r\nx-swift-savetime: Thu, 13 Nov 2025 18:03:30 GMT\r\nx-swift-cachetime: 31507340\r\nback_uri: /imgextra/i1/2207246784654/O1CN016SCogX1kFaOO1vIZt_!!2207246784654.gif_.avif\r\nvary: Accept\r\ns-rt: 2\r\ntiming-allow-origin: *\r\neagleid: 2ff62c9c17728651766154386e\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Tengine","description":"Tengine is a web server which is based on the Nginx HTTP server.","website":"https://tengine.taobao.org","common_platform_enumeration":"","icon":"Tengine.png","categories":["Web servers"]}],"data":{"size":221348,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 960 x 60","md5":"91a4c6f090426e12424905e992711b10","sha1":"a2cb6864351065d53d1c4c502877adfd11103e4a","sha256":"88584290d770ecec2239e81884a8bf52306a473d03aafbdb9a359555e3b9c439","sha512":"ce208676f2178d6a9c8498f495422167058647fabfe812391f392ada0df7088434bd33a8a718c4d24a53c7b9c77af94d83faf3815f6364c76d203f97fe9cdb36","ssdeep":"6144:k/sj3j3iWwPIu/wQFxkt8gRZI1ZpLugfoi:k/sjz3iVIgwUgRS7VffX","tlshash":"6124137ee1c01f226e0522e9a7b8bf1b05b55487ed84a47729bdf9d6c7482b3e7601c0","first_seen":"2025-10-14T12:40:30.101425Z","last_seen":"2026-04-04T15:25:57.275219Z","times_seen":8636,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":10,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dq38rjje7qjm3.cloudfront.net/xhtd/960x120.gif","fqdn":"dq38rjje7qjm3.cloudfront.net","domain":"dq38rjje7qjm3.cloudfront.net","tld":"cloudfront.net"},"ip":{"addr":"65.9.60.143","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wsu.rqtqsp9.lol/cn/home/web/","date":"2026-03-07T06:32:57.409Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cloudfront.net","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Mon, 05 May 2025 00:00:00 GMT","end":"Thu, 23 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"8F:00:F1:34:A7:1E:27:1C:CF:CD:A6:53:8B:C4:82:B0:68:BC:C8:72","sha256":"60:38:9D:24:9E:41:8F:23:AC:D9:14:5C:A3:47:7E:AF:07:DB:9F:2D:6A:8C:0D:08:E9:24:8A:8E:49:A9:4D:28"}}},"request":{"raw":"GET /xhtd/960x120.gif HTTP/1.1\r\nHost: dq38rjje7qjm3.cloudfront.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wsu.rqtqsp9.lol/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/gif\r\ncontent-length: 93540\r\nlast-modified: Thu, 11 Dec 2025 03:48:41 GMT\r\nx-amz-server-side-encryption: AES256\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\ndate: Wed, 04 Mar 2026 21:07:00 GMT\r\netag: \"d17c0265bd5c40f03ea3b38db614d5fa\"\r\nvary: accept-encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 b80af6d90290b622c680fa62cff91fca.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN52-P1\r\nx-amz-cf-id: mBBri3DwwvtS-Zfn16aBPkBbDKRFExFvGQyPL_munfKWYKSIz9tNhQ==\r\nage: 206758\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":93540,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 960 x 120","md5":"d17c0265bd5c40f03ea3b38db614d5fa","sha1":"86fd316dbff0105c353ce4fee261d3ffd67c18ce","sha256":"2861568da5dcad2c4d42b984f1fe980881487c41b41994d0e0783f1b574139ce","sha512":"83f8917b4b01282169bb147584c08e1195907014562a3b78d46a8209e1b817f1c1e2a53a4b566919e19d83dddee3bdbfacd55627dc9fb32b1901c921daa9da93","ssdeep":"1536:J5GRXGxtd59jNNhrDeq3zzI6ipoYDnu9/QvY1Wuqk78ks4xycnTYf2JlavtaDpv8:nGRXGxtd597Rpz0tDnc6q1RY4Ecn0kja","tlshash":"289312b791ecd5c697826c8df5e304a056069606af7cfdd71584168690feeed2ac7300","first_seen":"2025-12-12T01:02:04.573696Z","last_seen":"2026-04-04T15:25:57.496857Z","times_seen":6332,"resource_available":false,"data":null}},"time_used":176,"timings":{"blocked":49,"dns":52,"connect":14,"send":0,"wait":12,"receive":16,"ssl":30},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wsu.rqtqsp9.lol/cn/home/web/static/js/jquery.lazyload.js","fqdn":"wsu.rqtqsp9.lol","domain":"rqtqsp9.lol","tld":"lol"},"ip":{"addr":"142.171.24.239","port":443,"asn":35916,"as":"MULTA-ASN1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://wsu.rqtqsp9.lol/cn/home/web/index.php/vod/play/id/975713/sid/1/nid/1.html","date":"2026-03-07T06:32:49.442Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.rqtqsp9.lol","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Feb 2026 04:57:07 GMT","end":"Sat, 09 May 2026 04:57:06 GMT"},"fingerprint":{"sha1":"CA:AE:D0:F4:85:B9:CD:C6:DD:C1:BA:BB:34:68:B2:F8:74:CB:0A:8B","sha256":"B8:18:09:A9:23:92:E8:BB:44:F2:8C:F5:5D:FC:3A:10:C5:F7:FA:7E:49:AC:0C:C1:07:98:8E:56:85:C3:15:7D"}}},"request":{"raw":"GET /cn/home/web/static/js/jquery.lazyload.js HTTP/1.1\r\nHost: wsu.rqtqsp9.lol\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wsu.rqtqsp9.lol/cn/home/web/index.php/vod/play/id/975713/sid/1/nid/1.html\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: https://www.xzylm.com\r\ncontent-type: application/javascript\r\ncontent-length: 2232\r\nlast-modified: Tue, 23 Jan 2018 00:08:40 GMT\r\nvary: Accept-Encoding\r\ncache-control: public, max-age=2592000\r\naccept-ranges: bytes\r\nvia: http/1.1 traffic_server (https://www.xzylm.com [cRs f ])\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":2232,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (2230)","md5":"9dfc308833c7ae64a6e0e6bd33fb51d7","sha1":"527e4dbceb22c063ed1bc5bd2ec362d9a412892a","sha256":"f3a5e91219434ff92ae7b36b9582136a75f56b605ebeb54bac21efdfea4466d1","sha512":"383aec26af4153c8d03cf7ab898378d5be2d509fcc12e87daaccaf2a51f145ac57b08c3001db895ed95b24e807c5290d256e5570a519b2c478185b9472d27578","ssdeep":"","tlshash":"d641e5863f027534f179a9ad430f52096127d03b92d58dd1b089d8ecfcf86579a3698b","first_seen":"2023-03-07T01:02:08Z","last_seen":"2026-04-04T12:57:38.403151Z","times_seen":18871,"resource_available":true,"data":null}},"time_used":513,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":513,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wsu.rqtqsp9.lol/cn/home/web/template/90sdyy_dc_pc/html/abc/a_pc.css","fqdn":"wsu.rqtqsp9.lol","domain":"rqtqsp9.lol","tld":"lol"},"ip":{"addr":"142.171.24.239","port":443,"asn":35916,"as":"MULTA-ASN1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://wsu.rqtqsp9.lol/cn/home/web/index.php/vod/play/id/975713/sid/1/nid/1.html","date":"2026-03-07T06:32:49.434Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.rqtqsp9.lol","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Feb 2026 04:57:07 GMT","end":"Sat, 09 May 2026 04:57:06 GMT"},"fingerprint":{"sha1":"CA:AE:D0:F4:85:B9:CD:C6:DD:C1:BA:BB:34:68:B2:F8:74:CB:0A:8B","sha256":"B8:18:09:A9:23:92:E8:BB:44:F2:8C:F5:5D:FC:3A:10:C5:F7:FA:7E:49:AC:0C:C1:07:98:8E:56:85:C3:15:7D"}}},"request":{"raw":"GET /cn/home/web/template/90sdyy_dc_pc/html/abc/a_pc.css HTTP/1.1\r\nHost: wsu.rqtqsp9.lol\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wsu.rqtqsp9.lol/cn/home/web/index.php/vod/play/id/975713/sid/1/nid/1.html\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: https://www.xzylm.com\r\ncontent-type: text/css\r\ncontent-length: 1272\r\nlast-modified: Tue, 12 Mar 2024 10:09:57 GMT\r\nvary: Accept-Encoding\r\ncache-control: public, max-age=2592000\r\naccept-ranges: bytes\r\nvia: http/1.1 traffic_server (https://www.xzylm.com [cHs f ])\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1272,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"9b19f07bae716cbe7579d9182258a573","sha1":"2530f24042dc44d61704b0d5722eac9d2b413263","sha256":"f471118fb9a3cea28b5b02878ddccaa1e15d5e7761690242a7c8c1f5a877b6e3","sha512":"009c8b9700abaf2eed63c706aaff08a9306d91ef110e14fe1a28075e2abe71e8f7e219f0f2ec5127994b55db0ee4d2a5f9ec1fa146f313947be897c735aa6cd4","ssdeep":"","tlshash":"a721383237666488d90fe2edaeb5e77c2e1e4090bf0f4d7e64603624938e69505b36c9","first_seen":"2023-10-19T00:50:43Z","last_seen":"2026-04-04T12:57:38.456374Z","times_seen":5402,"resource_available":false,"data":null}},"time_used":652,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":652,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wsu.rqtqsp9.lol/cn/home/web/index.php/user/ajax_ulog/?ac=set\u0026mid=1\u0026id=\u0026sid=1\u0026nid=1\u0026type=4","fqdn":"wsu.rqtqsp9.lol","domain":"rqtqsp9.lol","tld":"lol"},"ip":{"addr":"142.171.24.239","port":443,"asn":35916,"as":"MULTA-ASN1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://wsu.rqtqsp9.lol/cn/home/web/index.php/vod/play/id/975713/sid/1/nid/1.html","date":"2026-03-07T06:32:50.337Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.rqtqsp9.lol","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Feb 2026 04:57:07 GMT","end":"Sat, 09 May 2026 04:57:06 GMT"},"fingerprint":{"sha1":"CA:AE:D0:F4:85:B9:CD:C6:DD:C1:BA:BB:34:68:B2:F8:74:CB:0A:8B","sha256":"B8:18:09:A9:23:92:E8:BB:44:F2:8C:F5:5D:FC:3A:10:C5:F7:FA:7E:49:AC:0C:C1:07:98:8E:56:85:C3:15:7D"}}},"request":{"raw":"GET /cn/home/web/index.php/user/ajax_ulog/?ac=set\u0026mid=1\u0026id=\u0026sid=1\u0026nid=1\u0026type=4 HTTP/1.1\r\nHost: wsu.rqtqsp9.lol\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Requested-With: XMLHttpRequest\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wsu.rqtqsp9.lol/cn/home/web/index.php/vod/play/id/975713/sid/1/nid/1.html\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\nserver: https://www.xzylm.com\r\ndate: Sat, 07 Mar 2026 06:32:58 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nage: 0\r\nvia: http/1.1 traffic_server (https://www.xzylm.com [c s f ])\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":null,"data":{"size":17703,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"89e6bca383ae3342bcb7a0e819b32960","sha1":"113ab0b9bb6741a5cc25e43dda8fd4dfe2b2798e","sha256":"836833ae7470545a12fd73f0785a9f17c9711b8d30b46aba3bf3c81ead19e4ab","sha512":"b123004ec35dc020e60db609e9a17b00df8079e76989bf7ee36d257be84879983d53c67b13ee0f20c86907e7ea3cade0ef262b49db7598acbb4cd7759f4e0e5c","ssdeep":"192:1uNGtwnLFR45u5ntr9XVNPnZ0wrpcFmCbHfr3MvMNyxe86BWe3raHUu82TAoZou/:1jteFvdv1jofHanTFufft4f","tlshash":"9472835b4ef212171016e57273f13b5ae672d60bc64e8da43d9c3ba0cf80f90568fa99","first_seen":"2026-03-07T02:35:44.279229Z","last_seen":"2026-03-07T06:33:17.658506Z","times_seen":2,"resource_available":false,"data":null}},"time_used":227,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":227,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wsu.rqtqsp9.lol/cn/home/web/template/90sdyy_dc_pc/asset/js/global.js?v=","fqdn":"wsu.rqtqsp9.lol","domain":"rqtqsp9.lol","tld":"lol"},"ip":{"addr":"142.171.24.239","port":443,"asn":35916,"as":"MULTA-ASN1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://wsu.rqtqsp9.lol/cn/home/web/","date":"2026-03-07T06:32:53.590Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.rqtqsp9.lol","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Feb 2026 04:57:07 GMT","end":"Sat, 09 May 2026 04:57:06 GMT"},"fingerprint":{"sha1":"CA:AE:D0:F4:85:B9:CD:C6:DD:C1:BA:BB:34:68:B2:F8:74:CB:0A:8B","sha256":"B8:18:09:A9:23:92:E8:BB:44:F2:8C:F5:5D:FC:3A:10:C5:F7:FA:7E:49:AC:0C:C1:07:98:8E:56:85:C3:15:7D"}}},"request":{"raw":"GET /cn/home/web/template/90sdyy_dc_pc/asset/js/global.js?v= HTTP/1.1\r\nHost: wsu.rqtqsp9.lol\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://wsu.rqtqsp9.lol/cn/home/web/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: https://www.xzylm.com\r\ncontent-type: application/javascript\r\ncontent-length: 41189\r\nlast-modified: Sun, 09 Dec 2018 04:49:09 GMT\r\nvary: Accept-Encoding\r\ncache-control: public, max-age=2592000\r\naccept-ranges: bytes\r\nvia: http/1.1 traffic_server (https://www.xzylm.com [cHs f ])\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":41189,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (4059), with CRLF line terminators","md5":"28ea52d14439e5a65651aad04ffdf4c3","sha1":"e6100154bac6261acb4e7f7f14cc38a2ca5d53e4","sha256":"3a7f298306397d1945de1d0730659e75d3041968d6047712fcdffc74efb2b2a9","sha512":"985421e58f0d5d60858f2e234159e4bef969a5760857a4d4bd460f16fa5a8582feaf2e4a2bd56eb63b4fe8620c9b2f62d8d4ff5d7b761dd55d471ddc96d791e0","ssdeep":"768:8wO6yOHHjkKI2JEXFvlWHRJsJ1k5YkkfLp:82j7EWHrVkfLp","tlshash":"e503635cf9952ea1a27b73a78cbb7c19d377047301258750f6bd36816f362889192cbc","first_seen":"2023-03-12T23:38:28Z","last_seen":"2026-03-15T14:56:28.251269Z","times_seen":248,"resource_available":true,"data":null}},"time_used":245,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":239,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.jkuntupiaxxzz.com/upload/vod/20260306-22/7331adbea49253b943262440a2f43ee8.jpg","fqdn":"www.jkuntupiaxxzz.com","domain":"jkuntupiaxxzz.com","tld":"com"},"ip":{"addr":"64.112.76.43","port":443,"asn":6939,"as":"HURRICANE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wsu.rqtqsp9.lol/cn/home/web/","date":"2026-03-07T06:32:53.993Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jkuntupiaxxzz.com","organization":""},"issuer":{"commonName":"Certum DV TLS G2 R39 CA","organization":"Asseco Data Systems S.A."},"validity":{"start":"Wed, 21 Jan 2026 12:48:17 GMT","end":"Sat, 20 Feb 2027 12:48:16 GMT"},"fingerprint":{"sha1":"13:B6:FB:03:73:AC:FB:95:B6:AC:D3:EE:C1:74:7E:9C:AC:34:45:34","sha256":"D4:F4:9C:80:D3:FC:BE:AF:59:CE:B4:39:CB:48:78:3E:9E:82:EE:02:8C:F2:13:C4:96:BD:34:C4:AA:F6:D2:54"}}},"request":{"raw":"GET /upload/vod/20260306-22/7331adbea49253b943262440a2f43ee8.jpg HTTP/1.1\r\nHost: www.jkuntupiaxxzz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wsu.rqtqsp9.lol/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 07 Mar 2026 06:32:54 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 11338\r\nConnection: keep-alive\r\nLast-Modified: Fri, 06 Mar 2026 03:31:43 GMT\r\nVary: Accept-Encoding\r\nETag: \"69aa4a9f-2c4a\"\r\nExpires: Sun, 05 Apr 2026 03:57:57 GMT\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Credentials: true\r\nCache-Control: max-age=2592000, public, max-age=15768000\r\nCache: HIT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":11338,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 288x166, components 3","md5":"0ebd5a78a43401954cb8ed584f0b8afb","sha1":"b94ab177f9178648227c47b88edce04ef730b0a0","sha256":"5b7ce9736c629d9d631a68b42d1fd61bbdcc1deaa263fc69aaf446ea5fb2dd5a","sha512":"3fbd11dc10a38a3c2ac01a3a942eec348345174f4cac9e4d0d1ba837960495001f9a57c33a0f599b9c61e2e7101ab675fc70921a9cad350cadfa025d055e3bd7","ssdeep":"192:A8slRjwrAjZ+M5PSrl09fRc1j/GkS/9zZb2Ev45oWRqRvMeCgpDdJnr+VOB:A1nErOkCzxRcxShl5gvRq1ZJq2","tlshash":"9b32cf00c2fb6b4fe116c57b58458f734308aa37ea149f7932e19256ef64066ec4c0d6","first_seen":"2026-03-07T02:35:44.277223Z","last_seen":"2026-03-14T14:33:00.61097Z","times_seen":3,"resource_available":false,"data":null}},"time_used":944,"timings":{"blocked":378,"dns":37,"connect":148,"send":0,"wait":177,"receive":1,"ssl":201},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wsu.rqtqsp9.lol/cn/home/web/template/90sdyy_dc_pc/asset/img/logo_golden.png","fqdn":"wsu.rqtqsp9.lol","domain":"rqtqsp9.lol","tld":"lol"},"ip":{"addr":"142.171.24.239","port":443,"asn":35916,"as":"MULTA-ASN1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wsu.rqtqsp9.lol/cn/home/web/","date":"2026-03-07T06:32:53.797Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.rqtqsp9.lol","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Feb 2026 04:57:07 GMT","end":"Sat, 09 May 2026 04:57:06 GMT"},"fingerprint":{"sha1":"CA:AE:D0:F4:85:B9:CD:C6:DD:C1:BA:BB:34:68:B2:F8:74:CB:0A:8B","sha256":"B8:18:09:A9:23:92:E8:BB:44:F2:8C:F5:5D:FC:3A:10:C5:F7:FA:7E:49:AC:0C:C1:07:98:8E:56:85:C3:15:7D"}}},"request":{"raw":"GET /cn/home/web/template/90sdyy_dc_pc/asset/img/logo_golden.png HTTP/1.1\r\nHost: wsu.rqtqsp9.lol\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://wsu.rqtqsp9.lol/cn/home/web/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: https://www.xzylm.com\r\ncontent-type: image/png\r\ncontent-length: 6687\r\nlast-modified: Fri, 12 Jul 2019 07:25:54 GMT\r\nvary: Accept-Encoding\r\ncache-control: public, max-age=2592000\r\naccept-ranges: bytes\r\nvia: http/1.1 traffic_server (https://www.xzylm.com [cRs f ])\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":6687,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 335 x 109, 8-bit/color RGBA, non-interlaced","md5":"b0a3e4fe894a0101b02b95a6d80a73ab","sha1":"f144267145d5a87f8a8dd815adf021bd42a3c955","sha256":"50d0c620ef6178b6008ddf8331b5f04c2e70cbbdbfe4782ffdb7b5ca69f4006f","sha512":"2ba3c961551704738a8e0ab4f3f118c2feab218c488e07abd8157ec267a978499773ef6237046235b933f074132c9276750a86e2b2b0ba37636db6cc631042c3","ssdeep":"192:R44HWMXtmETiUg8jds3f1K7Bv3ksr7JTyi8apuy2k:RsctmE+MstUvksrkw","tlshash":"f2d18d1dff048cc6d689f54129ec9217b8f227e8b1e59768908b80e36d333e5a0876d3","first_seen":"2025-07-23T01:20:51.058559Z","last_seen":"2026-03-15T14:56:28.239197Z","times_seen":240,"resource_available":false,"data":null}},"time_used":155,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":154,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.alicdn.com/imgextra/i2/O1CN01NVNrIJ1rGgfwg3qhu_!!2216598935604-1-fleamarket.gif","fqdn":"img.alicdn.com","domain":"alicdn.com","tld":"com"},"ip":{"addr":"47.246.44.178","port":443,"asn":24429,"as":"Zhejiang Taobao Network Co.,Ltd","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wsu.rqtqsp9.lol/cn/home/web/","date":"2026-03-07T06:32:54.996Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tbcdn.cn","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Fri, 28 Nov 2025 03:07:13 GMT","end":"Sat, 18 Jul 2026 09:41:04 GMT"},"fingerprint":{"sha1":"01:40:62:EF:8C:E5:C1:8A:19:4C:8D:B6:F5:C2:24:7F:DC:C0:9C:8A","sha256":"60:3C:41:A0:78:62:E6:5E:82:F0:FA:CF:5C:C9:D3:22:E4:64:EE:1A:EE:C7:CC:BA:DD:25:08:90:6F:CC:C4:F2"}}},"request":{"raw":"GET /imgextra/i2/O1CN01NVNrIJ1rGgfwg3qhu_!!2216598935604-1-fleamarket.gif HTTP/1.1\r\nHost: img.alicdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wsu.rqtqsp9.lol/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: Tengine\r\ncontent-type: image/gif\r\ncontent-length: 343870\r\ndate: Tue, 24 Feb 2026 09:21:16 GMT\r\npicasso-ret-code: SUCCESS\r\npicasso-cache-info: L3-HIT\r\nrequest-time: 0.001\r\ntraceid: 9b66a79b17719248762374431e\r\nx-powered-by: Picasso\r\npicasso-image-type: normal\r\npicasso-fmt: gif2avif\r\ncache-control: max-age=31536000\r\nvia: ens-cache25.l2de4[0,0,200-0,H], ens-cache37.l2de4[1,0], ens-cache17.se2[0,0,200-0,H], ens-cache8.se2[2,0]\r\naccess-control-allow-origin: *\r\nage: 940299\r\nali-swift-global-savetime: 1771924876\r\nx-cache: HIT TCP_MEM_HIT dirn:-2:-2\r\nx-swift-savetime: Tue, 24 Feb 2026 09:25:39 GMT\r\nx-swift-cachetime: 31535737\r\nback_uri: /imgextra/i2/O1CN01NVNrIJ1rGgfwg3qhu_!!2216598935604-1-fleamarket.gif_.avif\r\nvary: Accept\r\ns-rt: 2\r\ntiming-allow-origin: *\r\neagleid: 2ff62c9c17728651750733141e\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Tengine","description":"Tengine is a web server which is based on the Nginx HTTP server.","website":"https://tengine.taobao.org","common_platform_enumeration":"","icon":"Tengine.png","categories":["Web servers"]}],"data":{"size":343870,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 960 x 120","md5":"238239bf4773f01ca956b4660db9fc08","sha1":"b16e1c73e5b4baa750f587eb54dfcbeac7f53a13","sha256":"3ef3e2cdea8b61bd88b40faf96f6b6c2dfc326104b04ee58f1f4b1798dfb7668","sha512":"97df4878d6567c54a0bce399d2b9b59d132f45b59c839c3d0968a623d6cd2f476c06006d77bf2905e8d6a1ab28709193c01fb384630c08f0508950ea126d8dd4","ssdeep":"6144:skDFXvr1efkuVrBSJVEL0KLIN/odsqTwtZfV0KLkbMHjnFf5n1QL9CFMEk9V1:ssF/r1dudB2EYKW/o+qTAJCKobMpxn1I","tlshash":"3c7423fe483949d4316b3e6518376eff00e8fe29125962567dffb4e270c482c119b6a2","first_seen":"2026-02-24T09:59:59.873572Z","last_seen":"2026-03-15T07:53:53.560019Z","times_seen":1004,"resource_available":false,"data":null}},"time_used":168,"timings":{"blocked":-1,"dns":24,"connect":21,"send":0,"wait":40,"receive":8,"ssl":65},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wsu.rqtqsp9.lol/cn/home/web/static/js/jquery.autocomplete.js","fqdn":"wsu.rqtqsp9.lol","domain":"rqtqsp9.lol","tld":"lol"},"ip":{"addr":"142.171.24.239","port":443,"asn":35916,"as":"MULTA-ASN1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://wsu.rqtqsp9.lol/cn/home/web/","date":"2026-03-07T06:32:53.587Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.rqtqsp9.lol","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Feb 2026 04:57:07 GMT","end":"Sat, 09 May 2026 04:57:06 GMT"},"fingerprint":{"sha1":"CA:AE:D0:F4:85:B9:CD:C6:DD:C1:BA:BB:34:68:B2:F8:74:CB:0A:8B","sha256":"B8:18:09:A9:23:92:E8:BB:44:F2:8C:F5:5D:FC:3A:10:C5:F7:FA:7E:49:AC:0C:C1:07:98:8E:56:85:C3:15:7D"}}},"request":{"raw":"GET /cn/home/web/static/js/jquery.autocomplete.js HTTP/1.1\r\nHost: wsu.rqtqsp9.lol\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://wsu.rqtqsp9.lol/cn/home/web/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: https://www.xzylm.com\r\ncontent-type: application/javascript\r\ncontent-length: 25109\r\nlast-modified: Mon, 23 Jul 2018 00:50:46 GMT\r\nvary: Accept-Encoding\r\ncache-control: public, max-age=2592000\r\naccept-ranges: bytes\r\nvia: http/1.1 traffic_server (https://www.xzylm.com [cRs f ])\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":25109,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"932466cf2976a99330383be9ffe8ca6b","sha1":"732c55aa5bbb6efb63fad871db9773139929d0e6","sha256":"22a879d897b0c6559e8a4f0e1d7f8866471478740a5b5cace3c29c97c8fdaf18","sha512":"e1ea60c13642bbc8ed8cd448007d5096c4067596b1fee2bea55f1fea765bab59f97f92fa973bdd329ccf78087be301325b14a206592a76c3699128459559159b","ssdeep":"384:EC8MJlHqBlgr2qMrLXej2Jy7fwaoSXo0TviE:Ed7Dr7OtZTqE","tlshash":"d3b2ec0979e3226292a7707e8faf0008b676a557240cdd50bd1ca7d02f54938b6f7fe9","first_seen":"2023-04-07T04:49:34Z","last_seen":"2026-04-04T12:57:38.428389Z","times_seen":20008,"resource_available":true,"data":null}},"time_used":192,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":186,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wsu.rqtqsp9.lol/cn/home/web/static/js/jquery.autocomplete.js","fqdn":"wsu.rqtqsp9.lol","domain":"rqtqsp9.lol","tld":"lol"},"ip":{"addr":"142.171.24.239","port":443,"asn":35916,"as":"MULTA-ASN1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://wsu.rqtqsp9.lol/cn/home/web/index.php/vod/play/id/975713/sid/1/nid/1.html","date":"2026-03-07T06:32:49.444Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.rqtqsp9.lol","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Feb 2026 04:57:07 GMT","end":"Sat, 09 May 2026 04:57:06 GMT"},"fingerprint":{"sha1":"CA:AE:D0:F4:85:B9:CD:C6:DD:C1:BA:BB:34:68:B2:F8:74:CB:0A:8B","sha256":"B8:18:09:A9:23:92:E8:BB:44:F2:8C:F5:5D:FC:3A:10:C5:F7:FA:7E:49:AC:0C:C1:07:98:8E:56:85:C3:15:7D"}}},"request":{"raw":"GET /cn/home/web/static/js/jquery.autocomplete.js HTTP/1.1\r\nHost: wsu.rqtqsp9.lol\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wsu.rqtqsp9.lol/cn/home/web/index.php/vod/play/id/975713/sid/1/nid/1.html\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: https://www.xzylm.com\r\ncontent-type: application/javascript\r\ncontent-length: 25109\r\nlast-modified: Mon, 23 Jul 2018 00:50:46 GMT\r\nvary: Accept-Encoding\r\ncache-control: public, max-age=2592000\r\naccept-ranges: bytes\r\nvia: http/1.1 traffic_server (https://www.xzylm.com [cRs f ])\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":25109,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"932466cf2976a99330383be9ffe8ca6b","sha1":"732c55aa5bbb6efb63fad871db9773139929d0e6","sha256":"22a879d897b0c6559e8a4f0e1d7f8866471478740a5b5cace3c29c97c8fdaf18","sha512":"e1ea60c13642bbc8ed8cd448007d5096c4067596b1fee2bea55f1fea765bab59f97f92fa973bdd329ccf78087be301325b14a206592a76c3699128459559159b","ssdeep":"384:EC8MJlHqBlgr2qMrLXej2Jy7fwaoSXo0TviE:Ed7Dr7OtZTqE","tlshash":"d3b2ec0979e3226292a7707e8faf0008b676a557240cdd50bd1ca7d02f54938b6f7fe9","first_seen":"2023-04-07T04:49:34Z","last_seen":"2026-04-04T12:57:38.428389Z","times_seen":20008,"resource_available":true,"data":null}},"time_used":571,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":512,"receive":59,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wsu.rqtqsp9.lol/cn/home/webundefined?name=%E3%80%90ID%3A-%E5%90%8D%E7%A7%B0%3Aundefinedundefined-undefined%E3%80%91%E6%97%A0%E6%B3%95%E8%A7%82%E7%9C%8B%E8%AF%B7%E6%A3%80%E6%9F%A5%E4%BF%AE%E5%A4%8D%E3%80%82%E9%A1%B5%E9%9D%A2%E5%9C%B0%E5%9D%80%EF%BC%9Ahttps%3A%2F%2Fwsu.rqtqsp9.lol%2Fcn%2Fhome%2Fweb%2Findex.php%2Fvod%2Fplay%2Fid%2F975713%2Fsid%2F1%2Fnid%2F1.html","fqdn":"wsu.rqtqsp9.lol","domain":"rqtqsp9.lol","tld":"lol"},"ip":{"addr":"142.171.24.239","port":443,"asn":35916,"as":"MULTA-ASN1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://wsu.rqtqsp9.lol/cn/home/web/index.php/vod/play/id/975713/sid/1/nid/1.html","date":"2026-03-07T06:32:50.355Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.rqtqsp9.lol","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Feb 2026 04:57:07 GMT","end":"Sat, 09 May 2026 04:57:06 GMT"},"fingerprint":{"sha1":"CA:AE:D0:F4:85:B9:CD:C6:DD:C1:BA:BB:34:68:B2:F8:74:CB:0A:8B","sha256":"B8:18:09:A9:23:92:E8:BB:44:F2:8C:F5:5D:FC:3A:10:C5:F7:FA:7E:49:AC:0C:C1:07:98:8E:56:85:C3:15:7D"}}},"request":{"raw":"GET /cn/home/webundefined?name=%E3%80%90ID%3A-%E5%90%8D%E7%A7%B0%3Aundefinedundefined-undefined%E3%80%91%E6%97%A0%E6%B3%95%E8%A7%82%E7%9C%8B%E8%AF%B7%E6%A3%80%E6%9F%A5%E4%BF%AE%E5%A4%8D%E3%80%82%E9%A1%B5%E9%9D%A2%E5%9C%B0%E5%9D%80%EF%BC%9Ahttps%3A%2F%2Fwsu.rqtqsp9.lol%2Fcn%2Fhome%2Fweb%2Findex.php%2Fvod%2Fplay%2Fid%2F975713%2Fsid%2F1%2Fnid%2F1.html HTTP/1.1\r\nHost: wsu.rqtqsp9.lol\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Requested-With: XMLHttpRequest\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wsu.rqtqsp9.lol/cn/home/web/index.php/vod/play/id/975713/sid/1/nid/1.html\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\nserver: https://www.xzylm.com\r\ndate: Sat, 07 Mar 2026 06:32:58 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nage: 0\r\nvia: http/1.1 traffic_server (https://www.xzylm.com [c s f ])\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":null,"data":{"size":17703,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"89e6bca383ae3342bcb7a0e819b32960","sha1":"113ab0b9bb6741a5cc25e43dda8fd4dfe2b2798e","sha256":"836833ae7470545a12fd73f0785a9f17c9711b8d30b46aba3bf3c81ead19e4ab","sha512":"b123004ec35dc020e60db609e9a17b00df8079e76989bf7ee36d257be84879983d53c67b13ee0f20c86907e7ea3cade0ef262b49db7598acbb4cd7759f4e0e5c","ssdeep":"192:1uNGtwnLFR45u5ntr9XVNPnZ0wrpcFmCbHfr3MvMNyxe86BWe3raHUu82TAoZou/:1jteFvdv1jofHanTFufft4f","tlshash":"9472835b4ef212171016e57273f13b5ae672d60bc64e8da43d9c3ba0cf80f90568fa99","first_seen":"2026-03-07T02:35:44.279229Z","last_seen":"2026-03-07T06:33:17.658506Z","times_seen":2,"resource_available":false,"data":null}},"time_used":177,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":177,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img1212.syhze.com/8888/mbh/960x120.gif","fqdn":"img1212.syhze.com","domain":"syhze.com","tld":"com"},"ip":{"addr":"205.198.65.15","port":443,"asn":138997,"as":"Eons Data Communications Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wsu.rqtqsp9.lol/cn/home/web/","date":"2026-03-07T06:32:54.950Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img1212.syhze.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 20 Feb 2026 05:10:16 GMT","end":"Thu, 21 May 2026 05:10:15 GMT"},"fingerprint":{"sha1":"0E:AF:BB:57:33:D9:8E:52:FC:E0:72:FB:99:E6:06:AE:75:3F:77:CD","sha256":"73:97:CE:47:3B:96:59:73:01:A9:E5:B5:E4:AA:29:99:2E:75:1A:0E:52:57:08:31:66:51:91:6E:D4:8A:EC:94"}}},"request":{"raw":"GET /8888/mbh/960x120.gif HTTP/1.1\r\nHost: img1212.syhze.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wsu.rqtqsp9.lol/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 07 Mar 2026 06:32:55 GMT\r\ncontent-type: image/gif\r\ncontent-length: 496600\r\nstrict-transport-security: max-age=31536000\r\nlast-modified: Fri, 30 Jan 2026 13:22:20 GMT\r\netag: \"697cb08c-793d8\"\r\nexpires: Mon, 06 Apr 2026 05:15:23 GMT\r\ncache-control: max-age=2592000\r\nserver: nginx\r\nx-cache-status: HIT\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\naccess-control-expose-headers: *\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1728000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":496600,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 960 x 120","md5":"98f1aab916043713d1744086a4aac70d","sha1":"abbc50f57afaea6090ffec73c53bc824926db831","sha256":"4bcfe3c6ff3dcd160bd51a92164046ed60b025895dc6affc06db0d6d88b77259","sha512":"50aded0afad0a2f06bc9b5dd4ba767e64e5cf59b627ee62ce66bf3a769b0fddfa7533cb591e0ad6dfd3be42afa77d37181ea9fd7dac487946081ee0f24e837f0","ssdeep":"6144:9G4QxSTTMRTTMRTTMRfE3O4+g2CjZnFaYG/eFVVL:E0T4RT4RT4RyO4fFZFaL/Q","tlshash":"c3b423ec487fcd5dc8b22c2c3143023349a2b17879df88626793b9d7e5d6b196a82d35","first_seen":"2026-01-31T02:19:27.411392Z","last_seen":"2026-04-04T15:25:57.371862Z","times_seen":2803,"resource_available":false,"data":null}},"time_used":2989,"timings":{"blocked":611,"dns":96,"connect":264,"send":0,"wait":1114,"receive":632,"ssl":269},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img1.ah7907.com/846-960x60.gif","fqdn":"img1.ah7907.com","domain":"ah7907.com","tld":"com"},"ip":{"addr":"47.242.20.187","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wsu.rqtqsp9.lol/cn/home/web/","date":"2026-03-07T06:32:54.973Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img1.ah7907.com","organization":""},"issuer":{"commonName":"Certum DV TLS G2 R39 CA","organization":"Asseco Data Systems S.A."},"validity":{"start":"Thu, 06 Nov 2025 07:27:15 GMT","end":"Sun, 06 Dec 2026 07:27:14 GMT"},"fingerprint":{"sha1":"EE:18:15:48:CE:4E:22:9F:18:59:AB:6E:5E:C0:0D:4E:AF:C2:86:22","sha256":"65:F5:69:07:04:80:B4:E3:E7:D0:C5:50:2E:02:11:1C:02:89:6E:83:40:00:DD:00:37:08:E9:9C:1C:A3:4D:59"}}},"request":{"raw":"GET /846-960x60.gif HTTP/1.1\r\nHost: img1.ah7907.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wsu.rqtqsp9.lol/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 307 Temporary Redirect\r\nserver: NgxFence\r\ndate: Sat, 07 Mar 2026 06:32:56 GMT\r\ncontent-type: text/html; charset=utf-8\r\ncontent-length: 0\r\nlocation: https://img.alicdn.com/imgextra/i1/2207246784654/O1CN016SCogX1kFaOO1vIZt_!!2207246784654.gif\r\nx-cache-status: HIT\r\nstrict-transport-security: max-age=31536000; includeSubdomains; preload\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"307","status_text":"Temporary Redirect","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":221348,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T15:49:33.06692Z","times_seen":13337345,"resource_available":true,"data":null}},"time_used":1669,"timings":{"blocked":-1,"dns":326,"connect":273,"send":0,"wait":767,"receive":0,"ssl":302},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"d18wfmxtvthwf6.cloudfront.net/yinhe/960-120.gif","fqdn":"d18wfmxtvthwf6.cloudfront.net","domain":"d18wfmxtvthwf6.cloudfront.net","tld":"cloudfront.net"},"ip":{"addr":"54.192.209.4","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wsu.rqtqsp9.lol/cn/home/web/","date":"2026-03-07T06:32:57.411Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cloudfront.net","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Mon, 05 May 2025 00:00:00 GMT","end":"Thu, 23 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"8F:00:F1:34:A7:1E:27:1C:CF:CD:A6:53:8B:C4:82:B0:68:BC:C8:72","sha256":"60:38:9D:24:9E:41:8F:23:AC:D9:14:5C:A3:47:7E:AF:07:DB:9F:2D:6A:8C:0D:08:E9:24:8A:8E:49:A9:4D:28"}}},"request":{"raw":"GET /yinhe/960-120.gif HTTP/1.1\r\nHost: d18wfmxtvthwf6.cloudfront.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wsu.rqtqsp9.lol/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/gif\r\ncontent-length: 215880\r\ndate: Wed, 25 Feb 2026 03:20:56 GMT\r\nlast-modified: Sun, 30 Mar 2025 12:21:24 GMT\r\netag: \"c2e3bac355c689e234388104488b22e2\"\r\nx-amz-server-side-encryption: AES256\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 42f63300fbd68ad2da1e182d0d6d6948.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: D9g4O16vPv-jIalmJpKtQk3yya1S6vb5mfQyQEl9vR-G9zGUIRLMaw==\r\nage: 875522\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":215880,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 960 x 120","md5":"c2e3bac355c689e234388104488b22e2","sha1":"fcf87563ac96adb085897c5e4b9ba62681e5139e","sha256":"3e2c70fe6b947f60c3dd5752c94d502a3443c28f781738d2e308567ad5cd90cf","sha512":"239bc5d1df9c1aa3cb7cb72bc2c5451dbaa7dc8255bc9cc348dbe22ab5752e37a11047d421769e0228f8a645981a246d0b5af00792de9dce6a6b1f8f504cd044","ssdeep":"3072:Y8szBTXPqZiXzUBgLKsbV9UnxQCBL/YYYDSMdIok1RLp8veNVhRZ2:3OBLfzUHoexXL/YDSCIfXL/hRZ2","tlshash":"ed2422faf626c923c47eabc16370eda256f7c78471e2100657c17f5ada603a0cb9851d","first_seen":"2025-04-02T02:40:05.475958Z","last_seen":"2026-03-15T13:02:26.875639Z","times_seen":10144,"resource_available":false,"data":null}},"time_used":108,"timings":{"blocked":23,"dns":45,"connect":3,"send":0,"wait":13,"receive":4,"ssl":15},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wsu.rqtqsp9.lol/cn/home/web/template/90sdyy_dc_pc/asset/js/qrcode.js","fqdn":"wsu.rqtqsp9.lol","domain":"rqtqsp9.lol","tld":"lol"},"ip":{"addr":"142.171.24.239","port":443,"asn":35916,"as":"MULTA-ASN1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://wsu.rqtqsp9.lol/cn/home/web/index.php/vod/play/id/975713/sid/1/nid/1.html","date":"2026-03-07T06:32:49.453Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.rqtqsp9.lol","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Feb 2026 04:57:07 GMT","end":"Sat, 09 May 2026 04:57:06 GMT"},"fingerprint":{"sha1":"CA:AE:D0:F4:85:B9:CD:C6:DD:C1:BA:BB:34:68:B2:F8:74:CB:0A:8B","sha256":"B8:18:09:A9:23:92:E8:BB:44:F2:8C:F5:5D:FC:3A:10:C5:F7:FA:7E:49:AC:0C:C1:07:98:8E:56:85:C3:15:7D"}}},"request":{"raw":"GET /cn/home/web/template/90sdyy_dc_pc/asset/js/qrcode.js HTTP/1.1\r\nHost: wsu.rqtqsp9.lol\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wsu.rqtqsp9.lol/cn/home/web/index.php/vod/play/id/975713/sid/1/nid/1.html\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: https://www.xzylm.com\r\ncontent-type: application/javascript\r\ncontent-length: 21058\r\nlast-modified: Sat, 08 Dec 2018 15:15:36 GMT\r\nvary: Accept-Encoding\r\ncache-control: public, max-age=2592000\r\naccept-ranges: bytes\r\nvia: http/1.1 traffic_server (https://www.xzylm.com [cHs f ])\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":21058,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (21058), with no line terminators","md5":"3b0526fc6b2d25a7e6c1ad14b70f8ac4","sha1":"348a37b5060a536f1d7a0c3e1a28448a09aca139","sha256":"f43d2d36358b6c3d192e24ea38095c4452d4cc025147261932088bda5c3ebcf1","sha512":"afe77f81eabe62d12a15316ce6098c88fbed3ee045fabe189cccad821c4d64a0dfc610eba54d89d49886440f2f2fdb22106550724574ceed756f4931e2069b4c","ssdeep":"384:SlHSlyl+y99JJ5WZSgwKsvPTPPVhFp9AAdTRUPekQGemZR79yHHqsgl41+gNftP3:uHPl+yl7WgvPTPP9pkQGemZR7QWKNh","tlshash":"1b92a685b6c452b4a252ace20c1f109be27598226c1e8564eb31d5d3bdf8fd68436fac","first_seen":"2025-07-23T01:20:51.099141Z","last_seen":"2026-03-15T14:56:28.270659Z","times_seen":232,"resource_available":true,"data":null}},"time_used":845,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":843,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wsu.rqtqsp9.lol/cn/home/webundefined","fqdn":"wsu.rqtqsp9.lol","domain":"rqtqsp9.lol","tld":"lol"},"ip":{"addr":"142.171.24.239","port":443,"asn":35916,"as":"MULTA-ASN1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://wsu.rqtqsp9.lol/cn/home/web/","date":"2026-03-07T06:32:53.948Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.rqtqsp9.lol","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Feb 2026 04:57:07 GMT","end":"Sat, 09 May 2026 04:57:06 GMT"},"fingerprint":{"sha1":"CA:AE:D0:F4:85:B9:CD:C6:DD:C1:BA:BB:34:68:B2:F8:74:CB:0A:8B","sha256":"B8:18:09:A9:23:92:E8:BB:44:F2:8C:F5:5D:FC:3A:10:C5:F7:FA:7E:49:AC:0C:C1:07:98:8E:56:85:C3:15:7D"}}},"request":{"raw":"GET /cn/home/webundefined HTTP/1.1\r\nHost: wsu.rqtqsp9.lol\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://wsu.rqtqsp9.lol/cn/home/web/\r\nX-Requested-With: XMLHttpRequest\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\nserver: https://www.xzylm.com\r\ndate: Sat, 07 Mar 2026 06:33:02 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nage: 0\r\nvia: http/1.1 traffic_server (https://www.xzylm.com [cMsSf ])\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":null,"data":{"size":17703,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"89e6bca383ae3342bcb7a0e819b32960","sha1":"113ab0b9bb6741a5cc25e43dda8fd4dfe2b2798e","sha256":"836833ae7470545a12fd73f0785a9f17c9711b8d30b46aba3bf3c81ead19e4ab","sha512":"b123004ec35dc020e60db609e9a17b00df8079e76989bf7ee36d257be84879983d53c67b13ee0f20c86907e7ea3cade0ef262b49db7598acbb4cd7759f4e0e5c","ssdeep":"192:1uNGtwnLFR45u5ntr9XVNPnZ0wrpcFmCbHfr3MvMNyxe86BWe3raHUu82TAoZou/:1jteFvdv1jofHanTFufft4f","tlshash":"9472835b4ef212171016e57273f13b5ae672d60bc64e8da43d9c3ba0cf80f90568fa99","first_seen":"2026-03-07T02:35:44.279229Z","last_seen":"2026-03-07T06:33:17.658506Z","times_seen":2,"resource_available":false,"data":null}},"time_used":172,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":172,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}
