{"report_id":"cb5cb580-bef0-47a0-b465-9015123d8888","version":0,"status":"done","tags":[],"date":"2026-09-16T07:09:56Z","url":{"schema":"http","addr":"www.082022ccdb4d792f.shaaxma.cn/","fqdn":"www.082022ccdb4d792f.shaaxma.cn","domain":"shaaxma.cn","tld":"cn"},"ip":{"addr":"154.51.63.25","port":0,"asn":135377,"as":"UCLOUD INFORMATION TECHNOLOGY (HK) LIMITED","country":"Hong Kong","country_code":"HK"},"final":{"url":{"schema":"https","addr":"news.qq.com/download/windows?pgv_ref=404","fqdn":"news.qq.com","domain":"qq.com","tld":"com"},"title":"腾讯新闻客户端下载-腾讯新闻","dom":{"size":1690,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"613eaef8f9dae453729f95936b5831fb","sha1":"1f6940bf111e791d761942aa3c95790a95d91a4d","sha256":"466238c090cf441f25fad30ccc7dfeabbf4a3ff65b6a98cddd005a9e85460aef","sha512":"422a843b60806ee6c4e3353e991bd0ee169829dc2a0051b9ab2c5ec7791f864036deb4f4e0ffb8e6046b24b55488c8bd4eaf9f02a832563bcb7db8a103656341","ssdeep":"","tlshash":"e23110a38412851dab21c2999ea5710ec123d46fb953e890f8ee554e4bacfe2414728c","dom_hash":"domhash76407e5aec91a23879956c161982a7c4","first_seen":"2026-09-16T07:10:00.518011Z","last_seen":"2026-09-16T07:10:00.518011Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"www.082022ccdb4d792f.shaaxma.cn/","fqdn":"www.082022ccdb4d792f.shaaxma.cn","domain":"shaaxma.cn","tld":"cn"},"ip":{"addr":"154.51.63.25","port":0,"asn":135377,"as":"UCLOUD INFORMATION TECHNOLOGY (HK) LIMITED","country":"Hong Kong","country_code":"HK"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-10-21T07:09:56Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"www.082022ccdb4d792f.shaaxma.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"082022ccdb4d792f.shaaxma.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"mat1.gtimg.com","ip":{"addr":"43.152.140.79","port":443,"asn":139341,"as":"ACE","country":"Singapore","country_code":"SG"},"domain_registered":"2008-10-09","domain_rank":581050,"first_seen":"2012-06-22T22:39:20Z","last_seen":"2026-08-31T04:44:34.327128Z","alert_count":0,"request_count":10,"received_data":4679,"sent_data":5227,"comment":"","tags":null,"fingerprints":null},{"fqdn":"www.082022ccdb4d792f.shaaxma.cn","ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2025-09-16","domain_rank":0,"first_seen":"2026-09-16T07:09:56.730694Z","last_seen":"2026-09-16T07:09:56.730694Z","alert_count":1,"request_count":1,"received_data":0,"sent_data":500,"comment":"","tags":null,"fingerprints":null},{"fqdn":"082022ccdb4d792f.shaaxma.cn","ip":{"addr":"154.51.63.25","port":443,"asn":174,"as":"COGENT-174","country":"United States","country_code":"US"},"domain_registered":"2025-09-16","domain_rank":0,"first_seen":"2026-09-16T07:06:20.136401Z","last_seen":"2026-09-16T07:06:20.136401Z","alert_count":3,"request_count":3,"received_data":280,"sent_data":1556,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}]},{"fqdn":"i.news.qq.com","ip":{"addr":"43.159.109.55","port":443,"asn":139341,"as":"ACE","country":"Singapore","country_code":"SG"},"domain_registered":"1995-05-04","domain_rank":805415,"first_seen":"2020-08-03T07:50:35Z","last_seen":"2026-05-30T06:46:28.169259Z","alert_count":0,"request_count":1,"received_data":492,"sent_data":537,"comment":"","tags":null,"fingerprints":null},{"fqdn":"www.qq.com","ip":{"addr":"43.159.109.55","port":443,"asn":139341,"as":"ACE","country":"Singapore","country_code":"SG"},"domain_registered":"1995-05-04","domain_rank":48679,"first_seen":"2012-05-21T12:50:41Z","last_seen":"2026-09-15T18:38:14.236458Z","alert_count":0,"request_count":1,"received_data":345,"sent_data":556,"comment":"","tags":null,"fingerprints":null},{"fqdn":"news.qq.com","ip":{"addr":"43.159.109.55","port":443,"asn":139341,"as":"ACE","country":"Singapore","country_code":"SG"},"domain_registered":"1995-05-04","domain_rank":200281,"first_seen":"2012-05-21T12:51:05Z","last_seen":"2026-09-09T07:25:10.962066Z","alert_count":0,"request_count":1,"received_data":2621,"sent_data":561,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"news.qq.com/download/windows?pgv_ref=404","fqdn":"news.qq.com","domain":"qq.com","tld":"com"},"ip":{"addr":"43.159.109.55","port":443,"asn":139341,"as":"ACE","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":true,"md5":"116f6006177b8e046306d54fe109e59a","sha1":"8f5b955e89258f1d750e49ee16e72e9c93575aec","sha256":"225a91c43022f056b3cf44035bc1849b0ce8422835287ec81c1edfcc2ed8afbf","sha512":"b6604114554beb51f1f347133209f7f8da2fdf7078aa44c4e6bbe186c75415ce99ee7e71089bbc3260d92182e848cb020fc3b3e2a0e73f7f47da77a759c7f259","ssdeep":"","tlshash":"42d02bfb0c7742284512511c2afd5746322150673105d4b07cfe810c7fd4d521240bcc","size":274,"data":"","first_seen":"2026-09-16T07:10:00.524036Z","last_seen":"2026-09-16T07:10:00.524036Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"news.qq.com/download/windows?pgv_ref=404","fqdn":"news.qq.com","domain":"qq.com","tld":"com"},"ip":{"addr":"43.159.109.55","port":443,"asn":139341,"as":"ACE","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":true,"md5":"0579d53ec26ede6db2e756512f71adf8","sha1":"51cccf01079faa96b1a2be18f9a9f8526949203d","sha256":"9c5a53ac34e961409c8692721b0d9109d2417d08aff4ab28cedbac8df2b33600","sha512":"c49a53fcb348c73673d330e9e6839bb859436bdb2f9b0b206838fbdee350b8f678191e125d23b360d77475a2a41b83d45e2c5bec9f35bc6625fc6730452a1f3a","ssdeep":"","tlshash":"d780043133344d1440104501dc55dff41c3110c45011174c41551d5301c5507c5d0d57","size":35,"data":"","first_seen":"2025-02-12T08:09:57.136156Z","last_seen":"2026-09-16T07:10:00.525116Z","times_seen":12,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mat1.gtimg.com/rain/apub2019/bdad115e5004.proxy.js","fqdn":"mat1.gtimg.com","domain":"gtimg.com","tld":"com"},"ip":{"addr":"43.152.140.79","port":443,"asn":139341,"as":"ACE","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"5dcc404dc7516dcf21c837370a1a7606","sha1":"4838724e7177a4c1946386772edef4b75aac466e","sha256":"d1f1d7c5b98d7661b2f25a49a177ee4bee9193b3effe042c451bdb57d3561959","sha512":"2d9784196fde6032673538fcca884cff5c4dc2f50d2106dfba0c49ea17751786ec6720ba828a514066c4218e675d39b556e70b16283c048d090fc5d98c3f85f3","ssdeep":"96:NBC3FH30R8u1xox3RBtRMrhdgb8RKwlVz8z:TC3FX0R8u1xox3RBtRMrhdS8RKwz8z","tlshash":"d2911e8e79ea52300b63b16ca7aeb480f0751187100eed91bf5f8be06f4c62d55b2bd4","size":4362,"data":"","first_seen":"2026-09-16T07:10:00.526284Z","last_seen":"2026-09-16T07:10:00.526284Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"mat1.gtimg.com/rain/apub2019/bdad115e5004.proxy.js","fqdn":"mat1.gtimg.com","domain":"gtimg.com","tld":"com"},"ip":{"addr":"43.152.140.79","port":443,"asn":139341,"as":"ACE","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.qq.com/storage-proxy","date":"2026-09-16T07:09:45.322Z","timestamp":1789542585322,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.gtimg.com","organization":""},"issuer":{"commonName":"DNSPod RSA OV","organization":"DNSPod, Inc."},"validity":{"start":"Fri, 31 Oct 2025 00:00:00 GMT","end":"Sun, 29 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"FE:E7:E7:F5:54:A8:A9:0D:AE:A1:39:31:65:94:DD:8E:41:1C:9A:94","sha256":"33:14:6C:E8:35:A1:7C:5C:0F:C4:8F:60:20:88:71:E9:32:45:2C:E0:B4:51:B2:92:BD:85:D5:4D:97:1B:50:4D"}}},"request":{"raw":"GET /rain/apub2019/bdad115e5004.proxy.js HTTP/1.1\r\nHost: mat1.gtimg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.qq.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nlast-modified: Mon, 20 Apr 2026 12:03:15 GMT\r\ncontent-encoding: gzip\r\netag: \"bdad115e5004adcbcce37d6f2a649e8e004748c9\"\r\nserver: NWSs\r\ndate: Thu, 25 Jun 2026 06:48:22 GMT\r\ncontent-type: application/javascript\r\nip: 11.140.34.207\r\nx-cos-storage-class: STANDARD_IA\r\nx-cos-version-id: MTg0NDQ5NjczODcxMTQzMTQ0ODA\r\nx-cos-hash-crc64ecma: 12623355440564625847\r\nx-cos-replication-status: Complete\r\nx-cos-object-type: normal\r\ncontent-length: 1286\r\naccept-ranges: bytes\r\nx-nws-log-uuid: 6281103420292764762\r\nx-cache-lookup: Cache Hit\r\nx-real-ip: 195.64.118.152\r\naccess-control-expose-headers: X-Client-Ip,X-Server-Ip,X-Upstream-Ip\r\nx-client-ip: 195.64.118.152\r\nx-server-ip: 43.152.141.17\r\nx-upstream-ip: $upstream_server\r\nvary: origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":3919,"size_decoded":2046,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"abcc85ae321d5dc1654ab92c0ff0a7ff","sha1":"bdad115e5004adcbcce37d6f2a649e8e004748c9","sha256":"eff16bc2f056eb53fcce4007c72927681472d4ef3cccc2f3ab1ed1a014245c08","sha512":"72492a90433f83759dce1efe3387207c3da6daaf72ee6768f8faabe692d8026bfc75bce1d94705dfbd0b53cc6f42945afdc3e200b489bd466fd3448900b7de91","ssdeep":"","tlshash":"fc81db0d78f620700a63b12dabaeb400f6325547340edda0fd4e9b51af5c66d52f2bd4","first_seen":"2026-09-16T07:10:00.519207Z","last_seen":"2026-09-16T07:10:00.519207Z","times_seen":1,"resource_available":true,"data":null}},"time_used":562,"timings":{"blocked":0,"dns":0,"connect":290,"send":0,"wait":43,"receive":1,"ssl":228},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.082022ccdb4d792f.shaaxma.cn/","fqdn":"www.082022ccdb4d792f.shaaxma.cn","domain":"shaaxma.cn","tld":"cn"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-16T07:09:26.700Z","timestamp":1789542566700,"http_version":"","security_state":"broken","security_info":null,"request":{"raw":"GET / HTTP/1.1\r\nHost: www.082022ccdb4d792f.shaaxma.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-20T17:41:56.000748Z","times_seen":18571932,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"www.082022ccdb4d792f.shaaxma.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"082022ccdb4d792f.shaaxma.cn/","fqdn":"082022ccdb4d792f.shaaxma.cn","domain":"shaaxma.cn","tld":"cn"},"ip":{"addr":"154.51.63.25","port":443,"asn":174,"as":"COGENT-174","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-16T07:09:28.224Z","timestamp":1789542568224,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.shaaxma.cn","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 20 Aug 2026 05:32:00 GMT","end":"Wed, 18 Nov 2026 05:31:59 GMT"},"fingerprint":{"sha1":"69:56:04:3D:0B:A8:98:15:2B:67:04:6B:80:6F:C8:38:5B:76:47:47","sha256":"99:B4:F7:9A:67:8E:D0:D3:48:52:F6:19:62:A6:14:DD:EC:DC:84:63:E7:B6:05:9E:E1:5F:FD:AF:41:25:AC:3C"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: 082022ccdb4d792f.shaaxma.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: openresty\r\ndate: Wed, 16 Sep 2026 07:09:29 GMT\r\ncontent-type: text/html\r\nlast-modified: Sat, 22 Aug 2026 14:37:58 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a89b446-10dfb\"\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-20T17:41:56.000748Z","times_seen":18571932,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"082022ccdb4d792f.shaaxma.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mat1.gtimg.com/qqcdn/qqindex2021/common-static/20241018171503/universal-report.min.js","fqdn":"mat1.gtimg.com","domain":"gtimg.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://news.qq.com/download/windows?pgv_ref=404","date":"2026-09-16T07:09:32.541Z","timestamp":1789542572541,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /qqcdn/qqindex2021/common-static/20241018171503/universal-report.min.js HTTP/1.1\r\nHost: mat1.gtimg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://news.qq.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-20T17:41:56.000748Z","times_seen":18571932,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mat1.gtimg.com/qqcdn/qqindex2021/common-static/20240805160928/react.production.min.js","fqdn":"mat1.gtimg.com","domain":"gtimg.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://news.qq.com/download/windows?pgv_ref=404","date":"2026-09-16T07:09:40.561Z","timestamp":1789542580561,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /qqcdn/qqindex2021/common-static/20240805160928/react.production.min.js HTTP/1.1\r\nHost: mat1.gtimg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://news.qq.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-20T17:41:56.000748Z","times_seen":18571932,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"082022ccdb4d792f.shaaxma.cn/favicon.ico","fqdn":"082022ccdb4d792f.shaaxma.cn","domain":"shaaxma.cn","tld":"cn"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://082022ccdb4d792f.shaaxma.cn/","date":"2026-09-16T07:09:31.533Z","timestamp":1789542571533,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.shaaxma.cn","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 20 Aug 2026 05:32:00 GMT","end":"Wed, 18 Nov 2026 05:31:59 GMT"},"fingerprint":{"sha1":"69:56:04:3D:0B:A8:98:15:2B:67:04:6B:80:6F:C8:38:5B:76:47:47","sha256":"99:B4:F7:9A:67:8E:D0:D3:48:52:F6:19:62:A6:14:DD:EC:DC:84:63:E7:B6:05:9E:E1:5F:FD:AF:41:25:AC:3C"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: 082022ccdb4d792f.shaaxma.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://082022ccdb4d792f.shaaxma.cn/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-20T17:41:56.000748Z","times_seen":18571932,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"082022ccdb4d792f.shaaxma.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mat1.gtimg.com/qqcdn/qqindex2021/common-static/20240805160928/react.production.min.js","fqdn":"mat1.gtimg.com","domain":"gtimg.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://news.qq.com/download/windows?pgv_ref=404","date":"2026-09-16T07:09:32.538Z","timestamp":1789542572538,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /qqcdn/qqindex2021/common-static/20240805160928/react.production.min.js HTTP/1.1\r\nHost: mat1.gtimg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://news.qq.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-20T17:41:56.000748Z","times_seen":18571932,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mat1.gtimg.com/qqcdn/qqindex2021/common-static/hel/qqnews-pc_20260915051326/static/js/download.js","fqdn":"mat1.gtimg.com","domain":"gtimg.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://news.qq.com/download/windows?pgv_ref=404","date":"2026-09-16T07:09:32.543Z","timestamp":1789542572543,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /qqcdn/qqindex2021/common-static/hel/qqnews-pc_20260915051326/static/js/download.js HTTP/1.1\r\nHost: mat1.gtimg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://news.qq.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-20T17:41:56.000748Z","times_seen":18571932,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i.news.qq.com/web_backend/getWebPacUid","fqdn":"i.news.qq.com","domain":"qq.com","tld":"com"},"ip":{"addr":"43.159.109.55","port":443,"asn":139341,"as":"ACE","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://news.qq.com/download/windows?pgv_ref=404","date":"2026-09-16T07:09:32.549Z","timestamp":1789542572549,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.news.qq.com","organization":""},"issuer":{"commonName":"DNSPod RSA OV","organization":"DNSPod, Inc."},"validity":{"start":"Fri, 31 Oct 2025 00:00:00 GMT","end":"Sun, 29 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"64:F6:9C:55:79:A3:12:74:9D:E1:14:C8:8F:B8:4D:5F:F9:0E:0E:A1","sha256":"6A:DE:90:06:FF:4C:C2:1D:86:6B:DC:34:19:06:A9:14:F3:40:10:BA:6A:C1:4D:77:5D:D7:2A:A1:51:2F:D7:3B"}}},"request":{"raw":"GET /web_backend/getWebPacUid HTTP/1.1\r\nHost: i.news.qq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://news.qq.com/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Type: application/json\r\nServer: tRPC-Gateway\r\nInews-Trace-Id: 40396647090916150933\r\nInews_trace_id: 40396647090916150933\r\nX-Upstream-Latency: 1\r\nX-Proxy-Latency: 0\r\nSet-Cookie: pac_uid=0_nkaCpyDw5hA62; Path=/; Domain=qq.com; Expires=Sat, 13 Sep 2036 07:09:33 GMT\r\nContent-Length: 63\r\nConnection: keep-alive\r\nDate: Wed, 16 Sep 2026 07:09:33 GMT\r\nEO-LOG-UUID: 4096581716893646977\r\nEO-Cache-Status: MISS\r\n\r\n","headers":null,"cookies":[{"name":"pac_uid","value":"0_nkaCpyDw5hA62","quoted":false,"path":"/","domain":"qq.com","expires":"2036-09-13T07:09:33Z","raw_expires":"Sat, 13 Sep 2036 07:09:33 GMT","secure":false,"http_only":false,"same_site":"","partitioned":false,"raw":"pac_uid=0_nkaCpyDw5hA62; Path=/; Domain=qq.com; Expires=Sat, 13 Sep 2036 07:09:33 GMT"}],"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":63,"size_decoded":492,"mime_type":"application/json","magic":"JSON text data","md5":"784d6d19d1914ec824984a91d2e9ef85","sha1":"00de41c6927aebf529e3be39cd2474c83a144781","sha256":"8e84b826c4d1d5dce6624d20f495641e0cb857445d0efcb702ffac53764d41b8","sha512":"d84d150163361ab6145a790cf16f7c08f397147449dee4f80975b1fd7f6e3a7df95924b6e0b8682e23a32391d9a8488780b8d0efce5403d78e79b558dc4c97c5","ssdeep":"","tlshash":"61a0024055296d3c1b82594670bd248c515d1044a855595e4c9c5d58cf3c4f9a521978","first_seen":"2026-09-16T07:10:00.520927Z","last_seen":"2026-09-16T07:10:00.520927Z","times_seen":1,"resource_available":true,"data":null}},"time_used":773,"timings":{"blocked":-1,"dns":220,"connect":52,"send":0,"wait":264,"receive":0,"ssl":237},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"082022ccdb4d792f.shaaxma.cn/favicon.png","fqdn":"082022ccdb4d792f.shaaxma.cn","domain":"shaaxma.cn","tld":"cn"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://082022ccdb4d792f.shaaxma.cn/","date":"2026-09-16T07:09:31.531Z","timestamp":1789542571531,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.shaaxma.cn","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 20 Aug 2026 05:32:00 GMT","end":"Wed, 18 Nov 2026 05:31:59 GMT"},"fingerprint":{"sha1":"69:56:04:3D:0B:A8:98:15:2B:67:04:6B:80:6F:C8:38:5B:76:47:47","sha256":"99:B4:F7:9A:67:8E:D0:D3:48:52:F6:19:62:A6:14:DD:EC:DC:84:63:E7:B6:05:9E:E1:5F:FD:AF:41:25:AC:3C"}}},"request":{"raw":"GET /favicon.png HTTP/1.1\r\nHost: 082022ccdb4d792f.shaaxma.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://082022ccdb4d792f.shaaxma.cn/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-20T17:41:56.000748Z","times_seen":18571932,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"082022ccdb4d792f.shaaxma.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mat1.gtimg.com/qqcdn/qqindex2021/common-static/hel/qqnews-pc_20260915051326/static/css/download.css","fqdn":"mat1.gtimg.com","domain":"gtimg.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://news.qq.com/download/windows?pgv_ref=404","date":"2026-09-16T07:09:32.535Z","timestamp":1789542572535,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /qqcdn/qqindex2021/common-static/hel/qqnews-pc_20260915051326/static/css/download.css HTTP/1.1\r\nHost: mat1.gtimg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://news.qq.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-20T17:41:56.000748Z","times_seen":18571932,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mat1.gtimg.com/qqcdn/qqindex2021/libs/barrier/aria.js?appid=9327b8b06379d9d1728bbfbe2025ef9c","fqdn":"mat1.gtimg.com","domain":"gtimg.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://news.qq.com/download/windows?pgv_ref=404","date":"2026-09-16T07:09:32.542Z","timestamp":1789542572542,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /qqcdn/qqindex2021/libs/barrier/aria.js?appid=9327b8b06379d9d1728bbfbe2025ef9c HTTP/1.1\r\nHost: mat1.gtimg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://news.qq.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-20T17:41:56.000748Z","times_seen":18571932,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mat1.gtimg.com/qqcdn/xw/20211215/images/192.png","fqdn":"mat1.gtimg.com","domain":"gtimg.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://news.qq.com/download/windows?pgv_ref=404","date":"2026-09-16T07:09:36.752Z","timestamp":1789542576752,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /qqcdn/xw/20211215/images/192.png HTTP/1.1\r\nHost: mat1.gtimg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://news.qq.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-20T17:41:56.000748Z","times_seen":18571932,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mat1.gtimg.com/qqcdn/xw/favicon.ico","fqdn":"mat1.gtimg.com","domain":"gtimg.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://news.qq.com/download/windows?pgv_ref=404","date":"2026-09-16T07:09:36.755Z","timestamp":1789542576755,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /qqcdn/xw/favicon.ico HTTP/1.1\r\nHost: mat1.gtimg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://news.qq.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-20T17:41:56.000748Z","times_seen":18571932,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.qq.com/storage-proxy","fqdn":"www.qq.com","domain":"qq.com","tld":"com"},"ip":{"addr":"43.159.109.55","port":443,"asn":139341,"as":"ACE","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://news.qq.com/download/windows?pgv_ref=404","date":"2026-09-16T07:09:40.557Z","timestamp":1789542580557,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.inews.qq.com","organization":""},"issuer":{"commonName":"GlobalSign Atlas R46 OV TLS CA 2026 Q3","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 09 Sep 2026 07:02:18 GMT","end":"Sat, 27 Mar 2027 07:02:17 GMT"},"fingerprint":{"sha1":"2A:E2:41:AA:78:61:24:1B:E7:2F:90:9F:71:E7:77:3C:75:67:D3:19","sha256":"EA:72:5F:F9:B6:B1:A8:D8:A8:23:A6:DE:0C:59:A2:44:96:FC:38:E9:37:C0:3E:F6:F5:D8:4C:66:F1:07:C4:21"}}},"request":{"raw":"GET /storage-proxy HTTP/1.1\r\nHost: www.qq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://news.qq.com/\r\nCookie: pac_uid=0_nkaCpyDw5hA62\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: stgw\r\nContent-Type: text/html\r\nContent-Security-Policy: frame-ancestors *.qq.com\r\nContent-Length: 97\r\nConnection: keep-alive\r\nDate: Wed, 16 Sep 2026 07:09:45 GMT\r\nEO-LOG-UUID: 18229785614513694125\r\nEO-Cache-Status: MISS\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":97,"size_decoded":345,"mime_type":"text/html","magic":"HTML document, ASCII text, with no line terminators","md5":"1805f6f84d8818ec41bc66ff88b35936","sha1":"833069aae0dec9712531c67ab2bf0d0084bcd611","sha256":"5e490ca1e380bcb88f9549b2398c4894aed3e45acaadc2c5684ae63cb8b2996a","sha512":"775d3bf2a76d4a009cc12875d1a32d09f8c572931bff98010bb4a3f9867306fb8f844969bcf483a0e345bbb82d3bdc6b45114c11af6fb51b5b90936e6fada5a2","ssdeep":"","tlshash":"23b012dbdd36940c4a10dc5c9d60b31ca1472d0dbc61c45748d50c3118466f90c12200","first_seen":"2026-09-16T07:10:00.522142Z","last_seen":"2026-09-16T07:10:00.522142Z","times_seen":1,"resource_available":true,"data":null}},"time_used":4715,"timings":{"blocked":0,"dns":4036,"connect":52,"send":0,"wait":241,"receive":0,"ssl":385},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"news.qq.com/download/windows?pgv_ref=404","fqdn":"news.qq.com","domain":"qq.com","tld":"com"},"ip":{"addr":"43.159.109.55","port":443,"asn":139341,"as":"ACE","country":"Singapore","country_code":"SG"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-16T07:09:31.380Z","timestamp":1789542571380,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.news.qq.com","organization":""},"issuer":{"commonName":"DNSPod RSA OV","organization":"DNSPod, Inc."},"validity":{"start":"Fri, 31 Oct 2025 00:00:00 GMT","end":"Sun, 29 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"64:F6:9C:55:79:A3:12:74:9D:E1:14:C8:8F:B8:4D:5F:F9:0E:0E:A1","sha256":"6A:DE:90:06:FF:4C:C2:1D:86:6B:DC:34:19:06:A9:14:F3:40:10:BA:6A:C1:4D:77:5D:D7:2A:A1:51:2F:D7:3B"}}},"request":{"raw":"GET /download/windows?pgv_ref=404 HTTP/1.1\r\nHost: news.qq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://082022ccdb4d792f.shaaxma.cn/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Type: text/html; charset=utf-8\r\nServer: tRPC-Gateway\r\nContent-Encoding: gzip\r\nVary: Accept-Encoding\r\nInews_trace_id: 40396647090916150932\r\nInews-Trace-Id: 40396647090916150932\r\nX-Upstream-Latency: 2\r\nX-Proxy-Latency: 0\r\nContent-Length: 976\r\nConnection: keep-alive\r\nDate: Wed, 16 Sep 2026 07:09:32 GMT\r\nEO-LOG-UUID: 12760669617663538674\r\nEO-Cache-Status: MISS\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":2234,"size_decoded":1363,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"355b7487084b55cf5bec50721bc8fdc4","sha1":"ff6b176579dbcd65989863d5d8736ee2f46e455f","sha256":"fe7cc076fcbb0c7cc6ae48013128d82ee03666ac96c54bccb173f4212755e4a7","sha512":"c78d0c0932db1483df993bbc8c16983ddab54442c965af1739278ec6ef0c4aacd9ce7269e42b21099b21f6b6b78f54a65ad7994f258fda797fe8266bf8591f95","ssdeep":"","tlshash":"924123538c23c51d572085988ea1b01ec553b0abaa73e8d0f0e96c194becfea454f6cc","first_seen":"2026-09-16T07:10:00.523226Z","last_seen":"2026-09-16T07:10:00.523226Z","times_seen":1,"resource_available":true,"data":null}},"time_used":1085,"timings":{"blocked":-1,"dns":333,"connect":557,"send":0,"wait":391,"receive":0,"ssl":58},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mat1.gtimg.com/qqcdn/qqindex2021/common-static/20240805160928/react-dom.production.min.js","fqdn":"mat1.gtimg.com","domain":"gtimg.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://news.qq.com/download/windows?pgv_ref=404","date":"2026-09-16T07:09:32.540Z","timestamp":1789542572540,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /qqcdn/qqindex2021/common-static/20240805160928/react-dom.production.min.js HTTP/1.1\r\nHost: mat1.gtimg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://news.qq.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-20T17:41:56.000748Z","times_seen":18571932,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}