{"report_id":"d4f09343-000b-4018-8b3c-3ee60402f9e4","version":6,"status":"done","tags":[],"date":"2026-05-15T20:48:41Z","url":{"schema":"http","addr":"szssp5.cfd/s/M%E7%94%B7.html","fqdn":"szssp5.cfd","domain":"szssp5.cfd","tld":"cfd"},"ip":{"addr":"154.26.176.147","port":0,"asn":906,"as":"DMIT","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"szssp5.cfd/s/M%E7%94%B7.html","fqdn":"szssp5.cfd","domain":"szssp5.cfd","tld":"cfd"},"title":"M男_搜索_第1页 - 色中色在线视频","dom":{"size":115961,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (44689)","md5":"b18e59d57d70d54c7a3eb66e54d1bf06","sha1":"02bed168322bc6d815cd94da2b909ab000188cdf","sha256":"cd7dd382b96015b0b6743b6df5e3e8e614e1758f45e8a8363501f496939f61d9","sha512":"5fe19f4e593e90a593a4ed738198e04fea8d32ba5688e03e3fce1738c256a4c795b27b184c59cfe103152bc958c1beaf57e2b336ac80fd40f4928f1deea18228","ssdeep":"1536:erB/dmnIItIIMV6YCfSJcu3e+w3Y6z7HzUtc8XczrD:rz7HzUAD","tlshash":"27b31b145688687b0137f8c47496af28b0a2930dcf831e4db6bd3f719b9af65f45628c","dom_hash":"domhashe14d4088b5a96be08d0494f20ee8332e","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"szssp5.cfd/s/M%E7%94%B7.html","fqdn":"szssp5.cfd","domain":"szssp5.cfd","tld":"cfd"},"ip":{"addr":"154.26.176.147","port":0,"asn":906,"as":"DMIT","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-06-19T20:48:41Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":4}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"img.huawen1955.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"img.xyzinf112.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"yao.pic.sfuati.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"img1.souavzy.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"fsffbhd.brffff.com","ip":{"addr":"104.26.11.65","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2023-11-07","domain_rank":0,"first_seen":"2026-04-06T19:05:12.535352Z","last_seen":"2026-05-15T19:40:23.916013Z","alert_count":0,"request_count":2,"received_data":1166334,"sent_data":946,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"img.fastest599.top","ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2026-04-23","domain_rank":0,"first_seen":"2026-04-24T01:02:28.799245Z","last_seen":"2026-05-13T06:30:16.105769Z","alert_count":0,"request_count":1,"received_data":0,"sent_data":436,"comment":"","tags":null,"fingerprints":null},{"fqdn":"img1.souavzyw.vip","ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2025-12-15","domain_rank":0,"first_seen":"2025-12-20T08:05:50.248249Z","last_seen":"2026-05-14T23:24:55.409236Z","alert_count":0,"request_count":1,"received_data":0,"sent_data":480,"comment":"","tags":null,"fingerprints":null},{"fqdn":"aik8y6kd99.f6s3i7d2o5m0u8p1k.com","ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2025-09-21","domain_rank":0,"first_seen":"2025-11-21T01:03:39.811903Z","last_seen":"2026-05-13T06:30:15.937113Z","alert_count":0,"request_count":1,"received_data":0,"sent_data":473,"comment":"","tags":null,"fingerprints":null},{"fqdn":"file.icve.com.cn","ip":{"addr":"87.119.9.73","port":443,"asn":141180,"as":"HUAWEI INTERNATIONAL PTE. LTD.","country":"Indonesia","country_code":"ID"},"domain_registered":"2014-08-30","domain_rank":0,"first_seen":"2022-08-16T16:09:17Z","last_seen":"2026-05-12T00:53:22.926833Z","alert_count":0,"request_count":3,"received_data":1240297,"sent_data":1422,"comment":"","tags":null,"fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}]},{"fqdn":"dq38rjje7qjm3.cloudfront.net","ip":{"addr":"54.230.241.109","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2008-04-25","domain_rank":0,"first_seen":"2025-03-24T19:11:01.50764Z","last_seen":"2026-05-09T10:01:10.697279Z","alert_count":0,"request_count":3,"received_data":595080,"sent_data":1345,"comment":"","tags":null,"fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}]},{"fqdn":"pic.sex8sex844.com","ip":{"addr":"172.67.224.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-02-25","domain_rank":0,"first_seen":"2025-11-17T08:50:51.130806Z","last_seen":"2026-05-13T22:25:15.142113Z","alert_count":0,"request_count":2,"received_data":1182,"sent_data":892,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"jinmeng.haohuxx.com","ip":{"addr":"157.185.128.120","port":443,"asn":54994,"as":"ML-1432-54994","country":"France","country_code":"FR"},"domain_registered":"2025-03-30","domain_rank":0,"first_seen":"2026-04-08T09:25:56.431152Z","last_seen":"2026-05-09T09:47:38.808272Z","alert_count":0,"request_count":1,"received_data":232437,"sent_data":438,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"xm2026.myxuanxuan.com","ip":{"addr":"45.8.115.46","port":443,"asn":4785,"as":"xTom","country":"Japan","country_code":"JP"},"domain_registered":"2016-04-10","domain_rank":0,"first_seen":"2026-03-22T07:22:10.524078Z","last_seen":"2026-05-11T04:36:39.922262Z","alert_count":0,"request_count":1,"received_data":732503,"sent_data":446,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"www.jkuntupiaxxzz.com","ip":{"addr":"64.112.76.43","port":443,"asn":6939,"as":"HURRICANE","country":"United States","country_code":"US"},"domain_registered":"2026-01-21","domain_rank":0,"first_seen":"2026-01-28T07:38:35.46468Z","last_seen":"2026-05-13T09:10:08.4847Z","alert_count":0,"request_count":1,"received_data":196114,"sent_data":485,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"img.meituan.net","ip":{"addr":"163.171.134.109","port":443,"asn":54994,"as":"ML-1432-54994","country":"Sweden","country_code":"SE"},"domain_registered":"2010-01-25","domain_rank":189994,"first_seen":"2017-02-03T02:36:44Z","last_seen":"2026-05-15T17:43:21.424693Z","alert_count":0,"request_count":1,"received_data":407469,"sent_data":442,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}]},{"fqdn":"2026tu.myxuanxuan.com","ip":{"addr":"43.175.65.14","port":443,"asn":139341,"as":"ACE","country":"Singapore","country_code":"SG"},"domain_registered":"2016-04-10","domain_rank":0,"first_seen":"2026-01-26T20:19:42.17682Z","last_seen":"2026-05-14T23:24:55.047489Z","alert_count":0,"request_count":1,"received_data":643927,"sent_data":443,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"img1.souavzy.org","ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2024-12-15","domain_rank":7039838,"first_seen":"2025-07-26T06:21:28.482432Z","last_seen":"2026-05-13T22:25:14.02243Z","alert_count":1,"request_count":1,"received_data":0,"sent_data":479,"comment":"","tags":null,"fingerprints":null},{"fqdn":"s.lasha250923.top","ip":{"addr":"104.20.43.58","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-09-23","domain_rank":0,"first_seen":"2025-09-27T16:52:48.816851Z","last_seen":"2026-05-14T04:56:23.37701Z","alert_count":0,"request_count":1,"received_data":12087,"sent_data":480,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"img.alicdn.com","ip":{"addr":"47.246.44.177","port":443,"asn":24429,"as":"Zhejiang Taobao Network Co.,Ltd","country":"Sweden","country_code":"SE"},"domain_registered":"2008-06-25","domain_rank":61670,"first_seen":"2015-03-04T07:06:39Z","last_seen":"2026-05-14T06:37:48.954326Z","alert_count":0,"request_count":19,"received_data":8582388,"sent_data":9227,"comment":"","tags":null,"fingerprints":[{"name":"Tengine","description":"Tengine is a web server which is based on the Nginx HTTP server.","website":"https://tengine.taobao.org","common_platform_enumeration":"","icon":"Tengine.png","categories":["Web servers"]}]},{"fqdn":"11224.xn--gps-8y0gm25n.xn--55qx5d","ip":{"addr":"27.155.113.137","port":443,"asn":133774,"as":"Fuzhou","country":"China","country_code":"CN"},"domain_registered":"2025-04-18","domain_rank":0,"first_seen":"2025-12-12T01:01:33.916178Z","last_seen":"2026-05-09T03:58:43.453305Z","alert_count":0,"request_count":1,"received_data":568593,"sent_data":459,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"www.yuinvl-293528.cc","ip":{"addr":"5.252.22.230","port":443,"asn":44477,"as":"Stark Industries Solutions Ltd","country":"Germany","country_code":"DE"},"domain_registered":"2025-10-12","domain_rank":0,"first_seen":"2026-04-04T10:18:31.895291Z","last_seen":"2026-05-11T09:27:34.562572Z","alert_count":0,"request_count":1,"received_data":657936,"sent_data":451,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"11221.xn--gps-8y0gm25n.xn--55qx5d","ip":{"addr":"27.155.113.137","port":443,"asn":133774,"as":"Fuzhou","country":"China","country_code":"CN"},"domain_registered":"2025-04-18","domain_rank":0,"first_seen":"2025-12-03T14:43:28.608781Z","last_seen":"2026-05-09T03:58:44.217607Z","alert_count":0,"request_count":1,"received_data":596921,"sent_data":459,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"szssp5.cfd","ip":{"addr":"154.26.181.150","port":443,"asn":906,"as":"DMIT","country":"United States","country_code":"US"},"domain_registered":"2026-04-27","domain_rank":0,"first_seen":"2026-04-28T02:05:13.045681Z","last_seen":"2026-05-09T06:33:39.084449Z","alert_count":0,"request_count":22,"received_data":1074668,"sent_data":11566,"comment":"","tags":null,"fingerprints":[{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}]},{"fqdn":"d3ccefxs96519j.cloudfront.net","ip":{"addr":"54.192.209.198","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2008-04-25","domain_rank":0,"first_seen":"2025-06-30T07:13:17.425046Z","last_seen":"2026-05-14T04:55:59.421334Z","alert_count":0,"request_count":1,"received_data":96183,"sent_data":449,"comment":"","tags":null,"fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}]},{"fqdn":"d29chpyt7ig43r.cloudfront.net","ip":{"addr":"54.192.209.58","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2008-04-25","domain_rank":0,"first_seen":"2026-05-07T22:32:24.609567Z","last_seen":"2026-05-14T23:24:55.149661Z","alert_count":0,"request_count":1,"received_data":394611,"sent_data":449,"comment":"","tags":null,"fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}]},{"fqdn":"img1212.syhze.com","ip":{"addr":"45.8.115.46","port":443,"asn":4785,"as":"xTom","country":"Japan","country_code":"JP"},"domain_registered":"2014-05-15","domain_rank":0,"first_seen":"2025-12-21T08:33:05.525239Z","last_seen":"2026-05-09T07:28:39.981305Z","alert_count":0,"request_count":2,"received_data":940974,"sent_data":884,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"xy724-1.anvnjmc.com","ip":{"addr":"58.218.215.69","port":443,"asn":4134,"as":"Chinanet","country":"China","country_code":"CN"},"domain_registered":"2024-08-29","domain_rank":0,"first_seen":"2025-09-06T01:47:58.095855Z","last_seen":"2026-05-09T10:01:12.534893Z","alert_count":0,"request_count":1,"received_data":337198,"sent_data":440,"comment":"","tags":null,"fingerprints":[{"name":"Tengine","description":"Tengine is a web server which is based on the Nginx HTTP server.","website":"https://tengine.taobao.org","common_platform_enumeration":"","icon":"Tengine.png","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"a0428.ky308tc0428.vip","ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2026-04-28","domain_rank":0,"first_seen":"2026-04-30T05:01:28.0929Z","last_seen":"2026-05-08T20:10:52.194215Z","alert_count":0,"request_count":2,"received_data":0,"sent_data":896,"comment":"","tags":null,"fingerprints":null},{"fqdn":"img1.ah7907.com","ip":{"addr":"47.76.249.42","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"domain_registered":"2024-08-29","domain_rank":0,"first_seen":"2025-11-08T09:13:57.808607Z","last_seen":"2026-05-09T20:05:51.212122Z","alert_count":0,"request_count":3,"received_data":586587,"sent_data":1308,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"img.xyzinf112.top","ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2025-02-13","domain_rank":0,"first_seen":"2025-06-17T04:19:14.569174Z","last_seen":"2026-05-11T21:39:49.98354Z","alert_count":1,"request_count":1,"received_data":0,"sent_data":429,"comment":"","tags":null,"fingerprints":null},{"fqdn":"t55u32p.saving118.top","ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2026-04-28","domain_rank":0,"first_seen":"2026-04-30T05:01:28.123516Z","last_seen":"2026-05-13T06:30:16.154341Z","alert_count":0,"request_count":1,"received_data":0,"sent_data":453,"comment":"","tags":null,"fingerprints":null},{"fqdn":"www.mdynieu.com","ip":{"addr":"161.129.35.198","port":443,"asn":40065,"as":"CNSERVERS","country":"United States","country_code":"US"},"domain_registered":"2025-10-09","domain_rank":0,"first_seen":"2025-11-07T12:04:46.874157Z","last_seen":"2026-05-09T03:58:44.98883Z","alert_count":0,"request_count":1,"received_data":407041,"sent_data":455,"comment":"","tags":null,"fingerprints":null},{"fqdn":"shu2.vsamhos.com","ip":{"addr":"157.185.128.120","port":443,"asn":54994,"as":"ML-1432-54994","country":"France","country_code":"FR"},"domain_registered":"2025-03-30","domain_rank":0,"first_seen":"2025-12-26T14:09:17.062806Z","last_seen":"2026-05-14T04:55:59.516594Z","alert_count":0,"request_count":1,"received_data":551583,"sent_data":435,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"feifei.fmjmm.com","ip":{"addr":"138.113.181.2","port":443,"asn":54994,"as":"ML-1432-54994","country":"Sweden","country_code":"SE"},"domain_registered":"2024-08-29","domain_rank":0,"first_seen":"2025-07-29T23:50:06.69965Z","last_seen":"2026-05-13T06:30:15.179069Z","alert_count":0,"request_count":1,"received_data":288164,"sent_data":438,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"picc.sex8sex855.com","ip":{"addr":"216.180.228.179","port":443,"asn":47191,"as":"blue tech technology Co., Limited","country":"British Virgin Islands","country_code":"VG"},"domain_registered":"2025-02-25","domain_rank":0,"first_seen":"2026-04-03T19:16:57.558931Z","last_seen":"2026-05-10T06:29:19.668673Z","alert_count":0,"request_count":1,"received_data":196070,"sent_data":447,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"txdy.syjcxh.com","ip":{"addr":"157.185.128.120","port":443,"asn":54994,"as":"ML-1432-54994","country":"France","country_code":"FR"},"domain_registered":"2025-08-15","domain_rank":0,"first_seen":"2026-04-16T11:13:52.503593Z","last_seen":"2026-05-14T23:24:56.222744Z","alert_count":0,"request_count":1,"received_data":120302,"sent_data":431,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"yao.pic.sfuati.com","ip":{"addr":"138.113.181.188","port":443,"asn":54994,"as":"ML-1432-54994","country":"Sweden","country_code":"SE"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-05-09T03:58:43.843515Z","last_seen":"2026-05-09T03:58:43.843515Z","alert_count":1,"request_count":1,"received_data":308682,"sent_data":438,"comment":"","tags":null,"fingerprints":null},{"fqdn":"pic6.sex8sex866.com","ip":{"addr":"216.180.234.211","port":443,"asn":47191,"as":"blue tech technology Co., Limited","country":"British Virgin Islands","country_code":"VG"},"domain_registered":"2025-02-25","domain_rank":0,"first_seen":"2026-04-06T03:47:38.523404Z","last_seen":"2026-05-15T05:05:38.69702Z","alert_count":0,"request_count":2,"received_data":414543,"sent_data":894,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"img.hrzs168.com","ip":{"addr":"172.247.84.2","port":16888,"asn":40065,"as":"CNSERVERS","country":"United States","country_code":"US"},"domain_registered":"2016-01-20","domain_rank":0,"first_seen":"2026-05-09T03:58:42.491129Z","last_seen":"2026-05-09T03:58:42.491129Z","alert_count":0,"request_count":1,"received_data":321615,"sent_data":469,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"img.huawen1955.top","ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2025-05-13","domain_rank":0,"first_seen":"2026-04-30T05:01:28.088785Z","last_seen":"2026-05-13T06:30:14.962462Z","alert_count":1,"request_count":1,"received_data":0,"sent_data":435,"comment":"","tags":null,"fingerprints":null},{"fqdn":"sbzytpimg5.com","ip":{"addr":"23.140.148.9","port":3519,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2024-04-24","domain_rank":0,"first_seen":"2026-04-03T09:15:17.821599Z","last_seen":"2026-05-12T12:01:19.671258Z","alert_count":0,"request_count":1,"received_data":425821,"sent_data":482,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"szssp5.cfd/cn/home/web/template/048wukong9_wtpl/static/js/mip-share.js","fqdn":"szssp5.cfd","domain":"szssp5.cfd","tld":"cfd"},"ip":{"addr":"154.26.181.150","port":443,"asn":906,"as":"DMIT","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"91e04b82de0687f50cd9b4a9bb4b8d41","sha1":"1cfb7e2d210865b0400c1bb3ed417175f14c954c","sha256":"7b2f923fa5e1469d98a038954706acc4fcf5b7e2ca407a14b7693f456fc5fe7d","sha512":"16b6bed4e27d8f5f5186d06e769790fe33c90e118611eb3172053dc38e4f93d7b6f8d7404d018d71050cdf355b24bf8754e0b2640c9f6c780d2144bbab46dc34","ssdeep":"384:+vMRJiXIki+/F7cj7REGCPT8hsjPqKr9+IdPWCMVsxxxtlKz9LEfP:+etku7REGCPTTpr9+gPWCMVsNH89IX","tlshash":"210319993550b07f47ab30a1722f310db2bb8a5148898440c76be1e16e36f9f52aff5c","size":38680,"data":"","first_seen":"2023-03-11T21:27:26Z","last_seen":"2026-05-15T20:49:14.657054Z","times_seen":245,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"szssp5.cfd/cn/home/web/template/048wukong9_wtpl/static/js/zepto.js","fqdn":"szssp5.cfd","domain":"szssp5.cfd","tld":"cfd"},"ip":{"addr":"154.26.181.150","port":443,"asn":906,"as":"DMIT","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"6ee6ccd23c62b72fe2b7867f28e56ffd","sha1":"11c2e7494fcd72d50c17936b12a70eb9f457e4a5","sha256":"e4b42197bdfb4d574edfdf88202a840af46c9ed9db5be4326de80f04c1163378","sha512":"9d7f8eefca381123275d5b874b8d0c2e9606f7fce312934ca55294e54e051284960aa4a2e32ed8374ee534f1e958205b8c53feaaeef8eaff0cebf44ad0188d1b","ssdeep":"768:HNr6znpYhwen2Jfplh7lHCyO0vzcA33Ox4WWfWmeAOuKzuJ9wj+01SI/GtPnrj2/:trMpUwe2Jf/h5HCyO0vzcA33OxUOuKzL","tlshash":"d813b4c87642b47607ab727b51af170bf23b81d6582c80a4f0359de42db4d0a6267fbd","size":43650,"data":"","first_seen":"2023-03-08T01:02:30Z","last_seen":"2026-05-15T20:49:14.693062Z","times_seen":526,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"szssp5.cfd/cn/home/web/static/js/jquery.js","fqdn":"szssp5.cfd","domain":"szssp5.cfd","tld":"cfd"},"ip":{"addr":"154.26.181.150","port":443,"asn":906,"as":"DMIT","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"397754ba49e9e0cf4e7c190da78dda05","sha1":"ae49e56999d82802727455f0ba83b63acd90a22b","sha256":"c12f6098e641aaca96c60215800f18f5671039aecf812217fab3c0d152f6adb4","sha512":"8c64754f77507ab2c24a6fc818419b9dd3f0ceccc9065290e41afdbee0743f0da2cb13b2fbb00afa525c082f1e697cb3ffd76ef9b902cb81d7c41ca1c641dffb","ssdeep":"1536:dnu00HWWaRxkqJg09pYxoxDKMXJrg8hXXO4dK3kyfiLJBhdSZE+I+Qg7rbaN1RUx:ddkWgoBhcZRQgmW42qe","tlshash":"8c932bdd72d2b03257ab30bd106f540ff2361959280d8850f268d8f9bc79a49a277f6d","size":92629,"data":"","first_seen":"2023-03-07T01:02:08Z","last_seen":"2026-05-15T22:12:25.966897Z","times_seen":65820,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"szssp5.cfd/cn/home/web/template/048wukong9_wtpl/static/js/mip-cambrian.js","fqdn":"szssp5.cfd","domain":"szssp5.cfd","tld":"cfd"},"ip":{"addr":"154.26.181.150","port":443,"asn":906,"as":"DMIT","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"2e1ef943eb417c2324aafed99ed4a6ff","sha1":"0a0d1a81d129599b74cf64868d818a82a95e371f","sha256":"09da74720c6659d49e7f1acd595192c8b28699dc65565b33f90d9cad83e167bf","sha512":"abf11c78e9e50083657fd20b863e55e15ce25edd89583c657f427f6d852db77f802bc26ed1a2b256f710d7af7174e7b9104b103e30fc6c49affa1f41720c6e01","ssdeep":"","tlshash":"a3115c18b941b463baf53155bb3f334864f94b68dd44464563d38cf82eb75ca9810754","size":856,"data":"","first_seen":"2023-03-08T01:02:30Z","last_seen":"2026-05-15T20:49:14.688701Z","times_seen":538,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"szssp5.cfd/cn/home/web/template/048wukong9_wtpl/static/js/mip-accordion.js","fqdn":"szssp5.cfd","domain":"szssp5.cfd","tld":"cfd"},"ip":{"addr":"154.26.181.150","port":443,"asn":906,"as":"DMIT","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"5d4f87bd5b9843ee538994cae3613a27","sha1":"c04c39305f314fccf255b3e46893946df38a6958","sha256":"02f58663eec9e1d9e9879b7dff20d99833932c1b28534a566c52abf398f199cf","sha512":"f93c982e32aa476c80dca781300448c56474cacc34f84342bbc4eb299c71a7350da1a4f187902705a6d7c6b6bb352db851ef7bdcef08cd5908deb5f42051fa4b","ssdeep":"96:aOMKn3lQf/HXDrRaFhVb2hVHXmMXDSO3sx+iWdRfWTXUMw9GLrgl:ui3lm3DrRPIeB3sxcuoLerU","tlshash":"cde1b839715170b28beb70e1862b768555f6d0e4ed4ac880a7a2d0e32f29d5d3533f2d","size":7408,"data":"","first_seen":"2023-03-25T23:09:24Z","last_seen":"2026-05-15T20:49:14.617427Z","times_seen":221,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"szssp5.cfd/cn/home/web/template/048wukong9_wtpl/static/js/mip-gototop.js","fqdn":"szssp5.cfd","domain":"szssp5.cfd","tld":"cfd"},"ip":{"addr":"154.26.181.150","port":443,"asn":906,"as":"DMIT","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"583707aba1e5df6065b6600f9c7cfb69","sha1":"c2840e5c472daafa5c8439a13eadb5b327aba2a3","sha256":"19dc43f98e7cc852c3c9f1004eb8d9b5e893ee6fcf6ca01b06b791c25217f615","sha512":"dcc6a1995e86a8b0d272a744e3dbe143d96906e44c25e3da8c7a5f9382771e73cea87ee72e2bd025bf13b5d75973af00214aa3223c9722c224cca3b36e7587f9","ssdeep":"192:XIbh40TwiuunhBReytnV0bp/qp/KBdZVyrE:XIbaUwrcBRxPOhJdZb","tlshash":"5d22f99931d1b0e2c3f7b1a0522f5647d6fb98914949c880ea56e5f3be26b3d0123f2c","size":10252,"data":"","first_seen":"2023-03-07T12:27:14Z","last_seen":"2026-05-15T20:49:14.682336Z","times_seen":325,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"szssp5.cfd/cn/home/web/template/048wukong9_wtpl/static/js/mip-form.js","fqdn":"szssp5.cfd","domain":"szssp5.cfd","tld":"cfd"},"ip":{"addr":"154.26.181.150","port":443,"asn":906,"as":"DMIT","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"bd4b2d14ce81699aad672ff23c07bc6f","sha1":"27450785cbfe4595ae2d5b60dbc3833061c4f415","sha256":"ae1ba67c149239a12359c73899c8f268e5175fc3e15d73bd1a0ddcddc5c1482a","sha512":"bc9701b278c040a5455bd125392b3505390495745de26100a0750b6b3e471da56b44e3aa1ed0aaf7c133565cd77c314f54423aceb228969764a7dd4064a8c336","ssdeep":"384:/4KyJ94z34A4iO7By2Cv9RKDyXcTgcPmMxW1xMNlcGOwefVqNbFZ5G0i:AWBTnK9TgcOMwHMN6me6Z5s","tlshash":"1aa2f95932e1b0f38bba71b5505f724ba2f754548c89c440e962d8e19e7ee6e0223f7c","size":22161,"data":"","first_seen":"2023-03-11T21:27:26Z","last_seen":"2026-05-15T20:49:14.689276Z","times_seen":254,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"szssp5.cfd/s/M%E7%94%B7.html","fqdn":"szssp5.cfd","domain":"szssp5.cfd","tld":"cfd"},"ip":{"addr":"154.26.181.150","port":443,"asn":906,"as":"DMIT","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"57ca1679beecd06eaa00944bec96c8d5","sha1":"90d2c545a94b7fa7ea2a0bb2e79d47db91cf7164","sha256":"7c766318d776596c427c9707337cc501d4a06a8186257b80a24d129fc3b97d42","sha512":"971021ae72ea21612944d42c4b9048028e447eb31df65c34a3311c1a6246773b9d8465eb20cb52c6b34099d5a7a714d791cd2eed9323764eed0b3addd104aa6b","ssdeep":"","tlshash":"27e07d9a8841d2e6d986b3bbffe0d368e8983b193817d83207101cd6221336fd446b4d","size":332,"data":"","first_seen":"2023-11-16T12:30:34Z","last_seen":"2026-05-15T22:53:29.072812Z","times_seen":9842,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"szssp5.cfd/cn/home/web/template/048wukong9_wtpl/static/js/mip-history.js","fqdn":"szssp5.cfd","domain":"szssp5.cfd","tld":"cfd"},"ip":{"addr":"154.26.181.150","port":443,"asn":906,"as":"DMIT","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"a78c9613df2e4232e10dbf75e9a2f757","sha1":"790468f76d15a8c9ab42f517174ed5da1d70cf65","sha256":"76d34a3e5118de37ff2e4cdf42a85395f162ad5b2be0a6fc72816bf4a778d173","sha512":"5172438ae513498ac17a904b35ca4b1eaf533e57d0e78edf19753fe609d78a89837ff7d6b149b95adab98381165d5fbb6cfd5d97960276088696c3716c1ebfbb","ssdeep":"96:ZnXf6QfNwU92Y2yd2IPe9XVYVlNVB00jpq9YrXqSvzUzN5nrm:xv60hkYXsVyXjp/PvzUJNrm","tlshash":"4d1274d93291f0e2c7f771d5522f6047a2fb98808d899980e696d1e1bd36a2e4173f2c","size":9076,"data":"","first_seen":"2023-03-07T12:27:14Z","last_seen":"2026-05-15T20:49:14.674655Z","times_seen":305,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"szssp5.cfd/abc/fixed_ui_8eaf6e.js","fqdn":"szssp5.cfd","domain":"szssp5.cfd","tld":"cfd"},"ip":{"addr":"154.26.181.150","port":443,"asn":906,"as":"DMIT","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"8ced541faa36544691ac6c3f4da51cbf","sha1":"b80c9b71e84f301e7df24cb85f5f05ab69977267","sha256":"b295eb8dd834e224e1c87061341142e9ad4f1984c83e0bf3963cb982bc294f12","sha512":"6bc61170e99fdff7fa5c2f325950b9c03913e06f614fafa7ae307bc54b1883bf4048916e9698ca5c9d939fde447d0d0344e1288d6ae70b8aa270a09e38a474e4","ssdeep":"96:4nrFra8EXqMwEpxg2/27EVfE2Tzg29CuD3JkiTeoP5VYb5G6JS/lWrN54ksKQOX:wBAw6m2/27MfRT8wCuTJx5VGGg+g8zla","tlshash":"94b1955f7ae33096892330b48fff050832316013a10ddd90bc1e92646fa9bd86672fe9","size":5587,"data":"","first_seen":"2026-05-15T20:49:14.659709Z","last_seen":"2026-05-15T20:49:14.659709Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"szssp5.cfd/cn/home/web/template/048wukong9_wtpl/static/js/mip.js","fqdn":"szssp5.cfd","domain":"szssp5.cfd","tld":"cfd"},"ip":{"addr":"154.26.181.150","port":443,"asn":906,"as":"DMIT","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"07137c33f9c8e6be77e6ef9f588ff940","sha1":"510e4cdb88e33cb7b7165b754152f1c1e8fd4dc9","sha256":"60fb02ae6419b82ea31e32d0b7ada3bc6c6c61656b4da834ff32caf21eb098da","sha512":"90f158afa316c5f59f615af89f02d46283151401a9f56ff816a43ab4d67ed399d99e438aca3f2519aebae413207cd430921a0666ba131227b41009467e318713","ssdeep":"3072:DPcFeTXTHajgpXuwfaB7cR2pBfuX2Udsc9K+DZJcfftvgPENLtCBWQO:DyeTXTLtaBIE5UYfObwX","tlshash":"3f44e79d72c2b07146e73175a43f220bb2362964588d8054f23ad8da7db9d4e9237fbc","size":276884,"data":"","first_seen":"2025-08-02T09:35:09.713131Z","last_seen":"2026-05-15T20:49:14.680975Z","times_seen":218,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"szssp5.cfd/cn/home/web/template/048wukong9_wtpl/static/js/mip-stats-baidu.js","fqdn":"szssp5.cfd","domain":"szssp5.cfd","tld":"cfd"},"ip":{"addr":"154.26.181.150","port":443,"asn":906,"as":"DMIT","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"78d5777011de2a907847f77b7e5ba562","sha1":"3eb231765dcd9d3dd4eb7194c8409971afd79ecf","sha256":"9abe08f22aed0d7fa4cdf37960267ff2d3a28f34f8ed3f904181fbc929df9a9d","sha512":"13e10c3168ff976b2eeda0989c45a57d5ffa87d93e74e4ce155943bed674f3fbe6174a2a67177076b917e4af9d4c5d8f6c13e871207d744d17d637208e58e734","ssdeep":"384:LGv66BeVMmCu9y5PLiplGXauUalkZbf4VoIXJFytSj:L4blupJuUalkZAoIXutSj","tlshash":"cb82b7993659b2d293f730e5522f7447a2fb98819c8ed880d686c1e07d3796e0277f2c","size":17958,"data":"","first_seen":"2023-03-07T12:27:14Z","last_seen":"2026-05-15T20:49:14.651882Z","times_seen":309,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"img.alicdn.com/imgextra/i4/O1CN01RqClAJ1Cxpkvpz7RT_!!6000000000148-1-cib.gif","fqdn":"img.alicdn.com","domain":"alicdn.com","tld":"com"},"ip":{"addr":"47.246.44.177","port":443,"asn":24429,"as":"Zhejiang Taobao Network Co.,Ltd","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://szssp5.cfd/s/M%E7%94%B7.html","date":"2026-05-15T20:48:18.586Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tbcdn.cn","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Fri, 28 Nov 2025 03:07:13 GMT","end":"Sat, 18 Jul 2026 09:41:04 GMT"},"fingerprint":{"sha1":"01:40:62:EF:8C:E5:C1:8A:19:4C:8D:B6:F5:C2:24:7F:DC:C0:9C:8A","sha256":"60:3C:41:A0:78:62:E6:5E:82:F0:FA:CF:5C:C9:D3:22:E4:64:EE:1A:EE:C7:CC:BA:DD:25:08:90:6F:CC:C4:F2"}}},"request":{"raw":"GET /imgextra/i4/O1CN01RqClAJ1Cxpkvpz7RT_!!6000000000148-1-cib.gif HTTP/1.1\r\nHost: img.alicdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://szssp5.cfd/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: Tengine\r\ncontent-type: image/gif\r\ncontent-length: 348996\r\ndate: Sun, 10 May 2026 07:41:13 GMT\r\npicasso-ret-code: SUCCESS\r\npicasso-cache-info: L3-HIT\r\nrequest-time: 0.002\r\ntraceid: a3b5fea517783988733166953e\r\nx-powered-by: Picasso\r\npicasso-image-type: normal\r\npicasso-fmt: gif2webp\r\ncache-control: max-age=31536000\r\nvia: ens-cache9.l2de4[0,0,200-0,H], ens-cache31.l2de4[1,0], ens-cache5.se2[0,0,200-0,H], ens-cache4.se2[1,0]\r\naccess-control-allow-origin: *\r\nage: 479226\r\nali-swift-global-savetime: 1778398873\r\nx-cache: HIT TCP_MEM_HIT dirn:-2:-2\r\nx-swift-savetime: Sun, 10 May 2026 07:42:49 GMT\r\nx-swift-cachetime: 31535904\r\nback_uri: /imgextra/i4/O1CN01RqClAJ1Cxpkvpz7RT_!!6000000000148-1-cib.gif_.webp\r\nvary: Accept\r\ns-rt: 1\r\ntiming-allow-origin: *\r\neagleid: 2ff62c9817788780990862325e\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Tengine","description":"Tengine is a web server which is based on the Nginx HTTP server.","website":"https://tengine.taobao.org","common_platform_enumeration":"","icon":"Tengine.png","categories":["Web servers"]}],"data":{"size":348996,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 960 x 120","md5":"ec1d37522f4f573dc3a4898b5fe97835","sha1":"9b6061463dd8e1860ea9a59c2fc268941fa86215","sha256":"26e49533ba42f9bbf513f38162da602dba91c5c7e21367b25c67fbc1126596e1","sha512":"8ff726b59182e8ce5d10ecf9ee50dc1e049152c571e9e7e36fffad277bf1803c6091fa241663fc2b63bcf30e6d1b41743f0edb8ce5cc2ef8e7b145f488b32564","ssdeep":"6144:7ErxGTE59TE59TE59TE59TEU1rNuvehNuvehNuvehNuvehNf:7EN41rNWehNWehNWehNWehNf","tlshash":"cf7402130e0493a5e4e8acf9685742cafe3af68754c4ee57638477512f4f340b87da8a","first_seen":"2026-05-11T02:16:39.588754Z","last_seen":"2026-05-15T21:34:28.68002Z","times_seen":66,"resource_available":false,"data":null}},"time_used":671,"timings":{"blocked":-1,"dns":460,"connect":31,"send":0,"wait":88,"receive":43,"ssl":44},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.huawen1955.top/9926-120.gif","fqdn":"img.huawen1955.top","domain":"huawen1955.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://szssp5.cfd/s/M%E7%94%B7.html","date":"2026-05-15T20:48:18.703Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /9926-120.gif HTTP/1.1\r\nHost: img.huawen1955.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://szssp5.cfd/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-15T22:20:41.080999Z","times_seen":15239822,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"img.huawen1955.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"11221.xn--gps-8y0gm25n.xn--55qx5d/d/11221?_t=1766049818","fqdn":"11221.xn--gps-8y0gm25n.xn--55qx5d","domain":"11221.xn--gps-8y0gm25n.xn--55qx5d","tld":""},"ip":{"addr":"27.155.113.137","port":443,"asn":133774,"as":"Fuzhou","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://szssp5.cfd/s/M%E7%94%B7.html","date":"2026-05-15T20:48:18.727Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.xn--gps-8y0gm25n.xn--55qx5d","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 06 Apr 2026 17:10:52 GMT","end":"Sun, 05 Jul 2026 17:10:51 GMT"},"fingerprint":{"sha1":"14:35:E7:15:D0:69:74:17:04:77:88:A9:C4:73:D4:9B:E4:64:D6:AD","sha256":"7A:77:B5:29:20:D8:74:37:C7:83:CD:B4:18:86:73:6E:7F:26:29:90:C4:5F:B4:64:3D:DB:EC:53:3F:AA:9F:D8"}}},"request":{"raw":"GET /d/11221?_t=1766049818 HTTP/1.1\r\nHost: 11221.xn--gps-8y0gm25n.xn--55qx5d\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://szssp5.cfd/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\ndate: Fri, 15 May 2026 20:48:21 GMT\r\ncontent-type: text/html\r\ncontent-length: 145\r\nlocation: https://fsffbhd.brffff.com/9acf3f15aa2f10616fcec1e9f8124088.gif?_t=1766049818\r\ncache-control: public, max-age=900\r\nexpires: Friday, 15-May-2026 20:48:21 GMT\r\nstrict-transport-security: max-age=31536000\r\nx-via-jsl: e7be9b3,-\r\nset-cookie: __jsluid_s=a47e6f427c2086f019847dff51c10616; max-age=31536000; path=/; HttpOnly; SameSite=None; secure\r\nx-cache: miss\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":596432,"size_decoded":0,"mime_type":"image/webp","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-15T22:20:41.080999Z","times_seen":15239822,"resource_available":true,"data":null}},"time_used":3003,"timings":{"blocked":-1,"dns":2389,"connect":306,"send":0,"wait":312,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aik8y6kd99.f6s3i7d2o5m0u8p1k.com/a6e817e2bc7cae2c0681354073496d8c.gif","fqdn":"aik8y6kd99.f6s3i7d2o5m0u8p1k.com","domain":"f6s3i7d2o5m0u8p1k.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://szssp5.cfd/s/M%E7%94%B7.html","date":"2026-05-15T20:48:18.728Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /a6e817e2bc7cae2c0681354073496d8c.gif HTTP/1.1\r\nHost: aik8y6kd99.f6s3i7d2o5m0u8p1k.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://szssp5.cfd/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-15T22:20:41.080999Z","times_seen":15239822,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.alicdn.com/imgextra/i4/4183327079/O1CN01vz9zKJ22AEtCMEtku_!!4183327079.gif","fqdn":"img.alicdn.com","domain":"alicdn.com","tld":"com"},"ip":{"addr":"47.246.44.177","port":443,"asn":24429,"as":"Zhejiang Taobao Network Co.,Ltd","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://szssp5.cfd/s/M%E7%94%B7.html","date":"2026-05-15T20:48:18.757Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tbcdn.cn","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Fri, 28 Nov 2025 03:07:13 GMT","end":"Sat, 18 Jul 2026 09:41:04 GMT"},"fingerprint":{"sha1":"01:40:62:EF:8C:E5:C1:8A:19:4C:8D:B6:F5:C2:24:7F:DC:C0:9C:8A","sha256":"60:3C:41:A0:78:62:E6:5E:82:F0:FA:CF:5C:C9:D3:22:E4:64:EE:1A:EE:C7:CC:BA:DD:25:08:90:6F:CC:C4:F2"}}},"request":{"raw":"GET /imgextra/i4/4183327079/O1CN01vz9zKJ22AEtCMEtku_!!4183327079.gif HTTP/1.1\r\nHost: img.alicdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://szssp5.cfd/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: Tengine\r\ncontent-type: image/gif\r\ncontent-length: 671752\r\ndate: Sun, 10 May 2026 11:42:20 GMT\r\nlast-modified: Sun, 10 May 2026 11:42:08 GMT\r\npicasso-ret-code: SUCCESS\r\npicasso-cache-info: L4-HIT\r\nrequest-time: 0.013\r\ntraceid: a3b5839c17784133406111024e\r\nx-powered-by: Picasso\r\npicasso-image-type: normal\r\npicasso-fmt: gif2webp\r\ncache-control: max-age=31536000\r\nvia: ens-cache1.l2de4[0,0,200-0,H], ens-cache16.l2de4[17,0], ens-cache17.se2[0,0,200-0,H], ens-cache4.se2[9,0]\r\naccess-control-allow-origin: *\r\nage: 464759\r\nali-swift-global-savetime: 1778413340\r\nx-cache: HIT TCP_MEM_HIT dirn:-2:-2\r\nx-swift-savetime: Sun, 10 May 2026 11:43:19 GMT\r\nx-swift-cachetime: 31535941\r\nback_uri: /imgextra/i4/4183327079/O1CN01vz9zKJ22AEtCMEtku_!!4183327079.gif_.webp\r\nvary: Accept\r\ns-rt: 9\r\ntiming-allow-origin: *\r\neagleid: 2ff62c9817788780990622310e\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Tengine","description":"Tengine is a web server which is based on the Nginx HTTP server.","website":"https://tengine.taobao.org","common_platform_enumeration":"","icon":"Tengine.png","categories":["Web servers"]}],"data":{"size":671752,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 960 x 120","md5":"c207daa2b2f57da1f1d82b3298d0d3c7","sha1":"f16251e70b43e4cb07adb6368eef13f1032c2678","sha256":"122b501a349acc075fdf6207fb08863c271ceccb2b41a13d54b3e4247765a575","sha512":"a63d3ec09544236bc6db854c23d84b8e45fc76bd09636032f465629c35021eae70e2601254162e28b1764ef5fe06f92ee92effc9183e88f1b2c0432bbcf20857","ssdeep":"12288:gv4jhv4jf/99NaaqoGNaaGm3Tu1SFm3Tu1SLTFHspFHseRDv4VaUB:gvwhvwf/9fqoMdyc6ycL5szscb4PB","tlshash":"88e4233058739750d0019b2f5fdbab6ee3b0dc6878cf35564896efb5d84e3a81181ba1","first_seen":"2026-05-11T02:16:39.545118Z","last_seen":"2026-05-15T21:34:28.635745Z","times_seen":64,"resource_available":false,"data":null}},"time_used":499,"timings":{"blocked":317,"dns":0,"connect":0,"send":0,"wait":91,"receive":91,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"szssp5.cfd/cn/home/web/template/048wukong9_wtpl/static/js/mip-accordion.js","fqdn":"szssp5.cfd","domain":"szssp5.cfd","tld":"cfd"},"ip":{"addr":"154.26.181.150","port":443,"asn":906,"as":"DMIT","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://szssp5.cfd/s/M%E7%94%B7.html","date":"2026-05-15T20:48:17.380Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.szssp5.cfd","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Apr 2026 06:02:14 GMT","end":"Sun, 26 Jul 2026 06:02:13 GMT"},"fingerprint":{"sha1":"56:AF:D3:CA:15:EA:D2:D9:58:15:D6:47:A3:38:1F:B5:54:A7:F2:D9","sha256":"79:A4:A1:CB:D4:EA:DC:A8:10:34:6A:B9:56:FF:B0:A4:24:16:D6:C4:B9:D2:2F:0D:92:2D:BD:1B:EB:5C:01:EE"}}},"request":{"raw":"GET /cn/home/web/template/048wukong9_wtpl/static/js/mip-accordion.js HTTP/1.1\r\nHost: szssp5.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://szssp5.cfd/s/M%E7%94%B7.html\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=nj49fn556ooooannkq320e8ooc\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: https://www.xzylm.com\r\ncontent-type: application/javascript\r\ncontent-length: 7408\r\nlast-modified: Sat, 19 Nov 2022 09:30:41 GMT\r\nvary: Accept-Encoding\r\ncache-control: public, max-age=2592000\r\naccept-ranges: bytes\r\nvia: http/1.1 traffic_server (https://www.xzylm.com [cRs f ])\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":7408,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (7408), with no line terminators","md5":"5d4f87bd5b9843ee538994cae3613a27","sha1":"c04c39305f314fccf255b3e46893946df38a6958","sha256":"02f58663eec9e1d9e9879b7dff20d99833932c1b28534a566c52abf398f199cf","sha512":"f93c982e32aa476c80dca781300448c56474cacc34f84342bbc4eb299c71a7350da1a4f187902705a6d7c6b6bb352db851ef7bdcef08cd5908deb5f42051fa4b","ssdeep":"96:aOMKn3lQf/HXDrRaFhVb2hVHXmMXDSO3sx+iWdRfWTXUMw9GLrgl:ui3lm3DrRPIeB3sxcuoLerU","tlshash":"cde1b839715170b28beb70e1862b768555f6d0e4ed4ac880a7a2d0e32f29d5d3533f2d","first_seen":"2023-03-25T23:09:24Z","last_seen":"2026-05-15T20:49:14.617427Z","times_seen":221,"resource_available":true,"data":null}},"time_used":865,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":858,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"szssp5.cfd/abc/data_e96fef.json","fqdn":"szssp5.cfd","domain":"szssp5.cfd","tld":"cfd"},"ip":{"addr":"154.26.181.150","port":443,"asn":906,"as":"DMIT","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://szssp5.cfd/s/M%E7%94%B7.html","date":"2026-05-15T20:48:18.326Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.szssp5.cfd","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Apr 2026 06:02:14 GMT","end":"Sun, 26 Jul 2026 06:02:13 GMT"},"fingerprint":{"sha1":"56:AF:D3:CA:15:EA:D2:D9:58:15:D6:47:A3:38:1F:B5:54:A7:F2:D9","sha256":"79:A4:A1:CB:D4:EA:DC:A8:10:34:6A:B9:56:FF:B0:A4:24:16:D6:C4:B9:D2:2F:0D:92:2D:BD:1B:EB:5C:01:EE"}}},"request":{"raw":"GET /abc/data_e96fef.json HTTP/1.1\r\nHost: szssp5.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://szssp5.cfd/s/M%E7%94%B7.html\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=nj49fn556ooooannkq320e8ooc\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: https://www.xzylm.com\r\ndate: Fri, 15 May 2026 20:44:37 GMT\r\ncontent-type: application/json; charset=utf-8\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=300\r\nage: 221\r\ncontent-length: 17145\r\nvia: http/1.1 traffic_server (https://www.xzylm.com [cRs f ])\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":17145,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"b537debb09fbe49fcc2274f7062398b8","sha1":"a64ee5b4478d508b9446b758aa24b364aab7fba5","sha256":"1cc2f02752a1746e771d19f6feea973ec66d3ae2a8318445c6caaba65628a9fe","sha512":"2e920a352d04b43c412c7bb9a2adfcd124e9f2b01e0d627d47cf54cbcf7460840481c64ec48643ded531d91aee3b49374d44b407a1389ca5f891b1c97907b9aa","ssdeep":"192:UR5xOfTbEjPHEe8PRndNgnwc6s0KJvJ/ECJJW4ONq5n:URObbQ8nQn/JvJ/E2wJqd","tlshash":"8572ad767bb9647cf7f011c4db5a3e69478d3023884c978627cdec3881785ea628b863","first_seen":"2026-05-15T19:40:59.940181Z","last_seen":"2026-05-15T22:53:29.00254Z","times_seen":10,"resource_available":false,"data":null}},"time_used":160,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":159,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img1.ah7907.com/tyctyc388-960x120.gif","fqdn":"img1.ah7907.com","domain":"ah7907.com","tld":"com"},"ip":{"addr":"47.76.249.42","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://szssp5.cfd/s/M%E7%94%B7.html","date":"2026-05-15T20:48:18.609Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img1.ah7907.com","organization":""},"issuer":{"commonName":"Certum DV TLS G2 R39 CA","organization":"Asseco Data Systems S.A."},"validity":{"start":"Thu, 06 Nov 2025 07:27:15 GMT","end":"Sun, 06 Dec 2026 07:27:14 GMT"},"fingerprint":{"sha1":"EE:18:15:48:CE:4E:22:9F:18:59:AB:6E:5E:C0:0D:4E:AF:C2:86:22","sha256":"65:F5:69:07:04:80:B4:E3:E7:D0:C5:50:2E:02:11:1C:02:89:6E:83:40:00:DD:00:37:08:E9:9C:1C:A3:4D:59"}}},"request":{"raw":"GET /tyctyc388-960x120.gif HTTP/1.1\r\nHost: img1.ah7907.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://szssp5.cfd/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 307 Temporary Redirect\r\nserver: NgxFence\r\ndate: Fri, 15 May 2026 20:48:21 GMT\r\ncontent-type: text/html; charset=utf-8\r\ncontent-length: 0\r\nlocation: https://img.alicdn.com/imgextra/i1/2217565595682/O1CN01JKJBL71rqPYr9sHRK_!!2217565595682.gif\r\nx-cache-status: HIT\r\nstrict-transport-security: max-age=31536000; includeSubdomains; preload\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"307","status_text":"Temporary Redirect","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":71518,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-15T22:20:41.080999Z","times_seen":15239822,"resource_available":true,"data":null}},"time_used":3187,"timings":{"blocked":-1,"dns":1192,"connect":271,"send":0,"wait":425,"receive":0,"ssl":1298},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"file.icve.com.cn/file_doc/377/823/5E6CDD77AB84B683CF36C32478519A09.gif","fqdn":"file.icve.com.cn","domain":"icve.com.cn","tld":"com.cn"},"ip":{"addr":"87.119.9.73","port":443,"asn":141180,"as":"HUAWEI INTERNATIONAL PTE. LTD.","country":"Indonesia","country_code":"ID"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://szssp5.cfd/s/M%E7%94%B7.html","date":"2026-05-15T20:48:18.660Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.icve.com.cn","organization":""},"issuer":{"commonName":"Encryption Everywhere DV TLS CA - G2","organization":"DigiCert Inc"},"validity":{"start":"Wed, 17 Sep 2025 00:00:00 GMT","end":"Sat, 17 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"0E:BB:16:D9:59:0A:55:6E:2E:F8:D6:D3:2A:8E:50:A2:86:3A:CC:48","sha256":"F8:FC:F5:BB:BB:0E:DA:0C:68:E3:34:8D:CF:37:7D:37:2E:10:BE:51:57:ED:9B:5B:6A:B2:57:71:02:12:2A:CB"}}},"request":{"raw":"GET /file_doc/377/823/5E6CDD77AB84B683CF36C32478519A09.gif HTTP/1.1\r\nHost: file.icve.com.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://szssp5.cfd/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 15 May 2026 20:48:21 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 613158\r\nserver: openresty\r\nx-oss-request-id: 69F4C6BC175B4B333289CCF6\r\nx-oss-cdn-auth: success\r\netag: \"5E6CDD77AB84B683CF36C32478519A09\"\r\nlast-modified: Fri, 01 May 2026 15:28:56 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 11449457656234051262\r\nx-oss-storage-class: Standard\r\nx-oss-server-time: 14\r\nvia: EA-IDN-jakarta-AREA1-CACHE23[3],EA-IDN-jakarta-AREA1-CACHE1[0,TCP_HIT,0],EA-SGP-GLOBAL1-CACHE8[4],EA-SGP-GLOBAL1-CACHE6[0,TCP_HIT,0],CHN-SH-GLOBAL4-CACHE158[4],CHN-SH-GLOBAL4-CACHE154[0,TCP_HIT,0],cache55.l2cn3130[30,30,206-0,M], cache49.l2cn3130[32,0], vcache19.cn3775[48,47,206-0,M], vcache3.cn3775[51,0]\r\nali-swift-global-savetime: 1777649340\r\nx-cache: MISS TCP_MISS dirn:-2:-2 mlen:524288\r\nx-swift-savetime: Fri, 01 May 2026 15:29:00 GMT\r\nx-swift-cachetime: 15552000\r\ntiming-allow-origin: *\r\neagleid: 65e21a9717776493401133318e\r\nx-ccdn-expires: 1421011\r\nx-hcs-proxy-type: 1\r\nx-ccdn-cachettl: 2592000\r\nnginx-hit: 1\r\nage: 1228545\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":613158,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 960 x 120","md5":"5e6cdd77ab84b683cf36c32478519a09","sha1":"c3599b6fc28d9251f234a32f00ae59a1e5a48469","sha256":"54766dbbcf464e8fcc0bf934c5c06174c926ff52e3cce5cc3db3dfcc904e06a8","sha512":"267e816839e5907e3b5e58626a27445c50544bee78d443d0cfbce6876de3c839f6d94f773a2c872cdf2acf30a0136f77a17f48afe0c266f9bf70a0581b9545e8","ssdeep":"12288:rK9s/x5m3LdFgFow2IYcGo1boc5mmei42y9ko3W4sNZ1qD3hVv:293wGybVmmeb26kZ710V","tlshash":"5ad4237bb55c6e52e9b13cfe1baa973cfe84237422653e23c64777187132293419422b","first_seen":"2026-05-09T03:59:25.439463Z","last_seen":"2026-05-15T21:34:28.694974Z","times_seen":97,"resource_available":false,"data":null}},"time_used":4342,"timings":{"blocked":-1,"dns":2368,"connect":184,"send":0,"wait":842,"receive":393,"ssl":554},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.alicdn.com/imgextra/i4/O1CN01BjC39J1VkzHdLJRwF_!!6000000002692-1-cib.gif","fqdn":"img.alicdn.com","domain":"alicdn.com","tld":"com"},"ip":{"addr":"47.246.44.177","port":443,"asn":24429,"as":"Zhejiang Taobao Network Co.,Ltd","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://szssp5.cfd/s/M%E7%94%B7.html","date":"2026-05-15T20:48:21.303Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tbcdn.cn","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Fri, 28 Nov 2025 03:07:13 GMT","end":"Sat, 18 Jul 2026 09:41:04 GMT"},"fingerprint":{"sha1":"01:40:62:EF:8C:E5:C1:8A:19:4C:8D:B6:F5:C2:24:7F:DC:C0:9C:8A","sha256":"60:3C:41:A0:78:62:E6:5E:82:F0:FA:CF:5C:C9:D3:22:E4:64:EE:1A:EE:C7:CC:BA:DD:25:08:90:6F:CC:C4:F2"}}},"request":{"raw":"GET /imgextra/i4/O1CN01BjC39J1VkzHdLJRwF_!!6000000002692-1-cib.gif HTTP/1.1\r\nHost: img.alicdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://szssp5.cfd/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: Tengine\r\ncontent-type: image/gif\r\ncontent-length: 321245\r\ndate: Thu, 19 Mar 2026 07:55:14 GMT\r\nlast-modified: Thu, 27 Nov 2025 08:06:43 GMT\r\npicasso-ret-code: SUCCESS\r\npicasso-cache-info: L4-HIT\r\nrequest-time: 0.040\r\ntraceid: 2b6d569c17739069140851699e\r\nx-powered-by: Picasso\r\npicasso-image-type: normal\r\npicasso-fmt: gif2webp\r\ncache-control: max-age=31536000\r\nvia: ens-cache21.l2de4[0,0,200-0,H], ens-cache18.l2de4[2,0], ens-cache17.se2[0,0,200-0,H], ens-cache4.se2[2,0]\r\naccess-control-allow-origin: *\r\nage: 4971187\r\nali-swift-global-savetime: 1773906914\r\nx-cache: HIT TCP_MEM_HIT dirn:-2:-2\r\nx-swift-savetime: Mon, 06 Apr 2026 07:51:28 GMT\r\nx-swift-cachetime: 29981026\r\nback_uri: /imgextra/i4/O1CN01BjC39J1VkzHdLJRwF_!!6000000002692-1-cib.gif_.webp\r\nvary: Accept\r\ns-rt: 2\r\ntiming-allow-origin: *\r\neagleid: 2ff62c9817788781012883010e\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Tengine","description":"Tengine is a web server which is based on the Nginx HTTP server.","website":"https://tengine.taobao.org","common_platform_enumeration":"","icon":"Tengine.png","categories":["Web servers"]}],"data":{"size":321245,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 960 x 120","md5":"c94867987c3ebf3383767af1b3f017fa","sha1":"338f063d7909d789d44c20b06022d33b85cdcac8","sha256":"0ae3f0fb6c602fff8fe49bb2b6faf56fcbc371050f0a641959064a41aecd9336","sha512":"d4ba11703a5877d8be760f2b7ae58f2dc144cab19879d6a9885d4f082735083537fc9120045b7b561b37fb3a9c6c3f78aa1b1e19c578676159c3ba5da0e90306","ssdeep":"6144:lJ939BXQSyIxXQSyIxXQSyIxXQSyOT9Hv89559AzmsAzmsAzmd:dtBnyIxnyIxnyIxnyUUvaan","tlshash":"5f64f1f6dbb1c10bfb25233ae8ce7152c9a1a161b596fe634e0813015e7fd41a6dc368","first_seen":"2025-04-27T22:02:41.601985Z","last_seen":"2026-05-15T21:34:28.619894Z","times_seen":708,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":10,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"d3ccefxs96519j.cloudfront.net/MGM/980x120.gif","fqdn":"d3ccefxs96519j.cloudfront.net","domain":"d3ccefxs96519j.cloudfront.net","tld":"cloudfront.net"},"ip":{"addr":"54.192.209.198","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://szssp5.cfd/s/M%E7%94%B7.html","date":"2026-05-15T20:48:23.321Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cloudfront.net","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Tue, 24 Feb 2026 00:00:00 GMT","end":"Wed, 09 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C9:18:5B:88:98:FA:65:52:EE:3F:8C:AC:85:C1:E4:56:E1:0D:39:DA","sha256":"C6:C6:D5:C7:F7:92:11:BB:D5:98:B6:EB:43:02:E5:65:7B:E8:32:E7:75:CE:E0:A8:29:B0:DE:A3:5E:AF:4E:02"}}},"request":{"raw":"GET /MGM/980x120.gif HTTP/1.1\r\nHost: d3ccefxs96519j.cloudfront.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://szssp5.cfd/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/gif\r\ncontent-length: 95663\r\nlast-modified: Fri, 08 Aug 2025 06:03:40 GMT\r\nx-amz-server-side-encryption: AES256\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\ndate: Tue, 12 May 2026 04:03:23 GMT\r\netag: \"5a8005b75112b36916f21318ae457043\"\r\nvary: Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 1ad6d29ff66cbe7838d3a30dae2f9382.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: bsqUaUD4nHx7Kluba8TEbsWxX5WAz_UNdIV4l-Hl4AvGxw1ptTVwiQ==\r\nage: 539661\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":95663,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 980 x 120","md5":"5a8005b75112b36916f21318ae457043","sha1":"180f1ab095baa331066bf1708261d848d55789bf","sha256":"21b3d38760be3d6aaa1088bd68000cf9a0bd24b91baa7e4a93647a97f4f07e7d","sha512":"64180ea90a0dfec12e275bf1f6b3674bfcb69393177e726cbd5c6b03bc091acb7ad77429f6154f96e6071db087131f467c507c1fd95224faac5660fa71635d45","ssdeep":"1536:E2YoK+ONw4XmLHmnjNZ3CTtyO+cL2g1nB+VFS0O6QXkHv288jVG187LWL:77zONw4XqGnB1CxyO+c6cB0O6S6v288s","tlshash":"6c931279b8e135395715549e88ea6b0229ec29a1dff8d5e0fd3ffbe012400fba084752","first_seen":"2025-11-17T16:26:00.337909Z","last_seen":"2026-05-15T22:53:29.018832Z","times_seen":7581,"resource_available":false,"data":null}},"time_used":1548,"timings":{"blocked":33,"dns":1437,"connect":3,"send":0,"wait":10,"receive":34,"ssl":24},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sbzytpimg5.com:3519/upload/vod/20260424-1/081b60ae69797ac7c3b7fb863408c2bd.jpg","fqdn":"sbzytpimg5.com","domain":"sbzytpimg5.com","tld":"com"},"ip":{"addr":"23.140.148.9","port":3519,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://szssp5.cfd/s/M%E7%94%B7.html","date":"2026-05-15T20:48:18.374Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lsbzytp.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 10:43:59 GMT","end":"Tue, 30 Jun 2026 10:43:58 GMT"},"fingerprint":{"sha1":"19:06:F4:4B:71:06:A9:07:91:39:52:B1:F8:CA:C3:89:18:19:8D:F1","sha256":"AF:B3:63:F5:26:F2:72:D8:7D:F0:F8:25:DE:97:2D:C3:D2:CB:22:35:8E:C6:27:2F:84:F6:FA:D3:9A:27:76:76"}}},"request":{"raw":"GET /upload/vod/20260424-1/081b60ae69797ac7c3b7fb863408c2bd.jpg HTTP/1.1\r\nHost: sbzytpimg5.com:3519\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://szssp5.cfd/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 15 May 2026 20:48:18 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 425397\r\nlast-modified: Fri, 24 Apr 2026 03:56:59 GMT\r\nvary: Accept-Encoding\r\netag: \"69eaea0b-67db5\"\r\nexpires: Sun, 24 May 2026 04:13:42 GMT\r\ncache-control: max-age=2592000\r\naccept-ranges: bytes\r\nage: 1874076\r\ncache-status: HIT\r\nserver: HyperCDN\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":425397,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=12, height=2162, bps=0, PhotometricInterpretation=RGB, orientation=upper-left, width=3219], baseline, precision 8, 977x657, components 3","md5":"a2918ee731fdcb0b123538ed84a0dd73","sha1":"9d19d79577cac41ce811c917b47227b3ee50579c","sha256":"4339b0b828774e3938bb5d2fa6466748644bef9e23ac655a602f1fe438e88073","sha512":"205d1d538232c8bbc0b966a224be4be42627f0725963853d1f85ed215e43a2ef5f85e841ef3f90ab86251fbf8c59fe0a8aabc45324b72055c7b1710714adc820","ssdeep":"12288:oYEPZVhdTofcjPjiVU7EuiJkUknAQHdtM:oYmDskjOVHWfnM","tlshash":"bc9423186f315c82d6d533baaef4c3614b6f56409af255c13c9f982bf702ac48d23963","first_seen":"2025-06-17T14:01:06.558066Z","last_seen":"2026-05-15T20:49:14.627336Z","times_seen":5,"resource_available":false,"data":null}},"time_used":1880,"timings":{"blocked":484,"dns":189,"connect":146,"send":0,"wait":319,"receive":583,"ssl":156},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fsffbhd.brffff.com/ea980b9daf2cbb13355e4431bbc43384.gif?_t=1765444375","fqdn":"fsffbhd.brffff.com","domain":"brffff.com","tld":"com"},"ip":{"addr":"104.26.11.65","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://szssp5.cfd/s/M%E7%94%B7.html","date":"2026-05-15T20:48:21.312Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"brffff.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 19 Mar 2026 19:12:23 GMT","end":"Wed, 17 Jun 2026 20:10:57 GMT"},"fingerprint":{"sha1":"58:F3:6C:D6:53:06:24:55:BA:3E:5B:04:62:48:06:6F:B1:75:94:70","sha256":"F0:5D:1B:60:07:9D:34:05:71:DA:8E:2E:A0:0A:88:B3:C9:73:D8:E0:48:6E:6E:42:72:7E:D3:97:36:1F:D2:07"}}},"request":{"raw":"GET /ea980b9daf2cbb13355e4431bbc43384.gif?_t=1765444375 HTTP/1.1\r\nHost: fsffbhd.brffff.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://szssp5.cfd/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 15 May 2026 20:48:21 GMT\r\ncontent-type: image/webp\r\ncontent-length: 568104\r\nserver: cloudflare\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=B5ifTYJ8IN%2FrPD53XW%2FiWS%2BOvIxAulM%2FBKbCv%2FlgDUV%2BrgA2QgpNL81GyrroIDT03QIMY%2BCgeU3kBBSVTWhsutwQHLe85PgB72kFhgEFETqhnwQ2pFvZctyasWlJoDx7%2FT85Ow%3D%3D\"}]}\r\nlast-modified: Fri, 12 Dec 2025 11:26:10 GMT\r\netag: \"693bfbd2-abcad\"\r\naccept-ranges: bytes\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-bgj: imgq:100,h2pri\r\npriority: u=1;i=?0,cf-chb=(782;u=3;i=?0 1954;u=4;i=?0 75633;u=5;i=?0)\r\ncf-polished: ok, orig_size=703661\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept, accept-encoding\r\nage: 522\r\ncache-control: max-age=31536000\r\ncf-cache-status: HIT\r\ncf-ray: 9fc500c7bf9856a4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":568104,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"1925ddbac61bd86167e56762d9865272","sha1":"3af84806b787154f360260c48cd5dcb428c26f88","sha256":"d85767c20babde062fe404802a0e76670418dcbc3d1dbae7e07c9809deb1c5aa","sha512":"1d3f0b1ff9e05269e1842604c29e236cd598cb2af33daa07916cfad00591377d58ac51a385ca7d688e98fdd38f7b61eeb9fc7eb58ce6013a2764182198954399","ssdeep":"12288:U70AA6kUL5fzQs1R6fQQpOFpO0qidVKdSLIJ6UXErHh0Ob9Mu:RAA6kUFMs1nQiFqGVIJxXEV0ObWu","tlshash":"d3c42312f3d1f034f1f4b22986aa0786ad58999f1d4466412bb0f8edb2da1d5d1b0cdb","first_seen":"2026-02-10T10:56:09.274713Z","last_seen":"2026-05-15T22:41:11.918658Z","times_seen":2354,"resource_available":false,"data":null}},"time_used":432,"timings":{"blocked":2,"dns":372,"connect":1,"send":0,"wait":11,"receive":20,"ssl":26},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.meituan.net/portalweb/27a1e3a72fece63c3ff55f2c96c993a5588276.gif","fqdn":"img.meituan.net","domain":"meituan.net","tld":"net"},"ip":{"addr":"163.171.134.109","port":443,"asn":54994,"as":"ML-1432-54994","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://szssp5.cfd/s/M%E7%94%B7.html","date":"2026-05-15T20:48:22.107Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.meituan.net","organization":"北京三快科技有限公司"},"issuer":{"commonName":"GlobalSign RSA OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 03 Jun 2025 10:52:10 GMT","end":"Sat, 27 Jun 2026 07:00:02 GMT"},"fingerprint":{"sha1":"0C:29:B8:8B:74:6A:6C:C5:4B:6B:8C:7E:F5:C5:E8:A7:B1:26:B8:CB","sha256":"40:B3:D3:3A:FB:0A:FF:94:27:86:35:5E:B7:62:00:AE:DE:30:88:34:15:60:5F:60:9F:C0:E2:9D:2E:BB:5C:83"}}},"request":{"raw":"GET /portalweb/27a1e3a72fece63c3ff55f2c96c993a5588276.gif HTTP/1.1\r\nHost: img.meituan.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 15 May 2026 20:48:22 GMT\r\ncontent-type: image/webp\r\ncontent-length: 406836\r\nserver: openresty\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,OPTIONS,HEAD\r\naccess-control-allow-private-network: true\r\ncache-control: max-age=5184000\r\nm-traceid: stnbw2foodf7203m9zij\r\nlast-modified: Fri, 05 Dec 2025 07:15:26 +0000\r\ntiming-allow-origin: *\r\nx-via: 1.1 PS-HKG-04JZz35:6 (Cdn Cache Server V2.0), 0.0 PSrdsdgemSTO1sw92:4 (Cdn Cache Server V2.0)\r\nx-response-cache: edge_hit\r\nage: 1\r\nx-cache: HIT from cache.51cdn.com\r\nx-ws-request-id: 6a078696_PSrdsdgemSTO1sw92_6439-12808\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":406836,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"34578e43aadd0f0be311cfc623f3391e","sha1":"895f4361fbcd073db0535c831ba4424822b131a9","sha256":"b762e8d34521fe2e17fbbf032cc05edb46f8b217bbcf7bf030c6b98a50d66760","sha512":"a9cfe1c1e668f7de244195d0b606c8adeaad8f2a940629a72c1d552b6c238797219dc0e05fa423bec6fb3580686e402e4f352b2f1983b04e48b03642dc445cdd","ssdeep":"12288:v1HhfMhcKYspUXuT184HQIOO+EP/WvWG7/:dBfI/dwIIEWvWG7/","tlshash":"448423aadb664e34d5904c2fc1fb890fc4c476e9e3f716e69b36a9098bf7253448e040","first_seen":"2025-11-06T09:50:46.694344Z","last_seen":"2026-05-15T22:53:29.022843Z","times_seen":8119,"resource_available":false,"data":null}},"time_used":490,"timings":{"blocked":196,"dns":146,"connect":21,"send":0,"wait":23,"receive":74,"ssl":28},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"d29chpyt7ig43r.cloudfront.net/pzb/960x120.gif","fqdn":"d29chpyt7ig43r.cloudfront.net","domain":"d29chpyt7ig43r.cloudfront.net","tld":"cloudfront.net"},"ip":{"addr":"54.192.209.58","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://szssp5.cfd/s/M%E7%94%B7.html","date":"2026-05-15T20:48:23.322Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cloudfront.net","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Tue, 24 Feb 2026 00:00:00 GMT","end":"Wed, 09 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C9:18:5B:88:98:FA:65:52:EE:3F:8C:AC:85:C1:E4:56:E1:0D:39:DA","sha256":"C6:C6:D5:C7:F7:92:11:BB:D5:98:B6:EB:43:02:E5:65:7B:E8:32:E7:75:CE:E0:A8:29:B0:DE:A3:5E:AF:4E:02"}}},"request":{"raw":"GET /pzb/960x120.gif HTTP/1.1\r\nHost: d29chpyt7ig43r.cloudfront.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://szssp5.cfd/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/gif\r\ncontent-length: 394113\r\ndate: Fri, 08 May 2026 09:11:05 GMT\r\nlast-modified: Mon, 04 May 2026 14:43:39 GMT\r\netag: \"cf6795876cf19ffcde313616306ae794\"\r\nx-amz-server-side-encryption: AES256\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 652549e0dcae9775148cb207792b2a40.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: euqvWboWPgqGhesR3BZBfy4W57Bf7cfPeLCZqAIB-GpdBqxzcjm1aQ==\r\nage: 646638\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":394113,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 960 x 120","md5":"cf6795876cf19ffcde313616306ae794","sha1":"7213b942aadd3c777fa2d0216c0dece38adfcc81","sha256":"343b8b8a78ee12b9b7a5d17f2053f30c6a0ace45c585d957f37651edb069db50","sha512":"9297dd4b6ab7b9935b04724057906d94d4093b155ad6f59a69cb8bff9ff970e056c83d768215082d86911187a27dd885e7641b0906df50f6e17d628e2badf999","ssdeep":"6144:2bqHzq0iFq0iFq0iFq4tx2bVlgKe/pJWvwWvwWvwNVw/Z8V:FHe0ic0ic0ic4r25eKCpwddTZ8V","tlshash":"ea8412757a134e222f1abd3bdc14057bde4f63408f797d832691f6648c24922c1feaa9","first_seen":"2026-05-09T03:59:25.473258Z","last_seen":"2026-05-15T21:34:28.663148Z","times_seen":94,"resource_available":false,"data":null}},"time_used":1588,"timings":{"blocked":32,"dns":1484,"connect":3,"send":0,"wait":9,"receive":29,"ssl":27},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"szssp5.cfd/favicon.ico","fqdn":"szssp5.cfd","domain":"szssp5.cfd","tld":"cfd"},"ip":{"addr":"154.26.181.150","port":443,"asn":906,"as":"DMIT","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://szssp5.cfd/s/M%E7%94%B7.html","date":"2026-05-15T20:48:23.327Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.szssp5.cfd","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Apr 2026 06:02:14 GMT","end":"Sun, 26 Jul 2026 06:02:13 GMT"},"fingerprint":{"sha1":"56:AF:D3:CA:15:EA:D2:D9:58:15:D6:47:A3:38:1F:B5:54:A7:F2:D9","sha256":"79:A4:A1:CB:D4:EA:DC:A8:10:34:6A:B9:56:FF:B0:A4:24:16:D6:C4:B9:D2:2F:0D:92:2D:BD:1B:EB:5C:01:EE"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: szssp5.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://szssp5.cfd/s/M%E7%94%B7.html\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=nj49fn556ooooannkq320e8ooc\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: https://www.xzylm.com\r\ncontent-type: image/x-icon\r\ncontent-length: 16958\r\nlast-modified: Sat, 12 Oct 2019 09:22:32 GMT\r\naccept-ranges: bytes\r\nvia: http/1.1 traffic_server (https://www.xzylm.com [cRs f ])\r\ncache-control: public, max-age=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":16958,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 64x64, 32 bits/pixel","md5":"f27a1dcffeab30fa89a6b8dfbd3caa79","sha1":"546862ebe71c596cd95ff26b25cc7d7a7f149d9d","sha256":"c7f3e0fb8b7877a5c2282fb54392cf6b7a952cbb3b3443949ecf1e61e68b7e33","sha512":"c87df1f5e41ed0224ffed628ce8d34d2c997813365870809622aab30522ea1a025bb36b9c44d337d8bd1c655aaaa1f4b1e07bf27b94fa8dee552820f3dfa61f6","ssdeep":"384:J4NbLZjj6e0jWlo9U3NNmenA3yr9jmhojBUm1aMv:K3BjKKoydNznbr9a2uMv","tlshash":"d172e7a8ee3d819ecbbaef3c7965c53e0be11a72a61cd1e7f1aded055d5390080845c2","first_seen":"2023-06-26T08:01:25Z","last_seen":"2026-05-15T20:49:14.649445Z","times_seen":86,"resource_available":false,"data":null}},"time_used":162,"timings":{"blocked":5,"dns":0,"connect":0,"send":0,"wait":156,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dq38rjje7qjm3.cloudfront.net/xhtd/960x120.gif","fqdn":"dq38rjje7qjm3.cloudfront.net","domain":"dq38rjje7qjm3.cloudfront.net","tld":"cloudfront.net"},"ip":{"addr":"54.230.241.109","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://szssp5.cfd/s/M%E7%94%B7.html","date":"2026-05-15T20:48:23.324Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cloudfront.net","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Tue, 24 Feb 2026 00:00:00 GMT","end":"Wed, 09 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C9:18:5B:88:98:FA:65:52:EE:3F:8C:AC:85:C1:E4:56:E1:0D:39:DA","sha256":"C6:C6:D5:C7:F7:92:11:BB:D5:98:B6:EB:43:02:E5:65:7B:E8:32:E7:75:CE:E0:A8:29:B0:DE:A3:5E:AF:4E:02"}}},"request":{"raw":"GET /xhtd/960x120.gif HTTP/1.1\r\nHost: dq38rjje7qjm3.cloudfront.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://szssp5.cfd/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/gif\r\ncontent-length: 93540\r\nlast-modified: Thu, 11 Dec 2025 03:48:41 GMT\r\nx-amz-server-side-encryption: AES256\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\ndate: Thu, 07 May 2026 01:11:32 GMT\r\netag: \"d17c0265bd5c40f03ea3b38db614d5fa\"\r\nvary: Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 0c35b89cb607eddb1b7cc5d6ada865d6.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P1\r\nx-amz-cf-id: Z2c8lISN1FlIA4oAM-Phxb58DUwdLEEQuE8qXxDRuvAiD1Pp3x9dyw==\r\nage: 761812\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":93540,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 960 x 120","md5":"d17c0265bd5c40f03ea3b38db614d5fa","sha1":"86fd316dbff0105c353ce4fee261d3ffd67c18ce","sha256":"2861568da5dcad2c4d42b984f1fe980881487c41b41994d0e0783f1b574139ce","sha512":"83f8917b4b01282169bb147584c08e1195907014562a3b78d46a8209e1b817f1c1e2a53a4b566919e19d83dddee3bdbfacd55627dc9fb32b1901c921daa9da93","ssdeep":"1536:J5GRXGxtd59jNNhrDeq3zzI6ipoYDnu9/QvY1Wuqk78ks4xycnTYf2JlavtaDpv8:nGRXGxtd597Rpz0tDnc6q1RY4Ecn0kja","tlshash":"289312b791ecd5c697826c8df5e304a056069606af7cfdd71584168690feeed2ac7300","first_seen":"2025-12-12T01:02:04.573696Z","last_seen":"2026-05-15T22:53:29.019332Z","times_seen":7594,"resource_available":false,"data":null}},"time_used":76,"timings":{"blocked":-1,"dns":0,"connect":2,"send":0,"wait":37,"receive":2,"ssl":29},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"szssp5.cfd/cn/home/web/template/048wukong9_wtpl/static/js/mip-stats-baidu.js","fqdn":"szssp5.cfd","domain":"szssp5.cfd","tld":"cfd"},"ip":{"addr":"154.26.181.150","port":443,"asn":906,"as":"DMIT","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://szssp5.cfd/s/M%E7%94%B7.html","date":"2026-05-15T20:48:17.372Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.szssp5.cfd","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Apr 2026 06:02:14 GMT","end":"Sun, 26 Jul 2026 06:02:13 GMT"},"fingerprint":{"sha1":"56:AF:D3:CA:15:EA:D2:D9:58:15:D6:47:A3:38:1F:B5:54:A7:F2:D9","sha256":"79:A4:A1:CB:D4:EA:DC:A8:10:34:6A:B9:56:FF:B0:A4:24:16:D6:C4:B9:D2:2F:0D:92:2D:BD:1B:EB:5C:01:EE"}}},"request":{"raw":"GET /cn/home/web/template/048wukong9_wtpl/static/js/mip-stats-baidu.js HTTP/1.1\r\nHost: szssp5.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://szssp5.cfd/s/M%E7%94%B7.html\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=nj49fn556ooooannkq320e8ooc\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: https://www.xzylm.com\r\ncontent-type: application/javascript\r\ncontent-length: 17958\r\nlast-modified: Sat, 19 Nov 2022 09:30:45 GMT\r\nvary: Accept-Encoding\r\ncache-control: public, max-age=2592000\r\naccept-ranges: bytes\r\nvia: http/1.1 traffic_server (https://www.xzylm.com [cRs f ])\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":17958,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (17870), with no line terminators","md5":"78d5777011de2a907847f77b7e5ba562","sha1":"3eb231765dcd9d3dd4eb7194c8409971afd79ecf","sha256":"9abe08f22aed0d7fa4cdf37960267ff2d3a28f34f8ed3f904181fbc929df9a9d","sha512":"13e10c3168ff976b2eeda0989c45a57d5ffa87d93e74e4ce155943bed674f3fbe6174a2a67177076b917e4af9d4c5d8f6c13e871207d744d17d637208e58e734","ssdeep":"384:LGv66BeVMmCu9y5PLiplGXauUalkZbf4VoIXJFytSj:L4blupJuUalkZAoIXutSj","tlshash":"cb82b7993659b2d293f730e5522f7447a2fb98819c8ed880d686c1e07d3796e0277f2c","first_seen":"2023-03-07T12:27:14Z","last_seen":"2026-05-15T20:49:14.651882Z","times_seen":309,"resource_available":true,"data":null}},"time_used":841,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":839,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.xyzinf112.top/331.gif","fqdn":"img.xyzinf112.top","domain":"xyzinf112.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://szssp5.cfd/s/M%E7%94%B7.html","date":"2026-05-15T20:48:18.760Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /331.gif HTTP/1.1\r\nHost: img.xyzinf112.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://szssp5.cfd/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-15T22:20:41.080999Z","times_seen":15239822,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"img.xyzinf112.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fsffbhd.brffff.com/9acf3f15aa2f10616fcec1e9f8124088.gif?_t=1766049818","fqdn":"fsffbhd.brffff.com","domain":"brffff.com","tld":"com"},"ip":{"addr":"104.26.11.65","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://szssp5.cfd/s/M%E7%94%B7.html","date":"2026-05-15T20:48:21.628Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"brffff.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 19 Mar 2026 19:12:23 GMT","end":"Wed, 17 Jun 2026 20:10:57 GMT"},"fingerprint":{"sha1":"58:F3:6C:D6:53:06:24:55:BA:3E:5B:04:62:48:06:6F:B1:75:94:70","sha256":"F0:5D:1B:60:07:9D:34:05:71:DA:8E:2E:A0:0A:88:B3:C9:73:D8:E0:48:6E:6E:42:72:7E:D3:97:36:1F:D2:07"}}},"request":{"raw":"GET /9acf3f15aa2f10616fcec1e9f8124088.gif?_t=1766049818 HTTP/1.1\r\nHost: fsffbhd.brffff.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://szssp5.cfd/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 15 May 2026 20:48:21 GMT\r\ncontent-type: image/webp\r\ncontent-length: 596432\r\nserver: cloudflare\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bgTb%2FpDh2M6wtQuwjqAKpuOV1O02%2Ffhlrn2g7Ft3LYuG9QyH7AwMwtyjmoNJ9JwWdLpWJpMmChGyoPdvPKgqyz%2F4yZmeYpU9kyQnZT5fxdLoFIL8QqNCQzVCQXTwAzAYEnKwHg%3D%3D\"}]}\r\nlast-modified: Fri, 12 Dec 2025 13:55:30 GMT\r\netag: \"693c1ed2-b42e7\"\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\npriority: u=1;i=?0,cf-chb=(782;u=3;i=?0 1954;u=4;i=?0 77885;u=5;i=?0)\r\ncf-bgj: h2pri,imgq:100\r\ncf-polished: ok, orig_size=738023\r\nvary: accept, accept-encoding\r\nage: 522\r\ncache-control: max-age=31536000\r\ncf-cache-status: HIT\r\ncf-ray: 9fc500c7cfb756a4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":596432,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"70e27bd33ccc423d6ca629fe1a2694a3","sha1":"8f9b122d30952f553d18eb43f1a0d8fa43616f05","sha256":"2e4d5ced9b2775a2fcf90c86296064a475d629e3abfa9bc388d4c7e58a924b5a","sha512":"ccc4192c2f2d5bfdf26a698e8c1b065b607055b3c5cff1a3a3b5bbfa8cc0b1631d7d281bf5028d596a6ffd4f757b5f362015caa1b480563f58d7f8a32c3e79b4","ssdeep":"12288:o+1WCsh1cclbxyjPvVfdwCAqlH3JbHk55dJt9uMYpNlR:oush1cobxcGOHW5J5YT","tlshash":"32c42345e8fe2db59265a33cacf61a129dd700e96cd520591c9aff633ce0a4705ecf48","first_seen":"2026-02-12T00:35:26.594188Z","last_seen":"2026-05-15T22:41:11.983417Z","times_seen":3425,"resource_available":false,"data":null}},"time_used":132,"timings":{"blocked":1,"dns":56,"connect":1,"send":0,"wait":17,"receive":16,"ssl":34},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"szssp5.cfd/s/M%E7%94%B7.html","fqdn":"szssp5.cfd","domain":"szssp5.cfd","tld":"cfd"},"ip":{"addr":"154.26.181.150","port":443,"asn":906,"as":"DMIT","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-05-15T20:48:16.464Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.szssp5.cfd","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Apr 2026 06:02:14 GMT","end":"Sun, 26 Jul 2026 06:02:13 GMT"},"fingerprint":{"sha1":"56:AF:D3:CA:15:EA:D2:D9:58:15:D6:47:A3:38:1F:B5:54:A7:F2:D9","sha256":"79:A4:A1:CB:D4:EA:DC:A8:10:34:6A:B9:56:FF:B0:A4:24:16:D6:C4:B9:D2:2F:0D:92:2D:BD:1B:EB:5C:01:EE"}}},"request":{"raw":"GET /s/M%E7%94%B7.html HTTP/1.1\r\nHost: szssp5.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: https://www.xzylm.com\r\ncontent-type: text/html;charset=utf-8\r\nvary: Accept-Encoding\r\nx-frame-options: Deny\r\nset-cookie: PHPSESSID=nj49fn556ooooannkq320e8ooc; path=/\r\ncache-control: public, max-age=3600\r\ncontent-encoding: gzip\r\nvia: http/1.1 traffic_server (https://www.xzylm.com [cMsSf ])\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":79485,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (46032), with no line terminators","md5":"108f477f8578c9387567fc52e3f83bb7","sha1":"11a9ea3be4523c62f42923a690bc55a8f4ede3ef","sha256":"0a5c0e379967fe3b1e0968b4619dbd20136df9162b6f38d0e00dbbcba27cc48b","sha512":"6f39335fda7cc821caa156dc257db56cd80c244e569b198d0f42c7f6f777f03859a304e4710b108cdeab046f5d10f13a2cab049a9ec4ac23878670d67fb2060f","ssdeep":"1536:rIIdII4V6YC9Q3Kr3Y0zSkzUdcRiczZRM:vzSkzUiM","tlshash":"6f73f82426c83cb70127add438965b28b093a70ccb831f5929bd7f729feae34f454249","first_seen":"2026-05-15T20:49:14.654049Z","last_seen":"2026-05-15T20:49:14.654049Z","times_seen":1,"resource_available":true,"data":null}},"time_used":1088,"timings":{"blocked":436,"dns":92,"connect":157,"send":0,"wait":215,"receive":0,"ssl":184},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"szssp5.cfd/cn/home/web/template/048wukong9_wtpl/static/js/mip-share.js","fqdn":"szssp5.cfd","domain":"szssp5.cfd","tld":"cfd"},"ip":{"addr":"154.26.181.150","port":443,"asn":906,"as":"DMIT","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://szssp5.cfd/s/M%E7%94%B7.html","date":"2026-05-15T20:48:17.381Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.szssp5.cfd","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Apr 2026 06:02:14 GMT","end":"Sun, 26 Jul 2026 06:02:13 GMT"},"fingerprint":{"sha1":"56:AF:D3:CA:15:EA:D2:D9:58:15:D6:47:A3:38:1F:B5:54:A7:F2:D9","sha256":"79:A4:A1:CB:D4:EA:DC:A8:10:34:6A:B9:56:FF:B0:A4:24:16:D6:C4:B9:D2:2F:0D:92:2D:BD:1B:EB:5C:01:EE"}}},"request":{"raw":"GET /cn/home/web/template/048wukong9_wtpl/static/js/mip-share.js HTTP/1.1\r\nHost: szssp5.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://szssp5.cfd/s/M%E7%94%B7.html\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=nj49fn556ooooannkq320e8ooc\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: https://www.xzylm.com\r\ncontent-type: application/javascript\r\ncontent-length: 38680\r\nlast-modified: Sat, 19 Nov 2022 09:30:45 GMT\r\nvary: Accept-Encoding\r\ncache-control: public, max-age=2592000\r\naccept-ranges: bytes\r\nvia: http/1.1 traffic_server (https://www.xzylm.com [cRs f ])\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":38680,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (38514), with no line terminators","md5":"91e04b82de0687f50cd9b4a9bb4b8d41","sha1":"1cfb7e2d210865b0400c1bb3ed417175f14c954c","sha256":"7b2f923fa5e1469d98a038954706acc4fcf5b7e2ca407a14b7693f456fc5fe7d","sha512":"16b6bed4e27d8f5f5186d06e769790fe33c90e118611eb3172053dc38e4f93d7b6f8d7404d018d71050cdf355b24bf8754e0b2640c9f6c780d2144bbab46dc34","ssdeep":"384:+vMRJiXIki+/F7cj7REGCPT8hsjPqKr9+IdPWCMVsxxxtlKz9LEfP:+etku7REGCPTTpr9+gPWCMVsNH89IX","tlshash":"210319993550b07f47ab30a1722f310db2bb8a5148898440c76be1e16e36f9f52aff5c","first_seen":"2023-03-11T21:27:26Z","last_seen":"2026-05-15T20:49:14.657054Z","times_seen":245,"resource_available":true,"data":null}},"time_used":874,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":863,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img1212.syhze.com/8888/xm/5088/120.gif","fqdn":"img1212.syhze.com","domain":"syhze.com","tld":"com"},"ip":{"addr":"45.8.115.46","port":443,"asn":4785,"as":"xTom","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://szssp5.cfd/s/M%E7%94%B7.html","date":"2026-05-15T20:48:18.545Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img1212.syhze.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Apr 2026 04:12:27 GMT","end":"Tue, 21 Jul 2026 04:12:26 GMT"},"fingerprint":{"sha1":"6C:59:29:80:59:A5:04:54:9B:41:05:27:1B:7A:C6:1D:B7:8C:96:E5","sha256":"49:C0:8A:F5:70:BC:7E:7C:D3:6E:83:C5:F4:02:B0:5B:32:BB:F6:EA:DD:6C:46:3C:B4:5B:4D:19:10:58:7F:66"}}},"request":{"raw":"GET /8888/xm/5088/120.gif HTTP/1.1\r\nHost: img1212.syhze.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://szssp5.cfd/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 15 May 2026 20:48:20 GMT\r\ncontent-type: image/gif\r\ncontent-length: 443228\r\nstrict-transport-security: max-age=31536000\r\nlast-modified: Mon, 16 Sep 2024 13:02:03 GMT\r\netag: \"66e82c4b-6c35c\"\r\nexpires: Sun, 14 Jun 2026 13:16:38 GMT\r\ncache-control: max-age=2592000\r\nserver: nginx\r\nx-cache-status: HIT\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\naccess-control-expose-headers: *\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1728000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":443228,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 960 x 120","md5":"6dfeb48901b7cd79256ac55ca0e057ad","sha1":"7f5be548b85f2c58a5a75f89831a60372e1fd49e","sha256":"077c10e1c5dda6d69f6cdb1cd61bd9b88d46ab20a09a0d1cd575348b422a80f6","sha512":"eb336246e254747a2ba6cc9ce2a793aa4919f2dce04f7327f82f33fbf1b7177a0a828bb4fdb687af252189476332345f9ca15e7a1163b0c572194b8b27464c45","ssdeep":"12288:bITYwMITYwMITwzFWFbSimWFbSimWFFL851b251b251b251ba:sYwTYwTakQcQc/87272727a","tlshash":"bb9412d3e4ea2823c6a62244ca9df7d57f411156653ea3d79b6b3f100e52d22e0ced09","first_seen":"2025-11-21T00:36:15.409425Z","last_seen":"2026-05-15T22:53:29.057875Z","times_seen":9281,"resource_available":false,"data":null}},"time_used":3297,"timings":{"blocked":-1,"dns":202,"connect":266,"send":0,"wait":1005,"receive":879,"ssl":938},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.alicdn.com/imgextra/i3/2200752260526/O1CN01HVgP4p1FkxTAP2ccE_!!2200752260526.gif","fqdn":"img.alicdn.com","domain":"alicdn.com","tld":"com"},"ip":{"addr":"47.246.44.177","port":443,"asn":24429,"as":"Zhejiang Taobao Network Co.,Ltd","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://szssp5.cfd/s/M%E7%94%B7.html","date":"2026-05-15T20:48:18.733Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tbcdn.cn","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Fri, 28 Nov 2025 03:07:13 GMT","end":"Sat, 18 Jul 2026 09:41:04 GMT"},"fingerprint":{"sha1":"01:40:62:EF:8C:E5:C1:8A:19:4C:8D:B6:F5:C2:24:7F:DC:C0:9C:8A","sha256":"60:3C:41:A0:78:62:E6:5E:82:F0:FA:CF:5C:C9:D3:22:E4:64:EE:1A:EE:C7:CC:BA:DD:25:08:90:6F:CC:C4:F2"}}},"request":{"raw":"GET /imgextra/i3/2200752260526/O1CN01HVgP4p1FkxTAP2ccE_!!2200752260526.gif HTTP/1.1\r\nHost: img.alicdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://szssp5.cfd/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: Tengine\r\ncontent-type: image/gif\r\ncontent-length: 560624\r\ndate: Thu, 07 May 2026 15:10:06 GMT\r\npicasso-ret-code: SUCCESS\r\npicasso-cache-info: L3-HIT\r\nrequest-time: 0.001\r\ntraceid: 9b66334517781666062581996e\r\nx-powered-by: Picasso\r\npicasso-image-type: normal\r\npicasso-fmt: gif2webp\r\ncache-control: max-age=31536000\r\nvia: ens-cache29.l2de4[0,0,200-0,H], ens-cache7.l2de4[1,0], ens-cache9.se2[0,0,200-0,H], ens-cache4.se2[14,0]\r\naccess-control-allow-origin: *\r\nage: 711493\r\nali-swift-global-savetime: 1778166606\r\nx-cache: HIT TCP_MEM_HIT dirn:-2:-2\r\nx-swift-savetime: Thu, 07 May 2026 15:11:37 GMT\r\nx-swift-cachetime: 31535909\r\nback_uri: /imgextra/i3/2200752260526/O1CN01HVgP4p1FkxTAP2ccE_!!2200752260526.gif_.webp\r\nvary: Accept\r\ns-rt: 14\r\ntiming-allow-origin: *\r\neagleid: 2ff62c9817788780990572307e\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Tengine","description":"Tengine is a web server which is based on the Nginx HTTP server.","website":"https://tengine.taobao.org","common_platform_enumeration":"","icon":"Tengine.png","categories":["Web servers"]}],"data":{"size":560624,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 960 x 120","md5":"dc04794460f499efa46e39cb1b84e305","sha1":"85b6273fac87af08d3c03b0ac8c105b510c5a39f","sha256":"aad46a72fc8b13ad8c3f26efa2a645c5758626698481cbda1155fe0b2cab63e0","sha512":"ad39b6e6dfb5053ab64a3a2e05e713543a54a07bf195ac4bd1acc1d064923ccd8fde9a7c0e21c199e48682d93894cbddef56a7280f2e928574403452b025fe16","ssdeep":"12288:CYdDYdDYdx0Lt0Lt0L2JYJYJJO0aQq2O0aQq2O0aQq0XXXXXz:VggJFbFbFx","tlshash":"09c41292e31cc1aa01124d3d6df17e919d3f1b4aa9e6e6399708ff0b507f4282eb9354","first_seen":"2026-05-09T03:59:25.493737Z","last_seen":"2026-05-15T21:34:28.618132Z","times_seen":97,"resource_available":false,"data":null}},"time_used":562,"timings":{"blocked":337,"dns":0,"connect":0,"send":0,"wait":91,"receive":134,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"szssp5.cfd/cn/home/web/template/048wukong9_wtpl/static/css/mip.css","fqdn":"szssp5.cfd","domain":"szssp5.cfd","tld":"cfd"},"ip":{"addr":"154.26.181.150","port":443,"asn":906,"as":"DMIT","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://szssp5.cfd/s/M%E7%94%B7.html","date":"2026-05-15T20:48:17.361Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.szssp5.cfd","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Apr 2026 06:02:14 GMT","end":"Sun, 26 Jul 2026 06:02:13 GMT"},"fingerprint":{"sha1":"56:AF:D3:CA:15:EA:D2:D9:58:15:D6:47:A3:38:1F:B5:54:A7:F2:D9","sha256":"79:A4:A1:CB:D4:EA:DC:A8:10:34:6A:B9:56:FF:B0:A4:24:16:D6:C4:B9:D2:2F:0D:92:2D:BD:1B:EB:5C:01:EE"}}},"request":{"raw":"GET /cn/home/web/template/048wukong9_wtpl/static/css/mip.css HTTP/1.1\r\nHost: szssp5.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://szssp5.cfd/s/M%E7%94%B7.html\r\nCookie: PHPSESSID=nj49fn556ooooannkq320e8ooc\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: https://www.xzylm.com\r\ncontent-type: text/css\r\ncontent-length: 28622\r\nlast-modified: Sat, 19 Nov 2022 09:26:00 GMT\r\nvary: Accept-Encoding\r\ncache-control: public, max-age=2592000\r\naccept-ranges: bytes\r\nvia: http/1.1 traffic_server (https://www.xzylm.com [cRs f ])\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":28622,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (28622), with no line terminators","md5":"a42f48cd2963390339b9fc5e14893298","sha1":"c35e587b123b442c2b829d505b4d7c1193026a0f","sha256":"ac3320cd6903305d4171e856935afcaf5849f097ea9a90270cc76b9f9c1d6f1f","sha512":"85deb3788d6bf5bbf7c670731a4017f9d221cee66daa8810a312b61d024cda442c888737ebd86c81776c33f4bbf1ec89ab9988105d6356f157f6759a4bfd1099","ssdeep":"384:sa0LpG+Yb30SmCTv8+umH2O0Ay+uXvL7sRlyo1or/PmL9DwYbg:saKpG+Yr0TMZV0RBvL7kLC/uBMYbg","tlshash":"e5d2c8f69422316cd62bff16d2d40f68263ce123a653099fb365354bc7ca98c14ab18f","first_seen":"2023-04-07T06:58:47Z","last_seen":"2026-05-15T20:49:14.659001Z","times_seen":550,"resource_available":false,"data":null}},"time_used":277,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":214,"receive":63,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"szssp5.cfd/abc/fixed_ui_8eaf6e.js","fqdn":"szssp5.cfd","domain":"szssp5.cfd","tld":"cfd"},"ip":{"addr":"154.26.181.150","port":443,"asn":906,"as":"DMIT","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://szssp5.cfd/s/M%E7%94%B7.html","date":"2026-05-15T20:48:17.370Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.szssp5.cfd","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Apr 2026 06:02:14 GMT","end":"Sun, 26 Jul 2026 06:02:13 GMT"},"fingerprint":{"sha1":"56:AF:D3:CA:15:EA:D2:D9:58:15:D6:47:A3:38:1F:B5:54:A7:F2:D9","sha256":"79:A4:A1:CB:D4:EA:DC:A8:10:34:6A:B9:56:FF:B0:A4:24:16:D6:C4:B9:D2:2F:0D:92:2D:BD:1B:EB:5C:01:EE"}}},"request":{"raw":"GET /abc/fixed_ui_8eaf6e.js HTTP/1.1\r\nHost: szssp5.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://szssp5.cfd/s/M%E7%94%B7.html\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=nj49fn556ooooannkq320e8ooc\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: https://www.xzylm.com\r\ncontent-type: application/javascript; charset=utf-8\r\nvary: Accept-Encoding\r\ncache-control: public, max-age=2592000\r\ncontent-length: 5587\r\nvia: http/1.1 traffic_server (https://www.xzylm.com [cRs f ])\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":5587,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text","md5":"8ced541faa36544691ac6c3f4da51cbf","sha1":"b80c9b71e84f301e7df24cb85f5f05ab69977267","sha256":"b295eb8dd834e224e1c87061341142e9ad4f1984c83e0bf3963cb982bc294f12","sha512":"6bc61170e99fdff7fa5c2f325950b9c03913e06f614fafa7ae307bc54b1883bf4048916e9698ca5c9d939fde447d0d0344e1288d6ae70b8aa270a09e38a474e4","ssdeep":"96:4nrFra8EXqMwEpxg2/27EVfE2Tzg29CuD3JkiTeoP5VYb5G6JS/lWrN54ksKQOX:wBAw6m2/27MfRT8wCuTJx5VGGg+g8zla","tlshash":"94b1955f7ae33096892330b48fff050832316013a10ddd90bc1e92646fa9bd86672fe9","first_seen":"2026-05-15T20:49:14.659709Z","last_seen":"2026-05-15T20:49:14.659709Z","times_seen":1,"resource_available":true,"data":null}},"time_used":630,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":630,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"file.icve.com.cn/file_doc/419/664/68FA60D016942DBE087662186569B5A1.gif","fqdn":"file.icve.com.cn","domain":"icve.com.cn","tld":"com.cn"},"ip":{"addr":"87.119.9.73","port":443,"asn":141180,"as":"HUAWEI INTERNATIONAL PTE. LTD.","country":"Indonesia","country_code":"ID"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://szssp5.cfd/s/M%E7%94%B7.html","date":"2026-05-15T20:48:18.665Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.icve.com.cn","organization":""},"issuer":{"commonName":"Encryption Everywhere DV TLS CA - G2","organization":"DigiCert Inc"},"validity":{"start":"Wed, 17 Sep 2025 00:00:00 GMT","end":"Sat, 17 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"0E:BB:16:D9:59:0A:55:6E:2E:F8:D6:D3:2A:8E:50:A2:86:3A:CC:48","sha256":"F8:FC:F5:BB:BB:0E:DA:0C:68:E3:34:8D:CF:37:7D:37:2E:10:BE:51:57:ED:9B:5B:6A:B2:57:71:02:12:2A:CB"}}},"request":{"raw":"GET /file_doc/419/664/68FA60D016942DBE087662186569B5A1.gif HTTP/1.1\r\nHost: file.icve.com.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://szssp5.cfd/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 15 May 2026 20:48:21 GMT\r\ncontent-type: image/gif\r\ncontent-length: 418359\r\nserver: openresty\r\nx-oss-request-id: 69F717056EB57F3031DB259A\r\nx-oss-cdn-auth: success\r\netag: \"68FA60D016942DBE087662186569B5A1\"\r\nlast-modified: Sun, 03 May 2026 09:36:04 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 5960712500238894514\r\nx-oss-storage-class: Standard\r\ncontent-md5: aPpg0BaULb4IdmIYZWm1oQ==\r\nx-oss-server-time: 6\r\nvia: EA-IDN-jakarta-AREA1-CACHE23[3],EA-IDN-jakarta-AREA1-CACHE21[0,TCP_HIT,0],EA-SGP-GLOBAL1-CACHE24[7],EA-SGP-GLOBAL1-CACHE19[0,TCP_HIT,0],CHN-SH-GLOBAL4-CACHE8[19],CHN-SH-GLOBAL4-CACHE20[0,TCP_HIT,18],cache30.l2cn3130[23,23,206-0,M], cache3.l2cn3130[24,0], vcache21.cn3775[41,40,206-0,M], vcache23.cn3775[43,0]\r\nali-swift-global-savetime: 1777800965\r\nx-cache: MISS TCP_MISS dirn:-2:-2\r\nx-swift-savetime: Sun, 03 May 2026 09:36:05 GMT\r\nx-swift-cachetime: 15552000\r\ntiming-allow-origin: *\r\neagleid: 65e21aab17778009650264344e\r\nx-ccdn-expires: 1540847\r\nx-hcs-proxy-type: 1\r\nx-ccdn-cachettl: 2592000\r\nnginx-hit: 1\r\nage: 1071494\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":418359,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 960 x 120","md5":"68fa60d016942dbe087662186569b5a1","sha1":"b56e72a17e4fcad2d8abcb6022be008b767c7034","sha256":"306f179388787decdb17a0efad08deb192f00ae66cf239e55cc3b6a95b3742c1","sha512":"d4de8a317511065356dd5529f3a89f20291d82f930a58cdbe24e2470f952b6af5bb5e8b9f3ae088d46c89b92aee4945f0c6ba242e2708f27964240b16788c92f","ssdeep":"12288:uCauPiuuPiuua0ybufBKufBKufBXYJVlJV1H3d:uXMMJuMuMuiJbJLN","tlshash":"0094136492335fa845693830ce0eeb9b0356487f7d3b92507bd4f3272907d7a20b76a9","first_seen":"2026-05-06T22:56:29.394927Z","last_seen":"2026-05-15T21:34:28.660481Z","times_seen":106,"resource_available":false,"data":null}},"time_used":4405,"timings":{"blocked":-1,"dns":2359,"connect":193,"send":0,"wait":898,"receive":399,"ssl":548},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.fastest599.top/ky960X120.gif","fqdn":"img.fastest599.top","domain":"fastest599.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://szssp5.cfd/s/M%E7%94%B7.html","date":"2026-05-15T20:48:18.726Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /ky960X120.gif HTTP/1.1\r\nHost: img.fastest599.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://szssp5.cfd/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-15T22:20:41.080999Z","times_seen":15239822,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"file.icve.com.cn/file_doc/318/843/4F9D2FFEA40F48C967E13284C6FB31D5.gif","fqdn":"file.icve.com.cn","domain":"icve.com.cn","tld":"com.cn"},"ip":{"addr":"87.119.9.73","port":443,"asn":141180,"as":"HUAWEI INTERNATIONAL PTE. LTD.","country":"Indonesia","country_code":"ID"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://szssp5.cfd/s/M%E7%94%B7.html","date":"2026-05-15T20:48:18.611Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.icve.com.cn","organization":""},"issuer":{"commonName":"Encryption Everywhere DV TLS CA - G2","organization":"DigiCert Inc"},"validity":{"start":"Wed, 17 Sep 2025 00:00:00 GMT","end":"Sat, 17 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"0E:BB:16:D9:59:0A:55:6E:2E:F8:D6:D3:2A:8E:50:A2:86:3A:CC:48","sha256":"F8:FC:F5:BB:BB:0E:DA:0C:68:E3:34:8D:CF:37:7D:37:2E:10:BE:51:57:ED:9B:5B:6A:B2:57:71:02:12:2A:CB"}}},"request":{"raw":"GET /file_doc/318/843/4F9D2FFEA40F48C967E13284C6FB31D5.gif HTTP/1.1\r\nHost: file.icve.com.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://szssp5.cfd/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 15 May 2026 20:48:21 GMT\r\ncontent-type: image/gif\r\ncontent-length: 205364\r\nserver: openresty\r\nx-oss-request-id: 69F9613F55A1A632356A897A\r\nx-oss-cdn-auth: success\r\netag: \"4F9D2FFEA40F48C967E13284C6FB31D5\"\r\nlast-modified: Tue, 05 May 2026 03:17:18 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 5467508375798702142\r\nx-oss-storage-class: Standard\r\ncontent-md5: T50v/qQPSMln4TKExvsx1Q==\r\nx-oss-server-time: 12\r\nvia: EA-IDN-jakarta-AREA1-CACHE23[7],EA-IDN-jakarta-AREA1-CACHE12[0,TCP_HIT,0],EA-SGP-GLOBAL1-CACHE8[3],EA-SGP-GLOBAL1-CACHE10[0,TCP_HIT,2],CHN-SH-GLOBAL4-CACHE85[2],CHN-SH-GLOBAL4-CACHE117[0,TCP_HIT,0],cache65.l2cn3130[42,41,206-0,M], cache26.l2cn3130[43,0], vcache2.cn5626[56,56,206-0,M], vcache19.cn5626[58,0]\r\nali-swift-global-savetime: 1777951039\r\nx-cache: MISS TCP_MISS dirn:-2:-2\r\nx-swift-savetime: Tue, 05 May 2026 03:17:19 GMT\r\nx-swift-cachetime: 15552000\r\ntiming-allow-origin: *\r\neagleid: de49212717779510390462400e\r\nx-ccdn-expires: 1697852\r\nx-hcs-proxy-type: 1\r\nx-ccdn-cachettl: 2592000\r\nnginx-hit: 1\r\nage: 924462\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":205364,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 960 x 120","md5":"4f9d2ffea40f48c967e13284c6fb31d5","sha1":"ec30ff15480a656ee2358e7aaf82380ba374727b","sha256":"0b6d491e3c383a6ce2e193346039aa49ab68d7b9b46d85f7fdffe1d709c5214b","sha512":"c804ce5c620aaf21728c43c8dadcf79941f6aa24fea53dd903d146f6fc77895df8e9c183903800c52e084dc2ec1b597998d991b8079df44648158322cf02d406","ssdeep":"6144:Do+n1fLan1fLan1fLan1XRFWRFWRFWRFE:DoGjCjCjCXRFWRFWRFWRFE","tlshash":"f714021a605cea87931ef1033b0600da1d8a73e85dbbe8f4165471cdf9c953a3ade19e","first_seen":"2026-05-02T05:59:05.713495Z","last_seen":"2026-05-15T21:34:28.646084Z","times_seen":84,"resource_available":false,"data":null}},"time_used":3964,"timings":{"blocked":-1,"dns":2396,"connect":188,"send":0,"wait":244,"receive":593,"ssl":541},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.alicdn.com/imgextra/i2/O1CN01kPy0le1mH4wrdd17B_!!2221328234928-1-fleamarket.gif","fqdn":"img.alicdn.com","domain":"alicdn.com","tld":"com"},"ip":{"addr":"47.246.44.177","port":443,"asn":24429,"as":"Zhejiang Taobao Network Co.,Ltd","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://szssp5.cfd/s/M%E7%94%B7.html","date":"2026-05-15T20:48:18.730Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tbcdn.cn","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Fri, 28 Nov 2025 03:07:13 GMT","end":"Sat, 18 Jul 2026 09:41:04 GMT"},"fingerprint":{"sha1":"01:40:62:EF:8C:E5:C1:8A:19:4C:8D:B6:F5:C2:24:7F:DC:C0:9C:8A","sha256":"60:3C:41:A0:78:62:E6:5E:82:F0:FA:CF:5C:C9:D3:22:E4:64:EE:1A:EE:C7:CC:BA:DD:25:08:90:6F:CC:C4:F2"}}},"request":{"raw":"GET /imgextra/i2/O1CN01kPy0le1mH4wrdd17B_!!2221328234928-1-fleamarket.gif HTTP/1.1\r\nHost: img.alicdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://szssp5.cfd/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: Tengine\r\ncontent-type: image/gif\r\ncontent-length: 494827\r\ndate: Sat, 25 Apr 2026 12:48:06 GMT\r\npicasso-ret-code: SUCCESS\r\npicasso-cache-info: L3-HIT\r\nrequest-time: 0.002\r\ntraceid: 2ff632a817771212864386534e\r\nx-powered-by: Picasso\r\npicasso-image-type: normal\r\npicasso-fmt: gif2webp\r\ncache-control: max-age=31536000\r\nvia: ens-cache6.l2de4[0,0,200-0,H], ens-cache27.l2de4[1,0], ens-cache8.se2[0,0,200-0,H], ens-cache4.se2[5,0]\r\naccess-control-allow-origin: *\r\nage: 1756813\r\nali-swift-global-savetime: 1777121286\r\nx-cache: HIT TCP_MEM_HIT dirn:-2:-2\r\nx-swift-savetime: Sat, 25 Apr 2026 12:54:40 GMT\r\nx-swift-cachetime: 31535606\r\nback_uri: /imgextra/i2/O1CN01kPy0le1mH4wrdd17B_!!2221328234928-1-fleamarket.gif_.webp\r\nvary: Accept\r\ns-rt: 5\r\ntiming-allow-origin: *\r\neagleid: 2ff62c9817788780990572303e\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Tengine","description":"Tengine is a web server which is based on the Nginx HTTP server.","website":"https://tengine.taobao.org","common_platform_enumeration":"","icon":"Tengine.png","categories":["Web servers"]}],"data":{"size":494827,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 960 x 120","md5":"45806dec686318980d36e9704bdfda3f","sha1":"7ed038b86a2a85dd2361dc0ad67fec6fcee29bb8","sha256":"def6e19d6adc0d1dcd41d757415f970dcb91c5432677eddbe7a9542214858730","sha512":"a8dddc397c4eff9270987108d6eaed64964d02f6ae47fa2ca351616ee8bd4a6fcb30be39641a7df291098e4805ab005be9f15af46f5554297dbe430929c799ed","ssdeep":"12288:uAtRwZlD+bb6Vjb5V0/8Tu9rE6UV5N50SAKoRbkcmp3u+/Q:uAH6CF/Z9rE6Ubn0SXoRbpE3u","tlshash":"84b4230dd5a38d74f23bfc353c16d7ee451b22380da825433e2b7ab764a2a12c1196e9","first_seen":"2026-04-25T13:45:42.346399Z","last_seen":"2026-05-15T21:34:28.675364Z","times_seen":810,"resource_available":false,"data":null}},"time_used":406,"timings":{"blocked":341,"dns":0,"connect":0,"send":0,"wait":42,"receive":23,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.mdynieu.com/images/69146317ec12e29e413cb55f.gif","fqdn":"www.mdynieu.com","domain":"mdynieu.com","tld":"com"},"ip":{"addr":"161.129.35.198","port":443,"asn":40065,"as":"CNSERVERS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://szssp5.cfd/s/M%E7%94%B7.html","date":"2026-05-15T20:48:18.735Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mdynieu.com","organization":""},"issuer":{"commonName":"ZeroSSL ECC Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Sun, 08 Mar 2026 00:00:00 GMT","end":"Sat, 06 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"6A:63:55:C1:71:21:73:A8:82:6B:B9:0F:52:C8:F8:50:C1:B3:84:C1","sha256":"BC:5E:FC:CA:C3:F8:96:5E:BB:35:AD:57:17:71:B6:AA:83:64:66:51:C7:21:E1:D6:4C:C0:F0:6B:25:65:4D:BB"}}},"request":{"raw":"GET /images/69146317ec12e29e413cb55f.gif HTTP/1.1\r\nHost: www.mdynieu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://szssp5.cfd/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\ncontent-length: 0\r\nreferrer-policy: no-referrer\r\ncache-control: max-age=600\r\nlocation: https://img.meituan.net/portalweb/27a1e3a72fece63c3ff55f2c96c993a5588276.gif\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":null,"data":{"size":406836,"size_decoded":0,"mime_type":"image/webp","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-15T22:20:41.080999Z","times_seen":15239822,"resource_available":true,"data":null}},"time_used":3464,"timings":{"blocked":-1,"dns":2789,"connect":207,"send":0,"wait":207,"receive":0,"ssl":260},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xy724-1.anvnjmc.com/kg/960x120-2.gif","fqdn":"xy724-1.anvnjmc.com","domain":"anvnjmc.com","tld":"com"},"ip":{"addr":"58.218.215.69","port":443,"asn":4134,"as":"Chinanet","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://szssp5.cfd/s/M%E7%94%B7.html","date":"2026-05-15T20:48:18.763Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xy724-1.anvnjmc.com","organization":""},"issuer":{"commonName":"TrustAsia DV TLS RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Sun, 22 Mar 2026 00:00:00 GMT","end":"Fri, 19 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"05:F9:C2:E8:8E:46:9A:53:42:A4:EF:DE:B4:DD:C7:F2:A4:1B:A8:60","sha256":"F9:02:71:4E:DA:4E:9B:FE:13:3F:35:E8:9C:D3:73:4F:26:88:90:C2:1C:68:98:25:7A:48:5B:43:E0:93:70:FA"}}},"request":{"raw":"GET /kg/960x120-2.gif HTTP/1.1\r\nHost: xy724-1.anvnjmc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://szssp5.cfd/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: Tengine\r\ncontent-type: image/gif\r\ncontent-length: 336485\r\nstrict-transport-security: max-age=5184000\r\ndate: Wed, 13 May 2026 11:20:02 GMT\r\nexpires: Fri, 12 Jun 2026 11:20:02 GMT\r\ncache-control: max-age=2592000\r\naccept-ranges: bytes\r\nvia: ens-cache24.l2cn7859[0,0,304-0,H], ens-cache36.l2cn7859[0,0], kunlun1.cn192[0,0,200-0,H], kunlun2.cn192[1,0]\r\nlast-modified: Wed, 15 Apr 2026 12:37:49 GMT\r\nvary: Accept-Encoding\r\netag: \"69df869d-52265\"\r\nage: 206900\r\nali-swift-global-savetime: 1778671202\r\nx-cache: HIT TCP_MEM_HIT dirn:-2:-2\r\nx-swift-savetime: Fri, 15 May 2026 13:34:49 GMT\r\nx-swift-cachetime: 2411113\r\ntiming-allow-origin: *\r\neagleid: 3adad01617788781029928837e\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Tengine","description":"Tengine is a web server which is based on the Nginx HTTP server.","website":"https://tengine.taobao.org","common_platform_enumeration":"","icon":"Tengine.png","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":336485,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 960 x 120","md5":"e55caed931672fd8393cbfcce74e42ba","sha1":"90d723ecb4f1e36ac8b910179c640d11c4de02e6","sha256":"377a2f9c971d107740db20fc843024cf8961f0e9942b62057cca2719ee9e05e1","sha512":"b7e5a06478658ac7067c3ff5194e929ca53e2293811dfee9f52c0f6dc1dd5e9b9eed528fdf34f08ac80947c532df0b4e77f2dfd667a2b13df89863e97882837b","ssdeep":"6144:PhQnIgWfUs7L8cWpxlit5GQJjOVmaVMtZ3dOVLJHk1+j5lBp:PwIZckgbWJjOhMrkLVO+1R","tlshash":"5b64235a1408900167afbb3e0190dc953cb4c4f13af5a73f761a6158d7d21ae8eefb19","first_seen":"2026-04-16T19:31:21.190009Z","last_seen":"2026-05-15T21:34:28.622281Z","times_seen":919,"resource_available":false,"data":null}},"time_used":5269,"timings":{"blocked":-1,"dns":3729,"connect":241,"send":0,"wait":245,"receive":778,"ssl":276},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.alicdn.com/imgextra/i3/2215209493335/O1CN010JTbhN1aVU01WrBDj_!!2215209493335-1-chatting.gif","fqdn":"img.alicdn.com","domain":"alicdn.com","tld":"com"},"ip":{"addr":"47.246.44.177","port":443,"asn":24429,"as":"Zhejiang Taobao Network Co.,Ltd","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://szssp5.cfd/s/M%E7%94%B7.html","date":"2026-05-15T20:48:21.372Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tbcdn.cn","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Fri, 28 Nov 2025 03:07:13 GMT","end":"Sat, 18 Jul 2026 09:41:04 GMT"},"fingerprint":{"sha1":"01:40:62:EF:8C:E5:C1:8A:19:4C:8D:B6:F5:C2:24:7F:DC:C0:9C:8A","sha256":"60:3C:41:A0:78:62:E6:5E:82:F0:FA:CF:5C:C9:D3:22:E4:64:EE:1A:EE:C7:CC:BA:DD:25:08:90:6F:CC:C4:F2"}}},"request":{"raw":"GET /imgextra/i3/2215209493335/O1CN010JTbhN1aVU01WrBDj_!!2215209493335-1-chatting.gif HTTP/1.1\r\nHost: img.alicdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://szssp5.cfd/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: Tengine\r\ncontent-type: image/gif\r\ncontent-length: 643569\r\ndate: Sun, 25 Jan 2026 16:50:09 GMT\r\npicasso-ret-code: SUCCESS\r\npicasso-cache-info: L3-HIT\r\nrequest-time: 0.001\r\ntraceid: 2ff6309f17693598091573899e\r\nx-powered-by: Picasso\r\npicasso-image-type: normal\r\npicasso-fmt: gif2webp\r\ncache-control: max-age=31536000\r\nvia: ens-cache39.l2de4[0,1,200-0,H], ens-cache28.l2de4[2,0], ens-cache11.se2[0,0,200-0,H], ens-cache4.se2[1,0]\r\naccess-control-allow-origin: *\r\nage: 9518292\r\nali-swift-global-savetime: 1769359809\r\nx-cache: HIT TCP_MEM_HIT dirn:-2:-2\r\nx-swift-savetime: Sun, 25 Jan 2026 17:07:51 GMT\r\nx-swift-cachetime: 31534938\r\nback_uri: /imgextra/i3/2215209493335/O1CN010JTbhN1aVU01WrBDj_!!2215209493335-1-chatting.gif_.webp\r\nvary: Accept\r\ns-rt: 1\r\ntiming-allow-origin: *\r\neagleid: 2ff62c9817788781013573038e\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Tengine","description":"Tengine is a web server which is based on the Nginx HTTP server.","website":"https://tengine.taobao.org","common_platform_enumeration":"","icon":"Tengine.png","categories":["Web servers"]}],"data":{"size":643569,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 960 x 120","md5":"f5919b3ac13cce9d56f7966003e826d8","sha1":"75c040dace5ddc741ddcbda8e0bc74fcbff417bc","sha256":"739605b51e61972ae4e03385a848c5cc0561d639eadb33e424567f7f3b9d8f88","sha512":"5864eaf234c1b5816f6faeb6ef6f499154110340a9c412a742b35f4304a7cdba4cb88efbe61887c10593e96737a895d6cd466cd8fe990edce43338535123cd17","ssdeep":"12288:E2PPPsqKfJQrQrQrQFUpPnn9uVK49uVK49uVK49uVKZRV7YC:E2PPPJQc9KK49KK49KK49KKZX7H","tlshash":"c2d41338875b6ab15d82fe6c4ce1a0d980f951df53b74669e7c09c30936a31fb382b64","first_seen":"2024-10-04T10:32:36.972611Z","last_seen":"2026-05-15T22:53:29.007522Z","times_seen":9280,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":9,"receive":16,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dq38rjje7qjm3.cloudfront.net/pg/960X120.gif","fqdn":"dq38rjje7qjm3.cloudfront.net","domain":"dq38rjje7qjm3.cloudfront.net","tld":"cloudfront.net"},"ip":{"addr":"54.230.241.109","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://szssp5.cfd/s/M%E7%94%B7.html","date":"2026-05-15T20:48:23.319Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cloudfront.net","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Tue, 24 Feb 2026 00:00:00 GMT","end":"Wed, 09 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C9:18:5B:88:98:FA:65:52:EE:3F:8C:AC:85:C1:E4:56:E1:0D:39:DA","sha256":"C6:C6:D5:C7:F7:92:11:BB:D5:98:B6:EB:43:02:E5:65:7B:E8:32:E7:75:CE:E0:A8:29:B0:DE:A3:5E:AF:4E:02"}}},"request":{"raw":"GET /pg/960X120.gif HTTP/1.1\r\nHost: dq38rjje7qjm3.cloudfront.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://szssp5.cfd/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/gif\r\ncontent-length: 426387\r\ndate: Thu, 14 May 2026 04:57:17 GMT\r\nlast-modified: Wed, 14 May 2025 14:11:08 GMT\r\netag: \"4b9d08738f9302690a7b927c2f3207e1\"\r\nx-amz-server-side-encryption: AES256\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 0c35b89cb607eddb1b7cc5d6ada865d6.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P1\r\nx-amz-cf-id: O4q9Hhr201E33f_ORIiKv6KSi5-ST-Qx0BX7Q4A5J9RXVf6tpjdntw==\r\nage: 143466\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":426387,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 960 x 120","md5":"4b9d08738f9302690a7b927c2f3207e1","sha1":"3e313c7e90925b94f946b0ea742cde98b85a12a9","sha256":"e904079f102da7afc351280a6237ca68cb1aa54f9c536ee4e707e82fdb8c8bab","sha512":"ec1af7a43016c96251aa57e6a3b8ca489fc424205548f909bb099f8610f3692c8e0eb2168488e292f56be6c7c1db688c584f63acba3c03dc87e3ebafbffec277","ssdeep":"6144:CaKtaKtavuZSA0A0f4v98WAnzPlPrvhYCSCEC+/KCEC+/KCV:CaKtaKtavZA0A0f4v9gzQC+/KC+/KCV","tlshash":"6394223b093d630460ec83a189e0ba0f5c217919ade1c4376b7dad1d54f587a7dea8b3","first_seen":"2024-06-23T17:36:04Z","last_seen":"2026-05-15T22:41:12.005796Z","times_seen":2169,"resource_available":false,"data":null}},"time_used":1412,"timings":{"blocked":35,"dns":1322,"connect":1,"send":0,"wait":8,"receive":13,"ssl":31},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dq38rjje7qjm3.cloudfront.net/dfyl/960x120.gif","fqdn":"dq38rjje7qjm3.cloudfront.net","domain":"dq38rjje7qjm3.cloudfront.net","tld":"cloudfront.net"},"ip":{"addr":"54.230.241.109","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://szssp5.cfd/s/M%E7%94%B7.html","date":"2026-05-15T20:48:23.323Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cloudfront.net","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Tue, 24 Feb 2026 00:00:00 GMT","end":"Wed, 09 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C9:18:5B:88:98:FA:65:52:EE:3F:8C:AC:85:C1:E4:56:E1:0D:39:DA","sha256":"C6:C6:D5:C7:F7:92:11:BB:D5:98:B6:EB:43:02:E5:65:7B:E8:32:E7:75:CE:E0:A8:29:B0:DE:A3:5E:AF:4E:02"}}},"request":{"raw":"GET /dfyl/960x120.gif HTTP/1.1\r\nHost: dq38rjje7qjm3.cloudfront.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://szssp5.cfd/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/gif\r\ncontent-length: 73637\r\ndate: Sun, 03 May 2026 17:05:31 GMT\r\nlast-modified: Sun, 15 Mar 2026 12:16:11 GMT\r\netag: \"a4af497d3fa9565b47fbbd904240a148\"\r\nx-amz-server-side-encryption: AES256\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 0c35b89cb607eddb1b7cc5d6ada865d6.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P1\r\nx-amz-cf-id: w9qxrKVNqA7nY4_Dp-2WMNBcY3-IIft-4D428OHx__5HcUeWpRsPoA==\r\nage: 1050173\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":73637,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 960 x 120","md5":"a4af497d3fa9565b47fbbd904240a148","sha1":"bba8bf3108373a36b0efffed868a18ceda8d32f1","sha256":"3d7d2941602538e871a8be87cd8ac3a2b456500a90a4c93ad0be91d2e29e3c19","sha512":"ccda254eb262f3f78ee317352db18d0da0b6f326cdccc8c945900a6c0b00db1a2efc46d50ca8b37d87d2be284b2a4fa99c53f1dc8c957305fad3a18aed53ec70","ssdeep":"1536:b+QGvsTkOstfo3spcuoe62zkLTxJfn/uNB42pW1y2zXU7WrANse:EUQPtfoso7Yk/q/my2zXU7W0se","tlshash":"c773123fa11e694ae3c07d947ed2e9b06d9834c49c6893f461d40a1e334cb5a6d0a2ff","first_seen":"2026-03-15T12:44:20.826616Z","last_seen":"2026-05-15T22:41:11.869176Z","times_seen":2088,"resource_available":false,"data":null}},"time_used":115,"timings":{"blocked":76,"dns":0,"connect":0,"send":0,"wait":2,"receive":3,"ssl":34},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img1.souavzyw.vip/upload/vod/20240925-1/90015c7d245428fc86941f6d2a67a814.jpg","fqdn":"img1.souavzyw.vip","domain":"souavzyw.vip","tld":"vip"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://szssp5.cfd/s/M%E7%94%B7.html","date":"2026-05-15T20:48:18.380Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /upload/vod/20240925-1/90015c7d245428fc86941f6d2a67a814.jpg HTTP/1.1\r\nHost: img1.souavzyw.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://szssp5.cfd/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-15T22:20:41.080999Z","times_seen":15239822,"resource_available":true,"data":null}},"time_used":7965,"timings":{"blocked":7965,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pic.sex8sex844.com/20260328/iPuBr2c4/1.jpg","fqdn":"pic.sex8sex844.com","domain":"sex8sex844.com","tld":"com"},"ip":{"addr":"172.67.224.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://szssp5.cfd/s/M%E7%94%B7.html","date":"2026-05-15T20:48:18.405Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sex8sex844.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 10 May 2026 20:05:05 GMT","end":"Sat, 08 Aug 2026 21:03:26 GMT"},"fingerprint":{"sha1":"2A:90:9C:6F:6F:79:79:74:A1:EB:C9:4B:D5:69:3B:DE:21:72:5D:E9","sha256":"87:7A:33:B6:90:00:97:DB:43:1D:23:93:1A:A7:8B:2D:6B:1C:CE:49:72:D7:EF:17:52:A4:EA:0D:50:74:B3:2C"}}},"request":{"raw":"GET /20260328/iPuBr2c4/1.jpg HTTP/1.1\r\nHost: pic.sex8sex844.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://szssp5.cfd/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ndate: Fri, 15 May 2026 20:48:18 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DmVI4U6MgAMeaR9EdkpP2qiFnS0JNIIB5tnJrpnJ7FaWYckAvcGFMX9wZxFmLbBDbOUMD0W9RdIzt3m4MUP7MaG61rHqf2ClXOx%2FwLjcau9uQqc%2BJiRfxLSUrUVQmoDwfqY0WEg%3D\"}]}\r\ncontent-encoding: br\r\ncf-ray: 9fc500b36f3932fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-15T22:20:41.080999Z","times_seen":15239822,"resource_available":true,"data":null}},"time_used":552,"timings":{"blocked":28,"dns":1,"connect":1,"send":0,"wait":499,"receive":0,"ssl":23},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.alicdn.com/imgextra/i4/4183327079/O1CN015le7R022AEsJ5jGju_!!4183327079.gif","fqdn":"img.alicdn.com","domain":"alicdn.com","tld":"com"},"ip":{"addr":"47.246.44.177","port":443,"asn":24429,"as":"Zhejiang Taobao Network Co.,Ltd","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://szssp5.cfd/s/M%E7%94%B7.html","date":"2026-05-15T20:48:18.551Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tbcdn.cn","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Fri, 28 Nov 2025 03:07:13 GMT","end":"Sat, 18 Jul 2026 09:41:04 GMT"},"fingerprint":{"sha1":"01:40:62:EF:8C:E5:C1:8A:19:4C:8D:B6:F5:C2:24:7F:DC:C0:9C:8A","sha256":"60:3C:41:A0:78:62:E6:5E:82:F0:FA:CF:5C:C9:D3:22:E4:64:EE:1A:EE:C7:CC:BA:DD:25:08:90:6F:CC:C4:F2"}}},"request":{"raw":"GET /imgextra/i4/4183327079/O1CN015le7R022AEsJ5jGju_!!4183327079.gif HTTP/1.1\r\nHost: img.alicdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://szssp5.cfd/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: Tengine\r\ncontent-type: image/gif\r\ncontent-length: 442163\r\ndate: Tue, 03 Mar 2026 08:23:28 GMT\r\npicasso-ret-code: SUCCESS\r\npicasso-cache-info: L3-HIT\r\nrequest-time: 0.002\r\ntraceid: 9b66334217725262078834087e\r\nx-powered-by: Picasso\r\npicasso-image-type: normal\r\npicasso-fmt: gif2webp\r\ncache-control: max-age=31536000\r\nvia: ens-cache1.l2de4[0,0,200-0,H], ens-cache4.l2de4[3,0], ens-cache12.se2[0,0,200-0,H], ens-cache4.se2[8,0]\r\naccess-control-allow-origin: *\r\nage: 6351891\r\nali-swift-global-savetime: 1772526208\r\nx-cache: HIT TCP_MEM_HIT dirn:-2:-2\r\nx-swift-savetime: Mon, 06 Apr 2026 05:31:30 GMT\r\nx-swift-cachetime: 28608718\r\nback_uri: /imgextra/i4/4183327079/O1CN015le7R022AEsJ5jGju_!!4183327079.gif_.webp\r\nvary: Accept\r\ns-rt: 8\r\ntiming-allow-origin: *\r\neagleid: 2ff62c9817788780990542297e\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Tengine","description":"Tengine is a web server which is based on the Nginx HTTP server.","website":"https://tengine.taobao.org","common_platform_enumeration":"","icon":"Tengine.png","categories":["Web servers"]}],"data":{"size":442163,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 960 x 120","md5":"a959dff57b5058e20b52d9eee9856451","sha1":"f429b441579c13a080de49602a836dc091809ed6","sha256":"b55482457dcd5b1a75ccd8af9902c9d9ccf11451e79300f43b4bef9a94260474","sha512":"cb38c08e2b12d580f0a3425f51b2d1af7914d8914881fd188915ad897d7d150000c7c807edf0ee7c4e003333ae6491a1693f369c2932d220549d896a00154db5","ssdeep":"12288:MbOF/O5B0GXiLvxLv9Qu2R3J0rKuDmQvmQP8AtpW6:sb0xdQJ0zdv4sW6","tlshash":"6c9423bb6dfb9054a8130fa829e7061ccb80de8446ec2a79a9571ff7189872cbd1c855","first_seen":"2026-03-07T00:44:39.681251Z","last_seen":"2026-05-15T22:41:11.886203Z","times_seen":3049,"resource_available":false,"data":null}},"time_used":623,"timings":{"blocked":-1,"dns":487,"connect":7,"send":0,"wait":20,"receive":67,"ssl":42},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"2026tu.myxuanxuan.com/mt2026-8qssd0z7qb","fqdn":"2026tu.myxuanxuan.com","domain":"myxuanxuan.com","tld":"com"},"ip":{"addr":"43.175.65.14","port":443,"asn":139341,"as":"ACE","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://szssp5.cfd/s/M%E7%94%B7.html","date":"2026-05-15T20:48:18.604Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"2026tu.myxuanxuan.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Sun, 18 Jan 2026 00:00:00 GMT","end":"Mon, 18 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"89:A5:51:BC:5F:09:A7:47:86:8A:45:EC:EE:78:46:C6:17:A3:08:CD","sha256":"02:BE:A0:16:7A:20:13:EB:60:A2:1D:D0:AF:87:4C:A4:41:0C:07:C7:1A:35:F8:CA:F3:EC:E7:F0:21:5F:15:C7"}}},"request":{"raw":"GET /mt2026-8qssd0z7qb HTTP/1.1\r\nHost: 2026tu.myxuanxuan.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://szssp5.cfd/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\nserver: nginx\r\ndate: Fri, 15 May 2026 20:46:58 GMT\r\ncontent-type: text/html\r\nlocation: https://img.alicdn.com/imgextra/i3/2215209493335/O1CN010JTbhN1aVU01WrBDj_!!2215209493335-1-chatting.gif\r\ncontent-length: 138\r\nx-nws-log-uuid: 15910062596323075006\r\nx-cache-lookup: Cache Miss\r\nstrict-transport-security: max-age=1;\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":643569,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-15T22:20:41.080999Z","times_seen":15239822,"resource_available":true,"data":null}},"time_used":2791,"timings":{"blocked":-1,"dns":1475,"connect":19,"send":0,"wait":256,"receive":0,"ssl":1040},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"shu2.vsamhos.com/jq/960-120.gif","fqdn":"shu2.vsamhos.com","domain":"vsamhos.com","tld":"com"},"ip":{"addr":"157.185.128.120","port":443,"asn":54994,"as":"ML-1432-54994","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://szssp5.cfd/s/M%E7%94%B7.html","date":"2026-05-15T20:48:18.662Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"shu2.vsamhos.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 20 Mar 2026 18:27:58 GMT","end":"Thu, 18 Jun 2026 18:27:57 GMT"},"fingerprint":{"sha1":"0D:C1:88:E7:08:25:2F:B8:50:51:E8:62:5B:E8:1E:1A:96:A5:F8:94","sha256":"AB:34:D3:DB:7B:C4:A7:74:05:E3:18:1B:8E:F7:14:AA:90:50:BC:A2:ED:2D:8E:34:F1:BD:D2:B0:34:D8:79:54"}}},"request":{"raw":"GET /jq/960-120.gif HTTP/1.1\r\nHost: shu2.vsamhos.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://szssp5.cfd/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 15 May 2026 20:48:21 GMT\r\ncontent-type: image/gif\r\ncontent-length: 551052\r\nserver: nginx\r\nlast-modified: Sun, 10 May 2026 10:03:15 GMT\r\nvary: Accept-Encoding\r\netag: \"6a0057e3-8688c\"\r\ncache-control: max-age=2592000\r\naccept-ranges: bytes\r\nvia: 1.1 PS-MIA-04LWG213:9 (W), 1.1 ld82:7 (W), 0.0 PS-CDG-04gzn111:12 (W)\r\nx-ws-request-id: 6a078695_PS-CDG-04gzn111_63260-43746\r\nx-px: ht PS-CDG-04gzn111none\r\nage: 439601\r\nexpires: Tue, 09 Jun 2026 18:41:40 GMT\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":551052,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 960 x 120","md5":"c80b4c1b5a6db5eae2b810acd7134bd4","sha1":"991054065bef44cbd997b2898e19263408ba8c09","sha256":"060976fe83d079fd4c7016be02a10a5d8a8afc309f1bcc4e03799aa512c71f9a","sha512":"2eef7c29ac971ee0e75e8853a47ab846f5f241725fb500921e64cc4b1756da31944819cf5d83a58702836711e46396f71482d3336811c77a18493e3311914732","ssdeep":"12288:rBhCbT31dpHjQxyrlxbVJfGMfBPcXrdPHR8A+Qe12bOGUgb:T2dZ6yrllXBPkRBl42bOi","tlshash":"9dc4236789c6cd62dc34ed382ec6c830954cec2f64a5776234ba5c93320955ef0ee1e9","first_seen":"2026-05-11T02:16:39.569278Z","last_seen":"2026-05-15T21:34:28.666488Z","times_seen":64,"resource_available":false,"data":null}},"time_used":2687,"timings":{"blocked":-1,"dns":1770,"connect":27,"send":0,"wait":70,"receive":238,"ssl":582},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img1212.syhze.com/8888/mbh/960x120.gif","fqdn":"img1212.syhze.com","domain":"syhze.com","tld":"com"},"ip":{"addr":"45.8.115.46","port":443,"asn":4785,"as":"xTom","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://szssp5.cfd/s/M%E7%94%B7.html","date":"2026-05-15T20:48:18.704Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img1212.syhze.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Apr 2026 04:12:27 GMT","end":"Tue, 21 Jul 2026 04:12:26 GMT"},"fingerprint":{"sha1":"6C:59:29:80:59:A5:04:54:9B:41:05:27:1B:7A:C6:1D:B7:8C:96:E5","sha256":"49:C0:8A:F5:70:BC:7E:7C:D3:6E:83:C5:F4:02:B0:5B:32:BB:F6:EA:DD:6C:46:3C:B4:5B:4D:19:10:58:7F:66"}}},"request":{"raw":"GET /8888/mbh/960x120.gif HTTP/1.1\r\nHost: img1212.syhze.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://szssp5.cfd/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 15 May 2026 20:48:20 GMT\r\ncontent-type: image/gif\r\ncontent-length: 496600\r\nstrict-transport-security: max-age=31536000\r\nlast-modified: Fri, 30 Jan 2026 13:22:20 GMT\r\netag: \"697cb08c-793d8\"\r\nexpires: Sun, 14 Jun 2026 13:16:35 GMT\r\ncache-control: max-age=2592000\r\nserver: nginx\r\nx-cache-status: HIT\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\naccess-control-expose-headers: *\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1728000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":496600,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 960 x 120","md5":"98f1aab916043713d1744086a4aac70d","sha1":"abbc50f57afaea6090ffec73c53bc824926db831","sha256":"4bcfe3c6ff3dcd160bd51a92164046ed60b025895dc6affc06db0d6d88b77259","sha512":"50aded0afad0a2f06bc9b5dd4ba767e64e5cf59b627ee62ce66bf3a769b0fddfa7533cb591e0ad6dfd3be42afa77d37181ea9fd7dac487946081ee0f24e837f0","ssdeep":"6144:9G4QxSTTMRTTMRTTMRfE3O4+g2CjZnFaYG/eFVVL:E0T4RT4RT4RyO4fFZFaL/Q","tlshash":"c3b423ec487fcd5dc8b22c2c3143023349a2b17879df88626793b9d7e5d6b196a82d35","first_seen":"2026-01-31T02:19:27.411392Z","last_seen":"2026-05-15T22:41:11.991021Z","times_seen":4066,"resource_available":false,"data":null}},"time_used":3160,"timings":{"blocked":-1,"dns":115,"connect":270,"send":0,"wait":270,"receive":1570,"ssl":935},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img1.ah7907.com/bt960120a.gif","fqdn":"img1.ah7907.com","domain":"ah7907.com","tld":"com"},"ip":{"addr":"47.76.249.42","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://szssp5.cfd/s/M%E7%94%B7.html","date":"2026-05-15T20:48:18.724Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img1.ah7907.com","organization":""},"issuer":{"commonName":"Certum DV TLS G2 R39 CA","organization":"Asseco Data Systems S.A."},"validity":{"start":"Thu, 06 Nov 2025 07:27:15 GMT","end":"Sun, 06 Dec 2026 07:27:14 GMT"},"fingerprint":{"sha1":"EE:18:15:48:CE:4E:22:9F:18:59:AB:6E:5E:C0:0D:4E:AF:C2:86:22","sha256":"65:F5:69:07:04:80:B4:E3:E7:D0:C5:50:2E:02:11:1C:02:89:6E:83:40:00:DD:00:37:08:E9:9C:1C:A3:4D:59"}}},"request":{"raw":"GET /bt960120a.gif HTTP/1.1\r\nHost: img1.ah7907.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://szssp5.cfd/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 Moved Permanently\r\nserver: NgxFence\r\ndate: Fri, 15 May 2026 20:48:21 GMT\r\ncontent-type: text/html; charset=utf-8\r\ncontent-length: 0\r\nlocation: https://img.alicdn.com/imgextra/i4/2207246784654/O1CN014PyHeq1kFaOP6Xhwn_!!2207246784654.gif\r\nx-cache-status: HIT\r\nstrict-transport-security: max-age=31536000; includeSubdomains; preload\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":292628,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-15T22:20:41.080999Z","times_seen":15239822,"resource_available":true,"data":null}},"time_used":3449,"timings":{"blocked":-1,"dns":1150,"connect":280,"send":0,"wait":415,"receive":0,"ssl":1603},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pic.sex8sex844.com/20260328/LHmvhk9Q/1.jpg","fqdn":"pic.sex8sex844.com","domain":"sex8sex844.com","tld":"com"},"ip":{"addr":"172.67.224.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://szssp5.cfd/s/M%E7%94%B7.html","date":"2026-05-15T20:48:18.402Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sex8sex844.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 10 May 2026 20:05:05 GMT","end":"Sat, 08 Aug 2026 21:03:26 GMT"},"fingerprint":{"sha1":"2A:90:9C:6F:6F:79:79:74:A1:EB:C9:4B:D5:69:3B:DE:21:72:5D:E9","sha256":"87:7A:33:B6:90:00:97:DB:43:1D:23:93:1A:A7:8B:2D:6B:1C:CE:49:72:D7:EF:17:52:A4:EA:0D:50:74:B3:2C"}}},"request":{"raw":"GET /20260328/LHmvhk9Q/1.jpg HTTP/1.1\r\nHost: pic.sex8sex844.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://szssp5.cfd/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ndate: Fri, 15 May 2026 20:48:18 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2B3szo%2F9Br1v%2BNAld2Dt8HRtnZqu7JeZYyXTbl1IYmrlXsHXzVBr4BhQD67SrvY7rJKaktHp%2FAvEIVa%2BOCu%2BSOCu8BgMfpLCVGCR32hku2gFcwVIsHgtvBRYbjkrpNYct%2F2yHzik%3D\"}]}\r\ncontent-encoding: br\r\ncf-ray: 9fc500b36f2632fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-15T22:20:41.080999Z","times_seen":15239822,"resource_available":true,"data":null}},"time_used":530,"timings":{"blocked":24,"dns":1,"connect":2,"send":0,"wait":477,"receive":0,"ssl":25},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yao.pic.sfuati.com/v2/950-110x.gif","fqdn":"yao.pic.sfuati.com","domain":"sfuati.com","tld":"com"},"ip":{"addr":"138.113.181.188","port":443,"asn":54994,"as":"ML-1432-54994","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://szssp5.cfd/s/M%E7%94%B7.html","date":"2026-05-15T20:48:18.592Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.pic.sfuati.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 04 May 2026 08:38:05 GMT","end":"Sun, 02 Aug 2026 08:38:04 GMT"},"fingerprint":{"sha1":"2F:01:70:05:31:7E:27:22:3C:97:CE:D8:F0:42:46:64:87:3F:49:E4","sha256":"0B:BF:34:84:6E:7C:C3:94:76:D0:3E:3A:0A:EF:BA:8B:8F:33:D3:4B:3F:51:82:CB:14:3F:A3:F6:B6:1E:94:D9"}}},"request":{"raw":"GET /v2/950-110x.gif HTTP/1.1\r\nHost: yao.pic.sfuati.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://szssp5.cfd/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 15 May 2026 20:48:19 GMT\r\nContent-Type: image/gif\r\nContent-Length: 308222\r\nConnection: keep-alive\r\nExpires: Sun, 14 Jun 2026 14:23:55 GMT\r\nServer: PWS/8.3.1.0.8\r\nLast-Modified: Fri, 15 May 2026 13:00:21 GMT\r\nETag: \"6a0718e5-4b3fe\"\r\nCache-Control: max-age=2592000\r\nAccept-Ranges: bytes\r\nVia: 1.1 hexi50:9 (W), 1.1 PS-ARN-01C8L93:14 (W)\r\nX-Px: ht PS-ARN-01C8L93ARN\r\nAge: 23064\r\nx-ws-request-id: 6a078693_PS-ARN-01C8L93_45747-24958\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":308222,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 950 x 110","md5":"31007a69c1119b7094bee2da0ba1882f","sha1":"c9dd433bf1681bc9eedace28f9ea148dd53cf4c7","sha256":"317834b3fc4a68c83deedcc5a8822889fcb364b9c2e70ee12018d2f11143140e","sha512":"749791ae6a646c278c4e6b5649435a1681b10d7bbba6cb12691f49c171b12861f493f1e7ff66ce0713cc82b56719a1074a49d32e9045e62a197b3a88b0017ee9","ssdeep":"6144:s5QXp8eMits3L12EyyC5/PGjAtB6IGVlrC8/1:UUhMits3L122CRPBtB6IGVle8d","tlshash":"d26423d1dd8b1ca01024bb313da8852698f565c0f977da933f11a5cef56dfc2b8a8e84","first_seen":"2026-05-15T19:40:59.963367Z","last_seen":"2026-05-15T22:53:29.038158Z","times_seen":10,"resource_available":false,"data":null}},"time_used":742,"timings":{"blocked":-1,"dns":462,"connect":28,"send":0,"wait":39,"receive":156,"ssl":49},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"yao.pic.sfuati.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"t55u32p.saving118.top/960x120b4fb9a2f0499ccdc.gif","fqdn":"t55u32p.saving118.top","domain":"saving118.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://szssp5.cfd/s/M%E7%94%B7.html","date":"2026-05-15T20:48:18.656Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /960x120b4fb9a2f0499ccdc.gif HTTP/1.1\r\nHost: t55u32p.saving118.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://szssp5.cfd/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-15T22:20:41.080999Z","times_seen":15239822,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.alicdn.com/imgextra/i2/2207246784654/O1CN010a6y4d1kFaOOgMqmk_!!2207246784654.gif","fqdn":"img.alicdn.com","domain":"alicdn.com","tld":"com"},"ip":{"addr":"47.246.44.177","port":443,"asn":24429,"as":"Zhejiang Taobao Network Co.,Ltd","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://szssp5.cfd/s/M%E7%94%B7.html","date":"2026-05-15T20:48:18.725Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tbcdn.cn","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Fri, 28 Nov 2025 03:07:13 GMT","end":"Sat, 18 Jul 2026 09:41:04 GMT"},"fingerprint":{"sha1":"01:40:62:EF:8C:E5:C1:8A:19:4C:8D:B6:F5:C2:24:7F:DC:C0:9C:8A","sha256":"60:3C:41:A0:78:62:E6:5E:82:F0:FA:CF:5C:C9:D3:22:E4:64:EE:1A:EE:C7:CC:BA:DD:25:08:90:6F:CC:C4:F2"}}},"request":{"raw":"GET /imgextra/i2/2207246784654/O1CN010a6y4d1kFaOOgMqmk_!!2207246784654.gif HTTP/1.1\r\nHost: img.alicdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://szssp5.cfd/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: Tengine\r\ncontent-type: image/gif\r\ncontent-length: 44406\r\ndate: Sat, 08 Nov 2025 08:43:18 GMT\r\nlast-modified: Sat, 08 Nov 2025 08:42:44 GMT\r\npicasso-ret-code: SUCCESS\r\npicasso-cache-info: L4-HIT\r\nrequest-time: 0.009\r\ntraceid: a3b5feaa17625913980347683e\r\nx-powered-by: Picasso\r\npicasso-image-type: normal\r\npicasso-fmt: gif2webp\r\ncache-control: max-age=31536000\r\nvia: ens-cache2.l2de3[0,0,200-0,H], ens-cache22.l2de3[1,0], ens-cache9.se2[0,0,200-0,H], ens-cache4.se2[5,0]\r\naccess-control-allow-origin: *\r\nage: 16286701\r\nali-swift-global-savetime: 1762591398\r\nx-cache: HIT TCP_MEM_HIT dirn:-2:-2\r\nx-swift-savetime: Thu, 13 Nov 2025 00:54:41 GMT\r\nx-swift-cachetime: 31132117\r\nback_uri: /imgextra/i2/2207246784654/O1CN010a6y4d1kFaOOgMqmk_!!2207246784654.gif_.webp\r\nvary: Accept\r\ns-rt: 5\r\ntiming-allow-origin: *\r\neagleid: 2ff62c9817788780990572298e\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Tengine","description":"Tengine is a web server which is based on the Nginx HTTP server.","website":"https://tengine.taobao.org","common_platform_enumeration":"","icon":"Tengine.png","categories":["Web servers"]}],"data":{"size":44406,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 960 x 120","md5":"7fe888844a25455b732401ff74cfd8ab","sha1":"8d19e04de42c10ba020a85c53ce0a89e68228df8","sha256":"f85ce364be6d1d2dd090b2fc02ab3e6dc3013b61a85576e4c0eb4ad8fa408e31","sha512":"a046e5c42fbd73895fe7f7add8d2511b9f5aa297d99ec108c8f47cd4546a16af813bfc54314c865b4c13a74c7be17429c341d1ecc327ee344074221732ba2d2e","ssdeep":"768:/6Qbzz7QUHPIskU5/Eg59QCK5Py43ZKFbVeI0D0gwKjewJ+Tsxfz0JWOyndv7mzv:ykQnskU9lXFK5P3ZKFbV10YRKjdfzOgW","tlshash":"3813013d7682d0410e2e367675f0c638fb9ad9dac96d34dbba795528644403c7c0939b","first_seen":"2025-11-09T02:30:37.980535Z","last_seen":"2026-05-15T22:53:29.022303Z","times_seen":9161,"resource_available":false,"data":null}},"time_used":382,"timings":{"blocked":345,"dns":0,"connect":0,"send":0,"wait":36,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.alicdn.com/imgextra/i3/2214925782998/O1CN01rrs2dS1Y18Xiwqddd_!!2214925782998.gif","fqdn":"img.alicdn.com","domain":"alicdn.com","tld":"com"},"ip":{"addr":"47.246.44.177","port":443,"asn":24429,"as":"Zhejiang Taobao Network Co.,Ltd","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://szssp5.cfd/s/M%E7%94%B7.html","date":"2026-05-15T20:48:18.729Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tbcdn.cn","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Fri, 28 Nov 2025 03:07:13 GMT","end":"Sat, 18 Jul 2026 09:41:04 GMT"},"fingerprint":{"sha1":"01:40:62:EF:8C:E5:C1:8A:19:4C:8D:B6:F5:C2:24:7F:DC:C0:9C:8A","sha256":"60:3C:41:A0:78:62:E6:5E:82:F0:FA:CF:5C:C9:D3:22:E4:64:EE:1A:EE:C7:CC:BA:DD:25:08:90:6F:CC:C4:F2"}}},"request":{"raw":"GET /imgextra/i3/2214925782998/O1CN01rrs2dS1Y18Xiwqddd_!!2214925782998.gif HTTP/1.1\r\nHost: img.alicdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://szssp5.cfd/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: Tengine\r\ncontent-type: image/gif\r\ncontent-length: 1491278\r\ndate: Sat, 02 May 2026 04:57:05 GMT\r\npicasso-ret-code: SUCCESS\r\npicasso-cache-info: L3-HIT\r\nrequest-time: 0.003\r\ntraceid: a3b55c9a17776978254567946e\r\nx-powered-by: Picasso\r\npicasso-image-type: normal\r\npicasso-fmt: gif2webp\r\ncache-control: max-age=31536000\r\nvia: ens-cache28.l2de4[0,0,200-0,H], ens-cache33.l2de4[1,0], ens-cache17.se2[0,0,200-0,H], ens-cache4.se2[5,0]\r\naccess-control-allow-origin: *\r\nage: 1180274\r\nali-swift-global-savetime: 1777697825\r\nx-cache: HIT TCP_MEM_HIT dirn:-2:-2\r\nx-swift-savetime: Sat, 02 May 2026 05:00:04 GMT\r\nx-swift-cachetime: 31535821\r\nback_uri: /imgextra/i3/2214925782998/O1CN01rrs2dS1Y18Xiwqddd_!!2214925782998.gif_.webp\r\nvary: Accept\r\ns-rt: 5\r\ntiming-allow-origin: *\r\neagleid: 2ff62c9817788780990572299e\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Tengine","description":"Tengine is a web server which is based on the Nginx HTTP server.","website":"https://tengine.taobao.org","common_platform_enumeration":"","icon":"Tengine.png","categories":["Web servers"]}],"data":{"size":1491278,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 960 x 120","md5":"978bd4f4bd1c93f77d0f72b3cd3c89b0","sha1":"b987ab7246918f9de506ba815b279e868c456983","sha256":"92407ef81e8eeeb9b98052ec6f848ffb019d179478781b80732ccfab93fc6cd4","sha512":"a1074c8ad6d9379b1879c8b9394af09d1a998b48acbaef0ecfdcf09ab91deef6a00a930d1f97cf432c7b06844388b037316d938ed1354b620274f9ee6466b11c","ssdeep":"24576:kroi1mokNven9ebU1XhvKFtYr/mdYRmdYRmdY4rXm9CMzCCP:krRmFg1XhizTddXrYx","tlshash":"8e25237cd48b82cbde9f80a907a17fbe421ca295a0704e2dd0181f507dde8de72799d9","first_seen":"2026-05-02T07:22:04.692724Z","last_seen":"2026-05-15T21:34:28.659887Z","times_seen":108,"resource_available":false,"data":null}},"time_used":551,"timings":{"blocked":341,"dns":0,"connect":0,"send":0,"wait":38,"receive":172,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.alicdn.com/imgextra/i2/4183327079/O1CN01AEW0eD22AEt5ShuPO_!!4183327079.gif","fqdn":"img.alicdn.com","domain":"alicdn.com","tld":"com"},"ip":{"addr":"47.246.44.177","port":443,"asn":24429,"as":"Zhejiang Taobao Network Co.,Ltd","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://szssp5.cfd/s/M%E7%94%B7.html","date":"2026-05-15T20:48:18.734Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tbcdn.cn","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Fri, 28 Nov 2025 03:07:13 GMT","end":"Sat, 18 Jul 2026 09:41:04 GMT"},"fingerprint":{"sha1":"01:40:62:EF:8C:E5:C1:8A:19:4C:8D:B6:F5:C2:24:7F:DC:C0:9C:8A","sha256":"60:3C:41:A0:78:62:E6:5E:82:F0:FA:CF:5C:C9:D3:22:E4:64:EE:1A:EE:C7:CC:BA:DD:25:08:90:6F:CC:C4:F2"}}},"request":{"raw":"GET /imgextra/i2/4183327079/O1CN01AEW0eD22AEt5ShuPO_!!4183327079.gif HTTP/1.1\r\nHost: img.alicdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://szssp5.cfd/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: Tengine\r\ncontent-type: image/gif\r\ncontent-length: 410298\r\ndate: Sat, 02 May 2026 15:58:43 GMT\r\npicasso-ret-code: SUCCESS\r\npicasso-cache-info: L3-HIT\r\nrequest-time: 0.001\r\ntraceid: a3b53a9a17777375230133711e\r\nx-powered-by: Picasso\r\npicasso-image-type: normal\r\npicasso-fmt: gif2webp\r\ncache-control: max-age=31536000\r\nvia: ens-cache29.l2de4[0,0,200-0,H], ens-cache1.l2de4[1,0], ens-cache11.se2[0,0,200-0,H], ens-cache4.se2[9,0]\r\naccess-control-allow-origin: *\r\nage: 1140576\r\nali-swift-global-savetime: 1777737523\r\nx-cache: HIT TCP_MEM_HIT dirn:-2:-2\r\nx-swift-savetime: Sat, 02 May 2026 15:59:16 GMT\r\nx-swift-cachetime: 31535967\r\nback_uri: /imgextra/i2/4183327079/O1CN01AEW0eD22AEt5ShuPO_!!4183327079.gif_.webp\r\nvary: Accept\r\ns-rt: 9\r\ntiming-allow-origin: *\r\neagleid: 2ff62c9817788780990622308e\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Tengine","description":"Tengine is a web server which is based on the Nginx HTTP server.","website":"https://tengine.taobao.org","common_platform_enumeration":"","icon":"Tengine.png","categories":["Web servers"]}],"data":{"size":410298,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 960 x 120","md5":"4798e79ff652a5e24aa0e7d76e79eb10","sha1":"2a0ea88780dfdd8d9b98d526dad527403f68fcf5","sha256":"17ea837a7894c10dea480a3051b61dfba7b224aa57919bd4f27e0a8b4a7369b4","sha512":"9e8135f0e91b1ac6746e1593ba5f4a8df6a1963e00b3ecb9c9128cdad0e77770ef7c874b8cf0dcc30413eba4a16c2371d4393ac9029dab5e6858316e106561fa","ssdeep":"6144:RSJizqpTcjQDTgfTAXYXHY/8VScriA7X5GPyzF66paH+fHp9tfHpTVIKV0tG6:R1zqacXCHY8Sc7JGPI66paQJ3Jxktb","tlshash":"149423c786d434249eebae1064341ff34b8ff5e653bffa5229068285825f7aa6911c21","first_seen":"2026-05-02T22:59:43.519407Z","last_seen":"2026-05-15T21:34:28.674721Z","times_seen":101,"resource_available":false,"data":null}},"time_used":442,"timings":{"blocked":338,"dns":0,"connect":0,"send":0,"wait":89,"receive":15,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img1.ah7907.com/846-960x60.gif","fqdn":"img1.ah7907.com","domain":"ah7907.com","tld":"com"},"ip":{"addr":"47.76.249.42","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://szssp5.cfd/s/M%E7%94%B7.html","date":"2026-05-15T20:48:18.764Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img1.ah7907.com","organization":""},"issuer":{"commonName":"Certum DV TLS G2 R39 CA","organization":"Asseco Data Systems S.A."},"validity":{"start":"Thu, 06 Nov 2025 07:27:15 GMT","end":"Sun, 06 Dec 2026 07:27:14 GMT"},"fingerprint":{"sha1":"EE:18:15:48:CE:4E:22:9F:18:59:AB:6E:5E:C0:0D:4E:AF:C2:86:22","sha256":"65:F5:69:07:04:80:B4:E3:E7:D0:C5:50:2E:02:11:1C:02:89:6E:83:40:00:DD:00:37:08:E9:9C:1C:A3:4D:59"}}},"request":{"raw":"GET /846-960x60.gif HTTP/1.1\r\nHost: img1.ah7907.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://szssp5.cfd/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 Moved Permanently\r\nserver: NgxFence\r\ndate: Fri, 15 May 2026 20:48:21 GMT\r\ncontent-type: text/html; charset=utf-8\r\ncontent-length: 0\r\nlocation: https://img.alicdn.com/imgextra/i1/2207246784654/O1CN016SCogX1kFaOO1vIZt_!!2207246784654.gif\r\nx-cache-status: HIT\r\nstrict-transport-security: max-age=31536000; includeSubdomains; preload\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":221348,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-15T22:20:41.080999Z","times_seen":15239822,"resource_available":true,"data":null}},"time_used":3063,"timings":{"blocked":-1,"dns":1107,"connect":267,"send":0,"wait":413,"receive":0,"ssl":1276},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"a0428.ky308tc0428.vip/gggg/guanggao960-120.gif","fqdn":"a0428.ky308tc0428.vip","domain":"ky308tc0428.vip","tld":"vip"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://szssp5.cfd/s/M%E7%94%B7.html","date":"2026-05-15T20:48:18.730Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /gggg/guanggao960-120.gif HTTP/1.1\r\nHost: a0428.ky308tc0428.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://szssp5.cfd/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-15T22:20:41.080999Z","times_seen":15239822,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.alicdn.com/imgextra/i1/2207246784654/O1CN016SCogX1kFaOO1vIZt_!!2207246784654.gif","fqdn":"img.alicdn.com","domain":"alicdn.com","tld":"com"},"ip":{"addr":"47.246.44.177","port":443,"asn":24429,"as":"Zhejiang Taobao Network Co.,Ltd","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://szssp5.cfd/s/M%E7%94%B7.html","date":"2026-05-15T20:48:21.852Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tbcdn.cn","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Fri, 28 Nov 2025 03:07:13 GMT","end":"Sat, 18 Jul 2026 09:41:04 GMT"},"fingerprint":{"sha1":"01:40:62:EF:8C:E5:C1:8A:19:4C:8D:B6:F5:C2:24:7F:DC:C0:9C:8A","sha256":"60:3C:41:A0:78:62:E6:5E:82:F0:FA:CF:5C:C9:D3:22:E4:64:EE:1A:EE:C7:CC:BA:DD:25:08:90:6F:CC:C4:F2"}}},"request":{"raw":"GET /imgextra/i1/2207246784654/O1CN016SCogX1kFaOO1vIZt_!!2207246784654.gif HTTP/1.1\r\nHost: img.alicdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://szssp5.cfd/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: Tengine\r\ncontent-type: image/gif\r\ncontent-length: 221348\r\ndate: Sun, 18 Jan 2026 16:19:32 GMT\r\nlast-modified: Thu, 13 Nov 2025 11:28:43 GMT\r\npicasso-ret-code: SUCCESS\r\npicasso-cache-info: L4-HIT\r\nrequest-time: 0.040\r\ntraceid: 9b66d7a417687531725638931e\r\nx-powered-by: Picasso\r\npicasso-image-type: normal\r\npicasso-fmt: gif2webp\r\ncache-control: max-age=31536000\r\nvia: ens-cache14.l2de4[0,0,200-0,H], ens-cache11.l2de4[2,0], ens-cache20.se2[0,0,200-0,H], ens-cache4.se2[2,0]\r\naccess-control-allow-origin: *\r\nage: 10124929\r\nali-swift-global-savetime: 1768753172\r\nx-cache: HIT TCP_MEM_HIT dirn:-2:-2\r\nx-swift-savetime: Mon, 06 Apr 2026 05:31:32 GMT\r\nx-swift-cachetime: 24835680\r\nback_uri: /imgextra/i1/2207246784654/O1CN016SCogX1kFaOO1vIZt_!!2207246784654.gif_.webp\r\nvary: Accept\r\ns-rt: 2\r\ntiming-allow-origin: *\r\neagleid: 2ff62c9817788781018303176e\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Tengine","description":"Tengine is a web server which is based on the Nginx HTTP server.","website":"https://tengine.taobao.org","common_platform_enumeration":"","icon":"Tengine.png","categories":["Web servers"]}],"data":{"size":221348,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 960 x 60","md5":"91a4c6f090426e12424905e992711b10","sha1":"a2cb6864351065d53d1c4c502877adfd11103e4a","sha256":"88584290d770ecec2239e81884a8bf52306a473d03aafbdb9a359555e3b9c439","sha512":"ce208676f2178d6a9c8498f495422167058647fabfe812391f392ada0df7088434bd33a8a718c4d24a53c7b9c77af94d83faf3815f6364c76d203f97fe9cdb36","ssdeep":"6144:k/sj3j3iWwPIu/wQFxkt8gRZI1ZpLugfoi:k/sjz3iVIgwUgRS7VffX","tlshash":"6124137ee1c01f226e0522e9a7b8bf1b05b55487ed84a47729bdf9d6c7482b3e7601c0","first_seen":"2025-10-14T12:40:30.101425Z","last_seen":"2026-05-15T22:53:29.003527Z","times_seen":9899,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.alicdn.com/imgextra/i4/2207246784654/O1CN014PyHeq1kFaOP6Xhwn_!!2207246784654.gif","fqdn":"img.alicdn.com","domain":"alicdn.com","tld":"com"},"ip":{"addr":"47.246.44.177","port":443,"asn":24429,"as":"Zhejiang Taobao Network Co.,Ltd","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://szssp5.cfd/s/M%E7%94%B7.html","date":"2026-05-15T20:48:22.073Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tbcdn.cn","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Fri, 28 Nov 2025 03:07:13 GMT","end":"Sat, 18 Jul 2026 09:41:04 GMT"},"fingerprint":{"sha1":"01:40:62:EF:8C:E5:C1:8A:19:4C:8D:B6:F5:C2:24:7F:DC:C0:9C:8A","sha256":"60:3C:41:A0:78:62:E6:5E:82:F0:FA:CF:5C:C9:D3:22:E4:64:EE:1A:EE:C7:CC:BA:DD:25:08:90:6F:CC:C4:F2"}}},"request":{"raw":"GET /imgextra/i4/2207246784654/O1CN014PyHeq1kFaOP6Xhwn_!!2207246784654.gif HTTP/1.1\r\nHost: img.alicdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://szssp5.cfd/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: Tengine\r\ncontent-type: image/gif\r\ncontent-length: 292628\r\ndate: Tue, 11 Nov 2025 09:01:19 GMT\r\npicasso-ret-code: SUCCESS\r\npicasso-cache-info: L3-HIT\r\nrequest-time: 0.001\r\ntraceid: a3b55c9e17628516795072285e\r\nx-powered-by: Picasso\r\npicasso-image-type: normal\r\npicasso-fmt: gif2webp\r\ncache-control: max-age=31536000\r\nvia: ens-cache6.l2de3[0,1,200-0,H], ens-cache22.l2de3[3,0], ens-cache20.se2[0,0,200-0,H], ens-cache4.se2[2,0]\r\naccess-control-allow-origin: *\r\nage: 16026423\r\nali-swift-global-savetime: 1762851679\r\nx-cache: HIT TCP_MEM_HIT dirn:-2:-2\r\nx-swift-savetime: Thu, 13 Nov 2025 17:31:29 GMT\r\nx-swift-cachetime: 31332590\r\nback_uri: /imgextra/i4/2207246784654/O1CN014PyHeq1kFaOP6Xhwn_!!2207246784654.gif_.webp\r\nvary: Accept\r\ns-rt: 2\r\ntiming-allow-origin: *\r\neagleid: 2ff62c9817788781020563277e\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Tengine","description":"Tengine is a web server which is based on the Nginx HTTP server.","website":"https://tengine.taobao.org","common_platform_enumeration":"","icon":"Tengine.png","categories":["Web servers"]}],"data":{"size":292628,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 960 x 120","md5":"3a29654deae45805d8794954abbb5044","sha1":"42691fc8287fde23d6f03fb34434deabb343df14","sha256":"cc2627b8bf79a940675f68df3fcdb91bf14a94b98c1938dd334c2bfc62538bb3","sha512":"b272db82b275b8f2f0fe414b1f339432bc2663520931f602714e2ede08e8b655f766060cff98dda94f176180b3bcdc53a6e382c4faa10ce67ca13e8008f65353","ssdeep":"6144:Nq0IoTY/D/9IDmn8IDVS+jIDmn0JVr3AW9DuCDP:LTcNl5H03QuDuCDP","tlshash":"3c541216e3668b1f117098c1a1f16d7efaedaa1736f5aef1450c4c42053f9e8a339c62","first_seen":"2025-11-09T02:30:37.967304Z","last_seen":"2026-05-15T22:53:29.04732Z","times_seen":9079,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.alicdn.com/imgextra/i3/4183327079/O1CN01MkfRic22AEsuzub0T_!!4183327079.gif","fqdn":"img.alicdn.com","domain":"alicdn.com","tld":"com"},"ip":{"addr":"47.246.44.177","port":443,"asn":24429,"as":"Zhejiang Taobao Network Co.,Ltd","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://szssp5.cfd/s/M%E7%94%B7.html","date":"2026-05-15T20:48:18.595Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tbcdn.cn","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Fri, 28 Nov 2025 03:07:13 GMT","end":"Sat, 18 Jul 2026 09:41:04 GMT"},"fingerprint":{"sha1":"01:40:62:EF:8C:E5:C1:8A:19:4C:8D:B6:F5:C2:24:7F:DC:C0:9C:8A","sha256":"60:3C:41:A0:78:62:E6:5E:82:F0:FA:CF:5C:C9:D3:22:E4:64:EE:1A:EE:C7:CC:BA:DD:25:08:90:6F:CC:C4:F2"}}},"request":{"raw":"GET /imgextra/i3/4183327079/O1CN01MkfRic22AEsuzub0T_!!4183327079.gif HTTP/1.1\r\nHost: img.alicdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://szssp5.cfd/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: Tengine\r\ncontent-type: image/gif\r\ncontent-length: 492431\r\ndate: Fri, 17 Apr 2026 10:54:10 GMT\r\nlast-modified: Fri, 17 Apr 2026 10:06:23 GMT\r\npicasso-ret-code: SUCCESS\r\npicasso-cache-info: L4-HIT\r\nrequest-time: 0.011\r\ntraceid: 2ff6079517764232499468062e\r\nx-powered-by: Picasso\r\npicasso-image-type: normal\r\npicasso-fmt: gif2webp\r\ncache-control: max-age=31536000\r\nvia: ens-cache27.l2de4[0,0,200-0,H], ens-cache23.l2de4[1,0], ens-cache2.se2[0,0,200-0,H], ens-cache4.se2[1,0]\r\naccess-control-allow-origin: *\r\nage: 2454849\r\nali-swift-global-savetime: 1776423250\r\nx-cache: HIT TCP_MEM_HIT dirn:-2:-2\r\nx-swift-savetime: Fri, 17 Apr 2026 13:22:55 GMT\r\nx-swift-cachetime: 31527075\r\nback_uri: /imgextra/i3/4183327079/O1CN01MkfRic22AEsuzub0T_!!4183327079.gif_.webp\r\nvary: Accept\r\ns-rt: 1\r\ntiming-allow-origin: *\r\neagleid: 2ff62c9817788780990812323e\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Tengine","description":"Tengine is a web server which is based on the Nginx HTTP server.","website":"https://tengine.taobao.org","common_platform_enumeration":"","icon":"Tengine.png","categories":["Web servers"]}],"data":{"size":492431,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1300 x 160","md5":"8610e8c01246e4fab4f299e0b054cc20","sha1":"d551f143167fdf97de87de2c3e9a104a609aee8f","sha256":"9b88c62d1f6ced8c683d1964e6cf62c027723636fac5c8342ee1612862205fb1","sha512":"113708932750d4747d616df035c50b2a0d1ec55b96f4a063cdce50a6368c3eb8a4f2dc2c69eb432c19d0dc64902ae23b15c0ee1832fd4b0f9b20cbb819fd6184","ssdeep":"12288:isJNH7va0AIyDz9+w5bWQUiHsXEyfIFjIFU:jJJ7vTAIyDhhgQ3sX/I","tlshash":"c0a4234d7071ee973a170f38910d2d6cc83e967bac98d91e1de4b44622e0276b4ec99f","first_seen":"2026-04-18T01:31:07.041199Z","last_seen":"2026-05-15T21:34:28.617518Z","times_seen":916,"resource_available":false,"data":null}},"time_used":661,"timings":{"blocked":-1,"dns":457,"connect":10,"send":0,"wait":92,"receive":37,"ssl":56},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jinmeng.haohuxx.com/JM/960-120.gif","fqdn":"jinmeng.haohuxx.com","domain":"haohuxx.com","tld":"com"},"ip":{"addr":"157.185.128.120","port":443,"asn":54994,"as":"ML-1432-54994","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://szssp5.cfd/s/M%E7%94%B7.html","date":"2026-05-15T20:48:18.625Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcjixiao.com","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Sun, 22 Feb 2026 10:00:00 GMT","end":"Sat, 23 May 2026 09:59:59 GMT"},"fingerprint":{"sha1":"EB:0D:99:61:60:8C:4E:D6:AF:7C:80:3D:6D:B3:48:63:24:60:FB:C3","sha256":"4A:4C:A5:51:92:3C:DB:17:4C:E7:38:35:90:31:C1:51:A5:C7:C8:D2:FC:1F:B8:D8:C7:DC:9E:F5:22:38:CF:2E"}}},"request":{"raw":"GET /JM/960-120.gif HTTP/1.1\r\nHost: jinmeng.haohuxx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://szssp5.cfd/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 15 May 2026 20:48:20 GMT\r\ncontent-type: image/gif\r\ncontent-length: 231851\r\nserver: nginx\r\nlast-modified: Thu, 12 Mar 2026 10:41:48 GMT\r\nvary: Accept-Encoding\r\netag: \"69b2986c-389ab\"\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nvia: 1.1 PS-JFK-01s8o183:7 (W), 1.1 PS-CDG-04qJN97:11 (W), 0.0 PS-CDG-04gzn111:11 (W)\r\nx-ws-request-id: 6a078694_PS-CDG-04gzn111_63127-3722\r\nx-px: ht PS-CDG-04gzn111none\r\nage: 571213\r\nexpires: Mon, 08 Jun 2026 06:08:07 GMT\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":231851,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 960 x 120","md5":"8daaa42a1404899cd56e0e6492b97d5d","sha1":"be6dccdd5d5e8c4ce98765a3e815378b9d464c8c","sha256":"5c59b6b32af9e560db9ee94ec4a955058ad6256cff77b9ca68ed1f05c35c1027","sha512":"8c74d58878ace15565e38eef77dbc1c0e451f3d2b342faac64cf3247d929d216659f17c8659382e3b225f627059aee9d04c80cab8be0d1f1867fb506921bfeba","ssdeep":"3072:2HIoph/la+4HM+7DX+HZHE2OqOKXqVisKdr9PLZY7XlQYU8KrO5+yhFKxPsVn4q:2hpFla+iXICEN9PFMXGb8KrO51FIP+nh","tlshash":"283423844b4f7d404453e8cdaff5dbdb262d2b0678d619aa23e4397240d8a3b4a3d678","first_seen":"2026-05-01T09:20:15.448253Z","last_seen":"2026-05-15T21:34:28.662561Z","times_seen":172,"resource_available":false,"data":null}},"time_used":1803,"timings":{"blocked":-1,"dns":1510,"connect":30,"send":0,"wait":28,"receive":191,"ssl":40},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.alicdn.com/imgextra/i2/O1CN01fYtu421rGgg7EelJL_!!2216598935604-1-fleamarket.gif","fqdn":"img.alicdn.com","domain":"alicdn.com","tld":"com"},"ip":{"addr":"47.246.44.177","port":443,"asn":24429,"as":"Zhejiang Taobao Network Co.,Ltd","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://szssp5.cfd/s/M%E7%94%B7.html","date":"2026-05-15T20:48:18.731Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tbcdn.cn","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Fri, 28 Nov 2025 03:07:13 GMT","end":"Sat, 18 Jul 2026 09:41:04 GMT"},"fingerprint":{"sha1":"01:40:62:EF:8C:E5:C1:8A:19:4C:8D:B6:F5:C2:24:7F:DC:C0:9C:8A","sha256":"60:3C:41:A0:78:62:E6:5E:82:F0:FA:CF:5C:C9:D3:22:E4:64:EE:1A:EE:C7:CC:BA:DD:25:08:90:6F:CC:C4:F2"}}},"request":{"raw":"GET /imgextra/i2/O1CN01fYtu421rGgg7EelJL_!!2216598935604-1-fleamarket.gif HTTP/1.1\r\nHost: img.alicdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://szssp5.cfd/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: Tengine\r\ncontent-type: image/gif\r\ncontent-length: 313208\r\ndate: Mon, 16 Mar 2026 07:08:12 GMT\r\nlast-modified: Mon, 16 Mar 2026 07:07:37 GMT\r\npicasso-ret-code: SUCCESS\r\npicasso-cache-info: L4-HIT\r\nrequest-time: 0.031\r\ntraceid: a3b5fd9a17736448927484741e\r\nx-powered-by: Picasso\r\npicasso-image-type: normal\r\npicasso-fmt: gif2webp\r\ncache-control: max-age=31536000\r\nvia: ens-cache26.l2de4[0,0,200-0,H], ens-cache6.l2de4[2,0], ens-cache5.se2[0,0,200-0,H], ens-cache4.se2[5,0]\r\naccess-control-allow-origin: *\r\nage: 5233207\r\nali-swift-global-savetime: 1773644892\r\nx-cache: HIT TCP_MEM_HIT dirn:-2:-2\r\nx-swift-savetime: Mon, 16 Mar 2026 13:49:33 GMT\r\nx-swift-cachetime: 31511919\r\nback_uri: /imgextra/i2/O1CN01fYtu421rGgg7EelJL_!!2216598935604-1-fleamarket.gif_.webp\r\nvary: Accept\r\ns-rt: 5\r\ntiming-allow-origin: *\r\neagleid: 2ff62c9817788780990572306e\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Tengine","description":"Tengine is a web server which is based on the Nginx HTTP server.","website":"https://tengine.taobao.org","common_platform_enumeration":"","icon":"Tengine.png","categories":["Web servers"]}],"data":{"size":313208,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 960 x 120","md5":"4dd416bdc56857e06ac396a2b6f622a9","sha1":"13cb2796a282b37edb4545bdf09164564744e68b","sha256":"4625b7155712d6ee46075dfb828d3ad5cc74d048150222f37e7fb087c5e521a8","sha512":"3f5104eaa0cf849f30394d70d8afa2c166e5231e5675bb9f24e0b36dd041e8fad095cfec4050cbdbfe7ee787e667456b827056d49569baaeeb47c440c058761e","ssdeep":"6144:+TtATmMjeCfAQAxlDk9uNVvzoEaedXFm1KCVK6Ybjt59nb3Aead:+TjLCfAQAxFkYNVHaedV+K6GjtDb3Aeo","tlshash":"f864233ec5b40cb479768cf2509b7cef014a5f52be2211166f968a5f2d1c2bd021da9f","first_seen":"2026-03-16T07:13:28.41319Z","last_seen":"2026-05-15T22:41:11.856645Z","times_seen":1859,"resource_available":false,"data":null}},"time_used":411,"timings":{"blocked":339,"dns":0,"connect":0,"send":0,"wait":48,"receive":24,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.alicdn.com/imgextra/i1/2217565595682/O1CN01JKJBL71rqPYr9sHRK_!!2217565595682.gif","fqdn":"img.alicdn.com","domain":"alicdn.com","tld":"com"},"ip":{"addr":"47.246.44.177","port":443,"asn":24429,"as":"Zhejiang Taobao Network Co.,Ltd","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://szssp5.cfd/s/M%E7%94%B7.html","date":"2026-05-15T20:48:21.878Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tbcdn.cn","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Fri, 28 Nov 2025 03:07:13 GMT","end":"Sat, 18 Jul 2026 09:41:04 GMT"},"fingerprint":{"sha1":"01:40:62:EF:8C:E5:C1:8A:19:4C:8D:B6:F5:C2:24:7F:DC:C0:9C:8A","sha256":"60:3C:41:A0:78:62:E6:5E:82:F0:FA:CF:5C:C9:D3:22:E4:64:EE:1A:EE:C7:CC:BA:DD:25:08:90:6F:CC:C4:F2"}}},"request":{"raw":"GET /imgextra/i1/2217565595682/O1CN01JKJBL71rqPYr9sHRK_!!2217565595682.gif HTTP/1.1\r\nHost: img.alicdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://szssp5.cfd/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: Tengine\r\ncontent-type: image/gif\r\ncontent-length: 71518\r\ndate: Sun, 04 Jan 2026 07:17:22 GMT\r\npicasso-ret-code: SUCCESS\r\npicasso-cache-info: L3-HIT\r\nrequest-time: 0.001\r\ntraceid: a3b5f39917675110425676980e\r\nx-powered-by: Picasso\r\npicasso-image-type: normal\r\npicasso-fmt: gif2webp\r\ncache-control: max-age=31536000\r\nvia: ens-cache26.l2de4[0,0,200-0,H], ens-cache23.l2de4[1,0], ens-cache4.se2[0,0,200-0,H], ens-cache4.se2[2,0]\r\naccess-control-allow-origin: *\r\nage: 11367059\r\nali-swift-global-savetime: 1767511042\r\nx-cache: HIT TCP_MEM_HIT dirn:-2:-2\r\nx-swift-savetime: Mon, 06 Apr 2026 05:31:32 GMT\r\nx-swift-cachetime: 23593550\r\nback_uri: /imgextra/i1/2217565595682/O1CN01JKJBL71rqPYr9sHRK_!!2217565595682.gif_.webp\r\nvary: Accept\r\ns-rt: 2\r\ntiming-allow-origin: *\r\neagleid: 2ff62c9817788781018593185e\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Tengine","description":"Tengine is a web server which is based on the Nginx HTTP server.","website":"https://tengine.taobao.org","common_platform_enumeration":"","icon":"Tengine.png","categories":["Web servers"]}],"data":{"size":71518,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 960 x 120","md5":"77124bec289e16c03715536db0a93a69","sha1":"5de89ae0a04b1f38fad10253e63173c0b686ad35","sha256":"a3485681d348a07947e41b4b1f4ae28733254265db0fd08ac9db716c3733c769","sha512":"5690c31f2995495454b1e9f46b74b696c0418985c5d49d8ab68975b731876e461df8cd05bb027cf3d871191a500bd273b649d037e9e1719c890784e368206c54","ssdeep":"1536:E8dgdKUYKUsoK6sIET9wjMr/JF+aPbqiuYZtJvfDD:E+zUvwhEBwjM7+YyYZtJvfDD","tlshash":"8e630233a165d51fd223253ca591909dba377fe1cd6671f9f6c7cf478a08083c9aa828","first_seen":"2026-01-04T07:53:55.650353Z","last_seen":"2026-05-15T22:41:11.999539Z","times_seen":5286,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"szssp5.cfd/cn/home/web/template/048wukong9_wtpl/static/js/mip-history.js","fqdn":"szssp5.cfd","domain":"szssp5.cfd","tld":"cfd"},"ip":{"addr":"154.26.181.150","port":443,"asn":906,"as":"DMIT","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://szssp5.cfd/s/M%E7%94%B7.html","date":"2026-05-15T20:48:17.375Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.szssp5.cfd","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Apr 2026 06:02:14 GMT","end":"Sun, 26 Jul 2026 06:02:13 GMT"},"fingerprint":{"sha1":"56:AF:D3:CA:15:EA:D2:D9:58:15:D6:47:A3:38:1F:B5:54:A7:F2:D9","sha256":"79:A4:A1:CB:D4:EA:DC:A8:10:34:6A:B9:56:FF:B0:A4:24:16:D6:C4:B9:D2:2F:0D:92:2D:BD:1B:EB:5C:01:EE"}}},"request":{"raw":"GET /cn/home/web/template/048wukong9_wtpl/static/js/mip-history.js HTTP/1.1\r\nHost: szssp5.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://szssp5.cfd/s/M%E7%94%B7.html\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=nj49fn556ooooannkq320e8ooc\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: https://www.xzylm.com\r\ncontent-type: application/javascript\r\ncontent-length: 9076\r\nlast-modified: Sat, 19 Nov 2022 09:30:44 GMT\r\nvary: Accept-Encoding\r\ncache-control: public, max-age=2592000\r\naccept-ranges: bytes\r\nvia: http/1.1 traffic_server (https://www.xzylm.com [cRs f ])\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":9076,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (9058), with no line terminators","md5":"a78c9613df2e4232e10dbf75e9a2f757","sha1":"790468f76d15a8c9ab42f517174ed5da1d70cf65","sha256":"76d34a3e5118de37ff2e4cdf42a85395f162ad5b2be0a6fc72816bf4a778d173","sha512":"5172438ae513498ac17a904b35ca4b1eaf533e57d0e78edf19753fe609d78a89837ff7d6b149b95adab98381165d5fbb6cfd5d97960276088696c3716c1ebfbb","ssdeep":"96:ZnXf6QfNwU92Y2yd2IPe9XVYVlNVB00jpq9YrXqSvzUzN5nrm:xv60hkYXsVyXjp/PvzUJNrm","tlshash":"4d1274d93291f0e2c7f771d5522f6047a2fb98808d899980e696d1e1bd36a2e4173f2c","first_seen":"2023-03-07T12:27:14Z","last_seen":"2026-05-15T20:49:14.674655Z","times_seen":305,"resource_available":true,"data":null}},"time_used":848,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":848,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"szssp5.cfd/cn/home/web/template/048wukong9_wtpl/static/images/noimg.png","fqdn":"szssp5.cfd","domain":"szssp5.cfd","tld":"cfd"},"ip":{"addr":"154.26.181.150","port":443,"asn":906,"as":"DMIT","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://szssp5.cfd/s/M%E7%94%B7.html","date":"2026-05-15T20:48:18.038Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.szssp5.cfd","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Apr 2026 06:02:14 GMT","end":"Sun, 26 Jul 2026 06:02:13 GMT"},"fingerprint":{"sha1":"56:AF:D3:CA:15:EA:D2:D9:58:15:D6:47:A3:38:1F:B5:54:A7:F2:D9","sha256":"79:A4:A1:CB:D4:EA:DC:A8:10:34:6A:B9:56:FF:B0:A4:24:16:D6:C4:B9:D2:2F:0D:92:2D:BD:1B:EB:5C:01:EE"}}},"request":{"raw":"GET /cn/home/web/template/048wukong9_wtpl/static/images/noimg.png HTTP/1.1\r\nHost: szssp5.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://szssp5.cfd/cn/home/web/template/048wukong9_wtpl/static/css/style.css\r\nCookie: PHPSESSID=nj49fn556ooooannkq320e8ooc\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\nserver: https://www.xzylm.com\r\ncontent-type: text/html; charset=UTF-8\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nvia: http/1.1 traffic_server (https://www.xzylm.com [cMsSf ])\r\ncache-control: public, max-age=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":null,"data":{"size":17794,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"f489045dd4254d27b0ed0e118390b725","sha1":"1c7622d4b5b3a447be4702b409d619595bfe0225","sha256":"635ac0332de4df811e60768bda23a8e0b091199896ac0a4ee86facdf6ea15dd7","sha512":"95ab480ca7b55f5d70d9461ef1dfb3266b3fce60cf347d0a61c5387db64fe571a7bd819bb305109da6cbcbc9d4743c84d6b6f758749d9014aeccda1bc2936f37","ssdeep":"192:IfNGtwnLFR45u5ntr9XVNPnZ0wrpcFmCbHfr3MvMNyxbP6BEraHMGy1yEsOy8QnP:IgteFvdv1joupazy1y5XnP","tlshash":"a582e71a5ef715970026e17473e17b26fa52870fca4ecea43ded2a90cf80f50498f299","first_seen":"2026-05-15T20:49:14.675225Z","last_seen":"2026-05-15T20:49:14.675225Z","times_seen":1,"resource_available":false,"data":null}},"time_used":247,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":247,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"feifei.fmjmm.com/2777a/960x120.gif","fqdn":"feifei.fmjmm.com","domain":"fmjmm.com","tld":"com"},"ip":{"addr":"138.113.181.2","port":443,"asn":54994,"as":"ML-1432-54994","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://szssp5.cfd/s/M%E7%94%B7.html","date":"2026-05-15T20:48:18.525Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"feifei.fmjmm.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 12 Apr 2026 23:12:27 GMT","end":"Sat, 11 Jul 2026 23:12:26 GMT"},"fingerprint":{"sha1":"CB:D4:3B:DC:BD:44:00:60:A5:CA:79:BE:20:A4:B1:7A:1F:F7:FB:66","sha256":"67:5D:F2:BF:0D:8F:E4:67:20:EB:DB:2B:29:0A:40:B8:1B:E5:CB:C4:CB:9E:4E:72:94:98:BF:1C:EB:47:EE:5F"}}},"request":{"raw":"GET /2777a/960x120.gif HTTP/1.1\r\nHost: feifei.fmjmm.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://szssp5.cfd/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 15 May 2026 20:48:19 GMT\r\ncontent-type: image/gif\r\ncontent-length: 287622\r\nserver: nginx\r\nlast-modified: Tue, 24 Mar 2026 16:34:05 GMT\r\nvary: Accept-Encoding\r\netag: \"69c2bcfd-46386\"\r\naccept-ranges: bytes\r\nvia: 1.1 PS-ATL-01SaC33:6 (W), 1.1 PSdgflkfFRA2hg92:1 (W), 0.0 PS-ARN-04kSW118:12 (W)\r\nx-ws-request-id: 6a078693_PS-ARN-04kSW118_14438-25421\r\nx-px: ht PS-ARN-04kSW118none\r\ncache-control: max-age=2592000\r\nage: 191328\r\nexpires: Fri, 12 Jun 2026 15:39:31 GMT\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":287622,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 960 x 120","md5":"944a978ca8dd5514484b898601d82aff","sha1":"3d41ffea548d81eee80423ce9060af603b646491","sha256":"1f55f355c0fa2ce4d9d96660eb054ea6ea10e92955aeede981987b76e1fb8b8e","sha512":"7729fd7b44a059397266e8d026bb3939cddd19a087c5289d62d366d799c4188c566f7ac54b03f5231e32dd553651bab31a4ce6f3d7aeb62728786892b4e66442","ssdeep":"6144:EAIc4DHcadd2i7VBorZh8Su5mh8Vfy5eRwB:7qhd2i7Ve38DmhTswB","tlshash":"ea54238c3279d893f9490a11f43b4fbb46e68d624f82ceb779826cf5144a72c5fb4588","first_seen":"2026-04-27T19:53:46.100996Z","last_seen":"2026-05-15T21:34:28.621693Z","times_seen":99,"resource_available":false,"data":null}},"time_used":1280,"timings":{"blocked":595,"dns":562,"connect":8,"send":0,"wait":23,"receive":73,"ssl":15},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"szssp5.cfd/cn/home/web/static/js/jquery.js","fqdn":"szssp5.cfd","domain":"szssp5.cfd","tld":"cfd"},"ip":{"addr":"154.26.181.150","port":443,"asn":906,"as":"DMIT","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://szssp5.cfd/s/M%E7%94%B7.html","date":"2026-05-15T20:48:17.368Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.szssp5.cfd","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Apr 2026 06:02:14 GMT","end":"Sun, 26 Jul 2026 06:02:13 GMT"},"fingerprint":{"sha1":"56:AF:D3:CA:15:EA:D2:D9:58:15:D6:47:A3:38:1F:B5:54:A7:F2:D9","sha256":"79:A4:A1:CB:D4:EA:DC:A8:10:34:6A:B9:56:FF:B0:A4:24:16:D6:C4:B9:D2:2F:0D:92:2D:BD:1B:EB:5C:01:EE"}}},"request":{"raw":"GET /cn/home/web/static/js/jquery.js HTTP/1.1\r\nHost: szssp5.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://szssp5.cfd/s/M%E7%94%B7.html\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=nj49fn556ooooannkq320e8ooc\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: https://www.xzylm.com\r\ncontent-type: application/javascript\r\ncontent-length: 92629\r\nlast-modified: Thu, 04 Aug 2016 14:39:10 GMT\r\nvary: Accept-Encoding\r\ncache-control: public, max-age=2592000\r\naccept-ranges: bytes\r\nvia: http/1.1 traffic_server (https://www.xzylm.com [cRs f ])\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":92629,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (32089)","md5":"397754ba49e9e0cf4e7c190da78dda05","sha1":"ae49e56999d82802727455f0ba83b63acd90a22b","sha256":"c12f6098e641aaca96c60215800f18f5671039aecf812217fab3c0d152f6adb4","sha512":"8c64754f77507ab2c24a6fc818419b9dd3f0ceccc9065290e41afdbee0743f0da2cb13b2fbb00afa525c082f1e697cb3ffd76ef9b902cb81d7c41ca1c641dffb","ssdeep":"1536:dnu00HWWaRxkqJg09pYxoxDKMXJrg8hXXO4dK3kyfiLJBhdSZE+I+Qg7rbaN1RUx:ddkWgoBhcZRQgmW42qe","tlshash":"8c932bdd72d2b03257ab30bd106f540ff2361959280d8850f268d8f9bc79a49a277f6d","first_seen":"2023-03-07T01:02:08Z","last_seen":"2026-05-15T22:12:25.966897Z","times_seen":65820,"resource_available":true,"data":null}},"time_used":625,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":514,"receive":111,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"szssp5.cfd/cn/home/web/template/048wukong9_wtpl/static/fonts/t.ttf","fqdn":"szssp5.cfd","domain":"szssp5.cfd","tld":"cfd"},"ip":{"addr":"154.26.181.150","port":443,"asn":906,"as":"DMIT","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://szssp5.cfd/s/M%E7%94%B7.html","date":"2026-05-15T20:48:18.045Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.szssp5.cfd","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Apr 2026 06:02:14 GMT","end":"Sun, 26 Jul 2026 06:02:13 GMT"},"fingerprint":{"sha1":"56:AF:D3:CA:15:EA:D2:D9:58:15:D6:47:A3:38:1F:B5:54:A7:F2:D9","sha256":"79:A4:A1:CB:D4:EA:DC:A8:10:34:6A:B9:56:FF:B0:A4:24:16:D6:C4:B9:D2:2F:0D:92:2D:BD:1B:EB:5C:01:EE"}}},"request":{"raw":"GET /cn/home/web/template/048wukong9_wtpl/static/fonts/t.ttf HTTP/1.1\r\nHost: szssp5.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://szssp5.cfd/cn/home/web/template/048wukong9_wtpl/static/css/style.css\r\nCookie: PHPSESSID=nj49fn556ooooannkq320e8ooc\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: https://www.xzylm.com\r\ncontent-type: application/octet-stream\r\ncontent-length: 128108\r\nlast-modified: Wed, 31 Aug 2022 08:22:02 GMT\r\naccept-ranges: bytes\r\nvia: http/1.1 traffic_server (https://www.xzylm.com [cRs f ])\r\ncache-control: public, max-age=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":128108,"size_decoded":0,"mime_type":"application/octet-stream","magic":"TrueType Font data, 18 tables, 1st \"LTSH\", 29 names, Macintosh, Part of the digitally encoded machine readable outline data for producing the Typefaces provided","md5":"07367dafe90841cde893094395da1be8","sha1":"68466033f446dfb28dec2e5f1e8b9a9f92dbe092","sha256":"342afeb8875dc431b9f3b1ec6fec9ea109749ec625a008f177dc28b470116fed","sha512":"12afb6b3e017df483fc71dd5ffd0d19ae4bacbb5f1df5d8d7c408fb59f69ebf082a6d6332785b7bf6cc65c3f0b1e3959f87f001160e68c7084a2ee262aca1ca7","ssdeep":"1536:NpH3wHkrnMAqIzlrqKrTNOs1HgUH0E3knz+9lqBGqBZ6/8zwQNtEk0x3i:NpH3wHWhqK3NOsmUF3o+vqNBZR5Nmk0I","tlshash":"b4c3b59fe9e41d13e343577649f38b3a0f657842ff262e8929c87585ceea1509b13e80","first_seen":"2023-07-15T01:14:36Z","last_seen":"2026-05-15T20:49:14.677569Z","times_seen":184,"resource_available":false,"data":null}},"time_used":240,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":197,"receive":43,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pic6.sex8sex866.com/20260509/Sjcptoez/1.jpg","fqdn":"pic6.sex8sex866.com","domain":"sex8sex866.com","tld":"com"},"ip":{"addr":"216.180.234.211","port":443,"asn":47191,"as":"blue tech technology Co., Limited","country":"British Virgin Islands","country_code":"VG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://szssp5.cfd/s/M%E7%94%B7.html","date":"2026-05-15T20:48:18.335Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pic6.sex8sex866.com","organization":""},"issuer":{"commonName":"Certum DV TLS G2 R39 CA","organization":"Asseco Data Systems S.A."},"validity":{"start":"Wed, 01 Apr 2026 16:29:21 GMT","end":"Sat, 17 Oct 2026 16:29:20 GMT"},"fingerprint":{"sha1":"F6:97:4D:CD:4C:BF:51:CD:C3:31:C2:9C:7E:2F:DF:E5:F5:8A:7B:DF","sha256":"4A:96:D4:C7:4A:0A:1B:A1:A5:44:AD:6C:FF:18:E9:E4:78:A5:67:46:4B:7F:12:5D:F0:68:EA:27:4A:8E:F5:B5"}}},"request":{"raw":"GET /20260509/Sjcptoez/1.jpg HTTP/1.1\r\nHost: pic6.sex8sex866.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://szssp5.cfd/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-headers: X-Requested-With\r\naccess-control-allow-methods: POST, GET, OPTIONS\r\naccess-control-allow-origin: *\r\ncontent-disposition: attachment; filename=\"1.jpg\"\r\ncontent-type: application/octet-stream\r\ndate: Wed, 13 May 2026 12:14:06 GMT\r\netag: \"69ff24ed-33d62\"\r\nlast-modified: Wed, 13 May 2026 12:14:14 GMT\r\nserver: nginx\r\nx-cache: HIT, policy, disk\r\ncontent-length: 212322\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":212322,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 800x538, components 3","md5":"4957829878e8c20f6b6f1c763388d62a","sha1":"5b4144ad76829261c5c5919e9b56cd72cc63ecb4","sha256":"11db80cff307892e91c9882e309ac404e7e47d7b62dbcd68a9cd5f97f9ebeb7f","sha512":"90e71c451f59baddee69949fa5d46229214efce8ef6271b22945145948eef384e73298ec47be1dc923ce6b2a3890f29de926b3d96755963452e847341914a242","ssdeep":"6144:dZVDaZAgyRql29tMNXPf17Z1YJg6ZItnt6:dZV2ZLyRT92NXPfdjYgnt6","tlshash":"022412bb027f1496f7184db7c84a0d17bb23958c418d594b35db8a7883627eb98ef1c8","first_seen":"2023-12-30T10:57:36Z","last_seen":"2026-05-15T20:49:14.678138Z","times_seen":4,"resource_available":false,"data":null}},"time_used":3829,"timings":{"blocked":1592,"dns":0,"connect":0,"send":0,"wait":651,"receive":225,"ssl":1361},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"11224.xn--gps-8y0gm25n.xn--55qx5d/d/11224?_t=1765444375","fqdn":"11224.xn--gps-8y0gm25n.xn--55qx5d","domain":"11224.xn--gps-8y0gm25n.xn--55qx5d","tld":""},"ip":{"addr":"27.155.113.137","port":443,"asn":133774,"as":"Fuzhou","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://szssp5.cfd/s/M%E7%94%B7.html","date":"2026-05-15T20:48:18.568Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.xn--gps-8y0gm25n.xn--55qx5d","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 06 Apr 2026 17:10:52 GMT","end":"Sun, 05 Jul 2026 17:10:51 GMT"},"fingerprint":{"sha1":"14:35:E7:15:D0:69:74:17:04:77:88:A9:C4:73:D4:9B:E4:64:D6:AD","sha256":"7A:77:B5:29:20:D8:74:37:C7:83:CD:B4:18:86:73:6E:7F:26:29:90:C4:5F:B4:64:3D:DB:EC:53:3F:AA:9F:D8"}}},"request":{"raw":"GET /d/11224?_t=1765444375 HTTP/1.1\r\nHost: 11224.xn--gps-8y0gm25n.xn--55qx5d\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://szssp5.cfd/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\ndate: Fri, 15 May 2026 20:48:21 GMT\r\ncontent-type: text/html\r\ncontent-length: 145\r\nlocation: https://fsffbhd.brffff.com/ea980b9daf2cbb13355e4431bbc43384.gif?_t=1765444375\r\ncache-control: public, max-age=900\r\nexpires: Friday, 15-May-2026 20:48:21 GMT\r\nstrict-transport-security: max-age=31536000\r\nx-via-jsl: e7be9b3,-\r\nset-cookie: __jsluid_s=b25a0ad3b6adffb3dca2480ef0ac623b; max-age=31536000; path=/; HttpOnly; SameSite=None; secure\r\nx-cache: miss\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":568104,"size_decoded":0,"mime_type":"image/webp","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-15T22:20:41.080999Z","times_seen":15239822,"resource_available":true,"data":null}},"time_used":2763,"timings":{"blocked":-1,"dns":1408,"connect":269,"send":0,"wait":316,"receive":0,"ssl":770},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.alicdn.com/imgextra/i3/O1CN01tjNGe81mH4x7ZSkxl_!!2221328234928-1-fleamarket.gif","fqdn":"img.alicdn.com","domain":"alicdn.com","tld":"com"},"ip":{"addr":"47.246.44.177","port":443,"asn":24429,"as":"Zhejiang Taobao Network Co.,Ltd","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://szssp5.cfd/s/M%E7%94%B7.html","date":"2026-05-15T20:48:18.627Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tbcdn.cn","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Fri, 28 Nov 2025 03:07:13 GMT","end":"Sat, 18 Jul 2026 09:41:04 GMT"},"fingerprint":{"sha1":"01:40:62:EF:8C:E5:C1:8A:19:4C:8D:B6:F5:C2:24:7F:DC:C0:9C:8A","sha256":"60:3C:41:A0:78:62:E6:5E:82:F0:FA:CF:5C:C9:D3:22:E4:64:EE:1A:EE:C7:CC:BA:DD:25:08:90:6F:CC:C4:F2"}}},"request":{"raw":"GET /imgextra/i3/O1CN01tjNGe81mH4x7ZSkxl_!!2221328234928-1-fleamarket.gif HTTP/1.1\r\nHost: img.alicdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://szssp5.cfd/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: Tengine\r\ncontent-type: image/gif\r\ncontent-length: 465085\r\ndate: Fri, 15 May 2026 13:35:12 GMT\r\npicasso-ret-code: SUCCESS\r\npicasso-cache-info: L3-HIT\r\nrequest-time: 0.001\r\ntraceid: 2b6d3f9917788521126897555e\r\nx-powered-by: Picasso\r\npicasso-image-type: normal\r\npicasso-fmt: gif2webp\r\ncache-control: max-age=31536000\r\nvia: ens-cache14.l2de4[0,-1,200-0,H], ens-cache23.l2de4[1,0], ens-cache20.se2[0,0,200-0,H], ens-cache4.se2[4,0]\r\naccess-control-allow-origin: *\r\nage: 25987\r\nali-swift-global-savetime: 1778852112\r\nx-cache: HIT TCP_MEM_HIT dirn:-2:-2\r\nx-swift-savetime: Fri, 15 May 2026 13:35:40 GMT\r\nx-swift-cachetime: 31535972\r\nback_uri: /imgextra/i3/O1CN01tjNGe81mH4x7ZSkxl_!!2221328234928-1-fleamarket.gif_.webp\r\nvary: Accept\r\ns-rt: 4\r\ntiming-allow-origin: *\r\neagleid: 2ff62c9817788780990732317e\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Tengine","description":"Tengine is a web server which is based on the Nginx HTTP server.","website":"https://tengine.taobao.org","common_platform_enumeration":"","icon":"Tengine.png","categories":["Web servers"]}],"data":{"size":465085,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 960 x 120","md5":"41559a139c58b477ac8d23d6544a8c71","sha1":"1e25654375bc3881b1bd6ff5ecd43cc8f1b43a37","sha256":"5ce6a7f4c0f118f1163325808a6bd0381ffed31c18201b60bcfce6ba02a64ccf","sha512":"38d2d86ba52bcd2561923d95bdcc231ab7de8f436c4eefa35d57003ff4e3d2382e93a332052a1932635b2d8b27aaf3b07e78d3a636115cd5fa851153a17cfbc0","ssdeep":"12288:aUBS9drrPjKI6YDqSvDVGqjLXtLlBX3XQMmANAYP:aWS9RKIJnd/X3QuP","tlshash":"e6a4231643204bfb437b3dd5803e88b68b5ccda4d2f0b27a84785f99614196de92cf6b","first_seen":"2026-05-15T19:40:59.93251Z","last_seen":"2026-05-15T22:53:29.058466Z","times_seen":10,"resource_available":false,"data":null}},"time_used":651,"timings":{"blocked":-1,"dns":429,"connect":10,"send":0,"wait":101,"receive":54,"ssl":47},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"szssp5.cfd/cn/home/web/template/048wukong9_wtpl/static/css/swiper.min.css","fqdn":"szssp5.cfd","domain":"szssp5.cfd","tld":"cfd"},"ip":{"addr":"154.26.181.150","port":443,"asn":906,"as":"DMIT","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://szssp5.cfd/s/M%E7%94%B7.html","date":"2026-05-15T20:48:17.363Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.szssp5.cfd","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Apr 2026 06:02:14 GMT","end":"Sun, 26 Jul 2026 06:02:13 GMT"},"fingerprint":{"sha1":"56:AF:D3:CA:15:EA:D2:D9:58:15:D6:47:A3:38:1F:B5:54:A7:F2:D9","sha256":"79:A4:A1:CB:D4:EA:DC:A8:10:34:6A:B9:56:FF:B0:A4:24:16:D6:C4:B9:D2:2F:0D:92:2D:BD:1B:EB:5C:01:EE"}}},"request":{"raw":"GET /cn/home/web/template/048wukong9_wtpl/static/css/swiper.min.css HTTP/1.1\r\nHost: szssp5.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://szssp5.cfd/s/M%E7%94%B7.html\r\nCookie: PHPSESSID=nj49fn556ooooannkq320e8ooc\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: https://www.xzylm.com\r\ncontent-type: text/css\r\ncontent-length: 17444\r\nlast-modified: Wed, 31 Aug 2022 08:22:02 GMT\r\nvary: Accept-Encoding\r\ncache-control: public, max-age=2592000\r\naccept-ranges: bytes\r\nvia: http/1.1 traffic_server (https://www.xzylm.com [cRs f ])\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":17444,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (17443)","md5":"a33d8d047fa092f535e6d4ab5f418953","sha1":"c3adafa0da11d6d307c3d040dcad0e0abc256fa7","sha256":"82be6dd25e591eec04f52e98624e59dc8db562b320919d0ebc109adb97740bfe","sha512":"8710c7582ba266e331d8c810a1344e35099d7051a0c172fc9f6d588f23b9197c76ad6d63f7403e8ba0934a5a1d99cd708c69f512159215c4f685c146c4818a2c","ssdeep":"192:h0GpaXCO8jrfg5WHmXgyXyzSHF68DJB0Swf:h50CXfgWHfyXyzSl68PK","tlshash":"2572832c17002067f6324f1987c9e77c9715c8839e4368ef6650de48cbba5a9227f79a","first_seen":"2025-08-02T09:35:09.699579Z","last_seen":"2026-05-15T20:49:14.679956Z","times_seen":214,"resource_available":false,"data":null}},"time_used":337,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":276,"receive":61,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"szssp5.cfd/cn/home/web/static/css/a_pc_wap.css","fqdn":"szssp5.cfd","domain":"szssp5.cfd","tld":"cfd"},"ip":{"addr":"154.26.181.150","port":443,"asn":906,"as":"DMIT","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://szssp5.cfd/s/M%E7%94%B7.html","date":"2026-05-15T20:48:17.366Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.szssp5.cfd","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Apr 2026 06:02:14 GMT","end":"Sun, 26 Jul 2026 06:02:13 GMT"},"fingerprint":{"sha1":"56:AF:D3:CA:15:EA:D2:D9:58:15:D6:47:A3:38:1F:B5:54:A7:F2:D9","sha256":"79:A4:A1:CB:D4:EA:DC:A8:10:34:6A:B9:56:FF:B0:A4:24:16:D6:C4:B9:D2:2F:0D:92:2D:BD:1B:EB:5C:01:EE"}}},"request":{"raw":"GET /cn/home/web/static/css/a_pc_wap.css HTTP/1.1\r\nHost: szssp5.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://szssp5.cfd/s/M%E7%94%B7.html\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=nj49fn556ooooannkq320e8ooc\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: https://www.xzylm.com\r\ncontent-type: text/css\r\ncontent-length: 2876\r\nlast-modified: Mon, 24 Oct 2022 09:16:10 GMT\r\nvary: Accept-Encoding\r\ncache-control: public, max-age=2592000\r\naccept-ranges: bytes\r\nvia: http/1.1 traffic_server (https://www.xzylm.com [cRs f ])\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":2876,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"74a8b81d486fd0fab0c1e1a21faf815c","sha1":"3671d10e96160cba777510eafe225a6fab98dbdf","sha256":"db0fd01915d66b5e8e03851256f02c85422be168cf9b2b68ab776878447f9e1c","sha512":"9399229eae7fd56b29d69e0cacc7b2a439aa45fb392df8549e04ed3fd81ee280694bf2a96acebdfc759862fb7a863fcba5e4adc4228c40bb25ac75fbca504226","ssdeep":"","tlshash":"2e515a162b6f2488a80ba1b85fb567686a294053bb0fcc2975547324ff4e78d09b2789","first_seen":"2023-11-16T12:30:34Z","last_seen":"2026-05-15T22:53:29.016944Z","times_seen":10111,"resource_available":false,"data":null}},"time_used":486,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":486,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"szssp5.cfd/cn/home/web/template/048wukong9_wtpl/static/js/mip.js","fqdn":"szssp5.cfd","domain":"szssp5.cfd","tld":"cfd"},"ip":{"addr":"154.26.181.150","port":443,"asn":906,"as":"DMIT","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://szssp5.cfd/s/M%E7%94%B7.html","date":"2026-05-15T20:48:17.371Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.szssp5.cfd","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Apr 2026 06:02:14 GMT","end":"Sun, 26 Jul 2026 06:02:13 GMT"},"fingerprint":{"sha1":"56:AF:D3:CA:15:EA:D2:D9:58:15:D6:47:A3:38:1F:B5:54:A7:F2:D9","sha256":"79:A4:A1:CB:D4:EA:DC:A8:10:34:6A:B9:56:FF:B0:A4:24:16:D6:C4:B9:D2:2F:0D:92:2D:BD:1B:EB:5C:01:EE"}}},"request":{"raw":"GET /cn/home/web/template/048wukong9_wtpl/static/js/mip.js HTTP/1.1\r\nHost: szssp5.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://szssp5.cfd/s/M%E7%94%B7.html\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=nj49fn556ooooannkq320e8ooc\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: https://www.xzylm.com\r\ncontent-type: application/javascript\r\ncontent-length: 276884\r\nlast-modified: Sat, 19 Nov 2022 09:42:34 GMT\r\nvary: Accept-Encoding\r\ncache-control: public, max-age=2592000\r\naccept-ranges: bytes\r\nvia: http/1.1 traffic_server (https://www.xzylm.com [cRs f ])\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":276884,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"07137c33f9c8e6be77e6ef9f588ff940","sha1":"510e4cdb88e33cb7b7165b754152f1c1e8fd4dc9","sha256":"60fb02ae6419b82ea31e32d0b7ada3bc6c6c61656b4da834ff32caf21eb098da","sha512":"90f158afa316c5f59f615af89f02d46283151401a9f56ff816a43ab4d67ed399d99e438aca3f2519aebae413207cd430921a0666ba131227b41009467e318713","ssdeep":"3072:DPcFeTXTHajgpXuwfaB7cR2pBfuX2Udsc9K+DZJcfftvgPENLtCBWQO:DyeTXTLtaBIE5UYfObwX","tlshash":"3f44e79d72c2b07146e73175a43f220bb2362964588d8054f23ad8da7db9d4e9237fbc","first_seen":"2025-08-02T09:35:09.713131Z","last_seen":"2026-05-15T20:49:14.680975Z","times_seen":218,"resource_available":true,"data":null}},"time_used":838,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":649,"receive":189,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"szssp5.cfd/cn/home/web/template/048wukong9_wtpl/static/js/mip-gototop.js","fqdn":"szssp5.cfd","domain":"szssp5.cfd","tld":"cfd"},"ip":{"addr":"154.26.181.150","port":443,"asn":906,"as":"DMIT","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://szssp5.cfd/s/M%E7%94%B7.html","date":"2026-05-15T20:48:17.373Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.szssp5.cfd","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Apr 2026 06:02:14 GMT","end":"Sun, 26 Jul 2026 06:02:13 GMT"},"fingerprint":{"sha1":"56:AF:D3:CA:15:EA:D2:D9:58:15:D6:47:A3:38:1F:B5:54:A7:F2:D9","sha256":"79:A4:A1:CB:D4:EA:DC:A8:10:34:6A:B9:56:FF:B0:A4:24:16:D6:C4:B9:D2:2F:0D:92:2D:BD:1B:EB:5C:01:EE"}}},"request":{"raw":"GET /cn/home/web/template/048wukong9_wtpl/static/js/mip-gototop.js HTTP/1.1\r\nHost: szssp5.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://szssp5.cfd/s/M%E7%94%B7.html\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=nj49fn556ooooannkq320e8ooc\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: https://www.xzylm.com\r\ncontent-type: application/javascript\r\ncontent-length: 10252\r\nlast-modified: Sat, 19 Nov 2022 09:30:44 GMT\r\nvary: Accept-Encoding\r\ncache-control: public, max-age=2592000\r\naccept-ranges: bytes\r\nvia: http/1.1 traffic_server (https://www.xzylm.com [cRs f ])\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":10252,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (10252), with no line terminators","md5":"583707aba1e5df6065b6600f9c7cfb69","sha1":"c2840e5c472daafa5c8439a13eadb5b327aba2a3","sha256":"19dc43f98e7cc852c3c9f1004eb8d9b5e893ee6fcf6ca01b06b791c25217f615","sha512":"dcc6a1995e86a8b0d272a744e3dbe143d96906e44c25e3da8c7a5f9382771e73cea87ee72e2bd025bf13b5d75973af00214aa3223c9722c224cca3b36e7587f9","ssdeep":"192:XIbh40TwiuunhBReytnV0bp/qp/KBdZVyrE:XIbaUwrcBRxPOhJdZb","tlshash":"5d22f99931d1b0e2c3f7b1a0522f5647d6fb98914949c880ea56e5f3be26b3d0123f2c","first_seen":"2023-03-07T12:27:14Z","last_seen":"2026-05-15T20:49:14.682336Z","times_seen":325,"resource_available":true,"data":null}},"time_used":844,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":844,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pic6.sex8sex866.com/20260411/lEExBTkI/1.jpg","fqdn":"pic6.sex8sex866.com","domain":"sex8sex866.com","tld":"com"},"ip":{"addr":"216.180.234.211","port":443,"asn":47191,"as":"blue tech technology Co., Limited","country":"British Virgin Islands","country_code":"VG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://szssp5.cfd/s/M%E7%94%B7.html","date":"2026-05-15T20:48:18.398Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pic6.sex8sex866.com","organization":""},"issuer":{"commonName":"Certum DV TLS G2 R39 CA","organization":"Asseco Data Systems S.A."},"validity":{"start":"Wed, 01 Apr 2026 16:29:21 GMT","end":"Sat, 17 Oct 2026 16:29:20 GMT"},"fingerprint":{"sha1":"F6:97:4D:CD:4C:BF:51:CD:C3:31:C2:9C:7E:2F:DF:E5:F5:8A:7B:DF","sha256":"4A:96:D4:C7:4A:0A:1B:A1:A5:44:AD:6C:FF:18:E9:E4:78:A5:67:46:4B:7F:12:5D:F0:68:EA:27:4A:8E:F5:B5"}}},"request":{"raw":"GET /20260411/lEExBTkI/1.jpg HTTP/1.1\r\nHost: pic6.sex8sex866.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://szssp5.cfd/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-headers: X-Requested-With\r\naccess-control-allow-methods: POST, GET, OPTIONS\r\naccess-control-allow-origin: *\r\ncontent-disposition: attachment; filename=\"1.jpg\"\r\ncontent-type: application/octet-stream\r\ndate: Wed, 13 May 2026 16:17:07 GMT\r\netag: \"69dadcbc-31261\"\r\nlast-modified: Wed, 13 May 2026 17:34:45 GMT\r\nserver: nginx\r\nx-cache: HIT, policy, disk\r\ncontent-length: 201313\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":201313,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, baseline, precision 8, 800x538, components 3","md5":"2f1d24f29b0ff9ea866825f442283798","sha1":"9534b7fdfb9f51d1b9c256c0907eb87ba24c50fa","sha256":"64ec36abe1ca518a2245bf483724e67ef3a28d9cb841d8110212f54ddab71506","sha512":"53419356fbe738fc79f2d1a107f6a7f8bd4d9e7e495cdcf1939ddd171012d98d848b83683d8039ccbb1516bf61a8e147892c62cbf4bf2e3343ed4a41ce1b6162","ssdeep":"6144:pH6hZpsZqQ55LTBqHmWvU0oH5XmXNrfmmdmv8DLx:Kk83U/ZWdrmmw8DLx","tlshash":"0714233c57c21f700fbe58a0e1563bdb19db21b5b6453a1c24894f528ff169872e28af","first_seen":"2026-05-15T20:49:14.682902Z","last_seen":"2026-05-15T20:49:14.682902Z","times_seen":1,"resource_available":false,"data":null}},"time_used":2304,"timings":{"blocked":-1,"dns":2,"connect":160,"send":0,"wait":159,"receive":618,"ssl":1413},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"picc.sex8sex855.com/20260409/RZfejpPI/1.jpg","fqdn":"picc.sex8sex855.com","domain":"sex8sex855.com","tld":"com"},"ip":{"addr":"216.180.228.179","port":443,"asn":47191,"as":"blue tech technology Co., Limited","country":"British Virgin Islands","country_code":"VG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://szssp5.cfd/s/M%E7%94%B7.html","date":"2026-05-15T20:48:18.400Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"picc.sex8sex855.com","organization":""},"issuer":{"commonName":"Certum DV TLS G2 R39 CA","organization":"Asseco Data Systems S.A."},"validity":{"start":"Wed, 01 Apr 2026 06:45:04 GMT","end":"Sat, 17 Oct 2026 06:45:03 GMT"},"fingerprint":{"sha1":"B2:85:5D:6E:A1:25:57:02:3B:0C:5B:F6:C6:E5:B0:36:14:4B:1F:BF","sha256":"1C:64:E1:7C:39:6E:84:07:C1:19:23:7F:1F:9F:CA:91:58:53:31:21:F5:9D:2F:B5:27:DD:EE:E0:E6:F0:7B:3F"}}},"request":{"raw":"GET /20260409/RZfejpPI/1.jpg HTTP/1.1\r\nHost: picc.sex8sex855.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://szssp5.cfd/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-headers: X-Requested-With\r\naccess-control-allow-methods: POST, GET, OPTIONS\r\naccess-control-allow-origin: *\r\ncontent-disposition: attachment; filename=\"1.jpg\"\r\ncontent-type: application/octet-stream\r\ndate: Fri, 15 May 2026 12:24:13 GMT\r\netag: \"69d79431-2fc20\"\r\nlast-modified: Fri, 15 May 2026 12:24:14 GMT\r\nserver: nginx\r\nx-cache: HIT, policy, disk\r\ncontent-length: 195616\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":195616,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 800x538, components 3","md5":"c4e8f73f74bede7dbdfd2ffbc347cb4c","sha1":"51d631b71ce705c014c164c5bbe53aedd1c45178","sha256":"25681e0f3ac9faecd4ff64466b1d68f50c5626d4077c6eabfe4a516ed6c902df","sha512":"ea974f7257a7d05958787609e97a9873bae9667e1e72ad8ff2b21609849de25c54bcaec9b946bd222defd30e5e29112416196b7e5f8738e0213802809f752982","ssdeep":"3072:P6IsW6MjL90Zysbu8Nsa11D7GhjHCkOnZVX6ZQ0jBU+WTDxRXEJkM7l8IG:P3sYelbpNsY1DDkuZF6M+WTNUldG","tlshash":"fd1413863e861e94745dac4175a077fbb76bae41b3bf906e5cc393e0d3642c0cc92692","first_seen":"2026-05-15T20:49:14.683777Z","last_seen":"2026-05-15T20:49:14.683777Z","times_seen":1,"resource_available":false,"data":null}},"time_used":2245,"timings":{"blocked":11,"dns":4,"connect":160,"send":0,"wait":161,"receive":564,"ssl":1341},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"txdy.syjcxh.com/960x120.gif","fqdn":"txdy.syjcxh.com","domain":"syjcxh.com","tld":"com"},"ip":{"addr":"157.185.128.120","port":443,"asn":54994,"as":"ML-1432-54994","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://szssp5.cfd/s/M%E7%94%B7.html","date":"2026-05-15T20:48:18.686Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"txdy.syjcxh.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 13 Apr 2026 12:17:14 GMT","end":"Sun, 12 Jul 2026 12:17:13 GMT"},"fingerprint":{"sha1":"F7:11:0D:DB:5E:37:48:00:93:B3:08:D8:B7:A6:11:79:95:A6:45:EE","sha256":"1C:DA:C8:BB:F3:D8:96:F1:57:A6:5E:29:34:DA:40:22:A9:CF:90:8E:05:43:88:22:7F:2D:3F:AB:28:76:39:46"}}},"request":{"raw":"GET /960x120.gif HTTP/1.1\r\nHost: txdy.syjcxh.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://szssp5.cfd/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 15 May 2026 20:48:21 GMT\r\ncontent-type: image/gif\r\ncontent-length: 119760\r\nserver: nginx\r\nlast-modified: Mon, 29 Dec 2025 06:33:05 GMT\r\nvary: Accept-Encoding\r\netag: \"695220a1-1d3d0\"\r\ncache-control: max-age=2592000\r\naccept-ranges: bytes\r\nvia: 1.1 PS-ORD-04IO2150:12 (W), 1.1 PS-FRA-01AmK53:13 (W), 0.0 PS-CDG-04gzn111:1 (W)\r\nx-ws-request-id: 6a078695_PS-CDG-04gzn111_61711-15247\r\nx-px: ht PS-CDG-04gzn111none\r\nage: 571217\r\nexpires: Mon, 08 Jun 2026 06:08:04 GMT\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":119760,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 960 x 120","md5":"149b6d51518d57a39011a6971132ffa2","sha1":"529eeaead1047e4eddd186cfad5015aa987c4e14","sha256":"72c2db6b6259e584134783af7112131d031638bd29be489d53f58d7db2a8b7fb","sha512":"2e2e211b2e27bb10b1deed4cb4460866eeaff5ae5bcac6a550d7906225add955ad68ae8efdf5133d8fb7783a29d00cb72d170af8305c4fd510b5e3ea5a0a155f","ssdeep":"3072:l/GDzsUvQAUdTbhVQ3VFYDAoY/JJM6jqYm433v1:u4UI3TbKVcYDMFQ339","tlshash":"36c3123b424b4782376d70b07bf1e6058186800eae7a3597a562ca870fb1e7585ddc93","first_seen":"2025-12-29T08:49:02.459481Z","last_seen":"2026-05-15T22:41:12.005271Z","times_seen":5714,"resource_available":false,"data":null}},"time_used":2446,"timings":{"blocked":-1,"dns":1991,"connect":27,"send":0,"wait":28,"receive":33,"ssl":367},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"szssp5.cfd/cn/home/web/template/048wukong9_wtpl/static/css/style.css","fqdn":"szssp5.cfd","domain":"szssp5.cfd","tld":"cfd"},"ip":{"addr":"154.26.181.150","port":443,"asn":906,"as":"DMIT","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://szssp5.cfd/s/M%E7%94%B7.html","date":"2026-05-15T20:48:17.365Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.szssp5.cfd","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Apr 2026 06:02:14 GMT","end":"Sun, 26 Jul 2026 06:02:13 GMT"},"fingerprint":{"sha1":"56:AF:D3:CA:15:EA:D2:D9:58:15:D6:47:A3:38:1F:B5:54:A7:F2:D9","sha256":"79:A4:A1:CB:D4:EA:DC:A8:10:34:6A:B9:56:FF:B0:A4:24:16:D6:C4:B9:D2:2F:0D:92:2D:BD:1B:EB:5C:01:EE"}}},"request":{"raw":"GET /cn/home/web/template/048wukong9_wtpl/static/css/style.css HTTP/1.1\r\nHost: szssp5.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://szssp5.cfd/s/M%E7%94%B7.html\r\nCookie: PHPSESSID=nj49fn556ooooannkq320e8ooc\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: https://www.xzylm.com\r\ncontent-type: text/css\r\ncontent-length: 40664\r\nlast-modified: Wed, 30 Nov 2022 11:58:54 GMT\r\nvary: Accept-Encoding\r\ncache-control: public, max-age=2592000\r\naccept-ranges: bytes\r\nvia: http/1.1 traffic_server (https://www.xzylm.com [cRs f ])\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":40664,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (40656), with no line terminators","md5":"591bb51e8d776a19d76b75f8a656370e","sha1":"b82ffeca7428a51300ebd19ab0570aec8ae52ef3","sha256":"eef5777c2518016a7938e4719c7c73e7faec36726ee6608c4ea5c20dfe1a7a13","sha512":"e9c0815717446aa149a4fa4f3a286ed8eb8b9265341f7fcea0885d30554e5b68dd02999ad319566a6b97cc79180b001c368af7b3be29f642289663be85b80566","ssdeep":"384:KgDegEMjrGsn3QMzWl9iiDs2zbtpXKMURxYuMo/Brx5PuJUkb+9ncuJgfAKfmHIi:KZsn3QMOzbqMUzDAJUkbEEYwmHh","tlshash":"c203e62197d8212db223eb52b6c1b7ad7524c627f2530fbefd51763cc88649a267234c","first_seen":"2025-08-02T09:35:09.663896Z","last_seen":"2026-05-15T20:49:14.687979Z","times_seen":211,"resource_available":false,"data":null}},"time_used":480,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":398,"receive":82,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"szssp5.cfd/cn/home/web/template/048wukong9_wtpl/static/js/mip-cambrian.js","fqdn":"szssp5.cfd","domain":"szssp5.cfd","tld":"cfd"},"ip":{"addr":"154.26.181.150","port":443,"asn":906,"as":"DMIT","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://szssp5.cfd/s/M%E7%94%B7.html","date":"2026-05-15T20:48:17.377Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.szssp5.cfd","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Apr 2026 06:02:14 GMT","end":"Sun, 26 Jul 2026 06:02:13 GMT"},"fingerprint":{"sha1":"56:AF:D3:CA:15:EA:D2:D9:58:15:D6:47:A3:38:1F:B5:54:A7:F2:D9","sha256":"79:A4:A1:CB:D4:EA:DC:A8:10:34:6A:B9:56:FF:B0:A4:24:16:D6:C4:B9:D2:2F:0D:92:2D:BD:1B:EB:5C:01:EE"}}},"request":{"raw":"GET /cn/home/web/template/048wukong9_wtpl/static/js/mip-cambrian.js HTTP/1.1\r\nHost: szssp5.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://szssp5.cfd/s/M%E7%94%B7.html\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=nj49fn556ooooannkq320e8ooc\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: https://www.xzylm.com\r\ncontent-type: application/javascript\r\ncontent-length: 856\r\nlast-modified: Sat, 19 Nov 2022 09:30:42 GMT\r\ncache-control: public, max-age=2592000\r\naccept-ranges: bytes\r\nvia: http/1.1 traffic_server (https://www.xzylm.com [cRs f ])\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":856,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (856), with no line terminators","md5":"2e1ef943eb417c2324aafed99ed4a6ff","sha1":"0a0d1a81d129599b74cf64868d818a82a95e371f","sha256":"09da74720c6659d49e7f1acd595192c8b28699dc65565b33f90d9cad83e167bf","sha512":"abf11c78e9e50083657fd20b863e55e15ce25edd89583c657f427f6d852db77f802bc26ed1a2b256f710d7af7174e7b9104b103e30fc6c49affa1f41720c6e01","ssdeep":"","tlshash":"a3115c18b941b463baf53155bb3f334864f94b68dd44464563d38cf82eb75ca9810754","first_seen":"2023-03-08T01:02:30Z","last_seen":"2026-05-15T20:49:14.688701Z","times_seen":538,"resource_available":true,"data":null}},"time_used":852,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":852,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"szssp5.cfd/cn/home/web/template/048wukong9_wtpl/static/js/mip-form.js","fqdn":"szssp5.cfd","domain":"szssp5.cfd","tld":"cfd"},"ip":{"addr":"154.26.181.150","port":443,"asn":906,"as":"DMIT","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://szssp5.cfd/s/M%E7%94%B7.html","date":"2026-05-15T20:48:17.378Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.szssp5.cfd","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Apr 2026 06:02:14 GMT","end":"Sun, 26 Jul 2026 06:02:13 GMT"},"fingerprint":{"sha1":"56:AF:D3:CA:15:EA:D2:D9:58:15:D6:47:A3:38:1F:B5:54:A7:F2:D9","sha256":"79:A4:A1:CB:D4:EA:DC:A8:10:34:6A:B9:56:FF:B0:A4:24:16:D6:C4:B9:D2:2F:0D:92:2D:BD:1B:EB:5C:01:EE"}}},"request":{"raw":"GET /cn/home/web/template/048wukong9_wtpl/static/js/mip-form.js HTTP/1.1\r\nHost: szssp5.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://szssp5.cfd/s/M%E7%94%B7.html\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=nj49fn556ooooannkq320e8ooc\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: https://www.xzylm.com\r\ncontent-type: application/javascript\r\ncontent-length: 22161\r\nlast-modified: Sat, 19 Nov 2022 09:30:43 GMT\r\nvary: Accept-Encoding\r\ncache-control: public, max-age=2592000\r\naccept-ranges: bytes\r\nvia: http/1.1 traffic_server (https://www.xzylm.com [cRs f ])\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":22161,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (22161), with no line terminators","md5":"bd4b2d14ce81699aad672ff23c07bc6f","sha1":"27450785cbfe4595ae2d5b60dbc3833061c4f415","sha256":"ae1ba67c149239a12359c73899c8f268e5175fc3e15d73bd1a0ddcddc5c1482a","sha512":"bc9701b278c040a5455bd125392b3505390495745de26100a0750b6b3e471da56b44e3aa1ed0aaf7c133565cd77c314f54423aceb228969764a7dd4064a8c336","ssdeep":"384:/4KyJ94z34A4iO7By2Cv9RKDyXcTgcPmMxW1xMNlcGOwefVqNbFZ5G0i:AWBTnK9TgcOMwHMN6me6Z5s","tlshash":"1aa2f95932e1b0f38bba71b5505f724ba2f754548c89c440e962d8e19e7ee6e0223f7c","first_seen":"2023-03-11T21:27:26Z","last_seen":"2026-05-15T20:49:14.689276Z","times_seen":254,"resource_available":true,"data":null}},"time_used":858,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":852,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"szssp5.cfd/000/flink/analytics.php","fqdn":"szssp5.cfd","domain":"szssp5.cfd","tld":"cfd"},"ip":{"addr":"154.26.181.150","port":443,"asn":906,"as":"DMIT","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://szssp5.cfd/s/M%E7%94%B7.html","date":"2026-05-15T20:48:18.017Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.szssp5.cfd","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Apr 2026 06:02:14 GMT","end":"Sun, 26 Jul 2026 06:02:13 GMT"},"fingerprint":{"sha1":"56:AF:D3:CA:15:EA:D2:D9:58:15:D6:47:A3:38:1F:B5:54:A7:F2:D9","sha256":"79:A4:A1:CB:D4:EA:DC:A8:10:34:6A:B9:56:FF:B0:A4:24:16:D6:C4:B9:D2:2F:0D:92:2D:BD:1B:EB:5C:01:EE"}}},"request":{"raw":"POST /000/flink/analytics.php HTTP/1.1\r\nHost: szssp5.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://szssp5.cfd/s/M%E7%94%B7.html\r\nContent-type: application/x-www-form-urlencoded\r\nContent-Length: 9\r\nOrigin: https://szssp5.cfd\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=nj49fn556ooooannkq320e8ooc\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":9,"data":"referrer="}},"response":{"raw":"HTTP/2 204 No Content\r\nserver: https://www.xzylm.com\r\ndate: Fri, 15 May 2026 20:48:18 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nage: 0\r\nvia: http/1.1 traffic_server (https://www.xzylm.com [cMs f ])\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-15T22:20:41.080999Z","times_seen":15239822,"resource_available":true,"data":null}},"time_used":219,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":218,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"szssp5.cfd/cn/home/web/template/048wukong9_wtpl/static/fonts/icomoon.ttf","fqdn":"szssp5.cfd","domain":"szssp5.cfd","tld":"cfd"},"ip":{"addr":"154.26.181.150","port":443,"asn":906,"as":"DMIT","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://szssp5.cfd/s/M%E7%94%B7.html","date":"2026-05-15T20:48:18.095Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.szssp5.cfd","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Apr 2026 06:02:14 GMT","end":"Sun, 26 Jul 2026 06:02:13 GMT"},"fingerprint":{"sha1":"56:AF:D3:CA:15:EA:D2:D9:58:15:D6:47:A3:38:1F:B5:54:A7:F2:D9","sha256":"79:A4:A1:CB:D4:EA:DC:A8:10:34:6A:B9:56:FF:B0:A4:24:16:D6:C4:B9:D2:2F:0D:92:2D:BD:1B:EB:5C:01:EE"}}},"request":{"raw":"GET /cn/home/web/template/048wukong9_wtpl/static/fonts/icomoon.ttf HTTP/1.1\r\nHost: szssp5.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://szssp5.cfd/cn/home/web/template/048wukong9_wtpl/static/css/style.css\r\nCookie: PHPSESSID=nj49fn556ooooannkq320e8ooc\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: https://www.xzylm.com\r\ncontent-type: application/octet-stream\r\ncontent-length: 193664\r\nlast-modified: Wed, 31 Aug 2022 08:22:02 GMT\r\naccept-ranges: bytes\r\nvia: http/1.1 traffic_server (https://www.xzylm.com [cRs f ])\r\ncache-control: public, max-age=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":193664,"size_decoded":0,"mime_type":"application/octet-stream","magic":"TrueType Font data, 13 tables, 1st \"FFTM\", 14 names, Macintosh, type 1 string","md5":"72fc5c88506f5af1f97c3b5cbd8e263c","sha1":"cd04541ffcb510a49da73d3405d5c70de8f38446","sha256":"db1bcba340a005700bde0279901c645e98ee12671a9e33a7a7b48bb950ba3b20","sha512":"e2bd442a96fecf793ca128d1828253a011671adc9739b8c782ce7342926baf4b2598aeac52b544be85648609d05c00da8d5b861d8aef41176e37a42551681f84","ssdeep":"3072:4Kij6WAXCzfIUz/JSItCCM0SaHARPyUSZGyRqJrPW7573DwFqQ21a69:ej6tC5/Jvt3M3mgPyUSZGyRqJrO75739","tlshash":"38146c27c2fffd49d6064abf829a121116ee5923772b47066ac13c65fdab0e58cc49cc","first_seen":"2023-04-10T09:40:32Z","last_seen":"2026-05-15T20:49:14.689892Z","times_seen":177,"resource_available":false,"data":null}},"time_used":246,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":194,"receive":52,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img1.souavzy.org/upload/vod/20241008-1/2811a3fdf3e9daf597c702132840ba60.jpg","fqdn":"img1.souavzy.org","domain":"souavzy.org","tld":"org"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://szssp5.cfd/s/M%E7%94%B7.html","date":"2026-05-15T20:48:18.386Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /upload/vod/20241008-1/2811a3fdf3e9daf597c702132840ba60.jpg HTTP/1.1\r\nHost: img1.souavzy.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://szssp5.cfd/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-15T22:20:41.080999Z","times_seen":15239822,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"img1.souavzy.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"img.hrzs168.com:16888/images/edd38a54-e0af-4d32-88d6-e9ce82c33192","fqdn":"img.hrzs168.com","domain":"hrzs168.com","tld":"com"},"ip":{"addr":"172.247.84.2","port":16888,"asn":40065,"as":"CNSERVERS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://szssp5.cfd/s/M%E7%94%B7.html","date":"2026-05-15T20:48:18.600Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.hrzs168.com","organization":""},"issuer":{"commonName":"CNSSL DV TLS G2 R36 CA","organization":"Henan Fierce Fire Network Technology Co., Ltd."},"validity":{"start":"Fri, 17 Apr 2026 09:44:21 GMT","end":"Mon, 02 Nov 2026 09:44:20 GMT"},"fingerprint":{"sha1":"BE:6A:AC:89:8E:31:6C:14:AC:2D:A1:A3:75:C6:3C:4E:33:07:67:37","sha256":"0F:E7:40:36:B1:53:45:AE:B0:0D:CB:4C:D1:4D:68:83:95:2F:4C:AF:73:64:E1:4D:7A:A2:1B:B9:65:49:20:F3"}}},"request":{"raw":"GET /images/edd38a54-e0af-4d32-88d6-e9ce82c33192 HTTP/1.1\r\nHost: img.hrzs168.com:16888\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://szssp5.cfd/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, POST, PUT, DELETE\r\naccess-control-allow-origin: *\r\ncache-control: max-age=86400\r\ndate: Fri, 15 May 2026 20:48:21 GMT\r\nlocation: https://img.alicdn.com/imgextra/i4/O1CN01BjC39J1VkzHdLJRwF_!!6000000002692-1-cib.gif\r\nserver: nginx\r\nx-cache: HIT\r\ncontent-length: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":321245,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-15T22:20:41.080999Z","times_seen":15239822,"resource_available":true,"data":null}},"time_used":2730,"timings":{"blocked":-1,"dns":969,"connect":160,"send":0,"wait":323,"receive":0,"ssl":1277},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xm2026.myxuanxuan.com/8888/pg507/pg120.gif","fqdn":"xm2026.myxuanxuan.com","domain":"myxuanxuan.com","tld":"com"},"ip":{"addr":"45.8.115.46","port":443,"asn":4785,"as":"xTom","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://szssp5.cfd/s/M%E7%94%B7.html","date":"2026-05-15T20:48:18.649Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xm2026.myxuanxuan.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 20 Mar 2026 05:32:24 GMT","end":"Thu, 18 Jun 2026 05:32:23 GMT"},"fingerprint":{"sha1":"C9:80:5C:10:10:71:28:9C:32:A4:D9:45:EA:59:20:E7:31:A6:C8:41","sha256":"6F:9D:8C:C6:00:E1:76:75:24:64:21:39:FB:B5:85:BE:35:1B:FA:B8:1B:57:9E:EB:3C:6F:9F:88:AE:DF:A6:D2"}}},"request":{"raw":"GET /8888/pg507/pg120.gif HTTP/1.1\r\nHost: xm2026.myxuanxuan.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://szssp5.cfd/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 15 May 2026 20:48:21 GMT\r\ncontent-type: image/gif\r\ncontent-length: 732135\r\nstrict-transport-security: max-age=31536000\r\nlast-modified: Mon, 05 May 2025 10:11:05 GMT\r\netag: \"68188eb9-b2be7\"\r\nexpires: Thu, 11 Jun 2026 08:33:47 GMT\r\ncache-control: max-age=2592000\r\nserver: nginx\r\nx-cache-status: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":732135,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 960 x 120","md5":"d812f0151d7042065067e76fe039facc","sha1":"a48f9c692fa3916903db45819d4050f52d747a33","sha256":"849c1d8c67e9a3151b4a14d3b70e23e4abc3649dcac2e397587afedc70dcf25e","sha512":"a082dff74f4a12e121b6f185ba58d228399af7fa6f50df9d8a891c42d01724d7381842985926980c2e35d1f4b352ff7b425000682f6bdbb0038153d9893ff43f","ssdeep":"12288:RzuTwzuTwzuTwzuTFs9yJuVwrVwrVwrVwrV5eGrQSoSoSoSKDu4OVDu4OVDu4OVQ:RuTeuTeuTeuTFw1WrWrWrWrjeGkSoSoV","tlshash":"43f42339d14794a6938b0a7b9f1411a46305de26a7f220398327f987bc46793ffdb80d","first_seen":"2025-11-21T00:36:15.392801Z","last_seen":"2026-05-15T22:53:29.055579Z","times_seen":9115,"resource_available":false,"data":null}},"time_used":4251,"timings":{"blocked":-1,"dns":1266,"connect":279,"send":0,"wait":298,"receive":1568,"ssl":840},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.alicdn.com/imgextra/i1/4183327079/O1CN01ku36OQ22AEsRZ0PcJ_!!4183327079.gif","fqdn":"img.alicdn.com","domain":"alicdn.com","tld":"com"},"ip":{"addr":"47.246.44.177","port":443,"asn":24429,"as":"Zhejiang Taobao Network Co.,Ltd","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://szssp5.cfd/s/M%E7%94%B7.html","date":"2026-05-15T20:48:18.653Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tbcdn.cn","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Fri, 28 Nov 2025 03:07:13 GMT","end":"Sat, 18 Jul 2026 09:41:04 GMT"},"fingerprint":{"sha1":"01:40:62:EF:8C:E5:C1:8A:19:4C:8D:B6:F5:C2:24:7F:DC:C0:9C:8A","sha256":"60:3C:41:A0:78:62:E6:5E:82:F0:FA:CF:5C:C9:D3:22:E4:64:EE:1A:EE:C7:CC:BA:DD:25:08:90:6F:CC:C4:F2"}}},"request":{"raw":"GET /imgextra/i1/4183327079/O1CN01ku36OQ22AEsRZ0PcJ_!!4183327079.gif HTTP/1.1\r\nHost: img.alicdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://szssp5.cfd/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: Tengine\r\ncontent-type: image/gif\r\ncontent-length: 458828\r\ndate: Wed, 18 Mar 2026 07:37:48 GMT\r\nlast-modified: Wed, 18 Mar 2026 06:48:16 GMT\r\npicasso-ret-code: SUCCESS\r\npicasso-cache-info: L4-HIT\r\nrequest-time: 0.053\r\ntraceid: 9b66a79517738194680598458e\r\nx-powered-by: Picasso\r\npicasso-image-type: normal\r\npicasso-fmt: gif2webp\r\ncache-control: max-age=31536000\r\nvia: ens-cache7.l2de4[0,0,200-0,H], ens-cache26.l2de4[2,0], ens-cache3.se2[0,0,200-0,H], ens-cache4.se2[8,0]\r\naccess-control-allow-origin: *\r\nage: 5058631\r\nali-swift-global-savetime: 1773819468\r\nx-cache: HIT TCP_MEM_HIT dirn:-2:-2\r\nx-swift-savetime: Wed, 18 Mar 2026 12:07:44 GMT\r\nx-swift-cachetime: 31519804\r\nback_uri: /imgextra/i1/4183327079/O1CN01ku36OQ22AEsRZ0PcJ_!!4183327079.gif_.webp\r\nvary: Accept\r\ns-rt: 8\r\ntiming-allow-origin: *\r\neagleid: 2ff62c9817788780990682315e\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Tengine","description":"Tengine is a web server which is based on the Nginx HTTP server.","website":"https://tengine.taobao.org","common_platform_enumeration":"","icon":"Tengine.png","categories":["Web servers"]}],"data":{"size":458828,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 960 x 120","md5":"2b3c4d3731c88099ac4c056d75104f58","sha1":"96491aeaba60f2a58d2c6ca2494aedfbb6c84bfa","sha256":"724db0139f867d89f3b35a6b176c95247d6b044fe208d9a1cb23633886128561","sha512":"1926c9d95c25246789b1bcff615f6211978b72ccbe733bfdcf6937fc646fdadc3f55cb1509078d9db52002322fb8328d4f48160cc46d262f19011f01e98ffda2","ssdeep":"12288:Fgxi0zu8avghU0S5kznxmXtnOPVLoJhVqXTJhV4t03JW/vANd:g8CFS5kAXtnsVLbDRM/vANd","tlshash":"d0a42392d503c222a5a97c3b00b0345363bd78ceac5bf158fe6336379fdaf61519582a","first_seen":"2026-03-22T13:30:44.049868Z","last_seen":"2026-05-15T21:34:28.6284Z","times_seen":1512,"resource_available":false,"data":null}},"time_used":612,"timings":{"blocked":-1,"dns":422,"connect":10,"send":0,"wait":105,"receive":23,"ssl":47},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.alicdn.com/imgextra/i3/4183327079/O1CN019gjCop22AEssNoJAh_!!4183327079.gif","fqdn":"img.alicdn.com","domain":"alicdn.com","tld":"com"},"ip":{"addr":"47.246.44.177","port":443,"asn":24429,"as":"Zhejiang Taobao Network Co.,Ltd","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://szssp5.cfd/s/M%E7%94%B7.html","date":"2026-05-15T20:48:18.655Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tbcdn.cn","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Fri, 28 Nov 2025 03:07:13 GMT","end":"Sat, 18 Jul 2026 09:41:04 GMT"},"fingerprint":{"sha1":"01:40:62:EF:8C:E5:C1:8A:19:4C:8D:B6:F5:C2:24:7F:DC:C0:9C:8A","sha256":"60:3C:41:A0:78:62:E6:5E:82:F0:FA:CF:5C:C9:D3:22:E4:64:EE:1A:EE:C7:CC:BA:DD:25:08:90:6F:CC:C4:F2"}}},"request":{"raw":"GET /imgextra/i3/4183327079/O1CN019gjCop22AEssNoJAh_!!4183327079.gif HTTP/1.1\r\nHost: img.alicdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://szssp5.cfd/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: Tengine\r\ncontent-type: image/gif\r\ncontent-length: 451961\r\ndate: Fri, 17 Apr 2026 07:18:14 GMT\r\npicasso-ret-code: SUCCESS\r\npicasso-cache-info: L3-HIT\r\nrequest-time: 0.001\r\ntraceid: a3b5019d17764102940762867e\r\nx-powered-by: Picasso\r\npicasso-image-type: normal\r\npicasso-fmt: gif2webp\r\ncache-control: max-age=31536000\r\nvia: ens-cache33.l2de4[0,0,200-0,H], ens-cache28.l2de4[1,0], ens-cache17.se2[0,0,200-0,H], ens-cache4.se2[9,0]\r\naccess-control-allow-origin: *\r\nage: 2467805\r\nali-swift-global-savetime: 1776410294\r\nx-cache: HIT TCP_MEM_HIT dirn:-2:-2\r\nx-swift-savetime: Fri, 17 Apr 2026 09:19:41 GMT\r\nx-swift-cachetime: 31528713\r\nback_uri: /imgextra/i3/4183327079/O1CN019gjCop22AEssNoJAh_!!4183327079.gif_.webp\r\nvary: Accept\r\ns-rt: 9\r\ntiming-allow-origin: *\r\neagleid: 2ff62c9817788780990622311e\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Tengine","description":"Tengine is a web server which is based on the Nginx HTTP server.","website":"https://tengine.taobao.org","common_platform_enumeration":"","icon":"Tengine.png","categories":["Web servers"]}],"data":{"size":451961,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 960 x 120","md5":"831710bb840bed9ced5779c1a2c1681b","sha1":"3bd57c0f6f81a5240a39fffd331643c28d90e12c","sha256":"5aa3c5140e47cb1f67c8ed9e6076d6087e5cac802a9210de37ae239e85873e06","sha512":"b1edb9b61e319e379a7486c24ee6f42415db973f0c3a842ab377852c9b7f5a2a42264d286382bd1b83ea7cdd64f98a4e12921444ac3b59ee840841b9a713fc5e","ssdeep":"12288:q/0Vf//0Vf//0Vf7R22fR22fRsV3mczrum57g7g7a:q/0VH/0VH/0VzRdfRdfR1Oxssa","tlshash":"fda42376a0220b9c1927159de66c2bf315f66888478325cf0e7ae92fe54b350173ef93","first_seen":"2026-04-19T12:12:58.193819Z","last_seen":"2026-05-15T21:34:28.636376Z","times_seen":894,"resource_available":false,"data":null}},"time_used":687,"timings":{"blocked":-1,"dns":421,"connect":10,"send":0,"wait":90,"receive":121,"ssl":39},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"a0428.ky308tc0428.vip/gggg/711-960-120.gif","fqdn":"a0428.ky308tc0428.vip","domain":"ky308tc0428.vip","tld":"vip"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://szssp5.cfd/s/M%E7%94%B7.html","date":"2026-05-15T20:48:18.732Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /gggg/711-960-120.gif HTTP/1.1\r\nHost: a0428.ky308tc0428.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://szssp5.cfd/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-15T22:20:41.080999Z","times_seen":15239822,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.alicdn.com/imgextra/i2/O1CN013lawhW1mH4wz2egHr_!!2221328234928-1-fleamarket.gif","fqdn":"img.alicdn.com","domain":"alicdn.com","tld":"com"},"ip":{"addr":"47.246.44.177","port":443,"asn":24429,"as":"Zhejiang Taobao Network Co.,Ltd","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://szssp5.cfd/s/M%E7%94%B7.html","date":"2026-05-15T20:48:18.736Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tbcdn.cn","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Fri, 28 Nov 2025 03:07:13 GMT","end":"Sat, 18 Jul 2026 09:41:04 GMT"},"fingerprint":{"sha1":"01:40:62:EF:8C:E5:C1:8A:19:4C:8D:B6:F5:C2:24:7F:DC:C0:9C:8A","sha256":"60:3C:41:A0:78:62:E6:5E:82:F0:FA:CF:5C:C9:D3:22:E4:64:EE:1A:EE:C7:CC:BA:DD:25:08:90:6F:CC:C4:F2"}}},"request":{"raw":"GET /imgextra/i2/O1CN013lawhW1mH4wz2egHr_!!2221328234928-1-fleamarket.gif HTTP/1.1\r\nHost: img.alicdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://szssp5.cfd/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: Tengine\r\ncontent-type: image/gif\r\ncontent-length: 369882\r\ndate: Tue, 05 May 2026 05:46:09 GMT\r\nlast-modified: Tue, 05 May 2026 05:46:05 GMT\r\npicasso-ret-code: SUCCESS\r\npicasso-cache-info: L4-HIT\r\nrequest-time: 0.013\r\ntraceid: 2b6d569b17779599691454195e\r\nx-powered-by: Picasso\r\npicasso-image-type: normal\r\npicasso-fmt: gif2webp\r\ncache-control: max-age=31536000\r\nvia: ens-cache25.l2de4[0,0,200-0,H], ens-cache35.l2de4[1,0], ens-cache12.se2[0,0,200-0,H], ens-cache4.se2[9,0]\r\naccess-control-allow-origin: *\r\nage: 918130\r\nali-swift-global-savetime: 1777959969\r\nx-cache: HIT TCP_MEM_HIT dirn:-2:-2\r\nx-swift-savetime: Tue, 05 May 2026 06:13:54 GMT\r\nx-swift-cachetime: 31534335\r\nback_uri: /imgextra/i2/O1CN013lawhW1mH4wz2egHr_!!2221328234928-1-fleamarket.gif_.webp\r\nvary: Accept\r\ns-rt: 9\r\ntiming-allow-origin: *\r\neagleid: 2ff62c9817788780990622309e\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Tengine","description":"Tengine is a web server which is based on the Nginx HTTP server.","website":"https://tengine.taobao.org","common_platform_enumeration":"","icon":"Tengine.png","categories":["Web servers"]}],"data":{"size":369882,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 960 x 120","md5":"2c788f40d3ba79d0803025f0e7c9e699","sha1":"71c2d9fd33182e6db53965dd4fd2e408e4e0d659","sha256":"e40de68c0b51723b49489887b871a18b753ef99e15ed17805a8f4fabd4bbc459","sha512":"f92b623888a6dead318851567d43210e701fba7580128e219bc815e0f45a1162e41548c2af49efadfb2c8481c555a138dfffcf3bd112440f4f03448db6e57184","ssdeep":"6144:H1pFUhIlz8UT0VRgFPkuE82u21gB0BAjkP93DqWJy7mEepOiilOANOHjcdgxbxrn:HZUhIlz8UT0c082u2lowry7mVoiilOA4","tlshash":"d5742358f6e98f627dbd4020302b9e0797447ca51cac723b7438b769e2c21fe6a55f21","first_seen":"2026-05-07T01:19:54.910813Z","last_seen":"2026-05-15T21:34:28.650952Z","times_seen":95,"resource_available":false,"data":null}},"time_used":448,"timings":{"blocked":338,"dns":0,"connect":0,"send":0,"wait":89,"receive":21,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.yuinvl-293528.cc/1727xpj/1727xpj960u120.gif","fqdn":"www.yuinvl-293528.cc","domain":"yuinvl-293528.cc","tld":"cc"},"ip":{"addr":"5.252.22.230","port":443,"asn":44477,"as":"Stark Industries Solutions Ltd","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://szssp5.cfd/s/M%E7%94%B7.html","date":"2026-05-15T20:48:18.792Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.yuinvl-293528.cc","organization":""},"issuer":{"commonName":"ZeroSSL RSA DV SSL CA 2","organization":"ZeroSSL GmbH"},"validity":{"start":"Wed, 22 Apr 2026 00:00:00 GMT","end":"Tue, 21 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"F7:58:05:91:CA:D8:90:1F:F1:3B:0B:5F:87:33:76:EE:03:FE:10:4F","sha256":"E2:22:29:40:06:36:71:E7:44:F4:80:F4:C0:F3:2E:53:AB:0C:86:AB:44:BB:FC:31:94:5F:DB:A4:15:76:D0:05"}}},"request":{"raw":"GET /1727xpj/1727xpj960u120.gif HTTP/1.1\r\nHost: www.yuinvl-293528.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://szssp5.cfd/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 15 May 2026 20:48:22 GMT\r\ncontent-type: image/gif\r\ncontent-length: 657606\r\nlast-modified: Fri, 08 May 2026 17:07:45 GMT\r\netag: \"a08c6-651516f7e1a40\"\r\ncl-cache-status: HIT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":657606,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 960 x 120","md5":"d523986b279ada64037894e8ea0411ac","sha1":"a13c52c6ea39c3eabe9ef5fd2f6f9b4a94f043f4","sha256":"77a77897b45e6d198449b76628f65b94a0acf3226a5eb3e50e28021da19a4bb2","sha512":"c9ed10adcc08eb77234976fe1863eec2d897f4228248ffc525d285e7814f0d2c1c82ca8ed59fe14c56a3e46612b17bfb2bac8f8d29f2677fc3450aca24c40dfc","ssdeep":"12288:wM+TvszfI9QWr68wedl77eNLDx3KZjMVwhfHiho3g7MqZJtxoKizjB/QcIOBtVCd:yTvbv28weuDxoMVwRHi0g7HXoRBYcIOK","tlshash":"cde4232d13871cc0ebecd0b9ec143cd5a7b1a01b57867b36b569e276c8b451342be7a2","first_seen":"2026-05-08T22:19:06.094275Z","last_seen":"2026-05-15T21:34:28.64244Z","times_seen":111,"resource_available":false,"data":null}},"time_used":3473,"timings":{"blocked":-1,"dns":3218,"connect":19,"send":0,"wait":29,"receive":115,"ssl":91},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"szssp5.cfd/cn/home/web/template/048wukong9_wtpl/static/js/zepto.js","fqdn":"szssp5.cfd","domain":"szssp5.cfd","tld":"cfd"},"ip":{"addr":"154.26.181.150","port":443,"asn":906,"as":"DMIT","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://szssp5.cfd/s/M%E7%94%B7.html","date":"2026-05-15T20:48:18.319Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.szssp5.cfd","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Apr 2026 06:02:14 GMT","end":"Sun, 26 Jul 2026 06:02:13 GMT"},"fingerprint":{"sha1":"56:AF:D3:CA:15:EA:D2:D9:58:15:D6:47:A3:38:1F:B5:54:A7:F2:D9","sha256":"79:A4:A1:CB:D4:EA:DC:A8:10:34:6A:B9:56:FF:B0:A4:24:16:D6:C4:B9:D2:2F:0D:92:2D:BD:1B:EB:5C:01:EE"}}},"request":{"raw":"GET /cn/home/web/template/048wukong9_wtpl/static/js/zepto.js HTTP/1.1\r\nHost: szssp5.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://szssp5.cfd/s/M%E7%94%B7.html\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=nj49fn556ooooannkq320e8ooc\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: https://www.xzylm.com\r\ncontent-type: application/javascript\r\ncontent-length: 43650\r\nlast-modified: Sat, 19 Nov 2022 09:38:11 GMT\r\nvary: Accept-Encoding\r\ncache-control: public, max-age=2592000\r\naccept-ranges: bytes\r\nvia: http/1.1 traffic_server (https://www.xzylm.com [cRs f ])\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":43650,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (43649)","md5":"6ee6ccd23c62b72fe2b7867f28e56ffd","sha1":"11c2e7494fcd72d50c17936b12a70eb9f457e4a5","sha256":"e4b42197bdfb4d574edfdf88202a840af46c9ed9db5be4326de80f04c1163378","sha512":"9d7f8eefca381123275d5b874b8d0c2e9606f7fce312934ca55294e54e051284960aa4a2e32ed8374ee534f1e958205b8c53feaaeef8eaff0cebf44ad0188d1b","ssdeep":"768:HNr6znpYhwen2Jfplh7lHCyO0vzcA33Ox4WWfWmeAOuKzuJ9wj+01SI/GtPnrj2/:trMpUwe2Jf/h5HCyO0vzcA33OxUOuKzL","tlshash":"d813b4c87642b47607ab727b51af170bf23b81d6582c80a4f0359de42db4d0a6267fbd","first_seen":"2023-03-08T01:02:30Z","last_seen":"2026-05-15T20:49:14.693062Z","times_seen":526,"resource_available":true,"data":null}},"time_used":165,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":160,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.jkuntupiaxxzz.com/upload/vod/20260418-18/ab0d9f11e01fd87f79c0e3a7061085b5.jpg","fqdn":"www.jkuntupiaxxzz.com","domain":"jkuntupiaxxzz.com","tld":"com"},"ip":{"addr":"64.112.76.43","port":443,"asn":6939,"as":"HURRICANE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://szssp5.cfd/s/M%E7%94%B7.html","date":"2026-05-15T20:48:18.384Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jkuntupiaxxzz.com","organization":""},"issuer":{"commonName":"Certum DV TLS G2 R39 CA","organization":"Asseco Data Systems S.A."},"validity":{"start":"Wed, 21 Jan 2026 12:48:17 GMT","end":"Sat, 20 Feb 2027 12:48:16 GMT"},"fingerprint":{"sha1":"13:B6:FB:03:73:AC:FB:95:B6:AC:D3:EE:C1:74:7E:9C:AC:34:45:34","sha256":"D4:F4:9C:80:D3:FC:BE:AF:59:CE:B4:39:CB:48:78:3E:9E:82:EE:02:8C:F2:13:C4:96:BD:34:C4:AA:F6:D2:54"}}},"request":{"raw":"GET /upload/vod/20260418-18/ab0d9f11e01fd87f79c0e3a7061085b5.jpg HTTP/1.1\r\nHost: www.jkuntupiaxxzz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://szssp5.cfd/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 15 May 2026 20:48:20 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 195672\r\nConnection: keep-alive\r\nLast-Modified: Sat, 18 Apr 2026 01:29:28 GMT\r\nVary: Accept-Encoding\r\nETag: \"69e2de78-2fc58\"\r\nExpires: Mon, 18 May 2026 01:42:45 GMT\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Credentials: true\r\nCache-Control: max-age=2592000, public, max-age=15768000\r\nCache: HIT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":195672,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, baseline, precision 8, 800x537, components 3","md5":"fec7aea1f6813f8b4c90c26d4f3bc907","sha1":"799d49554642073fcb7dbc337e3c4aff4dae0f67","sha256":"fb46faa40e93c1cca2d3118d061d14d803bb5485d175658f013121b2b8e339c7","sha512":"e988787786bc4c43b3382542b381fabf126f17f5d823addb290cc0b11d7e0ff1ef4052c0432a572e7b15b4b95981458eb53712bc36d752afce20fdd9303f6654","ssdeep":"3072:WjcdItmklUcP8gJNpTyucWG3jUgTU4VkSekP+MGMgBYlAd8qalDk0o7yopekr:WjBtmyUcP/JqucX3Y4OS+tEo8qug0GdF","tlshash":"f01423951bc2f5acc1924f37fdd315cb8988f8c6488fd582540ccbaa075ec93b6e1958","first_seen":"2026-05-15T20:49:14.69356Z","last_seen":"2026-05-15T20:49:14.69356Z","times_seen":1,"resource_available":false,"data":null}},"time_used":5680,"timings":{"blocked":2503,"dns":561,"connect":146,"send":0,"wait":188,"receive":472,"ssl":1806},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s.lasha250923.top/upload/vod/20260413-1/cac3b0dfc61c799704a75bb2b04e0da7.jpg","fqdn":"s.lasha250923.top","domain":"lasha250923.top","tld":"top"},"ip":{"addr":"104.20.43.58","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://szssp5.cfd/s/M%E7%94%B7.html","date":"2026-05-15T20:48:18.390Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lasha250923.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 19 Mar 2026 15:44:53 GMT","end":"Wed, 17 Jun 2026 16:43:05 GMT"},"fingerprint":{"sha1":"CB:E1:48:27:BB:47:EC:FE:7B:08:1A:08:FC:B6:E3:F3:95:7B:8D:41","sha256":"73:6F:F9:EC:2A:8E:69:D2:AF:1D:97:F6:07:9E:81:F3:8B:7C:25:7E:27:04:59:F1:DD:86:A2:0F:A1:60:97:43"}}},"request":{"raw":"GET /upload/vod/20260413-1/cac3b0dfc61c799704a75bb2b04e0da7.jpg HTTP/1.1\r\nHost: s.lasha250923.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://szssp5.cfd/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 15 May 2026 20:48:18 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 11260\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\netag: \"69f32b6d-2bfc\"\r\nexpires: Sun, 14 Jun 2026 20:48:15 GMT\r\nlast-modified: Thu, 30 Apr 2026 10:14:05 GMT\r\nserver: cloudflare\r\nx-cache: BYPASS, write file cache failed: over disk size, current: 14380784005120, capacity: 14380706431385\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Jcj6NqIWN8Dy3aBitNExqxS3GTk2Fopd2qzAdcOtYVvYBSn9em5EvYGsYpOj5TgYqCphqse5A9%2B4HI6xbPv9W%2BOBzvaKZJclFuBe%2FgaEr29ojKN0uAvbqwBedPo7fcK3DXxYBw%3D%3D\"}]}\r\ncf-ray: 9fc500b32d5c4c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11260,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, baseline, precision 8, 320x240, components 3","md5":"8be1bb2f0a0dd25ccbdfa5d9d2c1837e","sha1":"9e05bba444dad6fb79b5b1f4ec02ef5c26642512","sha256":"3a1a1b851add0da5098dcc7a3e1d975e0d96d2243f77c1e905117f508a6027c4","sha512":"e6925b0aec5d5b698a19dfc827e2dd364d6fb250c7be81144580fa8c16f469668b19e9dc8625fa6e40d5633c0539c5a6bf2283bbac2226839ccc4a9b29de86d8","ssdeep":"192:8kIYWlPkSbw3MkeMb4nKvZxP2qHfOrz8XYErWnJO/i0zaujErN7:8krWCvlRUW3PzfrXYEFi0Oujqd","tlshash":"ca32cfcd1c04ef4023d5c9fec304e7687b4077ef467ca0a2981789a0a98e09ec26cb5e","first_seen":"2026-05-15T20:49:14.694854Z","last_seen":"2026-05-15T20:49:14.694854Z","times_seen":1,"resource_available":false,"data":null}},"time_used":280,"timings":{"blocked":-1,"dns":4,"connect":1,"send":0,"wait":233,"receive":2,"ssl":34},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}