{"report_id":"d5cd592d-8a46-4105-85a4-90693002e233","version":6,"status":"done","tags":[],"date":"2025-12-13T13:58:31Z","url":{"schema":"http","addr":"www.yhchat.com/c/p/31429","fqdn":"www.yhchat.com","domain":"yhchat.com","tld":"com"},"ip":{"addr":"172.67.159.66","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"www.yhchat.com/c/p/31429","fqdn":"www.yhchat.com","domain":"yhchat.com","tld":"com"},"title":"NetherSX2 |PS2模拟器安卓最新版 红以太模拟器AetherSX2 的增强版-云湖社区","dom":{"size":531036,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (65413)","md5":"7c72cf668e5ec63f803f0425df7bca20","sha1":"610bac5162b47e39ba0a9e4a6de2423f0ebc3dcb","sha256":"d44892d51a9d2805276e6ac106c53ee35291b14246d8a02099675c7f1d07a969","sha512":"637aa49a8199512639588395f74330dc2acdf704b1185b31f81fa6f0548296bbb75b8759748ef5ac9a4389a8c5313ee314a86e12da0175c6ff4a7237655b1822","ssdeep":"6144:6ARRp1i4rdBBJ9hlPvhYsl5OtjZ05OtjZQ2:TlhlPvhD5OtjZ05OtjZQ2","tlshash":"07b4c7646b41303ee5ebc336e4d1b8595931cb12d62f9dbef3a07b184bc698a11e3e05","dom_hash":"domhash8078036154a424d90b7bb823a86fb75f","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"www.yhchat.com/c/p/31429","fqdn":"www.yhchat.com","domain":"yhchat.com","tld":"com"},"ip":{"addr":"172.67.159.66","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-01-17T13:58:31Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-13","alert":"Sinkholed","trigger":"www.yhchat.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null},"summary":[{"fqdn":"www.yhchat.com","ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2022-06-02","domain_rank":0,"first_seen":"2025-05-07T19:39:37.154328Z","last_seen":"2025-11-01T13:29:07.999018Z","alert_count":15,"request_count":15,"received_data":4205906,"sent_data":6787,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Baidu Analytics (百度统计)","description":"Baidu Analytics (百度统计) is a free tool for tracking and reporting traffic data of users visiting your site.","website":"https://tongji.baidu.com/","common_platform_enumeration":"","icon":"Baidu Tongji.png","categories":["Analytics"]},{"name":"Nuxt.js","description":"Nuxt is a Vue framework for developing modern web applications.","website":"https://nuxt.com","common_platform_enumeration":"","icon":"Nuxt.js.svg","categories":["JavaScript frameworks","Web frameworks","Web servers","Static site generator"]},{"name":"Vue.js","description":"Vue.js is an open-source model–view–viewmodel JavaScript framework for building user interfaces and single-page applications.","website":"https://vuejs.org","common_platform_enumeration":"","icon":"vue.svg","categories":["JavaScript frameworks"]},{"name":"Ant Design","description":"Ant Design is a UI library that can be used with data flow solutions and application frameworks in any React ecosystem.","website":"https://ant.design","common_platform_enumeration":"","icon":"Ant Design.svg","categories":["UI frameworks"]}]},{"fqdn":"chat-web-go.jwzhd.com","ip":{"addr":"120.53.8.151","port":443,"asn":45090,"as":"Shenzhen Tencent Computer Systems Company Limited","country":"China","country_code":"CN"},"domain_registered":"2020-03-16","domain_rank":0,"first_seen":"2025-05-07T19:39:37.157824Z","last_seen":"2025-11-01T13:29:08.070642Z","alert_count":0,"request_count":3,"received_data":1822,"sent_data":1604,"comment":"","tags":null,"fingerprints":[{"name":"OpenResty:1.27.1.2","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"hm.baidu.com","ip":{"addr":"111.45.3.198","port":443,"asn":9808,"as":"China Mobile Communications Group Co., Ltd.","country":"China","country_code":"CN"},"domain_registered":"1999-10-11","domain_rank":54491,"first_seen":"2012-05-26T08:38:45Z","last_seen":"2025-12-08T00:38:02.25309Z","alert_count":0,"request_count":2,"received_data":30932,"sent_data":1318,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}]},{"fqdn":"s2.loli.net","ip":{"addr":"104.26.0.190","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2011-05-28","domain_rank":1500399,"first_seen":"2021-12-08T12:17:10Z","last_seen":"2025-12-13T09:03:26.839814Z","alert_count":0,"request_count":2,"received_data":697205,"sent_data":900,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"chat-img.jwznb.com","ip":{"addr":"122.228.86.133","port":443,"asn":134771,"as":"WENZHOU, ZHEJIANG Province, P.R.China.","country":"China","country_code":"CN"},"domain_registered":"2020-03-31","domain_rank":0,"first_seen":"2025-05-07T19:39:37.15579Z","last_seen":"2025-11-01T13:29:07.934302Z","alert_count":0,"request_count":3,"received_data":23906,"sent_data":1451,"comment":"","tags":null,"fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"www.yhchat.com/c/p/31429","fqdn":"www.yhchat.com","domain":"yhchat.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"1c5c9160600df2d96d69a4ea16cec7ed","sha1":"3cf678c9135cc952ba6970ef545035bb757a443f","sha256":"a3520fe88e248d2b6c9c6db93309a037ef969fe297208e5bd7e49a55bb32c808","sha512":"2a298a8c2552c6a6c6f8d3f7327d2e9abfa87a0dbb27e9e528a8539b416155c0860f54f46464dfe7e5d49c7906a9eacdac7e5181b86ef15a83276a8f4fee0546","ssdeep":"","tlshash":"078004d531c35040475331d400571cd4503444f014444d544040d4511c55030d1154dc","size":37,"data":"","first_seen":"2023-04-11T21:49:14Z","last_seen":"2026-04-04T02:12:52.162132Z","times_seen":102109,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.yhchat.com/_nuxt/63a0b3c.js","fqdn":"www.yhchat.com","domain":"yhchat.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"3ab9961c7d34e7eaa051cf9a4f556e35","sha1":"69058295de3f03d554e2b599fceecc8a571a28c4","sha256":"6ccbe85dd503eb22b846a0cf66ae8a0ddcf09c4cb5f58038ce97d96c885a55ae","sha512":"f1deabd4ed05827f97eafe6018735284374be3d514c58d79fa458d554baf001af56874bd5d1dea38df7a048bbb93cde97254cc65a4e295dcc014172ee53289db","ssdeep":"768:O20F8M/qori8VzAXKosW1XbW2xmxKFZOb:C/qonAXKosW1XbWamxKFZe","tlshash":"2803e94d72c0f06141df012a94ef5422b1b3a55c7a0a94a8f937d5cd7aa8f1a91a3f3f","size":40599,"data":"","first_seen":"2025-12-13T13:58:47.000958Z","last_seen":"2025-12-13T13:58:47.000958Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.yhchat.com/_nuxt/81c17ac.js","fqdn":"www.yhchat.com","domain":"yhchat.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"4b88462b1c622917124c0e03459040ee","sha1":"8b6245bb0389e63d8c32a297e9c3ab24cdd00f3f","sha256":"28992eb71df8b45e209689d02dc2e56e11b372a1c5a38695ce6601dfadbf95d9","sha512":"2fccbbdd77c4c3d41e376a8b96e7ff00fb3bf64cb3d9e220954cd6d03255e804bf29fdfa853f37152239d987ed6b120e142d4a4e319c6f79f3b913fb8230f649","ssdeep":"3072:RdXEx0exmbqbks+PiNIqFob7JyZK/hb4VY1WyWGZqyJlMJ9uiXO3VTbmLO:Rd4xmYlNIqFlk/c0Wyhq5JwiXO3VnmLO","tlshash":"a864d4cdb6c9b5b213eb20f0007f650bf27aa855740a85d0e265e8d66c7984e907bf3d","size":317523,"data":"","first_seen":"2025-11-01T13:29:25.954434Z","last_seen":"2025-12-13T13:58:46.993264Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.yhchat.com/c/p/31429","fqdn":"www.yhchat.com","domain":"yhchat.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"1c5c9160600df2d96d69a4ea16cec7ed","sha1":"3cf678c9135cc952ba6970ef545035bb757a443f","sha256":"a3520fe88e248d2b6c9c6db93309a037ef969fe297208e5bd7e49a55bb32c808","sha512":"2a298a8c2552c6a6c6f8d3f7327d2e9abfa87a0dbb27e9e528a8539b416155c0860f54f46464dfe7e5d49c7906a9eacdac7e5181b86ef15a83276a8f4fee0546","ssdeep":"","tlshash":"078004d531c35040475331d400571cd4503444f014444d544040d4511c55030d1154dc","size":37,"data":"","first_seen":"2023-04-11T21:49:14Z","last_seen":"2026-04-04T02:12:52.162132Z","times_seen":102109,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.yhchat.com/_nuxt/15521a5.js","fqdn":"www.yhchat.com","domain":"yhchat.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"befdf635c92052ad35c91b9a492ec6cd","sha1":"a6c710d371c62cefd2b7c211563a44e70ad87c51","sha256":"7cc00b27fe97ce83e6fa58700b511a49069d4e16179be14bad535f2c43b90dfc","sha512":"cdc13c7b051161e7ac02e8ced951a1922fc02e2fd02ad660c222b75edfec60d24a38e035734b1c06e8a7fad38bf95d61c7bcffb6b6bda5c2b4b09084939545e1","ssdeep":"","tlshash":"1051d89e3fe4f59a92261868143fa415f6282422295de0d0d3c4d0bab838dc9e613fb7","size":3068,"data":"","first_seen":"2025-12-13T13:58:47.013153Z","last_seen":"2025-12-13T13:58:47.013153Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.yhchat.com/c/p/31429","fqdn":"www.yhchat.com","domain":"yhchat.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"37206eadd18042de6905d569801d3515","sha1":"5d519549f312bca29f8e41c774c4d24a7f26769a","sha256":"c5592f59073fc6cc50b64d1d59e770c08f33c1e959ed9de2e3066ab36d0dd337","sha512":"169e8a72975d3d2a56e6a78a306fc8da3c368e706e2651928b8edc83aad9292e1420e3b97ff297a8e53630085eb81aa89a1e47065c10cd466ea5b8acc2353d93","ssdeep":"","tlshash":"bdf059ed63664d8438e36c69f45b310c318d1e25689e88a85c2c644630d24b752d615f","size":511,"data":"","first_seen":"2025-12-13T13:58:47.016472Z","last_seen":"2025-12-13T13:58:47.016472Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.yhchat.com/_nuxt/8b83391.js","fqdn":"www.yhchat.com","domain":"yhchat.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"05a042df0c728bb690a5a8cee9ced5ed","sha1":"dffad59058d6ca23c5f2933e1c9cc24bf9d36f2f","sha256":"828f80db6bd9c30ab364e08da6df2d5affe3c17082e0b198bc3c73e6a19c3777","sha512":"185ea9d4e4d51d9a2117d0f5dcc87c4b44b1e5c01133466c9dcf0c75acada9759ad84b827ebfa69ba4288bd352929cc85b2ec3be9f755ba777c50a49c5e0978a","ssdeep":"768:mPfqFLRHFdHFjSLiGas19coL5XPpq7m/zcciwv:mnqFLHm/+oLxPwSIQv","tlshash":"8653d65a70c7f52c928ba021402f2525b0366f596129c4d7e734c8e59ee8f79273fbac","size":62317,"data":"","first_seen":"2025-12-13T13:58:46.99954Z","last_seen":"2025-12-13T13:58:46.99954Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.yhchat.com/_nuxt/a49c945.js","fqdn":"www.yhchat.com","domain":"yhchat.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"6941ee71e5558c4b0380af88dd682212","sha1":"91a70cc42f420c445a79f5a49e81059d64684081","sha256":"85b098619eade18b13b4ad1007f0204733b9eb2504e733b6dafb1d7e89aab8f9","sha512":"bd43f13efa42b92f883729f4cf4724d16bb178097ea0b3968836d2f81d509f3602d32229e47ee24bba6869dafa5094eadbaf90ed4bf23a9df27b462412c1662b","ssdeep":"384:kERGiVPJanwNhRj1jJvHpQIL7vugyGqeCUFv:7UiVPJanwNzvvugeeCev","tlshash":"b382e97d708bb4688ac33470902f1626f12b969af406156e367ac5d20ead35c51bbf3f","size":18691,"data":"","first_seen":"2025-12-13T13:58:47.002401Z","last_seen":"2025-12-13T13:58:47.002401Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.yhchat.com/_nuxt/48442dd.js","fqdn":"www.yhchat.com","domain":"yhchat.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"4a33c3b5157f209f8d78f5d2198332aa","sha1":"10fae5e8344d83f8bb574ea461b72bc6a22c82dd","sha256":"4893af69ebd362a0dc5c1927a5179e578900f79927a76c5aabf2c63711a07aa4","sha512":"a8cb22821c8cb32d0e0749dc8b53202d3712f44e04fc00f4eb943b887f6826d82e4427b0258ee2b44f0e7dd07977fbba189f541d2dadf69691a87af16aae530b","ssdeep":"49152:QR4FMpe+KBlI+9Yly6L4ot8uo8evsvNLH9:XYft3v/","tlshash":"c7d56b6872c1b83a43d38376946f2805b2369c29e50eb85cf3f5f8d44aa994d1167f3e","size":2991382,"data":"","first_seen":"2025-11-01T13:29:25.972265Z","last_seen":"2025-12-13T13:58:47.018717Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hm.baidu.com/hm.js?8448cddb085e8c2a634b9f555b26b972","fqdn":"hm.baidu.com","domain":"baidu.com","tld":"com"},"ip":{"addr":"111.45.3.198","port":443,"asn":9808,"as":"China Mobile Communications Group Co., Ltd.","country":"China","country_code":"CN"},"introduction_type":"scriptElement","is_inline":false,"md5":"1f4439da349d4f582e8be4ded6f52c16","sha1":"81d4b7274d6ba8b55690f3b58bfbf477d894209b","sha256":"e3d0aa127d3f214868acb60af00c536b58bdc3d22314aca21857f37946fa5c2f","sha512":"e1c87edd58109451809ad26c8c4a887c529b3639dcdaa358082ab61af88d0f7c5a6641c653485d18cd5f3f7bdf5a3e9539a3742934d07ea38e465cafe724872a","ssdeep":"384:6JSoLMJJTRl6s1JXFVCFI/TayvuodsZPIGm8XaR1JRwvutq1tGdc7M04gRw6:64VJfHgMdvussZPIx82Rwvutcto07v","tlshash":"00d2c9e9b282713293a324a5153f324af17b5a54bd4968a4f11894c07d38fbb027bfdd","size":29950,"data":"","first_seen":"2025-12-13T13:58:46.99161Z","last_seen":"2025-12-13T13:58:46.99161Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.yhchat.com/_nuxt/aab348b.js","fqdn":"www.yhchat.com","domain":"yhchat.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"76beac69bd536312dd9fb8f3d1bb9c9f","sha1":"9a9c9ed923372135948721a92c51e6c14a50ba5a","sha256":"8618443ee06dc9f48f333e8913af739fd01f234c8bd6578b28e45f77f5a77fc8","sha512":"90621c4759cff1cdef617c121bf96eb9f8999d11409a834d45db9133286ade21ca4ab8f514cce3d86c2c190f66038f0c60e6daf70a9eb041f9dffcaf3ea2ccd2","ssdeep":"1536:fHkmSKlxgILCPqDnAsN7OuPJhXJuJ05qjPz59Md1XbTQaIEYMbA:J57uJqqjPz5Kd1XbT+EVbA","tlshash":"b6630b5db2c0b46542cb22b4817f1406f333a498790a946cba37c8da6f9da5d2173f7e","size":71321,"data":"","first_seen":"2025-11-01T13:29:25.940931Z","last_seen":"2025-12-13T13:58:46.99463Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.yhchat.com/_nuxt/9131720.js","fqdn":"www.yhchat.com","domain":"yhchat.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"abd2579b1c744d84168cbf76753c04c0","sha1":"86a488d667f00fffe0cabe1cc030818fff63ef99","sha256":"0eca64e2eb0c7b9e6d1cbb18d042030de5096f7f8c5335f235ba8eab34a17a91","sha512":"bdf86b4754f977e2b2aa600ae26320b678d2e45202b25d85108eed183e54aab0b6b5df7bb1b91aeeac91151a908a5aeb9026d92d3a6e501de8e13932de55aa40","ssdeep":"768:kCTjxwjPtSqjNF6SI4vu8urx7kjw9uc5HOl57ntT6xB0QpBfAXzFs:5jxWMq2+E9uc5H257ntT6xBLBfJ","tlshash":"465319c4a285372981f61652dcff1a09f03b4a28748eed3af916d1f3bc1512661bb7b4","size":63651,"data":"","first_seen":"2025-11-01T13:29:25.943713Z","last_seen":"2025-12-13T13:58:46.986909Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.yhchat.com/_nuxt/b82bc28.js","fqdn":"www.yhchat.com","domain":"yhchat.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"4d7100df4bd51b42b8286f9c7620f23e","sha1":"a5c4d9ab2e6b93c5ce81673d0b7c76317f4d7117","sha256":"7b4185a892d8d1475ed189d08890767612f41ae48cdeb1248ec5ea53d707eef7","sha512":"3bcd401fe88bb58919b8d4d8e2fc3c2bcdef9f5db60edad938b94fe64f2cd0605682ee9de85c8da4624580578bf7a578f46556741beb321295b6ef04f5102acb","ssdeep":"768:Cf48VKwNZ/HTCEuJgvW43DCEpLaRC+XXaMoCCEp0BDQ1B2xPUBVLNbBqBMNT:CfOwL/HDNpLqHX3pr1BIPGVLNbiMV","tlshash":"db63b589f6c6f46a079332b5413f200bf276ac95b41f9551d220ddd2bca854ea133fba","size":73215,"data":"","first_seen":"2025-11-01T13:29:25.935487Z","last_seen":"2025-12-13T13:58:46.976831Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.yhchat.com/c/p/31429","fqdn":"www.yhchat.com","domain":"yhchat.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"40dd90b34c6701381771dddde239e2be","sha1":"40ab03f3df400494b538035727d59e6c1f1fbb99","sha256":"76d1bfbdd3c8353b63b0fbafe8f5c8c36104d8eceea1ad3f0507315b67f9e5b3","sha512":"56bf6a12def8748bbd8eb82c690808422c842c0d3442bca1027f237d8f9e8f5a8e0ce3a31d8472e98376e0b04478165cf81f11b4d45d0fd3d2c2def8cdfa0ae0","ssdeep":"192:HuqxR+JJnmtgGo7yE5ur6OE5OfybC+6LSrsTOg:Ousmho7P5m6OSO+oH","tlshash":"c5d11db407ad7fc5155800c6bf3aaf88714c4557ee3acf92bdcfc8796a12498142b934","size":6246,"data":"","first_seen":"2025-12-13T13:58:47.021745Z","last_seen":"2025-12-13T13:58:47.021745Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null},"http":[{"url":{"schema":"https","addr":"www.yhchat.com/_nuxt/b82bc28.js","fqdn":"www.yhchat.com","domain":"yhchat.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.yhchat.com/c/p/31429","date":"2025-12-13T13:58:09.123Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.yhchat.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 27 Oct 2025 09:14:42 GMT","end":"Sun, 25 Jan 2026 10:14:32 GMT"},"fingerprint":{"sha1":"24:91:95:07:D5:2C:DE:87:A2:F2:D6:33:AD:CE:39:FB:2B:F4:5E:5B","sha256":"78:99:89:FF:47:0D:84:18:98:D3:CF:B7:B4:40:B9:A4:32:3C:CC:F8:49:9C:B8:2F:41:09:18:0D:4F:51:09:96"}}},"request":{"raw":"GET /_nuxt/b82bc28.js HTTP/1.1\r\nHost: www.yhchat.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.yhchat.com/c/p/31429\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 13 Dec 2025 13:58:11 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\naccept-ranges: bytes\r\ncache-control: public, max-age=31536000\r\nlast-modified: Sun, 07 Dec 2025 14:26:15 GMT\r\netag: W/\"11dff-19af934bf58\"\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4YQKUCbJtd%2BbzGg8gp8SOC3nJ7v2VnwjlwrCay2r%2BhoDy401csIVsYENmXic9%2F%2FzH4LhzC8osV2scpSwkmwTQ4WPKRHHg%2BrWuV5HXA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ad5f982ccebb4eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":73215,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65512), with no line terminators","md5":"4d7100df4bd51b42b8286f9c7620f23e","sha1":"a5c4d9ab2e6b93c5ce81673d0b7c76317f4d7117","sha256":"7b4185a892d8d1475ed189d08890767612f41ae48cdeb1248ec5ea53d707eef7","sha512":"3bcd401fe88bb58919b8d4d8e2fc3c2bcdef9f5db60edad938b94fe64f2cd0605682ee9de85c8da4624580578bf7a578f46556741beb321295b6ef04f5102acb","ssdeep":"768:Cf48VKwNZ/HTCEuJgvW43DCEpLaRC+XXaMoCCEp0BDQ1B2xPUBVLNbBqBMNT:CfOwL/HDNpLqHX3pr1BIPGVLNbiMV","tlshash":"db63b589f6c6f46a079332b5413f200bf276ac95b41f9551d220ddd2bca854ea133fba","first_seen":"2025-11-01T13:29:25.935487Z","last_seen":"2025-12-13T13:58:46.976831Z","times_seen":2,"resource_available":true,"data":null}},"time_used":2265,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2232,"receive":33,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-13","alert":"Sinkholed","trigger":"www.yhchat.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.yhchat.com/_nuxt/img/like_off_deep.f5dcd33.png","fqdn":"www.yhchat.com","domain":"yhchat.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.yhchat.com/c/p/31429","date":"2025-12-13T13:58:09.395Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.yhchat.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 27 Oct 2025 09:14:42 GMT","end":"Sun, 25 Jan 2026 10:14:32 GMT"},"fingerprint":{"sha1":"24:91:95:07:D5:2C:DE:87:A2:F2:D6:33:AD:CE:39:FB:2B:F4:5E:5B","sha256":"78:99:89:FF:47:0D:84:18:98:D3:CF:B7:B4:40:B9:A4:32:3C:CC:F8:49:9C:B8:2F:41:09:18:0D:4F:51:09:96"}}},"request":{"raw":"GET /_nuxt/img/like_off_deep.f5dcd33.png HTTP/1.1\r\nHost: www.yhchat.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.yhchat.com/c/p/31429\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 13 Dec 2025 13:58:11 GMT\r\ncontent-type: image/png\r\ncontent-length: 1774\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\naccept-ranges: bytes\r\ncache-control: public, max-age=31536000\r\nlast-modified: Sun, 07 Dec 2025 14:26:15 GMT\r\netag: W/\"6ee-19af934bf58\"\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qmH5AvfeQxovDI8M3KuxRlDBrCa3FV7X5nhVnK6guPmQOjm%2FLRN3fh4UH3Z8H%2F%2BmAJ1hPgCujJHWeu1uYLtnXt1y3mW26DhT6JcKgA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ad5f984aef3b4eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1774,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced","md5":"f5dcd3337dc73b844fcc3a18000a33d6","sha1":"5567fef7ac097c221c621fa4a1fe954c78b2bf7f","sha256":"a057ccb36b02b599304327aa276d9f4210d82203013def7097c73bf0da6ef13e","sha512":"5dd775b374212ee3bc06fe858dea5e5d77cc6841e254740d8d416b1485539301888e45739d56c3a840ef7bd62e410c37756d0af01671eed1c3032b7954624fdf","ssdeep":"","tlshash":"e031e98f2ef19bb45394f46d5e371d8e3815303d9237a415dd9ab8807288a702cd2503","first_seen":"2025-12-13T13:58:46.979057Z","last_seen":"2025-12-13T13:58:46.979057Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1704,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1704,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-13","alert":"Sinkholed","trigger":"www.yhchat.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.yhchat.com/_nuxt/img/star_off.f0884a2.png","fqdn":"www.yhchat.com","domain":"yhchat.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.yhchat.com/c/p/31429","date":"2025-12-13T13:58:09.397Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.yhchat.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 27 Oct 2025 09:14:42 GMT","end":"Sun, 25 Jan 2026 10:14:32 GMT"},"fingerprint":{"sha1":"24:91:95:07:D5:2C:DE:87:A2:F2:D6:33:AD:CE:39:FB:2B:F4:5E:5B","sha256":"78:99:89:FF:47:0D:84:18:98:D3:CF:B7:B4:40:B9:A4:32:3C:CC:F8:49:9C:B8:2F:41:09:18:0D:4F:51:09:96"}}},"request":{"raw":"GET /_nuxt/img/star_off.f0884a2.png HTTP/1.1\r\nHost: www.yhchat.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.yhchat.com/c/p/31429\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 13 Dec 2025 13:58:10 GMT\r\ncontent-type: image/png\r\ncontent-length: 1822\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\naccept-ranges: bytes\r\ncache-control: public, max-age=31536000\r\nlast-modified: Sun, 07 Dec 2025 14:26:15 GMT\r\netag: W/\"71e-19af934bf58\"\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gA%2FCStq7vQneWB5jLMy53a09fjXrfy1Vhh%2BMybVoj0RUgoqtpjHAraTtvCWyt1dyt5di9Z%2BI%2FwbKPulK7XFUio1uKuY93%2FCNbPWPBw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ad5f984aef6b4eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1822,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced","md5":"f0884a24fc66f8e68ec04fb3ac76a993","sha1":"d9626bd0e3720aeb36050edef4f1da7de665e495","sha256":"68f02594b165d7402d4707590add87c1f494d50342c8707d9b16258c213fac63","sha512":"19f67099ac530fa22e58c227f607c6e1003af01b6cedb052679f3a3267da688a41e316b6e2a8627e52d1da35136bee56c380130b6c5e5d6155ccebf4067081bc","ssdeep":"","tlshash":"fc31ebb8186f9fb091613536741c71787463b168857e38870ead73057e375b52844d13","first_seen":"2025-12-13T13:58:46.980711Z","last_seen":"2025-12-13T13:58:46.980711Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1354,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1354,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-13","alert":"Sinkholed","trigger":"www.yhchat.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"chat-web-go.jwzhd.com/v1/user/info","fqdn":"chat-web-go.jwzhd.com","domain":"jwzhd.com","tld":"com"},"ip":{"addr":"120.53.8.151","port":443,"asn":45090,"as":"Shenzhen Tencent Computer Systems Company Limited","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.yhchat.com/c/p/31429","date":"2025-12-13T13:58:21.403Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"chat-web-go.jwzhd.com","organization":""},"issuer":{"commonName":"TrustAsia DV TLS RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Thu, 06 Nov 2025 00:00:00 GMT","end":"Tue, 03 Feb 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D0:29:82:C9:92:D4:57:E5:B0:46:6B:20:CD:D5:C7:FD:2E:CF:F3:98","sha256":"DF:57:FF:CB:EC:08:CF:EF:39:28:D6:AE:7E:71:EE:7C:C8:78:5F:7C:5E:5D:FD:43:8E:6C:34:EE:C3:AB:25:2D"}}},"request":{"raw":"GET /v1/user/info HTTP/1.1\r\nHost: chat-web-go.jwzhd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.yhchat.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.yhchat.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: openresty/1.27.1.2\r\nDate: Sat, 13 Dec 2025 13:58:22 GMT\r\nContent-Type: application/json; charset=utf-8\r\nContent-Length: 56\r\nConnection: keep-alive\r\nAccess-Control-Allow-Credentials: true\r\nAccess-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept, Authorization, token\r\nAccess-Control-Allow-Methods: POST, GET, OPTIONS\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Expose-Headers: Content-Length, Access-Control-Allow-Origin, Access-Control-Allow-Headers, Cache-Control, Content-Language, Content-Type\r\nContent-Encoding: gzip\r\nVary: Accept-Encoding\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty:1.27.1.2","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":31,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"df510b9d2ac5d207b60d2a61abe33f17","sha1":"7970232522d2f5b926c93588f44723fb7369d546","sha256":"e594f49af58fbb64dbbb385fa0f07f06623a9411ce128f3686b220f3f9bce56e","sha512":"2d49fbd421d3d7a0e29c6f67c86531c426fb599a1806a6d65362b22cdf594db104f05415d9ee49ca53e0a914b5eaa77f6fe50eef7b5f1b5b8ef94bdd317eca1f","ssdeep":"","tlshash":"828000aa008f088300aaa80c008c0b3000acc28a002003202cac832a22080c2e08b02c","first_seen":"2025-05-07T19:39:47.107712Z","last_seen":"2025-12-13T13:58:46.981835Z","times_seen":3,"resource_available":false,"data":null}},"time_used":1908,"timings":{"blocked":838,"dns":327,"connect":227,"send":0,"wait":231,"receive":0,"ssl":282},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"chat-web-go.jwzhd.com/v1/community/comment/comment-list","fqdn":"chat-web-go.jwzhd.com","domain":"jwzhd.com","tld":"com"},"ip":{"addr":"120.53.8.151","port":443,"asn":45090,"as":"Shenzhen Tencent Computer Systems Company Limited","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.yhchat.com/c/p/31429","date":"2025-12-13T13:58:23.449Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"chat-web-go.jwzhd.com","organization":""},"issuer":{"commonName":"TrustAsia DV TLS RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Thu, 06 Nov 2025 00:00:00 GMT","end":"Tue, 03 Feb 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D0:29:82:C9:92:D4:57:E5:B0:46:6B:20:CD:D5:C7:FD:2E:CF:F3:98","sha256":"DF:57:FF:CB:EC:08:CF:EF:39:28:D6:AE:7E:71:EE:7C:C8:78:5F:7C:5E:5D:FD:43:8E:6C:34:EE:C3:AB:25:2D"}}},"request":{"raw":"POST /v1/community/comment/comment-list HTTP/1.1\r\nHost: chat-web-go.jwzhd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\ntoken: \r\nContent-Length: 35\r\nOrigin: https://www.yhchat.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.yhchat.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":35,"data":"{\"size\":10,\"page\":1,\"postId\":31429}"}},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: openresty/1.27.1.2\r\nDate: Sat, 13 Dec 2025 13:58:23 GMT\r\nContent-Type: application/json; charset=utf-8\r\nContent-Length: 81\r\nConnection: keep-alive\r\nAccess-Control-Allow-Credentials: true\r\nAccess-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept, Authorization, token\r\nAccess-Control-Allow-Methods: POST, GET, OPTIONS\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Expose-Headers: Content-Length, Access-Control-Allow-Origin, Access-Control-Allow-Headers, Cache-Control, Content-Language, Content-Type\r\nContent-Encoding: gzip\r\nVary: Accept-Encoding\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"OpenResty:1.27.1.2","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":59,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"c615b9115acfedc85247c2ae88771be1","sha1":"16b8fc6b3e94a22b26be15b879a55d47a5d307ba","sha256":"9b9a845386da5610e52e12b30feab800d825dec2e6555885bec172fc6a2359f7","sha512":"3c5daf05e827e650747d4ac9a922aeabf6b3017f514deb3f45d0340327c574bf4fb558fd071839b4cb30cd9783852b8ab21b61d4758813f15c795364fa222ea3","ssdeep":"","tlshash":"39a0026aa84c01c34941b488041e270297f61196450007444dfed3688a0e55d6482629","first_seen":"2025-12-13T13:58:46.983167Z","last_seen":"2025-12-13T13:58:46.983167Z","times_seen":1,"resource_available":false,"data":null}},"time_used":347,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":347,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.yhchat.com/_nuxt/48442dd.js","fqdn":"www.yhchat.com","domain":"yhchat.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.yhchat.com/c/p/31429","date":"2025-12-13T13:58:09.121Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.yhchat.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 27 Oct 2025 09:14:42 GMT","end":"Sun, 25 Jan 2026 10:14:32 GMT"},"fingerprint":{"sha1":"24:91:95:07:D5:2C:DE:87:A2:F2:D6:33:AD:CE:39:FB:2B:F4:5E:5B","sha256":"78:99:89:FF:47:0D:84:18:98:D3:CF:B7:B4:40:B9:A4:32:3C:CC:F8:49:9C:B8:2F:41:09:18:0D:4F:51:09:96"}}},"request":{"raw":"GET /_nuxt/48442dd.js HTTP/1.1\r\nHost: www.yhchat.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.yhchat.com/c/p/31429\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 13 Dec 2025 13:58:13 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\naccept-ranges: bytes\r\ncache-control: public, max-age=31536000\r\nlast-modified: Sun, 07 Dec 2025 14:26:15 GMT\r\netag: W/\"2da516-19af934bf58\"\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3N%2FPsxP1x1ELlmk1tvDPe6QbkGB9a9Ts7shzJYnTlZkbf6tpfZ1KlaqPIANGKfHtaOGW%2BuHwvm2XTPDsOFXhjevUt4yAD79ORcmELw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ad5f982cceab4eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2991382,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65478)","md5":"5c2dfd35fa730b185eea04090beef6f5","sha1":"95c204811c21382bd464f3e759de8f0f6b6557af","sha256":"eb94e664eddd3d9eefa10582e199961fd282030a8929ee0ae261dd77e4cfddb2","sha512":"91664892d1ce719ebd362f5e9ef8e2879c2bd89da03fd0421d263d6bea276e5312ebcc01ec54d4115b348722c03a0826c5ea75941a95235f14f23cab4232ae0d","ssdeep":"6144:rwkf8PZf9tZoF6Idbr1zcdPgIeo7gJrgreMQeaDrNC0MdzfOAoX+KTISkARRpPIP:Q94PzcdYIwJsreosFMdzTe+KTIYhl2","tlshash":"6a2529587781703a92d7c33694ab7809a2368d11d50fbc6df3a1f9d48f85a4e11e3f2a","first_seen":"2025-11-01T13:29:25.952466Z","last_seen":"2025-12-13T13:58:46.984399Z","times_seen":2,"resource_available":false,"data":null}},"time_used":11553,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4445,"receive":7108,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-13","alert":"Sinkholed","trigger":"www.yhchat.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.yhchat.com/_nuxt/9131720.js","fqdn":"www.yhchat.com","domain":"yhchat.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.yhchat.com/c/p/31429","date":"2025-12-13T13:58:09.127Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.yhchat.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 27 Oct 2025 09:14:42 GMT","end":"Sun, 25 Jan 2026 10:14:32 GMT"},"fingerprint":{"sha1":"24:91:95:07:D5:2C:DE:87:A2:F2:D6:33:AD:CE:39:FB:2B:F4:5E:5B","sha256":"78:99:89:FF:47:0D:84:18:98:D3:CF:B7:B4:40:B9:A4:32:3C:CC:F8:49:9C:B8:2F:41:09:18:0D:4F:51:09:96"}}},"request":{"raw":"GET /_nuxt/9131720.js HTTP/1.1\r\nHost: www.yhchat.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.yhchat.com/c/p/31429\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 13 Dec 2025 13:58:10 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\naccept-ranges: bytes\r\ncache-control: public, max-age=31536000\r\nlast-modified: Sun, 07 Dec 2025 14:26:15 GMT\r\netag: W/\"f8a3-19af934bf58\"\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tyqlL7exU0j%2BgVECLS7aZHn778BbPpAkTzN5lioxiDFzHghGMYaNs1sGy6N8OzLMYOJ3ZV6Wg4MBZfIySNdQ4ibWN2%2BVTKvvOqJC%2FQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ad5f982ccf1b4eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":63651,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (63637), with no line terminators","md5":"abd2579b1c744d84168cbf76753c04c0","sha1":"86a488d667f00fffe0cabe1cc030818fff63ef99","sha256":"0eca64e2eb0c7b9e6d1cbb18d042030de5096f7f8c5335f235ba8eab34a17a91","sha512":"bdf86b4754f977e2b2aa600ae26320b678d2e45202b25d85108eed183e54aab0b6b5df7bb1b91aeeac91151a908a5aeb9026d92d3a6e501de8e13932de55aa40","ssdeep":"768:kCTjxwjPtSqjNF6SI4vu8urx7kjw9uc5HOl57ntT6xB0QpBfAXzFs:5jxWMq2+E9uc5H257ntT6xBLBfJ","tlshash":"465319c4a285372981f61652dcff1a09f03b4a28748eed3af916d1f3bc1512661bb7b4","first_seen":"2025-11-01T13:29:25.943713Z","last_seen":"2025-12-13T13:58:46.986909Z","times_seen":2,"resource_available":true,"data":null}},"time_used":1611,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1589,"receive":22,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-13","alert":"Sinkholed","trigger":"www.yhchat.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.yhchat.com/_nuxt/img/coin_off.2e3aad6.png","fqdn":"www.yhchat.com","domain":"yhchat.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.yhchat.com/c/p/31429","date":"2025-12-13T13:58:09.399Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.yhchat.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 27 Oct 2025 09:14:42 GMT","end":"Sun, 25 Jan 2026 10:14:32 GMT"},"fingerprint":{"sha1":"24:91:95:07:D5:2C:DE:87:A2:F2:D6:33:AD:CE:39:FB:2B:F4:5E:5B","sha256":"78:99:89:FF:47:0D:84:18:98:D3:CF:B7:B4:40:B9:A4:32:3C:CC:F8:49:9C:B8:2F:41:09:18:0D:4F:51:09:96"}}},"request":{"raw":"GET /_nuxt/img/coin_off.2e3aad6.png HTTP/1.1\r\nHost: www.yhchat.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.yhchat.com/c/p/31429\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 13 Dec 2025 13:58:11 GMT\r\ncontent-type: image/png\r\ncontent-length: 3222\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\naccept-ranges: bytes\r\ncache-control: public, max-age=31536000\r\nlast-modified: Sun, 07 Dec 2025 14:26:15 GMT\r\netag: W/\"c96-19af934bf58\"\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Mn4Gpsp65tdMGQGE2B8Q%2FuoJR5AD77F4MEaGYyXSNT3fUyXa3WrPxJSrG0cu0Y4xrMXOjN7wNhFflQAEwn1s8So4vdpAO8cO6KOyvA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ad5f984aef7b4eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3222,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced","md5":"2e3aad67016b51a70d3013d669109337","sha1":"1fed994a142c84a2aa5cdbe3815e4c579fdc8d4e","sha256":"13f6684ce945a8dac6e6243296b13cabd579e4f54b5134d1c2247798200bae88","sha512":"6c293f0b1bea9d6f7faa7ae7ea43e69b1ee181e62f2c6618571ebd441ea7dfa5a619ababa4787d872a0f5e1f28da2f6c6b288960b0f82e2e346e6a0e5774600c","ssdeep":"","tlshash":"c3615a65ae5884a3d4472b809b38afa3a80307146adf7cb64db4017d7a863ed0dd86d7","first_seen":"2025-12-13T13:58:46.988693Z","last_seen":"2025-12-13T13:58:46.988693Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1784,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1784,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-13","alert":"Sinkholed","trigger":"www.yhchat.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.yhchat.com/_nuxt/img/share_off.087066b.png","fqdn":"www.yhchat.com","domain":"yhchat.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.yhchat.com/c/p/31429","date":"2025-12-13T13:58:09.400Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.yhchat.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 27 Oct 2025 09:14:42 GMT","end":"Sun, 25 Jan 2026 10:14:32 GMT"},"fingerprint":{"sha1":"24:91:95:07:D5:2C:DE:87:A2:F2:D6:33:AD:CE:39:FB:2B:F4:5E:5B","sha256":"78:99:89:FF:47:0D:84:18:98:D3:CF:B7:B4:40:B9:A4:32:3C:CC:F8:49:9C:B8:2F:41:09:18:0D:4F:51:09:96"}}},"request":{"raw":"GET /_nuxt/img/share_off.087066b.png HTTP/1.1\r\nHost: www.yhchat.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.yhchat.com/c/p/31429\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 13 Dec 2025 13:58:10 GMT\r\ncontent-type: image/png\r\ncontent-length: 1353\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\naccept-ranges: bytes\r\ncache-control: public, max-age=31536000\r\nlast-modified: Sun, 07 Dec 2025 14:26:15 GMT\r\netag: W/\"549-19af934bf58\"\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lrDiU6lnNxspBfvSVKkFEmSXJ44ooFbLgI6jQTUbjAJ1t4Z3OSRH%2B%2FJI5ZCkZX2yHq6peZETZ3h8L3Ea2%2F6f6CzFr74fTP%2BFEq9JPw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ad5f984aefab4eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1353,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced","md5":"087066b0faab4f5329fb5fea30849d23","sha1":"bdcac812c11b54b727983281707b26fded5a04d6","sha256":"787e921d5681ca5b720a6e901892b8bdd32bf84ca759d7148c34608170d45c27","sha512":"d77da9535aa5180f8dd10f297d7c2919675a51783d2af7db12e0cf2f541546c72735274ee280ec84c219b67e0b0c6d3c6d71f2a791a5a5fdef42566cb3b85853","ssdeep":"","tlshash":"2021d8e508e6dcfb2598e806c8e6317842ba731d239848ecccbb7563c503696ed5cd72","first_seen":"2025-12-13T13:58:46.990213Z","last_seen":"2025-12-13T13:58:46.990213Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1041,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1041,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-13","alert":"Sinkholed","trigger":"www.yhchat.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hm.baidu.com/hm.js?8448cddb085e8c2a634b9f555b26b972","fqdn":"hm.baidu.com","domain":"baidu.com","tld":"com"},"ip":{"addr":"111.45.3.198","port":443,"asn":9808,"as":"China Mobile Communications Group Co., Ltd.","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.yhchat.com/c/p/31429","date":"2025-12-13T13:58:09.088Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"baidu.com","organization":"Beijing Baidu Netcom Science Technology Co., Ltd"},"issuer":{"commonName":"GlobalSign RSA OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 09 Jul 2025 07:01:02 GMT","end":"Mon, 10 Aug 2026 07:01:01 GMT"},"fingerprint":{"sha1":"21:BF:66:0D:67:BE:7A:7F:49:48:05:30:F4:7F:09:F2:30:36:CA:63","sha256":"0D:82:2C:9A:90:5A:EF:E9:8F:37:12:C0:E0:26:30:EE:95:33:2C:45:5F:E7:74:5D:F0:8D:BC:79:F4:B0:A1:49"}}},"request":{"raw":"GET /hm.js?8448cddb085e8c2a634b9f555b26b972 HTTP/1.1\r\nHost: hm.baidu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.yhchat.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nCache-Control: max-age=0, must-revalidate\r\nContent-Encoding: gzip\r\nContent-Length: 11344\r\nContent-Type: application/javascript\r\nDate: Sat, 13 Dec 2025 13:58:09 GMT\r\nEtag: dfb9b44b0aaf987718fc4edba25ba8e0\r\nP3p: CP=\"CURa ADMa DEVa PSAo PSDo OUR BUS UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR\"\r\nServer: apache\r\nSet-Cookie: HMACCOUNT=C51F1B0A04DE4AAC; Path=/; Domain=hm.baidu.com; Expires=Sun, 18 Jan 2038 00:00:00 GMT\r\nStrict-Transport-Security: max-age=172800\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":29950,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (674)","md5":"1f4439da349d4f582e8be4ded6f52c16","sha1":"81d4b7274d6ba8b55690f3b58bfbf477d894209b","sha256":"e3d0aa127d3f214868acb60af00c536b58bdc3d22314aca21857f37946fa5c2f","sha512":"e1c87edd58109451809ad26c8c4a887c529b3639dcdaa358082ab61af88d0f7c5a6641c653485d18cd5f3f7bdf5a3e9539a3742934d07ea38e465cafe724872a","ssdeep":"384:6JSoLMJJTRl6s1JXFVCFI/TayvuodsZPIGm8XaR1JRwvutq1tGdc7M04gRw6:64VJfHgMdvussZPIx82Rwvutcto07v","tlshash":"00d2c9e9b282713293a324a5153f324af17b5a54bd4968a4f11894c07d38fbb027bfdd","first_seen":"2025-12-13T13:58:46.99161Z","last_seen":"2025-12-13T13:58:46.99161Z","times_seen":1,"resource_available":true,"data":null}},"time_used":1752,"timings":{"blocked":720,"dns":1,"connect":240,"send":0,"wait":302,"receive":1,"ssl":485},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.yhchat.com/_nuxt/81c17ac.js","fqdn":"www.yhchat.com","domain":"yhchat.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.yhchat.com/c/p/31429","date":"2025-12-13T13:58:09.091Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.yhchat.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 27 Oct 2025 09:14:42 GMT","end":"Sun, 25 Jan 2026 10:14:32 GMT"},"fingerprint":{"sha1":"24:91:95:07:D5:2C:DE:87:A2:F2:D6:33:AD:CE:39:FB:2B:F4:5E:5B","sha256":"78:99:89:FF:47:0D:84:18:98:D3:CF:B7:B4:40:B9:A4:32:3C:CC:F8:49:9C:B8:2F:41:09:18:0D:4F:51:09:96"}}},"request":{"raw":"GET /_nuxt/81c17ac.js HTTP/1.1\r\nHost: www.yhchat.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.yhchat.com/c/p/31429\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 13 Dec 2025 13:58:11 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\naccept-ranges: bytes\r\ncache-control: public, max-age=31536000\r\nlast-modified: Sun, 07 Dec 2025 14:26:15 GMT\r\netag: W/\"4d853-19af934bf58\"\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dOqlgbyxcD0EbvH0tqZZfzQgsLe4gC9CQOqOyjjLC%2FrVmG97JmGgZ6RLPG%2BW5GhsqFx2i%2BLUBUK%2FLlAuSfnAbqrUtD34hQr55zRWBw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ad5f982cce9b4eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":317523,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65477)","md5":"4b88462b1c622917124c0e03459040ee","sha1":"8b6245bb0389e63d8c32a297e9c3ab24cdd00f3f","sha256":"28992eb71df8b45e209689d02dc2e56e11b372a1c5a38695ce6601dfadbf95d9","sha512":"2fccbbdd77c4c3d41e376a8b96e7ff00fb3bf64cb3d9e220954cd6d03255e804bf29fdfa853f37152239d987ed6b120e142d4a4e319c6f79f3b913fb8230f649","ssdeep":"3072:RdXEx0exmbqbks+PiNIqFob7JyZK/hb4VY1WyWGZqyJlMJ9uiXO3VTbmLO:Rd4xmYlNIqFlk/c0Wyhq5JwiXO3VnmLO","tlshash":"a864d4cdb6c9b5b213eb20f0007f650bf27aa855740a85d0e265e8d66c7984e907bf3d","first_seen":"2025-11-01T13:29:25.954434Z","last_seen":"2025-12-13T13:58:46.993264Z","times_seen":2,"resource_available":true,"data":null}},"time_used":3330,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2302,"receive":1028,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-13","alert":"Sinkholed","trigger":"www.yhchat.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.yhchat.com/_nuxt/aab348b.js","fqdn":"www.yhchat.com","domain":"yhchat.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.yhchat.com/c/p/31429","date":"2025-12-13T13:58:09.125Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.yhchat.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 27 Oct 2025 09:14:42 GMT","end":"Sun, 25 Jan 2026 10:14:32 GMT"},"fingerprint":{"sha1":"24:91:95:07:D5:2C:DE:87:A2:F2:D6:33:AD:CE:39:FB:2B:F4:5E:5B","sha256":"78:99:89:FF:47:0D:84:18:98:D3:CF:B7:B4:40:B9:A4:32:3C:CC:F8:49:9C:B8:2F:41:09:18:0D:4F:51:09:96"}}},"request":{"raw":"GET /_nuxt/aab348b.js HTTP/1.1\r\nHost: www.yhchat.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.yhchat.com/c/p/31429\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 13 Dec 2025 13:58:10 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\naccept-ranges: bytes\r\ncache-control: public, max-age=31536000\r\nlast-modified: Sun, 07 Dec 2025 14:26:15 GMT\r\netag: W/\"11699-19af934bf58\"\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uoJ%2BvQ8thY4osliph3zteCk%2FtDEwIlzb%2FPly7JO6LP%2BXe9Av2z%2BmDju5WJjfo7ExSAI0s7oGakDInUDLku1BmUNvndGCxkNW6au2RQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ad5f982ccefb4eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":71321,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65533), with no line terminators","md5":"76beac69bd536312dd9fb8f3d1bb9c9f","sha1":"9a9c9ed923372135948721a92c51e6c14a50ba5a","sha256":"8618443ee06dc9f48f333e8913af739fd01f234c8bd6578b28e45f77f5a77fc8","sha512":"90621c4759cff1cdef617c121bf96eb9f8999d11409a834d45db9133286ade21ca4ab8f514cce3d86c2c190f66038f0c60e6daf70a9eb041f9dffcaf3ea2ccd2","ssdeep":"1536:fHkmSKlxgILCPqDnAsN7OuPJhXJuJ05qjPz59Md1XbTQaIEYMbA:J57uJqqjPz5Kd1XbT+EVbA","tlshash":"b6630b5db2c0b46542cb22b4817f1406f333a498790a946cba37c8da6f9da5d2173f7e","first_seen":"2025-11-01T13:29:25.940931Z","last_seen":"2025-12-13T13:58:46.99463Z","times_seen":2,"resource_available":true,"data":null}},"time_used":1289,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1267,"receive":22,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-13","alert":"Sinkholed","trigger":"www.yhchat.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"s2.loli.net/2025/08/21/MH14CALBoqOsKQY.png","fqdn":"s2.loli.net","domain":"loli.net","tld":"net"},"ip":{"addr":"104.26.0.190","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.yhchat.com/c/p/31429","date":"2025-12-13T13:58:09.393Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s2.loli.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 16 Nov 2025 05:58:43 GMT","end":"Sat, 14 Feb 2026 06:58:39 GMT"},"fingerprint":{"sha1":"7D:1F:02:BD:A4:BB:BF:DA:80:A8:FD:E8:A8:F0:F8:0B:F6:50:8A:68","sha256":"0B:87:5C:EE:12:DB:70:5D:04:36:81:D6:C8:68:27:C4:F7:5F:4F:6E:DF:19:6B:BB:D8:F1:F7:2B:E4:FA:75:34"}}},"request":{"raw":"GET /2025/08/21/MH14CALBoqOsKQY.png HTTP/1.1\r\nHost: s2.loli.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.yhchat.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 13 Dec 2025 13:58:09 GMT\r\ncontent-type: image/png\r\ncontent-length: 583553\r\nserver: cloudflare\r\nlast-modified: Thu, 21 Aug 2025 10:26:06 GMT\r\netag: \"68a6f43e-8e781\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nvary: Accept, accept-encoding\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\naccept-ranges: bytes\r\ncf-cache-status: BYPASS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3WV0r2pZru3jXgCd%2Bof%2F3vPz48TDvK8tyFy5YtkrhN41lsZbhuocY0bD9vELKWfyO5qj7oQu0FKSrKQ8tJz2L0WLND%2B6bJFO\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ad5f9853e3ab4fd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":583553,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 840 x 472, 8-bit/color RGB, non-interlaced","md5":"a401f46479f6fcffef3dd436338ed0a6","sha1":"04c373434eaeef1c1c9dd579fe37d518c392563b","sha256":"c5d59494e25b5c7cdedda8b596e6656d76194423b262fad44cff3506980a8ca3","sha512":"6dddbdb441c7b8f762160492dd27e45603dd322ddfd6e589a767a9d258c9259e16dd66776ec456bb15d49f564dd91a360b2313dc373f026f80406624c1beb0c8","ssdeep":"12288:Z2dXobtRLIe5O6JUVUcXSjUje+L+5zEuAsBKP6J5RGAydYDTpekNoViNvjyw:Z2dm5O6JUCcz/KJBAsBrJzgi1yw","tlshash":"eac4239669c102b3655e2cf5b09efce932c5b2730a7cdef90416ead19428e41e6de704","first_seen":"2025-12-13T13:58:46.996443Z","last_seen":"2025-12-13T13:58:46.996443Z","times_seen":1,"resource_available":false,"data":null}},"time_used":957,"timings":{"blocked":82,"dns":66,"connect":1,"send":0,"wait":205,"receive":579,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hm.baidu.com/hm.gif?hca=C51F1B0A04DE4AAC\u0026cc=1\u0026ck=1\u0026cl=24-bit\u0026ds=1280x1024\u0026vl=1024\u0026et=0\u0026ja=0\u0026ln=en-us\u0026lo=0\u0026rnd=982884919\u0026si=8448cddb085e8c2a634b9f555b26b972\u0026v=1.3.2\u0026lv=1\u0026sn=55855\u0026r=0\u0026ww=1280\u0026u=https%3A%2F%2Fwww.yhchat.com%2Fc%2Fp%2F31429\u0026tt=NetherSX2%20%7CPS2%E6%A8%A1%E6%8B%9F%E5%99%A8%E5%AE%89%E5%8D%93%E6%9C%80%E6%96%B0%E7%89%88%20%E7%BA%A2%E4%BB%A5%E5%A4%AA%E6%A8%A1%E6%8B%9F%E5%99%A8AetherSX2%20%E7%9A%84%E5%A2%9E%E5%BC%BA%E7%89%88-%E4%BA%91%E6%B9%96%E7%A4%BE%E5%8C%BA","fqdn":"hm.baidu.com","domain":"baidu.com","tld":"com"},"ip":{"addr":"111.45.3.198","port":443,"asn":9808,"as":"China Mobile Communications Group Co., Ltd.","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.yhchat.com/c/p/31429","date":"2025-12-13T13:58:10.197Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"baidu.com","organization":"Beijing Baidu Netcom Science Technology Co., Ltd"},"issuer":{"commonName":"GlobalSign RSA OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 09 Jul 2025 07:01:02 GMT","end":"Mon, 10 Aug 2026 07:01:01 GMT"},"fingerprint":{"sha1":"21:BF:66:0D:67:BE:7A:7F:49:48:05:30:F4:7F:09:F2:30:36:CA:63","sha256":"0D:82:2C:9A:90:5A:EF:E9:8F:37:12:C0:E0:26:30:EE:95:33:2C:45:5F:E7:74:5D:F0:8D:BC:79:F4:B0:A1:49"}}},"request":{"raw":"GET /hm.gif?hca=C51F1B0A04DE4AAC\u0026cc=1\u0026ck=1\u0026cl=24-bit\u0026ds=1280x1024\u0026vl=1024\u0026et=0\u0026ja=0\u0026ln=en-us\u0026lo=0\u0026rnd=982884919\u0026si=8448cddb085e8c2a634b9f555b26b972\u0026v=1.3.2\u0026lv=1\u0026sn=55855\u0026r=0\u0026ww=1280\u0026u=https%3A%2F%2Fwww.yhchat.com%2Fc%2Fp%2F31429\u0026tt=NetherSX2%20%7CPS2%E6%A8%A1%E6%8B%9F%E5%99%A8%E5%AE%89%E5%8D%93%E6%9C%80%E6%96%B0%E7%89%88%20%E7%BA%A2%E4%BB%A5%E5%A4%AA%E6%A8%A1%E6%8B%9F%E5%99%A8AetherSX2%20%E7%9A%84%E5%A2%9E%E5%BC%BA%E7%89%88-%E4%BA%91%E6%B9%96%E7%A4%BE%E5%8C%BA HTTP/1.1\r\nHost: hm.baidu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.yhchat.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nCache-Control: private, max-age=0, no-cache\r\nContent-Length: 43\r\nContent-Type: image/gif\r\nDate: Sat, 13 Dec 2025 13:58:10 GMT\r\nP3p: CP=\"CURa ADMa DEVa PSAo PSDo OUR BUS UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR\"\r\nPragma: no-cache\r\nServer: apache\r\nSet-Cookie: HMACCOUNT=3E6637DD0F67A927; Path=/; Domain=hm.baidu.com; Expires=Sun, 18 Jan 2038 00:00:00 GMT\r\nStrict-Transport-Security: max-age=172800\r\nX-Content-Type-Options: nosniff\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"ad4b0f606e0f8465bc4c4c170b37e1a3","sha1":"50b30fd5f87c85fe5cba2635cb83316ca71250d7","sha256":"cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda","sha512":"ebfe0c0df4bcc167d5cb6ebdd379f9083df62bef63a23818e1c6adf0f64b65467ea58b7cd4d03cf0a1b1a2b07fb7b969bf35f25f1f8538cc65cf3eebdf8a0910","ssdeep":"","tlshash":"15900003fbc08002c2b2e0300b3b0380238ce2200aa8030b80aeb0acecaa3a20c03020","first_seen":"2023-04-05T02:54:03Z","last_seen":"2026-04-04T02:32:17.036778Z","times_seen":326515,"resource_available":true,"data":null}},"time_used":302,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":302,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"chat-web-go.jwzhd.com/v1/community/comment/comment-list","fqdn":"chat-web-go.jwzhd.com","domain":"jwzhd.com","tld":"com"},"ip":{"addr":"120.53.8.151","port":443,"asn":45090,"as":"Shenzhen Tencent Computer Systems Company Limited","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.yhchat.com/c/p/31429","date":"2025-12-13T13:58:21.405Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"chat-web-go.jwzhd.com","organization":""},"issuer":{"commonName":"TrustAsia DV TLS RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Thu, 06 Nov 2025 00:00:00 GMT","end":"Tue, 03 Feb 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D0:29:82:C9:92:D4:57:E5:B0:46:6B:20:CD:D5:C7:FD:2E:CF:F3:98","sha256":"DF:57:FF:CB:EC:08:CF:EF:39:28:D6:AE:7E:71:EE:7C:C8:78:5F:7C:5E:5D:FD:43:8E:6C:34:EE:C3:AB:25:2D"}}},"request":{"raw":"OPTIONS /v1/community/comment/comment-list HTTP/1.1\r\nHost: chat-web-go.jwzhd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,token\r\nReferer: https://www.yhchat.com/\r\nOrigin: https://www.yhchat.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/1.1 204 No Content\r\nServer: openresty/1.27.1.2\r\nDate: Sat, 13 Dec 2025 13:58:23 GMT\r\nConnection: keep-alive\r\nAccess-Control-Allow-Credentials: true\r\nAccess-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept, Authorization, token\r\nAccess-Control-Allow-Methods: POST, GET, OPTIONS\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Expose-Headers: Content-Length, Access-Control-Allow-Origin, Access-Control-Allow-Headers, Cache-Control, Content-Language, Content-Type\r\nContent-Encoding: gzip\r\nVary: Accept-Encoding\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"OpenResty:1.27.1.2","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T02:31:02.170255Z","times_seen":13313751,"resource_available":true,"data":null}},"time_used":2894,"timings":{"blocked":856,"dns":323,"connect":240,"send":0,"wait":1182,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.yhchat.com/_nuxt/8b83391.js","fqdn":"www.yhchat.com","domain":"yhchat.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.yhchat.com/c/p/31429","date":"2025-12-13T13:58:09.124Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.yhchat.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 27 Oct 2025 09:14:42 GMT","end":"Sun, 25 Jan 2026 10:14:32 GMT"},"fingerprint":{"sha1":"24:91:95:07:D5:2C:DE:87:A2:F2:D6:33:AD:CE:39:FB:2B:F4:5E:5B","sha256":"78:99:89:FF:47:0D:84:18:98:D3:CF:B7:B4:40:B9:A4:32:3C:CC:F8:49:9C:B8:2F:41:09:18:0D:4F:51:09:96"}}},"request":{"raw":"GET /_nuxt/8b83391.js HTTP/1.1\r\nHost: www.yhchat.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.yhchat.com/c/p/31429\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 13 Dec 2025 13:58:11 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\naccept-ranges: bytes\r\ncache-control: public, max-age=31536000\r\nlast-modified: Sun, 07 Dec 2025 14:26:15 GMT\r\netag: W/\"f386-19af934bf58\"\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yCZP%2BdTjMq8zJmQdGe9wPjTHoSuGU1T8qPtBTJ6Mx%2Bj%2FPfy9Y8jTYCcQrgYejAsvQ9JMZrwuoZCZ5K6CBlFgub%2BsZCN2QVWUdVi0wA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ad5f982cceeb4eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":62342,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (61770), with no line terminators","md5":"05a042df0c728bb690a5a8cee9ced5ed","sha1":"dffad59058d6ca23c5f2933e1c9cc24bf9d36f2f","sha256":"828f80db6bd9c30ab364e08da6df2d5affe3c17082e0b198bc3c73e6a19c3777","sha512":"185ea9d4e4d51d9a2117d0f5dcc87c4b44b1e5c01133466c9dcf0c75acada9759ad84b827ebfa69ba4288bd352929cc85b2ec3be9f755ba777c50a49c5e0978a","ssdeep":"768:mPfqFLRHFdHFjSLiGas19coL5XPpq7m/zcciwv:mnqFLHm/+oLxPwSIQv","tlshash":"8653d65a70c7f52c928ba021402f2525b0366f596129c4d7e734c8e59ee8f79273fbac","first_seen":"2025-12-13T13:58:46.99954Z","last_seen":"2025-12-13T13:58:46.99954Z","times_seen":1,"resource_available":true,"data":null}},"time_used":2148,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2148,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-13","alert":"Sinkholed","trigger":"www.yhchat.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.yhchat.com/_nuxt/63a0b3c.js","fqdn":"www.yhchat.com","domain":"yhchat.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.yhchat.com/c/p/31429","date":"2025-12-13T13:58:09.126Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.yhchat.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 27 Oct 2025 09:14:42 GMT","end":"Sun, 25 Jan 2026 10:14:32 GMT"},"fingerprint":{"sha1":"24:91:95:07:D5:2C:DE:87:A2:F2:D6:33:AD:CE:39:FB:2B:F4:5E:5B","sha256":"78:99:89:FF:47:0D:84:18:98:D3:CF:B7:B4:40:B9:A4:32:3C:CC:F8:49:9C:B8:2F:41:09:18:0D:4F:51:09:96"}}},"request":{"raw":"GET /_nuxt/63a0b3c.js HTTP/1.1\r\nHost: www.yhchat.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.yhchat.com/c/p/31429\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 13 Dec 2025 13:58:11 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\naccept-ranges: bytes\r\ncache-control: public, max-age=31536000\r\nlast-modified: Sun, 07 Dec 2025 14:26:15 GMT\r\netag: W/\"9e97-19af934bf58\"\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9oD6msIbWPmuf4SeedFmGUclEOo56HzDjnfvAUveyOW9PRaTooxt6gnLyG6v%2Beq1QtQkmscCeAV13w9sNIk2XDu%2BvZoojmKY0AIWdQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ad5f982ccf0b4eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":40599,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (40596), with no line terminators","md5":"3ab9961c7d34e7eaa051cf9a4f556e35","sha1":"69058295de3f03d554e2b599fceecc8a571a28c4","sha256":"6ccbe85dd503eb22b846a0cf66ae8a0ddcf09c4cb5f58038ce97d96c885a55ae","sha512":"f1deabd4ed05827f97eafe6018735284374be3d514c58d79fa458d554baf001af56874bd5d1dea38df7a048bbb93cde97254cc65a4e295dcc014172ee53289db","ssdeep":"768:O20F8M/qori8VzAXKosW1XbW2xmxKFZOb:C/qonAXKosW1XbWamxKFZe","tlshash":"2803e94d72c0f06141df012a94ef5422b1b3a55c7a0a94a8f937d5cd7aa8f1a91a3f3f","first_seen":"2025-12-13T13:58:47.000958Z","last_seen":"2025-12-13T13:58:47.000958Z","times_seen":1,"resource_available":true,"data":null}},"time_used":2123,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2122,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-13","alert":"Sinkholed","trigger":"www.yhchat.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.yhchat.com/_nuxt/a49c945.js","fqdn":"www.yhchat.com","domain":"yhchat.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.yhchat.com/c/p/31429","date":"2025-12-13T13:58:09.129Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.yhchat.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 27 Oct 2025 09:14:42 GMT","end":"Sun, 25 Jan 2026 10:14:32 GMT"},"fingerprint":{"sha1":"24:91:95:07:D5:2C:DE:87:A2:F2:D6:33:AD:CE:39:FB:2B:F4:5E:5B","sha256":"78:99:89:FF:47:0D:84:18:98:D3:CF:B7:B4:40:B9:A4:32:3C:CC:F8:49:9C:B8:2F:41:09:18:0D:4F:51:09:96"}}},"request":{"raw":"GET /_nuxt/a49c945.js HTTP/1.1\r\nHost: www.yhchat.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.yhchat.com/c/p/31429\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 13 Dec 2025 13:58:13 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\naccept-ranges: bytes\r\ncache-control: public, max-age=31536000\r\nlast-modified: Sun, 07 Dec 2025 14:26:15 GMT\r\netag: W/\"4903-19af934bf58\"\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hIJABG1M7BzykDnFJ7i9X7qr9mdXpULahMDbmivXmVwK4feQxbGgNJ8LqtZsbJLfr7laICIG%2Bo%2Ffc4HN0zonr1x9MABASt0s8NjRFA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ad5f982ccf4b4eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":18691,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (18627), with no line terminators","md5":"6941ee71e5558c4b0380af88dd682212","sha1":"91a70cc42f420c445a79f5a49e81059d64684081","sha256":"85b098619eade18b13b4ad1007f0204733b9eb2504e733b6dafb1d7e89aab8f9","sha512":"bd43f13efa42b92f883729f4cf4724d16bb178097ea0b3968836d2f81d509f3602d32229e47ee24bba6869dafa5094eadbaf90ed4bf23a9df27b462412c1662b","ssdeep":"384:kERGiVPJanwNhRj1jJvHpQIL7vugyGqeCUFv:7UiVPJanwNzvvugeeCev","tlshash":"b382e97d708bb4688ac33470902f1626f12b969af406156e367ac5d20ead35c51bbf3f","first_seen":"2025-12-13T13:58:47.002401Z","last_seen":"2025-12-13T13:58:47.002401Z","times_seen":1,"resource_available":true,"data":null}},"time_used":4130,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4130,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-13","alert":"Sinkholed","trigger":"www.yhchat.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"chat-img.jwznb.com/official-website/yunhu128.png","fqdn":"chat-img.jwznb.com","domain":"jwznb.com","tld":"com"},"ip":{"addr":"122.228.86.133","port":443,"asn":134771,"as":"WENZHOU, ZHEJIANG Province, P.R.China.","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.yhchat.com/c/p/31429","date":"2025-12-13T13:58:09.389Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"chat-img.jwznb.com","organization":""},"issuer":{"commonName":"TrustAsia DV TLS RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Mon, 29 Sep 2025 00:00:00 GMT","end":"Sat, 27 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"48:40:14:22:1C:2A:0D:F6:BB:D0:DB:F6:EA:DC:A5:F9:6B:D4:30:E0","sha256":"C6:64:39:5F:15:B1:D8:95:ED:3A:68:28:FC:F3:DF:93:61:C8:B1:96:6D:FA:57:FE:56:20:3D:9F:51:EB:57:4A"}}},"request":{"raw":"GET /official-website/yunhu128.png HTTP/1.1\r\nHost: chat-img.jwznb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.yhchat.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: openresty\r\nDate: Sat, 13 Dec 2025 13:58:10 GMT\r\nContent-Type: image/png\r\nContent-Length: 18977\r\nConnection: keep-alive\r\nAccept-Ranges: bytes\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Expose-Headers: X-Log, X-Reqid\r\nAccess-Control-Max-Age: 2592000\r\nAge: 4449843\r\nCache-Control: public, max-age=31536000\r\nContent-Disposition: inline; filename=\"yunhu128.png\"; filename*=utf-8''yunhu128.png\r\nContent-Md5: 4do2urueCKEKp/xvS8owkw==\r\nContent-Transfer-Encoding: binary\r\nEtag: \"FmSuVPNJQzvUrqxv-q_dCGlFiGYL\"\r\nLast-Modified: Fri, 03 Jun 2022 10:59:19 GMT\r\nX-Log: X-Log\r\nX-M-Log: QNM:cdn-cache-dls-zjwz-wz-19;QNM3\r\nX-M-Reqid: xk7rWmQ1Q\r\nX-Qiniu-Zone: 2\r\nX-Qnm-Cache: Hit\r\nX-Reqid: uBgAAABJMoHs-3AY\r\nX-Svr: IO\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":18977,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 128 x 128, 8-bit/color RGBA, non-interlaced","md5":"e1da36babb9e08a10aa7fc6f4bca3093","sha1":"64ae54f349433bd4aeac6ffaafdd08694588660b","sha256":"6612499deb7adf0ef98bae2dc19466d15c7b7ce9fdf10b488fabf90741c907ff","sha512":"a8d6ea70a9bd9d235b4b774828059450e8bded80f61de4ef788992fc113b63ea683684d65bdf20b85104e452a00cbb0dab333c52a02a6460448be9ba423ca5e3","ssdeep":"384:goFCLVnsYi/dGwPu++YZdXV+FURBlUhTOfKDpPNq76m2IAuKio:g7iYi/31+YV+F+BlUUyDVNqJ2YKZ","tlshash":"6d82df33ac582222d7ca1e124f482a501de68ca6e8c868d5b53f7e92235dd429bce7d1","first_seen":"2025-05-07T19:39:47.072989Z","last_seen":"2025-12-13T13:58:47.004502Z","times_seen":3,"resource_available":false,"data":null}},"time_used":3309,"timings":{"blocked":1357,"dns":622,"connect":287,"send":0,"wait":574,"receive":15,"ssl":452},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"chat-img.jwznb.com/c215feb76eb3008f9fcc118f73e351af.jpg?imageView2/2/w/40/h/40","fqdn":"chat-img.jwznb.com","domain":"jwznb.com","tld":"com"},"ip":{"addr":"122.228.86.130","port":443,"asn":134771,"as":"WENZHOU, ZHEJIANG Province, P.R.China.","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.yhchat.com/c/p/31429","date":"2025-12-13T13:58:09.392Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"chat-img.jwznb.com","organization":""},"issuer":{"commonName":"TrustAsia DV TLS RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Mon, 29 Sep 2025 00:00:00 GMT","end":"Sat, 27 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"48:40:14:22:1C:2A:0D:F6:BB:D0:DB:F6:EA:DC:A5:F9:6B:D4:30:E0","sha256":"C6:64:39:5F:15:B1:D8:95:ED:3A:68:28:FC:F3:DF:93:61:C8:B1:96:6D:FA:57:FE:56:20:3D:9F:51:EB:57:4A"}}},"request":{"raw":"GET /c215feb76eb3008f9fcc118f73e351af.jpg?imageView2/2/w/40/h/40 HTTP/1.1\r\nHost: chat-img.jwznb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.yhchat.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: openresty\r\nDate: Sat, 13 Dec 2025 13:58:11 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 1148\r\nConnection: keep-alive\r\nAccept-Ranges: bytes\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Expose-Headers: X-Log, X-Reqid\r\nAccess-Control-Max-Age: 2592000\r\nAge: 6817773\r\nCache-Control: public, max-age=31536000\r\nContent-Transfer-Encoding: binary\r\nEtag: \"AOZ4VGZ3_E0YqBDJi4M4Yt1kJEPS\"\r\nLast-Modified: Fri, 28 Feb 2025 14:11:51 GMT\r\nX-Log: X-Log\r\nX-M-Log: QNM:cdn-cache-dls-zjwz-wz-21;QNM3\r\nX-M-Reqid: pMMIM1ieU\r\nX-Qiniu-Zone: 2\r\nX-Qnm-Cache: Hit\r\nX-Reqid: rBIAAAAZAJXiLXEY\r\nX-Resp-Code: 290\r\nX-Svr: IO\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":1148,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 40x40, components 3","md5":"0dc5539c960a0cbfbc343387913dac6c","sha1":"3052f36f5bd546e2dcf4e54fff133928b15b06db","sha256":"496ed5d6de76ecf86c7e1cfac0696a1e1867d614871c7e8b26a522b9ce3cb920","sha512":"dba1f6a59fad23a06c011107aa42bf87d834c25028b9ad7644055a37db41596611a08e774e4007abd05dda4a497a9abf1c1dafb0144c8b8eb650789816515111","ssdeep":"","tlshash":"d421b507af755c14dfb6547107d9bb3d170148228cbc6eb5069335089907df57cb61ac","first_seen":"2025-12-13T13:58:47.00558Z","last_seen":"2025-12-13T13:58:47.00558Z","times_seen":1,"resource_available":false,"data":null}},"time_used":3370,"timings":{"blocked":1540,"dns":621,"connect":638,"send":0,"wait":280,"receive":2,"ssl":286},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s2.loli.net/2025/08/21/WwCb2N7zjdVny1R.png","fqdn":"s2.loli.net","domain":"loli.net","tld":"net"},"ip":{"addr":"104.26.0.190","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.yhchat.com/c/p/31429","date":"2025-12-13T13:58:09.394Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s2.loli.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 16 Nov 2025 05:58:43 GMT","end":"Sat, 14 Feb 2026 06:58:39 GMT"},"fingerprint":{"sha1":"7D:1F:02:BD:A4:BB:BF:DA:80:A8:FD:E8:A8:F0:F8:0B:F6:50:8A:68","sha256":"0B:87:5C:EE:12:DB:70:5D:04:36:81:D6:C8:68:27:C4:F7:5F:4F:6E:DF:19:6B:BB:D8:F1:F7:2B:E4:FA:75:34"}}},"request":{"raw":"GET /2025/08/21/WwCb2N7zjdVny1R.png HTTP/1.1\r\nHost: s2.loli.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.yhchat.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 13 Dec 2025 13:58:09 GMT\r\ncontent-type: image/png\r\ncontent-length: 111930\r\nserver: cloudflare\r\nlast-modified: Thu, 21 Aug 2025 10:26:12 GMT\r\netag: \"68a6f444-1b53a\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nvary: Accept, accept-encoding\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\naccept-ranges: bytes\r\ncf-cache-status: BYPASS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IKTa2e%2Fflwva77ZGb3iIGpdkU5hb6ylEKXDFXrHBviuNnSo1H5L85KHDrztG%2F6qUNxyzvMmj1%2FPgArXRal6lV2JLJ23skus%2B\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ad5f9853e3bb4fd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":111930,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1024 x 462, 8-bit/color RGBA, non-interlaced","md5":"3bb84b5ebabef6efcdd823b74d854ced","sha1":"2c69ce4da3a99822d88940c312f1cb70a627ef95","sha256":"30e2148f650ce495e6e965dd1763863b33ca88e8ccc2d21514aadfe52821ff18","sha512":"5e43cc17d96ec3652ea6b8185a5282eac64eaf5d414150cb3d32f5998bf6093f911d7851ba905b7c4b10d59c080f1a22ca00dbbaf5fa2e0fb80415ea9aacc702","ssdeep":"3072:UFFXO7U6oxK8OjjmoJTVuMfqtZwB0PVUdkn+J13:UHGjTV7SqgVrn+33","tlshash":"efb3025d615ac607cb591832eb80882cbbf0311bf6ac46b489acf8594b5ef6c7cf5d48","first_seen":"2025-12-13T13:58:47.006855Z","last_seen":"2025-12-13T13:58:47.006855Z","times_seen":1,"resource_available":false,"data":null}},"time_used":331,"timings":{"blocked":81,"dns":0,"connect":0,"send":0,"wait":217,"receive":33,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"chat-img.jwznb.com/1747832060187.80158f31a53a-2bb4-4689-b78e-ad98df22f2ba.jpeg?imageView2/2/w/60/h/60","fqdn":"chat-img.jwznb.com","domain":"jwznb.com","tld":"com"},"ip":{"addr":"122.228.86.130","port":443,"asn":134771,"as":"WENZHOU, ZHEJIANG Province, P.R.China.","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.yhchat.com/c/p/31429","date":"2025-12-13T13:58:09.401Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"chat-img.jwznb.com","organization":""},"issuer":{"commonName":"TrustAsia DV TLS RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Mon, 29 Sep 2025 00:00:00 GMT","end":"Sat, 27 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"48:40:14:22:1C:2A:0D:F6:BB:D0:DB:F6:EA:DC:A5:F9:6B:D4:30:E0","sha256":"C6:64:39:5F:15:B1:D8:95:ED:3A:68:28:FC:F3:DF:93:61:C8:B1:96:6D:FA:57:FE:56:20:3D:9F:51:EB:57:4A"}}},"request":{"raw":"GET /1747832060187.80158f31a53a-2bb4-4689-b78e-ad98df22f2ba.jpeg?imageView2/2/w/60/h/60 HTTP/1.1\r\nHost: chat-img.jwznb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.yhchat.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: openresty\r\nDate: Sat, 13 Dec 2025 13:58:11 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 1797\r\nConnection: keep-alive\r\nAccept-Ranges: bytes\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Expose-Headers: X-Log, X-Reqid\r\nAccess-Control-Max-Age: 2592000\r\nAge: 4423493\r\nCache-Control: public, max-age=31536000\r\nContent-Transfer-Encoding: binary\r\nEtag: \"AO7COsRZKX0fbpbX8MDGrmL9JZnQ\"\r\nLast-Modified: Wed, 21 May 2025 12:54:20 GMT\r\nX-Log: X-Log\r\nX-M-Log: QNM:cdn-cache-dls-zjwz-wz-25;QNM3\r\nX-M-Reqid: yeFxIkm7b\r\nX-Qiniu-Zone: 2\r\nX-Qnm-Cache: Hit\r\nX-Reqid: P5wAAAByxdzxFnEY\r\nX-Resp-Code: 290\r\nX-Svr: IO\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1797,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 60x60, components 3","md5":"c0bff9b90cfd53c6b9b9ca305479b429","sha1":"4d8345758ad6da931f469bfc2ea8f49d14832c2b","sha256":"ffa7a2536fe6175000c8dae1fe9c535f584c97cf4f914b1861e354dcd6dd7ebb","sha512":"bff8c55a6946a7148f8d21ff67121c43c64f88f008cc631aaad5242a3babca57e0e6c76c3957cb8e57f8d1f52ebe50590f37ce6d258765caf7d2525cca15692a","ssdeep":"","tlshash":"de310b257d295e42ef6e59343467bb62a376810440e2e77158107ec42856cf28d15748","first_seen":"2025-12-13T13:58:47.008126Z","last_seen":"2025-12-13T13:58:47.008126Z","times_seen":1,"resource_available":false,"data":null}},"time_used":3397,"timings":{"blocked":1549,"dns":613,"connect":647,"send":0,"wait":290,"receive":0,"ssl":295},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.yhchat.com/favicon.ico","fqdn":"www.yhchat.com","domain":"yhchat.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.yhchat.com/c/p/31429","date":"2025-12-13T13:58:14.421Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.yhchat.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 27 Oct 2025 09:14:42 GMT","end":"Sun, 25 Jan 2026 10:14:32 GMT"},"fingerprint":{"sha1":"24:91:95:07:D5:2C:DE:87:A2:F2:D6:33:AD:CE:39:FB:2B:F4:5E:5B","sha256":"78:99:89:FF:47:0D:84:18:98:D3:CF:B7:B4:40:B9:A4:32:3C:CC:F8:49:9C:B8:2F:41:09:18:0D:4F:51:09:96"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: www.yhchat.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.yhchat.com/c/p/31429\r\nCookie: Hm_lvt_8448cddb085e8c2a634b9f555b26b972=1765634290; Hm_lpvt_8448cddb085e8c2a634b9f555b26b972=1765634290; HMACCOUNT=C51F1B0A04DE4AAC\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 13 Dec 2025 13:58:16 GMT\r\ncontent-type: image/x-icon\r\nserver: cloudflare\r\npriority: u=6,i=?0\r\naccept-ranges: bytes\r\ncache-control: public, max-age=14400\r\nlast-modified: Tue, 08 Jul 2025 13:43:24 GMT\r\netag: W/\"7738-197ea46e460\"\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\ncf-cache-status: EXPIRED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DuE6gjhy7ZLkJKGQIP5x9UB1gDdEGJypAI8Waax5d7hDjwz%2Bd1Phlw%2FPgXNCNhCS2%2B4es1%2BoZe9%2B5fZyndlwCoEs6v1WaXZfasZErg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ad5f9a42ed1b4eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":30520,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 256x256 with PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced, 32 bits/pixel","md5":"9abf4cc3fdf531199059a5299ccb6fb9","sha1":"6aeaf6b61aa44a2c8436e64708aafed25dddaa14","sha256":"a43dc504d9ce7be399852069c69ae649caa6d32fbf54ff954600d61bfad542f7","sha512":"cbe708969a4a7ef758e7b7b1b49fdb676d61f289304b9a11004e91fc2d99894c84fd4dedbd1d907d3bd80223d526696b339d1d08acbaa60f2384e4f5dcb78c56","ssdeep":"768:dbxtRYdCz5g/YUStfdFhkvIglkAdp3qV+6TfIaTzrMoWrKJ+cvHA:dbCINgY5zekAdUvTganQoWmJ/vHA","tlshash":"e8d202b50da3b4e6b437c8225c505e7e21963f337a27d19c96e93e7a9c21b81f80604e","first_seen":"2025-05-07T19:39:47.109242Z","last_seen":"2025-12-13T13:58:47.009489Z","times_seen":3,"resource_available":false,"data":null}},"time_used":1987,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":1986,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-13","alert":"Sinkholed","trigger":"www.yhchat.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.yhchat.com/c/p/31429","fqdn":"www.yhchat.com","domain":"yhchat.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-12-13T13:58:07.106Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"www.yhchat.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 27 Oct 2025 09:14:42 GMT","end":"Sun, 25 Jan 2026 10:14:32 GMT"},"fingerprint":{"sha1":"24:91:95:07:D5:2C:DE:87:A2:F2:D6:33:AD:CE:39:FB:2B:F4:5E:5B","sha256":"78:99:89:FF:47:0D:84:18:98:D3:CF:B7:B4:40:B9:A4:32:3C:CC:F8:49:9C:B8:2F:41:09:18:0D:4F:51:09:96"}}},"request":{"raw":"GET /c/p/31429 HTTP/1.1\r\nHost: www.yhchat.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 13 Dec 2025 13:58:08 GMT\r\ncontent-type: text/html; charset=utf-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OGo%2BesK1u3Q0%2F3TTkmil2Vw9HT04LSAzNXrrnrUdcBGNArH6DnDg%2FQ3Da8P0pCD7PeQQ42qNhm1Y210TfHS4hAIYK5s0GU9RJefS7A%3D%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 9ad5f9794bebb51d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Baidu Analytics (百度统计)","description":"Baidu Analytics (百度统计) is a free tool for tracking and reporting traffic data of users visiting your site.","website":"https://tongji.baidu.com/","common_platform_enumeration":"","icon":"Baidu Tongji.png","categories":["Analytics"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nuxt.js","description":"Nuxt is a Vue framework for developing modern web applications.","website":"https://nuxt.com","common_platform_enumeration":"","icon":"Nuxt.js.svg","categories":["JavaScript frameworks","Web frameworks","Web servers","Static site generator"]},{"name":"Vue.js","description":"Vue.js is an open-source model–view–viewmodel JavaScript framework for building user interfaces and single-page applications.","website":"https://vuejs.org","common_platform_enumeration":"","icon":"vue.svg","categories":["JavaScript frameworks"]},{"name":"Ant Design","description":"Ant Design is a UI library that can be used with data flow solutions and application frameworks in any React ecosystem.","website":"https://ant.design","common_platform_enumeration":"","icon":"Ant Design.svg","categories":["UI frameworks"]}],"data":{"size":514712,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (65377)","md5":"a7173ef9ce265ae9a837beb715397a07","sha1":"92ed5d476d3807a485de89ba94955da184f888ba","sha256":"fc243761ae96ecbc6f8eb8a093a3f26a77846f4295e0470fec8c334118e22b30","sha512":"2c7675fea6ba14f3362fafd39608dc86ec1c60229bbf187c27fcdb1732c9c031a4ef3d9d82f62439d038482a6adb280052bfb7099953e5d6e8f74708b9fa0822","ssdeep":"3072:SARR9/Ma7aGZhi4rdBQkJ9hz8RG3VqYspOxkKQ+OxkKQbXmr:SARRp1i4rdBBJ9hmYspOxkKQ+OxkKQ6r","tlshash":"c8b4b7246b41303ee5ebc336e491b9595931cf12d62f9dbef3a07b184bc698a11e3e05","first_seen":"2025-12-13T13:58:47.011203Z","last_seen":"2025-12-13T13:58:47.011203Z","times_seen":1,"resource_available":false,"data":null}},"time_used":2303,"timings":{"blocked":459,"dns":440,"connect":1,"send":0,"wait":1385,"receive":0,"ssl":15},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-13","alert":"Sinkholed","trigger":"www.yhchat.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.yhchat.com/_nuxt/15521a5.js","fqdn":"www.yhchat.com","domain":"yhchat.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.yhchat.com/c/p/31429","date":"2025-12-13T13:58:09.090Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.yhchat.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 27 Oct 2025 09:14:42 GMT","end":"Sun, 25 Jan 2026 10:14:32 GMT"},"fingerprint":{"sha1":"24:91:95:07:D5:2C:DE:87:A2:F2:D6:33:AD:CE:39:FB:2B:F4:5E:5B","sha256":"78:99:89:FF:47:0D:84:18:98:D3:CF:B7:B4:40:B9:A4:32:3C:CC:F8:49:9C:B8:2F:41:09:18:0D:4F:51:09:96"}}},"request":{"raw":"GET /_nuxt/15521a5.js HTTP/1.1\r\nHost: www.yhchat.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.yhchat.com/c/p/31429\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 13 Dec 2025 13:58:10 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\naccept-ranges: bytes\r\ncache-control: public, max-age=31536000\r\nlast-modified: Sun, 07 Dec 2025 14:26:15 GMT\r\netag: W/\"bfc-19af934bf58\"\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PHoK30d%2BTIl1raorZwQ5qE8HzAoCmj3doV1cP6esexuk5jATU0IVB%2Fw2e7Rs0PRSyoUTpBT5z61u7VRYvM1YHLXkgbYvtSnexQ858w%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ad5f982cce8b4eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3068,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (3068), with no line terminators","md5":"befdf635c92052ad35c91b9a492ec6cd","sha1":"a6c710d371c62cefd2b7c211563a44e70ad87c51","sha256":"7cc00b27fe97ce83e6fa58700b511a49069d4e16179be14bad535f2c43b90dfc","sha512":"cdc13c7b051161e7ac02e8ced951a1922fc02e2fd02ad660c222b75edfec60d24a38e035734b1c06e8a7fad38bf95d61c7bcffb6b6bda5c2b4b09084939545e1","ssdeep":"","tlshash":"1051d89e3fe4f59a92261868143fa415f6282422295de0d0d3c4d0bab838dc9e613fb7","first_seen":"2025-12-13T13:58:47.013153Z","last_seen":"2025-12-13T13:58:47.013153Z","times_seen":1,"resource_available":true,"data":null}},"time_used":988,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":988,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-13","alert":"Sinkholed","trigger":"www.yhchat.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}}]}