{"report_id":"dcf1baa0-dbcb-46c3-805b-cdd704f44b2a","version":6,"status":"done","tags":[],"date":"2024-08-14T22:34:34Z","url":{"schema":"http","addr":"a81.kc8j6m.shop/","fqdn":"a81.kc8j6m.shop","domain":"kc8j6m.shop","tld":"shop"},"ip":{"addr":"172.67.154.37","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"a81.kc8j6m.shop/#1723674848872","fqdn":"a81.kc8j6m.shop","domain":"kc8j6m.shop","tld":"shop"},"title":"PMYP Prime Minister Laptop Scheme 2024 – Apply Online"},"submit":{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":""},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-10-24T23:33:16Z","useragent":"Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":null},"summary":[{"fqdn":"hm.baidu.com","ip":{"addr":"14.215.182.140","port":443,"asn":4134,"as":"Chinanet","country":"China","country_code":"CN"},"domain_registered":"","domain_rank":8254,"first_seen":"","last_seen":"","alert_count":0,"request_count":2,"received_data":12267,"sent_data":1141,"comment":"","tags":null,"fingerprints":null},{"fqdn":"a81.kc8j6m.shop","ip":{"addr":"104.21.4.147","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"","domain_rank":0,"first_seen":"","last_seen":"","alert_count":2,"request_count":2,"received_data":82221,"sent_data":917,"comment":"","tags":null,"fingerprints":null},{"fqdn":"r11.o.lencr.org","ip":{"addr":"23.36.77.32","port":0,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"domain_registered":"","domain_rank":0,"first_seen":"","last_seen":"","alert_count":0,"request_count":3,"received_data":2663,"sent_data":981,"comment":"","tags":null,"fingerprints":null},{"fqdn":"r10.o.lencr.org","ip":{"addr":"23.36.77.32","port":0,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"domain_registered":"","domain_rank":0,"first_seen":"","last_seen":"","alert_count":0,"request_count":3,"received_data":2664,"sent_data":981,"comment":"","tags":null,"fingerprints":null},{"fqdn":"o.pki.goog","ip":{"addr":"142.250.74.131","port":0,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"","domain_rank":0,"first_seen":"","last_seen":"","alert_count":0,"request_count":2,"received_data":1400,"sent_data":650,"comment":"","tags":null,"fingerprints":null},{"fqdn":"ajax.googleapis.com","ip":{"addr":"142.250.74.74","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"","domain_rank":12905,"first_seen":"","last_seen":"","alert_count":0,"request_count":1,"received_data":34418,"sent_data":431,"comment":"","tags":null,"fingerprints":null},{"fqdn":"biaoche666.cn","ip":{"addr":"104.21.26.63","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"","domain_rank":0,"first_seen":"","last_seen":"","alert_count":0,"request_count":2,"received_data":2923,"sent_data":889,"comment":"","tags":null,"fingerprints":null},{"fqdn":"563cdn.com","ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"The Netherlands","country_code":"NL"},"domain_registered":"","domain_rank":0,"first_seen":"","last_seen":"","alert_count":0,"request_count":1,"received_data":91311,"sent_data":442,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":null}],"analyzer":[{"sensor_name":"infosec_yara","type":"yara","description":"Public InfoSec YARA rules","link":"","alerts":null},{"sensor_name":"openphish","type":"url","description":"OpenPhish","link":"","alerts":[{"sensor_name":"openphish","sensor_type":"url","title":"","description":"OpenPhish","scan_date":"2024-08-01","alert":"Generic/Spear Phishing","trigger":"a81.kc8j6m.shop/","verdict":"phishing","severity":"medium","comment":"Generic/Spear Phishing","link":"https://openphish.com/","meta":null},{"sensor_name":"openphish","sensor_type":"url","title":"","description":"OpenPhish","scan_date":"2024-08-01","alert":"Generic/Spear Phishing","trigger":"a81.kc8j6m.shop/","verdict":"phishing","severity":"medium","comment":"Generic/Spear Phishing","link":"https://openphish.com","meta":null}]},{"sensor_name":"phishtank","type":"url","description":"PhishTank","link":"","alerts":null},{"sensor_name":"mnemonic_dns","type":"domain","description":"mnemonic secure dns","link":"","alerts":null},{"sensor_name":"quad9","type":"domain","description":"Quad9 DNS","link":"","alerts":null},{"sensor_name":"threatfox","type":"url","description":"ThreatFox","link":"","alerts":null}],"urlquery":null},"javascript":{"script":[{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"domTimer","is_inline":false,"md5":"f29d942572b68cc8c76d5067c2d4d6c6","sha1":"6257f1620f626907778d0d10daf2211c9a52697f","sha256":"cbcb07a5ac544e58895e869208dfa323a5d304c1f2e10d190084f2b598356b9f","sha512":"52d0ff4ce53bf5e00e3e72e289c56f830a68c3121f715e9df158ec72f8a6a7cf95ac4b2032a1993f557b08f45af69b1c2cfe77ab164fe97b76de82ec20254e0d","ssdeep":"","tlshash":"c5f000002800003e202802a0030c0000288f8c33230000a08000080a0c20002c288c00","size":316,"data":"","first_seen":"2024-01-22T00:15:49Z","last_seen":"2025-02-02T16:55:35.185809Z","times_seen":36,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"1c5c9160600df2d96d69a4ea16cec7ed","sha1":"3cf678c9135cc952ba6970ef545035bb757a443f","sha256":"a3520fe88e248d2b6c9c6db93309a037ef969fe297208e5bd7e49a55bb32c808","sha512":"2a298a8c2552c6a6c6f8d3f7327d2e9abfa87a0dbb27e9e528a8539b416155c0860f54f46464dfe7e5d49c7906a9eacdac7e5181b86ef15a83276a8f4fee0546","ssdeep":"","tlshash":"689004dc3541d040413354f0441754f5f0340c7430441d04550fdc445c7111cc1354dc","size":37,"data":"","first_seen":"2023-04-11T21:49:14Z","last_seen":"2026-04-03T20:31:04.691626Z","times_seen":102044,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"d85e5d41ae44fd40249c3fcf9b2b3d94","sha1":"dbc1ddf2705e5640cbe0307cb6e29d4f99f4027a","sha256":"bcc1a8c647daa2c534b96831e2ab435e0923cd766b7c2539f67ff320916a3047","sha512":"30725fd368cea781d576e54724a896831a9f47c5a2b9142bf14a666927f9df0e87a5a23ae1ea64549710403fb8fadf0fd63f043baa882b25e124bc465c4de95e","ssdeep":"","tlshash":"f9e0c0ee7203889c2ae76cc4d8174028b1cc1f0bb3642c14bc15180b1c5ae3b43e962e","size":360,"data":"","first_seen":"2024-08-19T13:17:04.924453Z","last_seen":"2024-08-19T13:17:04.924453Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"a81.kc8j6m.shop/","fqdn":"a81.kc8j6m.shop","domain":"kc8j6m.shop","tld":"shop"},"ip":{"addr":"104.21.4.147","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"bcb1aaa49a20e7b1dc786cd06f7ac01d","sha1":"0e6e845f89e45bdc0bee07fe087885701b07d2dd","sha256":"ce5ff23d4090423a12e6d03868deba69eb6dce3f3a31f2e80cf9b9a3c8fe7933","sha512":"03e7bab7cce8b2fa6a70bcf03cd1081568ee9c9b8fe2ca8d742e4095b8d5eba7a4c3a922f53c6994230d8468fb1e3756837bd23342755e5b2953874d7e89600e","ssdeep":"","tlshash":"ff5196b071492afb4d8f2520b66e0506b238d56d08994178d68cf1f31e3d80265fbbaf","size":2608,"data":"","first_seen":"2024-04-18T11:21:27Z","last_seen":"2024-10-11T08:23:14.317156Z","times_seen":32,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"biaoche666.cn/js/script.js","fqdn":"biaoche666.cn","domain":"biaoche666.cn","tld":"cn"},"ip":{"addr":"104.21.26.63","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"abd4e2373b2e8c4dac2e80159641c5f1","sha1":"e273656e58ca934d873204e68dd35670fde657ed","sha256":"021f0fd27042b279a49e982215c6dc3c3ab84e95b35553a119dfdbd50af6be94","sha512":"fb04feb14c2eb999da4b032812a447e1d3b9f0fbc85abcdfb886df2cf1bdc1bcae1684a4e118626ecad9441fa56302ff8981b4ded5da2033012eed2e8a258398","ssdeep":"","tlshash":"a02189deb841353249b0e5a7aa2f370330277169280950279201d9577414d5f8379fce","size":1346,"data":"","first_seen":"2023-05-22T17:22:24Z","last_seen":"2026-04-03T18:36:51.655523Z","times_seen":7510,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"a81.kc8j6m.shop/","fqdn":"a81.kc8j6m.shop","domain":"kc8j6m.shop","tld":"shop"},"ip":{"addr":"104.21.4.147","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"ecffbe366e1b36e55da681315cda4e78","sha1":"4932abca38dc9d841be2c4cd52207207b29c2714","sha256":"214f1274f0b94b658764f6179e2de89e09de88248f35e3d9bf506ce9049c5a14","sha512":"c28c2b19de5731cc4863bde2d22b23c8793febf5f5c5a64b4443d1ca05fdf44f1c070d139832a41f0138f6cee22f51bd97eaa22a2183e8b0f153d7c098ab37c6","ssdeep":"","tlshash":"c6e0df805f056817233403418636530c69a3b98432f2fcc0f2f905a0e17aa57a77aef0","size":345,"data":"","first_seen":"2023-12-13T18:56:14Z","last_seen":"2024-10-11T08:23:14.317755Z","times_seen":59,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hm.baidu.com/hm.js?499e8c96f07e810d9e479117ebfaf473","fqdn":"hm.baidu.com","domain":"baidu.com","tld":"com"},"ip":{"addr":"14.215.182.140","port":443,"asn":4134,"as":"Chinanet","country":"China","country_code":"CN"},"introduction_type":"scriptElement","is_inline":false,"md5":"83473f9c54da6dd824b57d476c6f4e46","sha1":"0d0a68a6ac8404eaf9f025a0754d4b5d182c449b","sha256":"3297611b37684c32be4cb16b9c7213a47624eca22d7e9bfa33718f89ab81cc84","sha512":"508b6aa3454661dc0cc214b45e6f6887762546266219871f2903a3f9c5d1f12aff84b82d0e32733551a73d3da11ecdc07efcf4d7474441daa5cf437ce1998dcf","ssdeep":"384:2DJSoLMJJTRl6s1JXFVCFI/TayvuodsZPIGm8XaR1JRwvutq1tGdc7M04gRw6:2D4VJfHgMdvussZPIx82Rwvutcto07v","tlshash":"1fd2d9e9b282713293a324a5153f324af07b5a54bd4968a4f11894c07d38fbb027bfdd","size":29895,"data":"","first_seen":"2024-08-19T13:17:04.910231Z","last_seen":"2024-08-19T13:17:04.910231Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ajax.googleapis.com/ajax/libs/jquery/1.11.1/jquery.min.js","fqdn":"ajax.googleapis.com","domain":"ajax.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.74.74","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"8101d596b2b8fa35fe3a634ea342d7c3","sha1":"d6c1f41972de07b09bfa63d2e50f9ab41ec372bd","sha256":"540bc6dec1dd4b92ea4d3fb903f69eabf6d919afd48f4e312b163c28cff0f441","sha512":"9e1634eb02ab6acdfd95bf6544eefa278dfdec21f55e94522df2c949fb537a8dfeab6bcfecf69e6c82c7f53a87f864699ce85f0068ee60c56655339927eebcdb","ssdeep":"1536:/PEkjP+iADIOr/NEe876nmBu3HvF38sEeLHFoqqhJ7SerN5wVI+xcBmPv7E+nzm6:ENMyqhJvN32cBC7M6Whca98HrB","tlshash":"b293c8d9b6d27162977730b850bf510bb13a98eab80c4c60f1a4d8e47d78e89507bf2d","size":95786,"data":"","first_seen":"2023-03-07T01:02:02Z","last_seen":"2026-04-03T20:34:37.362857Z","times_seen":45587,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"a81.kc8j6m.shop/","fqdn":"a81.kc8j6m.shop","domain":"kc8j6m.shop","tld":"shop"},"ip":{"addr":"104.21.4.147","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"2768b69fa39beebc2afa7874bf5482e3","sha1":"aff70fe363268c0b9d68b4580e998a68bf051c34","sha256":"7a4a9bdcb8e68e6ad5628d6460333092224e7db0c7fa7425127050393238b580","sha512":"ff04174c215857c94490ae1cff3f4ffecaf5e51df2ebf2cde8523a8b7b7e3751dbdaade7ce982ddb52926bd9b7e2e0e9ee532f36701cde2fb87ade189da0a0cd","ssdeep":"","tlshash":"cad0a78ae0129847ca7370355f7b62087073156748085119b75804481f2471f975abcc","size":228,"data":"","first_seen":"2024-01-22T18:55:06Z","last_seen":"2025-02-02T16:55:35.182959Z","times_seen":40,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null},"http":[{"url":{"schema":"http","addr":"r11.o.lencr.org/","fqdn":"r11.o.lencr.org","domain":"lencr.org","tld":"org"},"ip":{"addr":"23.36.77.32","port":0,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2024-08-14T22:34:07.286584478Z","timestamp":1723674847286,"http_version":"","security_state":"","security_info":null,"request":{"raw":"POST / HTTP/1.1\r\nHost: r11.o.lencr.org\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nContent-Type: application/ocsp-request\r\nContent-Length: 85\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nContent-Type: application/ocsp-response\r\nContent-Length: 504\r\nETag: \"8902058E383C2F43751417E1AF1D582F7A16CE0B6FC180AB20CBC76C4B00F914\"\r\nLast-Modified: Wed, 14 Aug 2024 12:55:00 UTC\r\nCache-Control: public, no-transform, must-revalidate, max-age=6346\r\nExpires: Thu, 15 Aug 2024 00:19:53 GMT\r\nDate: Wed, 14 Aug 2024 22:34:07 GMT\r\nConnection: keep-alive\r\n","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":504,"size_decoded":504,"mime_type":"application/octet-stream","magic":"data","md5":"686480d25645ac2aca7a99974693a82f","sha1":"55ca9d53bd758d2afc75e8a9b59c656ff26a3f70","sha256":"8902058e383c2f43751417e1af1d582f7a16ce0b6fc180ab20cbc76c4b00f914","sha512":"65af6a10b322fb730377c398ae9185f820a73b8bc5f6488927d2664e39fbb75979a13ec0932cbc3734ae938d530328c525b750e9c0d48413a5d512295610148c","ssdeep":"","tlshash":"1cf0750e15196a6410a18c694ffcc8b30031b451309f316bdd4c54f53021bff098410d","first_seen":"2024-08-14T14:57:02Z","last_seen":"2024-08-19T13:21:13.094181Z","times_seen":48873,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"r10.o.lencr.org/","fqdn":"r10.o.lencr.org","domain":"lencr.org","tld":"org"},"ip":{"addr":"23.36.77.32","port":0,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2024-08-14T22:34:07.288714663Z","timestamp":1723674847288,"http_version":"","security_state":"","security_info":null,"request":{"raw":"POST / HTTP/1.1\r\nHost: r10.o.lencr.org\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nContent-Type: application/ocsp-request\r\nContent-Length: 85\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nContent-Type: application/ocsp-response\r\nContent-Length: 504\r\nETag: \"7098A3B23AECE2B00E86FD3A23C5E532001A5002B061170D3ED53DDD36BF8F5B\"\r\nLast-Modified: Tue, 13 Aug 2024 18:27:00 UTC\r\nCache-Control: public, no-transform, must-revalidate, max-age=16574\r\nExpires: Thu, 15 Aug 2024 03:10:21 GMT\r\nDate: Wed, 14 Aug 2024 22:34:07 GMT\r\nConnection: keep-alive\r\n","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":504,"size_decoded":504,"mime_type":"application/octet-stream","magic":"data","md5":"90149b127cd563315012f026a9e0544f","sha1":"1e148905fa524fb8fec15249f30f33085978dc2e","sha256":"7098a3b23aece2b00e86fd3a23c5e532001a5002b061170d3ed53ddd36bf8f5b","sha512":"6d23b8b74a8ed007fa56a56b90c5e4ee8c9e8826bcf40ad07ce28c3bcc9e108585f2bc508082be6139bba764d2f7c952580e725111c250ebfd2516f0ab415e81","ssdeep":"","tlshash":"6af07562027b3591583220207bd8c4272e22357a301014c365e006c62c44b90009c50c","first_seen":"2024-08-14T02:14:38Z","last_seen":"2024-08-19T13:24:25.753269Z","times_seen":24170,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"r10.o.lencr.org/","fqdn":"r10.o.lencr.org","domain":"lencr.org","tld":"org"},"ip":{"addr":"23.36.77.32","port":0,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2024-08-14T22:34:07.636630112Z","timestamp":1723674847636,"http_version":"","security_state":"","security_info":null,"request":{"raw":"POST / HTTP/1.1\r\nHost: r10.o.lencr.org\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nContent-Type: application/ocsp-request\r\nContent-Length: 85\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nContent-Type: application/ocsp-response\r\nContent-Length: 504\r\nETag: \"9EF3DAB56215A67804DB0E12D33772A1902F5914B788530717712902A294BCB5\"\r\nLast-Modified: Wed, 14 Aug 2024 21:59:00 UTC\r\nCache-Control: public, no-transform, must-revalidate, max-age=19436\r\nExpires: Thu, 15 Aug 2024 03:58:03 GMT\r\nDate: Wed, 14 Aug 2024 22:34:07 GMT\r\nConnection: keep-alive\r\n","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":504,"size_decoded":504,"mime_type":"application/octet-stream","magic":"data","md5":"4d209e16679910b467c26590a0073236","sha1":"ddd59fa6902b498e9c0cfb22e342757f954789d0","sha256":"9ef3dab56215a67804db0e12d33772a1902f5914b788530717712902a294bcb5","sha512":"c51db05572ffd286971584fdb91cb70c2dbbca943460845163bbe781c5282225dfccb7121773c517ad3185efeab960a2adcdf13a765219d4843f808a51bc77fd","ssdeep":"","tlshash":"d2f005de12f0b550dab5490569e9e0156c50c5ec3b0541c5738016da16a07fc9f8150c","first_seen":"2024-08-15T00:00:44Z","last_seen":"2024-08-19T13:17:36.886871Z","times_seen":49254,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"r10.o.lencr.org/","fqdn":"r10.o.lencr.org","domain":"lencr.org","tld":"org"},"ip":{"addr":"23.36.77.32","port":0,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2024-08-14T22:34:08.005616476Z","timestamp":1723674848005,"http_version":"","security_state":"","security_info":null,"request":{"raw":"POST / HTTP/1.1\r\nHost: r10.o.lencr.org\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nContent-Type: application/ocsp-request\r\nContent-Length: 85\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nContent-Type: application/ocsp-response\r\nContent-Length: 504\r\nETag: \"62ACC6047405E1E5E89C898325A6F5BA2D9F993214648DC9E50CF0D4F5AA9BAA\"\r\nLast-Modified: Tue, 13 Aug 2024 18:27:00 UTC\r\nCache-Control: public, no-transform, must-revalidate, max-age=11859\r\nExpires: Thu, 15 Aug 2024 01:51:47 GMT\r\nDate: Wed, 14 Aug 2024 22:34:08 GMT\r\nConnection: keep-alive\r\n","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":504,"size_decoded":504,"mime_type":"application/octet-stream","magic":"data","md5":"e4a9f1133ab7ff8fdfec972dc9d80181","sha1":"2a253964c7b022d903b90b57585333f32f730527","sha256":"62acc6047405e1e5e89c898325a6f5ba2d9f993214648dc9e50cf0d4f5aa9baa","sha512":"ff4caa233cfb73b8d7263ab83a94567daf14edefcd5fd1c6eb16fcabfb01afa146db3d639caa64ee91202ce0bcb065f4eea9339a5fa37094c31796895d62cb75","ssdeep":"","tlshash":"46f00eda21faf88167e09185aaecd4622c20b56d385045d9149c06eb94807c59e598de","first_seen":"2024-08-14T03:08:11Z","last_seen":"2024-08-19T13:24:19.880186Z","times_seen":16024,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"o.pki.goog/wr2","fqdn":"o.pki.goog","domain":"pki.goog","tld":"goog"},"ip":{"addr":"142.250.74.131","port":0,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2024-08-14T22:34:08.728329733Z","timestamp":1723674848728,"http_version":"","security_state":"","security_info":null,"request":{"raw":"POST /wr2 HTTP/1.1\r\nHost: o.pki.goog\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nContent-Type: application/ocsp-request\r\nContent-Length: 84\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Type: application/ocsp-response\r\nDate: Wed, 14 Aug 2024 22:34:08 GMT\r\nCache-Control: public, max-age=14400\r\nServer: ocsp_responder\r\nContent-Length: 472\r\nX-XSS-Protection: 0\r\nX-Frame-Options: SAMEORIGIN\r\n","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":472,"size_decoded":472,"mime_type":"application/octet-stream","magic":"data","md5":"e56a082d6444f42c80a7ae10ec1e5909","sha1":"b5a3766c1e5dcad969d411f99c54bb0ad0992ffb","sha256":"5d15e52df1f7a97f31af113511ccade2d1aa23881cf1291255a79a30e201a1e4","sha512":"7e3f9cfaa634db8a7f61207d642fc7b72c9acba46d105952215305c396446a3a8b86a7ddc2a4225c531208305db66429d18b2ccedccde5e7a0929b00d0d94595","ssdeep":"","tlshash":"60f0dc843bb07d099e92040aab9ef4152820d0ba14ac1755263ab1f28bda69e6b00b02","first_seen":"2024-08-13T18:04:03Z","last_seen":"2024-08-19T13:34:43.562074Z","times_seen":2422,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ajax.googleapis.com/ajax/libs/jquery/1.11.1/jquery.min.js","fqdn":"ajax.googleapis.com","domain":"ajax.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.74.74","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://a81.kc8j6m.shop/","date":"2024-08-14T22:34:08.494Z","timestamp":1723674848494,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Jul 2024 12:49:45 GMT","end":"Tue, 22 Oct 2024 12:49:44 GMT"},"fingerprint":{"sha1":"C4:3F:12:39:D2:EC:4C:2C:1C:0A:A6:18:8E:2A:97:2C:D8:C2:7E:AF","sha256":"2C:F6:BB:60:47:DE:95:1D:70:0E:DB:82:4F:8B:25:7C:53:71:AD:B7:2C:CA:F9:7E:00:57:F3:9F:F1:74:25:40"}}},"request":{"raw":"GET /ajax/libs/jquery/1.11.1/jquery.min.js HTTP/1.1\r\nHost: ajax.googleapis.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://a81.kc8j6m.shop/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"hosted-libraries-pushers\"\r\nreport-to: {\"group\":\"hosted-libraries-pushers\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 33434\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 08 Aug 2024 01:28:58 GMT\r\nexpires: Fri, 08 Aug 2025 01:28:58 GMT\r\ncache-control: public, max-age=31536000, stale-while-revalidate=2592000\r\nage: 594310\r\nlast-modified: Tue, 03 Mar 2020 19:15:00 GMT\r\ncontent-type: text/javascript; charset=UTF-8\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":33434,"size_decoded":95786,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (32086)","md5":"8101d596b2b8fa35fe3a634ea342d7c3","sha1":"d6c1f41972de07b09bfa63d2e50f9ab41ec372bd","sha256":"540bc6dec1dd4b92ea4d3fb903f69eabf6d919afd48f4e312b163c28cff0f441","sha512":"9e1634eb02ab6acdfd95bf6544eefa278dfdec21f55e94522df2c949fb537a8dfeab6bcfecf69e6c82c7f53a87f864699ce85f0068ee60c56655339927eebcdb","ssdeep":"1536:/PEkjP+iADIOr/NEe876nmBu3HvF38sEeLHFoqqhJ7SerN5wVI+xcBmPv7E+nzm6:ENMyqhJvN32cBC7M6Whca98HrB","tlshash":"b293c8d9b6d27162977730b850bf510bb13a98eab80c4c60f1a4d8e47d78e89507bf2d","first_seen":"2023-03-07T01:02:02Z","last_seen":"2026-04-03T20:34:37.362857Z","times_seen":45587,"resource_available":true,"data":null}},"time_used":567,"timings":{"blocked":259,"dns":3,"connect":34,"send":0,"wait":22,"receive":23,"ssl":205},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"o.pki.goog/wr2","fqdn":"o.pki.goog","domain":"pki.goog","tld":"goog"},"ip":{"addr":"142.250.74.131","port":0,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2024-08-14T22:34:08.855302142Z","timestamp":1723674848855,"http_version":"","security_state":"","security_info":null,"request":{"raw":"POST /wr2 HTTP/1.1\r\nHost: o.pki.goog\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nContent-Type: application/ocsp-request\r\nContent-Length: 84\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Type: application/ocsp-response\r\nDate: Wed, 14 Aug 2024 22:34:08 GMT\r\nCache-Control: public, max-age=14400\r\nServer: ocsp_responder\r\nContent-Length: 472\r\nX-XSS-Protection: 0\r\nX-Frame-Options: SAMEORIGIN\r\n","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":472,"size_decoded":472,"mime_type":"application/octet-stream","magic":"data","md5":"e56a082d6444f42c80a7ae10ec1e5909","sha1":"b5a3766c1e5dcad969d411f99c54bb0ad0992ffb","sha256":"5d15e52df1f7a97f31af113511ccade2d1aa23881cf1291255a79a30e201a1e4","sha512":"7e3f9cfaa634db8a7f61207d642fc7b72c9acba46d105952215305c396446a3a8b86a7ddc2a4225c531208305db66429d18b2ccedccde5e7a0929b00d0d94595","ssdeep":"","tlshash":"60f0dc843bb07d099e92040aab9ef4152820d0ba14ac1755263ab1f28bda69e6b00b02","first_seen":"2024-08-13T18:04:03Z","last_seen":"2024-08-19T13:34:43.562074Z","times_seen":2422,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"biaoche666.cn/api/event","fqdn":"biaoche666.cn","domain":"biaoche666.cn","tld":"cn"},"ip":{"addr":"104.21.26.63","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://a81.kc8j6m.shop/","date":"2024-08-14T22:34:08.890Z","timestamp":1723674848890,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biaoche666.cn","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 14 Jul 2024 01:22:47 GMT","end":"Sat, 12 Oct 2024 01:22:46 GMT"},"fingerprint":{"sha1":"FB:E4:E1:D3:D8:15:33:6E:1E:29:D5:D3:0E:6B:5D:D8:29:9B:85:A5","sha256":"62:BB:D3:FA:27:B7:47:53:8B:44:B2:19:93:83:AC:B4:E8:73:9D:61:24:E1:D4:20:FA:B4:74:77:82:CA:F6:7E"}}},"request":{"raw":"POST /api/event HTTP/1.1\r\nHost: biaoche666.cn\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain\r\nContent-Length: 86\r\nOrigin: https://a81.kc8j6m.shop\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://a81.kc8j6m.shop/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 202 Accepted\r\ndate: Wed, 14 Aug 2024 22:34:09 GMT\r\ncontent-type: text/plain; charset=utf-8\r\ncontent-length: 2\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: \r\ncache-control: max-age=0, private, must-revalidate\r\nx-request-id: F-u5Mb0SFgLtg4hjPYYC\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=75gVYlW2e1QF5%2FtvHTXosRbei60yUmc9M62cKV%2BT5vKXKXBLpfrGZFLvdn96Cs02ALO%2FyRKaQSKfjK%2FMxG5V8iJMumhHZRKQ57K1wXWqStOQH0xsg%2FxDcXmqk7btX4Bg\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 8b34691dbd42b4f4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n","headers":null,"cookies":null,"status_code":"202","status_text":"Accepted","fingerprints":null,"data":{"size":2,"size_decoded":2,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"444bcb3a3fcf8389296c49467f27e1d6","sha1":"7a85f4764bbd6daf1c3545efbbf0f279a6dc0beb","sha256":"2689367b205c16ce32ed4200942b8b8b1e262dfc70d9bc9fbc77c49699a4f1df","sha512":"9fbbbb5a0f329f9782e2356fa41d89cf9b3694327c1a934d6af2a9df2d7f936ce83717fb513196a4ce5548471708cd7134c2ae99b3c357bcabb2eafc7b9b7570","ssdeep":"","tlshash":"c710000000000000300000000000000000000000000000000000000000000c0000c000","first_seen":"2023-03-08T02:32:37Z","last_seen":"2026-04-03T20:27:23.609791Z","times_seen":390618,"resource_available":true,"data":null}},"time_used":187,"timings":{"blocked":20,"dns":1,"connect":0,"send":0,"wait":165,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"563cdn.com/images/laptopfree.jpeg","fqdn":"563cdn.com","domain":"563cdn.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://a81.kc8j6m.shop/","date":"2024-08-14T22:34:08.496Z","timestamp":1723674848496,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"563cdn.com","organization":""},"issuer":{"commonName":"E6","organization":"Let's Encrypt"},"validity":{"start":"Tue, 06 Aug 2024 00:48:57 GMT","end":"Mon, 04 Nov 2024 00:48:56 GMT"},"fingerprint":{"sha1":"D5:10:52:E8:A1:0E:57:8C:BC:CC:FA:02:2E:84:0C:0F:6A:2C:53:86","sha256":"AE:DC:0B:B6:83:32:D3:61:AB:41:75:4D:C5:75:9A:40:8D:F8:10:D2:69:5C:99:93:57:A4:E1:FF:76:AE:5E:C0"}}},"request":{"raw":"GET /images/laptopfree.jpeg HTTP/1.1\r\nHost: 563cdn.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://a81.kc8j6m.shop/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 14 Aug 2024 22:34:09 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 90602\r\netag: \"ad43c64a98ce069e008bd61dbd64f87e\"\r\nlast-modified: Wed, 24 Jan 2024 01:59:12 GMT\r\nvary: Accept-Encoding\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=hM5Tns5ElhSFL7%2BT6ClO9i17KBeyVwx0c7NK2oePU6w6qERtY9e5WNYdE0WVsdVgVvXipjfU0UGmhtzidJfjQueHVQ%2BEDYm98DMU2BJgLERiTCtoKHN3qiSME%2Fhb\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 8b34691c497b56c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":90602,"size_decoded":90602,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1082x672, components 3","md5":"ad43c64a98ce069e008bd61dbd64f87e","sha1":"c8882647f2bc82bcb66752ed094dd4d9e5c6ec4c","sha256":"7887bebae5fca7fb2139245ab9ae67b401da166c6737367a98097b73b7db8dda","sha512":"5d843eefedab541d1b2831f4878e2b4b8de0d3abbeb8eba7ff50a459956bcb172e216aed81eb6955cf00dcc9b40437fae4775349f2d4a9831bd6b7294dcc678c","ssdeep":"1536:EHcfTGWDOmB0trm0q8vyh7JrcCWtfuzPEcWwpdnNIrByinN8TOpZs56j+tNskQCQ:E8fTGWDdV78vyh7JBz8Lyi+KK6j+tNsz","tlshash":"cf9302768ab3d210e8fd043fa2f37bb7d80d495392c41847e2835a1066976ab0d886b9","first_seen":"2024-01-24T06:22:39Z","last_seen":"2024-10-11T08:23:14.314177Z","times_seen":39,"resource_available":false,"data":null}},"time_used":930,"timings":{"blocked":187,"dns":60,"connect":3,"send":0,"wait":552,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"r11.o.lencr.org/","fqdn":"r11.o.lencr.org","domain":"lencr.org","tld":"org"},"ip":{"addr":"23.36.77.32","port":0,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2024-08-14T22:34:10.122713316Z","timestamp":1723674850122,"http_version":"","security_state":"","security_info":null,"request":{"raw":"POST / HTTP/1.1\r\nHost: r11.o.lencr.org\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nContent-Type: application/ocsp-request\r\nContent-Length: 85\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nContent-Type: application/ocsp-response\r\nContent-Length: 504\r\nETag: \"520DBCA26889DCD055AD1E36265C6D088B8B7C9D6907CC59EECC7FF47E4C9942\"\r\nLast-Modified: Mon, 12 Aug 2024 21:16:00 UTC\r\nCache-Control: public, no-transform, must-revalidate, max-age=14016\r\nExpires: Thu, 15 Aug 2024 02:27:46 GMT\r\nDate: Wed, 14 Aug 2024 22:34:10 GMT\r\nConnection: keep-alive\r\n","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":504,"size_decoded":504,"mime_type":"application/octet-stream","magic":"data","md5":"77619f0113a62e8c4c44f195901b385c","sha1":"1e1a5e3768ca683e66667aa14efa7042df57ee2f","sha256":"520dbca26889dcd055ad1e36265c6d088b8b7c9d6907cc59eecc7ff47e4c9942","sha512":"459cb24749852faa2cc051ed3001e7591e96899f52c68d761e7a7e9539f87881e58e3a6e3df41df0c01f15106d8c097f8a658ab7f7ac31212afbbffc19ac658d","ssdeep":"","tlshash":"7ff054800d6174120f1508eb96ddc1330930db7414f039f34a9c23e52c79fbe8a4052d","first_seen":"2024-08-12T23:20:08Z","last_seen":"2024-08-19T13:41:24.292342Z","times_seen":47316,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"r11.o.lencr.org/","fqdn":"r11.o.lencr.org","domain":"lencr.org","tld":"org"},"ip":{"addr":"23.36.77.32","port":0,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2024-08-14T22:34:10.127152858Z","timestamp":1723674850127,"http_version":"","security_state":"","security_info":null,"request":{"raw":"POST / HTTP/1.1\r\nHost: r11.o.lencr.org\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nContent-Type: application/ocsp-request\r\nContent-Length: 85\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nContent-Type: application/ocsp-response\r\nContent-Length: 504\r\nETag: \"520DBCA26889DCD055AD1E36265C6D088B8B7C9D6907CC59EECC7FF47E4C9942\"\r\nLast-Modified: Mon, 12 Aug 2024 21:16:00 UTC\r\nCache-Control: public, no-transform, must-revalidate, max-age=14016\r\nExpires: Thu, 15 Aug 2024 02:27:46 GMT\r\nDate: Wed, 14 Aug 2024 22:34:10 GMT\r\nConnection: keep-alive\r\n","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":504,"size_decoded":504,"mime_type":"application/octet-stream","magic":"data","md5":"77619f0113a62e8c4c44f195901b385c","sha1":"1e1a5e3768ca683e66667aa14efa7042df57ee2f","sha256":"520dbca26889dcd055ad1e36265c6d088b8b7c9d6907cc59eecc7ff47e4c9942","sha512":"459cb24749852faa2cc051ed3001e7591e96899f52c68d761e7a7e9539f87881e58e3a6e3df41df0c01f15106d8c097f8a658ab7f7ac31212afbbffc19ac658d","ssdeep":"","tlshash":"7ff054800d6174120f1508eb96ddc1330930db7414f039f34a9c23e52c79fbe8a4052d","first_seen":"2024-08-12T23:20:08Z","last_seen":"2024-08-19T13:41:24.292342Z","times_seen":47316,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hm.baidu.com/hm.js?499e8c96f07e810d9e479117ebfaf473","fqdn":"hm.baidu.com","domain":"baidu.com","tld":"com"},"ip":{"addr":"14.215.182.140","port":443,"asn":4134,"as":"Chinanet","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://a81.kc8j6m.shop/","date":"2024-08-14T22:34:08.885Z","timestamp":1723674848885,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"baidu.com","organization":"Beijing Baidu Netcom Science Technology Co., Ltd"},"issuer":{"commonName":"GlobalSign RSA OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 08 Jul 2024 01:41:02 GMT","end":"Sat, 09 Aug 2025 01:41:01 GMT"},"fingerprint":{"sha1":"EF:0F:BE:13:02:E2:C4:D4:89:BA:8F:BA:88:EF:6F:95:DC:CF:7B:E0","sha256":"90:73:DE:D9:D9:93:A9:34:C2:9C:5E:C3:C6:AF:A7:28:6D:2F:0F:88:48:35:2F:94:D0:20:35:86:5D:85:68:E2"}}},"request":{"raw":"GET /hm.js?499e8c96f07e810d9e479117ebfaf473 HTTP/1.1\r\nHost: hm.baidu.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://a81.kc8j6m.shop/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nCache-Control: max-age=0, must-revalidate\r\nContent-Encoding: gzip\r\nContent-Length: 11289\r\nContent-Type: application/javascript\r\nDate: Wed, 14 Aug 2024 22:34:10 GMT\r\nEtag: 500272bcace387771e9e3d57f8870559\r\nP3p: CP=\"CURa ADMa DEVa PSAo PSDo OUR BUS UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR\"\r\nServer: apache\r\nSet-Cookie: HMACCOUNT=E5ECBE70ADBBCBA8; Path=/; Domain=hm.baidu.com; Expires=Sun, 18 Jan 2038 00:00:00 GMT\r\nStrict-Transport-Security: max-age=172800\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":11289,"size_decoded":29895,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (619)","md5":"83473f9c54da6dd824b57d476c6f4e46","sha1":"0d0a68a6ac8404eaf9f025a0754d4b5d182c449b","sha256":"3297611b37684c32be4cb16b9c7213a47624eca22d7e9bfa33718f89ab81cc84","sha512":"508b6aa3454661dc0cc214b45e6f6887762546266219871f2903a3f9c5d1f12aff84b82d0e32733551a73d3da11ecdc07efcf4d7474441daa5cf437ce1998dcf","ssdeep":"384:2DJSoLMJJTRl6s1JXFVCFI/TayvuodsZPIGm8XaR1JRwvutq1tGdc7M04gRw6:2D4VJfHgMdvussZPIx82Rwvutcto07v","tlshash":"1fd2d9e9b282713293a324a5153f324af07b5a54bd4968a4f11894c07d38fbb027bfdd","first_seen":"2024-08-19T13:17:04.910231Z","last_seen":"2024-08-19T13:17:04.910231Z","times_seen":1,"resource_available":true,"data":null}},"time_used":2773,"timings":{"blocked":1152,"dns":337,"connect":268,"send":0,"wait":358,"receive":111,"ssl":543},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hm.baidu.com/hm.gif?hca=E5ECBE70ADBBCBA8\u0026cc=1\u0026ck=1\u0026cl=24-bit\u0026ds=1280x1024\u0026vl=1024\u0026et=0\u0026ja=0\u0026ln=en-us\u0026lo=0\u0026rnd=518898231\u0026si=499e8c96f07e810d9e479117ebfaf473\u0026v=1.3.2\u0026lv=1\u0026sn=38816\u0026r=0\u0026ww=1280\u0026u=https%3A%2F%2Fa81.kc8j6m.shop%2F%231723674848872\u0026tt=PMYP%20Prime%20Minister%20Laptop%20Scheme%202024%20%E2%80%93%20Apply%20Online","fqdn":"hm.baidu.com","domain":"baidu.com","tld":"com"},"ip":{"addr":"14.215.182.140","port":443,"asn":4134,"as":"Chinanet","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://a81.kc8j6m.shop/","date":"2024-08-14T22:34:10.527Z","timestamp":1723674850527,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"baidu.com","organization":"Beijing Baidu Netcom Science Technology Co., Ltd"},"issuer":{"commonName":"GlobalSign RSA OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 08 Jul 2024 01:41:02 GMT","end":"Sat, 09 Aug 2025 01:41:01 GMT"},"fingerprint":{"sha1":"EF:0F:BE:13:02:E2:C4:D4:89:BA:8F:BA:88:EF:6F:95:DC:CF:7B:E0","sha256":"90:73:DE:D9:D9:93:A9:34:C2:9C:5E:C3:C6:AF:A7:28:6D:2F:0F:88:48:35:2F:94:D0:20:35:86:5D:85:68:E2"}}},"request":{"raw":"GET /hm.gif?hca=E5ECBE70ADBBCBA8\u0026cc=1\u0026ck=1\u0026cl=24-bit\u0026ds=1280x1024\u0026vl=1024\u0026et=0\u0026ja=0\u0026ln=en-us\u0026lo=0\u0026rnd=518898231\u0026si=499e8c96f07e810d9e479117ebfaf473\u0026v=1.3.2\u0026lv=1\u0026sn=38816\u0026r=0\u0026ww=1280\u0026u=https%3A%2F%2Fa81.kc8j6m.shop%2F%231723674848872\u0026tt=PMYP%20Prime%20Minister%20Laptop%20Scheme%202024%20%E2%80%93%20Apply%20Online HTTP/1.1\r\nHost: hm.baidu.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://a81.kc8j6m.shop/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nCache-Control: private, max-age=0, no-cache\r\nContent-Length: 43\r\nContent-Type: image/gif\r\nDate: Wed, 14 Aug 2024 22:34:10 GMT\r\nP3p: CP=\"CURa ADMa DEVa PSAo PSDo OUR BUS UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR\"\r\nPragma: no-cache\r\nServer: apache\r\nSet-Cookie: HMACCOUNT=30E0B7DD6C0B5226; Path=/; Domain=hm.baidu.com; Expires=Sun, 18 Jan 2038 00:00:00 GMT\r\nStrict-Transport-Security: max-age=172800\r\nX-Content-Type-Options: nosniff\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":43,"size_decoded":43,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"ad4b0f606e0f8465bc4c4c170b37e1a3","sha1":"50b30fd5f87c85fe5cba2635cb83316ca71250d7","sha256":"cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda","sha512":"ebfe0c0df4bcc167d5cb6ebdd379f9083df62bef63a23818e1c6adf0f64b65467ea58b7cd4d03cf0a1b1a2b07fb7b969bf35f25f1f8538cc65cf3eebdf8a0910","ssdeep":"","tlshash":"15900003fbc08002c2b2e0300b3b0380238ce2200aa8030b80aeb0acecaa3a20c03020","first_seen":"2023-04-05T02:54:03Z","last_seen":"2026-04-03T20:31:04.607762Z","times_seen":326388,"resource_available":true,"data":null}},"time_used":354,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":354,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"a81.kc8j6m.shop/favicon.ico","fqdn":"a81.kc8j6m.shop","domain":"kc8j6m.shop","tld":"shop"},"ip":{"addr":"104.21.4.147","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://a81.kc8j6m.shop/","date":"2024-08-14T22:34:09.358Z","timestamp":1723674849358,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kc8j6m.shop","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 11 Jul 2024 10:28:04 GMT","end":"Wed, 09 Oct 2024 10:28:03 GMT"},"fingerprint":{"sha1":"BE:BA:6B:58:73:29:6A:62:B2:3C:F2:C7:56:4F:25:BA:F0:F7:82:C5","sha256":"54:75:96:19:2B:D3:94:09:D9:D5:52:90:22:74:58:69:22:BF:62:01:DB:EC:F2:91:FD:CA:3F:C4:88:53:99:7A"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: a81.kc8j6m.shop\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://a81.kc8j6m.shop/\r\nCookie: loclang=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\ndate: Wed, 14 Aug 2024 22:34:09 GMT\r\ncontent-type: text/html\r\nvary: Accept-Encoding\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=pvniib1tFGIAvzhKOoj4vg21epml4j3wuKk9fdahud4zxxG8IQ7oJAtd9cGyPzzTYak5d6qt2Q0l%2FdlHARUAie4qMnK%2FtPjeMna%2B0oQOvI4sIwAkP5b8EQMp0m6Ojk2UirQ%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 8b3469208e810b49-OSL\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":null,"data":{"size":63043,"size_decoded":63043,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-03T20:30:56.573385Z","times_seen":13302581,"resource_available":true,"data":null}},"time_used":606,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":604,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"openphish","sensor_type":"url","title":"","description":"OpenPhish","scan_date":"2024-08-01","alert":"Generic/Spear Phishing","trigger":"a81.kc8j6m.shop/","verdict":"phishing","severity":"medium","comment":"Generic/Spear Phishing","link":"https://openphish.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"a81.kc8j6m.shop/","fqdn":"a81.kc8j6m.shop","domain":"kc8j6m.shop","tld":"shop"},"ip":{"addr":"104.21.4.147","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2024-08-14T22:34:07.710Z","timestamp":1723674847710,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kc8j6m.shop","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 11 Jul 2024 10:28:04 GMT","end":"Wed, 09 Oct 2024 10:28:03 GMT"},"fingerprint":{"sha1":"BE:BA:6B:58:73:29:6A:62:B2:3C:F2:C7:56:4F:25:BA:F0:F7:82:C5","sha256":"54:75:96:19:2B:D3:94:09:D9:D5:52:90:22:74:58:69:22:BF:62:01:DB:EC:F2:91:FD:CA:3F:C4:88:53:99:7A"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: a81.kc8j6m.shop\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 14 Aug 2024 22:34:08 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nvary: Accept-Encoding\r\nset-cookie: loclang=en; expires=Thu, 15-Aug-2024 22:34:08 GMT; Max-Age=86400\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=CliewVL7vEr%2BTWzf3gBke1dqSoWTK1g5shs8rtZ2RL8V8d77ed7kkFyXxLP9JsDfoz8Xqvt5Dnisv6QslL%2BrpfX%2F3Ar%2FP%2BXZ8yOXni0ClMXL%2BotT6xEiapuR3vZpKBYvO0M%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 8b3469165e62568e-OSL\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":17915,"size_decoded":17915,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-03T20:30:56.573385Z","times_seen":13302581,"resource_available":true,"data":null}},"time_used":458,"timings":{"blocked":26,"dns":1,"connect":1,"send":0,"wait":407,"receive":0,"ssl":19},"alerts":{"ids":null,"analyzer":[{"sensor_name":"openphish","sensor_type":"url","title":"","description":"OpenPhish","scan_date":"2024-08-01","alert":"Generic/Spear Phishing","trigger":"a81.kc8j6m.shop/","verdict":"phishing","severity":"medium","comment":"Generic/Spear Phishing","link":"https://openphish.com","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"biaoche666.cn/js/script.js","fqdn":"biaoche666.cn","domain":"biaoche666.cn","tld":"cn"},"ip":{"addr":"104.21.26.63","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://a81.kc8j6m.shop/","date":"2024-08-14T22:34:08.498Z","timestamp":1723674848498,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biaoche666.cn","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 14 Jul 2024 01:22:47 GMT","end":"Sat, 12 Oct 2024 01:22:46 GMT"},"fingerprint":{"sha1":"FB:E4:E1:D3:D8:15:33:6E:1E:29:D5:D3:0E:6B:5D:D8:29:9B:85:A5","sha256":"62:BB:D3:FA:27:B7:47:53:8B:44:B2:19:93:83:AC:B4:E8:73:9D:61:24:E1:D4:20:FA:B4:74:77:82:CA:F6:7E"}}},"request":{"raw":"GET /js/script.js HTTP/1.1\r\nHost: biaoche666.cn\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://a81.kc8j6m.shop/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 14 Aug 2024 22:34:08 GMT\r\ncontent-type: application/javascript\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\ncache-control: max-age=43200\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nexpires: Thu, 15 Aug 2024 06:31:45 GMT\r\nx-cache: HIT\r\ncontent-encoding: gzip\r\ncf-cache-status: HIT\r\nage: 14599\r\nlast-modified: Wed, 14 Aug 2024 18:30:49 GMT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=xO1n7PyrJBoGYHfi5ipZ%2BJUVKcg5ZiOh%2F6zEKpRDKdwE1F7ew7gvXbJEa%2BCb7lbVcLPCXwSaC1MN17Se7omSwadUFN0CDXB5HaJ0l4wEq4NAjxKi6HVx%2FllGgQXEL9O%2F\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 8b34691c082a712a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1346,"size_decoded":1346,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (1384), with no line terminators","md5":"16cfd1982a40489c41a52add24d36b85","sha1":"344f1896d895c5d0a7c4caecafcf1942603cd026","sha256":"72073aacecd145e525b16c4c845c07bff5798e813eeed702dff748a18b6186ce","sha512":"18cf93b1c83d168c61f440716599efc2949561235ddb8bb9c1230c38829c01d8e2539fda9c196d0b64835c39267e5ce36f6bec7eecb735681ca2382e32e96607","ssdeep":"","tlshash":"0a2189deb841353249b0e5a7aa2f370330277169280950279201d9577414d5f8379fce","first_seen":"2023-05-22T17:22:24Z","last_seen":"2025-04-05T18:42:16.38307Z","times_seen":2688,"resource_available":false,"data":null}},"time_used":307,"timings":{"blocked":146,"dns":55,"connect":4,"send":0,"wait":10,"receive":0,"ssl":86},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}