{"report_id":"dfad122b-974b-40fb-b7e5-d1d00de8a4f5","version":6,"status":"done","tags":[],"date":"2026-03-14T04:58:07Z","url":{"schema":"http","addr":"6306a.com/","fqdn":"6306a.com","domain":"6306a.com","tld":"com"},"ip":{"addr":"148.135.93.92","port":0,"asn":35916,"as":"MULTA-ASN1","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"y9nfflf0ci.6306ldy88.com/","fqdn":"y9nfflf0ci.6306ldy88.com","domain":"6306ldy88.com","tld":"com"},"title":"澳门新葡京","dom":{"size":10402,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"3491b2b57bebbbbb2f79077dfae47090","sha1":"8d7f101bcb424db791ef7d50718819cc7da781d0","sha256":"c0292cc0f1ae917d1c463f8e0f3d0c86306d73909a992ddd2c7e34c2a12c0d61","sha512":"3b48247b9cee7ef23d1849b7532868121cfea40833e3540f8a2d6a73e339fdd4498795f7173386152f93f3963ddfaf7dcc225d4b3f7bbeacf97e96f38d4d9398","ssdeep":"96:1idZ9owsOZWe0E4OgRKke0E4ANP20O160:1iFBWEb6lEC0OZ","tlshash":"81225924a5f5199344234d80ae28a96b7fc4e5078a1b861071ed0fdaef97cf6cd1f28c","dom_hash":"domhash97eb88d26bc4932f70fc5170a058b8e7","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"6306a.com/","fqdn":"6306a.com","domain":"6306a.com","tld":"com"},"ip":{"addr":"148.135.93.92","port":0,"asn":35916,"as":"MULTA-ASN1","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-04-18T04:58:07Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-14","alert":"Sinkholed","trigger":"6306a.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"y9nfflf0ci.6306ldy88.com","ip":{"addr":"148.135.93.91","port":443,"asn":35916,"as":"MULTA-ASN1","country":"United States","country_code":"US"},"domain_registered":"2026-01-27","domain_rank":0,"first_seen":"2026-03-14T04:58:10.111291Z","last_seen":"2026-03-14T04:58:10.111291Z","alert_count":0,"request_count":32,"received_data":5601821,"sent_data":14845,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"jQuery:2.2.4","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}]},{"fqdn":"6306a.com","ip":{"addr":"148.135.93.92","port":443,"asn":35916,"as":"MULTA-ASN1","country":"United States","country_code":"US"},"domain_registered":"2024-09-23","domain_rank":0,"first_seen":"2025-08-30T14:41:02.630521Z","last_seen":"2025-08-30T14:41:25.230537Z","alert_count":2,"request_count":2,"received_data":1640,"sent_data":903,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"6xu2o2diuceskjypgtwbrd9e.6306066tly.com","ip":{"addr":"148.135.93.92","port":443,"asn":35916,"as":"MULTA-ASN1","country":"United States","country_code":"US"},"domain_registered":"2026-01-04","domain_rank":0,"first_seen":"2026-03-14T04:58:10.10986Z","last_seen":"2026-03-14T04:58:10.10986Z","alert_count":0,"request_count":3,"received_data":26543,"sent_data":1484,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"cdnjs.cloudflare.com","ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2009-02-17","domain_rank":1222,"first_seen":"2012-05-23T12:49:49Z","last_seen":"2026-03-08T22:29:46.591494Z","alert_count":0,"request_count":2,"received_data":254184,"sent_data":1067,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"y9nfflf0ci.6306ldy88.com/js/rem.js","fqdn":"y9nfflf0ci.6306ldy88.com","domain":"6306ldy88.com","tld":"com"},"ip":{"addr":"148.135.93.92","port":443,"asn":35916,"as":"MULTA-ASN1","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"e74e945fcc19cbd1d5276e5d4548d525","sha1":"8236e3f3fc64916f9f7f65e8aa2680c9302f0858","sha256":"33442081f56c808935dba715de506e29ebf99eea4d997a64818edb9081369fa5","sha512":"a31082fa7c4afd5138b6f5048ea64b3fced8635505c69b56b2de5168b699069401b415f26eb42ed6ccdbc8e8c8db6f50618fea5890565ed5404f360176907245","ssdeep":"","tlshash":"8a01f166644125384b2b0009a925726cfeb7811303235283f45cae766fb0e430ab1fdc","size":840,"data":"","first_seen":"2023-03-07T12:23:57Z","last_seen":"2026-04-16T00:22:21.821892Z","times_seen":14406,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"y9nfflf0ci.6306ldy88.com/","fqdn":"y9nfflf0ci.6306ldy88.com","domain":"6306ldy88.com","tld":"com"},"ip":{"addr":"148.135.93.91","port":443,"asn":35916,"as":"MULTA-ASN1","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"8c98d8c33c26553aa4256817fe8ea0a5","sha1":"d5883d38cfeadd9bf2540eec2694a882dd3db1cf","sha256":"b68b5477d135ce269d0ee801e3d8881c070c89bec240fffbdc806e3e6d66970b","sha512":"0dee025e18ba0a17c2be36bb9e467b0d041f862012f430c0d8c0bc6c270fdd082dd9c7e4652094464d39391b3266e6b48997e67b35e1b0aa1068a64db8ed76c3","ssdeep":"96:JXj9xqRS5PAABv0ZgpzNEXWLdbFE6Szwexlo9k+LDRkTkYzIS4RAE8p8NF/LJ2Ue:NBxsS1cupzNEXWh1SsezDgYzn4RAHpKA","tlshash":"27c119183182a87ac5ce9236484f524eb936715a659cc080e53adce4bfbcf4b9137f36","size":5860,"data":"","first_seen":"2025-05-13T06:59:48.254921Z","last_seen":"2026-04-09T14:42:39.087984Z","times_seen":326,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"y9nfflf0ci.6306ldy88.com/js/tj.js","fqdn":"y9nfflf0ci.6306ldy88.com","domain":"6306ldy88.com","tld":"com"},"ip":{"addr":"148.135.93.92","port":443,"asn":35916,"as":"MULTA-ASN1","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"28a175a7d95e0cb7eccacfef5d36f63d","sha1":"3e52514c73be2838ca4221a00fae5c859234929a","sha256":"d8539e4601152cfb4f4ad7a27b8422d2624d9d8b9c955ba6768e9c746379f61c","sha512":"ee19558a0335f389e738bba4599b768b59d332afe1458f6989561967a853b522df945a77be67f110d879a05339d570a46472d0b558d4f7e20ec612a261052825","ssdeep":"1536:zab7c4ArjofL5+SuTbREYIk61nJXVxWR9:+erUfr5gD9","tlshash":"8253f85a72c2b13a9357b0719c8f4845f73dad29624d88898a1dd5e4b8b482cc37edfc","size":65166,"data":"","first_seen":"2025-08-15T05:45:40.070339Z","last_seen":"2026-04-09T14:42:39.068853Z","times_seen":32,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"y9nfflf0ci.6306ldy88.com/","fqdn":"y9nfflf0ci.6306ldy88.com","domain":"6306ldy88.com","tld":"com"},"ip":{"addr":"148.135.93.91","port":443,"asn":35916,"as":"MULTA-ASN1","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"44ad0b5179caf86377d8a2aeeece40b2","sha1":"e437cd5169963492f195e331b775c2999ee0793d","sha256":"9805f8b31a5d8a2b9c70969e2cfebd9e02be376201b069e993fb26fc37aab814","sha512":"9a939576acc69c87e8343f3dba4111690d3568da8b757434ffc3f897670b6b15057d47af84f90690a9c12eacbd287c5444f58c556f04ff43243b423562340e3c","ssdeep":"","tlshash":"31e0230d526910767473d8155d6de1019a65c1471d7ffd347c4c42469f1e21d61b93e0","size":301,"data":"","first_seen":"2025-03-04T21:47:36.924054Z","last_seen":"2026-03-25T07:51:29.279018Z","times_seen":256,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"y9nfflf0ci.6306ldy88.com/js/swiper-4.2.0.min.js","fqdn":"y9nfflf0ci.6306ldy88.com","domain":"6306ldy88.com","tld":"com"},"ip":{"addr":"148.135.93.92","port":443,"asn":35916,"as":"MULTA-ASN1","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"be15b3ba6a71edd608b9af34dfc6130c","sha1":"b11842fbe74778511b86bf899fbd02102b57ac62","sha256":"add18244c3d92cb789bd50456f05f02ca034c908bbf4210fedbd9013b3bf5d96","sha512":"ba9c83238efc0b5f43e2e85b104a2b1b010defa0f12d7c3cbff918fae76a7f3d3753ee18dead132729bdd0ae8a3854a481bcba35655dd37a6b6a03813d295029","ssdeep":"3072:6ShcwIktpnBohgZu7HgZsUOUFBWqJTq+NX:hlIktFBohgZu7HAsUOUFBWqJTq+l","tlshash":"65c3184eb390619510e36256565e9241a3b72809780ad0ac35b6cce7adbde4c13bfffc","size":119506,"data":"","first_seen":"2023-03-07T12:23:57Z","last_seen":"2026-04-15T08:07:23.604653Z","times_seen":13525,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"6xu2o2diuceskjypgtwbrd9e.6306066tly.com/","fqdn":"6xu2o2diuceskjypgtwbrd9e.6306066tly.com","domain":"6306066tly.com","tld":"com"},"ip":{"addr":"148.135.93.92","port":443,"asn":35916,"as":"MULTA-ASN1","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"9d73c176637c9d2a2484418e006f558e","sha1":"15f26c2151219e2ead3b80a8ab2cf3a3a210bb16","sha256":"2f55201f799dbf38c2bd7b07a144fe1f3b553fd65291ea455e9234af0193ce6d","sha512":"33aa6f7c60733ccb1774e1ec935df723c0dd887fde91f7d598aae7191d0f4a5f4258d72688e34ae4d6aa08931abf15a47edbe63b5e5124b30d1cfdc6f0c65917","ssdeep":"768:AW6NQAvWxDRzqHYEw4L4i6ksAs3z6yeOz8me7c97Q8wfc13BC5LIdRZed+TrXGUV:PaOFz8mpQ8w8JV","tlshash":"98b236c5c322b2af8897be6d7e61be2111502926cefcc1a77c11761418f52a953e07df","size":25517,"data":"","first_seen":"2025-08-15T05:45:40.110097Z","last_seen":"2026-03-25T07:51:29.276555Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"6xu2o2diuceskjypgtwbrd9e.6306066tly.com/","fqdn":"6xu2o2diuceskjypgtwbrd9e.6306066tly.com","domain":"6306066tly.com","tld":"com"},"ip":{"addr":"148.135.93.92","port":443,"asn":35916,"as":"MULTA-ASN1","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"e289acb37f412dee0ead710189c8b083","sha1":"0012d11f867da72440cf77ba1aeb057cf71bf2d6","sha256":"605a11976d4ff785a821e0b2f0e0145364eb81564136282a74d8f5beb003388b","sha512":"88c1ba3d665447ddb33e03f07bd4b71e9627e28fd1e851f843ea96d65f3974a804623e461312bcf1b41d19991172b96c72abd28e7e29c51fc38501d88af4069b","ssdeep":"","tlshash":"ea61dce972a328301aa354fa4797a248363470177987cc98bd5c86405f72f51bcb7bed","size":3386,"data":"","first_seen":"2025-08-15T05:45:40.105451Z","last_seen":"2026-03-25T07:51:29.277228Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"y9nfflf0ci.6306ldy88.com/js/index.js","fqdn":"y9nfflf0ci.6306ldy88.com","domain":"6306ldy88.com","tld":"com"},"ip":{"addr":"148.135.93.92","port":443,"asn":35916,"as":"MULTA-ASN1","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"c8814ffd9b370951a2fc51802722440c","sha1":"0d1eb3fadec977514be9d142f5d7573817df1f8d","sha256":"3586c0d3b5c96747790f3730cb527b6264de2136df678f321d83b3ddbfa6eb54","sha512":"2d5aa237689c07e598e8a2ae16f3634eea122f225f2277c5faff1215a15fc84088bda1728cc5c61e24b2299f285712e847214e02d5a5d54770578c8133004cef","ssdeep":"","tlshash":"2e412e6d75e10063339339739a9d2668e1e8b02b0009da00fc1de6049fa7928f6edfe4","size":2131,"data":"","first_seen":"2026-03-14T04:58:22.225124Z","last_seen":"2026-03-25T07:51:29.262942Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"y9nfflf0ci.6306ldy88.com/js/jquery-2.2.4.min.js","fqdn":"y9nfflf0ci.6306ldy88.com","domain":"6306ldy88.com","tld":"com"},"ip":{"addr":"148.135.93.91","port":443,"asn":35916,"as":"MULTA-ASN1","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"2f6b11a7e914718e0290410e85366fe9","sha1":"69bb69e25ca7d5ef0935317584e6153f3fd9a88c","sha256":"05b85d96f41fff14d8f608dad03ab71e2c1017c2da0914d7c59291bad7a54f8e","sha512":"0d40bccaa59fedecf7243d63b33c42592541d0330fefc78ec81a4c6b9689922d5b211011ca4be23ae22621cce4c658f52a1552c92d7ac3615241eb640f8514db","ssdeep":"1536:EYE1JVoiB9JqZdXXe2pD3PgoIiulrUndZ6a4tfOR7WpfWBZ2BJda4w9W3qG9a986:v4J+OlfOhWppCW6G9a98Hr2","tlshash":"1e83c6d9b2d6706297b734b850bf410bb17a98dab44c8c60f059d4e47eb4a8e507bf2c","size":85578,"data":"","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-04-16T07:58:06.116477Z","times_seen":271236,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"y9nfflf0ci.6306ldy88.com/","fqdn":"y9nfflf0ci.6306ldy88.com","domain":"6306ldy88.com","tld":"com"},"ip":{"addr":"148.135.93.91","port":443,"asn":35916,"as":"MULTA-ASN1","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"84bf3903b3e1bc584d1c79cfe77dbc15","sha1":"6c00c28461d02ef0c74dab98ea562fc30825115d","sha256":"40643aedbdbb3027b0970dad79f0de8ffb53720da444a10741654361f6cf15c4","sha512":"9c0a5c21fde3c4d7300e6cd559839695fec5b259a0bb787a506daccf7ada612447ecc178d8c75649003978dbe0712466d35d0b5e69591e9e3acd03f08f6847a2","ssdeep":"","tlshash":"47d0a70af4b140913a33b12c5a3f551a28262c171a5c8d18bc5c64129f20015b489ada","size":223,"data":"","first_seen":"2025-08-30T14:41:07.951623Z","last_seen":"2026-03-25T07:51:29.28014Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"6306a.com/","fqdn":"6306a.com","domain":"6306a.com","tld":"com"},"ip":{"addr":"148.135.93.92","port":443,"asn":35916,"as":"MULTA-ASN1","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"c6e1a8657eea2595b53f600a6e834000","sha1":"888e9d8e719b9b7c02ce095df47ab42ec1dd7823","sha256":"b440e36bba60283c0ba559d7a86618f37d7375272b84e3bdeb33573f380b7217","sha512":"3aae1e1920d096e6b83cfa96dd777f3085dff259757291dc588adb9530a0fc9ef3bfbf39352a8b3d29dc2102c59f6d6c420c6939070e2d42687a6d4878a594e5","ssdeep":"","tlshash":"25117aa4ffcf90495667201c4a1f2084a06c3137540ddc12fd7cb220afa5d6da29bed4","size":961,"data":"","first_seen":"2026-03-14T04:58:22.282406Z","last_seen":"2026-03-25T07:51:29.2755Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"6xu2o2diuceskjypgtwbrd9e.6306066tly.com/config.js","fqdn":"6xu2o2diuceskjypgtwbrd9e.6306066tly.com","domain":"6306066tly.com","tld":"com"},"ip":{"addr":"148.135.93.92","port":443,"asn":35916,"as":"MULTA-ASN1","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"b204c86e92a6fbab59a09158e154842d","sha1":"367513b0926af3000f8a6d8ab0a5fc1b0635b686","sha256":"8cf4224c23e1509401049377ef36b7ae8a6a2e4c69205c4965f6157d2292f420","sha512":"7ec4181e590c17790d8a5fb1b1883941a16e38d1a25f475cb2a38d035fe735e8650e554ec3b87b7869969c56cc978520b280c321b27eefe047ef15b816e62d23","ssdeep":"","tlshash":"b98004f0f1110cc340c54044717351015c0df071355044d47f4d07510451134d4f5455","size":38,"data":"","first_seen":"2026-03-14T04:58:22.272Z","last_seen":"2026-03-25T07:51:29.210196Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":[{"md5":"819d26adbc66c356e6021684705a8c1b","sha1":"a7dcfdf836c101eea25b9aaf35db034c03b02de7","sha256":"6ec953f13f4048db480cf6980ff83cf0ed72224a317ae1955a571348e5082152","sha512":"db9964098476be9a4ae64ac07470494cc553a2c5c7a9e1449c8e5e907d6668362ffb5d71c5f9bfe827278cf7a1ab819f55707c8bcfb3ec3623bdcf66fb39217f","ssdeep":"192:49k4GnHnHA8HL9u4ZBuVRxmbU4BubNuoug2fc8hbbISeg7K/ACItgKP3ysV67/yN:49sv+I","tlshash":"da02e89a1aa32104b803a1b91ff6875a2774c403e50bcd6d3f8d7298cf867d98cd2788","size":8262,"data":"","first_seen":"2025-08-15T05:45:40.112564Z","last_seen":"2026-03-25T07:51:29.281102Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]},"http":[{"url":{"schema":"https","addr":"y9nfflf0ci.6306ldy88.com/js/5e9a3d_750x898.js","fqdn":"y9nfflf0ci.6306ldy88.com","domain":"6306ldy88.com","tld":"com"},"ip":{"addr":"148.135.93.91","port":443,"asn":35916,"as":"MULTA-ASN1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://y9nfflf0ci.6306ldy88.com/","date":"2026-03-14T04:57:54.977Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.6306ldy88.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 27 Jan 2026 01:54:30 GMT","end":"Mon, 27 Apr 2026 01:54:29 GMT"},"fingerprint":{"sha1":"D2:5D:4C:EA:78:0F:32:76:2D:FF:F7:83:EF:50:61:87:78:D2:E6:2A","sha256":"90:8F:04:55:AF:45:9A:4C:58:BB:5D:3B:C1:B0:B5:A0:0D:B2:33:73:7F:2E:C7:F1:79:9F:CB:69:1B:97:BB:EE"}}},"request":{"raw":"GET /js/5e9a3d_750x898.js HTTP/1.1\r\nHost: y9nfflf0ci.6306ldy88.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://y9nfflf0ci.6306ldy88.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nCache-Control: max-age=43200\r\nContent-Encoding: gzip\r\nContent-Type: application/javascript\r\nDate: Sat, 14 Mar 2026 04:57:58 GMT\r\nEtag: W/\"680cb762-7ac50\"\r\nExpires: Sat, 14 Mar 2026 16:57:58 GMT\r\nLast-Modified: Sat, 26 Apr 2025 10:37:22 GMT\r\nServer: nginx\r\nVary: Accept-Encoding\r\nX-Cache: UPDATING\r\nTransfer-Encoding: chunked\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":502864,"size_decoded":0,"mime_type":"application/javascript","magic":"data","md5":"7f011190a9ca531c43a2f60ae7ef6de7","sha1":"56618691ed6407159f1a9f3f95ceb337ab0893b5","sha256":"1959c7d7315a0721b9818d309cb7f904f44880fefc2cb003b2bd9820a3dfa1a5","sha512":"4bbdd4de5da919acb2387a5ea81e19a082c94ffc57b0318d465db660f2d98e5b3fd2472b6cbbbe40bc747f53d262b9c987726477c619c01f375f33f19fb6e006","ssdeep":"12288:HdqCcWwKJ9pNBkDJ6bPe4/p6pfaKvU/+TTykBslpDXO0NTFQVSTcRiiDzBEZHU5/:HQKJTN6DEze9CKsNFWTcaAl4j","tlshash":"c0f4f1021201f370e3eb85fa681306d4b6148f9affdabd95c524d2a12d9b12e77de4d2","first_seen":"2025-03-04T21:47:36.921804Z","last_seen":"2026-03-25T07:51:29.265906Z","times_seen":250,"resource_available":false,"data":null}},"time_used":3675,"timings":{"blocked":3211,"dns":0,"connect":0,"send":0,"wait":314,"receive":150,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"y9nfflf0ci.6306ldy88.com/js/jquery-2.2.4.min.js","fqdn":"y9nfflf0ci.6306ldy88.com","domain":"6306ldy88.com","tld":"com"},"ip":{"addr":"148.135.93.91","port":443,"asn":35916,"as":"MULTA-ASN1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://y9nfflf0ci.6306ldy88.com/","date":"2026-03-14T04:57:54.981Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.6306ldy88.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 27 Jan 2026 01:54:30 GMT","end":"Mon, 27 Apr 2026 01:54:29 GMT"},"fingerprint":{"sha1":"D2:5D:4C:EA:78:0F:32:76:2D:FF:F7:83:EF:50:61:87:78:D2:E6:2A","sha256":"90:8F:04:55:AF:45:9A:4C:58:BB:5D:3B:C1:B0:B5:A0:0D:B2:33:73:7F:2E:C7:F1:79:9F:CB:69:1B:97:BB:EE"}}},"request":{"raw":"GET /js/jquery-2.2.4.min.js HTTP/1.1\r\nHost: y9nfflf0ci.6306ldy88.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://y9nfflf0ci.6306ldy88.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nCache-Control: max-age=43200\r\nContent-Encoding: gzip\r\nContent-Type: application/javascript\r\nDate: Sat, 14 Mar 2026 04:57:55 GMT\r\nEtag: W/\"680cb76b-14e4a\"\r\nExpires: Sat, 14 Mar 2026 16:57:55 GMT\r\nLast-Modified: Sat, 26 Apr 2025 10:37:31 GMT\r\nServer: nginx\r\nVary: Accept-Encoding\r\nX-Cache: UPDATING\r\nTransfer-Encoding: chunked\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":85578,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (32065)","md5":"2f6b11a7e914718e0290410e85366fe9","sha1":"69bb69e25ca7d5ef0935317584e6153f3fd9a88c","sha256":"05b85d96f41fff14d8f608dad03ab71e2c1017c2da0914d7c59291bad7a54f8e","sha512":"0d40bccaa59fedecf7243d63b33c42592541d0330fefc78ec81a4c6b9689922d5b211011ca4be23ae22621cce4c658f52a1552c92d7ac3615241eb640f8514db","ssdeep":"1536:EYE1JVoiB9JqZdXXe2pD3PgoIiulrUndZ6a4tfOR7WpfWBZ2BJda4w9W3qG9a986:v4J+OlfOhWppCW6G9a98Hr2","tlshash":"1e83c6d9b2d6706297b734b850bf410bb17a98dab44c8c60f059d4e47eb4a8e507bf2c","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-04-16T07:58:06.116477Z","times_seen":271236,"resource_available":true,"data":null}},"time_used":812,"timings":{"blocked":261,"dns":0,"connect":0,"send":0,"wait":351,"receive":200,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"y9nfflf0ci.6306ldy88.com/js/88939d_220x74.js","fqdn":"y9nfflf0ci.6306ldy88.com","domain":"6306ldy88.com","tld":"com"},"ip":{"addr":"148.135.93.91","port":443,"asn":35916,"as":"MULTA-ASN1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://y9nfflf0ci.6306ldy88.com/","date":"2026-03-14T04:57:56.104Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.6306ldy88.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 27 Jan 2026 01:54:30 GMT","end":"Mon, 27 Apr 2026 01:54:29 GMT"},"fingerprint":{"sha1":"D2:5D:4C:EA:78:0F:32:76:2D:FF:F7:83:EF:50:61:87:78:D2:E6:2A","sha256":"90:8F:04:55:AF:45:9A:4C:58:BB:5D:3B:C1:B0:B5:A0:0D:B2:33:73:7F:2E:C7:F1:79:9F:CB:69:1B:97:BB:EE"}}},"request":{"raw":"GET /js/88939d_220x74.js HTTP/1.1\r\nHost: y9nfflf0ci.6306ldy88.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://y9nfflf0ci.6306ldy88.com/css/style.min.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nCache-Control: max-age=43200\r\nContent-Encoding: gzip\r\nContent-Type: application/javascript\r\nDate: Sat, 14 Mar 2026 04:57:57 GMT\r\nEtag: W/\"680cb764-825d\"\r\nExpires: Sat, 14 Mar 2026 16:57:57 GMT\r\nLast-Modified: Sat, 26 Apr 2025 10:37:24 GMT\r\nServer: nginx\r\nVary: Accept-Encoding\r\nX-Cache: UPDATING\r\nTransfer-Encoding: chunked\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":33373,"size_decoded":0,"mime_type":"application/javascript","magic":"data","md5":"8b8b7ee4f06e47410beeccf5a4ecc86a","sha1":"777993012c5242c8029a18dc3d19dc24578ab941","sha256":"fb9d9cbac4a24e32f3b64b5db23c0481fa68b9af0b3b4d383434ee2397e54244","sha512":"4dbd620191fe24d367096f7054253ef6622cc316d975766ecfcb82361ff63a22c05d93cf5ea4dd575eda9493ba75e0bd2dde9bc29a3c05c58de602971fbbfcdd","ssdeep":"768:CIZIWqhs0dsJUmMACJIELywF26j3iRrcWtzq4EYqHB9LUilMUVKpJ3uYZCqWtnCY:dSWX0dsJCZFlbuFEpzo9FpN2dngOSi5J","tlshash":"8e23d0025249f320c3b18af624971bd89618cae5dbdbff90d678d1212eda61e374d4e1","first_seen":"2025-02-26T14:12:31.71094Z","last_seen":"2026-03-25T07:51:29.207828Z","times_seen":255,"resource_available":false,"data":null}},"time_used":1197,"timings":{"blocked":873,"dns":0,"connect":0,"send":0,"wait":315,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"y9nfflf0ci.6306ldy88.com/js/index.js","fqdn":"y9nfflf0ci.6306ldy88.com","domain":"6306ldy88.com","tld":"com"},"ip":{"addr":"148.135.93.92","port":443,"asn":35916,"as":"MULTA-ASN1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://y9nfflf0ci.6306ldy88.com/","date":"2026-03-14T04:57:54.963Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.6306ldy88.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 27 Jan 2026 01:54:30 GMT","end":"Mon, 27 Apr 2026 01:54:29 GMT"},"fingerprint":{"sha1":"D2:5D:4C:EA:78:0F:32:76:2D:FF:F7:83:EF:50:61:87:78:D2:E6:2A","sha256":"90:8F:04:55:AF:45:9A:4C:58:BB:5D:3B:C1:B0:B5:A0:0D:B2:33:73:7F:2E:C7:F1:79:9F:CB:69:1B:97:BB:EE"}}},"request":{"raw":"GET /js/index.js HTTP/1.1\r\nHost: y9nfflf0ci.6306ldy88.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://y9nfflf0ci.6306ldy88.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nCache-Control: max-age=43200\r\nContent-Encoding: gzip\r\nContent-Type: application/javascript\r\nDate: Sat, 14 Mar 2026 04:57:55 GMT\r\nEtag: W/\"697a5786-853\"\r\nExpires: Sat, 14 Mar 2026 16:57:55 GMT\r\nLast-Modified: Wed, 28 Jan 2026 18:37:58 GMT\r\nServer: nginx\r\nVary: Accept-Encoding\r\nX-Cache: UPDATING\r\nContent-Length: 1120\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2131,"size_decoded":0,"mime_type":"application/javascript","magic":"C source, Unicode text, UTF-8 text","md5":"c8814ffd9b370951a2fc51802722440c","sha1":"0d1eb3fadec977514be9d142f5d7573817df1f8d","sha256":"3586c0d3b5c96747790f3730cb527b6264de2136df678f321d83b3ddbfa6eb54","sha512":"2d5aa237689c07e598e8a2ae16f3634eea122f225f2277c5faff1215a15fc84088bda1728cc5c61e24b2299f285712e847214e02d5a5d54770578c8133004cef","ssdeep":"","tlshash":"2e412e6d75e10063339339739a9d2668e1e8b02b0009da00fc1de6049fa7928f6edfe4","first_seen":"2026-03-14T04:58:22.225124Z","last_seen":"2026-03-25T07:51:29.262942Z","times_seen":2,"resource_available":true,"data":null}},"time_used":1082,"timings":{"blocked":300,"dns":1,"connect":155,"send":0,"wait":459,"receive":0,"ssl":165},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"6306a.com/","fqdn":"6306a.com","domain":"6306a.com","tld":"com"},"ip":{"addr":"148.135.93.92","port":443,"asn":35916,"as":"MULTA-ASN1","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-14T04:57:43.163Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"6306a.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 22 Dec 2025 15:54:47 GMT","end":"Sun, 22 Mar 2026 15:54:46 GMT"},"fingerprint":{"sha1":"EE:E8:A1:A6:7F:E5:0F:BC:46:61:7C:FA:92:E3:D5:D8:12:36:4D:FE","sha256":"ED:BB:51:1A:3C:BB:88:8A:F4:10:1B:C6:34:21:A3:C6:0A:D1:1E:02:2A:E0:A7:31:BC:C8:CB:23:F5:82:1C:A8"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: 6306a.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nAccept-Ranges: bytes\r\nContent-Encoding: br\r\nContent-Type: text/html\r\nDate: Mon, 09 Mar 2026 11:35:17 GMT\r\nEtag: \"695b20ff-3ea\"\r\nLast-Modified: Tue, 10 Mar 2026 03:33:23 GMT\r\nServer: nginx\r\nVary: Accept-Encoding\r\nX-Cache: HIT, server, disk\r\nContent-Length: 637\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1002,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"e7b47ece6076061c1647297feb086455","sha1":"d79761d81e28c59bc4c963df3e3432c0df7a3392","sha256":"c5c57d553e0e517afecdb9d725f79e0ca67cc91a6ce59712b4f0c7acf39cb56f","sha512":"4fee77f60412da56839f815df110dabbc30a8cbd4ec70e2026c47ed3f4ae703d6f8366634a02ca07a11c9ad282e394e2be5a262e18ac13a3536b2cff0338cf10","ssdeep":"","tlshash":"6611bde4ffcf80455657201d4a6f6088a4ac3137140dcc12fd7cb221af95e6ca29bed4","first_seen":"2026-03-14T04:58:22.227383Z","last_seen":"2026-03-25T07:51:29.267297Z","times_seen":2,"resource_available":true,"data":null}},"time_used":1477,"timings":{"blocked":660,"dns":337,"connect":156,"send":0,"wait":157,"receive":0,"ssl":165},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-14","alert":"Sinkholed","trigger":"6306a.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"y9nfflf0ci.6306ldy88.com/js/2e0189_314x484.js","fqdn":"y9nfflf0ci.6306ldy88.com","domain":"6306ldy88.com","tld":"com"},"ip":{"addr":"148.135.93.92","port":443,"asn":35916,"as":"MULTA-ASN1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://y9nfflf0ci.6306ldy88.com/","date":"2026-03-14T04:57:54.975Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.6306ldy88.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 27 Jan 2026 01:54:30 GMT","end":"Mon, 27 Apr 2026 01:54:29 GMT"},"fingerprint":{"sha1":"D2:5D:4C:EA:78:0F:32:76:2D:FF:F7:83:EF:50:61:87:78:D2:E6:2A","sha256":"90:8F:04:55:AF:45:9A:4C:58:BB:5D:3B:C1:B0:B5:A0:0D:B2:33:73:7F:2E:C7:F1:79:9F:CB:69:1B:97:BB:EE"}}},"request":{"raw":"GET /js/2e0189_314x484.js HTTP/1.1\r\nHost: y9nfflf0ci.6306ldy88.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://y9nfflf0ci.6306ldy88.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nCache-Control: max-age=43200\r\nContent-Encoding: gzip\r\nContent-Type: application/javascript\r\nDate: Sat, 14 Mar 2026 04:57:57 GMT\r\nEtag: W/\"680cb75e-53063\"\r\nExpires: Sat, 14 Mar 2026 16:57:57 GMT\r\nLast-Modified: Sat, 26 Apr 2025 10:37:18 GMT\r\nServer: nginx\r\nVary: Accept-Encoding\r\nX-Cache: UPDATING\r\nTransfer-Encoding: chunked\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":340067,"size_decoded":0,"mime_type":"application/javascript","magic":"data","md5":"df5281f338d4d8b5a659bca11acfb3a5","sha1":"7ba1362931a9e2ec6da23e7ba0a3b14f050f29da","sha256":"8a4c25df55535596b01b90601b1006dbd8311af37ffa9e7e000a2d0692311414","sha512":"25f2e020784ac27089c858773fd585aa2647828af0ff43b5c88ea7b2c959dcebabbfb278af9f21eb1268540065dda9bb092c21c2e4d7be3eb0ade910ffdffc27","ssdeep":"12288:hu+jCMVWAisEtSLnNAiaMdO585/CNzdDnIcmjcY65rIFp6Akbr++Vy4UK:hukYhSLnqiVAaC5h9I6Jr+6yc","tlshash":"d0b4f1016342f3b0d3a695fe68134ad066049ba4fb9abd80d634d6711ddf22eb7ce4d2","first_seen":"2025-03-04T21:47:36.910413Z","last_seen":"2026-03-25T07:51:29.273349Z","times_seen":250,"resource_available":false,"data":null}},"time_used":3341,"timings":{"blocked":2838,"dns":0,"connect":0,"send":0,"wait":315,"receive":188,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"y9nfflf0ci.6306ldy88.com/js/0e0217_750x150.js","fqdn":"y9nfflf0ci.6306ldy88.com","domain":"6306ldy88.com","tld":"com"},"ip":{"addr":"148.135.93.92","port":443,"asn":35916,"as":"MULTA-ASN1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://y9nfflf0ci.6306ldy88.com/","date":"2026-03-14T04:57:54.980Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.6306ldy88.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 27 Jan 2026 01:54:30 GMT","end":"Mon, 27 Apr 2026 01:54:29 GMT"},"fingerprint":{"sha1":"D2:5D:4C:EA:78:0F:32:76:2D:FF:F7:83:EF:50:61:87:78:D2:E6:2A","sha256":"90:8F:04:55:AF:45:9A:4C:58:BB:5D:3B:C1:B0:B5:A0:0D:B2:33:73:7F:2E:C7:F1:79:9F:CB:69:1B:97:BB:EE"}}},"request":{"raw":"GET /js/0e0217_750x150.js HTTP/1.1\r\nHost: y9nfflf0ci.6306ldy88.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://y9nfflf0ci.6306ldy88.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nCache-Control: max-age=43200\r\nContent-Encoding: gzip\r\nContent-Type: application/javascript\r\nDate: Sat, 14 Mar 2026 04:57:56 GMT\r\nEtag: W/\"680cb75c-11e90\"\r\nExpires: Sat, 14 Mar 2026 16:57:56 GMT\r\nLast-Modified: Sat, 26 Apr 2025 10:37:16 GMT\r\nServer: nginx\r\nVary: Accept-Encoding\r\nX-Cache: UPDATING\r\nTransfer-Encoding: chunked\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":73360,"size_decoded":0,"mime_type":"application/javascript","magic":"data","md5":"8dbc9f67bb7fbb4e6368dc0f3516f4fc","sha1":"f61982f2fc5c1ec41d56130bb5986b4c4489ac95","sha256":"35ee0d949af0f6df983f6e42afe56dba5a6a85b01067cb9bc725e5b2859500e7","sha512":"7ec5394efc4047603725b2d49c18d56611ed946dbab1a10cb3629dcedc54ffb304c118e183a4ffdec20f752d609e505431fb9d17b885c45f2711591df44f8417","ssdeep":"3072:3wxJ/Zi1jNbzTuNwk2lsNW4GpJn52rK8Hf3chu:Ar/Z+xnTuNwkcs9cDAz","tlshash":"74b3e006e200f370dbb944fe244356d868241f8df793ea90d57d89a16c6e22e37cf596","first_seen":"2025-03-04T21:47:36.912299Z","last_seen":"2026-03-25T07:51:29.218066Z","times_seen":252,"resource_available":false,"data":null}},"time_used":1814,"timings":{"blocked":1075,"dns":0,"connect":0,"send":0,"wait":331,"receive":408,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"y9nfflf0ci.6306ldy88.com/js/265769_700x370.js","fqdn":"y9nfflf0ci.6306ldy88.com","domain":"6306ldy88.com","tld":"com"},"ip":{"addr":"148.135.93.92","port":443,"asn":35916,"as":"MULTA-ASN1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://y9nfflf0ci.6306ldy88.com/","date":"2026-03-14T04:57:56.096Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.6306ldy88.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 27 Jan 2026 01:54:30 GMT","end":"Mon, 27 Apr 2026 01:54:29 GMT"},"fingerprint":{"sha1":"D2:5D:4C:EA:78:0F:32:76:2D:FF:F7:83:EF:50:61:87:78:D2:E6:2A","sha256":"90:8F:04:55:AF:45:9A:4C:58:BB:5D:3B:C1:B0:B5:A0:0D:B2:33:73:7F:2E:C7:F1:79:9F:CB:69:1B:97:BB:EE"}}},"request":{"raw":"GET /js/265769_700x370.js HTTP/1.1\r\nHost: y9nfflf0ci.6306ldy88.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://y9nfflf0ci.6306ldy88.com/css/style.min.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nCache-Control: max-age=43200\r\nContent-Encoding: gzip\r\nContent-Type: application/javascript\r\nDate: Sat, 14 Mar 2026 04:57:56 GMT\r\nEtag: W/\"680cb75d-c413\"\r\nExpires: Sat, 14 Mar 2026 16:57:56 GMT\r\nLast-Modified: Sat, 26 Apr 2025 10:37:17 GMT\r\nServer: nginx\r\nVary: Accept-Encoding\r\nX-Cache: UPDATING\r\nTransfer-Encoding: chunked\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":50195,"size_decoded":0,"mime_type":"application/javascript","magic":"data","md5":"bb4b86375d05d5adbc657d4b826d477a","sha1":"dd33ac66497d4443c3fc0b78579bf330ac68a240","sha256":"db3d7f5f6e474341ee1cd9d011ee580f7b269161081482c8d61461ad853abfdc","sha512":"71d9fb1af32158bb3c038564885557b80d30bef61c086385aa83ac9ffa8590b68822e9de708b41251ed98095fbfcfb197e09680d13d486145ec38e48918c1034","ssdeep":"1536:57mipI+818NJac6A8aSIQ2FKDgJ1ugkGq1Bp3rYMg4VQFPQSRTAwP4RYeVl3tt:5LprdjNFSIZFKDgxY1r3rYMrgPjRTrPi","tlshash":"b373e1111223e370e2e7c5fa5c464bc4d909da4da2eebdd6c204d6525ee933f358f8a2","first_seen":"2025-03-04T21:47:36.90172Z","last_seen":"2026-03-25T07:51:29.214288Z","times_seen":252,"resource_available":false,"data":null}},"time_used":984,"timings":{"blocked":528,"dns":0,"connect":0,"send":0,"wait":336,"receive":120,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"6xu2o2diuceskjypgtwbrd9e.6306066tly.com/","fqdn":"6xu2o2diuceskjypgtwbrd9e.6306066tly.com","domain":"6306066tly.com","tld":"com"},"ip":{"addr":"148.135.93.92","port":443,"asn":35916,"as":"MULTA-ASN1","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-14T04:57:45.160Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.6306066tly.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 04 Jan 2026 01:48:39 GMT","end":"Sat, 04 Apr 2026 01:48:38 GMT"},"fingerprint":{"sha1":"0D:E6:ED:3C:F7:8A:70:75:E7:B1:13:01:5B:65:2F:8F:79:C0:B3:2A","sha256":"80:6E:AA:15:70:60:3B:34:3D:5D:B0:08:1A:3F:67:14:39:E2:FB:AB:E3:DA:42:96:17:17:99:3D:CF:4B:33:F6"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: 6xu2o2diuceskjypgtwbrd9e.6306066tly.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://6306a.com/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Encoding: gzip\r\nContent-Type: text/html\r\nDate: Sat, 14 Mar 2026 04:57:46 GMT\r\nEtag: W/\"686e7b7e-63be\"\r\nLast-Modified: Wed, 09 Jul 2025 14:23:58 GMT\r\nServer: nginx\r\nVary: Accept-Encoding\r\nX-Cache: UPDATING\r\nTransfer-Encoding: chunked\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":25534,"size_decoded":0,"mime_type":"text/html","magic":"JavaScript source, ASCII text, with very long lines (25534), with no line terminators","md5":"ca23520057a47432ad525957383a6bbc","sha1":"23367dede029b251681d9b4f0c53357f56145fa9","sha256":"58765d6e7388b38af5dae467148a99a8c90b55166e868315670354b3431e28a4","sha512":"9f90ce82cb41434c12380b597a99ffd9ccdf8445eaf08c86f14a52f6492732d0af1b1147aab1176419bd64d917ec169b80231fd8b72fc4e947459de3bf2593b4","ssdeep":"768:3W6NQAvWxDRzqHYEw4L4i6ksAs3z6yeOz8me7c97Q8wfc13BC5LIdRZed+TrXGUn:SaOFz8mpQ8w8Jn","tlshash":"2bb246c5c322b2af8897be6d7e61be2111502826cefcc1a77c11721418f52a953e07df","first_seen":"2025-08-15T05:45:40.053814Z","last_seen":"2026-03-25T07:51:29.25016Z","times_seen":6,"resource_available":true,"data":null}},"time_used":1778,"timings":{"blocked":655,"dns":344,"connect":150,"send":0,"wait":467,"receive":1,"ssl":158},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"y9nfflf0ci.6306ldy88.com/js/7cf051_484x114.js","fqdn":"y9nfflf0ci.6306ldy88.com","domain":"6306ldy88.com","tld":"com"},"ip":{"addr":"148.135.93.92","port":443,"asn":35916,"as":"MULTA-ASN1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://y9nfflf0ci.6306ldy88.com/","date":"2026-03-14T04:57:54.964Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.6306ldy88.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 27 Jan 2026 01:54:30 GMT","end":"Mon, 27 Apr 2026 01:54:29 GMT"},"fingerprint":{"sha1":"D2:5D:4C:EA:78:0F:32:76:2D:FF:F7:83:EF:50:61:87:78:D2:E6:2A","sha256":"90:8F:04:55:AF:45:9A:4C:58:BB:5D:3B:C1:B0:B5:A0:0D:B2:33:73:7F:2E:C7:F1:79:9F:CB:69:1B:97:BB:EE"}}},"request":{"raw":"GET /js/7cf051_484x114.js HTTP/1.1\r\nHost: y9nfflf0ci.6306ldy88.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://y9nfflf0ci.6306ldy88.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nCache-Control: max-age=43200\r\nContent-Encoding: gzip\r\nContent-Type: application/javascript\r\nDate: Sat, 14 Mar 2026 04:57:56 GMT\r\nEtag: W/\"680cb763-8043\"\r\nExpires: Sat, 14 Mar 2026 16:57:56 GMT\r\nLast-Modified: Sat, 26 Apr 2025 10:37:23 GMT\r\nServer: nginx\r\nVary: Accept-Encoding\r\nX-Cache: UPDATING\r\nTransfer-Encoding: chunked\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":32835,"size_decoded":0,"mime_type":"application/javascript","magic":"data","md5":"150fd44d1c337a7701b02ae11351253f","sha1":"61c3c0061985c1c60727948357c9b4091e8c71b5","sha256":"4a2fc065d00abab55b28bea660d8f2a0b74feddd1b7a9cde9593b145aaf6cb26","sha512":"db7d15fac10fabec58154dcdcf5ce218f62e626205e76d396408f02ea126c72df715c1adc9a6a21ece522a7b5ce952afef940820ebddc7e2eb40f9bd39fa8dfb","ssdeep":"768:2wBAzvxPTj2o4gsXEsFX6+7PedbeRI4z0qrcdrDCsTiEK29QgHQB3ncb7uhQR3Gv:2WArVSgslX68abeRIYle52n6QgHuIsQm","tlshash":"b623e0054361d32892ce55f6287361e842128da7f2ce7a11f660c6f109af629b9ce9f3","first_seen":"2025-03-04T21:47:36.90535Z","last_seen":"2026-03-25T07:51:29.254423Z","times_seen":252,"resource_available":false,"data":null}},"time_used":1660,"timings":{"blocked":1091,"dns":0,"connect":0,"send":0,"wait":364,"receive":205,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"y9nfflf0ci.6306ldy88.com/js/df1e99_750x200.js","fqdn":"y9nfflf0ci.6306ldy88.com","domain":"6306ldy88.com","tld":"com"},"ip":{"addr":"148.135.93.92","port":443,"asn":35916,"as":"MULTA-ASN1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://y9nfflf0ci.6306ldy88.com/","date":"2026-03-14T04:57:54.969Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.6306ldy88.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 27 Jan 2026 01:54:30 GMT","end":"Mon, 27 Apr 2026 01:54:29 GMT"},"fingerprint":{"sha1":"D2:5D:4C:EA:78:0F:32:76:2D:FF:F7:83:EF:50:61:87:78:D2:E6:2A","sha256":"90:8F:04:55:AF:45:9A:4C:58:BB:5D:3B:C1:B0:B5:A0:0D:B2:33:73:7F:2E:C7:F1:79:9F:CB:69:1B:97:BB:EE"}}},"request":{"raw":"GET /js/df1e99_750x200.js HTTP/1.1\r\nHost: y9nfflf0ci.6306ldy88.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://y9nfflf0ci.6306ldy88.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nCache-Control: max-age=43200\r\nContent-Encoding: gzip\r\nContent-Type: application/javascript\r\nDate: Sat, 14 Mar 2026 04:57:57 GMT\r\nEtag: W/\"680cb769-1d730\"\r\nExpires: Sat, 14 Mar 2026 16:57:57 GMT\r\nLast-Modified: Sat, 26 Apr 2025 10:37:29 GMT\r\nServer: nginx\r\nVary: Accept-Encoding\r\nX-Cache: UPDATING\r\nTransfer-Encoding: chunked\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":120624,"size_decoded":0,"mime_type":"application/javascript","magic":"data","md5":"9fc9a2344472080a0dbd453b2dfeed03","sha1":"f1441baa8cf51fd2179f0c24f8ca8c3dd5a6283c","sha256":"705ba86c855a444cd635c66f88128cf518f666d6c7a07ad1e0e43529998a7b92","sha512":"abd04593ef5331a9b9d310b995f7c54ae788564446669f24795790fce63def9ec4e3753ee9957b77cc9c7f95064fc5d91496e8dde2faa54e98b4e52f42eaead8","ssdeep":"3072:GkgX7naEnL4vd7lS0Zz3kBUG9Ig6zmno7Rr3y4MIMA1eztTkkXkq7kOCX+p/R:GkId8V7lSkUb6S+3y4MIMA1sQUqXa","tlshash":"5404e1005322f3b0c3a794fdbd025ad9a6055a89eb9efd84d620c6701d9f12e779e4e2","first_seen":"2025-03-04T21:47:36.917184Z","last_seen":"2026-03-25T07:51:29.216319Z","times_seen":252,"resource_available":false,"data":null}},"time_used":2672,"timings":{"blocked":2111,"dns":0,"connect":0,"send":0,"wait":336,"receive":225,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"y9nfflf0ci.6306ldy88.com/js/62c0fe_494x76.js","fqdn":"y9nfflf0ci.6306ldy88.com","domain":"6306ldy88.com","tld":"com"},"ip":{"addr":"148.135.93.92","port":443,"asn":35916,"as":"MULTA-ASN1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://y9nfflf0ci.6306ldy88.com/","date":"2026-03-14T04:57:54.970Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.6306ldy88.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 27 Jan 2026 01:54:30 GMT","end":"Mon, 27 Apr 2026 01:54:29 GMT"},"fingerprint":{"sha1":"D2:5D:4C:EA:78:0F:32:76:2D:FF:F7:83:EF:50:61:87:78:D2:E6:2A","sha256":"90:8F:04:55:AF:45:9A:4C:58:BB:5D:3B:C1:B0:B5:A0:0D:B2:33:73:7F:2E:C7:F1:79:9F:CB:69:1B:97:BB:EE"}}},"request":{"raw":"GET /js/62c0fe_494x76.js HTTP/1.1\r\nHost: y9nfflf0ci.6306ldy88.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://y9nfflf0ci.6306ldy88.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nCache-Control: max-age=43200\r\nContent-Encoding: gzip\r\nContent-Type: application/javascript\r\nDate: Sat, 14 Mar 2026 04:57:57 GMT\r\nEtag: W/\"680cb762-8e9c\"\r\nExpires: Sat, 14 Mar 2026 16:57:57 GMT\r\nLast-Modified: Sat, 26 Apr 2025 10:37:22 GMT\r\nServer: nginx\r\nVary: Accept-Encoding\r\nX-Cache: UPDATING\r\nTransfer-Encoding: chunked\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":36508,"size_decoded":0,"mime_type":"application/javascript","magic":"data","md5":"34ca58fff04fe69e85dfc9dd27a35ad5","sha1":"a0130e86a4ec7a43e3770d4c5f78d4bf641115f4","sha256":"5ff5739abf81ee9666c1f06ad5085e355e1fe8b0c7f4d47dc8a045c034eabfb6","sha512":"9ff21638ba0bc05acf6c335b2b7f7709570dada6de5bba69b11367651204ab6d9f7304c9944bec97c13c2ebff7fbc252adc1f2e96335682c4b32fbf18f492f32","ssdeep":"1536:TjcGdK+cF1imtaMjcuJVy0k0ogXfyKgre29ZqEATeouQ:TjtdTcimtaMwuJE8oefyKZ6Oeo1","tlshash":"d733d10ba311f730d2bac0e599228fe85b0556cbebd77ba0c161c5206d2f59e72ed4d2","first_seen":"2025-03-04T21:47:36.91782Z","last_seen":"2026-03-25T07:51:29.206953Z","times_seen":252,"resource_available":false,"data":null}},"time_used":2646,"timings":{"blocked":2282,"dns":0,"connect":0,"send":0,"wait":312,"receive":52,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"y9nfflf0ci.6306ldy88.com/js/ce02ad_494x76.js","fqdn":"y9nfflf0ci.6306ldy88.com","domain":"6306ldy88.com","tld":"com"},"ip":{"addr":"148.135.93.91","port":443,"asn":35916,"as":"MULTA-ASN1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://y9nfflf0ci.6306ldy88.com/","date":"2026-03-14T04:57:54.970Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.6306ldy88.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 27 Jan 2026 01:54:30 GMT","end":"Mon, 27 Apr 2026 01:54:29 GMT"},"fingerprint":{"sha1":"D2:5D:4C:EA:78:0F:32:76:2D:FF:F7:83:EF:50:61:87:78:D2:E6:2A","sha256":"90:8F:04:55:AF:45:9A:4C:58:BB:5D:3B:C1:B0:B5:A0:0D:B2:33:73:7F:2E:C7:F1:79:9F:CB:69:1B:97:BB:EE"}}},"request":{"raw":"GET /js/ce02ad_494x76.js HTTP/1.1\r\nHost: y9nfflf0ci.6306ldy88.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://y9nfflf0ci.6306ldy88.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nCache-Control: max-age=43200\r\nContent-Encoding: gzip\r\nContent-Type: application/javascript\r\nDate: Sat, 14 Mar 2026 04:57:57 GMT\r\nEtag: W/\"680cb768-74dc\"\r\nExpires: Sat, 14 Mar 2026 16:57:57 GMT\r\nLast-Modified: Sat, 26 Apr 2025 10:37:28 GMT\r\nServer: nginx\r\nVary: Accept-Encoding\r\nX-Cache: UPDATING\r\nTransfer-Encoding: chunked\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":29916,"size_decoded":0,"mime_type":"application/javascript","magic":"data","md5":"3c378803ef17aea1badf6658e43223fc","sha1":"22a9adb79439c877c5268be806d85841e2bfe521","sha256":"0fc07bd844a4e24a3f1fdee49f806ef8b2c6e58776c3b446b81c60963d18f455","sha512":"eabfffec14c38eaac8cd8802e91e8af4a0436e8c5314385d8b70c20e77c442e8a404ed5df7edf00a4086c228107fc10f35f67c02a861ee76c1954a771aee29f6","ssdeep":"768:PHmcQ5NvIZYmFyRgZnCwlIfEvXAshSK2sEOO5sa4xAWz3lZ0kV9N2NRQ44NKEERP:PmvNvIZIGZnKfEvXAJZj5stxAm0kV9MT","tlshash":"fa13d0454212f3b0a297d4fd1cda99e833149be48af3ab85c32c8d161ca945df2ddc92","first_seen":"2025-03-04T21:47:36.90959Z","last_seen":"2026-03-25T07:51:29.272219Z","times_seen":252,"resource_available":false,"data":null}},"time_used":2654,"timings":{"blocked":2330,"dns":0,"connect":0,"send":0,"wait":316,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"6306a.com/favicon.ico","fqdn":"6306a.com","domain":"6306a.com","tld":"com"},"ip":{"addr":"148.135.93.92","port":443,"asn":35916,"as":"MULTA-ASN1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://6306a.com/","date":"2026-03-14T04:57:44.176Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"6306a.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 22 Dec 2025 15:54:47 GMT","end":"Sun, 22 Mar 2026 15:54:46 GMT"},"fingerprint":{"sha1":"EE:E8:A1:A6:7F:E5:0F:BC:46:61:7C:FA:92:E3:D5:D8:12:36:4D:FE","sha256":"ED:BB:51:1A:3C:BB:88:8A:F4:10:1B:C6:34:21:A3:C6:0A:D1:1E:02:2A:E0:A7:31:BC:C8:CB:23:F5:82:1C:A8"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: 6306a.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://6306a.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nContent-Encoding: br\r\nContent-Type: text/html\r\nDate: Sat, 14 Mar 2026 04:57:44 GMT\r\nEtag: \"68a9895b-8a\"\r\nServer: nginx\r\nVary: Accept-Encoding\r\nX-Cache: BYPASS, Status: 404\r\nContent-Length: 142\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":138,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"7389d931c86b3d7bb6b8af46d8c4172b","sha1":"8d2a4760aa0b47984d11cd1a66448719177fb791","sha256":"301bd9f16f94feedfae7a946a14bac38cb73c43efe6117bc5586835af03d7d6f","sha512":"dd6d1511e4fcd5bc09d821ffe091fb5946ac9654c48664aed504e479e9ac20c1cad44b6df90f42190d47e28f5f96bfb09d24056df6b950243d68ee8100a9a889","ssdeep":"","tlshash":"d9c09b5d755366449913155167c33641d196837f689a84510941c593f0cf69ac4c73a9","first_seen":"2023-03-13T12:56:15Z","last_seen":"2026-04-16T08:04:21.403146Z","times_seen":254465,"resource_available":true,"data":null}},"time_used":468,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":468,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-14","alert":"Sinkholed","trigger":"6306a.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"6xu2o2diuceskjypgtwbrd9e.6306066tly.com/favicon.ico","fqdn":"6xu2o2diuceskjypgtwbrd9e.6306066tly.com","domain":"6306066tly.com","tld":"com"},"ip":{"addr":"148.135.93.92","port":443,"asn":35916,"as":"MULTA-ASN1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://6xu2o2diuceskjypgtwbrd9e.6306066tly.com/","date":"2026-03-14T04:57:46.703Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.6306066tly.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 04 Jan 2026 01:48:39 GMT","end":"Sat, 04 Apr 2026 01:48:38 GMT"},"fingerprint":{"sha1":"0D:E6:ED:3C:F7:8A:70:75:E7:B1:13:01:5B:65:2F:8F:79:C0:B3:2A","sha256":"80:6E:AA:15:70:60:3B:34:3D:5D:B0:08:1A:3F:67:14:39:E2:FB:AB:E3:DA:42:96:17:17:99:3D:CF:4B:33:F6"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: 6xu2o2diuceskjypgtwbrd9e.6306066tly.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://6xu2o2diuceskjypgtwbrd9e.6306066tly.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nContent-Encoding: br\r\nContent-Type: text/html\r\nDate: Sat, 14 Mar 2026 04:57:46 GMT\r\nEtag: \"68a989a2-8a\"\r\nServer: nginx\r\nVary: Accept-Encoding\r\nX-Cache: BYPASS, Status: 404\r\nContent-Length: 142\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":138,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"7389d931c86b3d7bb6b8af46d8c4172b","sha1":"8d2a4760aa0b47984d11cd1a66448719177fb791","sha256":"301bd9f16f94feedfae7a946a14bac38cb73c43efe6117bc5586835af03d7d6f","sha512":"dd6d1511e4fcd5bc09d821ffe091fb5946ac9654c48664aed504e479e9ac20c1cad44b6df90f42190d47e28f5f96bfb09d24056df6b950243d68ee8100a9a889","ssdeep":"","tlshash":"d9c09b5d755366449913155167c33641d196837f689a84510941c593f0cf69ac4c73a9","first_seen":"2023-03-13T12:56:15Z","last_seen":"2026-04-16T08:04:21.403146Z","times_seen":254465,"resource_available":true,"data":null}},"time_used":307,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":307,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"y9nfflf0ci.6306ldy88.com/js/52b746_314x484.js","fqdn":"y9nfflf0ci.6306ldy88.com","domain":"6306ldy88.com","tld":"com"},"ip":{"addr":"148.135.93.92","port":443,"asn":35916,"as":"MULTA-ASN1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://y9nfflf0ci.6306ldy88.com/","date":"2026-03-14T04:57:54.974Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.6306ldy88.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 27 Jan 2026 01:54:30 GMT","end":"Mon, 27 Apr 2026 01:54:29 GMT"},"fingerprint":{"sha1":"D2:5D:4C:EA:78:0F:32:76:2D:FF:F7:83:EF:50:61:87:78:D2:E6:2A","sha256":"90:8F:04:55:AF:45:9A:4C:58:BB:5D:3B:C1:B0:B5:A0:0D:B2:33:73:7F:2E:C7:F1:79:9F:CB:69:1B:97:BB:EE"}}},"request":{"raw":"GET /js/52b746_314x484.js HTTP/1.1\r\nHost: y9nfflf0ci.6306ldy88.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://y9nfflf0ci.6306ldy88.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nCache-Control: max-age=43200\r\nContent-Encoding: gzip\r\nContent-Type: application/javascript\r\nDate: Sat, 14 Mar 2026 04:57:57 GMT\r\nEtag: W/\"680cb761-50153\"\r\nExpires: Sat, 14 Mar 2026 16:57:57 GMT\r\nLast-Modified: Sat, 26 Apr 2025 10:37:21 GMT\r\nServer: nginx\r\nVary: Accept-Encoding\r\nX-Cache: UPDATING\r\nTransfer-Encoding: chunked\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":328019,"size_decoded":0,"mime_type":"application/javascript","magic":"data","md5":"84c82f69d7a35aeccac62bb9a6c1b01a","sha1":"237fc80ba730d0350be045ba91ec0f200fde5706","sha256":"eea7001ca7e1be36c8a964bdf409ff9e618258312b5f1a71587d31c722003329","sha512":"4083a3b2eccc17cc8da0a441d659887bca90f1e67758420335a9c5033337b0c024c2f122935375e41f2b82cb8c7720c04e513d8ed0d052c8f0f0efb3e8076f98","ssdeep":"12288:O8CGCT/3pv6STtJWS4Qp3+K6GEZD2TmdQ1t3hPbjwg+0eCItof:OTx6SOQZDdR+0/","tlshash":"57a4f1025341f3b0d3ba95fa681206dca5055e98ebebbe80d134d2a11ddf13db6de8d2","first_seen":"2025-03-04T21:47:36.919751Z","last_seen":"2026-03-25T07:51:29.271057Z","times_seen":250,"resource_available":false,"data":null}},"time_used":3285,"timings":{"blocked":2667,"dns":0,"connect":0,"send":0,"wait":357,"receive":261,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"y9nfflf0ci.6306ldy88.com/js/33c151_121x210.js","fqdn":"y9nfflf0ci.6306ldy88.com","domain":"6306ldy88.com","tld":"com"},"ip":{"addr":"148.135.93.92","port":443,"asn":35916,"as":"MULTA-ASN1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://y9nfflf0ci.6306ldy88.com/","date":"2026-03-14T04:57:54.981Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.6306ldy88.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 27 Jan 2026 01:54:30 GMT","end":"Mon, 27 Apr 2026 01:54:29 GMT"},"fingerprint":{"sha1":"D2:5D:4C:EA:78:0F:32:76:2D:FF:F7:83:EF:50:61:87:78:D2:E6:2A","sha256":"90:8F:04:55:AF:45:9A:4C:58:BB:5D:3B:C1:B0:B5:A0:0D:B2:33:73:7F:2E:C7:F1:79:9F:CB:69:1B:97:BB:EE"}}},"request":{"raw":"GET /js/33c151_121x210.js HTTP/1.1\r\nHost: y9nfflf0ci.6306ldy88.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://y9nfflf0ci.6306ldy88.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nCache-Control: max-age=43200\r\nContent-Encoding: gzip\r\nContent-Type: application/javascript\r\nDate: Sat, 14 Mar 2026 04:57:56 GMT\r\nEtag: W/\"680cb75f-bc7c\"\r\nExpires: Sat, 14 Mar 2026 16:57:56 GMT\r\nLast-Modified: Sat, 26 Apr 2025 10:37:19 GMT\r\nServer: nginx\r\nVary: Accept-Encoding\r\nX-Cache: UPDATING\r\nTransfer-Encoding: chunked\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":48252,"size_decoded":0,"mime_type":"application/javascript","magic":"data","md5":"cd66db2ef1a2382cd1d30ed90a430c20","sha1":"3f11fc09f4be48a1f172900681d2995ca5a208b0","sha256":"8c8ccd7c0ab9ef0a090cf2a30b3efd0f818d1be22d95350b47d40539bac8fd5f","sha512":"4507848b31d6d0beecf3a8ea011d8b769eb3fb67698559b3a9b9a65d98690a4b58dcc17db27078947f80e48fd7356cbae51280d96d6860b66d9b2a4e40fd24a1","ssdeep":"1536:BkIEsxD9XC1VStcZFWt2yqsMPupOji+Sqoj82rcSvBhJ3SL:oO5aVSOaZoji+Sf8LSJhJiL","tlshash":"ce63e0018251f762c7fda5f5ad038be466884da4f3dbfa90c124c291699b72cb6df0d2","first_seen":"2025-08-30T14:41:07.934648Z","last_seen":"2026-03-25T07:51:29.22469Z","times_seen":3,"resource_available":false,"data":null}},"time_used":1694,"timings":{"blocked":1074,"dns":0,"connect":0,"send":0,"wait":366,"receive":254,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"y9nfflf0ci.6306ldy88.com/js/swiper-4.2.0.min.js","fqdn":"y9nfflf0ci.6306ldy88.com","domain":"6306ldy88.com","tld":"com"},"ip":{"addr":"148.135.93.92","port":443,"asn":35916,"as":"MULTA-ASN1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://y9nfflf0ci.6306ldy88.com/","date":"2026-03-14T04:57:54.982Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.6306ldy88.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 27 Jan 2026 01:54:30 GMT","end":"Mon, 27 Apr 2026 01:54:29 GMT"},"fingerprint":{"sha1":"D2:5D:4C:EA:78:0F:32:76:2D:FF:F7:83:EF:50:61:87:78:D2:E6:2A","sha256":"90:8F:04:55:AF:45:9A:4C:58:BB:5D:3B:C1:B0:B5:A0:0D:B2:33:73:7F:2E:C7:F1:79:9F:CB:69:1B:97:BB:EE"}}},"request":{"raw":"GET /js/swiper-4.2.0.min.js HTTP/1.1\r\nHost: y9nfflf0ci.6306ldy88.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://y9nfflf0ci.6306ldy88.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nCache-Control: max-age=43200\r\nContent-Encoding: gzip\r\nContent-Type: application/javascript\r\nDate: Sat, 14 Mar 2026 04:57:55 GMT\r\nEtag: W/\"680cb76d-1d2d2\"\r\nExpires: Sat, 14 Mar 2026 16:57:55 GMT\r\nLast-Modified: Sat, 26 Apr 2025 10:37:33 GMT\r\nServer: nginx\r\nVary: Accept-Encoding\r\nX-Cache: UPDATING\r\nTransfer-Encoding: chunked\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":119506,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65273)","md5":"be15b3ba6a71edd608b9af34dfc6130c","sha1":"b11842fbe74778511b86bf899fbd02102b57ac62","sha256":"add18244c3d92cb789bd50456f05f02ca034c908bbf4210fedbd9013b3bf5d96","sha512":"ba9c83238efc0b5f43e2e85b104a2b1b010defa0f12d7c3cbff918fae76a7f3d3753ee18dead132729bdd0ae8a3854a481bcba35655dd37a6b6a03813d295029","ssdeep":"3072:6ShcwIktpnBohgZu7HgZsUOUFBWqJTq+NX:hlIktFBohgZu7HAsUOUFBWqJTq+l","tlshash":"65c3184eb390619510e36256565e9241a3b72809780ad0ac35b6cce7adbde4c13bfffc","first_seen":"2023-03-07T12:23:57Z","last_seen":"2026-04-15T08:07:23.604653Z","times_seen":13525,"resource_available":true,"data":null}},"time_used":1363,"timings":{"blocked":718,"dns":0,"connect":0,"send":0,"wait":471,"receive":174,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"y9nfflf0ci.6306ldy88.com/css/style.min.css","fqdn":"y9nfflf0ci.6306ldy88.com","domain":"6306ldy88.com","tld":"com"},"ip":{"addr":"148.135.93.91","port":443,"asn":35916,"as":"MULTA-ASN1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://y9nfflf0ci.6306ldy88.com/","date":"2026-03-14T04:57:54.945Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.6306ldy88.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 27 Jan 2026 01:54:30 GMT","end":"Mon, 27 Apr 2026 01:54:29 GMT"},"fingerprint":{"sha1":"D2:5D:4C:EA:78:0F:32:76:2D:FF:F7:83:EF:50:61:87:78:D2:E6:2A","sha256":"90:8F:04:55:AF:45:9A:4C:58:BB:5D:3B:C1:B0:B5:A0:0D:B2:33:73:7F:2E:C7:F1:79:9F:CB:69:1B:97:BB:EE"}}},"request":{"raw":"GET /css/style.min.css HTTP/1.1\r\nHost: y9nfflf0ci.6306ldy88.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://y9nfflf0ci.6306ldy88.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nCache-Control: max-age=43200\r\nContent-Encoding: gzip\r\nContent-Type: text/css\r\nDate: Sat, 14 Mar 2026 04:57:55 GMT\r\nEtag: W/\"680cb759-2165\"\r\nExpires: Sat, 14 Mar 2026 16:57:55 GMT\r\nLast-Modified: Sat, 26 Apr 2025 10:37:13 GMT\r\nServer: nginx\r\nVary: Accept-Encoding\r\nX-Cache: UPDATING\r\nTransfer-Encoding: chunked\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":8549,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (8549), with no line terminators","md5":"a48439adaffd26da24709c76f57338b1","sha1":"bff773d8e7bf5b2fe44657e8c79f11cc39573431","sha256":"bef5a3b2b6338768016f7a0ff8d85aaede8a14431b8533cf529018adfe324766","sha512":"0090e3f5279d5461a405d6e25d44dd9d68a2822acce51b1fd958ae6b204729351ac8f89727844bdc4398837e9a9e6f2aa042b6a225dcdfdddf5d4c1fa07ed9cb","ssdeep":"96:3zQdbEQFb+tree4IsYI9XJUc+s7zG2xkq2PP+inS0ZrMPmIV+GAxbWp3dntOE4/N:ztreVQb2V2Ht7rMGFbudtOb3","tlshash":"9a02923a9652381dd43bd72279e877d82528c016f7030a9ca51bba3aca8f54b09777cd","first_seen":"2024-12-01T06:33:52.647097Z","last_seen":"2026-03-25T07:51:29.211471Z","times_seen":300,"resource_available":false,"data":null}},"time_used":311,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":311,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"y9nfflf0ci.6306ldy88.com/js/03fb64_594x140.js","fqdn":"y9nfflf0ci.6306ldy88.com","domain":"6306ldy88.com","tld":"com"},"ip":{"addr":"148.135.93.92","port":443,"asn":35916,"as":"MULTA-ASN1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://y9nfflf0ci.6306ldy88.com/","date":"2026-03-14T04:57:54.977Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.6306ldy88.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 27 Jan 2026 01:54:30 GMT","end":"Mon, 27 Apr 2026 01:54:29 GMT"},"fingerprint":{"sha1":"D2:5D:4C:EA:78:0F:32:76:2D:FF:F7:83:EF:50:61:87:78:D2:E6:2A","sha256":"90:8F:04:55:AF:45:9A:4C:58:BB:5D:3B:C1:B0:B5:A0:0D:B2:33:73:7F:2E:C7:F1:79:9F:CB:69:1B:97:BB:EE"}}},"request":{"raw":"GET /js/03fb64_594x140.js HTTP/1.1\r\nHost: y9nfflf0ci.6306ldy88.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://y9nfflf0ci.6306ldy88.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nCache-Control: max-age=43200\r\nContent-Encoding: gzip\r\nContent-Type: application/javascript\r\nDate: Sat, 14 Mar 2026 04:57:58 GMT\r\nEtag: W/\"680cb75a-d4e4\"\r\nExpires: Sat, 14 Mar 2026 16:57:58 GMT\r\nLast-Modified: Sat, 26 Apr 2025 10:37:14 GMT\r\nServer: nginx\r\nVary: Accept-Encoding\r\nX-Cache: UPDATING\r\nTransfer-Encoding: chunked\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":54500,"size_decoded":0,"mime_type":"application/javascript","magic":"data","md5":"5bfb77aa94062b0d3ee843bbcbddb518","sha1":"a35366da6a7ee819f553a764e46736b93bbf5f4e","sha256":"30683f69778858055564adb9907f018d32b769755a004cf744218f58b4022e6b","sha512":"c31aad60d50511bd36430ebab8159e9a11c8a35f5ebd1fa8e262e711c4382c36c473b577b1367f8ddc52d98a1e37f492249c5690ff3a7c6516dfc69434892028","ssdeep":"1536:5TPQz5kwg2ntGiMyOfg7yW/1v+qzXuLLz5qiZEcamJDD79JqsK:KK2nMP871v+eXMTbJD7TqsK","tlshash":"9f83e10a0200e3b0d5fb95fe68a3d5c8632052cae796ad80c974d6213ded15dbbef1d6","first_seen":"2025-03-04T21:47:36.904364Z","last_seen":"2026-03-25T07:51:29.236558Z","times_seen":252,"resource_available":false,"data":null}},"time_used":3453,"timings":{"blocked":3129,"dns":0,"connect":0,"send":0,"wait":310,"receive":14,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"y9nfflf0ci.6306ldy88.com/js/tj.js","fqdn":"y9nfflf0ci.6306ldy88.com","domain":"6306ldy88.com","tld":"com"},"ip":{"addr":"148.135.93.92","port":443,"asn":35916,"as":"MULTA-ASN1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://y9nfflf0ci.6306ldy88.com/","date":"2026-03-14T04:57:54.961Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.6306ldy88.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 27 Jan 2026 01:54:30 GMT","end":"Mon, 27 Apr 2026 01:54:29 GMT"},"fingerprint":{"sha1":"D2:5D:4C:EA:78:0F:32:76:2D:FF:F7:83:EF:50:61:87:78:D2:E6:2A","sha256":"90:8F:04:55:AF:45:9A:4C:58:BB:5D:3B:C1:B0:B5:A0:0D:B2:33:73:7F:2E:C7:F1:79:9F:CB:69:1B:97:BB:EE"}}},"request":{"raw":"GET /js/tj.js HTTP/1.1\r\nHost: y9nfflf0ci.6306ldy88.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://y9nfflf0ci.6306ldy88.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nCache-Control: max-age=43200\r\nContent-Encoding: gzip\r\nContent-Type: application/javascript\r\nDate: Sat, 14 Mar 2026 04:57:55 GMT\r\nEtag: W/\"6889bbda-fe8e\"\r\nExpires: Sat, 14 Mar 2026 16:57:55 GMT\r\nLast-Modified: Wed, 30 Jul 2025 06:29:46 GMT\r\nServer: nginx\r\nVary: Accept-Encoding\r\nX-Cache: UPDATING\r\nTransfer-Encoding: chunked\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":65166,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (44736)","md5":"28a175a7d95e0cb7eccacfef5d36f63d","sha1":"3e52514c73be2838ca4221a00fae5c859234929a","sha256":"d8539e4601152cfb4f4ad7a27b8422d2624d9d8b9c955ba6768e9c746379f61c","sha512":"ee19558a0335f389e738bba4599b768b59d332afe1458f6989561967a853b522df945a77be67f110d879a05339d570a46472d0b558d4f7e20ec612a261052825","ssdeep":"1536:zab7c4ArjofL5+SuTbREYIk61nJXVxWR9:+erUfr5gD9","tlshash":"8253f85a72c2b13a9357b0719c8f4845f73dad29624d88898a1dd5e4b8b482cc37edfc","first_seen":"2025-08-15T05:45:40.070339Z","last_seen":"2026-04-09T14:42:39.068853Z","times_seen":32,"resource_available":true,"data":null}},"time_used":1411,"timings":{"blocked":293,"dns":1,"connect":153,"send":0,"wait":621,"receive":179,"ssl":159},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/font-awesome/6.4.0/webfonts/fa-solid-900.woff2","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://6xu2o2diuceskjypgtwbrd9e.6306066tly.com/","date":"2026-03-14T04:57:46.485Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 14 Mar 2026 00:38:49 GMT","end":"Fri, 12 Jun 2026 01:38:45 GMT"},"fingerprint":{"sha1":"7A:4A:F6:D6:63:62:70:CA:51:C5:5A:06:41:17:71:BF:9D:2C:C9:42","sha256":"7F:F5:F5:FE:73:1F:E7:AF:1A:82:5B:59:EE:E8:E9:65:D6:87:68:61:8C:11:1E:94:4A:9A:C4:14:BD:4B:04:BA"}}},"request":{"raw":"GET /ajax/libs/font-awesome/6.4.0/webfonts/fa-solid-900.woff2 HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://6xu2o2diuceskjypgtwbrd9e.6306066tly.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cdnjs.cloudflare.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Mar 2026 04:57:46 GMT\r\ncontent-type: application/octet-stream; charset=utf-8\r\ncontent-length: 150124\r\ncf-ray: 9dc0b311ab0e0883-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\netag: \"6421d693-24a6c\"\r\nlast-modified: Mon, 27 Mar 2023 17:46:59 GMT\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/kv\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 82359\r\nexpires: Thu, 04 Mar 2027 04:57:46 GMT\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=PLRN1UYnDOOIi%2B%2FEIA%2Bw2rAw%2FtJVzWVsYAOCMixhu8hZQZ%2F4GPQbb7tTkwrEh8CBtUeN2Ix4IAASMZtcV3%2BhP8Q7JosVUPOJjOf9RW9M4eitlPSCD8AMiVrPqRBHvyg9ByU1i4az\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nstrict-transport-security: max-age=15780000\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":150124,"size_decoded":0,"mime_type":"application/octet-stream; charset=utf-8","magic":"Web Open Font Format (Version 2), TrueType, length 150124, version 772.256","md5":"c64278386c2bbb5e293e11b94ca2f6d1","sha1":"6b99aa650bd12a36caa14e0127435d8f4cd3ba73","sha256":"7152a6933ee3d690ec2af3d09da9d701723d16aa3410a6d80f28ff8866f3b880","sha512":"0ccdc1515510d902c0b4a48b863c48bad86e1f766b1f9c890a64e28d91ee7c6d488241c531fc094d15b29c211da71e092587a987e24ee8e67ef8ea99c284e821","ssdeep":"3072:7sCbk7w0ZXdkN6iMjif3Lr7x7wAtf+D7gDk1feXDLnurWHqrNIuv5n0:7sCbkFZXdC7MaLr9w2mIY1feXXurWyNW","tlshash":"28e3123cf2c6d486735f5aeadb79636894fd0a2e74ecc67d26b982112048f828174d1d","first_seen":"2023-04-09T20:30:06Z","last_seen":"2026-04-16T07:59:38.460652Z","times_seen":32355,"resource_available":false,"data":null}},"time_used":38,"timings":{"blocked":18,"dns":0,"connect":0,"send":0,"wait":11,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"y9nfflf0ci.6306ldy88.com/","fqdn":"y9nfflf0ci.6306ldy88.com","domain":"6306ldy88.com","tld":"com"},"ip":{"addr":"148.135.93.91","port":443,"asn":35916,"as":"MULTA-ASN1","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-14T04:57:53.722Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.6306ldy88.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 27 Jan 2026 01:54:30 GMT","end":"Mon, 27 Apr 2026 01:54:29 GMT"},"fingerprint":{"sha1":"D2:5D:4C:EA:78:0F:32:76:2D:FF:F7:83:EF:50:61:87:78:D2:E6:2A","sha256":"90:8F:04:55:AF:45:9A:4C:58:BB:5D:3B:C1:B0:B5:A0:0D:B2:33:73:7F:2E:C7:F1:79:9F:CB:69:1B:97:BB:EE"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: y9nfflf0ci.6306ldy88.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://6xu2o2diuceskjypgtwbrd9e.6306066tly.com/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Encoding: gzip\r\nContent-Type: text/html\r\nDate: Sat, 14 Mar 2026 04:57:54 GMT\r\nEtag: W/\"6959a0a5-18e2\"\r\nLast-Modified: Sat, 03 Jan 2026 23:05:09 GMT\r\nServer: nginx\r\nVary: Accept-Encoding\r\nX-Cache: UPDATING\r\nContent-Length: 1480\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"jQuery:2.2.4","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6370,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text","md5":"f10bafac28fd3f1badf4cc88a4eab001","sha1":"169844244f0f32de2f85cfa1be9013bcd95bf960","sha256":"ba26e4996e5de18ff9312f51affdf3bb7ff066ecf6c7bf783bcc47e25aa6a8f2","sha512":"9258aba5ed3af190c0e6449cba502b32e6e5e662965e339d01af2ac100107fff66a3c4164e6cedac5f5dc7187a0e7f08f962620ff07f8825e5e9b49edba22ac8","ssdeep":"48:0vSmfkhEiN+uMzYoIiQk9nOzSuvRHzPTSVD0Of/7/M/Q6WsM:j+/DQ2OlxP20O16zM","tlshash":"d4d1462450f942a315838880ae697a1bbfd0ea47c91b8604b5fd0fda9fd7ddacd1364c","first_seen":"2026-03-14T04:58:22.254929Z","last_seen":"2026-03-25T07:51:29.205603Z","times_seen":2,"resource_available":true,"data":null}},"time_used":1691,"timings":{"blocked":614,"dns":284,"connect":156,"send":0,"wait":462,"receive":1,"ssl":170},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"y9nfflf0ci.6306ldy88.com/js/2ac1bc_750x202.js","fqdn":"y9nfflf0ci.6306ldy88.com","domain":"6306ldy88.com","tld":"com"},"ip":{"addr":"148.135.93.92","port":443,"asn":35916,"as":"MULTA-ASN1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://y9nfflf0ci.6306ldy88.com/","date":"2026-03-14T04:57:54.968Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.6306ldy88.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 27 Jan 2026 01:54:30 GMT","end":"Mon, 27 Apr 2026 01:54:29 GMT"},"fingerprint":{"sha1":"D2:5D:4C:EA:78:0F:32:76:2D:FF:F7:83:EF:50:61:87:78:D2:E6:2A","sha256":"90:8F:04:55:AF:45:9A:4C:58:BB:5D:3B:C1:B0:B5:A0:0D:B2:33:73:7F:2E:C7:F1:79:9F:CB:69:1B:97:BB:EE"}}},"request":{"raw":"GET /js/2ac1bc_750x202.js HTTP/1.1\r\nHost: y9nfflf0ci.6306ldy88.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://y9nfflf0ci.6306ldy88.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nCache-Control: max-age=43200\r\nContent-Encoding: gzip\r\nContent-Type: application/javascript\r\nDate: Sat, 14 Mar 2026 04:57:57 GMT\r\nEtag: W/\"680cb75e-36458\"\r\nExpires: Sat, 14 Mar 2026 16:57:57 GMT\r\nLast-Modified: Sat, 26 Apr 2025 10:37:18 GMT\r\nServer: nginx\r\nVary: Accept-Encoding\r\nX-Cache: UPDATING\r\nTransfer-Encoding: chunked\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":222296,"size_decoded":0,"mime_type":"application/javascript","magic":"data","md5":"81e9f9f8ddd8049d3ba43e583a15f5f1","sha1":"caa898f9416488b638bfb05bcb1d368c6a44822b","sha256":"f1cdc7b6b08a413f40418d50d74abe68362aa2cb9c3452488defab00c93e26cd","sha512":"430c874eed332b6cdb28257fb30765049a48bf08041580c4a83277bc2ad92cc934e59eaa516b9ca0c11d89978e7585957359a8d037708408c1d3d16242b652b5","ssdeep":"6144:FZK0gWzjlqthN1TYd4W1W7Ff2NCLyK2XGcpNQ0B9ZLa9e9dQg:nK0gWzjlMhNxYd4gW7Ff2NCLyAANQ0b/","tlshash":"a664e1029302e370d3bb80fa64024bd8a1055f95f7dbbaa4d134d6a11ddf62e779e4e2","first_seen":"2025-03-04T21:47:36.899232Z","last_seen":"2026-03-25T07:51:29.220449Z","times_seen":251,"resource_available":false,"data":null}},"time_used":2845,"timings":{"blocked":2105,"dns":0,"connect":0,"send":0,"wait":358,"receive":382,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"y9nfflf0ci.6306ldy88.com/js/d127b0_314x484.js","fqdn":"y9nfflf0ci.6306ldy88.com","domain":"6306ldy88.com","tld":"com"},"ip":{"addr":"148.135.93.92","port":443,"asn":35916,"as":"MULTA-ASN1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://y9nfflf0ci.6306ldy88.com/","date":"2026-03-14T04:57:54.972Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.6306ldy88.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 27 Jan 2026 01:54:30 GMT","end":"Mon, 27 Apr 2026 01:54:29 GMT"},"fingerprint":{"sha1":"D2:5D:4C:EA:78:0F:32:76:2D:FF:F7:83:EF:50:61:87:78:D2:E6:2A","sha256":"90:8F:04:55:AF:45:9A:4C:58:BB:5D:3B:C1:B0:B5:A0:0D:B2:33:73:7F:2E:C7:F1:79:9F:CB:69:1B:97:BB:EE"}}},"request":{"raw":"GET /js/d127b0_314x484.js HTTP/1.1\r\nHost: y9nfflf0ci.6306ldy88.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://y9nfflf0ci.6306ldy88.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nCache-Control: max-age=43200\r\nContent-Encoding: gzip\r\nContent-Type: application/javascript\r\nDate: Sat, 14 Mar 2026 04:57:57 GMT\r\nEtag: W/\"680cb768-4fa6c\"\r\nExpires: Sat, 14 Mar 2026 16:57:57 GMT\r\nLast-Modified: Sat, 26 Apr 2025 10:37:28 GMT\r\nServer: nginx\r\nVary: Accept-Encoding\r\nX-Cache: UPDATING\r\nTransfer-Encoding: chunked\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":326252,"size_decoded":0,"mime_type":"application/javascript","magic":"data","md5":"5964c8443fdd18e611062e0837f193fe","sha1":"f6f06f273fe93dbf223dcc6203d506807b77a78b","sha256":"638308ab8a8fd0ffad5e68dc258b3a0f3aa5288abb3a64138da635b85ec88215","sha512":"c3a5cb70bb3c0329b05a10ae7fe98face2bbe8df22cc685c4551dee676444d4622a66fb670e0d4acaeff8b1240e42c4eea7ac5a0869d25cdccb33ba72acaf560","ssdeep":"12288:BMGIRkMIeL77EhvW/1M431Op5g0ZTsrK+76qpqorQmj8ZAYD6AW2:QRW6sOhq8QHGAW2","tlshash":"eaa4f1029252f370d2f795fa681316d8b1109b99efdabd90d230c6612d9f32db2de4d2","first_seen":"2025-03-04T21:47:36.918794Z","last_seen":"2026-03-25T07:51:29.222044Z","times_seen":251,"resource_available":false,"data":null}},"time_used":3329,"timings":{"blocked":2644,"dns":0,"connect":0,"send":0,"wait":311,"receive":374,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"y9nfflf0ci.6306ldy88.com/js/aa5164_750x492.js","fqdn":"y9nfflf0ci.6306ldy88.com","domain":"6306ldy88.com","tld":"com"},"ip":{"addr":"148.135.93.91","port":443,"asn":35916,"as":"MULTA-ASN1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://y9nfflf0ci.6306ldy88.com/","date":"2026-03-14T04:57:54.979Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.6306ldy88.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 27 Jan 2026 01:54:30 GMT","end":"Mon, 27 Apr 2026 01:54:29 GMT"},"fingerprint":{"sha1":"D2:5D:4C:EA:78:0F:32:76:2D:FF:F7:83:EF:50:61:87:78:D2:E6:2A","sha256":"90:8F:04:55:AF:45:9A:4C:58:BB:5D:3B:C1:B0:B5:A0:0D:B2:33:73:7F:2E:C7:F1:79:9F:CB:69:1B:97:BB:EE"}}},"request":{"raw":"GET /js/aa5164_750x492.js HTTP/1.1\r\nHost: y9nfflf0ci.6306ldy88.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://y9nfflf0ci.6306ldy88.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nCache-Control: max-age=43200\r\nContent-Encoding: gzip\r\nContent-Type: application/javascript\r\nDate: Sat, 14 Mar 2026 04:57:56 GMT\r\nEtag: W/\"680cb765-61e76\"\r\nExpires: Sat, 14 Mar 2026 16:57:56 GMT\r\nLast-Modified: Sat, 26 Apr 2025 10:37:25 GMT\r\nServer: nginx\r\nVary: Accept-Encoding\r\nX-Cache: UPDATING\r\nTransfer-Encoding: chunked\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":401014,"size_decoded":0,"mime_type":"application/javascript","magic":"data","md5":"4fdb71bb688d0467bec6326e74c43bd1","sha1":"1fa54dd0fcde49982781b2b2e23a7d13bf4ddb17","sha256":"ab6484aed5930cf1b483417bf2cabd22eb955c1a1a19aa3735b97229e1d040f1","sha512":"d2ab444a1954c7691daec4645f911d5b2a32e9d0faee7022533e754773c445356f26389c31a18a920c309fa82b8edf726631de764ca33fcd264b37847865e957","ssdeep":"12288:hmFxi+dMCWihvnzRDjT5+GL1M/16RIY0lcYnEI8b3QdBT0k:h4xN/GtKToppN","tlshash":"9dd4f1026352f370e3aa51fda8120ad466055f99fbdbfd50c534d2a12c9f22e768f4e2","first_seen":"2025-03-04T21:47:36.915279Z","last_seen":"2026-03-25T07:51:29.217461Z","times_seen":250,"resource_available":false,"data":null}},"time_used":1998,"timings":{"blocked":1076,"dns":0,"connect":0,"send":0,"wait":371,"receive":551,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"y9nfflf0ci.6306ldy88.com/js/3ff292_656x56.js","fqdn":"y9nfflf0ci.6306ldy88.com","domain":"6306ldy88.com","tld":"com"},"ip":{"addr":"148.135.93.92","port":443,"asn":35916,"as":"MULTA-ASN1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://y9nfflf0ci.6306ldy88.com/","date":"2026-03-14T04:57:56.099Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.6306ldy88.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 27 Jan 2026 01:54:30 GMT","end":"Mon, 27 Apr 2026 01:54:29 GMT"},"fingerprint":{"sha1":"D2:5D:4C:EA:78:0F:32:76:2D:FF:F7:83:EF:50:61:87:78:D2:E6:2A","sha256":"90:8F:04:55:AF:45:9A:4C:58:BB:5D:3B:C1:B0:B5:A0:0D:B2:33:73:7F:2E:C7:F1:79:9F:CB:69:1B:97:BB:EE"}}},"request":{"raw":"GET /js/3ff292_656x56.js HTTP/1.1\r\nHost: y9nfflf0ci.6306ldy88.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://y9nfflf0ci.6306ldy88.com/css/style.min.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nCache-Control: max-age=43200\r\nContent-Encoding: gzip\r\nContent-Type: application/javascript\r\nDate: Sat, 14 Mar 2026 04:57:56 GMT\r\nEtag: W/\"680cb760-4d92\"\r\nExpires: Sat, 14 Mar 2026 16:57:56 GMT\r\nLast-Modified: Sat, 26 Apr 2025 10:37:20 GMT\r\nServer: nginx\r\nVary: Accept-Encoding\r\nX-Cache: UPDATING\r\nTransfer-Encoding: chunked\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":19858,"size_decoded":0,"mime_type":"application/javascript","magic":"data","md5":"d8aff0792f6225dee12b5ef3e05215ef","sha1":"354c78407452752722fd0f9b7e0e61d981ac480c","sha256":"50111cf8ac009d2379996cd91f3cd9b95e2d227bc6659bf8c542dcb17715b6c6","sha512":"5be57cd804b0573e92c367c289e82b9f3b6bf6112370e79e3e93f0f8d735e4d26c989bc299c1b3392e398430eb729293e5e3c0e9054619e344e88d8f319c5f4b","ssdeep":"768:Oe9ZqFepk/lzgg0RorUVDav+8duhHZnei/z9iIdqy5BlIu68rQplf:O8pAH5qFei/R7w2Ir9","tlshash":"e9d2d101d700c7a1e0b6e5fa1a522dd766128ddee7e9de50e288c0f13a7d749489ccec","first_seen":"2024-12-22T22:32:08.558309Z","last_seen":"2026-03-25T07:51:29.215061Z","times_seen":258,"resource_available":false,"data":null}},"time_used":974,"timings":{"blocked":576,"dns":0,"connect":0,"send":0,"wait":362,"receive":36,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"y9nfflf0ci.6306ldy88.com/js/35fe8d_750x570.js","fqdn":"y9nfflf0ci.6306ldy88.com","domain":"6306ldy88.com","tld":"com"},"ip":{"addr":"148.135.93.92","port":443,"asn":35916,"as":"MULTA-ASN1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://y9nfflf0ci.6306ldy88.com/","date":"2026-03-14T04:57:54.966Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.6306ldy88.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 27 Jan 2026 01:54:30 GMT","end":"Mon, 27 Apr 2026 01:54:29 GMT"},"fingerprint":{"sha1":"D2:5D:4C:EA:78:0F:32:76:2D:FF:F7:83:EF:50:61:87:78:D2:E6:2A","sha256":"90:8F:04:55:AF:45:9A:4C:58:BB:5D:3B:C1:B0:B5:A0:0D:B2:33:73:7F:2E:C7:F1:79:9F:CB:69:1B:97:BB:EE"}}},"request":{"raw":"GET /js/35fe8d_750x570.js HTTP/1.1\r\nHost: y9nfflf0ci.6306ldy88.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://y9nfflf0ci.6306ldy88.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nCache-Control: max-age=43200\r\nContent-Encoding: gzip\r\nContent-Type: application/javascript\r\nDate: Sat, 14 Mar 2026 04:57:56 GMT\r\nEtag: W/\"680cb760-a67f2\"\r\nExpires: Sat, 14 Mar 2026 16:57:56 GMT\r\nLast-Modified: Sat, 26 Apr 2025 10:37:20 GMT\r\nServer: nginx\r\nVary: Accept-Encoding\r\nX-Cache: UPDATING\r\nTransfer-Encoding: chunked\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":681970,"size_decoded":0,"mime_type":"application/javascript","magic":"data","md5":"d751efb6cfdec9fcf10207077107c0b3","sha1":"29df5cf32f0947903b9b800affd7a190d69f7e52","sha256":"410cd5bdc4f228df9bc1604fa8afdf45dd1af37c4a5e7bb8c20db79cb3093fe8","sha512":"a4a3991dc63d5a7ac1b9383694bc61ba2161bb8929bbabb4685f1dbdbf632d8ecfdc51e9afdd2de109e5ac0decf16101b3cdd9e1efe258c469d611fc2cfdb42e","ssdeep":"12288:vJxHTysGrQEyQIU5RJbLez4zHm+NkMgPmDL/vYfEYJfylM2hCIoh5Ip2KeACah8l:u1BRRLea5vtMXJL7Gr88pOEQ","tlshash":"aa25f2019352f370e3b690fea41209d4a2049f99fbdbbd54c638d2612dde22e76de4d2","first_seen":"2025-03-04T21:47:36.914203Z","last_seen":"2026-03-25T07:51:29.265153Z","times_seen":250,"resource_available":false,"data":null}},"time_used":2445,"timings":{"blocked":1089,"dns":0,"connect":0,"send":0,"wait":356,"receive":1000,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"y9nfflf0ci.6306ldy88.com/favicon.ico","fqdn":"y9nfflf0ci.6306ldy88.com","domain":"6306ldy88.com","tld":"com"},"ip":{"addr":"148.135.93.92","port":443,"asn":35916,"as":"MULTA-ASN1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://y9nfflf0ci.6306ldy88.com/","date":"2026-03-14T04:57:58.533Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.6306ldy88.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 27 Jan 2026 01:54:30 GMT","end":"Mon, 27 Apr 2026 01:54:29 GMT"},"fingerprint":{"sha1":"D2:5D:4C:EA:78:0F:32:76:2D:FF:F7:83:EF:50:61:87:78:D2:E6:2A","sha256":"90:8F:04:55:AF:45:9A:4C:58:BB:5D:3B:C1:B0:B5:A0:0D:B2:33:73:7F:2E:C7:F1:79:9F:CB:69:1B:97:BB:EE"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: y9nfflf0ci.6306ldy88.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://y9nfflf0ci.6306ldy88.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nAccept-Ranges: bytes\r\nContent-Length: 80687\r\nContent-Type: image/x-icon\r\nDate: Sat, 14 Mar 2026 04:57:58 GMT\r\nEtag: \"680cb758-13b2f\"\r\nLast-Modified: Sat, 26 Apr 2025 10:37:12 GMT\r\nServer: nginx\r\nX-Cache: UPDATING\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":80687,"size_decoded":0,"mime_type":"image/x-icon","magic":"PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced","md5":"e53665f2bfd90be55abd41eed0d26bcb","sha1":"21fd7b55e0b1a671184314ee33f785fa4665d85f","sha256":"d250d9639fa8b20577b6e0c9321df89300d0f8012e3d3e5c3ff238a771a45052","sha512":"ebf548a1b0460b3c30e3632e204fb0d16c1979217bcfca7fdd45d11fd4cebd430a6d81aee52ebb6e279fbdd55beecc3227229688e8fd5f4583ee49e65753671f","ssdeep":"1536:jDniaozB0K6Wz8RfQIOpIgj6lLVfpi8l3MadfPGYYmYtW7LEHdPqAIOT:jDiaozLt2fQTpru54KLPxTFEHhBIQ","tlshash":"a373f14579b0c8217e64845c6792886febbc919bc139f07e9620d4a74532ebc0f7a87f","first_seen":"2024-12-01T06:33:52.688165Z","last_seen":"2026-03-25T07:51:29.208391Z","times_seen":336,"resource_available":false,"data":null}},"time_used":326,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":303,"receive":23,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/font-awesome/6.4.0/css/all.min.css","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://6xu2o2diuceskjypgtwbrd9e.6306066tly.com/","date":"2026-03-14T04:57:46.389Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 14 Mar 2026 00:38:49 GMT","end":"Fri, 12 Jun 2026 01:38:45 GMT"},"fingerprint":{"sha1":"7A:4A:F6:D6:63:62:70:CA:51:C5:5A:06:41:17:71:BF:9D:2C:C9:42","sha256":"7F:F5:F5:FE:73:1F:E7:AF:1A:82:5B:59:EE:E8:E9:65:D6:87:68:61:8C:11:1E:94:4A:9A:C4:14:BD:4B:04:BA"}}},"request":{"raw":"GET /ajax/libs/font-awesome/6.4.0/css/all.min.css HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://6xu2o2diuceskjypgtwbrd9e.6306066tly.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 14 Mar 2026 04:57:46 GMT\r\ncontent-type: text/css; charset=utf-8\r\ncontent-length: 18752\r\ncf-ray: 9dc0b3110ae78be6-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"6421d693-4940\"\r\nlast-modified: Mon, 27 Mar 2023 17:46:59 GMT\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/kv\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 96655\r\nexpires: Thu, 04 Mar 2027 04:57:46 GMT\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=g4mPHr%2BnqLSwtf8MCL3PTIr0mGq%2B9z99DBbaFe%2B3xI9Xskz4lhBal8U7BT90k0jCoBV5gzkRSiVf%2BrPRwshkKeqRrZKxLWJPMAQKaLx%2B4hKAmcVSTKRrWiRk0IovXUOKUBy2geSu\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nstrict-transport-security: max-age=15780000\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":102025,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (52276)","md5":"ded1c367363e8b20bdc6a19b8350a737","sha1":"8c06d82739d14b094ff6d9036021a252bd1d985d","sha256":"1edb1725a9ea8ca4dcf2f5508cee183218aa1685e47c1b23056717f754f58ebf","sha512":"89e71d2e66ac925ec2564aa45cd43f647fd72e5bd664e2728fb632eed71e9e6a43d72a404a8ce9993fc4d223ed985201e3a66676d01cf5e341bc7d07fd9a6207","ssdeep":"1536:OwMCMPMCMjMCM4MCMwMCM3sVMX709gbPMfjSFOTyPGuZprfZCl:S709gMGFiyPGuZpfZCl","tlshash":"2ea3a7f9e44c05d97732c44bab95b37c65b6f738d5810ca9f02f580c1ad26a822c6f7a","first_seen":"2023-04-06T15:05:25Z","last_seen":"2026-04-16T07:59:38.459529Z","times_seen":44057,"resource_available":false,"data":null}},"time_used":46,"timings":{"blocked":16,"dns":1,"connect":1,"send":0,"wait":11,"receive":1,"ssl":13},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"y9nfflf0ci.6306ldy88.com/css/Swiper.css","fqdn":"y9nfflf0ci.6306ldy88.com","domain":"6306ldy88.com","tld":"com"},"ip":{"addr":"148.135.93.92","port":443,"asn":35916,"as":"MULTA-ASN1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://y9nfflf0ci.6306ldy88.com/","date":"2026-03-14T04:57:54.950Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.6306ldy88.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 27 Jan 2026 01:54:30 GMT","end":"Mon, 27 Apr 2026 01:54:29 GMT"},"fingerprint":{"sha1":"D2:5D:4C:EA:78:0F:32:76:2D:FF:F7:83:EF:50:61:87:78:D2:E6:2A","sha256":"90:8F:04:55:AF:45:9A:4C:58:BB:5D:3B:C1:B0:B5:A0:0D:B2:33:73:7F:2E:C7:F1:79:9F:CB:69:1B:97:BB:EE"}}},"request":{"raw":"GET /css/Swiper.css HTTP/1.1\r\nHost: y9nfflf0ci.6306ldy88.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://y9nfflf0ci.6306ldy88.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nCache-Control: max-age=43200\r\nContent-Encoding: gzip\r\nContent-Type: text/css\r\nDate: Sat, 14 Mar 2026 04:57:55 GMT\r\nEtag: W/\"680cb75a-3570\"\r\nExpires: Sat, 14 Mar 2026 16:57:55 GMT\r\nLast-Modified: Sat, 26 Apr 2025 10:37:14 GMT\r\nServer: nginx\r\nVary: Accept-Encoding\r\nX-Cache: UPDATING\r\nTransfer-Encoding: chunked\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":13680,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (13412), with CRLF line terminators","md5":"60a23d2c5b75975b1a2c21520e483352","sha1":"7ec5dfff3b6bd1a12fe64fb61c568c034ce354cd","sha256":"56c3dd16a5cf2ebefe0a3ee896bb3f20bc7b4327f75588188343c488d4aa951c","sha512":"de482c885d09fc675f8cb265c60d551928a23ad9924ede951197d8c743c99db75b8b397c37c07f4bfacb970b3ab9f676e0bca839438ba8084f4373211da6e4e1","ssdeep":"384:rLUbeQS7Rgx9BU0W/XCcif65W/1mXA82FHpx:r4b67gbhW/XDif65W/1mXA82Fn","tlshash":"e252236417003837f3774f6e4aa1e6b59f60cc838a934d9db2c0dd44d6f98b9122eb95","first_seen":"2023-04-06T20:03:49Z","last_seen":"2026-04-15T08:07:23.6031Z","times_seen":10897,"resource_available":false,"data":null}},"time_used":1063,"timings":{"blocked":295,"dns":1,"connect":149,"send":0,"wait":454,"receive":1,"ssl":159},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"y9nfflf0ci.6306ldy88.com/js/rem.js","fqdn":"y9nfflf0ci.6306ldy88.com","domain":"6306ldy88.com","tld":"com"},"ip":{"addr":"148.135.93.92","port":443,"asn":35916,"as":"MULTA-ASN1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://y9nfflf0ci.6306ldy88.com/","date":"2026-03-14T04:57:54.957Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.6306ldy88.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 27 Jan 2026 01:54:30 GMT","end":"Mon, 27 Apr 2026 01:54:29 GMT"},"fingerprint":{"sha1":"D2:5D:4C:EA:78:0F:32:76:2D:FF:F7:83:EF:50:61:87:78:D2:E6:2A","sha256":"90:8F:04:55:AF:45:9A:4C:58:BB:5D:3B:C1:B0:B5:A0:0D:B2:33:73:7F:2E:C7:F1:79:9F:CB:69:1B:97:BB:EE"}}},"request":{"raw":"GET /js/rem.js HTTP/1.1\r\nHost: y9nfflf0ci.6306ldy88.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://y9nfflf0ci.6306ldy88.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nAccept-Ranges: bytes\r\nCache-Control: max-age=43200\r\nContent-Encoding: br\r\nContent-Type: application/javascript\r\nDate: Sat, 14 Mar 2026 04:57:55 GMT\r\nEtag: \"680cb76c-34b\"\r\nExpires: Sat, 14 Mar 2026 16:57:55 GMT\r\nLast-Modified: Sat, 26 Apr 2025 10:37:32 GMT\r\nServer: nginx\r\nVary: Accept-Encoding\r\nX-Cache: UPDATING\r\nContent-Length: 524\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":843,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with CRLF line terminators","md5":"e74e945fcc19cbd1d5276e5d4548d525","sha1":"8236e3f3fc64916f9f7f65e8aa2680c9302f0858","sha256":"33442081f56c808935dba715de506e29ebf99eea4d997a64818edb9081369fa5","sha512":"a31082fa7c4afd5138b6f5048ea64b3fced8635505c69b56b2de5168b699069401b415f26eb42ed6ccdbc8e8c8db6f50618fea5890565ed5404f360176907245","ssdeep":"","tlshash":"8a01f166644125384b2b0009a925726cfeb7811303235283f45cae766fb0e430ab1fdc","first_seen":"2023-03-07T12:23:57Z","last_seen":"2026-04-16T00:22:21.821892Z","times_seen":14406,"resource_available":true,"data":null}},"time_used":1100,"timings":{"blocked":305,"dns":1,"connect":155,"send":0,"wait":467,"receive":0,"ssl":169},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"y9nfflf0ci.6306ldy88.com/js/821bf0_314x484.js","fqdn":"y9nfflf0ci.6306ldy88.com","domain":"6306ldy88.com","tld":"com"},"ip":{"addr":"148.135.93.92","port":443,"asn":35916,"as":"MULTA-ASN1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://y9nfflf0ci.6306ldy88.com/","date":"2026-03-14T04:57:54.971Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.6306ldy88.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 27 Jan 2026 01:54:30 GMT","end":"Mon, 27 Apr 2026 01:54:29 GMT"},"fingerprint":{"sha1":"D2:5D:4C:EA:78:0F:32:76:2D:FF:F7:83:EF:50:61:87:78:D2:E6:2A","sha256":"90:8F:04:55:AF:45:9A:4C:58:BB:5D:3B:C1:B0:B5:A0:0D:B2:33:73:7F:2E:C7:F1:79:9F:CB:69:1B:97:BB:EE"}}},"request":{"raw":"GET /js/821bf0_314x484.js HTTP/1.1\r\nHost: y9nfflf0ci.6306ldy88.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://y9nfflf0ci.6306ldy88.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nCache-Control: max-age=43200\r\nContent-Encoding: gzip\r\nContent-Type: application/javascript\r\nDate: Sat, 14 Mar 2026 04:57:57 GMT\r\nEtag: W/\"680cb764-4b793\"\r\nExpires: Sat, 14 Mar 2026 16:57:57 GMT\r\nLast-Modified: Sat, 26 Apr 2025 10:37:24 GMT\r\nServer: nginx\r\nVary: Accept-Encoding\r\nX-Cache: UPDATING\r\nTransfer-Encoding: chunked\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":309139,"size_decoded":0,"mime_type":"application/javascript","magic":"data","md5":"ddaa32b9410f483dfbd021cb1022133a","sha1":"d05d33b6ecee50e2539c01c1b4599042b79e66ca","sha256":"f58c9fa8dedaf793239b98736f6476eff492844ceba9ae5abd969396516113fd","sha512":"9102c8557c172cd8c2adb338ff989c9c22713d9209b5de8dfa5170a7aaa5aa3b9a650fb1d2c4b40709574652a6fd1b7d22f7ed5d8febb7bc484e3c489a0e1f41","ssdeep":"12288:tMp7oVCvwiqkseTzcpWWwZXmWPjK1qf3pPUgh5+Pg:39ixSeFlhYg","tlshash":"28a4f1065342f3b0e2ab55fd99030ad462009f94ebdbbd50c634d2a15caf22e77de8d2","first_seen":"2025-03-04T21:47:36.900239Z","last_seen":"2026-03-25T07:51:29.268736Z","times_seen":248,"resource_available":false,"data":null}},"time_used":3133,"timings":{"blocked":2443,"dns":0,"connect":0,"send":0,"wait":323,"receive":367,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"y9nfflf0ci.6306ldy88.com/js/ae4a8b_314x484.js","fqdn":"y9nfflf0ci.6306ldy88.com","domain":"6306ldy88.com","tld":"com"},"ip":{"addr":"148.135.93.92","port":443,"asn":35916,"as":"MULTA-ASN1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://y9nfflf0ci.6306ldy88.com/","date":"2026-03-14T04:57:54.974Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.6306ldy88.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 27 Jan 2026 01:54:30 GMT","end":"Mon, 27 Apr 2026 01:54:29 GMT"},"fingerprint":{"sha1":"D2:5D:4C:EA:78:0F:32:76:2D:FF:F7:83:EF:50:61:87:78:D2:E6:2A","sha256":"90:8F:04:55:AF:45:9A:4C:58:BB:5D:3B:C1:B0:B5:A0:0D:B2:33:73:7F:2E:C7:F1:79:9F:CB:69:1B:97:BB:EE"}}},"request":{"raw":"GET /js/ae4a8b_314x484.js HTTP/1.1\r\nHost: y9nfflf0ci.6306ldy88.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://y9nfflf0ci.6306ldy88.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nCache-Control: max-age=43200\r\nContent-Encoding: gzip\r\nContent-Type: application/javascript\r\nDate: Sat, 14 Mar 2026 04:57:57 GMT\r\nEtag: W/\"680cb765-4f4ae\"\r\nExpires: Sat, 14 Mar 2026 16:57:57 GMT\r\nLast-Modified: Sat, 26 Apr 2025 10:37:25 GMT\r\nServer: nginx\r\nVary: Accept-Encoding\r\nX-Cache: UPDATING\r\nTransfer-Encoding: chunked\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":324782,"size_decoded":0,"mime_type":"application/javascript","magic":"data","md5":"94cc5267cd1396da0075c02b44813296","sha1":"953634368dc937cb67aaf21e397ac1a5411abe28","sha256":"2c1b33e6ac20dae460bec0819a2db5c90f972f09abb5fd678b566e21b5901a4b","sha512":"c4332c8f00198ed76c250d7923ef3626a075278e7e7761f6b94ce53f1bc5d8fe33f7887ea535b0f27e603e225f0c04e0a26ecb891c2b2ff6fda9cbced5d62b50","ssdeep":"12288:XNXDoCRwcfF7daVjhrhnki1sA8yQdnvqCrDyYtUIrWt2OfdGg09Rr0y3x1dXKf:C7lw22s0cQZKf","tlshash":"1ea4f1029202f370d7ab94fa780307d4a2059a99ebdabe94c630d6615c9f52e77de4c3","first_seen":"2025-03-04T21:47:36.920917Z","last_seen":"2026-03-25T07:51:29.223206Z","times_seen":251,"resource_available":false,"data":null}},"time_used":3290,"timings":{"blocked":2751,"dns":0,"connect":0,"send":0,"wait":309,"receive":230,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"y9nfflf0ci.6306ldy88.com/js/c7c11c_750x4072.js","fqdn":"y9nfflf0ci.6306ldy88.com","domain":"6306ldy88.com","tld":"com"},"ip":{"addr":"148.135.93.92","port":443,"asn":35916,"as":"MULTA-ASN1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://y9nfflf0ci.6306ldy88.com/","date":"2026-03-14T04:57:56.093Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.6306ldy88.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 27 Jan 2026 01:54:30 GMT","end":"Mon, 27 Apr 2026 01:54:29 GMT"},"fingerprint":{"sha1":"D2:5D:4C:EA:78:0F:32:76:2D:FF:F7:83:EF:50:61:87:78:D2:E6:2A","sha256":"90:8F:04:55:AF:45:9A:4C:58:BB:5D:3B:C1:B0:B5:A0:0D:B2:33:73:7F:2E:C7:F1:79:9F:CB:69:1B:97:BB:EE"}}},"request":{"raw":"GET /js/c7c11c_750x4072.js HTTP/1.1\r\nHost: y9nfflf0ci.6306ldy88.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://y9nfflf0ci.6306ldy88.com/css/style.min.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nCache-Control: max-age=43200\r\nContent-Encoding: gzip\r\nContent-Type: application/javascript\r\nDate: Sat, 14 Mar 2026 04:57:56 GMT\r\nEtag: W/\"680cb767-c8af7\"\r\nExpires: Sat, 14 Mar 2026 16:57:56 GMT\r\nLast-Modified: Sat, 26 Apr 2025 10:37:27 GMT\r\nServer: nginx\r\nVary: Accept-Encoding\r\nX-Cache: UPDATING\r\nTransfer-Encoding: chunked\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":822007,"size_decoded":0,"mime_type":"application/javascript","magic":"data","md5":"2122cdd9886f10eaeba60497e48ddd47","sha1":"3fdc0d159447970f3863c6dd36cbe2a09a729257","sha256":"e391c5e8c7eee21a7cff0451b411a220d816b1cada716712be7aa4995999d7bb","sha512":"4ec3cbd1e6abf295c0c21552491e81ad0cbcf53e74d391aa822705db159f0274e1113c21d9d6d01a7f458fb568539f03dc5cf8b6a090d26284aa2868d0ead4a3","ssdeep":"12288:2YlTqVUNEcuaVWW/7fovPBTeOsDBqKMrjSHVHEcOWmQ2+hrbeOrS1dOjGGRqGrT7:2K7BqXSWc23vOtFqoQkxt4HFTx73JQ","tlshash":"3245f101d301e370d2e650f928170ad86205af95f6defea0d628c6b16e9f22d32df9d1","first_seen":"2024-12-08T07:37:41.997181Z","last_seen":"2026-03-25T07:51:29.219029Z","times_seen":253,"resource_available":false,"data":null}},"time_used":1632,"timings":{"blocked":252,"dns":0,"connect":0,"send":0,"wait":351,"receive":1029,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"y9nfflf0ci.6306ldy88.com/js/06c9f9_700x830.js","fqdn":"y9nfflf0ci.6306ldy88.com","domain":"6306ldy88.com","tld":"com"},"ip":{"addr":"148.135.93.92","port":443,"asn":35916,"as":"MULTA-ASN1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://y9nfflf0ci.6306ldy88.com/","date":"2026-03-14T04:57:56.101Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.6306ldy88.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 27 Jan 2026 01:54:30 GMT","end":"Mon, 27 Apr 2026 01:54:29 GMT"},"fingerprint":{"sha1":"D2:5D:4C:EA:78:0F:32:76:2D:FF:F7:83:EF:50:61:87:78:D2:E6:2A","sha256":"90:8F:04:55:AF:45:9A:4C:58:BB:5D:3B:C1:B0:B5:A0:0D:B2:33:73:7F:2E:C7:F1:79:9F:CB:69:1B:97:BB:EE"}}},"request":{"raw":"GET /js/06c9f9_700x830.js HTTP/1.1\r\nHost: y9nfflf0ci.6306ldy88.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://y9nfflf0ci.6306ldy88.com/css/style.min.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nCache-Control: max-age=43200\r\nContent-Encoding: gzip\r\nContent-Type: application/javascript\r\nDate: Sat, 14 Mar 2026 04:57:56 GMT\r\nEtag: W/\"680cb75b-9857\"\r\nExpires: Sat, 14 Mar 2026 16:57:56 GMT\r\nLast-Modified: Sat, 26 Apr 2025 10:37:15 GMT\r\nServer: nginx\r\nVary: Accept-Encoding\r\nX-Cache: UPDATING\r\nTransfer-Encoding: chunked\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":38999,"size_decoded":0,"mime_type":"application/javascript","magic":"data","md5":"0fe69159994c0e905e6b89d115552b44","sha1":"070507465983b579127890936081300efe6676c8","sha256":"4d0f79c9ad5d483de8631af9553af8d9c9505076b33bb1a9d357c39be48b7111","sha512":"5758c1df209ff1758dce9f4c3175d6d8162f4d98def9624d1e316d09d60b4cd2175a2bf6c038337e74a2c5edd8de14ca5c11a103b796fdae402d1d031d572af5","ssdeep":"768:tqTr9XnnrQL5VbmfhymOWpsheDVsRkF1PImH77whks4f2Af801lV9NV:t+Xn0Lxmyh6VsSF1wmH77kkjW0tV","tlshash":"4c43c04dc263d371e2f356f248b247c863182690d6caad59c164e6612ed332d2eeedc7","first_seen":"2025-02-26T14:16:46.82899Z","last_seen":"2026-03-25T07:51:29.233871Z","times_seen":254,"resource_available":false,"data":null}},"time_used":1150,"timings":{"blocked":692,"dns":0,"connect":0,"send":0,"wait":336,"receive":122,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"6xu2o2diuceskjypgtwbrd9e.6306066tly.com/config.js","fqdn":"6xu2o2diuceskjypgtwbrd9e.6306066tly.com","domain":"6306066tly.com","tld":"com"},"ip":{"addr":"148.135.93.92","port":443,"asn":35916,"as":"MULTA-ASN1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://6xu2o2diuceskjypgtwbrd9e.6306066tly.com/","date":"2026-03-14T04:57:46.428Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.6306066tly.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 04 Jan 2026 01:48:39 GMT","end":"Sat, 04 Apr 2026 01:48:38 GMT"},"fingerprint":{"sha1":"0D:E6:ED:3C:F7:8A:70:75:E7:B1:13:01:5B:65:2F:8F:79:C0:B3:2A","sha256":"80:6E:AA:15:70:60:3B:34:3D:5D:B0:08:1A:3F:67:14:39:E2:FB:AB:E3:DA:42:96:17:17:99:3D:CF:4B:33:F6"}}},"request":{"raw":"GET /config.js HTTP/1.1\r\nHost: 6xu2o2diuceskjypgtwbrd9e.6306066tly.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://6xu2o2diuceskjypgtwbrd9e.6306066tly.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nAccept-Ranges: bytes\r\nCache-Control: max-age=43200\r\nContent-Encoding: br\r\nContent-Type: application/javascript\r\nDate: Sat, 14 Mar 2026 04:57:46 GMT\r\nEtag: \"69782937-26\"\r\nExpires: Sat, 14 Mar 2026 16:57:46 GMT\r\nLast-Modified: Tue, 27 Jan 2026 02:55:51 GMT\r\nServer: nginx\r\nVary: Accept-Encoding\r\nX-Cache: UPDATING\r\nContent-Length: 42\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":38,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with no line terminators","md5":"b204c86e92a6fbab59a09158e154842d","sha1":"367513b0926af3000f8a6d8ab0a5fc1b0635b686","sha256":"8cf4224c23e1509401049377ef36b7ae8a6a2e4c69205c4965f6157d2292f420","sha512":"7ec4181e590c17790d8a5fb1b1883941a16e38d1a25f475cb2a38d035fe735e8650e554ec3b87b7869969c56cc978520b280c321b27eefe047ef15b816e62d23","ssdeep":"","tlshash":"b98004f0f1110cc340c54044717351015c0df071355044d47f4d07510451134d4f5455","first_seen":"2026-03-14T04:58:22.272Z","last_seen":"2026-03-25T07:51:29.210196Z","times_seen":2,"resource_available":true,"data":null}},"time_used":308,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":308,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"y9nfflf0ci.6306ldy88.com/css/animate.min.css","fqdn":"y9nfflf0ci.6306ldy88.com","domain":"6306ldy88.com","tld":"com"},"ip":{"addr":"148.135.93.92","port":443,"asn":35916,"as":"MULTA-ASN1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://y9nfflf0ci.6306ldy88.com/","date":"2026-03-14T04:57:54.954Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.6306ldy88.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 27 Jan 2026 01:54:30 GMT","end":"Mon, 27 Apr 2026 01:54:29 GMT"},"fingerprint":{"sha1":"D2:5D:4C:EA:78:0F:32:76:2D:FF:F7:83:EF:50:61:87:78:D2:E6:2A","sha256":"90:8F:04:55:AF:45:9A:4C:58:BB:5D:3B:C1:B0:B5:A0:0D:B2:33:73:7F:2E:C7:F1:79:9F:CB:69:1B:97:BB:EE"}}},"request":{"raw":"GET /css/animate.min.css HTTP/1.1\r\nHost: y9nfflf0ci.6306ldy88.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://y9nfflf0ci.6306ldy88.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nCache-Control: max-age=43200\r\nContent-Encoding: gzip\r\nContent-Type: text/css\r\nDate: Sat, 14 Mar 2026 04:57:55 GMT\r\nEtag: W/\"680cb758-12a90\"\r\nExpires: Sat, 14 Mar 2026 16:57:55 GMT\r\nLast-Modified: Sat, 26 Apr 2025 10:37:12 GMT\r\nServer: nginx\r\nVary: Accept-Encoding\r\nX-Cache: UPDATING\r\nTransfer-Encoding: chunked\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":76432,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (460)","md5":"9d99b1c597a52a1a68d063308f1de662","sha1":"90dc56142980365936e75aa7c32faf92930694cc","sha256":"764287c1363d6895c6e4dbabaa80ddba43f68dfe8557e6fe9b6c7767b4db1eec","sha512":"e2d5848a4f378ae0d1d5f149829672cccf82082504ce258a50486ddc6a3cfd2631866e852454c29d38ee58d0c3245e633c457924549db4ab5261831b124a3c6a","ssdeep":"192:xIQHnGg5p1sgqg501K7JuFRH2UNURV2/o6R7M8EA+UQRjMsEu+/6QI3iiFIFibTg:xIWjy","tlshash":"db73e9a928a211445727491587df4f78663ce5a31826ecfab3de588b8f01fac23cd617","first_seen":"2023-04-06T20:03:49Z","last_seen":"2026-04-15T03:52:21.903626Z","times_seen":7033,"resource_available":false,"data":null}},"time_used":1071,"timings":{"blocked":295,"dns":1,"connect":149,"send":0,"wait":464,"receive":1,"ssl":158},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"y9nfflf0ci.6306ldy88.com/js/c75672_314x484.js","fqdn":"y9nfflf0ci.6306ldy88.com","domain":"6306ldy88.com","tld":"com"},"ip":{"addr":"148.135.93.91","port":443,"asn":35916,"as":"MULTA-ASN1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://y9nfflf0ci.6306ldy88.com/","date":"2026-03-14T04:57:54.973Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.6306ldy88.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 27 Jan 2026 01:54:30 GMT","end":"Mon, 27 Apr 2026 01:54:29 GMT"},"fingerprint":{"sha1":"D2:5D:4C:EA:78:0F:32:76:2D:FF:F7:83:EF:50:61:87:78:D2:E6:2A","sha256":"90:8F:04:55:AF:45:9A:4C:58:BB:5D:3B:C1:B0:B5:A0:0D:B2:33:73:7F:2E:C7:F1:79:9F:CB:69:1B:97:BB:EE"}}},"request":{"raw":"GET /js/c75672_314x484.js HTTP/1.1\r\nHost: y9nfflf0ci.6306ldy88.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://y9nfflf0ci.6306ldy88.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nCache-Control: max-age=43200\r\nContent-Encoding: gzip\r\nContent-Type: application/javascript\r\nDate: Sat, 14 Mar 2026 04:57:57 GMT\r\nEtag: W/\"680cb766-51da0\"\r\nExpires: Sat, 14 Mar 2026 16:57:57 GMT\r\nLast-Modified: Sat, 26 Apr 2025 10:37:26 GMT\r\nServer: nginx\r\nVary: Accept-Encoding\r\nX-Cache: UPDATING\r\nTransfer-Encoding: chunked\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":335264,"size_decoded":0,"mime_type":"application/javascript","magic":"data","md5":"d8ff75e15e07c4903866b033211595ce","sha1":"f9a39537ad46126755802a0ba0ebc569a2f1b1e7","sha256":"262e4422d598ec5a911f4131a70a1065e652e340dca0920eb0e56029c32027b0","sha512":"4e54911c38d72974ac84497e8ad69f90b8110a342ca84b5d0964dde409b184c060b49ac0e5bbd3e67f830ad890d7b1231ddc64aee36f03a2977b68ed06f769d4","ssdeep":"12288:YF95dRbUYdiqI3vjwWym5MZIDt5XH02ej9ADhtysBCH+5p5x6+MG/PRJNEErOLA8:u5UdRp31pqivw","tlshash":"9fb4f1025342f3b0d3aa55fa54130ae8a2059f98f7defd84d234d6a01dee12e76de4d2","first_seen":"2025-03-04T21:47:36.911703Z","last_seen":"2026-03-25T07:51:29.269945Z","times_seen":250,"resource_available":false,"data":null}},"time_used":3215,"timings":{"blocked":2652,"dns":0,"connect":0,"send":0,"wait":336,"receive":227,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}