{"report_id":"e24cea06-c3d1-4c95-86ee-8100c2af334f","version":6,"status":"done","tags":[],"date":"2026-01-03T16:52:15Z","url":{"schema":"http","addr":"clipphot18pro1.shop/","fqdn":"clipphot18pro1.shop","domain":"clipphot18pro1.shop","tld":"shop"},"ip":{"addr":"172.67.158.220","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"clipphot18pro1.shop/","fqdn":"clipphot18pro1.shop","domain":"clipphot18pro1.shop","tld":"shop"},"title":"Phim sex - sexnguon","dom":{"size":30752,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (427)","md5":"72d5121b912669fbdaf8e13abcc2661d","sha1":"bfed608c9ba0564a46047e2e5daa631d4e57608a","sha256":"86f8772e7d2c3e80fd59577f66348e824e59b9558df3341b44ef7bcd8a053179","sha512":"f23c2dc92851f4abea5316b1f84dd4d9c063f89cf3498e143261a48de7e9f82a125e05f0b8165af45e04a142bcda886c59cec36aa9e4c584aa918c8429b9f774","ssdeep":"768:sT+bNptPJgDTWdoc5Dlr0LJ2y768aw3kxfZf5mu/9QMetU4Fjsbk32q5l:sT+bNjRgDTWdoc5Dlgcy75Tkxh0ulYtt","tlshash":"f5d2751244d43f3b59bf09db82c41b5a7aeba6bbd6548d8179fe946d6f80ca0303c60d","dom_hash":"domhasha9053df36444df175c2a03c26329dd0b","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"clipphot18pro1.shop/","fqdn":"clipphot18pro1.shop","domain":"clipphot18pro1.shop","tld":"shop"},"ip":{"addr":"172.67.158.220","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-02-07T16:52:15Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":2,"urlquery":0,"analyzer":3}},"detection":{"ids":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-01-03T16:51:59Z","timestamp":1767459119,"ip_dst":{"addr":"172.18.0.16","port":41202,"asn":0,"as":"","country":"","country_code":"zz"},"ip_src":{"addr":"134.122.175.2","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"severity":"medium","alert":"ET DROP Spamhaus DROP Listed Traffic Inbound group 25","source":"{\"timestamp\":\"2026-01-03T16:51:59.065829+0000\",\"flow_id\":1393331568262530,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"134.122.175.2\",\"src_port\":443,\"dest_ip\":\"172.18.0.16\",\"dest_port\":41202,\"proto\":\"TCP\",\"metadata\":{\"flowbits\":[\"ET.Evil\",\"ET.DROPIP\"]},\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2400024,\"rev\":4421,\"signature\":\"ET DROP Spamhaus DROP Listed Traffic Inbound group 25\",\"category\":\"Misc Attack\",\"severity\":2,\"metadata\":{\"affected_product\":[\"Any\"],\"attack_target\":[\"Any\"],\"created_at\":[\"2010_12_30\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Minor\"],\"tag\":[\"Dshield\"],\"updated_at\":[\"2025_08_01\"]}},\"flow\":{\"pkts_toserver\":1,\"pkts_toclient\":1,\"bytes_toserver\":74,\"bytes_toclient\":74,\"start\":\"2026-01-03T16:51:58.736642+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-01-03T16:51:59Z","timestamp":1767459119,"ip_dst":{"addr":"172.18.0.16","port":36122,"asn":0,"as":"","country":"","country_code":"zz"},"ip_src":{"addr":"134.122.175.23","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"severity":"medium","alert":"ET DROP Spamhaus DROP Listed Traffic Inbound group 25","source":"{\"timestamp\":\"2026-01-03T16:51:59.323965+0000\",\"flow_id\":1810914058573302,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"134.122.175.23\",\"src_port\":443,\"dest_ip\":\"172.18.0.16\",\"dest_port\":36122,\"proto\":\"TCP\",\"metadata\":{\"flowbits\":[\"ET.Evil\",\"ET.DROPIP\"]},\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2400024,\"rev\":4421,\"signature\":\"ET DROP Spamhaus DROP Listed Traffic Inbound group 25\",\"category\":\"Misc Attack\",\"severity\":2,\"metadata\":{\"affected_product\":[\"Any\"],\"attack_target\":[\"Any\"],\"created_at\":[\"2010_12_30\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Minor\"],\"tag\":[\"Dshield\"],\"updated_at\":[\"2025_08_01\"]}},\"flow\":{\"pkts_toserver\":1,\"pkts_toclient\":1,\"bytes_toserver\":74,\"bytes_toclient\":74,\"start\":\"2026-01-03T16:51:58.988662+0000\"}}"}],"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"cdn.bootcss.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"cdn.bootcss.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"cdn.bootcss.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null},"summary":[{"fqdn":"clipphot18pro1.shop","ip":{"addr":"104.21.33.47","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-01-03T16:52:15.281901Z","last_seen":"2026-01-03T16:52:17.222501Z","alert_count":0,"request_count":13,"received_data":243730,"sent_data":6194,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"jQuery:1.9.3","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}]},{"fqdn":"cdn.bootcss.com","ip":{"addr":"134.122.175.2","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"domain_registered":"2012-11-12","domain_rank":647519,"first_seen":"2013-11-06T09:25:21Z","last_seen":"2026-01-02T18:16:17.343483Z","alert_count":3,"request_count":1,"received_data":4039,"sent_data":452,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"clipphot18pro1.shop/","fqdn":"clipphot18pro1.shop","domain":"clipphot18pro1.shop","tld":"shop"},"ip":{"addr":"104.21.33.47","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"4618ff903b8925e9ead2e2d23c90dd00","sha1":"6fc491f7fb50e01f477fbd6a6fb56fa80a587d61","sha256":"ce56bbf12410269ada2357bc1754dd10f691540c27b298724d6245031c2b07d6","sha512":"2b01ee21e87201c02a3e39af0ceb87c7676883f4d66490e62e7665118910b8122abccb9d49cc88d9f51220c5ccd75108a4312564f5b061dc1466735757f73ea8","ssdeep":"","tlshash":"d2b0121c8d5f5403488531d0a689491525fe9060046f0507850fec04c50e005073ced5","size":92,"data":"","first_seen":"2023-03-08T07:19:31Z","last_seen":"2026-04-02T02:14:14.999612Z","times_seen":170,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.bootcss.com/jquery_lazyload/1.9.3/jquery.lazyload.min.js","fqdn":"cdn.bootcss.com","domain":"bootcss.com","tld":"com"},"ip":{"addr":"134.122.175.2","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"89c45121934ed4664ff3ca811a008226","sha1":"848216f1d67cc7c6c6214db1a771f8c4653f06d6","sha256":"e576f12e82c468567e420386b68476ff7045815976395bc6baad1a822c7368a7","sha512":"61a33e6453c52798cf127e93c3163344cea18bdcf31eea042653903b4653b1e5408942d7b3e09b33ac73c667d1b0161d1438cbaee8d517518352c7c88a9bcc3c","ssdeep":"","tlshash":"1861768d7f527839f0567a9e831f3106663ed46f81814c54b0c9ece4ecec7951236d9a","size":3381,"data":"","first_seen":"2023-03-07T01:15:08Z","last_seen":"2026-04-03T22:38:50.041145Z","times_seen":4299,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"clipphot18pro1.shop/","fqdn":"clipphot18pro1.shop","domain":"clipphot18pro1.shop","tld":"shop"},"ip":{"addr":"104.21.33.47","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"10adcd3dbb5e476245dedc72a64df9a0","sha1":"010cae7c5b92d170664d4cf0f5c7cc193cdde832","sha256":"f3b2364a38cf3c8446f9ba431bcc69e58c81b4140652e64492a971f1bf32c39d","sha512":"5dfe120b0441cf02b5fafd1330808beea5a3eae4a2d76f6f5bfbcddda0f000e1c6a72f04aa2d162bafb31bf1b454c9c87c6ccf1a16bbaf48c2dd07a53cd0ec41","ssdeep":"","tlshash":"2ab0129115126f7abd740ae0c62fc681052bf8ae9d831442f05e06c350cf6ae3265e4f","size":114,"data":"","first_seen":"2023-03-07T12:24:02Z","last_seen":"2026-04-02T02:14:15.002202Z","times_seen":190,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"clipphot18pro1.shop/static/js/jquery.js","fqdn":"clipphot18pro1.shop","domain":"clipphot18pro1.shop","tld":"shop"},"ip":{"addr":"104.21.33.47","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"397754ba49e9e0cf4e7c190da78dda05","sha1":"ae49e56999d82802727455f0ba83b63acd90a22b","sha256":"c12f6098e641aaca96c60215800f18f5671039aecf812217fab3c0d152f6adb4","sha512":"8c64754f77507ab2c24a6fc818419b9dd3f0ceccc9065290e41afdbee0743f0da2cb13b2fbb00afa525c082f1e697cb3ffd76ef9b902cb81d7c41ca1c641dffb","ssdeep":"1536:dnu00HWWaRxkqJg09pYxoxDKMXJrg8hXXO4dK3kyfiLJBhdSZE+I+Qg7rbaN1RUx:ddkWgoBhcZRQgmW42qe","tlshash":"8c932bdd72d2b03257ab30bd106f540ff2361959280d8850f268d8f9bc79a49a277f6d","size":92629,"data":"","first_seen":"2023-03-07T01:02:08Z","last_seen":"2026-04-03T23:32:49.376784Z","times_seen":60504,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"clipphot18pro1.shop/static/js/home.js","fqdn":"clipphot18pro1.shop","domain":"clipphot18pro1.shop","tld":"shop"},"ip":{"addr":"104.21.33.47","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"97e311d35a4aa0ba09575a8dc989660b","sha1":"8166b5f8ba52aa57ab23321a8ddc8d0118f1e590","sha256":"1a52c16e5a7fc905630d52185ca457108cb0a65a4567cf6157709c1c5eceb311","sha512":"d3f4e4ef8af316fd4207a6db03e856917d5124263104ba9ebf0db1be151ce65172d26b6338d24553df9fe65b828e2a452a39bde7d1144a875c20bd5e28da9db8","ssdeep":"768:hR0cTTu8eMbZLbhpa6a/b7z9SsbhbeA5gr9GiSo5E7Iw4TQv5:hRZXde96oRiG5","tlshash":"ae03a45d7af3142050b3317a4fbf69082276815f190ddd88fe2d11a48fc4a4eba66bbd","size":38309,"data":"","first_seen":"2023-03-07T01:18:35Z","last_seen":"2026-04-03T20:49:57.965437Z","times_seen":5606,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null},"http":[{"url":{"schema":"https","addr":"clipphot18pro1.shop/static/js/jquery.js","fqdn":"clipphot18pro1.shop","domain":"clipphot18pro1.shop","tld":"shop"},"ip":{"addr":"104.21.33.47","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://clipphot18pro1.shop/","date":"2026-01-03T16:51:58.462Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"clipphot18pro1.shop","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 16 Nov 2025 12:41:58 GMT","end":"Sat, 14 Feb 2026 13:39:43 GMT"},"fingerprint":{"sha1":"C9:ED:7A:9E:72:54:44:58:C5:9F:11:71:02:2D:89:D1:F3:4E:A9:EC","sha256":"3E:52:90:0E:EE:05:7B:BF:92:3D:33:D9:C5:F1:54:34:2D:12:FB:DA:B1:1D:2C:63:E5:7F:DF:AC:A2:DF:56:4B"}}},"request":{"raw":"GET /static/js/jquery.js HTTP/1.1\r\nHost: clipphot18pro1.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://clipphot18pro1.shop/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 03 Jan 2026 16:51:59 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 19 Apr 2022 04:04:33 GMT\r\nvary: Accept-Encoding\r\netag: W/\"625e34d1-169d5\"\r\nexpires: Sun, 04 Jan 2026 04:51:58 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\npriority: u=2,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xMjkFaDS309tEfEJbVivvFRRezdFRbzz4qoZCSYS0KEVuF0bsPLFn1dl06corbAD4GVaKVcIeP3zVIwjRocnGj0mxgnn%2BseNs64mleph1nOk690%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b84010259165fac-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":92629,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (32089)","md5":"397754ba49e9e0cf4e7c190da78dda05","sha1":"ae49e56999d82802727455f0ba83b63acd90a22b","sha256":"c12f6098e641aaca96c60215800f18f5671039aecf812217fab3c0d152f6adb4","sha512":"8c64754f77507ab2c24a6fc818419b9dd3f0ceccc9065290e41afdbee0743f0da2cb13b2fbb00afa525c082f1e697cb3ffd76ef9b902cb81d7c41ca1c641dffb","ssdeep":"1536:dnu00HWWaRxkqJg09pYxoxDKMXJrg8hXXO4dK3kyfiLJBhdSZE+I+Qg7rbaN1RUx:ddkWgoBhcZRQgmW42qe","tlshash":"8c932bdd72d2b03257ab30bd106f540ff2361959280d8850f268d8f9bc79a49a277f6d","first_seen":"2023-03-07T01:02:08Z","last_seen":"2026-04-03T23:32:49.376784Z","times_seen":60504,"resource_available":true,"data":null}},"time_used":638,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":628,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"clipphot18pro1.shop/template/heisejianyue/img/icon_code.png","fqdn":"clipphot18pro1.shop","domain":"clipphot18pro1.shop","tld":"shop"},"ip":{"addr":"104.21.33.47","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://clipphot18pro1.shop/","date":"2026-01-03T16:51:58.467Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"clipphot18pro1.shop","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 16 Nov 2025 12:41:58 GMT","end":"Sat, 14 Feb 2026 13:39:43 GMT"},"fingerprint":{"sha1":"C9:ED:7A:9E:72:54:44:58:C5:9F:11:71:02:2D:89:D1:F3:4E:A9:EC","sha256":"3E:52:90:0E:EE:05:7B:BF:92:3D:33:D9:C5:F1:54:34:2D:12:FB:DA:B1:1D:2C:63:E5:7F:DF:AC:A2:DF:56:4B"}}},"request":{"raw":"GET /template/heisejianyue/img/icon_code.png HTTP/1.1\r\nHost: clipphot18pro1.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://clipphot18pro1.shop/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 03 Jan 2026 16:51:58 GMT\r\ncontent-type: image/png\r\nlast-modified: Sun, 08 May 2022 08:56:55 GMT\r\nvary: Accept-Encoding\r\netag: W/\"627785d7-544\"\r\nexpires: Mon, 02 Feb 2026 16:51:58 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bZj2icp1ss1mOAYpFXVHfF3vzmG5Bi0TcqFuLy%2FcB1ZfEdIPmdEuLIc1gDbXlco5T8hpfD2lGo8d9LhTebGPVu1XI2CGsYjYCqTU4g4X1Can%2F70%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b84010259195fac-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1348,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 28 x 28, 8-bit/color RGBA, non-interlaced","md5":"e521295a1b4876f22f210ba6d13d4979","sha1":"c465343fcc70b44475f5c052c7c651524f5abdec","sha256":"ef99ad00e9a64150af444154788c4a1fc82fc1a62f45d98cfc42b169b899d260","sha512":"888dc8965e2660f2571394fd35e2784cc8dfd49a8f334e2255934493f286284cea3f1d77fd5550a180bedd482e61868b67cc9fc66aace743f58b65bf501ee4bf","ssdeep":"","tlshash":"7e21cb85ba51780e91ccd9c214f7c672c1570c40dae0e93978dbcc014c153bb057d4db","first_seen":"2023-07-06T10:47:44Z","last_seen":"2026-04-02T02:14:14.96744Z","times_seen":94,"resource_available":false,"data":null}},"time_used":480,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":480,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"clipphot18pro1.shop/template/heisejianyue/img/qrcode.jpg","fqdn":"clipphot18pro1.shop","domain":"clipphot18pro1.shop","tld":"shop"},"ip":{"addr":"104.21.33.47","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://clipphot18pro1.shop/","date":"2026-01-03T16:51:59.403Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"clipphot18pro1.shop","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 16 Nov 2025 12:41:58 GMT","end":"Sat, 14 Feb 2026 13:39:43 GMT"},"fingerprint":{"sha1":"C9:ED:7A:9E:72:54:44:58:C5:9F:11:71:02:2D:89:D1:F3:4E:A9:EC","sha256":"3E:52:90:0E:EE:05:7B:BF:92:3D:33:D9:C5:F1:54:34:2D:12:FB:DA:B1:1D:2C:63:E5:7F:DF:AC:A2:DF:56:4B"}}},"request":{"raw":"GET /template/heisejianyue/img/qrcode.jpg HTTP/1.1\r\nHost: clipphot18pro1.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://clipphot18pro1.shop/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\nserver: cloudflare\r\ndate: Sat, 03 Jan 2026 16:51:59 GMT\r\ncontent-type: text/html\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rm6GaNSJ7JJh81P2LiSkdzeDwJC26bq4K9Te1vmmwST4VGml5cak6WYX1XQtMLE%2FaozETvJYACAkha4Vap6bfgWjVw5vZLL1nnAoYR%2B3o%2F5aTy8%3D\"}]}\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9b84010849935fac-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":146,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"8eec510e57f5f732fd2cce73df7b73ef","sha1":"3c0af39ecb3753c5fee3b53d063c7286019eac3b","sha256":"55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0","sha512":"73bbf698482132b5fd60a0b58926fddec9055f8095a53bc52714e211e9340c3419736ceafd6b279667810114d306bfccdcfcddf51c0b67fe9e3c73c54583e574","ssdeep":"","tlshash":"b7c02b2d35133c4cc563313423c37140c0d6833b687a41110400c00371cf2998ec3397","first_seen":"2023-03-07T12:05:15Z","last_seen":"2026-04-03T23:29:22.924629Z","times_seen":477204,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":3,"dns":0,"connect":0,"send":0,"wait":8,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"clipphot18pro1.shop/template/heisejianyue/img/load.gif","fqdn":"clipphot18pro1.shop","domain":"clipphot18pro1.shop","tld":"shop"},"ip":{"addr":"104.21.33.47","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://clipphot18pro1.shop/","date":"2026-01-03T16:51:59.424Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"clipphot18pro1.shop","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 16 Nov 2025 12:41:58 GMT","end":"Sat, 14 Feb 2026 13:39:43 GMT"},"fingerprint":{"sha1":"C9:ED:7A:9E:72:54:44:58:C5:9F:11:71:02:2D:89:D1:F3:4E:A9:EC","sha256":"3E:52:90:0E:EE:05:7B:BF:92:3D:33:D9:C5:F1:54:34:2D:12:FB:DA:B1:1D:2C:63:E5:7F:DF:AC:A2:DF:56:4B"}}},"request":{"raw":"GET /template/heisejianyue/img/load.gif HTTP/1.1\r\nHost: clipphot18pro1.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://clipphot18pro1.shop/template/heisejianyue/css/style.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 03 Jan 2026 16:52:00 GMT\r\ncontent-type: image/gif\r\nlast-modified: Sun, 08 May 2022 08:56:55 GMT\r\nvary: Accept-Encoding\r\netag: W/\"627785d7-4dae\"\r\nexpires: Mon, 02 Feb 2026 16:51:59 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sqCXZdUdb1js8qudf%2BR%2BzvwaIfWFEuT5a7aMTg0X%2BsAn%2B8sm2d%2BW2mmOh7k7MpaI7d%2BSdbxSVJl3cAtgOPVNu8wD4aUF95ocnuCDrFkvN6WAGbk%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b84010859975fac-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19886,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 220 x 325","md5":"0379874538dfe17b09dad7ff6b0a717d","sha1":"3137d7634093fa697b3b5314f1a5c21372227da5","sha256":"970162fed0084f6f43a67a7ebf545562ee53ea951ae65c6db956f4f289d59a29","sha512":"a78a76cb27be449a79ab4fad12bb6ea5eb0ed7e184e01e4825558c90f9de2181bebfe61d9a4bd6b2ee3b49a833e1bf008a22e1b449cd508262772c63c4a2d443","ssdeep":"384:O9kYu9zK3HNwC3yDtyUaCjlq0V/F0abndE9B6ZJycr7IKV:O9kYLtwMyDt3q0VCau90yK7IKV","tlshash":"1292c00900b87a886cf77405aedda4b4c92c1e84b5b1c5f52febb5274e102e3be251cd","first_seen":"2024-06-23T11:00:48Z","last_seen":"2026-04-02T02:14:14.940043Z","times_seen":131,"resource_available":false,"data":null}},"time_used":726,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":725,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"clipphot18pro1.shop/static/js/home.js","fqdn":"clipphot18pro1.shop","domain":"clipphot18pro1.shop","tld":"shop"},"ip":{"addr":"104.21.33.47","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://clipphot18pro1.shop/","date":"2026-01-03T16:51:58.463Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"clipphot18pro1.shop","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 16 Nov 2025 12:41:58 GMT","end":"Sat, 14 Feb 2026 13:39:43 GMT"},"fingerprint":{"sha1":"C9:ED:7A:9E:72:54:44:58:C5:9F:11:71:02:2D:89:D1:F3:4E:A9:EC","sha256":"3E:52:90:0E:EE:05:7B:BF:92:3D:33:D9:C5:F1:54:34:2D:12:FB:DA:B1:1D:2C:63:E5:7F:DF:AC:A2:DF:56:4B"}}},"request":{"raw":"GET /static/js/home.js HTTP/1.1\r\nHost: clipphot18pro1.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://clipphot18pro1.shop/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 03 Jan 2026 16:51:59 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 19 Apr 2022 04:04:33 GMT\r\nvary: Accept-Encoding\r\netag: W/\"625e34d1-95a5\"\r\nexpires: Sun, 04 Jan 2026 04:51:59 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\npriority: u=2,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zp32a5Jzlhl%2FHaIuuikKQj1PU0NCQKigyX2TXrpYw8w7I7Oirreaj6IjaYIdpx45TilU4%2F0yKjn3lTfFZi0fQbtBF4iwwW4wLI8BSBLOQHZhjEc%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b84010259175fac-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":38309,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (2677)","md5":"97e311d35a4aa0ba09575a8dc989660b","sha1":"8166b5f8ba52aa57ab23321a8ddc8d0118f1e590","sha256":"1a52c16e5a7fc905630d52185ca457108cb0a65a4567cf6157709c1c5eceb311","sha512":"d3f4e4ef8af316fd4207a6db03e856917d5124263104ba9ebf0db1be151ce65172d26b6338d24553df9fe65b828e2a452a39bde7d1144a875c20bd5e28da9db8","ssdeep":"768:hR0cTTu8eMbZLbhpa6a/b7z9SsbhbeA5gr9GiSo5E7Iw4TQv5:hRZXde96oRiG5","tlshash":"ae03a45d7af3142050b3317a4fbf69082276815f190ddd88fe2d11a48fc4a4eba66bbd","first_seen":"2023-03-07T01:18:35Z","last_seen":"2026-04-03T20:49:57.965437Z","times_seen":5606,"resource_available":true,"data":null}},"time_used":912,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":911,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"clipphot18pro1.shop/template/heisejianyue/img/qrcode.jpg","fqdn":"clipphot18pro1.shop","domain":"clipphot18pro1.shop","tld":"shop"},"ip":{"addr":"104.21.33.47","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://clipphot18pro1.shop/","date":"2026-01-03T16:51:58.469Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"clipphot18pro1.shop","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 16 Nov 2025 12:41:58 GMT","end":"Sat, 14 Feb 2026 13:39:43 GMT"},"fingerprint":{"sha1":"C9:ED:7A:9E:72:54:44:58:C5:9F:11:71:02:2D:89:D1:F3:4E:A9:EC","sha256":"3E:52:90:0E:EE:05:7B:BF:92:3D:33:D9:C5:F1:54:34:2D:12:FB:DA:B1:1D:2C:63:E5:7F:DF:AC:A2:DF:56:4B"}}},"request":{"raw":"GET /template/heisejianyue/img/qrcode.jpg HTTP/1.1\r\nHost: clipphot18pro1.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://clipphot18pro1.shop/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\nserver: cloudflare\r\ndate: Sat, 03 Jan 2026 16:51:58 GMT\r\ncontent-type: text/html\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JhnY7mE5hvGh%2FuJjsvq0LTG0gvKh7vlG9d%2BviyMslNMWETbotfJeZhoovQBZgDDILqE0ETomJcfyX9a3zrYV3H4SYoQ7jOufPkQoU%2FVNROZ1U98%3D\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9b840102591a5fac-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":146,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"8eec510e57f5f732fd2cce73df7b73ef","sha1":"3c0af39ecb3753c5fee3b53d063c7286019eac3b","sha256":"55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0","sha512":"73bbf698482132b5fd60a0b58926fddec9055f8095a53bc52714e211e9340c3419736ceafd6b279667810114d306bfccdcfcddf51c0b67fe9e3c73c54583e574","ssdeep":"","tlshash":"b7c02b2d35133c4cc563313423c37140c0d6833b687a41110400c00371cf2998ec3397","first_seen":"2023-03-07T12:05:15Z","last_seen":"2026-04-03T23:29:22.924629Z","times_seen":477204,"resource_available":true,"data":null}},"time_used":470,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":470,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"clipphot18pro1.shop/","fqdn":"clipphot18pro1.shop","domain":"clipphot18pro1.shop","tld":"shop"},"ip":{"addr":"104.21.33.47","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-01-03T16:51:52.229Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"clipphot18pro1.shop","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 16 Nov 2025 12:41:58 GMT","end":"Sat, 14 Feb 2026 13:39:43 GMT"},"fingerprint":{"sha1":"C9:ED:7A:9E:72:54:44:58:C5:9F:11:71:02:2D:89:D1:F3:4E:A9:EC","sha256":"3E:52:90:0E:EE:05:7B:BF:92:3D:33:D9:C5:F1:54:34:2D:12:FB:DA:B1:1D:2C:63:E5:7F:DF:AC:A2:DF:56:4B"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: clipphot18pro1.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 03 Jan 2026 16:51:58 GMT\r\ncontent-type: text/html; charset=utf-8\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=O7fohSnNhi4LD0z8NRpVy%2FRF7pRq6%2B%2BDYyK26gbPRGkWl%2BS4EPwgNL2kxOZX6G44lmVWDPjFYhcLj3Nsqb3ed8Zcyo5vpCtf%2Fin99SvWMNTw\"}]}\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9b8400dbbb8e5688-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"jQuery:1.9.3","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":30887,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (447)","md5":"b4a3ff70348f6bc8859bd1654d22c4de","sha1":"f1d2c986f5c76ec16de9134efecad217840e294d","sha256":"51d7ad389fb9d08715eba82e7d402f8aeea76024d210a86bb9821f382f47a6aa","sha512":"1f27527a6cb2bfb9166d19ff028619dd11b951008bc339322c1c58ccf09338a6fb19cc867de7fcc9ee161ff265e26f921b5c147866865c2d4f42ba7cfda7f11e","ssdeep":"768:CTpnNptPpCbNPxyya0TWdoc5Dlr0LJ2y768awpYjVZB7mu/9QMetU4Fjsbk32q5J:CTpnNjBYBTWdoc5Dlgcy75lYjDculYtx","tlshash":"0fd2761244d47f3b59bf09db8284175a7eeba6bbc6548d81b9fe952d6f80ca0303c60d","first_seen":"2026-01-03T16:52:19.68814Z","last_seen":"2026-01-03T16:52:19.68814Z","times_seen":1,"resource_available":false,"data":null}},"time_used":6071,"timings":{"blocked":45,"dns":10,"connect":5,"send":0,"wait":5980,"receive":0,"ssl":27},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.bootcss.com/jquery_lazyload/1.9.3/jquery.lazyload.min.js","fqdn":"cdn.bootcss.com","domain":"bootcss.com","tld":"com"},"ip":{"addr":"134.122.175.2","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://clipphot18pro1.shop/","date":"2026-01-03T16:51:58.470Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bootcss.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 22 Nov 2025 21:15:09 GMT","end":"Fri, 20 Feb 2026 21:15:08 GMT"},"fingerprint":{"sha1":"35:41:C2:28:D1:53:68:77:66:6D:AD:45:61:7F:3B:C0:76:A5:51:D1","sha256":"5A:F9:BC:A9:5D:A7:59:42:BE:77:22:B3:08:A5:D5:19:EB:0F:3F:8D:42:CE:D1:68:B1:EC:CE:D1:C6:8E:AD:4E"}}},"request":{"raw":"GET /jquery_lazyload/1.9.3/jquery.lazyload.min.js HTTP/1.1\r\nHost: cdn.bootcss.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://clipphot18pro1.shop/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Authorization, Content-Type, If-Match, If-Modified-Since, If-None-Match, If-Unmodifed-Since, X-CSRF-TOKEN, X-Requested-With,token\r\naccess-control-allow-methods: GET, POST, PATCH, PUT, DELETE, OPTIONS\r\naccess-control-allow-origin: *\r\ncache-control: no-cache, no-store, must-revalidate\r\ncontent-encoding: gzip\r\ncontent-type: text/javascript; charset=utf-8\r\ndate: Sat, 03 Jan 2026 16:51:59 GMT\r\nexpires: 0\r\npragma: no-cache\r\nserver: nginx\r\nvary: Accept-Encoding\r\nx-cache: BYPASS, Cache-Control: no-cache, no-store, must-revalidate\r\ncontent-length: 1342\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3381,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (3309)","md5":"89c45121934ed4664ff3ca811a008226","sha1":"848216f1d67cc7c6c6214db1a771f8c4653f06d6","sha256":"e576f12e82c468567e420386b68476ff7045815976395bc6baad1a822c7368a7","sha512":"61a33e6453c52798cf127e93c3163344cea18bdcf31eea042653903b4653b1e5408942d7b3e09b33ac73c667d1b0161d1438cbaee8d517518352c7c88a9bcc3c","ssdeep":"","tlshash":"1861768d7f527839f0567a9e831f3106663ed46f81814c54b0c9ece4ecec7951236d9a","first_seen":"2023-03-07T01:15:08Z","last_seen":"2026-04-03T22:38:50.041145Z","times_seen":4299,"resource_available":true,"data":null}},"time_used":2238,"timings":{"blocked":945,"dns":277,"connect":330,"send":0,"wait":337,"receive":0,"ssl":346},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"cdn.bootcss.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"cdn.bootcss.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"cdn.bootcss.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"clipphot18pro1.shop/template/heisejianyue/img/logo_1.png","fqdn":"clipphot18pro1.shop","domain":"clipphot18pro1.shop","tld":"shop"},"ip":{"addr":"104.21.33.47","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://clipphot18pro1.shop/","date":"2026-01-03T16:51:59.416Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"clipphot18pro1.shop","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 16 Nov 2025 12:41:58 GMT","end":"Sat, 14 Feb 2026 13:39:43 GMT"},"fingerprint":{"sha1":"C9:ED:7A:9E:72:54:44:58:C5:9F:11:71:02:2D:89:D1:F3:4E:A9:EC","sha256":"3E:52:90:0E:EE:05:7B:BF:92:3D:33:D9:C5:F1:54:34:2D:12:FB:DA:B1:1D:2C:63:E5:7F:DF:AC:A2:DF:56:4B"}}},"request":{"raw":"GET /template/heisejianyue/img/logo_1.png HTTP/1.1\r\nHost: clipphot18pro1.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://clipphot18pro1.shop/template/heisejianyue/css/style.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 03 Jan 2026 16:52:00 GMT\r\ncontent-type: image/png\r\nlast-modified: Sun, 08 May 2022 08:56:56 GMT\r\nvary: Accept-Encoding\r\netag: W/\"627785d8-6831\"\r\nexpires: Mon, 02 Feb 2026 16:51:59 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xVnzNnxEw8hfWcv0Gxo67wglCXug3HGufXYtVqCgqxqW6GLV%2Fekn7PWQInYH56B%2B3%2BrNamQY5lQ8iUXcWGPmk8UZcOSfOk7EzwWN4K%2BhlS%2BD4rQ%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b84010859945fac-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":26673,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 500 x 500, 8-bit/color RGBA, non-interlaced","md5":"a052f5ffc7fda282dbc3908e45e708ad","sha1":"2d5ebb7bc273ca7307ae419894b4a6db9fd21ce2","sha256":"3a0099e3a51ff90601c4426f9f4fbd5c84e4ffa10be39f511d2a81de351757f7","sha512":"755223fc832141601d676b56137e21ae7b59a3e6abe5b4c673d133952f66c38eed12c29d1b0db482ad6aed149aa0d164cd5b3b4e7f6e590e966b50be5a1c42a6","ssdeep":"384:bcwHwxHCNSoy0XckYIjZf/FJtkhZHVKYXhN7gWKgVVV9:bTHw6tcEdDkhZHI6N7DVVJ","tlshash":"1ac2be47ed64b86f501167819bab72e8ccb93a4338a11f5f9f4a14320c87adef832c54","first_seen":"2024-10-04T11:13:33.491613Z","last_seen":"2026-04-02T02:14:14.963576Z","times_seen":46,"resource_available":false,"data":null}},"time_used":608,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":606,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"clipphot18pro1.shop/template/heisejianyue/img/icon_gbook.png","fqdn":"clipphot18pro1.shop","domain":"clipphot18pro1.shop","tld":"shop"},"ip":{"addr":"104.21.33.47","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://clipphot18pro1.shop/","date":"2026-01-03T16:51:58.465Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"clipphot18pro1.shop","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 16 Nov 2025 12:41:58 GMT","end":"Sat, 14 Feb 2026 13:39:43 GMT"},"fingerprint":{"sha1":"C9:ED:7A:9E:72:54:44:58:C5:9F:11:71:02:2D:89:D1:F3:4E:A9:EC","sha256":"3E:52:90:0E:EE:05:7B:BF:92:3D:33:D9:C5:F1:54:34:2D:12:FB:DA:B1:1D:2C:63:E5:7F:DF:AC:A2:DF:56:4B"}}},"request":{"raw":"GET /template/heisejianyue/img/icon_gbook.png HTTP/1.1\r\nHost: clipphot18pro1.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://clipphot18pro1.shop/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 03 Jan 2026 16:51:58 GMT\r\ncontent-type: image/png\r\ncontent-length: 545\r\nlast-modified: Sun, 08 May 2022 08:56:55 GMT\r\netag: \"627785d7-221\"\r\nexpires: Mon, 02 Feb 2026 16:51:58 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IVDRJcLr272rc6Hd9YDgp6Lv6Sp5NdO2Ecv8OgQkvn7Yno6AbS5OFcFeTQWsRxQkv9FL6DM82bBngtPLDf3Jm7ExVKKDmf%2BPHbRMVgUVlS%2BbUVI%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9b84010259185fac-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":545,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 28 x 28, 8-bit/color RGBA, non-interlaced","md5":"c63735e90396afed5ff49f4ab97b90d3","sha1":"96d7a955906d4774df13cec072c889c9d7007921","sha256":"00129bdad52af0196a87897434db7993c687af14f16ab05f1206e4f2922aecf5","sha512":"b8737712f63b21e3d660cfcea7fb7a27ffca45d392b837d89707bb34a6e8a526758d0323ff3b6809f3aadf75d807c75ce08200b0fe1374ca3c4d29f8bf493df7","ssdeep":"","tlshash":"a2f026cb45d2887de545486e153785f6d83777f41065253cc287141adc2310fc2d46b1","first_seen":"2023-11-28T11:15:48Z","last_seen":"2026-04-02T02:14:14.991578Z","times_seen":91,"resource_available":false,"data":null}},"time_used":473,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":473,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"clipphot18pro1.shop/template/heisejianyue/img/bg_icon.jpg","fqdn":"clipphot18pro1.shop","domain":"clipphot18pro1.shop","tld":"shop"},"ip":{"addr":"104.21.33.47","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://clipphot18pro1.shop/","date":"2026-01-03T16:51:59.389Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"clipphot18pro1.shop","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 16 Nov 2025 12:41:58 GMT","end":"Sat, 14 Feb 2026 13:39:43 GMT"},"fingerprint":{"sha1":"C9:ED:7A:9E:72:54:44:58:C5:9F:11:71:02:2D:89:D1:F3:4E:A9:EC","sha256":"3E:52:90:0E:EE:05:7B:BF:92:3D:33:D9:C5:F1:54:34:2D:12:FB:DA:B1:1D:2C:63:E5:7F:DF:AC:A2:DF:56:4B"}}},"request":{"raw":"GET /template/heisejianyue/img/bg_icon.jpg HTTP/1.1\r\nHost: clipphot18pro1.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://clipphot18pro1.shop/template/heisejianyue/css/style.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 03 Jan 2026 16:51:59 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Sun, 08 May 2022 08:56:55 GMT\r\nvary: Accept-Encoding\r\netag: W/\"627785d7-f1b\"\r\nexpires: Mon, 02 Feb 2026 16:51:59 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pJZnLC0tlCf3TidYantrZQpSF%2F6HF5b6Pd%2BBOslU2QMXCcE6LdrBCBhEUQgU69rlFusTEXSUfZEIBPPkGdCD0TV2qs6hTuQwzxIWg5LfJqM0adM%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b84010829915fac-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3867,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 100x99, components 3","md5":"5d1906cd4299f3c5d4e53df5fefd231b","sha1":"26dd90175760d7049289eabd3914e580335197b6","sha256":"f654cc9daac86f2e7a514d9e3c28710cc58060cf43f37529c243b38cb9951adb","sha512":"aa5121624d23b0b93a306a94488565d6ba1ff1916db54b2f3fe72958972f54f7367599a62cb80eee84efd37ac5aa53cf20fe954583aa47da90e8269772dddf91","ssdeep":"","tlshash":"5f811a5df98a2da0d4d7d1b121f3e152df860488fae3ec226098cc77f5e81a19922dc5","first_seen":"2023-05-12T08:10:23Z","last_seen":"2026-04-02T02:14:14.97193Z","times_seen":266,"resource_available":false,"data":null}},"time_used":465,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":465,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"clipphot18pro1.shop/template/heisejianyue/img/icon_seacrh.png","fqdn":"clipphot18pro1.shop","domain":"clipphot18pro1.shop","tld":"shop"},"ip":{"addr":"104.21.33.47","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://clipphot18pro1.shop/","date":"2026-01-03T16:51:59.419Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"clipphot18pro1.shop","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 16 Nov 2025 12:41:58 GMT","end":"Sat, 14 Feb 2026 13:39:43 GMT"},"fingerprint":{"sha1":"C9:ED:7A:9E:72:54:44:58:C5:9F:11:71:02:2D:89:D1:F3:4E:A9:EC","sha256":"3E:52:90:0E:EE:05:7B:BF:92:3D:33:D9:C5:F1:54:34:2D:12:FB:DA:B1:1D:2C:63:E5:7F:DF:AC:A2:DF:56:4B"}}},"request":{"raw":"GET /template/heisejianyue/img/icon_seacrh.png HTTP/1.1\r\nHost: clipphot18pro1.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://clipphot18pro1.shop/template/heisejianyue/css/style.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 03 Jan 2026 16:51:59 GMT\r\ncontent-type: image/png\r\ncontent-length: 348\r\nlast-modified: Sun, 08 May 2022 08:56:55 GMT\r\netag: \"627785d7-15c\"\r\nexpires: Mon, 02 Feb 2026 16:51:59 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PXhTCGzdkhAErD%2Bx3I75Kyg2xPqtcia%2F1%2Fukw676tMTerObuoh77QJNTvZqefLz8rYCSjrVRFsykOpU0culT4j6EvI%2FaAAE%2Fj6W%2BqMv4JRjo%2B30%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9b84010859965fac-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":348,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced","md5":"f77344071bd77c499961fe76810f9270","sha1":"90ee6dc9968c857f546c60943c68dbc1dba1b8cc","sha256":"c35811436039fbd6efc50c0bb111831d8bf6d9afbe92a46a038cd9efb34738af","sha512":"419706e2817c1d4357cd9cb27cce9d5fd01da92743f0837114c2c5cfdb45ab9e54dd3a9e14196800c678d7c09125ba31b8bc9c3ea2920e3a0e9af2b2acc5accc","ssdeep":"","tlshash":"26e0c0dfe781f63d8aea7921c74c08048c3b194e1b705d9c0d1e41b42e31519c9d6642","first_seen":"2023-05-12T08:10:23Z","last_seen":"2026-04-03T14:56:32.409687Z","times_seen":915,"resource_available":false,"data":null}},"time_used":450,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":450,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"clipphot18pro1.shop/template/heisejianyue/img/favicon.ico","fqdn":"clipphot18pro1.shop","domain":"clipphot18pro1.shop","tld":"shop"},"ip":{"addr":"104.21.33.47","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://clipphot18pro1.shop/","date":"2026-01-03T16:52:02.546Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"clipphot18pro1.shop","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 16 Nov 2025 12:41:58 GMT","end":"Sat, 14 Feb 2026 13:39:43 GMT"},"fingerprint":{"sha1":"C9:ED:7A:9E:72:54:44:58:C5:9F:11:71:02:2D:89:D1:F3:4E:A9:EC","sha256":"3E:52:90:0E:EE:05:7B:BF:92:3D:33:D9:C5:F1:54:34:2D:12:FB:DA:B1:1D:2C:63:E5:7F:DF:AC:A2:DF:56:4B"}}},"request":{"raw":"GET /template/heisejianyue/img/favicon.ico HTTP/1.1\r\nHost: clipphot18pro1.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://clipphot18pro1.shop/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 03 Jan 2026 16:52:02 GMT\r\ncontent-type: image/x-icon\r\nvary: accept-encoding\r\nlast-modified: Sun, 08 May 2022 08:56:55 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"627785d7-10be\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Tkb1bSPV%2FPdnLtm%2BsinVE1NPCS8NXJfYphQCddMTrJbNMkvWzf6Ly8nhV8jd4%2FYwyYAXdqkMzFBTUjkCb6HMTyLw1YVs26gjOP3MSlIaUbGRzgE%3D\"}]}\r\npriority: u=6,i=?0\r\ncf-ray: 9b84011bee495fac-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4286,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 32x32, 32 bits/pixel","md5":"81761b6555e37fe7016abc7989ac39de","sha1":"83639d8d3704d400aa7b725a115e427ceed118cb","sha256":"f21db1e0ca2099bcde9ba12e24d6d0e0dea7f73a8e9c612fccab8074c0ca950c","sha512":"919f77b41737340796ba4a9e896e3e9e5ea248bb30226ab26b7998498cd14ad2e7b3172224acaacb3f8c02ddfb44375ed29826c2aaa179419eb0d41a5d0a2c66","ssdeep":"24:suZE33eULmjviKUtg7uIFUjLj5K+3UfasEkjUVTyD4OfIwH9YLYUPJry3WK+bBlh:HE3ejIgq1j/5dfkQ0kC9QJ+F+SG","tlshash":"b991ceebd083ef87e3a02f7d7c1ae464181a18e08445df2855a79d4fb1e6d906e12db3","first_seen":"2023-05-14T10:54:36Z","last_seen":"2026-04-02T02:14:14.975192Z","times_seen":249,"resource_available":false,"data":null}},"time_used":450,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":450,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"clipphot18pro1.shop/template/heisejianyue/css/style.css","fqdn":"clipphot18pro1.shop","domain":"clipphot18pro1.shop","tld":"shop"},"ip":{"addr":"104.21.33.47","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://clipphot18pro1.shop/","date":"2026-01-03T16:51:58.460Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"clipphot18pro1.shop","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 16 Nov 2025 12:41:58 GMT","end":"Sat, 14 Feb 2026 13:39:43 GMT"},"fingerprint":{"sha1":"C9:ED:7A:9E:72:54:44:58:C5:9F:11:71:02:2D:89:D1:F3:4E:A9:EC","sha256":"3E:52:90:0E:EE:05:7B:BF:92:3D:33:D9:C5:F1:54:34:2D:12:FB:DA:B1:1D:2C:63:E5:7F:DF:AC:A2:DF:56:4B"}}},"request":{"raw":"GET /template/heisejianyue/css/style.css HTTP/1.1\r\nHost: clipphot18pro1.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://clipphot18pro1.shop/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 03 Jan 2026 16:51:58 GMT\r\ncontent-type: text/css\r\nlast-modified: Sun, 08 May 2022 08:56:55 GMT\r\nvary: Accept-Encoding\r\netag: W/\"627785d7-3b2c\"\r\nexpires: Sun, 04 Jan 2026 04:51:58 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\npriority: u=2,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HHlH9LLM0HAjrgi3GVPO8XJ5wWD0BFAHqaaHf%2FsFGCUOG%2BR4e3zetEJrGMTV6gKx4tLI%2F8NACU89L6uC%2FuOtjl43I7tCbRSZj%2FdFm3UscZ5y6tA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b84010259155fac-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15148,"size_decoded":0,"mime_type":"text/css","magic":"assembler source, Unicode text, UTF-8 text","md5":"4006204cf8c37690303ab76d54de40d4","sha1":"05eb9d9c52dbbc1207ab55e7a62a296eec55d8da","sha256":"56e5061db57f8db7da0d79874e593ea4511048dc4a70ff6031c001c968e7ef6c","sha512":"63be17ed0d2d88059d57507761604b4ec4952a2453826d653da1aebcdff2879cd524ada587603ee2f831dc265022088ccfcd87a1494d8ac27ee1fa7eec1208c1","ssdeep":"384:JcEipe52axeOm4CbEVsWxRApd0jWhaSBnPYr2Ak/YNuLIyfUjp7e:e852geOm4CbEVD4RBnPYr2Ak/YNuLIBy","tlshash":"f26202229b011c48f11eefddaea5ab96471e5076af0e4efbf450682ca3c95c414f394e","first_seen":"2025-10-10T03:54:12.995083Z","last_seen":"2026-04-02T02:14:14.945785Z","times_seen":54,"resource_available":false,"data":null}},"time_used":548,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":547,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}