{"report_id":"e841fc8f-63d6-410f-a840-ee1d30b2b25c","version":6,"status":"done","tags":[],"date":"2025-12-25T19:34:04Z","url":{"schema":"http","addr":"clipphotorgz.shop/","fqdn":"clipphotorgz.shop","domain":"clipphotorgz.shop","tld":"shop"},"ip":{"addr":"172.67.147.140","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"clipphotorgz.shop/","fqdn":"clipphotorgz.shop","domain":"clipphotorgz.shop","tld":"shop"},"title":"Phim sex - sexnguon","dom":{"size":176261,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (33840)","md5":"032b7ef086336d8a418bbeaef7d3421f","sha1":"019fcc9670a0b243258b63aae67f74e36c25c7e3","sha256":"602317a916e14a2df94d801037ae0002ce8a69fac21c4fd0e5ce8e6281c4bb46","sha512":"41e9a214c75e38d53f8fb8f798a67e94c19b8f7dd50b1724f7934962ecccdcd6e1151b9a51cb0b1b0cafc682169e79be5a86246c80e87d3abdbd7b7c3116d3ae","ssdeep":"3072:xNjRgDkEpsII6+aqeqqVjSjGVAV/+CBgQ0AzH/XoxUqNwN8/GAR5beH9nuP9axBA:SQEpsZ6+aqeqqVjSjGVAV/+CBgQ0AzHM","tlshash":"71048fb347c4576abb47e7d14219b52ec09b75f9ec426a4fe4a72985e80c3fe400228f","dom_hash":"domhash75e1680f94b206212474581ac53e7802","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"clipphotorgz.shop/","fqdn":"clipphotorgz.shop","domain":"clipphotorgz.shop","tld":"shop"},"ip":{"addr":"172.67.147.140","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-01-29T19:34:04Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":4}},"detection":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-25","alert":"Sinkholed","trigger":"cdn.bootcss.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-25","alert":"Sinkholed","trigger":"cdn.bootcss.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-25","alert":"Sinkholed","trigger":"cdn.bootcss.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-25","alert":"Sinkholed","trigger":"cdn.bootcss.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null},"summary":[{"fqdn":"clipphotorgz.shop","ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2025-12-25T19:34:05.133707Z","last_seen":"2025-12-25T19:34:05.133707Z","alert_count":0,"request_count":13,"received_data":389310,"sent_data":6816,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"jQuery:1.9.3","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}]},{"fqdn":"pic.sexnguon.com","ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2022-02-25","domain_rank":0,"first_seen":"2023-03-29T17:23:28Z","last_seen":"2025-12-20T02:14:32.197736Z","alert_count":0,"request_count":6,"received_data":0,"sent_data":2754,"comment":"","tags":null,"fingerprints":null},{"fqdn":"cdn.bootcss.com","ip":{"addr":"134.122.175.2","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"domain_registered":"2012-11-12","domain_rank":647519,"first_seen":"2013-11-06T09:25:21Z","last_seen":"2025-12-19T12:44:31.24799Z","alert_count":4,"request_count":1,"received_data":4039,"sent_data":450,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"cdn.bootcss.com/jquery_lazyload/1.9.3/jquery.lazyload.min.js","fqdn":"cdn.bootcss.com","domain":"bootcss.com","tld":"com"},"ip":{"addr":"134.122.175.2","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"89c45121934ed4664ff3ca811a008226","sha1":"848216f1d67cc7c6c6214db1a771f8c4653f06d6","sha256":"e576f12e82c468567e420386b68476ff7045815976395bc6baad1a822c7368a7","sha512":"61a33e6453c52798cf127e93c3163344cea18bdcf31eea042653903b4653b1e5408942d7b3e09b33ac73c667d1b0161d1438cbaee8d517518352c7c88a9bcc3c","ssdeep":"","tlshash":"1861768d7f527839f0567a9e831f3106663ed46f81814c54b0c9ece4ecec7951236d9a","size":3381,"data":"","first_seen":"2023-03-07T01:15:08Z","last_seen":"2026-04-03T22:38:50.041145Z","times_seen":4299,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"clipphotorgz.shop/","fqdn":"clipphotorgz.shop","domain":"clipphotorgz.shop","tld":"shop"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"4618ff903b8925e9ead2e2d23c90dd00","sha1":"6fc491f7fb50e01f477fbd6a6fb56fa80a587d61","sha256":"ce56bbf12410269ada2357bc1754dd10f691540c27b298724d6245031c2b07d6","sha512":"2b01ee21e87201c02a3e39af0ceb87c7676883f4d66490e62e7665118910b8122abccb9d49cc88d9f51220c5ccd75108a4312564f5b061dc1466735757f73ea8","ssdeep":"","tlshash":"d2b0121c8d5f5403488531d0a689491525fe9060046f0507850fec04c50e005073ced5","size":92,"data":"","first_seen":"2023-03-08T07:19:31Z","last_seen":"2026-04-02T02:14:14.999612Z","times_seen":170,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"clipphotorgz.shop/static/js/jquery.js","fqdn":"clipphotorgz.shop","domain":"clipphotorgz.shop","tld":"shop"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"397754ba49e9e0cf4e7c190da78dda05","sha1":"ae49e56999d82802727455f0ba83b63acd90a22b","sha256":"c12f6098e641aaca96c60215800f18f5671039aecf812217fab3c0d152f6adb4","sha512":"8c64754f77507ab2c24a6fc818419b9dd3f0ceccc9065290e41afdbee0743f0da2cb13b2fbb00afa525c082f1e697cb3ffd76ef9b902cb81d7c41ca1c641dffb","ssdeep":"1536:dnu00HWWaRxkqJg09pYxoxDKMXJrg8hXXO4dK3kyfiLJBhdSZE+I+Qg7rbaN1RUx:ddkWgoBhcZRQgmW42qe","tlshash":"8c932bdd72d2b03257ab30bd106f540ff2361959280d8850f268d8f9bc79a49a277f6d","size":92629,"data":"","first_seen":"2023-03-07T01:02:08Z","last_seen":"2026-04-03T23:32:49.376784Z","times_seen":60504,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"clipphotorgz.shop/static/js/home.js","fqdn":"clipphotorgz.shop","domain":"clipphotorgz.shop","tld":"shop"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"97e311d35a4aa0ba09575a8dc989660b","sha1":"8166b5f8ba52aa57ab23321a8ddc8d0118f1e590","sha256":"1a52c16e5a7fc905630d52185ca457108cb0a65a4567cf6157709c1c5eceb311","sha512":"d3f4e4ef8af316fd4207a6db03e856917d5124263104ba9ebf0db1be151ce65172d26b6338d24553df9fe65b828e2a452a39bde7d1144a875c20bd5e28da9db8","ssdeep":"768:hR0cTTu8eMbZLbhpa6a/b7z9SsbhbeA5gr9GiSo5E7Iw4TQv5:hRZXde96oRiG5","tlshash":"ae03a45d7af3142050b3317a4fbf69082276815f190ddd88fe2d11a48fc4a4eba66bbd","size":38309,"data":"","first_seen":"2023-03-07T01:18:35Z","last_seen":"2026-04-03T23:25:56.127969Z","times_seen":5607,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"clipphotorgz.shop/","fqdn":"clipphotorgz.shop","domain":"clipphotorgz.shop","tld":"shop"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"10adcd3dbb5e476245dedc72a64df9a0","sha1":"010cae7c5b92d170664d4cf0f5c7cc193cdde832","sha256":"f3b2364a38cf3c8446f9ba431bcc69e58c81b4140652e64492a971f1bf32c39d","sha512":"5dfe120b0441cf02b5fafd1330808beea5a3eae4a2d76f6f5bfbcddda0f000e1c6a72f04aa2d162bafb31bf1b454c9c87c6ccf1a16bbaf48c2dd07a53cd0ec41","ssdeep":"","tlshash":"2ab0129115126f7abd740ae0c62fc681052bf8ae9d831442f05e06c350cf6ae3265e4f","size":114,"data":"","first_seen":"2023-03-07T12:24:02Z","last_seen":"2026-04-02T02:14:15.002202Z","times_seen":190,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null},"http":[{"url":{"schema":"https","addr":"clipphotorgz.shop/template/heisejianyue/img/favicon.ico","fqdn":"clipphotorgz.shop","domain":"clipphotorgz.shop","tld":"shop"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://clipphotorgz.shop/","date":"2025-12-25T19:33:48.281Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"clipphotorgz.shop","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 17 Nov 2025 12:38:08 GMT","end":"Sun, 15 Feb 2026 13:36:44 GMT"},"fingerprint":{"sha1":"B4:B7:70:48:1E:AA:79:DE:31:08:E8:B4:C8:AC:59:AC:2F:8F:7A:7E","sha256":"D0:F1:35:A2:92:72:85:67:60:B5:8F:58:DB:B6:FD:38:D5:7E:AA:14:F2:E9:75:A8:C6:89:25:D2:A5:66:1E:5A"}}},"request":{"raw":"GET /template/heisejianyue/img/favicon.ico HTTP/1.1\r\nHost: clipphotorgz.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://clipphotorgz.shop/\r\nCookie: SITE_TOTAL_ID=52b84089924d12592d80b73c5698619c\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 25 Dec 2025 19:33:48 GMT\r\ncontent-type: image/x-icon\r\nserver: cloudflare\r\nlast-modified: Sun, 08 May 2022 08:56:55 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\npriority: u=6,i=?0\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Z1oJKQX93wK2N9HrAu2wUG8%2F%2BFLzivtiU7NbMWid66K3%2FsUt5gSUooRbTQCwU5YkmYYyzSc0tgjLXJz9ggdyfYCgNEdwph3EuvM0g0lJVw%3D%3D\"}]}\r\netag: W/\"627785d7-10be\"\r\ncontent-encoding: br\r\ncf-ray: 9b3ac5b0ccf3712b-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4286,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 32x32, 32 bits/pixel","md5":"81761b6555e37fe7016abc7989ac39de","sha1":"83639d8d3704d400aa7b725a115e427ceed118cb","sha256":"f21db1e0ca2099bcde9ba12e24d6d0e0dea7f73a8e9c612fccab8074c0ca950c","sha512":"919f77b41737340796ba4a9e896e3e9e5ea248bb30226ab26b7998498cd14ad2e7b3172224acaacb3f8c02ddfb44375ed29826c2aaa179419eb0d41a5d0a2c66","ssdeep":"24:suZE33eULmjviKUtg7uIFUjLj5K+3UfasEkjUVTyD4OfIwH9YLYUPJry3WK+bBlh:HE3ejIgq1j/5dfkQ0kC9QJ+F+SG","tlshash":"b991ceebd083ef87e3a02f7d7c1ae464181a18e08445df2855a79d4fb1e6d906e12db3","first_seen":"2023-05-14T10:54:36Z","last_seen":"2026-04-02T02:14:14.975192Z","times_seen":249,"resource_available":false,"data":null}},"time_used":631,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":631,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"clipphotorgz.shop/template/heisejianyue/img/qrcode.jpg","fqdn":"clipphotorgz.shop","domain":"clipphotorgz.shop","tld":"shop"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://clipphotorgz.shop/","date":"2025-12-25T19:33:44.141Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"clipphotorgz.shop","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 17 Nov 2025 12:38:08 GMT","end":"Sun, 15 Feb 2026 13:36:44 GMT"},"fingerprint":{"sha1":"B4:B7:70:48:1E:AA:79:DE:31:08:E8:B4:C8:AC:59:AC:2F:8F:7A:7E","sha256":"D0:F1:35:A2:92:72:85:67:60:B5:8F:58:DB:B6:FD:38:D5:7E:AA:14:F2:E9:75:A8:C6:89:25:D2:A5:66:1E:5A"}}},"request":{"raw":"GET /template/heisejianyue/img/qrcode.jpg HTTP/1.1\r\nHost: clipphotorgz.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://clipphotorgz.shop/\r\nCookie: SITE_TOTAL_ID=52b84089924d12592d80b73c5698619c\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\ndate: Thu, 25 Dec 2025 19:33:44 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=A46T3bCVQu64tgTywlq9e%2FztRE6LDVcjWRSN857gdCLjVXYWuFoN98tzDCNY3JruOiqxL5fu3sS2ITwR9O5la00Ih9KVN7fYwrrj6McKsg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9b3ac596cce1712b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":146,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"8eec510e57f5f732fd2cce73df7b73ef","sha1":"3c0af39ecb3753c5fee3b53d063c7286019eac3b","sha256":"55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0","sha512":"73bbf698482132b5fd60a0b58926fddec9055f8095a53bc52714e211e9340c3419736ceafd6b279667810114d306bfccdcfcddf51c0b67fe9e3c73c54583e574","ssdeep":"","tlshash":"b7c02b2d35133c4cc563313423c37140c0d6833b687a41110400c00371cf2998ec3397","first_seen":"2023-03-07T12:05:15Z","last_seen":"2026-04-03T23:29:22.924629Z","times_seen":477204,"resource_available":true,"data":null}},"time_used":555,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":555,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pic.sexnguon.com/images/2022/02/26/heyzo9275.jpg","fqdn":"pic.sexnguon.com","domain":"sexnguon.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://clipphotorgz.shop/","date":"2025-12-25T19:33:45.829Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /images/2022/02/26/heyzo9275.jpg HTTP/1.1\r\nHost: pic.sexnguon.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://clipphotorgz.shop/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-03T23:31:02.874036Z","times_seen":13307549,"resource_available":true,"data":null}},"time_used":6980,"timings":{"blocked":6979,"dns":1,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"clipphotorgz.shop/template/heisejianyue/img/load.gif","fqdn":"clipphotorgz.shop","domain":"clipphotorgz.shop","tld":"shop"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://clipphotorgz.shop/","date":"2025-12-25T19:33:45.058Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"clipphotorgz.shop","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 17 Nov 2025 12:38:08 GMT","end":"Sun, 15 Feb 2026 13:36:44 GMT"},"fingerprint":{"sha1":"B4:B7:70:48:1E:AA:79:DE:31:08:E8:B4:C8:AC:59:AC:2F:8F:7A:7E","sha256":"D0:F1:35:A2:92:72:85:67:60:B5:8F:58:DB:B6:FD:38:D5:7E:AA:14:F2:E9:75:A8:C6:89:25:D2:A5:66:1E:5A"}}},"request":{"raw":"GET /template/heisejianyue/img/load.gif HTTP/1.1\r\nHost: clipphotorgz.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://clipphotorgz.shop/template/heisejianyue/css/style.css\r\nCookie: SITE_TOTAL_ID=52b84089924d12592d80b73c5698619c\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 25 Dec 2025 19:33:45 GMT\r\ncontent-type: image/gif\r\nserver: cloudflare\r\nlast-modified: Sun, 08 May 2022 08:56:55 GMT\r\nvary: Accept-Encoding\r\netag: W/\"627785d7-4dae\"\r\nexpires: Sat, 24 Jan 2026 19:33:45 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oZgkUEPZeXxGK2usxF80ULXHG4AGItS7SNPaj2YZQ2xEmBDRX7p6An3qOdg8KjULxvi6PmheKo%2FfttX802qacYe8QxB%2FHl7w63OjBxksdQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b3ac59ca9e0712b-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":19886,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 220 x 325","md5":"0379874538dfe17b09dad7ff6b0a717d","sha1":"3137d7634093fa697b3b5314f1a5c21372227da5","sha256":"970162fed0084f6f43a67a7ebf545562ee53ea951ae65c6db956f4f289d59a29","sha512":"a78a76cb27be449a79ab4fad12bb6ea5eb0ed7e184e01e4825558c90f9de2181bebfe61d9a4bd6b2ee3b49a833e1bf008a22e1b449cd508262772c63c4a2d443","ssdeep":"384:O9kYu9zK3HNwC3yDtyUaCjlq0V/F0abndE9B6ZJycr7IKV:O9kYLtwMyDt3q0VCau90yK7IKV","tlshash":"1292c00900b87a886cf77405aedda4b4c92c1e84b5b1c5f52febb5274e102e3be251cd","first_seen":"2024-06-23T11:00:48Z","last_seen":"2026-04-02T02:14:14.940043Z","times_seen":131,"resource_available":false,"data":null}},"time_used":801,"timings":{"blocked":2,"dns":0,"connect":0,"send":0,"wait":798,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pic.sexnguon.com/images/2022/02/26/heyzo9276.jpg","fqdn":"pic.sexnguon.com","domain":"sexnguon.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://clipphotorgz.shop/","date":"2025-12-25T19:33:45.819Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /images/2022/02/26/heyzo9276.jpg HTTP/1.1\r\nHost: pic.sexnguon.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://clipphotorgz.shop/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-03T23:31:02.874036Z","times_seen":13307549,"resource_available":true,"data":null}},"time_used":6991,"timings":{"blocked":6990,"dns":1,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pic.sexnguon.com/images/2022/02/26/heyzo9315.jpg","fqdn":"pic.sexnguon.com","domain":"sexnguon.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://clipphotorgz.shop/","date":"2025-12-25T19:33:45.848Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /images/2022/02/26/heyzo9315.jpg HTTP/1.1\r\nHost: pic.sexnguon.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://clipphotorgz.shop/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-03T23:31:02.874036Z","times_seen":13307549,"resource_available":true,"data":null}},"time_used":6963,"timings":{"blocked":6962,"dns":1,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"clipphotorgz.shop/template/heisejianyue/img/bg_icon.jpg","fqdn":"clipphotorgz.shop","domain":"clipphotorgz.shop","tld":"shop"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://clipphotorgz.shop/","date":"2025-12-25T19:33:45.018Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"clipphotorgz.shop","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 17 Nov 2025 12:38:08 GMT","end":"Sun, 15 Feb 2026 13:36:44 GMT"},"fingerprint":{"sha1":"B4:B7:70:48:1E:AA:79:DE:31:08:E8:B4:C8:AC:59:AC:2F:8F:7A:7E","sha256":"D0:F1:35:A2:92:72:85:67:60:B5:8F:58:DB:B6:FD:38:D5:7E:AA:14:F2:E9:75:A8:C6:89:25:D2:A5:66:1E:5A"}}},"request":{"raw":"GET /template/heisejianyue/img/bg_icon.jpg HTTP/1.1\r\nHost: clipphotorgz.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://clipphotorgz.shop/template/heisejianyue/css/style.css\r\nCookie: SITE_TOTAL_ID=52b84089924d12592d80b73c5698619c\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 25 Dec 2025 19:33:45 GMT\r\ncontent-type: image/jpeg\r\nserver: cloudflare\r\nlast-modified: Sun, 08 May 2022 08:56:55 GMT\r\nvary: Accept-Encoding\r\netag: W/\"627785d7-f1b\"\r\nexpires: Sat, 24 Jan 2026 19:33:45 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=M84z%2BM0e65I9O2jR4XGsYu3eHaNi59UHMvB0KY7e6Pr8gKZuQAkKvL%2FK6i2U1Ga8%2FJhplt6sd9wCEyaO0iNTucBC6XOnvwrw65a5EaWFwA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b3ac59c59a7712b-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3867,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 100x99, components 3","md5":"5d1906cd4299f3c5d4e53df5fefd231b","sha1":"26dd90175760d7049289eabd3914e580335197b6","sha256":"f654cc9daac86f2e7a514d9e3c28710cc58060cf43f37529c243b38cb9951adb","sha512":"aa5121624d23b0b93a306a94488565d6ba1ff1916db54b2f3fe72958972f54f7367599a62cb80eee84efd37ac5aa53cf20fe954583aa47da90e8269772dddf91","ssdeep":"","tlshash":"5f811a5df98a2da0d4d7d1b121f3e152df860488fae3ec226098cc77f5e81a19922dc5","first_seen":"2023-05-12T08:10:23Z","last_seen":"2026-04-02T02:14:14.97193Z","times_seen":266,"resource_available":false,"data":null}},"time_used":586,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":586,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pic.sexnguon.com/images/2022/02/26/heyzo9297.jpg","fqdn":"pic.sexnguon.com","domain":"sexnguon.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://clipphotorgz.shop/","date":"2025-12-25T19:33:45.823Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /images/2022/02/26/heyzo9297.jpg HTTP/1.1\r\nHost: pic.sexnguon.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://clipphotorgz.shop/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-03T23:31:02.874036Z","times_seen":13307549,"resource_available":true,"data":null}},"time_used":6987,"timings":{"blocked":6986,"dns":1,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"clipphotorgz.shop/template/heisejianyue/img/logo_1.png","fqdn":"clipphotorgz.shop","domain":"clipphotorgz.shop","tld":"shop"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://clipphotorgz.shop/","date":"2025-12-25T19:33:45.044Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"clipphotorgz.shop","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 17 Nov 2025 12:38:08 GMT","end":"Sun, 15 Feb 2026 13:36:44 GMT"},"fingerprint":{"sha1":"B4:B7:70:48:1E:AA:79:DE:31:08:E8:B4:C8:AC:59:AC:2F:8F:7A:7E","sha256":"D0:F1:35:A2:92:72:85:67:60:B5:8F:58:DB:B6:FD:38:D5:7E:AA:14:F2:E9:75:A8:C6:89:25:D2:A5:66:1E:5A"}}},"request":{"raw":"GET /template/heisejianyue/img/logo_1.png HTTP/1.1\r\nHost: clipphotorgz.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://clipphotorgz.shop/template/heisejianyue/css/style.css\r\nCookie: SITE_TOTAL_ID=52b84089924d12592d80b73c5698619c\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 25 Dec 2025 19:33:45 GMT\r\ncontent-type: image/png\r\nserver: cloudflare\r\nlast-modified: Sun, 08 May 2022 08:56:56 GMT\r\nvary: Accept-Encoding\r\netag: W/\"627785d8-6831\"\r\nexpires: Sat, 24 Jan 2026 19:33:45 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9f5YzdrIgNgm3j1Mn7b%2Bg8xsA8cZyXgKxk2gdd1BPp%2B55bLJsqWIK%2Fs7BXLSeL%2BbI6qP5a%2Fp7HH92VGP38gTYAwjDsxmh7Cm9B%2FVm%2BBuog%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b3ac59c89c8712b-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":26673,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 500 x 500, 8-bit/color RGBA, non-interlaced","md5":"a052f5ffc7fda282dbc3908e45e708ad","sha1":"2d5ebb7bc273ca7307ae419894b4a6db9fd21ce2","sha256":"3a0099e3a51ff90601c4426f9f4fbd5c84e4ffa10be39f511d2a81de351757f7","sha512":"755223fc832141601d676b56137e21ae7b59a3e6abe5b4c673d133952f66c38eed12c29d1b0db482ad6aed149aa0d164cd5b3b4e7f6e590e966b50be5a1c42a6","ssdeep":"384:bcwHwxHCNSoy0XckYIjZf/FJtkhZHVKYXhN7gWKgVVV9:bTHw6tcEdDkhZHI6N7DVVJ","tlshash":"1ac2be47ed64b86f501167819bab72e8ccb93a4338a11f5f9f4a14320c87adef832c54","first_seen":"2024-10-04T11:13:33.491613Z","last_seen":"2026-04-02T02:14:14.963576Z","times_seen":46,"resource_available":false,"data":null}},"time_used":775,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":772,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"clipphotorgz.shop/static/js/home.js","fqdn":"clipphotorgz.shop","domain":"clipphotorgz.shop","tld":"shop"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://clipphotorgz.shop/","date":"2025-12-25T19:33:44.134Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"clipphotorgz.shop","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 17 Nov 2025 12:38:08 GMT","end":"Sun, 15 Feb 2026 13:36:44 GMT"},"fingerprint":{"sha1":"B4:B7:70:48:1E:AA:79:DE:31:08:E8:B4:C8:AC:59:AC:2F:8F:7A:7E","sha256":"D0:F1:35:A2:92:72:85:67:60:B5:8F:58:DB:B6:FD:38:D5:7E:AA:14:F2:E9:75:A8:C6:89:25:D2:A5:66:1E:5A"}}},"request":{"raw":"GET /static/js/home.js HTTP/1.1\r\nHost: clipphotorgz.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://clipphotorgz.shop/\r\nCookie: SITE_TOTAL_ID=52b84089924d12592d80b73c5698619c\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 25 Dec 2025 19:33:44 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Tue, 19 Apr 2022 04:04:33 GMT\r\nvary: Accept-Encoding\r\netag: W/\"625e34d1-95a5\"\r\nexpires: Fri, 26 Dec 2025 07:33:44 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Pq9FzWbegyjueokdhf%2FFlk02NuGeAkynqvvK%2FD9f7YbetutBab1VU5qfSw%2B%2BfHE%2FWETMfmoU3QQY3mQ3qdr8KUPjg%2Fyip%2Frj0y4mw9W1Ow%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b3ac596ccda712b-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":38309,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (2677)","md5":"97e311d35a4aa0ba09575a8dc989660b","sha1":"8166b5f8ba52aa57ab23321a8ddc8d0118f1e590","sha256":"1a52c16e5a7fc905630d52185ca457108cb0a65a4567cf6157709c1c5eceb311","sha512":"d3f4e4ef8af316fd4207a6db03e856917d5124263104ba9ebf0db1be151ce65172d26b6338d24553df9fe65b828e2a452a39bde7d1144a875c20bd5e28da9db8","ssdeep":"768:hR0cTTu8eMbZLbhpa6a/b7z9SsbhbeA5gr9GiSo5E7Iw4TQv5:hRZXde96oRiG5","tlshash":"ae03a45d7af3142050b3317a4fbf69082276815f190ddd88fe2d11a48fc4a4eba66bbd","first_seen":"2023-03-07T01:18:35Z","last_seen":"2026-04-03T23:25:56.127969Z","times_seen":5607,"resource_available":true,"data":null}},"time_used":573,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":573,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"clipphotorgz.shop/template/heisejianyue/img/icon_gbook.png","fqdn":"clipphotorgz.shop","domain":"clipphotorgz.shop","tld":"shop"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://clipphotorgz.shop/","date":"2025-12-25T19:33:44.136Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"clipphotorgz.shop","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 17 Nov 2025 12:38:08 GMT","end":"Sun, 15 Feb 2026 13:36:44 GMT"},"fingerprint":{"sha1":"B4:B7:70:48:1E:AA:79:DE:31:08:E8:B4:C8:AC:59:AC:2F:8F:7A:7E","sha256":"D0:F1:35:A2:92:72:85:67:60:B5:8F:58:DB:B6:FD:38:D5:7E:AA:14:F2:E9:75:A8:C6:89:25:D2:A5:66:1E:5A"}}},"request":{"raw":"GET /template/heisejianyue/img/icon_gbook.png HTTP/1.1\r\nHost: clipphotorgz.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://clipphotorgz.shop/\r\nCookie: SITE_TOTAL_ID=52b84089924d12592d80b73c5698619c\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 25 Dec 2025 19:33:44 GMT\r\ncontent-type: image/png\r\ncontent-length: 545\r\nserver: cloudflare\r\nlast-modified: Sun, 08 May 2022 08:56:55 GMT\r\netag: \"627785d7-221\"\r\nexpires: Sat, 24 Jan 2026 19:33:44 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=S2EvRlJ7TlVKmaM4BWy9Fhw0S3H12LSHj8zQXorXFrXfVO6d1rkIm3icPvms0NZHgyPgIh7%2BFlBB%2BJ0NmBBa1WeTLz1d%2Bl2cVUd47nCTiA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b3ac596ccdc712b-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":545,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 28 x 28, 8-bit/color RGBA, non-interlaced","md5":"c63735e90396afed5ff49f4ab97b90d3","sha1":"96d7a955906d4774df13cec072c889c9d7007921","sha256":"00129bdad52af0196a87897434db7993c687af14f16ab05f1206e4f2922aecf5","sha512":"b8737712f63b21e3d660cfcea7fb7a27ffca45d392b837d89707bb34a6e8a526758d0323ff3b6809f3aadf75d807c75ce08200b0fe1374ca3c4d29f8bf493df7","ssdeep":"","tlshash":"a2f026cb45d2887de545486e153785f6d83777f41065253cc287141adc2310fc2d46b1","first_seen":"2023-11-28T11:15:48Z","last_seen":"2026-04-02T02:14:14.991578Z","times_seen":91,"resource_available":false,"data":null}},"time_used":519,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":519,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"clipphotorgz.shop/template/heisejianyue/img/icon_code.png","fqdn":"clipphotorgz.shop","domain":"clipphotorgz.shop","tld":"shop"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://clipphotorgz.shop/","date":"2025-12-25T19:33:44.138Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"clipphotorgz.shop","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 17 Nov 2025 12:38:08 GMT","end":"Sun, 15 Feb 2026 13:36:44 GMT"},"fingerprint":{"sha1":"B4:B7:70:48:1E:AA:79:DE:31:08:E8:B4:C8:AC:59:AC:2F:8F:7A:7E","sha256":"D0:F1:35:A2:92:72:85:67:60:B5:8F:58:DB:B6:FD:38:D5:7E:AA:14:F2:E9:75:A8:C6:89:25:D2:A5:66:1E:5A"}}},"request":{"raw":"GET /template/heisejianyue/img/icon_code.png HTTP/1.1\r\nHost: clipphotorgz.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://clipphotorgz.shop/\r\nCookie: SITE_TOTAL_ID=52b84089924d12592d80b73c5698619c\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 25 Dec 2025 19:33:44 GMT\r\ncontent-type: image/png\r\nserver: cloudflare\r\nlast-modified: Sun, 08 May 2022 08:56:55 GMT\r\nvary: Accept-Encoding\r\netag: W/\"627785d7-544\"\r\nexpires: Sat, 24 Jan 2026 19:33:44 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JvEKGfcaE49VYL9L57pt%2B7en6Ji6HSZprhNzQNxFILPfMXAT0TvM9WHHeBie7yedmy4SDHQ2RpwC2RIp9j286LJP582%2FK0%2FByZOWXQSAZQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b3ac596ccde712b-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1348,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 28 x 28, 8-bit/color RGBA, non-interlaced","md5":"e521295a1b4876f22f210ba6d13d4979","sha1":"c465343fcc70b44475f5c052c7c651524f5abdec","sha256":"ef99ad00e9a64150af444154788c4a1fc82fc1a62f45d98cfc42b169b899d260","sha512":"888dc8965e2660f2571394fd35e2784cc8dfd49a8f334e2255934493f286284cea3f1d77fd5550a180bedd482e61868b67cc9fc66aace743f58b65bf501ee4bf","ssdeep":"","tlshash":"7e21cb85ba51780e91ccd9c214f7c672c1570c40dae0e93978dbcc014c153bb057d4db","first_seen":"2023-07-06T10:47:44Z","last_seen":"2026-04-02T02:14:14.96744Z","times_seen":94,"resource_available":false,"data":null}},"time_used":560,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":560,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.bootcss.com/jquery_lazyload/1.9.3/jquery.lazyload.min.js","fqdn":"cdn.bootcss.com","domain":"bootcss.com","tld":"com"},"ip":{"addr":"134.122.175.2","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://clipphotorgz.shop/","date":"2025-12-25T19:33:44.142Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bootcss.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 22 Nov 2025 21:15:09 GMT","end":"Fri, 20 Feb 2026 21:15:08 GMT"},"fingerprint":{"sha1":"35:41:C2:28:D1:53:68:77:66:6D:AD:45:61:7F:3B:C0:76:A5:51:D1","sha256":"5A:F9:BC:A9:5D:A7:59:42:BE:77:22:B3:08:A5:D5:19:EB:0F:3F:8D:42:CE:D1:68:B1:EC:CE:D1:C6:8E:AD:4E"}}},"request":{"raw":"GET /jquery_lazyload/1.9.3/jquery.lazyload.min.js HTTP/1.1\r\nHost: cdn.bootcss.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://clipphotorgz.shop/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Authorization, Content-Type, If-Match, If-Modified-Since, If-None-Match, If-Unmodifed-Since, X-CSRF-TOKEN, X-Requested-With,token\r\naccess-control-allow-methods: GET, POST, PATCH, PUT, DELETE, OPTIONS\r\naccess-control-allow-origin: *\r\ncache-control: no-cache, no-store, must-revalidate\r\ncontent-encoding: gzip\r\ncontent-type: text/javascript; charset=utf-8\r\ndate: Thu, 25 Dec 2025 19:33:44 GMT\r\nexpires: 0\r\npragma: no-cache\r\nserver: nginx\r\nvary: Accept-Encoding\r\nx-cache: BYPASS, Cache-Control: no-cache, no-store, must-revalidate\r\ncontent-length: 1342\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3381,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (3309)","md5":"89c45121934ed4664ff3ca811a008226","sha1":"848216f1d67cc7c6c6214db1a771f8c4653f06d6","sha256":"e576f12e82c468567e420386b68476ff7045815976395bc6baad1a822c7368a7","sha512":"61a33e6453c52798cf127e93c3163344cea18bdcf31eea042653903b4653b1e5408942d7b3e09b33ac73c667d1b0161d1438cbaee8d517518352c7c88a9bcc3c","ssdeep":"","tlshash":"1861768d7f527839f0567a9e831f3106663ed46f81814c54b0c9ece4ecec7951236d9a","first_seen":"2023-03-07T01:15:08Z","last_seen":"2026-04-03T22:38:50.041145Z","times_seen":4299,"resource_available":true,"data":null}},"time_used":1686,"timings":{"blocked":669,"dns":20,"connect":325,"send":0,"wait":335,"receive":0,"ssl":334},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-25","alert":"Sinkholed","trigger":"cdn.bootcss.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-25","alert":"Sinkholed","trigger":"cdn.bootcss.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-25","alert":"Sinkholed","trigger":"cdn.bootcss.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-25","alert":"Sinkholed","trigger":"cdn.bootcss.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pic.sexnguon.com/images/2022/02/26/heyzo9274.jpg","fqdn":"pic.sexnguon.com","domain":"sexnguon.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://clipphotorgz.shop/","date":"2025-12-25T19:33:45.845Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /images/2022/02/26/heyzo9274.jpg HTTP/1.1\r\nHost: pic.sexnguon.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://clipphotorgz.shop/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-03T23:31:02.874036Z","times_seen":13307549,"resource_available":true,"data":null}},"time_used":6965,"timings":{"blocked":6964,"dns":1,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"clipphotorgz.shop/template/heisejianyue/img/qrcode.jpg","fqdn":"clipphotorgz.shop","domain":"clipphotorgz.shop","tld":"shop"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://clipphotorgz.shop/","date":"2025-12-25T19:33:45.037Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"clipphotorgz.shop","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 17 Nov 2025 12:38:08 GMT","end":"Sun, 15 Feb 2026 13:36:44 GMT"},"fingerprint":{"sha1":"B4:B7:70:48:1E:AA:79:DE:31:08:E8:B4:C8:AC:59:AC:2F:8F:7A:7E","sha256":"D0:F1:35:A2:92:72:85:67:60:B5:8F:58:DB:B6:FD:38:D5:7E:AA:14:F2:E9:75:A8:C6:89:25:D2:A5:66:1E:5A"}}},"request":{"raw":"GET /template/heisejianyue/img/qrcode.jpg HTTP/1.1\r\nHost: clipphotorgz.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://clipphotorgz.shop/\r\nCookie: SITE_TOTAL_ID=52b84089924d12592d80b73c5698619c\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\ndate: Thu, 25 Dec 2025 19:33:45 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bdAzuUINAKHk4W64ltpkuNh08fBw1PBxthxM7zmrKyG8dvWqS6gLZn6hufFvlzWTi%2BMEEBYbjcyLDXbQcFDTldcxuOZ6tthRe5pZygW1jw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9b3ac59c79c1712b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":146,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"8eec510e57f5f732fd2cce73df7b73ef","sha1":"3c0af39ecb3753c5fee3b53d063c7286019eac3b","sha256":"55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0","sha512":"73bbf698482132b5fd60a0b58926fddec9055f8095a53bc52714e211e9340c3419736ceafd6b279667810114d306bfccdcfcddf51c0b67fe9e3c73c54583e574","ssdeep":"","tlshash":"b7c02b2d35133c4cc563313423c37140c0d6833b687a41110400c00371cf2998ec3397","first_seen":"2023-03-07T12:05:15Z","last_seen":"2026-04-03T23:29:22.924629Z","times_seen":477204,"resource_available":true,"data":null}},"time_used":6,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"clipphotorgz.shop/template/heisejianyue/img/icon_seacrh.png","fqdn":"clipphotorgz.shop","domain":"clipphotorgz.shop","tld":"shop"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://clipphotorgz.shop/","date":"2025-12-25T19:33:45.049Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"clipphotorgz.shop","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 17 Nov 2025 12:38:08 GMT","end":"Sun, 15 Feb 2026 13:36:44 GMT"},"fingerprint":{"sha1":"B4:B7:70:48:1E:AA:79:DE:31:08:E8:B4:C8:AC:59:AC:2F:8F:7A:7E","sha256":"D0:F1:35:A2:92:72:85:67:60:B5:8F:58:DB:B6:FD:38:D5:7E:AA:14:F2:E9:75:A8:C6:89:25:D2:A5:66:1E:5A"}}},"request":{"raw":"GET /template/heisejianyue/img/icon_seacrh.png HTTP/1.1\r\nHost: clipphotorgz.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://clipphotorgz.shop/template/heisejianyue/css/style.css\r\nCookie: SITE_TOTAL_ID=52b84089924d12592d80b73c5698619c\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 25 Dec 2025 19:33:45 GMT\r\ncontent-type: image/png\r\ncontent-length: 348\r\nserver: cloudflare\r\nlast-modified: Sun, 08 May 2022 08:56:55 GMT\r\netag: \"627785d7-15c\"\r\nexpires: Sat, 24 Jan 2026 19:33:45 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TQjaSpC%2BlHfJsd6M3JCD6RglfsrAjirsj%2BIUiCqVR7eyR%2BDES37sJYe4DzAk%2BbhztKDlpuEm1ppbp8w%2FlNbpdLmwSdBCnTyVyEDsIV5%2B9A%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b3ac59c89c9712b-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":348,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced","md5":"f77344071bd77c499961fe76810f9270","sha1":"90ee6dc9968c857f546c60943c68dbc1dba1b8cc","sha256":"c35811436039fbd6efc50c0bb111831d8bf6d9afbe92a46a038cd9efb34738af","sha512":"419706e2817c1d4357cd9cb27cce9d5fd01da92743f0837114c2c5cfdb45ab9e54dd3a9e14196800c678d7c09125ba31b8bc9c3ea2920e3a0e9af2b2acc5accc","ssdeep":"","tlshash":"26e0c0dfe781f63d8aea7921c74c08048c3b194e1b705d9c0d1e41b42e31519c9d6642","first_seen":"2023-05-12T08:10:23Z","last_seen":"2026-04-03T14:56:32.409687Z","times_seen":915,"resource_available":false,"data":null}},"time_used":610,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":610,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pic.sexnguon.com/images/2022/02/26/heyzo9311.jpg","fqdn":"pic.sexnguon.com","domain":"sexnguon.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://clipphotorgz.shop/","date":"2025-12-25T19:33:45.834Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /images/2022/02/26/heyzo9311.jpg HTTP/1.1\r\nHost: pic.sexnguon.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://clipphotorgz.shop/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-03T23:31:02.874036Z","times_seen":13307549,"resource_available":true,"data":null}},"time_used":6976,"timings":{"blocked":6975,"dns":1,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"clipphotorgz.shop/","fqdn":"clipphotorgz.shop","domain":"clipphotorgz.shop","tld":"shop"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-12-25T19:33:41.680Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"clipphotorgz.shop","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 17 Nov 2025 12:38:08 GMT","end":"Sun, 15 Feb 2026 13:36:44 GMT"},"fingerprint":{"sha1":"B4:B7:70:48:1E:AA:79:DE:31:08:E8:B4:C8:AC:59:AC:2F:8F:7A:7E","sha256":"D0:F1:35:A2:92:72:85:67:60:B5:8F:58:DB:B6:FD:38:D5:7E:AA:14:F2:E9:75:A8:C6:89:25:D2:A5:66:1E:5A"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: clipphotorgz.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 25 Dec 2025 19:33:43 GMT\r\ncontent-type: text/html; charset=utf-8\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nset-cookie: SITE_TOTAL_ID=52b84089924d12592d80b73c5698619c; Path=/; Max-Age=259200000; HttpOnly\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=W50WJ6lwPCvJCzEvD7z4fvKLTWRAMMBOmIZGC9f9SlQkUZqAIMWRsU%2F8aPW1JycW6bk5djDsBHORPW3%2FDx%2BD3qzvJ9RQ1U%2BiqnQRFrM0fKv%2F\"}]}\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9b3ac587b9a71a30-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"jQuery:1.9.3","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":176394,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (33709)","md5":"a740b433aad702e7bd3048f0dedaf316","sha1":"21cd378bc62a3c5c5f8972214626f01f99b532f5","sha256":"ea51c49e704c596644c1bebbd385eb29c20c7383db7b41251ec06b6a31ce5172","sha512":"d0c2c7eafd86f1212092046d6ec47af6a30cba4d5ae6d6560f95c124d836abe8d2b79cef76c4b9e5ea110932daa17fdf25f2bc7efbc723efc66929f5349e549f","ssdeep":"3072:DNjBYBSEpsII6+aqeqqVjSjGVAV/+CBgQ0AzH/XoxUqNwN8/GAR5beH9nuP9axBA:k4EpsZ6+aqeqqVjSjGVAV/+CBgQ0AzHM","tlshash":"c0048fb347c4576abb47e7d14219b52ec09b75f9ed426a4fe4a72985e80c3fe400228f","first_seen":"2025-12-25T19:34:09.887344Z","last_seen":"2025-12-25T19:34:09.887344Z","times_seen":1,"resource_available":false,"data":null}},"time_used":2297,"timings":{"blocked":39,"dns":13,"connect":1,"send":0,"wait":2219,"receive":0,"ssl":21},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"clipphotorgz.shop/template/heisejianyue/css/style.css","fqdn":"clipphotorgz.shop","domain":"clipphotorgz.shop","tld":"shop"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://clipphotorgz.shop/","date":"2025-12-25T19:33:44.130Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"clipphotorgz.shop","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 17 Nov 2025 12:38:08 GMT","end":"Sun, 15 Feb 2026 13:36:44 GMT"},"fingerprint":{"sha1":"B4:B7:70:48:1E:AA:79:DE:31:08:E8:B4:C8:AC:59:AC:2F:8F:7A:7E","sha256":"D0:F1:35:A2:92:72:85:67:60:B5:8F:58:DB:B6:FD:38:D5:7E:AA:14:F2:E9:75:A8:C6:89:25:D2:A5:66:1E:5A"}}},"request":{"raw":"GET /template/heisejianyue/css/style.css HTTP/1.1\r\nHost: clipphotorgz.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://clipphotorgz.shop/\r\nCookie: SITE_TOTAL_ID=52b84089924d12592d80b73c5698619c\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 25 Dec 2025 19:33:44 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Sun, 08 May 2022 08:56:55 GMT\r\nvary: Accept-Encoding\r\netag: W/\"627785d7-3b2c\"\r\nexpires: Fri, 26 Dec 2025 07:33:44 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yPvUbKy956wiwNz3gzklf62w7Mq7nTHc7rAVC5606i5VvgOqnIdr3iRvyAY6Ua7gIAGg3jhNrBwuRiALDxxSeXbq5j%2FH7xyvnkv%2BNB48Gw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b3ac596ccd7712b-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15148,"size_decoded":0,"mime_type":"text/css","magic":"assembler source, Unicode text, UTF-8 text","md5":"4006204cf8c37690303ab76d54de40d4","sha1":"05eb9d9c52dbbc1207ab55e7a62a296eec55d8da","sha256":"56e5061db57f8db7da0d79874e593ea4511048dc4a70ff6031c001c968e7ef6c","sha512":"63be17ed0d2d88059d57507761604b4ec4952a2453826d653da1aebcdff2879cd524ada587603ee2f831dc265022088ccfcd87a1494d8ac27ee1fa7eec1208c1","ssdeep":"384:JcEipe52axeOm4CbEVsWxRApd0jWhaSBnPYr2Ak/YNuLIyfUjp7e:e852geOm4CbEVD4RBnPYr2Ak/YNuLIBy","tlshash":"f26202229b011c48f11eefddaea5ab96471e5076af0e4efbf450682ca3c95c414f394e","first_seen":"2025-10-10T03:54:12.995083Z","last_seen":"2026-04-02T02:14:14.945785Z","times_seen":54,"resource_available":false,"data":null}},"time_used":606,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":606,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"clipphotorgz.shop/static/js/jquery.js","fqdn":"clipphotorgz.shop","domain":"clipphotorgz.shop","tld":"shop"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://clipphotorgz.shop/","date":"2025-12-25T19:33:44.133Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"clipphotorgz.shop","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 17 Nov 2025 12:38:08 GMT","end":"Sun, 15 Feb 2026 13:36:44 GMT"},"fingerprint":{"sha1":"B4:B7:70:48:1E:AA:79:DE:31:08:E8:B4:C8:AC:59:AC:2F:8F:7A:7E","sha256":"D0:F1:35:A2:92:72:85:67:60:B5:8F:58:DB:B6:FD:38:D5:7E:AA:14:F2:E9:75:A8:C6:89:25:D2:A5:66:1E:5A"}}},"request":{"raw":"GET /static/js/jquery.js HTTP/1.1\r\nHost: clipphotorgz.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://clipphotorgz.shop/\r\nCookie: SITE_TOTAL_ID=52b84089924d12592d80b73c5698619c\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 25 Dec 2025 19:33:44 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Tue, 19 Apr 2022 04:04:33 GMT\r\nvary: Accept-Encoding\r\netag: W/\"625e34d1-169d5\"\r\nexpires: Fri, 26 Dec 2025 07:33:44 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DbzR8vuMX35f2O11ra23ahcpSwBlpZ7yiBCFXaSP5XVI0cPVu%2FgaFiwR%2FeevxxZuSd7%2B4DrwTjaN3ZpcMyiUmAr10KAkFyLtQErpZL4vlw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b3ac596ccd8712b-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":92629,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (32089)","md5":"397754ba49e9e0cf4e7c190da78dda05","sha1":"ae49e56999d82802727455f0ba83b63acd90a22b","sha256":"c12f6098e641aaca96c60215800f18f5671039aecf812217fab3c0d152f6adb4","sha512":"8c64754f77507ab2c24a6fc818419b9dd3f0ceccc9065290e41afdbee0743f0da2cb13b2fbb00afa525c082f1e697cb3ffd76ef9b902cb81d7c41ca1c641dffb","ssdeep":"1536:dnu00HWWaRxkqJg09pYxoxDKMXJrg8hXXO4dK3kyfiLJBhdSZE+I+Qg7rbaN1RUx:ddkWgoBhcZRQgmW42qe","tlshash":"8c932bdd72d2b03257ab30bd106f540ff2361959280d8850f268d8f9bc79a49a277f6d","first_seen":"2023-03-07T01:02:08Z","last_seen":"2026-04-03T23:32:49.376784Z","times_seen":60504,"resource_available":true,"data":null}},"time_used":840,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":836,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}