{"report_id":"e8c9103e-0180-4a0d-b64d-495fe049bd8e","version":6,"status":"done","tags":[],"date":"2026-02-14T04:01:30Z","url":{"schema":"https","addr":"guncelgirisadresim.vip/","fqdn":"guncelgirisadresim.vip","domain":"guncelgirisadresim.vip","tld":"vip"},"ip":{"addr":"104.21.32.236","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"guncelgirisadresim.vip/h5/#/","fqdn":"guncelgirisadresim.vip","domain":"guncelgirisadresim.vip","tld":"vip"},"title":"guncelgirisadresim.vip/h5/","dom":{"size":190084,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (59522), with CRLF, LF line terminators","md5":"c1aeac6bc1725953b2749f90920edbce","sha1":"550235fb65c471d43c2f78b4fb6a580db9b03162","sha256":"5a9376be91646a8b6aae62d00ba4822ddd02b43c2f0a32885a1215e3100abc61","sha512":"8a066bc0cd4b480d055b0936c9ba616ecc61df3ae6a689999c32aa20e979d34b75d4772bfa322972f832e109630a8df688d44bab8d175e4d345d93c4fa43434b","ssdeep":"3072:yy3oWojGIVnqWPEwxsFbDW4YUml+tBwbHn:yy3oWoqIVnqWcusFNYUml+PwbHn","tlshash":"4004e632710239d72473ccc2e094af07ac1edf33c1684a54bbaa27659fd6ef45a25b19","dom_hash":"domhashaa591586e929460a9a9790f4a02db805","first_seen":"2026-02-13T06:39:05.156475Z","last_seen":"2026-02-14T10:49:46.902517Z","times_seen":27,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"guncelgirisadresim.vip/","fqdn":"guncelgirisadresim.vip","domain":"guncelgirisadresim.vip","tld":"vip"},"ip":{"addr":"104.21.32.236","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-03-21T04:01:30Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":null},"summary":[{"fqdn":"guncelgirisadresim.vip","ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-11-08","domain_rank":0,"first_seen":"2026-02-13T09:39:09.484551Z","last_seen":"2026-02-13T09:39:09.484551Z","alert_count":0,"request_count":24,"received_data":1577334,"sent_data":11992,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"mp4.nymaite.cn","ip":{"addr":"124.220.23.160","port":443,"asn":45090,"as":"Shenzhen Tencent Computer Systems Company Limited","country":"China","country_code":"CN"},"domain_registered":"2022-01-21","domain_rank":0,"first_seen":"2023-09-01T01:24:47Z","last_seen":"2026-02-13T06:21:32.679617Z","alert_count":0,"request_count":17,"received_data":2414,"sent_data":8270,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"console.nymaite.cn","ip":{"addr":"146.56.206.145","port":443,"asn":45090,"as":"Shenzhen Tencent Computer Systems Company Limited","country":"China","country_code":"CN"},"domain_registered":"2022-01-21","domain_rank":0,"first_seen":"2023-06-15T03:01:52Z","last_seen":"2026-02-13T06:21:32.674976Z","alert_count":0,"request_count":6,"received_data":13716,"sent_data":3020,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"shortbox.cc","ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2024-05-04","domain_rank":0,"first_seen":"2026-02-13T06:21:32.159416Z","last_seen":"2026-02-13T06:21:32.159416Z","alert_count":0,"request_count":2,"received_data":102092,"sent_data":853,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"cdn.dcloud.net.cn","ip":{"addr":"124.220.203.60","port":443,"asn":45090,"as":"Shenzhen Tencent Computer Systems Company Limited","country":"China","country_code":"CN"},"domain_registered":"2013-07-17","domain_rank":296858,"first_seen":"2018-09-15T09:18:08Z","last_seen":"2026-02-11T15:09:54.260395Z","alert_count":0,"request_count":1,"received_data":579,"sent_data":453,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"guncelgirisadresim.vip/h5/","fqdn":"guncelgirisadresim.vip","domain":"guncelgirisadresim.vip","tld":"vip"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"ec0086722d72ea95d1e97d455d135c91","sha1":"136c72ace1875c1206b274ca0cf24ed33a11d9a6","sha256":"9ea1492b35a3f52f61c72ab9690242149455b8068d149dff181d54532437f552","sha512":"a6377bb19cce90e385c3cd941eaa1ae27e18d70e1ce90f4e2e5cf5a9c5141069539c442aeb8f5c8a13378a8acc1043c1e84bb2a8593ed6ee026e7303e97bad47","ssdeep":"","tlshash":"fce068c360aa294c0120801a304ac0032bba08b29ec149610c487ba58ab9e4bc46e859","size":343,"data":"","first_seen":"2024-11-11T19:54:28.271167Z","last_seen":"2026-08-12T08:28:24.247702Z","times_seen":822,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"shortbox.cc/assets/js/jquery.min.js","fqdn":"shortbox.cc","domain":"shortbox.cc","tld":"cc"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"2a3eea3f27f34c98a7d644b3f0f60f85","sha1":"5ddd6acb2972a82d79c114ff0c4836b31d5255a6","sha256":"9cfed95f01296eb75a92709a60c838983daeab019219c75c106ffff4cd8b3908","sha512":"6bdd5d3ca228b89663547e381d8086a09098b884292e4c2b46f93b3b12aeb12f1217c3d8cd8563232a1b590e4e7c78c8aed11b61787025662f6d6d2d4b062dd2","ssdeep":"1536:19qodwgFZCg6YGIF+G5FWbxdnh17gnIlK/2RZYRHBpz+3e5ynQaKPkLl0xMXk23t:1fcsIq5FyQYpUuEK","tlshash":"07932add76d6b06247ab20b9506f510af232589d784c8400f264e8f6fc78e4a927bf7d","size":96638,"data":"","first_seen":"2026-02-13T06:21:38.368819Z","last_seen":"2026-02-17T11:32:44.987202Z","times_seen":47,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"guncelgirisadresim.vip/h5/static/js/pages-home-index~pages-user-share-withdraw.23d61766.js","fqdn":"guncelgirisadresim.vip","domain":"guncelgirisadresim.vip","tld":"vip"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"7e66177696f3b8d8babe77eee46ef564","sha1":"3be69793038e4477e3751d6846d1bb02c1b3c314","sha256":"1e02b8ebaee2108df885ec75bd321adddb207b992899e15f977f002b66083f95","sha512":"7d27b6de82c5cec1a1cd8a841e968d18fd7ad31f35a255d4da4c36db3c714a67ffc5ef09e0f48515fcbc599f22cfb7e123f8618bf6f3a9056ce90716f4b4c93b","ssdeep":"192:19zLPlqIdoRsAhBpDT98dM21g0wSrew/0F+Mg98D7hH5oRs669qz:PlqBzwgZi/LqDQC9qz","tlshash":"4342b55fb1def42348e36454146b220a32662d5c84193190dff2d7ee8baaa4f07a7f5c","size":12577,"data":"","first_seen":"2026-02-13T06:21:38.357189Z","last_seen":"2026-07-15T19:14:30.031531Z","times_seen":50,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"guncelgirisadresim.vip/h5/static/js/pages-home-index.56a9dab0.js","fqdn":"guncelgirisadresim.vip","domain":"guncelgirisadresim.vip","tld":"vip"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ddb308baab7c93e8e1ff4ec28b9da046","sha1":"d16c0468b237309901db65542daa0e78b1310e5d","sha256":"94eb2b215216984170378b31d008bd6bfa3ba7ef90d66c27ff9be9ebedc47f8f","sha512":"eefc6001da98e81607fee72bded98b3e23dd603692911855b9db861502a352520473d0b32ebe67c25373e24b9d71cc314e868becd2b9cae02551e8bcdd2a3216","ssdeep":"384:u7CQKu+5OAZ9ApJYdh8tFARjCPYhGDQPgEoSJKcZ+Vp4Owyb:uZKuE9AzYyqjCghjPzouKcZ4pP","tlshash":"a3030c2db14bb46b8dc39c1534ce591a11796e36e051b4c0f7f2c868caf1ada171af4e","size":40115,"data":"","first_seen":"2026-02-13T06:21:38.343168Z","last_seen":"2026-07-15T19:14:30.046775Z","times_seen":50,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"console.nymaite.cn/assets/js/mt4.js?t=10112","fqdn":"console.nymaite.cn","domain":"nymaite.cn","tld":"cn"},"ip":{"addr":"146.56.206.145","port":443,"asn":45090,"as":"Shenzhen Tencent Computer Systems Company Limited","country":"China","country_code":"CN"},"introduction_type":"scriptElement","is_inline":false,"md5":"e7a84f3838ffb696a13b25cbce1097ca","sha1":"4e51dd57574070e6d796d4d452774ad53dc55386","sha256":"47f4f41faf980b1a7406ed6578be312f8e96394f49dbba1449f0db1c081bf61d","sha512":"cf67527e2df5ee28f20d6d0e7a04674c62f5c77d27648aa12dc0e6dad3d469541feee07e4d26b573aae602097a2425f74a2b808286f8247608476f5032e0d1d4","ssdeep":"48:fHN4fUVJYIArGLr7BXgsBwyAn8DBwp3zZfyxxEbMhOrJmQ/Nu3zQjlLcwZz:1ckrrVBwyAnOszFaeMhcn6zQjlzZ","tlshash":"bbb188cd30f6647197a7f1aa25c5430356f23499abd5f364b08ca50b07d4ca4b13b9af","size":5365,"data":"","first_seen":"2024-12-15T08:42:20.713612Z","last_seen":"2026-07-15T19:14:30.043216Z","times_seen":53,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"guncelgirisadresim.vip/h5/#/","fqdn":"guncelgirisadresim.vip","domain":"guncelgirisadresim.vip","tld":"vip"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eval","is_inline":false,"md5":"3c42a63b848d3fb712f7d2752cde71dd","sha1":"a9ebaeacae86444b212c0445969da37387a583ea","sha256":"497ff616fb3ea9f7103998af71e34570fba494c9a5e99196718391c20a1c9c44","sha512":"6859b1126e684d46b887e4ce9d868c455acdd1e601db3f5892649e64d4da0c96a73d699901043d8e26d09e6ddf8b9091c9da99e0acbca5f9fac43cac0e1dd6f9","ssdeep":"48:bqWNdMHXiAvEX4J4kvPI/brwbgJC2vrzDO0SUfMHOlA36hkE7Ad:uWNm3DEJJC2LO0kuKorAd","tlshash":"ceb1939f248214306117df900ff6474a6bbab1749862a5363a9db2c3478ad48c09f76f","size":5342,"data":"","first_seen":"2024-12-15T08:42:20.716395Z","last_seen":"2026-07-15T19:14:30.054179Z","times_seen":53,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"console.nymaite.cn/assets/js/mt4.js?t=20221","fqdn":"console.nymaite.cn","domain":"nymaite.cn","tld":"cn"},"ip":{"addr":"146.56.206.145","port":443,"asn":45090,"as":"Shenzhen Tencent Computer Systems Company Limited","country":"China","country_code":"CN"},"introduction_type":"scriptElement","is_inline":false,"md5":"e7a84f3838ffb696a13b25cbce1097ca","sha1":"4e51dd57574070e6d796d4d452774ad53dc55386","sha256":"47f4f41faf980b1a7406ed6578be312f8e96394f49dbba1449f0db1c081bf61d","sha512":"cf67527e2df5ee28f20d6d0e7a04674c62f5c77d27648aa12dc0e6dad3d469541feee07e4d26b573aae602097a2425f74a2b808286f8247608476f5032e0d1d4","ssdeep":"48:fHN4fUVJYIArGLr7BXgsBwyAn8DBwp3zZfyxxEbMhOrJmQ/Nu3zQjlLcwZz:1ckrrVBwyAnOszFaeMhcn6zQjlzZ","tlshash":"bbb188cd30f6647197a7f1aa25c5430356f23499abd5f364b08ca50b07d4ca4b13b9af","size":5365,"data":"","first_seen":"2024-12-15T08:42:20.713612Z","last_seen":"2026-07-15T19:14:30.043216Z","times_seen":53,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"guncelgirisadresim.vip/h5/#/","fqdn":"guncelgirisadresim.vip","domain":"guncelgirisadresim.vip","tld":"vip"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eval","is_inline":false,"md5":"3c42a63b848d3fb712f7d2752cde71dd","sha1":"a9ebaeacae86444b212c0445969da37387a583ea","sha256":"497ff616fb3ea9f7103998af71e34570fba494c9a5e99196718391c20a1c9c44","sha512":"6859b1126e684d46b887e4ce9d868c455acdd1e601db3f5892649e64d4da0c96a73d699901043d8e26d09e6ddf8b9091c9da99e0acbca5f9fac43cac0e1dd6f9","ssdeep":"48:bqWNdMHXiAvEX4J4kvPI/brwbgJC2vrzDO0SUfMHOlA36hkE7Ad:uWNm3DEJJC2LO0kuKorAd","tlshash":"ceb1939f248214306117df900ff6474a6bbab1749862a5363a9db2c3478ad48c09f76f","size":5342,"data":"","first_seen":"2024-12-15T08:42:20.716395Z","last_seen":"2026-07-15T19:14:30.054179Z","times_seen":53,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"guncelgirisadresim.vip/h5/static/js/index.83fb5993.js","fqdn":"guncelgirisadresim.vip","domain":"guncelgirisadresim.vip","tld":"vip"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"0c8def300add4b18aa20d44f9c6df77f","sha1":"5a6b41e61fd6de05f0a03b184a0b0a6b5ecdd8ee","sha256":"3111a8790ef81f73f8a785224e02d5c454e15e2b14b8dbaa6959db11921988a9","sha512":"9797724be7cb833ea1ed9a1d15c795ee22e176b6fe95bb040f70cf09382df8911892ae189150968c3d01ff34bbae197934e52205c48b54ba78e403a0733051b2","ssdeep":"6144:t8OYsWZlM2bJAAih854mWy3oWoqIVnqWcusFNYUml+P4BO4KaaG:t8OYfZlM2bGAB54mVoFRYWcuISUml+PQ","tlshash":"dd747db93199fdef0ad32494041fa2017d6e3d27445af881fbf5cac59e1eb491226f28","size":338034,"data":"","first_seen":"2026-02-13T06:21:38.36697Z","last_seen":"2026-07-15T19:14:30.042247Z","times_seen":50,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"guncelgirisadresim.vip/h5/static/js/chunk-vendors.9141e4b8.js","fqdn":"guncelgirisadresim.vip","domain":"guncelgirisadresim.vip","tld":"vip"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"dcd6c642dab9fa820f5b8075d2248275","sha1":"21c05aca8533018101b86ff3a6450584ab5fb1d3","sha256":"fc8accee25c9adddeeb6d5b2ee2c1e917eaba3cd9491d52ec28aa92ab37f1eb8","sha512":"1ee9dfe14afbd521667205567799efd6232ddb93f3e5d5e43ca8656fb452a8da8da06498dd7a3d551fb5ab730c447acfb8e93c53afe83db724df3ccd71c4daf2","ssdeep":"6144:mYDEsj7aV7N0vHTASzZTRWNob/AEvmfr11hpTo57umJDXvzL4HPCHoWB3F:x47N0vHUSzZTRWNB+imOJu3F","tlshash":"3505f78df286b0b507e770b5403f220bb2376999b40a84d4f275e4d4ad7894e622bf7d","size":821415,"data":"","first_seen":"2026-02-13T06:21:38.366043Z","last_seen":"2026-07-15T19:14:30.033433Z","times_seen":50,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"shortbox.cc/assets/js/mt4.js","fqdn":"shortbox.cc","domain":"shortbox.cc","tld":"cc"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"bc4c7b254531d15327af19df14b19199","sha1":"dbdd37067f44ee88c08691b0a6e4eaea2a18be84","sha256":"339c8ae9bb8706fa851b2df3f109e7bb7d9c067c0c74b2117ed07a5ab179e387","sha512":"4da5fed1d7e794219dbe8f7911c2e77a6177f3a91d78c3f219bc6df91411d2fa21252e280e9198674b0b546b3679c2a789e00606d4ce53dcae04eb9eb97dcdef","ssdeep":"","tlshash":"5c81f48d30fa1021885760fe1f8b71247425d01b6a5adf117e0e82499fd5739e3a7bde","size":3935,"data":"","first_seen":"2026-02-13T06:21:38.345895Z","last_seen":"2026-02-17T11:32:45.034531Z","times_seen":47,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"guncelgirisadresim.vip/h5/static/js/pages-home-index~pages-home-update~pages-home-user~pages-login-login~pages-login-register~pages-user~6ea07087.f6a1a659.js","fqdn":"guncelgirisadresim.vip","domain":"guncelgirisadresim.vip","tld":"vip"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"f968f5ebabe97723b9a6b6abe65bbb99","sha1":"5e941745f7d67e38e267eb5302c01a97d5295114","sha256":"f75aa7d182f255e03520a42940582af9e1ed13ef41ca40a1838bad49109dabc9","sha512":"d71c6399491b9f704b5efc755d36e74018104a8e4224158ea57332f7ce1f6cca3f151d65982fbda89e25b653ca96032bea2aa8f6d8d02377b099e4a93b77937d","ssdeep":"192:twpIxPYPPXbzcvXqk0bevv9fgl4LIEUP46psIFoRsP6g383d5FoRsr:taIx6zQ0bkBnMEUw6pszpdsO","tlshash":"7732fa5df28eb4640ad7c050c91b814971673e1ce435a691ebe8c3fb86e1bce0657f18","size":11626,"data":"","first_seen":"2026-02-13T06:21:38.347144Z","last_seen":"2026-07-15T19:14:30.035741Z","times_seen":50,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":[{"md5":"3d5272693eb411e5b8b13a243f76c720","sha1":"6a586ab8e0a4bf12bbc60eea6ca9f2418625a22c","sha256":"9582f31f9eb892b8823a780e579d464d54e26d97d65dc327d2b2bdd92d47c4b8","sha512":"03fc5614f48fc9a2e3c4a30626fdbacde74c1fda09ffa9d1cde0393d31cd5fe1588e270c241f4cedb473c6e5cc224ff16c141468a29519ea6159accf3e3a18f1","ssdeep":"","tlshash":"a4c08c8350e2080c8210861b848880050b8808b04f9308a22cd85b7ecc9ae88c8f804c","size":148,"data":"","first_seen":"2023-03-07T01:10:06Z","last_seen":"2026-06-07T08:18:02.151537Z","times_seen":15899,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"console":null},"http":[{"url":{"schema":"https","addr":"guncelgirisadresim.vip/addons/dramas/index/init?platform=H5","fqdn":"guncelgirisadresim.vip","domain":"guncelgirisadresim.vip","tld":"vip"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://guncelgirisadresim.vip/h5/","date":"2026-02-14T04:01:11.268Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"guncelgirisadresim.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 01:04:40 GMT","end":"Mon, 06 Apr 2026 02:02:59 GMT"},"fingerprint":{"sha1":"43:32:64:70:6D:60:71:B1:59:71:49:F5:37:6D:83:51:E8:E7:D9:5D","sha256":"71:92:9B:3D:C6:F4:BC:BC:13:E3:35:3E:7C:B1:B5:11:4C:18:88:74:8E:07:6B:8F:F1:54:3F:F5:0B:1A:A5:B0"}}},"request":{"raw":"GET /addons/dramas/index/init?platform=H5 HTTP/1.1\r\nHost: guncelgirisadresim.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nToken: \r\nSign: \r\nLang: zh-tw\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://guncelgirisadresim.vip/h5/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 04:01:11 GMT\r\ncontent-type: application/json; charset=utf-8\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Q8rzmtuvMmQmiXZxd9wNL0yhaCkTbM0wGlviz9E%2Fa8Ga4oQfOsgnHAr7XKgErsmjGSjBHzT8Kc33NKgnHdqgQGtWxxN5ROEh69G8o8dXYn6r%2Ba6yYq4%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cd9a9ad68efb1b8-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1510,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"b53c1b0008c0d5bdfeed47d9bf04d9a7","sha1":"78607876194fd9b9bfc424d4f94f53e946e06071","sha256":"e69d2c9c8449a17e0d365f94b8ad391e8883e41c6d42df24d73b816a8194ce50","sha512":"7a244dab5e174270a59cd73d4bf0bb5f74bc50a0c21d170b56b15308f1dfa1f228e0a61a9e67b4b0f47f24aaea24c04b95a6af8722ad13dbde648d5f3ba27a7c","ssdeep":"","tlshash":"463182bea244c8cf035067c8258f29b9c2ae16239dcc9679da48dc5c48986ccb227973","first_seen":"2026-02-14T04:01:33.453731Z","last_seen":"2026-02-14T04:01:33.453731Z","times_seen":1,"resource_available":false,"data":null}},"time_used":166,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":166,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"guncelgirisadresim.vip/h5/static/tabbar/recommend_2_d.png","fqdn":"guncelgirisadresim.vip","domain":"guncelgirisadresim.vip","tld":"vip"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://guncelgirisadresim.vip/h5/","date":"2026-02-14T04:01:11.495Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"guncelgirisadresim.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 01:04:40 GMT","end":"Mon, 06 Apr 2026 02:02:59 GMT"},"fingerprint":{"sha1":"43:32:64:70:6D:60:71:B1:59:71:49:F5:37:6D:83:51:E8:E7:D9:5D","sha256":"71:92:9B:3D:C6:F4:BC:BC:13:E3:35:3E:7C:B1:B5:11:4C:18:88:74:8E:07:6B:8F:F1:54:3F:F5:0B:1A:A5:B0"}}},"request":{"raw":"GET /h5/static/tabbar/recommend_2_d.png HTTP/1.1\r\nHost: guncelgirisadresim.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://guncelgirisadresim.vip/h5/\r\nCookie: think_var=zh-tw\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 04:01:11 GMT\r\ncontent-type: image/png\r\ncontent-length: 953\r\nserver: cloudflare\r\nlast-modified: Tue, 19 Mar 2024 05:53:48 GMT\r\netag: \"65f9286c-3b9\"\r\nexpires: Mon, 16 Mar 2026 04:01:11 GMT\r\ncache-control: max-age=2592000\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET,POST,OPTIONS\r\naccess-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept, token, platform\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=eGHIbJUugUyo9rIVRAj197owu99IGm0bUU9MhTT3%2F%2FV8nfxryjBB3M9YASfcPpzTTFsngsO8%2FEx4Lv8C%2FzWYFmrmsV3XWdezkOayUNcJZJXoKNj%2BiCc%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cd9a9aedc15b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":953,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 50 x 50, 8-bit/color RGBA, non-interlaced","md5":"4c16a60e57e4259ae6888845d9027b84","sha1":"2318a1247bf67a1b226d6b3dec57655ef21f8a56","sha256":"574445421bcc36f427e1b92b567f7e1ece227df4d3345a5d7589320750334ed5","sha512":"07e9336d2c984f6b28404950c040c1d94ade359c12d7ce167afaab0f9f24d0c160e00714789a1d0b41fc179b91012e4356f5fadb5948e0d734a99c3916bf0206","ssdeep":"","tlshash":"2a1194e087e41928e1a36c6a68280e21e9fd20002271421ceb88a1909daf42290dc8a8","first_seen":"2025-11-11T16:01:27.568075Z","last_seen":"2026-07-15T19:14:30.053349Z","times_seen":54,"resource_available":false,"data":null}},"time_used":392,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":392,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mp4.nymaite.cn/s/%E9%81%87%E8%A7%81%E7%89%B9%E5%88%AB%E7%9A%84%E4%BD%A03000/1.jpg","fqdn":"mp4.nymaite.cn","domain":"nymaite.cn","tld":"cn"},"ip":{"addr":"124.220.23.160","port":443,"asn":45090,"as":"Shenzhen Tencent Computer Systems Company Limited","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://guncelgirisadresim.vip/h5/","date":"2026-02-14T04:01:11.876Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.nymaite.cn","organization":""},"issuer":{"commonName":"Certum Domain Validation CA SHA2","organization":"Unizeto Technologies S.A."},"validity":{"start":"Tue, 05 Aug 2025 09:05:43 GMT","end":"Fri, 04 Sep 2026 09:05:42 GMT"},"fingerprint":{"sha1":"AD:39:9B:23:73:DD:9B:2E:E9:45:1E:28:EE:36:73:C0:1E:05:38:B0","sha256":"90:BD:79:83:21:77:FB:BA:19:00:B4:7F:4F:38:4E:85:4A:12:75:6B:1E:B1:B7:B4:5C:68:09:70:F5:17:66:60"}}},"request":{"raw":"GET /s/%E9%81%87%E8%A7%81%E7%89%B9%E5%88%AB%E7%9A%84%E4%BD%A03000/1.jpg HTTP/1.1\r\nHost: mp4.nymaite.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://guncelgirisadresim.vip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\nserver: nginx\r\ndate: Sat, 14 Feb 2026 04:01:12 GMT\r\ncontent-type: text/html\r\ncontent-length: 146\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-12T07:40:40.2056Z","times_seen":17851556,"resource_available":true,"data":null}},"time_used":1855,"timings":{"blocked":734,"dns":198,"connect":271,"send":0,"wait":383,"receive":0,"ssl":265},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mp4.nymaite.cn/s/%E5%AE%A0%E5%A6%83%E8%A6%81%E7%BF%BB%E5%A4%A92981/1.jpg","fqdn":"mp4.nymaite.cn","domain":"nymaite.cn","tld":"cn"},"ip":{"addr":"124.220.23.160","port":443,"asn":45090,"as":"Shenzhen Tencent Computer Systems Company Limited","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://guncelgirisadresim.vip/h5/","date":"2026-02-14T04:01:11.907Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.nymaite.cn","organization":""},"issuer":{"commonName":"Certum Domain Validation CA SHA2","organization":"Unizeto Technologies S.A."},"validity":{"start":"Tue, 05 Aug 2025 09:05:43 GMT","end":"Fri, 04 Sep 2026 09:05:42 GMT"},"fingerprint":{"sha1":"AD:39:9B:23:73:DD:9B:2E:E9:45:1E:28:EE:36:73:C0:1E:05:38:B0","sha256":"90:BD:79:83:21:77:FB:BA:19:00:B4:7F:4F:38:4E:85:4A:12:75:6B:1E:B1:B7:B4:5C:68:09:70:F5:17:66:60"}}},"request":{"raw":"GET /s/%E5%AE%A0%E5%A6%83%E8%A6%81%E7%BF%BB%E5%A4%A92981/1.jpg HTTP/1.1\r\nHost: mp4.nymaite.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://guncelgirisadresim.vip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\nserver: nginx\r\ndate: Sat, 14 Feb 2026 04:01:12 GMT\r\ncontent-type: text/html\r\ncontent-length: 146\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-12T07:40:40.2056Z","times_seen":17851556,"resource_available":true,"data":null}},"time_used":856,"timings":{"blocked":627,"dns":0,"connect":0,"send":0,"wait":229,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mp4.nymaite.cn/s/%E7%97%85%E5%A8%87%E6%91%84%E6%94%BF%E7%8E%8B2979/1.jpg","fqdn":"mp4.nymaite.cn","domain":"nymaite.cn","tld":"cn"},"ip":{"addr":"124.220.23.160","port":443,"asn":45090,"as":"Shenzhen Tencent Computer Systems Company Limited","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://guncelgirisadresim.vip/h5/","date":"2026-02-14T04:01:11.908Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.nymaite.cn","organization":""},"issuer":{"commonName":"Certum Domain Validation CA SHA2","organization":"Unizeto Technologies S.A."},"validity":{"start":"Tue, 05 Aug 2025 09:05:43 GMT","end":"Fri, 04 Sep 2026 09:05:42 GMT"},"fingerprint":{"sha1":"AD:39:9B:23:73:DD:9B:2E:E9:45:1E:28:EE:36:73:C0:1E:05:38:B0","sha256":"90:BD:79:83:21:77:FB:BA:19:00:B4:7F:4F:38:4E:85:4A:12:75:6B:1E:B1:B7:B4:5C:68:09:70:F5:17:66:60"}}},"request":{"raw":"GET /s/%E7%97%85%E5%A8%87%E6%91%84%E6%94%BF%E7%8E%8B2979/1.jpg HTTP/1.1\r\nHost: mp4.nymaite.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://guncelgirisadresim.vip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\nserver: nginx\r\ndate: Sat, 14 Feb 2026 04:01:12 GMT\r\ncontent-type: text/html\r\ncontent-length: 146\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-12T07:40:40.2056Z","times_seen":17851556,"resource_available":true,"data":null}},"time_used":856,"timings":{"blocked":626,"dns":0,"connect":0,"send":0,"wait":230,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mp4.nymaite.cn/s/%E5%A5%B3%E6%80%BB%E8%A3%81%E7%9A%84%E5%90%8C%E5%B1%85%E7%94%B7%E5%8F%8B2988/1.jpg","fqdn":"mp4.nymaite.cn","domain":"nymaite.cn","tld":"cn"},"ip":{"addr":"124.220.23.160","port":443,"asn":45090,"as":"Shenzhen Tencent Computer Systems Company Limited","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://guncelgirisadresim.vip/h5/","date":"2026-02-14T04:01:12.043Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.nymaite.cn","organization":""},"issuer":{"commonName":"Certum Domain Validation CA SHA2","organization":"Unizeto Technologies S.A."},"validity":{"start":"Tue, 05 Aug 2025 09:05:43 GMT","end":"Fri, 04 Sep 2026 09:05:42 GMT"},"fingerprint":{"sha1":"AD:39:9B:23:73:DD:9B:2E:E9:45:1E:28:EE:36:73:C0:1E:05:38:B0","sha256":"90:BD:79:83:21:77:FB:BA:19:00:B4:7F:4F:38:4E:85:4A:12:75:6B:1E:B1:B7:B4:5C:68:09:70:F5:17:66:60"}}},"request":{"raw":"GET /s/%E5%A5%B3%E6%80%BB%E8%A3%81%E7%9A%84%E5%90%8C%E5%B1%85%E7%94%B7%E5%8F%8B2988/1.jpg HTTP/1.1\r\nHost: mp4.nymaite.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://guncelgirisadresim.vip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\nserver: nginx\r\ndate: Sat, 14 Feb 2026 04:01:12 GMT\r\ncontent-type: text/html\r\ncontent-length: 146\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-12T07:40:40.2056Z","times_seen":17851556,"resource_available":true,"data":null}},"time_used":948,"timings":{"blocked":493,"dns":0,"connect":0,"send":0,"wait":455,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"guncelgirisadresim.vip/","fqdn":"guncelgirisadresim.vip","domain":"guncelgirisadresim.vip","tld":"vip"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-02-14T04:01:08.733Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"guncelgirisadresim.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 01:04:40 GMT","end":"Mon, 06 Apr 2026 02:02:59 GMT"},"fingerprint":{"sha1":"43:32:64:70:6D:60:71:B1:59:71:49:F5:37:6D:83:51:E8:E7:D9:5D","sha256":"71:92:9B:3D:C6:F4:BC:BC:13:E3:35:3E:7C:B1:B5:11:4C:18:88:74:8E:07:6B:8F:F1:54:3F:F5:0B:1A:A5:B0"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: guncelgirisadresim.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\ndate: Sat, 14 Feb 2026 04:01:09 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: cloudflare\r\nlocation: /h5/\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WhQLsE10UmPqNfTmQYLqjdcxvlS%2FU6w07GeqdRK0loopRl7%2Fz7FGilRV8cmAyAWtk4lATplVhCc7QpvcVP%2BUYaofzvbsBVK%2B%2FmGyhuIM53ZrXY8aurM%3D\"}]}\r\ncf-ray: 9cd9a99dee0ca0f0-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":808,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-12T07:40:40.2056Z","times_seen":17851556,"resource_available":true,"data":null}},"time_used":529,"timings":{"blocked":49,"dns":30,"connect":1,"send":0,"wait":427,"receive":0,"ssl":19},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"guncelgirisadresim.vip/h5/static/js/chunk-vendors.9141e4b8.js","fqdn":"guncelgirisadresim.vip","domain":"guncelgirisadresim.vip","tld":"vip"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://guncelgirisadresim.vip/h5/","date":"2026-02-14T04:01:09.776Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"guncelgirisadresim.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 01:04:40 GMT","end":"Mon, 06 Apr 2026 02:02:59 GMT"},"fingerprint":{"sha1":"43:32:64:70:6D:60:71:B1:59:71:49:F5:37:6D:83:51:E8:E7:D9:5D","sha256":"71:92:9B:3D:C6:F4:BC:BC:13:E3:35:3E:7C:B1:B5:11:4C:18:88:74:8E:07:6B:8F:F1:54:3F:F5:0B:1A:A5:B0"}}},"request":{"raw":"GET /h5/static/js/chunk-vendors.9141e4b8.js HTTP/1.1\r\nHost: guncelgirisadresim.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://guncelgirisadresim.vip/h5/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 04:01:10 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Tue, 19 Mar 2024 05:53:48 GMT\r\nvary: Accept-Encoding\r\netag: W/\"65f9286c-c88a7\"\r\nexpires: Sat, 14 Feb 2026 16:01:10 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=c7QaETrfqff7PIJX4R1nUsyuP1k%2B%2FsldegGVdd%2BUQS%2BshF68bEpjb3kd%2BQCiWF51VsgvyZ07WHqsMUUVA%2Bsg%2BEXeknudsGn4e8CYO9wEhDtkUghOhB8%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cd9a9a41f67b1b8-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":821415,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65218), with no line terminators","md5":"dcd6c642dab9fa820f5b8075d2248275","sha1":"21c05aca8533018101b86ff3a6450584ab5fb1d3","sha256":"fc8accee25c9adddeeb6d5b2ee2c1e917eaba3cd9491d52ec28aa92ab37f1eb8","sha512":"1ee9dfe14afbd521667205567799efd6232ddb93f3e5d5e43ca8656fb452a8da8da06498dd7a3d551fb5ab730c447acfb8e93c53afe83db724df3ccd71c4daf2","ssdeep":"6144:mYDEsj7aV7N0vHTASzZTRWNob/AEvmfr11hpTo57umJDXvzL4HPCHoWB3F:x47N0vHUSzZTRWNB+imOJu3F","tlshash":"3505f78df286b0b507e770b5403f220bb2376999b40a84d4f275e4d4ad7894e622bf7d","first_seen":"2026-02-13T06:21:38.366043Z","last_seen":"2026-07-15T19:14:30.033433Z","times_seen":50,"resource_available":true,"data":null}},"time_used":921,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":532,"receive":389,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mp4.nymaite.cn/s/%E7%BB%9D%E4%B8%96%E5%B0%8F%E7%8B%82%E5%A6%832985/1.jpg","fqdn":"mp4.nymaite.cn","domain":"nymaite.cn","tld":"cn"},"ip":{"addr":"124.220.23.160","port":443,"asn":45090,"as":"Shenzhen Tencent Computer Systems Company Limited","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://guncelgirisadresim.vip/h5/","date":"2026-02-14T04:01:11.898Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.nymaite.cn","organization":""},"issuer":{"commonName":"Certum Domain Validation CA SHA2","organization":"Unizeto Technologies S.A."},"validity":{"start":"Tue, 05 Aug 2025 09:05:43 GMT","end":"Fri, 04 Sep 2026 09:05:42 GMT"},"fingerprint":{"sha1":"AD:39:9B:23:73:DD:9B:2E:E9:45:1E:28:EE:36:73:C0:1E:05:38:B0","sha256":"90:BD:79:83:21:77:FB:BA:19:00:B4:7F:4F:38:4E:85:4A:12:75:6B:1E:B1:B7:B4:5C:68:09:70:F5:17:66:60"}}},"request":{"raw":"GET /s/%E7%BB%9D%E4%B8%96%E5%B0%8F%E7%8B%82%E5%A6%832985/1.jpg HTTP/1.1\r\nHost: mp4.nymaite.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://guncelgirisadresim.vip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\nserver: nginx\r\ndate: Sat, 14 Feb 2026 04:01:12 GMT\r\ncontent-type: text/html\r\ncontent-length: 146\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-12T07:40:40.2056Z","times_seen":17851556,"resource_available":true,"data":null}},"time_used":865,"timings":{"blocked":636,"dns":0,"connect":0,"send":0,"wait":229,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mp4.nymaite.cn/s/%E4%B8%91%E5%A5%B3%E6%B4%9B%E6%97%A0%E5%BF%A72982/1.jpg","fqdn":"mp4.nymaite.cn","domain":"nymaite.cn","tld":"cn"},"ip":{"addr":"124.220.23.160","port":443,"asn":45090,"as":"Shenzhen Tencent Computer Systems Company Limited","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://guncelgirisadresim.vip/h5/","date":"2026-02-14T04:01:11.902Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.nymaite.cn","organization":""},"issuer":{"commonName":"Certum Domain Validation CA SHA2","organization":"Unizeto Technologies S.A."},"validity":{"start":"Tue, 05 Aug 2025 09:05:43 GMT","end":"Fri, 04 Sep 2026 09:05:42 GMT"},"fingerprint":{"sha1":"AD:39:9B:23:73:DD:9B:2E:E9:45:1E:28:EE:36:73:C0:1E:05:38:B0","sha256":"90:BD:79:83:21:77:FB:BA:19:00:B4:7F:4F:38:4E:85:4A:12:75:6B:1E:B1:B7:B4:5C:68:09:70:F5:17:66:60"}}},"request":{"raw":"GET /s/%E4%B8%91%E5%A5%B3%E6%B4%9B%E6%97%A0%E5%BF%A72982/1.jpg HTTP/1.1\r\nHost: mp4.nymaite.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://guncelgirisadresim.vip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\nserver: nginx\r\ndate: Sat, 14 Feb 2026 04:01:12 GMT\r\ncontent-type: text/html\r\ncontent-length: 146\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-12T07:40:40.2056Z","times_seen":17851556,"resource_available":true,"data":null}},"time_used":861,"timings":{"blocked":632,"dns":0,"connect":0,"send":0,"wait":229,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"guncelgirisadresim.vip/h5/static/tabbar/user_2_d.png","fqdn":"guncelgirisadresim.vip","domain":"guncelgirisadresim.vip","tld":"vip"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://guncelgirisadresim.vip/h5/","date":"2026-02-14T04:01:11.496Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"guncelgirisadresim.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 01:04:40 GMT","end":"Mon, 06 Apr 2026 02:02:59 GMT"},"fingerprint":{"sha1":"43:32:64:70:6D:60:71:B1:59:71:49:F5:37:6D:83:51:E8:E7:D9:5D","sha256":"71:92:9B:3D:C6:F4:BC:BC:13:E3:35:3E:7C:B1:B5:11:4C:18:88:74:8E:07:6B:8F:F1:54:3F:F5:0B:1A:A5:B0"}}},"request":{"raw":"GET /h5/static/tabbar/user_2_d.png HTTP/1.1\r\nHost: guncelgirisadresim.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://guncelgirisadresim.vip/h5/\r\nCookie: think_var=zh-tw\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 04:01:11 GMT\r\ncontent-type: image/png\r\nserver: cloudflare\r\nlast-modified: Tue, 19 Mar 2024 05:53:48 GMT\r\nvary: Accept-Encoding\r\netag: W/\"65f9286c-498\"\r\nexpires: Mon, 16 Mar 2026 04:01:11 GMT\r\ncache-control: max-age=2592000\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET,POST,OPTIONS\r\naccess-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept, token, platform\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=araH8EvxZuhZEVt6EG0A4L17jk7binChbBtOjQhJukL4DVQuQww0c7mvmhKH5lDeK3fRHxwmCnW0ZfZd%2FJrQQpFRMfn7ZnC6OTOMvw31fLP9VzMtl44%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cd9a9aedc1ab1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1176,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 50 x 50, 8-bit/color RGBA, non-interlaced","md5":"e8b8713f472b380040be70a6ebd217c5","sha1":"cc00437113704ba1f2a2d9c6b0e5c1d21becc9c9","sha256":"1f5af3682915e93fb942047276bf783faf9c9f437257c6fa575884b24e5a91a8","sha512":"a8327f67718de7548d8e659a1c6edc30d9b1478800f051ce6b413565d84a74c337b51996bb427c145213cdaca7dfd86e1775ab4010f509052e3b090138c0d60f","ssdeep":"","tlshash":"74210d6e77e75a24126f31ff0a516464edb513a4305cd5098c4ffc10eb0cc930c8d229","first_seen":"2025-11-11T16:01:27.544183Z","last_seen":"2026-07-15T19:14:30.048114Z","times_seen":54,"resource_available":false,"data":null}},"time_used":384,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":384,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"console.nymaite.cn/api/index/notify","fqdn":"console.nymaite.cn","domain":"nymaite.cn","tld":"cn"},"ip":{"addr":"146.56.206.145","port":443,"asn":45090,"as":"Shenzhen Tencent Computer Systems Company Limited","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://guncelgirisadresim.vip/h5/","date":"2026-02-14T04:01:12.628Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.nymaite.cn","organization":""},"issuer":{"commonName":"Certum Domain Validation CA SHA2","organization":"Unizeto Technologies S.A."},"validity":{"start":"Tue, 05 Aug 2025 09:05:43 GMT","end":"Fri, 04 Sep 2026 09:05:42 GMT"},"fingerprint":{"sha1":"AD:39:9B:23:73:DD:9B:2E:E9:45:1E:28:EE:36:73:C0:1E:05:38:B0","sha256":"90:BD:79:83:21:77:FB:BA:19:00:B4:7F:4F:38:4E:85:4A:12:75:6B:1E:B1:B7:B4:5C:68:09:70:F5:17:66:60"}}},"request":{"raw":"POST /api/index/notify HTTP/1.1\r\nHost: console.nymaite.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nContent-Length: 49\r\nOrigin: https://guncelgirisadresim.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://guncelgirisadresim.vip/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":49,"data":"{\"site\":\"guncelgirisadresim.vip\",\"type\":\"dramas\"}"}},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 14 Feb 2026 04:01:12 GMT\r\ncontent-type: application/json; charset=utf-8\r\naccess-control-allow-origin: https://guncelgirisadresim.vip\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 86400\r\nset-cookie: server_name_session=48d390272009a6f0f71d5de6ebbb4c4b; Max-Age=86400; httponly; path=/\r\nstrict-transport-security: max-age=31536000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":63,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"5e6afe9fe974a94b105876a5067de611","sha1":"2712e9d5566fa3016fda0e351bcf2aaa83891ad6","sha256":"e37ee8c986e291a2f6e57f55c3a7bf2f6ef91179ed0b31a3564ed42060dabb03","sha512":"b102c710566acef409d42a5085ea84bd1ae017d9eecd5fb4c80bac345c0df40f2f5c8217bdd7c4e262cfda4f4095efc6a993223d6cc35147c21965d07b8169bb","ssdeep":"","tlshash":"c9a002596409182618266b5845c9858a121d95930c86cb154e8b6f288dcf6b9b43b676","first_seen":"2026-02-14T04:01:33.462814Z","last_seen":"2026-02-14T04:01:33.462814Z","times_seen":1,"resource_available":false,"data":null}},"time_used":258,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":258,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"console.nymaite.cn/api/index/notify","fqdn":"console.nymaite.cn","domain":"nymaite.cn","tld":"cn"},"ip":{"addr":"146.56.206.145","port":443,"asn":45090,"as":"Shenzhen Tencent Computer Systems Company Limited","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://guncelgirisadresim.vip/h5/","date":"2026-02-14T04:01:12.632Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.nymaite.cn","organization":""},"issuer":{"commonName":"Certum Domain Validation CA SHA2","organization":"Unizeto Technologies S.A."},"validity":{"start":"Tue, 05 Aug 2025 09:05:43 GMT","end":"Fri, 04 Sep 2026 09:05:42 GMT"},"fingerprint":{"sha1":"AD:39:9B:23:73:DD:9B:2E:E9:45:1E:28:EE:36:73:C0:1E:05:38:B0","sha256":"90:BD:79:83:21:77:FB:BA:19:00:B4:7F:4F:38:4E:85:4A:12:75:6B:1E:B1:B7:B4:5C:68:09:70:F5:17:66:60"}}},"request":{"raw":"POST /api/index/notify HTTP/1.1\r\nHost: console.nymaite.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nContent-Length: 49\r\nOrigin: https://guncelgirisadresim.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://guncelgirisadresim.vip/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":49,"data":"{\"site\":\"guncelgirisadresim.vip\",\"type\":\"dramas\"}"}},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 14 Feb 2026 04:01:12 GMT\r\ncontent-type: application/json; charset=utf-8\r\naccess-control-allow-origin: https://guncelgirisadresim.vip\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 86400\r\nset-cookie: server_name_session=48d390272009a6f0f71d5de6ebbb4c4b; Max-Age=86400; httponly; path=/\r\nstrict-transport-security: max-age=31536000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":63,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"5e6afe9fe974a94b105876a5067de611","sha1":"2712e9d5566fa3016fda0e351bcf2aaa83891ad6","sha256":"e37ee8c986e291a2f6e57f55c3a7bf2f6ef91179ed0b31a3564ed42060dabb03","sha512":"b102c710566acef409d42a5085ea84bd1ae017d9eecd5fb4c80bac345c0df40f2f5c8217bdd7c4e262cfda4f4095efc6a993223d6cc35147c21965d07b8169bb","ssdeep":"","tlshash":"c9a002596409182618266b5845c9858a121d95930c86cb154e8b6f288dcf6b9b43b676","first_seen":"2026-02-14T04:01:33.462814Z","last_seen":"2026-02-14T04:01:33.462814Z","times_seen":1,"resource_available":false,"data":null}},"time_used":254,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":254,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"guncelgirisadresim.vip/h5/","fqdn":"guncelgirisadresim.vip","domain":"guncelgirisadresim.vip","tld":"vip"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-02-14T04:01:09.215Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"guncelgirisadresim.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 01:04:40 GMT","end":"Mon, 06 Apr 2026 02:02:59 GMT"},"fingerprint":{"sha1":"43:32:64:70:6D:60:71:B1:59:71:49:F5:37:6D:83:51:E8:E7:D9:5D","sha256":"71:92:9B:3D:C6:F4:BC:BC:13:E3:35:3E:7C:B1:B5:11:4C:18:88:74:8E:07:6B:8F:F1:54:3F:F5:0B:1A:A5:B0"}}},"request":{"raw":"GET /h5/ HTTP/1.1\r\nHost: guncelgirisadresim.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 14 Feb 2026 04:01:09 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\nlast-modified: Tue, 19 Mar 2024 05:53:48 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=v4%2BDNn1a0rS8cJxsyrBen9N8ubZTG6VmPItAw0tqaKLT0x738m5WrnnfMPL7P1%2BQs%2FCDYOaXxohFYGqS9PRuCpve4J7VjOCICKfVGYq88b%2Ftr7axc4k%3D\"}]}\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 9cd9a9a09b7ea0f0-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":808,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (533), with CRLF line terminators","md5":"e5ccd5a78cff367d840d7a873b5d0b01","sha1":"35fb76410e61885e77d5e9ff08fcfae06adff876","sha256":"072dead3f0d8473c86ddf10307b71233dedc1b421b9322674657c9c4a903e897","sha512":"ab0631c88b5be4211cee3e7046f9496afeceeeb5a3768bd5093999236f4f05fab31965b9e8d4f5cc15d49b50fa7f147c60dc2c8801dfd8bf1ae83ee4b7964bd8","ssdeep":"","tlshash":"360112c31c20e40d0b108642317ad12e896b49f4ae50c9505cc46aec89e0b8ece2e804","first_seen":"2026-02-13T06:21:38.355181Z","last_seen":"2026-07-15T19:14:30.036722Z","times_seen":50,"resource_available":true,"data":null}},"time_used":405,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":405,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"shortbox.cc/assets/js/jquery.min.js","fqdn":"shortbox.cc","domain":"shortbox.cc","tld":"cc"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://guncelgirisadresim.vip/h5/","date":"2026-02-14T04:01:10.988Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"shortbox.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 11 Jan 2026 05:01:11 GMT","end":"Sat, 11 Apr 2026 05:59:32 GMT"},"fingerprint":{"sha1":"61:72:5F:C9:D5:3C:A5:3A:9D:46:23:DA:37:03:F0:1D:87:36:67:EF","sha256":"77:8C:13:FF:79:AC:1B:28:3D:AD:8D:9E:92:82:3E:E8:54:E0:6B:94:CE:34:0B:3F:6A:18:14:AE:09:85:42:17"}}},"request":{"raw":"GET /assets/js/jquery.min.js HTTP/1.1\r\nHost: shortbox.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://guncelgirisadresim.vip/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 14 Feb 2026 04:01:11 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Mon, 29 Dec 2025 21:47:21 GMT\r\nvary: Accept-Encoding\r\netag: \"6952f6e9-1797e\"\r\nexpires: Sat, 14 Feb 2026 15:04:35 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 3395\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1djWjH%2FbyIDVc2ysniIg%2FPooemOrSQNdTgJNMJT2EmKo7mmnLLPZ3bUMh0FTAJzp1J8TiBP%2BlJBu%2BfRWZZ1gtk7eSHiKP7VLb009\"}]}\r\ncf-ray: 9cd9a9abfdf38deb-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":96638,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (31994)","md5":"2a3eea3f27f34c98a7d644b3f0f60f85","sha1":"5ddd6acb2972a82d79c114ff0c4836b31d5255a6","sha256":"9cfed95f01296eb75a92709a60c838983daeab019219c75c106ffff4cd8b3908","sha512":"6bdd5d3ca228b89663547e381d8086a09098b884292e4c2b46f93b3b12aeb12f1217c3d8cd8563232a1b590e4e7c78c8aed11b61787025662f6d6d2d4b062dd2","ssdeep":"1536:19qodwgFZCg6YGIF+G5FWbxdnh17gnIlK/2RZYRHBpz+3e5ynQaKPkLl0xMXk23t:1fcsIq5FyQYpUuEK","tlshash":"07932add76d6b06247ab20b9506f510af232589d784c8400f264e8f6fc78e4a927bf7d","first_seen":"2026-02-13T06:21:38.368819Z","last_seen":"2026-02-17T11:32:44.987202Z","times_seen":47,"resource_available":true,"data":null}},"time_used":107,"timings":{"blocked":49,"dns":32,"connect":1,"send":0,"wait":8,"receive":0,"ssl":15},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mp4.nymaite.cn/s/%E6%9D%83%E5%AE%A0%E5%B0%8F%E7%8B%82%E5%A6%832991/1.jpg","fqdn":"mp4.nymaite.cn","domain":"nymaite.cn","tld":"cn"},"ip":{"addr":"124.220.23.160","port":443,"asn":45090,"as":"Shenzhen Tencent Computer Systems Company Limited","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://guncelgirisadresim.vip/h5/","date":"2026-02-14T04:01:11.893Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.nymaite.cn","organization":""},"issuer":{"commonName":"Certum Domain Validation CA SHA2","organization":"Unizeto Technologies S.A."},"validity":{"start":"Tue, 05 Aug 2025 09:05:43 GMT","end":"Fri, 04 Sep 2026 09:05:42 GMT"},"fingerprint":{"sha1":"AD:39:9B:23:73:DD:9B:2E:E9:45:1E:28:EE:36:73:C0:1E:05:38:B0","sha256":"90:BD:79:83:21:77:FB:BA:19:00:B4:7F:4F:38:4E:85:4A:12:75:6B:1E:B1:B7:B4:5C:68:09:70:F5:17:66:60"}}},"request":{"raw":"GET /s/%E6%9D%83%E5%AE%A0%E5%B0%8F%E7%8B%82%E5%A6%832991/1.jpg HTTP/1.1\r\nHost: mp4.nymaite.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://guncelgirisadresim.vip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\nserver: nginx\r\ndate: Sat, 14 Feb 2026 04:01:12 GMT\r\ncontent-type: text/html\r\ncontent-length: 146\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-12T07:40:40.2056Z","times_seen":17851556,"resource_available":true,"data":null}},"time_used":1108,"timings":{"blocked":-1,"dns":186,"connect":246,"send":0,"wait":422,"receive":0,"ssl":253},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mp4.nymaite.cn/s/%E6%9E%AD%E5%AE%A03003/1.jpg","fqdn":"mp4.nymaite.cn","domain":"nymaite.cn","tld":"cn"},"ip":{"addr":"124.220.23.160","port":443,"asn":45090,"as":"Shenzhen Tencent Computer Systems Company Limited","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://guncelgirisadresim.vip/h5/","date":"2026-02-14T04:01:12.046Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.nymaite.cn","organization":""},"issuer":{"commonName":"Certum Domain Validation CA SHA2","organization":"Unizeto Technologies S.A."},"validity":{"start":"Tue, 05 Aug 2025 09:05:43 GMT","end":"Fri, 04 Sep 2026 09:05:42 GMT"},"fingerprint":{"sha1":"AD:39:9B:23:73:DD:9B:2E:E9:45:1E:28:EE:36:73:C0:1E:05:38:B0","sha256":"90:BD:79:83:21:77:FB:BA:19:00:B4:7F:4F:38:4E:85:4A:12:75:6B:1E:B1:B7:B4:5C:68:09:70:F5:17:66:60"}}},"request":{"raw":"GET /s/%E6%9E%AD%E5%AE%A03003/1.jpg HTTP/1.1\r\nHost: mp4.nymaite.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://guncelgirisadresim.vip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\nserver: nginx\r\ndate: Sat, 14 Feb 2026 04:01:12 GMT\r\ncontent-type: text/html\r\ncontent-length: 146\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-12T07:40:40.2056Z","times_seen":17851556,"resource_available":true,"data":null}},"time_used":945,"timings":{"blocked":490,"dns":0,"connect":0,"send":0,"wait":455,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mp4.nymaite.cn/s/%E6%8A%A2%E4%B8%AA%E4%B9%9E%E4%B8%90%E5%81%9A%E5%A4%AB%E5%90%9B2990/1.jpg","fqdn":"mp4.nymaite.cn","domain":"nymaite.cn","tld":"cn"},"ip":{"addr":"124.220.23.160","port":443,"asn":45090,"as":"Shenzhen Tencent Computer Systems Company Limited","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://guncelgirisadresim.vip/h5/","date":"2026-02-14T04:01:11.910Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.nymaite.cn","organization":""},"issuer":{"commonName":"Certum Domain Validation CA SHA2","organization":"Unizeto Technologies S.A."},"validity":{"start":"Tue, 05 Aug 2025 09:05:43 GMT","end":"Fri, 04 Sep 2026 09:05:42 GMT"},"fingerprint":{"sha1":"AD:39:9B:23:73:DD:9B:2E:E9:45:1E:28:EE:36:73:C0:1E:05:38:B0","sha256":"90:BD:79:83:21:77:FB:BA:19:00:B4:7F:4F:38:4E:85:4A:12:75:6B:1E:B1:B7:B4:5C:68:09:70:F5:17:66:60"}}},"request":{"raw":"GET /s/%E6%8A%A2%E4%B8%AA%E4%B9%9E%E4%B8%90%E5%81%9A%E5%A4%AB%E5%90%9B2990/1.jpg HTTP/1.1\r\nHost: mp4.nymaite.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://guncelgirisadresim.vip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\nserver: nginx\r\ndate: Sat, 14 Feb 2026 04:01:12 GMT\r\ncontent-type: text/html\r\ncontent-length: 146\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-12T07:40:40.2056Z","times_seen":17851556,"resource_available":true,"data":null}},"time_used":855,"timings":{"blocked":625,"dns":0,"connect":0,"send":0,"wait":230,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"guncelgirisadresim.vip/h5/static/favicon.png","fqdn":"guncelgirisadresim.vip","domain":"guncelgirisadresim.vip","tld":"vip"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://guncelgirisadresim.vip/h5/","date":"2026-02-14T04:01:13.021Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"guncelgirisadresim.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 01:04:40 GMT","end":"Mon, 06 Apr 2026 02:02:59 GMT"},"fingerprint":{"sha1":"43:32:64:70:6D:60:71:B1:59:71:49:F5:37:6D:83:51:E8:E7:D9:5D","sha256":"71:92:9B:3D:C6:F4:BC:BC:13:E3:35:3E:7C:B1:B5:11:4C:18:88:74:8E:07:6B:8F:F1:54:3F:F5:0B:1A:A5:B0"}}},"request":{"raw":"GET /h5/static/favicon.png HTTP/1.1\r\nHost: guncelgirisadresim.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://guncelgirisadresim.vip/h5/\r\nCookie: think_var=zh-tw\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 04:01:13 GMT\r\ncontent-type: image/png\r\nserver: cloudflare\r\nlast-modified: Tue, 19 Mar 2024 05:53:48 GMT\r\nvary: Accept-Encoding\r\netag: W/\"65f9286c-2a6c7\"\r\nexpires: Mon, 16 Mar 2026 04:01:13 GMT\r\ncache-control: max-age=2592000\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET,POST,OPTIONS\r\naccess-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept, token, platform\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\npriority: u=6,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oForg0YI3%2B0OtwIzCsMqabP9mpK%2Fl%2BlF24WNuCLQq8slqqIRiN7XBQyEy5wo5MBw1gasPFM72bH5LDI5C3CqKkwBMFB6v8%2B8%2BRFdTNEMi4umOkou7KM%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cd9a9b86fe3b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":173767,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 797 x 797, 8-bit/color RGBA, non-interlaced","md5":"3722a5abfe39e847b19beb1d1a41164d","sha1":"c51eeb17b191dcf1663564ab310ea5c29781a912","sha256":"b455a00cdfbe81e1a37a48e0b1d5433bcc29f8d63d91777dd8e7482a2e8ec312","sha512":"9c726c3672791bc6ed5ffc5fce34859dbf70488a22cb77e6f335654bda101eae99c221bf16eeb8b8c1355d44d0c509007cb62350c026cfd78139612ba0a32b9f","ssdeep":"3072:DirwKSPpTO9tOrXVYsTGNcpSN3znbrk4qXvz4XzcoMaKKPDgcs9Ken4URwj/:D7tKLCVrFSpXk5XvHoMaP7A+Ug","tlshash":"4004128762becca5df0f117d6a7f0e57944665b183fc2931e9c2714e7510e2e00b693a","first_seen":"2026-02-13T06:21:38.363259Z","last_seen":"2026-07-15T19:14:30.030401Z","times_seen":52,"resource_available":false,"data":null}},"time_used":525,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":267,"receive":258,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"guncelgirisadresim.vip/addons/dramas/index/init?platform=H5","fqdn":"guncelgirisadresim.vip","domain":"guncelgirisadresim.vip","tld":"vip"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://guncelgirisadresim.vip/h5/","date":"2026-02-14T04:01:11.033Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"guncelgirisadresim.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 01:04:40 GMT","end":"Mon, 06 Apr 2026 02:02:59 GMT"},"fingerprint":{"sha1":"43:32:64:70:6D:60:71:B1:59:71:49:F5:37:6D:83:51:E8:E7:D9:5D","sha256":"71:92:9B:3D:C6:F4:BC:BC:13:E3:35:3E:7C:B1:B5:11:4C:18:88:74:8E:07:6B:8F:F1:54:3F:F5:0B:1A:A5:B0"}}},"request":{"raw":"GET /addons/dramas/index/init?platform=H5 HTTP/1.1\r\nHost: guncelgirisadresim.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nToken: \r\nSign: \r\nLang: \r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://guncelgirisadresim.vip/h5/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 04:01:11 GMT\r\ncontent-type: application/json; charset=utf-8\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Mltt0VCrtZ%2F57WWybQKls%2Be%2BI7DrsacbwGpjlO5CRFLRKCNiScrRXBarvkuVR6X78ewVYTyVifCaPLLSQUWi5lLXffZQ8upfby7d9cKeoN00FAjGi4U%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cd9a9abfe74b1b8-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1490,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"3604f14ce08990dc2225bb3dd8cd9e1a","sha1":"8d0a393a71b32ab915e88cfd50175c5d8be0d213","sha256":"f89f322f8027a9c52ed6cc49801379040a3f215640ed5089d0f19778adc0b87e","sha512":"31e5a3cd5017354f5e1a3591813bcebc8e2e7277b321ed2258b695b781ff33923cb2506f9d507ce4d53e9490b77d9b2515bf1980d93486977da0da45d831f2d8","ssdeep":"","tlshash":"6e31747e6105cd4f02505bc8658f38b9c2ad1623cddc9a7aca48dd5c44f85acb223532","first_seen":"2026-02-14T04:01:33.466832Z","last_seen":"2026-02-14T04:01:33.466832Z","times_seen":1,"resource_available":false,"data":null}},"time_used":168,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":168,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"console.nymaite.cn/assets/js/mt4.js?t=20221","fqdn":"console.nymaite.cn","domain":"nymaite.cn","tld":"cn"},"ip":{"addr":"146.56.206.145","port":443,"asn":45090,"as":"Shenzhen Tencent Computer Systems Company Limited","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://guncelgirisadresim.vip/h5/","date":"2026-02-14T04:01:10.991Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.nymaite.cn","organization":""},"issuer":{"commonName":"Certum Domain Validation CA SHA2","organization":"Unizeto Technologies S.A."},"validity":{"start":"Tue, 05 Aug 2025 09:05:43 GMT","end":"Fri, 04 Sep 2026 09:05:42 GMT"},"fingerprint":{"sha1":"AD:39:9B:23:73:DD:9B:2E:E9:45:1E:28:EE:36:73:C0:1E:05:38:B0","sha256":"90:BD:79:83:21:77:FB:BA:19:00:B4:7F:4F:38:4E:85:4A:12:75:6B:1E:B1:B7:B4:5C:68:09:70:F5:17:66:60"}}},"request":{"raw":"GET /assets/js/mt4.js?t=20221 HTTP/1.1\r\nHost: console.nymaite.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://guncelgirisadresim.vip/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 14 Feb 2026 04:01:12 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 02 Jan 2024 09:29:52 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6593d790-14f5\"\r\nset-cookie: server_name_session=48d390272009a6f0f71d5de6ebbb4c4b; Max-Age=86400; httponly; path=/\r\nexpires: Sat, 14 Feb 2026 16:01:12 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5365,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (5365), with no line terminators","md5":"e7a84f3838ffb696a13b25cbce1097ca","sha1":"4e51dd57574070e6d796d4d452774ad53dc55386","sha256":"47f4f41faf980b1a7406ed6578be312f8e96394f49dbba1449f0db1c081bf61d","sha512":"cf67527e2df5ee28f20d6d0e7a04674c62f5c77d27648aa12dc0e6dad3d469541feee07e4d26b573aae602097a2425f74a2b808286f8247608476f5032e0d1d4","ssdeep":"48:fHN4fUVJYIArGLr7BXgsBwyAn8DBwp3zZfyxxEbMhOrJmQ/Nu3zQjlLcwZz:1ckrrVBwyAnOszFaeMhcn6zQjlzZ","tlshash":"bbb188cd30f6647197a7f1aa25c5430356f23499abd5f364b08ca50b07d4ca4b13b9af","first_seen":"2024-12-15T08:42:20.713612Z","last_seen":"2026-07-15T19:14:30.043216Z","times_seen":53,"resource_available":true,"data":null}},"time_used":2406,"timings":{"blocked":1083,"dns":322,"connect":263,"send":0,"wait":237,"receive":0,"ssl":498},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"guncelgirisadresim.vip/addons/dramas/block/index","fqdn":"guncelgirisadresim.vip","domain":"guncelgirisadresim.vip","tld":"vip"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://guncelgirisadresim.vip/h5/","date":"2026-02-14T04:01:11.606Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"guncelgirisadresim.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 01:04:40 GMT","end":"Mon, 06 Apr 2026 02:02:59 GMT"},"fingerprint":{"sha1":"43:32:64:70:6D:60:71:B1:59:71:49:F5:37:6D:83:51:E8:E7:D9:5D","sha256":"71:92:9B:3D:C6:F4:BC:BC:13:E3:35:3E:7C:B1:B5:11:4C:18:88:74:8E:07:6B:8F:F1:54:3F:F5:0B:1A:A5:B0"}}},"request":{"raw":"GET /addons/dramas/block/index HTTP/1.1\r\nHost: guncelgirisadresim.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nToken: \r\nSign: \r\nLang: zh-tw\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://guncelgirisadresim.vip/h5/\r\nCookie: think_var=zh-tw\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 04:01:11 GMT\r\ncontent-type: application/json; charset=utf-8\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KemUshMGr%2BGtmnJR2LYa4DDByQE%2BImeNs0kUYhi4pR2AuAHXBL5q%2ByAhxwasrNS4ue57u%2B3VmImIF62Qi8JMazA5NxdReyEmCEGt%2FV5FfIPg8t98ikQ%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cd9a9af8dcbb1b8-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":416,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"59bab18d3d0e5f6b42a6431dfc4084ca","sha1":"02d589ada6bb031913c8c47d2eee99188924cf10","sha256":"861f5ac667c215d98f2734ed7c459bd4ea3b61ef91b8c55926e23e5db54ca9f8","sha512":"bc203a7a052dca19163f935d1b40fbf11157658e1b043eace44a38b0389265ac5d6c703a179939ba6e2d24b3150becb11394baac293249080d434238989363db","ssdeep":"","tlshash":"d1e02bd00e2c1c5b5ac6b3f498d7308852ed12c214c45334790aec6084ed1ca87d52f3","first_seen":"2026-02-14T04:01:33.469265Z","last_seen":"2026-02-14T04:01:33.469265Z","times_seen":1,"resource_available":false,"data":null}},"time_used":170,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":169,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.dcloud.net.cn/img/shadow-grey.png","fqdn":"cdn.dcloud.net.cn","domain":"dcloud.net.cn","tld":"net.cn"},"ip":{"addr":"124.220.203.60","port":443,"asn":45090,"as":"Shenzhen Tencent Computer Systems Company Limited","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://guncelgirisadresim.vip/h5/","date":"2026-02-14T04:01:13.333Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.dcloud.net.cn","organization":""},"issuer":{"commonName":"Certum Domain Validation CA SHA2","organization":"Unizeto Technologies S.A."},"validity":{"start":"Tue, 26 Aug 2025 11:47:17 GMT","end":"Fri, 25 Sep 2026 11:47:16 GMT"},"fingerprint":{"sha1":"47:A7:6C:09:6B:1D:CA:2D:7D:39:2E:C1:7F:15:DE:5D:F2:C4:0F:77","sha256":"EA:73:37:83:D0:38:44:D9:3C:0B:26:F0:DD:D1:22:2F:36:F7:F2:86:A1:B0:58:52:DE:4E:0A:21:D6:89:E7:3E"}}},"request":{"raw":"GET /img/shadow-grey.png HTTP/1.1\r\nHost: cdn.dcloud.net.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://guncelgirisadresim.vip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 14 Feb 2026 04:01:14 GMT\r\ncontent-type: image/png\r\ncontent-length: 136\r\nlast-modified: Thu, 06 Jun 2019 06:42:07 GMT\r\netag: \"5cf8b5bf-88\"\r\nexpires: Sat, 14 Feb 2026 15:01:14 GMT\r\ncache-control: max-age=39600\r\nset-cookie: __uni__uid=rBEQiWmP84qcfq+QAwbaAg==; expires=Thu, 31-Dec-37 23:55:55 GMT; domain=dcloud.net.cn; path=/; secure; httponly; samesite=none\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":136,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1 x 6, 4-bit colormap, non-interlaced","md5":"5a962adf74d92ae702467b3f47976547","sha1":"36f74049375584e3fa69b5ef87e9572336ff9e7a","sha256":"ad4ebea1c3496dd2924789ee009174a2c6289d1200e9811f458fd46f172d1d6f","sha512":"4ace23fe7ec6c7271710030fd423aace13eafac68ac3e76366ce4ce9bdc702caf71c9bdc2fb6a32c8e9791546098617cc0259decd8bb8489afdbce43e1b53a73","ssdeep":"","tlshash":"47c09bf3a615dc754a0d153b42e98271f429511e07046d0e5a13c216741e3448d56793","first_seen":"2023-04-15T10:50:30Z","last_seen":"2026-08-12T06:21:37.540885Z","times_seen":20204,"resource_available":false,"data":null}},"time_used":1610,"timings":{"blocked":670,"dns":62,"connect":267,"send":0,"wait":269,"receive":0,"ssl":339},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"guncelgirisadresim.vip/h5/static/tabbar/watch_2_d.png","fqdn":"guncelgirisadresim.vip","domain":"guncelgirisadresim.vip","tld":"vip"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://guncelgirisadresim.vip/h5/","date":"2026-02-14T04:01:11.494Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"guncelgirisadresim.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 01:04:40 GMT","end":"Mon, 06 Apr 2026 02:02:59 GMT"},"fingerprint":{"sha1":"43:32:64:70:6D:60:71:B1:59:71:49:F5:37:6D:83:51:E8:E7:D9:5D","sha256":"71:92:9B:3D:C6:F4:BC:BC:13:E3:35:3E:7C:B1:B5:11:4C:18:88:74:8E:07:6B:8F:F1:54:3F:F5:0B:1A:A5:B0"}}},"request":{"raw":"GET /h5/static/tabbar/watch_2_d.png HTTP/1.1\r\nHost: guncelgirisadresim.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://guncelgirisadresim.vip/h5/\r\nCookie: think_var=zh-tw\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 04:01:11 GMT\r\ncontent-type: image/png\r\ncontent-length: 977\r\nserver: cloudflare\r\nlast-modified: Tue, 19 Mar 2024 05:53:48 GMT\r\netag: \"65f9286c-3d1\"\r\nexpires: Mon, 16 Mar 2026 04:01:11 GMT\r\ncache-control: max-age=2592000\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET,POST,OPTIONS\r\naccess-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept, token, platform\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gGlj4NDHfBImu3FJXyN6EyTXvyQtOe1Y%2FL8hQlY%2Fs%2BYHbHQAKfnZxIQO8avGodAPpSTV4EPzbH%2BskVOcYijzPH6DREiwSl7POJXhe1MQlakF99aFsAg%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cd9a9aedc10b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":977,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 50 x 50, 8-bit/color RGBA, non-interlaced","md5":"af3503f4338f17f74fdd0ac9694c799b","sha1":"a3e8402831d12cea58de5296e0a55749a8dc0b59","sha256":"061f29b13bf366b4beecd1ee940cb327567b280e63a97dc507680836bbff8baa","sha512":"b30aefa3be318bee8f787327483226e478baf92d3e2c0a8df0636e2e796a9419fe5243792cb9fde1e94b2f2ebf47b56be244c7792e1a594791a583658d5a2bdb","ssdeep":"","tlshash":"341198c77681ca5193cc70470d7d65055f1576d293908b5ece4d92b34d1b146cb8eaa3","first_seen":"2025-11-11T16:01:27.540922Z","last_seen":"2026-07-15T19:14:30.045939Z","times_seen":54,"resource_available":false,"data":null}},"time_used":392,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":392,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"guncelgirisadresim.vip/h5/static/js/pages-home-index.56a9dab0.js","fqdn":"guncelgirisadresim.vip","domain":"guncelgirisadresim.vip","tld":"vip"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://guncelgirisadresim.vip/h5/","date":"2026-02-14T04:01:11.008Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"guncelgirisadresim.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 01:04:40 GMT","end":"Mon, 06 Apr 2026 02:02:59 GMT"},"fingerprint":{"sha1":"43:32:64:70:6D:60:71:B1:59:71:49:F5:37:6D:83:51:E8:E7:D9:5D","sha256":"71:92:9B:3D:C6:F4:BC:BC:13:E3:35:3E:7C:B1:B5:11:4C:18:88:74:8E:07:6B:8F:F1:54:3F:F5:0B:1A:A5:B0"}}},"request":{"raw":"GET /h5/static/js/pages-home-index.56a9dab0.js HTTP/1.1\r\nHost: guncelgirisadresim.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://guncelgirisadresim.vip/h5/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 04:01:11 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Tue, 19 Mar 2024 05:53:48 GMT\r\nvary: Accept-Encoding\r\netag: W/\"65f9286c-9e2f\"\r\nexpires: Sat, 14 Feb 2026 16:01:11 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OxjYhu%2Byq8XoBkzP5FuvhbGlP2b3miHfJLZO2JSlgWKFToDiAQyOSuEK6893imCn1NERM2bDmU0PHK2Ry14US1IQ8MDxeJnFZPDELP6XRkQErVb4Ys4%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cd9a9abce09b1b8-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":40495,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (38325), with no line terminators","md5":"ddb308baab7c93e8e1ff4ec28b9da046","sha1":"d16c0468b237309901db65542daa0e78b1310e5d","sha256":"94eb2b215216984170378b31d008bd6bfa3ba7ef90d66c27ff9be9ebedc47f8f","sha512":"eefc6001da98e81607fee72bded98b3e23dd603692911855b9db861502a352520473d0b32ebe67c25373e24b9d71cc314e868becd2b9cae02551e8bcdd2a3216","ssdeep":"384:u7CQKu+5OAZ9ApJYdh8tFARjCPYhGDQPgEoSJKcZ+Vp4Owyb:uZKuE9AzYyqjCghjPzouKcZ4pP","tlshash":"a3030c2db14bb46b8dc39c1534ce591a11796e36e051b4c0f7f2c868caf1ada171af4e","first_seen":"2026-02-13T06:21:38.343168Z","last_seen":"2026-07-15T19:14:30.046775Z","times_seen":50,"resource_available":true,"data":null}},"time_used":136,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":136,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"guncelgirisadresim.vip/addons/dramas/video/home","fqdn":"guncelgirisadresim.vip","domain":"guncelgirisadresim.vip","tld":"vip"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://guncelgirisadresim.vip/h5/","date":"2026-02-14T04:01:11.610Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"guncelgirisadresim.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 01:04:40 GMT","end":"Mon, 06 Apr 2026 02:02:59 GMT"},"fingerprint":{"sha1":"43:32:64:70:6D:60:71:B1:59:71:49:F5:37:6D:83:51:E8:E7:D9:5D","sha256":"71:92:9B:3D:C6:F4:BC:BC:13:E3:35:3E:7C:B1:B5:11:4C:18:88:74:8E:07:6B:8F:F1:54:3F:F5:0B:1A:A5:B0"}}},"request":{"raw":"GET /addons/dramas/video/home HTTP/1.1\r\nHost: guncelgirisadresim.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nToken: \r\nSign: \r\nLang: zh-tw\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://guncelgirisadresim.vip/h5/\r\nCookie: think_var=zh-tw\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 04:01:11 GMT\r\ncontent-type: application/json; charset=utf-8\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Gmse3hLArr%2Fd1hHxnwr03aNuaRiiMb5aBSVKWW%2FyNCwm8c2u9uhoMTFRc%2F9sf%2B5Grp9MeDDx2Zrf7t00BNip6jABPRp7Wo2ZIDEfxM7qidJ3dZxmH%2F8%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cd9a9af9ddbb1b8-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":16727,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"95dd264561b78c04d208dd9edd65cc0f","sha1":"5edadd9db1825e755f5afd51353f21deb85af6c7","sha256":"8a25548f6a5f7f071186a053ca66ce230f2cf1165d29a55449ecc8ea766e3019","sha512":"7f0c017f4a6dc7ae791268035e17a2cc2888c4d209de9c018a14dc2aaf96b57bb67ee23a17848eec3dafe10c3a28a8b91ea666f20283b8f78531e0513f07f4ee","ssdeep":"96:LcXxJI3kN4gFkN404HQUKvYwl2SYCzZ49DHPATarm+gGf+37fXEjHPATwk51zMn+:oq6oFwTeg2TL52kKo0wGoR2Pe","tlshash":"917295d5cb7e0c2b170327f9adcb708a65fc619129dd9eb46e1bec28056449ec2c029b","first_seen":"2026-02-14T04:01:33.472334Z","last_seen":"2026-02-14T04:01:33.472334Z","times_seen":1,"resource_available":false,"data":null}},"time_used":180,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":180,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mp4.nymaite.cn/s/%E5%AB%A1%E5%A5%B3%E6%9C%AA%E5%A4%AE2984/1.jpg","fqdn":"mp4.nymaite.cn","domain":"nymaite.cn","tld":"cn"},"ip":{"addr":"124.220.23.160","port":443,"asn":45090,"as":"Shenzhen Tencent Computer Systems Company Limited","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://guncelgirisadresim.vip/h5/","date":"2026-02-14T04:01:12.036Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.nymaite.cn","organization":""},"issuer":{"commonName":"Certum Domain Validation CA SHA2","organization":"Unizeto Technologies S.A."},"validity":{"start":"Tue, 05 Aug 2025 09:05:43 GMT","end":"Fri, 04 Sep 2026 09:05:42 GMT"},"fingerprint":{"sha1":"AD:39:9B:23:73:DD:9B:2E:E9:45:1E:28:EE:36:73:C0:1E:05:38:B0","sha256":"90:BD:79:83:21:77:FB:BA:19:00:B4:7F:4F:38:4E:85:4A:12:75:6B:1E:B1:B7:B4:5C:68:09:70:F5:17:66:60"}}},"request":{"raw":"GET /s/%E5%AB%A1%E5%A5%B3%E6%9C%AA%E5%A4%AE2984/1.jpg HTTP/1.1\r\nHost: mp4.nymaite.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://guncelgirisadresim.vip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\nserver: nginx\r\ndate: Sat, 14 Feb 2026 04:01:12 GMT\r\ncontent-type: text/html\r\ncontent-length: 146\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-12T07:40:40.2056Z","times_seen":17851556,"resource_available":true,"data":null}},"time_used":955,"timings":{"blocked":499,"dns":0,"connect":0,"send":0,"wait":456,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"shortbox.cc/assets/js/mt4.js","fqdn":"shortbox.cc","domain":"shortbox.cc","tld":"cc"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://guncelgirisadresim.vip/h5/","date":"2026-02-14T04:01:11.117Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"shortbox.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 11 Jan 2026 05:01:11 GMT","end":"Sat, 11 Apr 2026 05:59:32 GMT"},"fingerprint":{"sha1":"61:72:5F:C9:D5:3C:A5:3A:9D:46:23:DA:37:03:F0:1D:87:36:67:EF","sha256":"77:8C:13:FF:79:AC:1B:28:3D:AD:8D:9E:92:82:3E:E8:54:E0:6B:94:CE:34:0B:3F:6A:18:14:AE:09:85:42:17"}}},"request":{"raw":"GET /assets/js/mt4.js HTTP/1.1\r\nHost: shortbox.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://guncelgirisadresim.vip/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 04:01:11 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Tue, 30 Dec 2025 06:58:37 GMT\r\nvary: Accept-Encoding\r\netag: \"6953781d-f5f\"\r\nexpires: Sat, 14 Feb 2026 15:04:35 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 3395\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zQn7FKJW6uSN1dGi0h9%2FRYmFl7JbX8YmMXVCGJNuEcyCCNB9N6wDmKdmsUQAO86%2BAXaEixP3n3RRpv74z%2BIzh%2Bd7mINJX4CklOHM\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cd9a9ac79b82efa-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3935,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"bc4c7b254531d15327af19df14b19199","sha1":"dbdd37067f44ee88c08691b0a6e4eaea2a18be84","sha256":"339c8ae9bb8706fa851b2df3f109e7bb7d9c067c0c74b2117ed07a5ab179e387","sha512":"4da5fed1d7e794219dbe8f7911c2e77a6177f3a91d78c3f219bc6df91411d2fa21252e280e9198674b0b546b3679c2a789e00606d4ce53dcae04eb9eb97dcdef","ssdeep":"","tlshash":"5c81f48d30fa1021885760fe1f8b71247425d01b6a5adf117e0e82499fd5739e3a7bde","first_seen":"2026-02-13T06:21:38.345895Z","last_seen":"2026-02-17T11:32:45.034531Z","times_seen":47,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"console.nymaite.cn/api/index/notify","fqdn":"console.nymaite.cn","domain":"nymaite.cn","tld":"cn"},"ip":{"addr":"146.56.206.145","port":443,"asn":45090,"as":"Shenzhen Tencent Computer Systems Company Limited","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://guncelgirisadresim.vip/h5/","date":"2026-02-14T04:01:12.383Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.nymaite.cn","organization":""},"issuer":{"commonName":"Certum Domain Validation CA SHA2","organization":"Unizeto Technologies S.A."},"validity":{"start":"Tue, 05 Aug 2025 09:05:43 GMT","end":"Fri, 04 Sep 2026 09:05:42 GMT"},"fingerprint":{"sha1":"AD:39:9B:23:73:DD:9B:2E:E9:45:1E:28:EE:36:73:C0:1E:05:38:B0","sha256":"90:BD:79:83:21:77:FB:BA:19:00:B4:7F:4F:38:4E:85:4A:12:75:6B:1E:B1:B7:B4:5C:68:09:70:F5:17:66:60"}}},"request":{"raw":"OPTIONS /api/index/notify HTTP/1.1\r\nHost: console.nymaite.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://guncelgirisadresim.vip/\r\nOrigin: https://guncelgirisadresim.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 14 Feb 2026 04:01:12 GMT\r\ncontent-type: text/html; charset=utf-8\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: https://guncelgirisadresim.vip\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 86400\r\naccess-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS\r\naccess-control-allow-headers: content-type\r\nset-cookie: server_name_session=48d390272009a6f0f71d5de6ebbb4c4b; Max-Age=86400; httponly; path=/\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-12T07:40:40.2056Z","times_seen":17851556,"resource_available":true,"data":null}},"time_used":244,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":244,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mp4.nymaite.cn/s/%E5%A5%91%E7%BA%A6%E5%9C%A3%E5%A5%B32989/1.jpg","fqdn":"mp4.nymaite.cn","domain":"nymaite.cn","tld":"cn"},"ip":{"addr":"124.220.23.160","port":443,"asn":45090,"as":"Shenzhen Tencent Computer Systems Company Limited","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://guncelgirisadresim.vip/h5/","date":"2026-02-14T04:01:12.047Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.nymaite.cn","organization":""},"issuer":{"commonName":"Certum Domain Validation CA SHA2","organization":"Unizeto Technologies S.A."},"validity":{"start":"Tue, 05 Aug 2025 09:05:43 GMT","end":"Fri, 04 Sep 2026 09:05:42 GMT"},"fingerprint":{"sha1":"AD:39:9B:23:73:DD:9B:2E:E9:45:1E:28:EE:36:73:C0:1E:05:38:B0","sha256":"90:BD:79:83:21:77:FB:BA:19:00:B4:7F:4F:38:4E:85:4A:12:75:6B:1E:B1:B7:B4:5C:68:09:70:F5:17:66:60"}}},"request":{"raw":"GET /s/%E5%A5%91%E7%BA%A6%E5%9C%A3%E5%A5%B32989/1.jpg HTTP/1.1\r\nHost: mp4.nymaite.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://guncelgirisadresim.vip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\nserver: nginx\r\ndate: Sat, 14 Feb 2026 04:01:12 GMT\r\ncontent-type: text/html\r\ncontent-length: 146\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-12T07:40:40.2056Z","times_seen":17851556,"resource_available":true,"data":null}},"time_used":945,"timings":{"blocked":489,"dns":0,"connect":0,"send":0,"wait":456,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"guncelgirisadresim.vip/h5/static/tabbar/home_2_s.png","fqdn":"guncelgirisadresim.vip","domain":"guncelgirisadresim.vip","tld":"vip"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://guncelgirisadresim.vip/h5/","date":"2026-02-14T04:01:11.492Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"guncelgirisadresim.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 01:04:40 GMT","end":"Mon, 06 Apr 2026 02:02:59 GMT"},"fingerprint":{"sha1":"43:32:64:70:6D:60:71:B1:59:71:49:F5:37:6D:83:51:E8:E7:D9:5D","sha256":"71:92:9B:3D:C6:F4:BC:BC:13:E3:35:3E:7C:B1:B5:11:4C:18:88:74:8E:07:6B:8F:F1:54:3F:F5:0B:1A:A5:B0"}}},"request":{"raw":"GET /h5/static/tabbar/home_2_s.png HTTP/1.1\r\nHost: guncelgirisadresim.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://guncelgirisadresim.vip/h5/\r\nCookie: think_var=zh-tw\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 04:01:11 GMT\r\ncontent-type: image/png\r\nserver: cloudflare\r\nlast-modified: Tue, 19 Mar 2024 05:53:48 GMT\r\nvary: Accept-Encoding\r\netag: W/\"65f9286c-52e\"\r\nexpires: Mon, 16 Mar 2026 04:01:11 GMT\r\ncache-control: max-age=2592000\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET,POST,OPTIONS\r\naccess-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept, token, platform\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jhpCp5L7CsrYcXWV1R%2FvKY2uqBofYxf%2BQZ8pNkL7ZeD%2FJQWkRoKx6wqbPp4n483cV5c6rd5Dx87RujuQf69q7tPYeExSb7ESBzuZg0Gn19S4WtHgzdg%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cd9a9aedc0eb1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1326,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 50 x 50, 8-bit/color RGBA, non-interlaced","md5":"86235a0d3058f1114bcaa5280b96db1f","sha1":"10c09a543d0c144fce9166302754e94a69e5d768","sha256":"b2a2613ef0394f0ac8a61b6ea31a2124c6107009f4493c3300fe8ac7260f71e6","sha512":"5edef86e91ac1a486c03b7112a2c8fe80748a9db5456af3e7c11b86605930ddf3e7b7fb22dac2647077587b535da0660234d1046f6bd91984db8b66a96aca4e0","ssdeep":"","tlshash":"6021c8cd2c315cdb51c6da6ba8a58ccead7cd22914208ff841a7067cf687629a0585ef","first_seen":"2025-11-11T16:01:27.540092Z","last_seen":"2026-07-15T19:14:30.049539Z","times_seen":54,"resource_available":false,"data":null}},"time_used":399,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":399,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mp4.nymaite.cn/s/%E5%8F%8C%E4%B8%96%E8%90%8C%E5%A6%832992/1.jpg","fqdn":"mp4.nymaite.cn","domain":"nymaite.cn","tld":"cn"},"ip":{"addr":"124.220.23.160","port":443,"asn":45090,"as":"Shenzhen Tencent Computer Systems Company Limited","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://guncelgirisadresim.vip/h5/","date":"2026-02-14T04:01:11.807Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.nymaite.cn","organization":""},"issuer":{"commonName":"Certum Domain Validation CA SHA2","organization":"Unizeto Technologies S.A."},"validity":{"start":"Tue, 05 Aug 2025 09:05:43 GMT","end":"Fri, 04 Sep 2026 09:05:42 GMT"},"fingerprint":{"sha1":"AD:39:9B:23:73:DD:9B:2E:E9:45:1E:28:EE:36:73:C0:1E:05:38:B0","sha256":"90:BD:79:83:21:77:FB:BA:19:00:B4:7F:4F:38:4E:85:4A:12:75:6B:1E:B1:B7:B4:5C:68:09:70:F5:17:66:60"}}},"request":{"raw":"GET /s/%E5%8F%8C%E4%B8%96%E8%90%8C%E5%A6%832992/1.jpg HTTP/1.1\r\nHost: mp4.nymaite.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://guncelgirisadresim.vip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\nserver: nginx\r\ndate: Sat, 14 Feb 2026 04:01:12 GMT\r\ncontent-type: text/html\r\ncontent-length: 146\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-12T07:40:40.2056Z","times_seen":17851556,"resource_available":true,"data":null}},"time_used":1967,"timings":{"blocked":787,"dns":257,"connect":258,"send":0,"wait":398,"receive":0,"ssl":262},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"console.nymaite.cn/api/index/notify","fqdn":"console.nymaite.cn","domain":"nymaite.cn","tld":"cn"},"ip":{"addr":"146.56.206.145","port":443,"asn":45090,"as":"Shenzhen Tencent Computer Systems Company Limited","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://guncelgirisadresim.vip/h5/","date":"2026-02-14T04:01:12.386Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.nymaite.cn","organization":""},"issuer":{"commonName":"Certum Domain Validation CA SHA2","organization":"Unizeto Technologies S.A."},"validity":{"start":"Tue, 05 Aug 2025 09:05:43 GMT","end":"Fri, 04 Sep 2026 09:05:42 GMT"},"fingerprint":{"sha1":"AD:39:9B:23:73:DD:9B:2E:E9:45:1E:28:EE:36:73:C0:1E:05:38:B0","sha256":"90:BD:79:83:21:77:FB:BA:19:00:B4:7F:4F:38:4E:85:4A:12:75:6B:1E:B1:B7:B4:5C:68:09:70:F5:17:66:60"}}},"request":{"raw":"OPTIONS /api/index/notify HTTP/1.1\r\nHost: console.nymaite.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://guncelgirisadresim.vip/\r\nOrigin: https://guncelgirisadresim.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 14 Feb 2026 04:01:12 GMT\r\ncontent-type: text/html; charset=utf-8\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: https://guncelgirisadresim.vip\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 86400\r\naccess-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS\r\naccess-control-allow-headers: content-type\r\nset-cookie: server_name_session=48d390272009a6f0f71d5de6ebbb4c4b; Max-Age=86400; httponly; path=/\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-12T07:40:40.2056Z","times_seen":17851556,"resource_available":true,"data":null}},"time_used":241,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":241,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"guncelgirisadresim.vip/h5/static/js/pages-home-index~pages-home-update~pages-home-user~pages-login-login~pages-login-register~pages-user~6ea07087.f6a1a659.js","fqdn":"guncelgirisadresim.vip","domain":"guncelgirisadresim.vip","tld":"vip"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://guncelgirisadresim.vip/h5/","date":"2026-02-14T04:01:11.004Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"guncelgirisadresim.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 01:04:40 GMT","end":"Mon, 06 Apr 2026 02:02:59 GMT"},"fingerprint":{"sha1":"43:32:64:70:6D:60:71:B1:59:71:49:F5:37:6D:83:51:E8:E7:D9:5D","sha256":"71:92:9B:3D:C6:F4:BC:BC:13:E3:35:3E:7C:B1:B5:11:4C:18:88:74:8E:07:6B:8F:F1:54:3F:F5:0B:1A:A5:B0"}}},"request":{"raw":"GET /h5/static/js/pages-home-index~pages-home-update~pages-home-user~pages-login-login~pages-login-register~pages-user~6ea07087.f6a1a659.js HTTP/1.1\r\nHost: guncelgirisadresim.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://guncelgirisadresim.vip/h5/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 04:01:11 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Tue, 19 Mar 2024 05:53:48 GMT\r\nvary: Accept-Encoding\r\netag: W/\"65f9286c-2d6a\"\r\nexpires: Sat, 14 Feb 2026 16:01:11 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DoLYQXZTwzKGnap3AOVI6sIY7ApqtGs6rnwIoylQouEGGSBVoTy20e%2BQlXZKh1EvayNgSQHHyFoDTBKvrWqY%2FS5OlOu1t76gck7wdeLKYLDuCp7Rx6I%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cd9a9abce02b1b8-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11626,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (10638), with no line terminators","md5":"f968f5ebabe97723b9a6b6abe65bbb99","sha1":"5e941745f7d67e38e267eb5302c01a97d5295114","sha256":"f75aa7d182f255e03520a42940582af9e1ed13ef41ca40a1838bad49109dabc9","sha512":"d71c6399491b9f704b5efc755d36e74018104a8e4224158ea57332f7ce1f6cca3f151d65982fbda89e25b653ca96032bea2aa8f6d8d02377b099e4a93b77937d","ssdeep":"192:twpIxPYPPXbzcvXqk0bevv9fgl4LIEUP46psIFoRsP6g383d5FoRsr:taIx6zQ0bkBnMEUw6pszpdsO","tlshash":"7732fa5df28eb4640ad7c050c91b814971673e1ce435a691ebe8c3fb86e1bce0657f18","first_seen":"2026-02-13T06:21:38.347144Z","last_seen":"2026-07-15T19:14:30.035741Z","times_seen":50,"resource_available":true,"data":null}},"time_used":401,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":401,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"guncelgirisadresim.vip/addons/dramas/index/notification","fqdn":"guncelgirisadresim.vip","domain":"guncelgirisadresim.vip","tld":"vip"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://guncelgirisadresim.vip/h5/","date":"2026-02-14T04:01:11.424Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"guncelgirisadresim.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 01:04:40 GMT","end":"Mon, 06 Apr 2026 02:02:59 GMT"},"fingerprint":{"sha1":"43:32:64:70:6D:60:71:B1:59:71:49:F5:37:6D:83:51:E8:E7:D9:5D","sha256":"71:92:9B:3D:C6:F4:BC:BC:13:E3:35:3E:7C:B1:B5:11:4C:18:88:74:8E:07:6B:8F:F1:54:3F:F5:0B:1A:A5:B0"}}},"request":{"raw":"GET /addons/dramas/index/notification HTTP/1.1\r\nHost: guncelgirisadresim.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nToken: \r\nSign: \r\nLang: zh-tw\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://guncelgirisadresim.vip/h5/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 04:01:11 GMT\r\ncontent-type: application/json; charset=utf-8\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0iD6hbIWY1%2FWooi3rY8z75Wu2510ABJQAusOOMIqgy4OkvK82BKdD5Ut%2FYd%2BuloOo65ztXO5SwnmNxYXPlds6lzk4lqTHrMr2l0Ej7r0ZK3NC%2BZ0uSs%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cd9a9ae6b40b1b8-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":49,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"6f1d71010f447ca32c5ca6888fe6553b","sha1":"8711ec5373198780b7c8c2e8bad4458400c4b667","sha256":"eb13a1c888188b243994ccedf4620d8575e8418f584921e44285e99ef915b90a","sha512":"9a395bec5b62c0f868f35cdff0161e53a2c5c6629a21b51362384b3af97268bf57fa6205c649c64d221a33ed27438222acd6510dd3f35ff8493363b3e3dc9afc","ssdeep":"","tlshash":"0890025524091c16045a906c918881c6015c50a2089643255e8b5d28814d1592515932","first_seen":"2026-02-14T04:01:33.481017Z","last_seen":"2026-02-14T04:01:33.481017Z","times_seen":1,"resource_available":false,"data":null}},"time_used":176,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":176,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"guncelgirisadresim.vip/addons/dramas/video/index?type=top","fqdn":"guncelgirisadresim.vip","domain":"guncelgirisadresim.vip","tld":"vip"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://guncelgirisadresim.vip/h5/","date":"2026-02-14T04:01:11.609Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"guncelgirisadresim.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 01:04:40 GMT","end":"Mon, 06 Apr 2026 02:02:59 GMT"},"fingerprint":{"sha1":"43:32:64:70:6D:60:71:B1:59:71:49:F5:37:6D:83:51:E8:E7:D9:5D","sha256":"71:92:9B:3D:C6:F4:BC:BC:13:E3:35:3E:7C:B1:B5:11:4C:18:88:74:8E:07:6B:8F:F1:54:3F:F5:0B:1A:A5:B0"}}},"request":{"raw":"GET /addons/dramas/video/index?type=top HTTP/1.1\r\nHost: guncelgirisadresim.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nToken: \r\nSign: \r\nLang: zh-tw\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://guncelgirisadresim.vip/h5/\r\nCookie: think_var=zh-tw\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 04:01:11 GMT\r\ncontent-type: application/json; charset=utf-8\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Il5bU%2BzbiznMmRkeY3gHRA7RwN0XOULSpaRRXSvV5bR2IOhwUTkAHBvIT9pyAqX79AsjCEnwte8Nhk8cFNa6%2FSsNka7QbLp4UEP57Gaj1PUSnBbRtic%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cd9a9af9dd7b1b8-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6286,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"42379e2349373fe5f67a4d3fd06b85fb","sha1":"1228959839f157f966828878b3c44a304d6a3d31","sha256":"fe19fdf25aada01946bde5ac3e8006397a4003ad412909d05a64a1bd9b7c12c1","sha512":"19120dd349e2fcfd919eb0b343e43f339c75b376d8006414ae33f63e4533ba9c841d8f00e6f7723a7b6541e3e43bd8ea3e25b737964d4b57e7bdf3795946588d","ssdeep":"96:F2xjy22xjzIycXVANgGAfaik1yKkbzbnFy8Q6m4Yp+okN40VkNp6YHPAQVHU8gQP:F2Z26dONNlCS6mN4ooVtYrbMk9","tlshash":"a8d14284ef7e5c26530317f96e97b44659fc62941a844bb59ebedc3c11a0caed3c0067","first_seen":"2026-02-14T04:01:33.483083Z","last_seen":"2026-02-14T04:01:33.483083Z","times_seen":1,"resource_available":false,"data":null}},"time_used":169,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":169,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mp4.nymaite.cn/s/%E5%BE%A1%E5%AE%A0%E7%94%9C%E5%A6%BB2999/1.jpg","fqdn":"mp4.nymaite.cn","domain":"nymaite.cn","tld":"cn"},"ip":{"addr":"124.220.23.160","port":443,"asn":45090,"as":"Shenzhen Tencent Computer Systems Company Limited","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://guncelgirisadresim.vip/h5/","date":"2026-02-14T04:01:11.800Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.nymaite.cn","organization":""},"issuer":{"commonName":"Certum Domain Validation CA SHA2","organization":"Unizeto Technologies S.A."},"validity":{"start":"Tue, 05 Aug 2025 09:05:43 GMT","end":"Fri, 04 Sep 2026 09:05:42 GMT"},"fingerprint":{"sha1":"AD:39:9B:23:73:DD:9B:2E:E9:45:1E:28:EE:36:73:C0:1E:05:38:B0","sha256":"90:BD:79:83:21:77:FB:BA:19:00:B4:7F:4F:38:4E:85:4A:12:75:6B:1E:B1:B7:B4:5C:68:09:70:F5:17:66:60"}}},"request":{"raw":"GET /s/%E5%BE%A1%E5%AE%A0%E7%94%9C%E5%A6%BB2999/1.jpg HTTP/1.1\r\nHost: mp4.nymaite.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://guncelgirisadresim.vip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\nserver: nginx\r\ndate: Sat, 14 Feb 2026 04:01:12 GMT\r\ncontent-type: text/html\r\ncontent-length: 146\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-12T07:40:40.2056Z","times_seen":17851556,"resource_available":true,"data":null}},"time_used":1940,"timings":{"blocked":755,"dns":262,"connect":236,"send":0,"wait":437,"receive":0,"ssl":247},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"guncelgirisadresim.vip/h5/static/icons/new.png","fqdn":"guncelgirisadresim.vip","domain":"guncelgirisadresim.vip","tld":"vip"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://guncelgirisadresim.vip/h5/","date":"2026-02-14T04:01:11.805Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"guncelgirisadresim.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 01:04:40 GMT","end":"Mon, 06 Apr 2026 02:02:59 GMT"},"fingerprint":{"sha1":"43:32:64:70:6D:60:71:B1:59:71:49:F5:37:6D:83:51:E8:E7:D9:5D","sha256":"71:92:9B:3D:C6:F4:BC:BC:13:E3:35:3E:7C:B1:B5:11:4C:18:88:74:8E:07:6B:8F:F1:54:3F:F5:0B:1A:A5:B0"}}},"request":{"raw":"GET /h5/static/icons/new.png HTTP/1.1\r\nHost: guncelgirisadresim.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://guncelgirisadresim.vip/h5/\r\nCookie: think_var=zh-tw\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 04:01:11 GMT\r\ncontent-type: image/png\r\nserver: cloudflare\r\nlast-modified: Tue, 19 Mar 2024 05:53:48 GMT\r\nvary: Accept-Encoding\r\netag: W/\"65f9286c-766\"\r\nexpires: Mon, 16 Mar 2026 04:01:11 GMT\r\ncache-control: max-age=2592000\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET,POST,OPTIONS\r\naccess-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept, token, platform\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IgwbfEuuChH5rGjR%2FpUWirMHRXyOY46eWBirElqBlg%2FG26%2FbjahbilEs345lIFPqrgepGTh8FBmb5bMgEVef6RXCkeVdfwC%2BM8w%2FW7Ui8zHAbKPLyJg%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cd9a9b0c828b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1894,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 90 x 38, 8-bit/color RGBA, non-interlaced","md5":"cbe85e96f04cff3f137614f0f97f3698","sha1":"eae4f014fce9d20525ffd69b3451b1b152516628","sha256":"6aa32357ddb383df184a87bbae39a4a506bf515f0183ec54eec8c7a81676f382","sha512":"9f49615c36d1f41f6fdafd7f56939af7ac98215d334bcc2a3e4e661ae807af94d820f4ecbe4b6760a6b9342ffefaeb2eeff5823c84d2858978bd4eeca6bc6e71","ssdeep":"","tlshash":"894119a811a5102bf1e1da32f4c941c9ba337d2b0370b341fe454b0b152f986ae6e11f","first_seen":"2025-11-11T16:01:27.554234Z","last_seen":"2026-07-15T19:14:30.03442Z","times_seen":55,"resource_available":false,"data":null}},"time_used":137,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":136,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"guncelgirisadresim.vip/h5/static/js/index.83fb5993.js","fqdn":"guncelgirisadresim.vip","domain":"guncelgirisadresim.vip","tld":"vip"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://guncelgirisadresim.vip/h5/","date":"2026-02-14T04:01:09.777Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"guncelgirisadresim.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 01:04:40 GMT","end":"Mon, 06 Apr 2026 02:02:59 GMT"},"fingerprint":{"sha1":"43:32:64:70:6D:60:71:B1:59:71:49:F5:37:6D:83:51:E8:E7:D9:5D","sha256":"71:92:9B:3D:C6:F4:BC:BC:13:E3:35:3E:7C:B1:B5:11:4C:18:88:74:8E:07:6B:8F:F1:54:3F:F5:0B:1A:A5:B0"}}},"request":{"raw":"GET /h5/static/js/index.83fb5993.js HTTP/1.1\r\nHost: guncelgirisadresim.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://guncelgirisadresim.vip/h5/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 04:01:10 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Tue, 30 Dec 2025 10:24:10 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6953a84a-52872\"\r\nexpires: Sat, 14 Feb 2026 16:01:10 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yo3QXjf1iWezfOVqINPVuugmJOB2REqeWCvzsRme65gUTXyHHTunL8lJyTOtXGYbhvFEdQuH9Z5MBEZ2Y89SHYPpS2wMzXj%2BQbmmRnMymonHF2%2FL90A%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cd9a9a41f68b1b8-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":338034,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (63484), with no line terminators","md5":"624422174cd245eba28adf099b2131af","sha1":"623aff76cd4f7c5298c382834a793be8807e5e38","sha256":"839510056780d689964182273620ea4d80839b41b54a9666fd12f9e490b9735f","sha512":"9bc9379c78d35fa6c46358b5263b9e52290197a76e72781ea7bcec0208554f5f4203817754677c3b21045bac9c2b425f19b3dccbf2216d3d6dce532769484c2d","ssdeep":"6144:t8OYsWZlM2bJAAih854mny3oWoqIVnqWcusFNYUml+P4BO4KaaG:t8OYfZlM2bGAB54m6oFRYWcuISUml+PQ","tlshash":"ae747db93199fdef0ad32494081fa2016d6e3d67445ef481fbf5cac48e1eb491226f28","first_seen":"2026-02-14T03:05:48.943391Z","last_seen":"2026-02-14T04:01:33.486038Z","times_seen":2,"resource_available":false,"data":null}},"time_used":796,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":531,"receive":265,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"guncelgirisadresim.vip/h5/static/js/pages-home-index~pages-user-share-withdraw.23d61766.js","fqdn":"guncelgirisadresim.vip","domain":"guncelgirisadresim.vip","tld":"vip"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://guncelgirisadresim.vip/h5/","date":"2026-02-14T04:01:11.006Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"guncelgirisadresim.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 01:04:40 GMT","end":"Mon, 06 Apr 2026 02:02:59 GMT"},"fingerprint":{"sha1":"43:32:64:70:6D:60:71:B1:59:71:49:F5:37:6D:83:51:E8:E7:D9:5D","sha256":"71:92:9B:3D:C6:F4:BC:BC:13:E3:35:3E:7C:B1:B5:11:4C:18:88:74:8E:07:6B:8F:F1:54:3F:F5:0B:1A:A5:B0"}}},"request":{"raw":"GET /h5/static/js/pages-home-index~pages-user-share-withdraw.23d61766.js HTTP/1.1\r\nHost: guncelgirisadresim.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://guncelgirisadresim.vip/h5/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 04:01:11 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Tue, 19 Mar 2024 05:53:48 GMT\r\nvary: Accept-Encoding\r\netag: W/\"65f9286c-3121\"\r\nexpires: Sat, 14 Feb 2026 16:01:11 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LKBLBz0%2BytdztVUY1SS0vFEihUkhhcM0lBGg%2Bt4IptRwmYZjt2sxrGPYgk6WIlupvkA8vaHQXx%2BNMlv7QKGUXzu4a%2FFaeaXhqsWpZePPiBOMrRMYMkI%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cd9a9abce06b1b8-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":12577,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (11589), with no line terminators","md5":"7e66177696f3b8d8babe77eee46ef564","sha1":"3be69793038e4477e3751d6846d1bb02c1b3c314","sha256":"1e02b8ebaee2108df885ec75bd321adddb207b992899e15f977f002b66083f95","sha512":"7d27b6de82c5cec1a1cd8a841e968d18fd7ad31f35a255d4da4c36db3c714a67ffc5ef09e0f48515fcbc599f22cfb7e123f8618bf6f3a9056ce90716f4b4c93b","ssdeep":"192:19zLPlqIdoRsAhBpDT98dM21g0wSrew/0F+Mg98D7hH5oRs669qz:PlqBzwgZi/LqDQC9qz","tlshash":"4342b55fb1def42348e36454146b220a32662d5c84193190dff2d7ee8baaa4f07a7f5c","first_seen":"2026-02-13T06:21:38.357189Z","last_seen":"2026-07-15T19:14:30.031531Z","times_seen":50,"resource_available":true,"data":null}},"time_used":136,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":136,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"guncelgirisadresim.vip/addons/dramas/index/lang_data?lang=zh-tw","fqdn":"guncelgirisadresim.vip","domain":"guncelgirisadresim.vip","tld":"vip"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://guncelgirisadresim.vip/h5/","date":"2026-02-14T04:01:11.271Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"guncelgirisadresim.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 01:04:40 GMT","end":"Mon, 06 Apr 2026 02:02:59 GMT"},"fingerprint":{"sha1":"43:32:64:70:6D:60:71:B1:59:71:49:F5:37:6D:83:51:E8:E7:D9:5D","sha256":"71:92:9B:3D:C6:F4:BC:BC:13:E3:35:3E:7C:B1:B5:11:4C:18:88:74:8E:07:6B:8F:F1:54:3F:F5:0B:1A:A5:B0"}}},"request":{"raw":"GET /addons/dramas/index/lang_data?lang=zh-tw HTTP/1.1\r\nHost: guncelgirisadresim.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nToken: \r\nSign: \r\nLang: zh-tw\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://guncelgirisadresim.vip/h5/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 04:01:11 GMT\r\ncontent-type: application/json; charset=utf-8\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nset-cookie: think_var=zh-tw; path=/\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ex6QBVXZoDabRTfI62kILelWu5viNDACXIu7Jt1LPBRBY9LyMQlF8oKxyfG%2FxOiVQ1pr3jd%2FQDdEt%2BGIfny7J4%2Bxu71N36pmdqYLsBoSFwARuHantqM%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cd9a9ad78fdb1b8-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":28088,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"Unicode text, UTF-8 text, with very long lines (20127), with no line terminators","md5":"420f3184debd33a9813fd87a7f5edd3c","sha1":"e172d5c011d0f4e3c1b501f836172de3b588e840","sha256":"bf0c40956b50e9e75d50fa3f5e9f2c09f3b3c3e64b4ea3efb9468e60c94941e5","sha512":"8aa38e6bf8882cc6f6f03e3de076ba11defc2613fb79fc167c500b41728a72a6bbb1f2988ad14aa8bcd8285a5aade78a61f9f0342b5f279d3a2f8d70956095f5","ssdeep":"384:MTTcv9q/+TRqCsHBGKQuGwOSIcItCNgi/XpWlUl3tS88+BjRaVUDJ/Ku9omlq+:Mcv9q2TRqCWCjwOS2g54lUl3t2uFDYZ+","tlshash":"ebc22989455e9ebb4fc010c6b00e0d8375e812e592e6c95fa8bdbf4c5e5c917a2fba00","first_seen":"2026-02-14T04:01:33.488627Z","last_seen":"2026-02-14T04:01:33.488627Z","times_seen":1,"resource_available":false,"data":null}},"time_used":170,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":170,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"guncelgirisadresim.vip/addons/dramas/index/lang_list","fqdn":"guncelgirisadresim.vip","domain":"guncelgirisadresim.vip","tld":"vip"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://guncelgirisadresim.vip/h5/","date":"2026-02-14T04:01:11.426Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"guncelgirisadresim.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 01:04:40 GMT","end":"Mon, 06 Apr 2026 02:02:59 GMT"},"fingerprint":{"sha1":"43:32:64:70:6D:60:71:B1:59:71:49:F5:37:6D:83:51:E8:E7:D9:5D","sha256":"71:92:9B:3D:C6:F4:BC:BC:13:E3:35:3E:7C:B1:B5:11:4C:18:88:74:8E:07:6B:8F:F1:54:3F:F5:0B:1A:A5:B0"}}},"request":{"raw":"GET /addons/dramas/index/lang_list HTTP/1.1\r\nHost: guncelgirisadresim.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nToken: \r\nSign: \r\nLang: zh-tw\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://guncelgirisadresim.vip/h5/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 04:01:11 GMT\r\ncontent-type: application/json; charset=utf-8\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6UROEorLkQcl8xIc1Q80fURAVihQB9e7udgFi60CdAgGq3TQqrPAghD95ZAoaJJKiYbu8rJazaGdffJLV9K9gpUJeIazpSszNtp7rHiNjGVtTtuxUPI%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cd9a9ae6b4ab1b8-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":434,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"3c53e26c6de6d84fece1cbbd61ff5b3b","sha1":"ed02dd90caded0a36079d606abd5568f2d34bed1","sha256":"e1cad3684b12b667c720576cfb2c4ea308b11a8736cc6e1fa5bf6da23b0c20c2","sha512":"6da570c026cf70fe5b2f279b25f8137407d774c16c6f69b8996cca337c8cfe498c8a17dffe17eb1ea638b80de14da317b2a134e91003420993ad54cd4c688582","ssdeep":"","tlshash":"6be0e5a0d7a51cbac067a031594ade09257d5001bbcce9795fbe8f898d083e0820fcf2","first_seen":"2026-02-14T04:01:33.490422Z","last_seen":"2026-02-14T04:01:33.490422Z","times_seen":1,"resource_available":false,"data":null}},"time_used":170,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":170,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mp4.nymaite.cn/s/%E7%89%B9%E5%B7%A5%E7%8E%8B%E5%A6%832994/1.jpg","fqdn":"mp4.nymaite.cn","domain":"nymaite.cn","tld":"cn"},"ip":{"addr":"124.220.23.160","port":443,"asn":45090,"as":"Shenzhen Tencent Computer Systems Company Limited","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://guncelgirisadresim.vip/h5/","date":"2026-02-14T04:01:11.886Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.nymaite.cn","organization":""},"issuer":{"commonName":"Certum Domain Validation CA SHA2","organization":"Unizeto Technologies S.A."},"validity":{"start":"Tue, 05 Aug 2025 09:05:43 GMT","end":"Fri, 04 Sep 2026 09:05:42 GMT"},"fingerprint":{"sha1":"AD:39:9B:23:73:DD:9B:2E:E9:45:1E:28:EE:36:73:C0:1E:05:38:B0","sha256":"90:BD:79:83:21:77:FB:BA:19:00:B4:7F:4F:38:4E:85:4A:12:75:6B:1E:B1:B7:B4:5C:68:09:70:F5:17:66:60"}}},"request":{"raw":"GET /s/%E7%89%B9%E5%B7%A5%E7%8E%8B%E5%A6%832994/1.jpg HTTP/1.1\r\nHost: mp4.nymaite.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://guncelgirisadresim.vip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\nserver: nginx\r\ndate: Sat, 14 Feb 2026 04:01:12 GMT\r\ncontent-type: text/html\r\ncontent-length: 146\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-12T07:40:40.2056Z","times_seen":17851556,"resource_available":true,"data":null}},"time_used":887,"timings":{"blocked":-1,"dns":192,"connect":229,"send":0,"wait":229,"receive":1,"ssl":236},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mp4.nymaite.cn/s/%E7%A9%BF%E8%B6%8A%E7%94%9F%E5%AD%98%E6%94%BB%E7%95%A52983/1.jpg","fqdn":"mp4.nymaite.cn","domain":"nymaite.cn","tld":"cn"},"ip":{"addr":"124.220.23.160","port":443,"asn":45090,"as":"Shenzhen Tencent Computer Systems Company Limited","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://guncelgirisadresim.vip/h5/","date":"2026-02-14T04:01:12.040Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.nymaite.cn","organization":""},"issuer":{"commonName":"Certum Domain Validation CA SHA2","organization":"Unizeto Technologies S.A."},"validity":{"start":"Tue, 05 Aug 2025 09:05:43 GMT","end":"Fri, 04 Sep 2026 09:05:42 GMT"},"fingerprint":{"sha1":"AD:39:9B:23:73:DD:9B:2E:E9:45:1E:28:EE:36:73:C0:1E:05:38:B0","sha256":"90:BD:79:83:21:77:FB:BA:19:00:B4:7F:4F:38:4E:85:4A:12:75:6B:1E:B1:B7:B4:5C:68:09:70:F5:17:66:60"}}},"request":{"raw":"GET /s/%E7%A9%BF%E8%B6%8A%E7%94%9F%E5%AD%98%E6%94%BB%E7%95%A52983/1.jpg HTTP/1.1\r\nHost: mp4.nymaite.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://guncelgirisadresim.vip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\nserver: nginx\r\ndate: Sat, 14 Feb 2026 04:01:12 GMT\r\ncontent-type: text/html\r\ncontent-length: 146\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-12T07:40:40.2056Z","times_seen":17851556,"resource_available":true,"data":null}},"time_used":951,"timings":{"blocked":496,"dns":0,"connect":0,"send":0,"wait":455,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"console.nymaite.cn/assets/js/mt4.js?t=10112","fqdn":"console.nymaite.cn","domain":"nymaite.cn","tld":"cn"},"ip":{"addr":"146.56.206.145","port":443,"asn":45090,"as":"Shenzhen Tencent Computer Systems Company Limited","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://guncelgirisadresim.vip/h5/","date":"2026-02-14T04:01:10.960Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.nymaite.cn","organization":""},"issuer":{"commonName":"Certum Domain Validation CA SHA2","organization":"Unizeto Technologies S.A."},"validity":{"start":"Tue, 05 Aug 2025 09:05:43 GMT","end":"Fri, 04 Sep 2026 09:05:42 GMT"},"fingerprint":{"sha1":"AD:39:9B:23:73:DD:9B:2E:E9:45:1E:28:EE:36:73:C0:1E:05:38:B0","sha256":"90:BD:79:83:21:77:FB:BA:19:00:B4:7F:4F:38:4E:85:4A:12:75:6B:1E:B1:B7:B4:5C:68:09:70:F5:17:66:60"}}},"request":{"raw":"GET /assets/js/mt4.js?t=10112 HTTP/1.1\r\nHost: console.nymaite.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://guncelgirisadresim.vip/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 14 Feb 2026 04:01:12 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 02 Jan 2024 09:29:52 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6593d790-14f5\"\r\nset-cookie: server_name_session=48d390272009a6f0f71d5de6ebbb4c4b; Max-Age=86400; httponly; path=/\r\nexpires: Sat, 14 Feb 2026 16:01:12 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5365,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (5365), with no line terminators","md5":"e7a84f3838ffb696a13b25cbce1097ca","sha1":"4e51dd57574070e6d796d4d452774ad53dc55386","sha256":"47f4f41faf980b1a7406ed6578be312f8e96394f49dbba1449f0db1c081bf61d","sha512":"cf67527e2df5ee28f20d6d0e7a04674c62f5c77d27648aa12dc0e6dad3d469541feee07e4d26b573aae602097a2425f74a2b808286f8247608476f5032e0d1d4","ssdeep":"48:fHN4fUVJYIArGLr7BXgsBwyAn8DBwp3zZfyxxEbMhOrJmQ/Nu3zQjlLcwZz:1ckrrVBwyAnOszFaeMhcn6zQjlzZ","tlshash":"bbb188cd30f6647197a7f1aa25c5430356f23499abd5f364b08ca50b07d4ca4b13b9af","first_seen":"2024-12-15T08:42:20.713612Z","last_seen":"2026-07-15T19:14:30.043216Z","times_seen":53,"resource_available":true,"data":null}},"time_used":2464,"timings":{"blocked":1113,"dns":350,"connect":273,"send":0,"wait":237,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"guncelgirisadresim.vip/h5/static/icons/rank.png","fqdn":"guncelgirisadresim.vip","domain":"guncelgirisadresim.vip","tld":"vip"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://guncelgirisadresim.vip/h5/","date":"2026-02-14T04:01:11.487Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"guncelgirisadresim.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 01:04:40 GMT","end":"Mon, 06 Apr 2026 02:02:59 GMT"},"fingerprint":{"sha1":"43:32:64:70:6D:60:71:B1:59:71:49:F5:37:6D:83:51:E8:E7:D9:5D","sha256":"71:92:9B:3D:C6:F4:BC:BC:13:E3:35:3E:7C:B1:B5:11:4C:18:88:74:8E:07:6B:8F:F1:54:3F:F5:0B:1A:A5:B0"}}},"request":{"raw":"GET /h5/static/icons/rank.png HTTP/1.1\r\nHost: guncelgirisadresim.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://guncelgirisadresim.vip/h5/\r\nCookie: think_var=zh-tw\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 04:01:11 GMT\r\ncontent-type: image/png\r\ncontent-length: 761\r\nserver: cloudflare\r\nlast-modified: Tue, 19 Mar 2024 05:53:48 GMT\r\netag: \"65f9286c-2f9\"\r\nexpires: Mon, 16 Mar 2026 04:01:11 GMT\r\ncache-control: max-age=2592000\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET,POST,OPTIONS\r\naccess-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept, token, platform\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=z8n0Iv8qn6bNTI7orT0RVLeiJozB4M%2FpxcX2%2BDEVBynvKxEI6RuOYHPmRpYnNNAvyRPIz7vM%2FqdEx5AsJC8QFv4IHUaeWUdZyxGx8npkwkNxU9IWUVk%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cd9a9aecc05b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":761,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 44, 8-bit/color RGBA, non-interlaced","md5":"feba139cbd5d8dcab4665ab0612895b3","sha1":"4a3cae6d5ef30c5a149a8b738c8bdfee14af97ff","sha256":"295d784b083cf8d9d94aaf8667a0c3443c8ee49a402e8b765d95760c10a00f2d","sha512":"e46e2dfa026eeba31568785ddedf049f9ca55cb4580e53e64dff8f3baf62036f38de62f4ab4de7d496208308801a0a4b43bd250fe98d8e200a8d3efba46f85bc","ssdeep":"","tlshash":"7801754a8b8868148b46c2214f0fdc9e7450fd1b216c218695759501e47a2773944022","first_seen":"2024-11-30T21:11:26.074524Z","last_seen":"2026-07-15T19:14:30.044152Z","times_seen":51,"resource_available":false,"data":null}},"time_used":139,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":138,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"guncelgirisadresim.vip/h5/static/icons/hot.png","fqdn":"guncelgirisadresim.vip","domain":"guncelgirisadresim.vip","tld":"vip"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://guncelgirisadresim.vip/h5/","date":"2026-02-14T04:01:11.861Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"guncelgirisadresim.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 01:04:40 GMT","end":"Mon, 06 Apr 2026 02:02:59 GMT"},"fingerprint":{"sha1":"43:32:64:70:6D:60:71:B1:59:71:49:F5:37:6D:83:51:E8:E7:D9:5D","sha256":"71:92:9B:3D:C6:F4:BC:BC:13:E3:35:3E:7C:B1:B5:11:4C:18:88:74:8E:07:6B:8F:F1:54:3F:F5:0B:1A:A5:B0"}}},"request":{"raw":"GET /h5/static/icons/hot.png HTTP/1.1\r\nHost: guncelgirisadresim.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://guncelgirisadresim.vip/h5/\r\nCookie: think_var=zh-tw\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 04:01:11 GMT\r\ncontent-type: image/png\r\ncontent-length: 580\r\nserver: cloudflare\r\nlast-modified: Tue, 19 Mar 2024 05:53:48 GMT\r\netag: \"65f9286c-244\"\r\nexpires: Mon, 16 Mar 2026 04:01:11 GMT\r\ncache-control: max-age=2592000\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET,POST,OPTIONS\r\naccess-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept, token, platform\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wScuqJIdZW0OVjgDgtwKmGmU8jcJ9ZZAMkUYnVPZWBiH%2F45AofZ%2FScMjWcWqcudJdJ9XnKUfejtxbC%2BAfT%2BoKmTfbC9naSB79qt4ZldLb2RICFhq4UU%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cd9a9b128e2b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":580,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 22 x 22, 8-bit/color RGBA, non-interlaced","md5":"3ea5faad5a6b6fb16c0670f5620a8591","sha1":"e0d318893c9122dc8850b3e9e4a76698c4c1962c","sha256":"0cb3acb84a0a56fa06aad389d72f5aef239b17b75cd368931a6000ae8c215a48","sha512":"049ccb5594717df954e0559b6f6e06a13aeb39a39198c1cf4f2b6183d8d3bdde48e957327ed0d15114d4f6df9eff18e588216a70dc31985600be7950ab6f15b5","ssdeep":"","tlshash":"2af00cc2961d12bc5f9886e5f6670af520764bf55d0cb80c36b19425ee92c862b270a9","first_seen":"2024-11-30T21:11:26.076359Z","last_seen":"2026-07-15T19:14:30.050442Z","times_seen":56,"resource_available":false,"data":null}},"time_used":134,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":134,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"guncelgirisadresim.vip/h5/static/index.2da1efab.css","fqdn":"guncelgirisadresim.vip","domain":"guncelgirisadresim.vip","tld":"vip"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://guncelgirisadresim.vip/h5/","date":"2026-02-14T04:01:09.775Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"guncelgirisadresim.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 01:04:40 GMT","end":"Mon, 06 Apr 2026 02:02:59 GMT"},"fingerprint":{"sha1":"43:32:64:70:6D:60:71:B1:59:71:49:F5:37:6D:83:51:E8:E7:D9:5D","sha256":"71:92:9B:3D:C6:F4:BC:BC:13:E3:35:3E:7C:B1:B5:11:4C:18:88:74:8E:07:6B:8F:F1:54:3F:F5:0B:1A:A5:B0"}}},"request":{"raw":"GET /h5/static/index.2da1efab.css HTTP/1.1\r\nHost: guncelgirisadresim.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://guncelgirisadresim.vip/h5/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 04:01:10 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Tue, 19 Mar 2024 05:53:48 GMT\r\nvary: Accept-Encoding\r\netag: W/\"65f9286c-178f9\"\r\nexpires: Sat, 14 Feb 2026 16:01:10 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=grFaocn%2B8OC8b6gMOkF768ltTcZRIJ3YYby3b2o6liG5ClsiFHMcNe0bRxM2N0k6B5FpCvhuF8hUGqF57T%2FvwBh6ZGpTKIMLhHjDAHPYmPicbPDfJ4Q%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cd9a9a41f65b1b8-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":96505,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"73ae6c583d02d78f81e3f18860a2899a","sha1":"07df9233fc11dddc34fbf519b891d40b2ac29c0f","sha256":"e97de9a247807f12d74101e9f736250b2410be4e1ed3d17ed875e4b08cf66c83","sha512":"da54ba9dbe06d8d763f3cfd64cf5babb54e761e3208c7a2f23e845290c48db8c115bb86c24262cd6c9a96ff2e51674c6d86439e1814baf2de7980f5c06349921","ssdeep":"1536:OlIApuK7hmVmb2RS1Wu3xdynGJ7eh/nKhlvbc:VApuK7hmVrS1Wu3iG41nKPI","tlshash":"1893f73719012e39e52bcd26b6c1ab5a1e61c033e15307adfba47628cbcf9c9167b345","first_seen":"2024-01-02T00:07:11Z","last_seen":"2026-08-11T07:58:49.161697Z","times_seen":6425,"resource_available":false,"data":null}},"time_used":513,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":510,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mp4.nymaite.cn/s/%E7%8E%8B%E7%89%8C%E5%AE%AB%E5%A5%B32996/1.jpg","fqdn":"mp4.nymaite.cn","domain":"nymaite.cn","tld":"cn"},"ip":{"addr":"124.220.23.160","port":443,"asn":45090,"as":"Shenzhen Tencent Computer Systems Company Limited","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://guncelgirisadresim.vip/h5/","date":"2026-02-14T04:01:11.854Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.nymaite.cn","organization":""},"issuer":{"commonName":"Certum Domain Validation CA SHA2","organization":"Unizeto Technologies S.A."},"validity":{"start":"Tue, 05 Aug 2025 09:05:43 GMT","end":"Fri, 04 Sep 2026 09:05:42 GMT"},"fingerprint":{"sha1":"AD:39:9B:23:73:DD:9B:2E:E9:45:1E:28:EE:36:73:C0:1E:05:38:B0","sha256":"90:BD:79:83:21:77:FB:BA:19:00:B4:7F:4F:38:4E:85:4A:12:75:6B:1E:B1:B7:B4:5C:68:09:70:F5:17:66:60"}}},"request":{"raw":"GET /s/%E7%8E%8B%E7%89%8C%E5%AE%AB%E5%A5%B32996/1.jpg HTTP/1.1\r\nHost: mp4.nymaite.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://guncelgirisadresim.vip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\nserver: nginx\r\ndate: Sat, 14 Feb 2026 04:01:12 GMT\r\ncontent-type: text/html\r\ncontent-length: 146\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-12T07:40:40.2056Z","times_seen":17851556,"resource_available":true,"data":null}},"time_used":1874,"timings":{"blocked":743,"dns":208,"connect":265,"send":0,"wait":395,"receive":0,"ssl":260},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mp4.nymaite.cn/s/%E5%8F%8C%E4%B8%96%E8%90%8C%E5%A6%8322993/1.jpg","fqdn":"mp4.nymaite.cn","domain":"nymaite.cn","tld":"cn"},"ip":{"addr":"124.220.23.160","port":443,"asn":45090,"as":"Shenzhen Tencent Computer Systems Company Limited","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://guncelgirisadresim.vip/h5/","date":"2026-02-14T04:01:12.033Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.nymaite.cn","organization":""},"issuer":{"commonName":"Certum Domain Validation CA SHA2","organization":"Unizeto Technologies S.A."},"validity":{"start":"Tue, 05 Aug 2025 09:05:43 GMT","end":"Fri, 04 Sep 2026 09:05:42 GMT"},"fingerprint":{"sha1":"AD:39:9B:23:73:DD:9B:2E:E9:45:1E:28:EE:36:73:C0:1E:05:38:B0","sha256":"90:BD:79:83:21:77:FB:BA:19:00:B4:7F:4F:38:4E:85:4A:12:75:6B:1E:B1:B7:B4:5C:68:09:70:F5:17:66:60"}}},"request":{"raw":"GET /s/%E5%8F%8C%E4%B8%96%E8%90%8C%E5%A6%8322993/1.jpg HTTP/1.1\r\nHost: mp4.nymaite.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://guncelgirisadresim.vip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\nserver: nginx\r\ndate: Sat, 14 Feb 2026 04:01:12 GMT\r\ncontent-type: text/html\r\ncontent-length: 146\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-12T07:40:40.2056Z","times_seen":17851556,"resource_available":true,"data":null}},"time_used":957,"timings":{"blocked":502,"dns":0,"connect":0,"send":0,"wait":455,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}