{"report_id":"e8fa1018-e60b-4d2a-92e5-359ee3aab4bd","version":6,"status":"done","tags":[],"date":"2026-03-17T16:23:26Z","url":{"schema":"https","addr":"www.lieshou.vip/#/register?ref=982017","fqdn":"www.lieshou.vip","domain":"lieshou.vip","tld":"vip"},"ip":{"addr":"172.67.142.235","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"www.lieshou.vip/#/register?ref=982017","fqdn":"www.lieshou.vip","domain":"lieshou.vip","tld":"vip"},"title":"MercadoLibre","dom":{"size":161568,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (51695)","md5":"7dec89e5ecc80a66b902121817aa446f","sha1":"965c1420fcb940efee70b51eec9b2a0197d85d5e","sha256":"c5377d3d4cdc20594aae4f5b615f1bcdee6d0346e4c10074bd71c9956eaf1531","sha512":"06550e89917e3230634e4e9b9b18389f2543253b9370b561d1cd98c1dce75641f9d40d6a24c5bd67b70501f8d36c55f0eec9d7a14929e603ecae161a6894c1eb","ssdeep":"1536:fxmoOZI7RqsqLb8ANd8P8PcMr/MuwWzZ0uFE++6PY/Xy8ksKhY6n:Nr2n","tlshash":"c6f3f7f6a3e8a1e8e40bc3f8e672a476312b34ff7f56c658719c1a54eb6109c495dc80","dom_hash":"domhasha538615bc8c14d4ea9f6ee76e9dcfa45","first_seen":"2026-03-17T16:23:32.377513Z","last_seen":"2026-03-17T16:23:32.377513Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"www.lieshou.vip/#/register?ref=982017","fqdn":"www.lieshou.vip","domain":"lieshou.vip","tld":"vip"},"ip":{"addr":"172.67.142.235","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-04-21T16:23:26Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"www.lieshou.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"api.lieshou.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"www.lieshou.vip","ip":{"addr":"172.67.142.235","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-04-26","domain_rank":0,"first_seen":"2026-03-17T16:23:28.978983Z","last_seen":"2026-03-17T16:23:28.978983Z","alert_count":34,"request_count":34,"received_data":3369535,"sent_data":17244,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"api.lieshou.vip","ip":{"addr":"172.67.142.235","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-04-26","domain_rank":0,"first_seen":"2026-03-17T16:23:28.979325Z","last_seen":"2026-03-17T16:23:28.979325Z","alert_count":14,"request_count":14,"received_data":259141,"sent_data":8363,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"telegram.org","ip":{"addr":"149.154.167.99","port":443,"asn":62041,"as":"Telegram Messenger Inc","country":"United Kingdom","country_code":"GB"},"domain_registered":"2003-12-15","domain_rank":499,"first_seen":"2013-12-18T13:14:30Z","last_seen":"2026-03-11T13:42:54.363339Z","alert_count":0,"request_count":1,"received_data":115283,"sent_data":423,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"sc-static.net","ip":{"addr":"3.163.248.4","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2017-03-16","domain_rank":3142,"first_seen":"2017-09-05T18:35:04Z","last_seen":"2026-03-11T21:00:21.896207Z","alert_count":0,"request_count":1,"received_data":59423,"sent_data":416,"comment":"","tags":null,"fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"www.lieshou.vip/assets/BaseInput.vue_vue_type_style_index_0_lang-c56f899e.js","fqdn":"www.lieshou.vip","domain":"lieshou.vip","tld":"vip"},"ip":{"addr":"172.67.142.235","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"f637760231be31562f755e1eeb8cd85d","sha1":"ba8690542249e0eacccbb81732eab53c9d7e7c8c","sha256":"fea2a52dce24a3885cf6f5fa1c68a11fca19e8173b292aaf2e5c33c90f975fbc","sha512":"c20d559f13d1465dbf8762a5f0330ea108114ebd59201231e4cb03700db1a58f281e5e7a1815712088a0ca664a6b6b9c3fc8e591c9619434a559e7c7514cce12","ssdeep":"","tlshash":"5141670addaaafb2c673d6a5a2df0c20e0153767c95049a150fd192d2b8cde4173ff18","size":2396,"data":"","first_seen":"2026-03-17T16:23:32.404024Z","last_seen":"2026-03-18T18:48:17.261949Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.lieshou.vip/assets/login-E86A33-591e34e9.js","fqdn":"www.lieshou.vip","domain":"lieshou.vip","tld":"vip"},"ip":{"addr":"172.67.142.235","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"a6ecb637e11f7c5feab69c0e3553fc77","sha1":"c0db01971a811bba05d12020f54796441d32f270","sha256":"ced4b87218b8ab9a44fb8c4c344e944091ce291ce6d30aa5eee1fb423f81b639","sha512":"d416bd8c636ee68d000b0d0514beace93d316b3e064099ed8ab681ab4903f6864c3c535715b70d435d51f724d57d1c8b0cd6e2ef80fef6b1c70eb55cf0fc59d7","ssdeep":"384:zI/5P5a28wa8H5to08u/+kDRHmHD0upJDjJDXOCkG2Dz+RG:M/jajwa8ZuLuLHcwupttt72vYG","tlshash":"27b2e37b00b017baf7f09324f101f8a623891e866c56a5f78d7f539299a00e7b5cb65c","size":25347,"data":"","first_seen":"2026-03-17T16:23:32.424833Z","last_seen":"2026-03-18T18:48:17.252256Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.lieshou.vip/#/register?ref=982017","fqdn":"www.lieshou.vip","domain":"lieshou.vip","tld":"vip"},"ip":{"addr":"172.67.142.235","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"10568b780a0d314b06f4ae6be4a339f7","sha1":"2c0ba855511dbe4d8ce3bf061282976a34fd375f","sha256":"97611d5571f8e91da4b84e7fed039c19126ed0d05a358286b229ee99b23e61d4","sha512":"f1d5ba897fc7e7481668825a9b1fc036114a015a88759f3df8a3f52521648c16dcf66dd17116a513a7ccbc3f4d62eff48fde1b11b4905917762aec42d1009705","ssdeep":"96:nfkdoq1aBIBOjsXgInhubwM0eb9X+T60YTHs:nfkdoq1aBIBksXZhu8M0k9X+T60YDs","tlshash":"beb1991b69e56468a703b0ba8c3fa406b521042f099cbd407e0cd7769f8953daab4edd","size":5554,"data":"","first_seen":"2024-07-26T08:05:53Z","last_seen":"2026-06-07T05:03:57.018709Z","times_seen":494,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.lieshou.vip/#/register?ref=982017","fqdn":"www.lieshou.vip","domain":"lieshou.vip","tld":"vip"},"ip":{"addr":"172.67.142.235","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"f7d4fbff71549398ceffe8189db57c5b","sha1":"9ddc56ef19489e0d21f74eebc29c92b469ae6fd4","sha256":"ca663f53ed1b54e1f40c4b17ba2257f76179690249527bf88d268d9d178995a3","sha512":"bb5e60f5eec27743c6cfb79705632ad071bd6cdfffb44d8f0ce4e2c884c1bb531e06e6aa80bee647986c34bb4bad620495cd48c61e8d30441914687444b03b1b","ssdeep":"","tlshash":"e3f09e1b1886b07e53d760b6593bad5b322a11472c5119077d4c80242fe083d7ef5fde","size":623,"data":"","first_seen":"2024-07-26T08:05:53Z","last_seen":"2026-06-07T05:03:57.019407Z","times_seen":494,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.lieshou.vip/assets/index-8920794d.js","fqdn":"www.lieshou.vip","domain":"lieshou.vip","tld":"vip"},"ip":{"addr":"172.67.142.235","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"07146db2d213b12858f97fa7299c732d","sha1":"a93681d86e910016fd18c1eca774f5b7382c77fe","sha256":"c9b3677efb281ab54ac843796ebb054f3e851cc397a4a7ce4fe2b356f414a9e8","sha512":"38d098ea1e89d7f83807361e7095a4fa135caa130bb89818d12118ca83e14da68b64428d6685bfef8d06624a7976b30e3b8434a5257b124ae079e66918a7da2d","ssdeep":"12288:JN12QMhx4qLglcLhEB/oqZBeMppVo2En5WJR6a:Jc4K/LWVeMWn8","tlshash":"9165c1286a2bf354e518c0d7fa3b3c84c59de58aa00764d14f754bb31ba1792ebacd13","size":1415387,"data":"","first_seen":"2026-03-17T16:23:32.442031Z","last_seen":"2026-04-19T22:13:03.179635Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.lieshou.vip/assets/index-08801986.js","fqdn":"www.lieshou.vip","domain":"lieshou.vip","tld":"vip"},"ip":{"addr":"172.67.142.235","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"f1bd75d1404a6090bea4a7168f0a6540","sha1":"a540f10959c183110c2f75d0c50b5e741134f2c6","sha256":"b994a8a8fc787822a56a755c9fc6bfc2106420dbc803bdad683555950efc712d","sha512":"ff0ea2ee85e500a239a8f49d89c57f72515e77b8f0651d6408f649b0972fda2d94adb7672b7d7eba4dd95e6c0d7b4c9476ca69c959d35d8d4ae71922adacdf7b","ssdeep":"","tlshash":"4c41727d78cc1035cbbbd888846a4913b26f8b1c062889f1d0ab5d9c2e2e10cf177e31","size":1958,"data":"","first_seen":"2026-03-17T16:23:32.392533Z","last_seen":"2026-03-18T18:48:17.254052Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.lieshou.vip/#/register?ref=982017","fqdn":"www.lieshou.vip","domain":"lieshou.vip","tld":"vip"},"ip":{"addr":"172.67.142.235","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"b4a632459a011f9cf34cc3f6a449d24e","sha1":"23c6bb20ee82a11a54bfd4764e76b9fd86cf57fd","sha256":"ebb303d9df1321004f0694d1b1872542665a684d1f7cc90df2a8e3a0f286cbf0","sha512":"121db1d01b5f5ca50ae592bd141d36a7e2f650220c081e8a7c6d49f8d692b2ff12e36cd6bfcd1be3691d436eaef2fcefd1d5f36dde0a91089407d466bbf6d743","ssdeep":"","tlshash":"c6c08cc5a0d22d502606681016af25e490244036748c5b028c98d85c3e220b48333ea8","size":140,"data":"","first_seen":"2023-06-08T15:13:23Z","last_seen":"2026-08-11T07:33:55.819998Z","times_seen":1031,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.lieshou.vip/#/register?ref=982017","fqdn":"www.lieshou.vip","domain":"lieshou.vip","tld":"vip"},"ip":{"addr":"172.67.142.235","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"9f1adf5a937557142643e353cbf37934","sha1":"68bee525409e37e507e07e841ac152c28e681e02","sha256":"ebf44a8d66510cfec03abf88ce5c4c8b7a398508ac85d4951fae6da1c2d981fa","sha512":"0d87c40442a74282c127eec84d658a303f2d0390855ab5aa6d533e9513498ae6d605678fafad858b419b1389e523246a2a581815f42f9795d03281dcf4565a47","ssdeep":"","tlshash":"bac08cc6a0d22d002606681014af24e490244427788c1b02cd94d84c3e220b48237ea8","size":140,"data":"","first_seen":"2023-05-25T11:08:57Z","last_seen":"2026-08-10T11:55:45.613488Z","times_seen":659,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.lieshou.vip/assets/NavBar.vue_vue_type_style_index_0_lang-9577b1c8.js","fqdn":"www.lieshou.vip","domain":"lieshou.vip","tld":"vip"},"ip":{"addr":"172.67.142.235","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"aaa5c03ecdb6f5e52c8c1be561882b0a","sha1":"67c05ad1b77a334ecdfdf848f92fd7d1581b1f5a","sha256":"1c3a86d9db6821391eb7502c06a4b5c3121b103741b7e07451d83968ae894606","sha512":"6a48ad6b9853215d0b7d86b6cb712c628247b5526de5ec400f18ccb5e84d29b94c58923c74a0911b22b30eb482540eefb1925336d4133a0968d9d3baf1e2b216","ssdeep":"384:QHGMVMzf2wOXwJMZDJZLJjBMb3WOHMVBEKUNcSrF/8aecfHwo1mk:QdMiMhycH","tlshash":"d5b20c40f5528a7cdab70239de9a6441b24c5f8fd546a9a1f1fc282f37c6cf97048b68","size":23604,"data":"","first_seen":"2026-03-17T16:23:32.43123Z","last_seen":"2026-04-19T22:13:03.064454Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.lieshou.vip/#/register?ref=982017","fqdn":"www.lieshou.vip","domain":"lieshou.vip","tld":"vip"},"ip":{"addr":"172.67.142.235","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"caad72fe48a09f8a060e5dd1477935fa","sha1":"f2b5ddb3021c1d3b5df6a518c7b555a7ffaeba39","sha256":"3097fffe06a687f15fda650f93d6f5303679a4fc78db9645da44a7aa4fa902fb","sha512":"1ad398a20e4693fe3fcd02aa2ffd3fa8f2c7bc1cafdc3778ed28300852491cc74174c17f930f387a3d75c02a35aa21100f56df21ee41f5222850cea0d1edee06","ssdeep":"","tlshash":"b731682918ea1118b2177166e17fe70d2725501b2dd4fc097a0cd2240f9997ee6b8cae","size":1591,"data":"","first_seen":"2024-07-26T08:05:53Z","last_seen":"2026-06-07T05:03:57.020035Z","times_seen":494,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sc-static.net/scevent.min.js","fqdn":"sc-static.net","domain":"sc-static.net","tld":"net"},"ip":{"addr":"3.163.248.4","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"63bbf59a9554735b8434a2ef930fce23","sha1":"55c56de71b33c059fe2995213bcfac8ecf6a32f5","sha256":"6c4d214f158b408350da732ed8049847e5d4ca2df28ee87c9605225560943398","sha512":"85b3693442f3e1f01fca64fb2fa4e3de4a9764bd16ac01ca1e04625322cc9b79cbe347f63cec3008de0d654a3dd60c15f38e03ba9249ec2c82d6c9bd050db3db","ssdeep":"1536:kQ870ziaaTzjPOevVJm0tlsuHrih9HHVZ1GJV51kxx0Kb:785hTl49dx0G","tlshash":"1c43d78cb7e9b02503973472497f541be33bb9646c0bc650c526e5883dbc69e9237eac","size":58763,"data":"","first_seen":"2026-03-17T00:15:22.962945Z","last_seen":"2026-03-17T17:22:31.995662Z","times_seen":77,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.lieshou.vip/#/register?ref=982017","fqdn":"www.lieshou.vip","domain":"lieshou.vip","tld":"vip"},"ip":{"addr":"172.67.142.235","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"12257f7aca7a2184d5747edf184763a2","sha1":"fbed2aa8be1967f1014cfafff712e8874b378f33","sha256":"161ade31c797803662a8cfc6f7a4994c5ad2fbef4941bb357c3df9536d9b6bb4","sha512":"0c8cfb681eedb034e81145f6f6fc1e172d901cfb51de520b19ebb1b1ea9f2612cc27c7779cd8258cad4022a91e5d428e36cc2537ef985ade3b87c2b6ad89f238","ssdeep":"","tlshash":"2bc08cc4a0c22d102606681014af38e49024402670481b028c94d8482e330b08233ed8","size":136,"data":"","first_seen":"2024-12-08T21:22:12.707551Z","last_seen":"2026-07-12T13:55:37.732548Z","times_seen":36,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.lieshou.vip/assets/register-7183de6a.js","fqdn":"www.lieshou.vip","domain":"lieshou.vip","tld":"vip"},"ip":{"addr":"172.67.142.235","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"2ed17af12d1dc5af0a7abbd20a931b6c","sha1":"6eebbcecbe99f49af4dc092f2d39da8f235858a1","sha256":"0f5c3752d81bab4b1011beab8b83faba34ac78cb68acf611d47e507c06d4b27e","sha512":"c17068d3902d5ae7eb7f1460cd201cf87b330beffe6c8b022ab5f3ebc76c3b69eb4610a1141c2fddae0afec5470378ac4716d2a90e507d9314df4b3d49de2152","ssdeep":"6144:78crRsL6EJDpw1rM1cAgtx/MNhRogSV4ghfUWlUa5CoJHGfAseGRTYDeLzry7f0R:x1mlRq14KbHOP7CXV9q2B94pLNsGn0sR","tlshash":"2a44619cd0b4cf76d4b79661385ea4a0b05e4befc2405714a3fc4a252edacf0a3b57a4","size":277958,"data":"","first_seen":"2026-03-17T16:23:32.412232Z","last_seen":"2026-03-18T18:48:17.271182Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.lieshou.vip/#/register?ref=982017","fqdn":"www.lieshou.vip","domain":"lieshou.vip","tld":"vip"},"ip":{"addr":"172.67.142.235","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"5bd6185639b8be9b5d6a79cf5af2a9dd","sha1":"f1cadfb16d24785897f89d1da75adbd0f028de58","sha256":"8974133640d35c1c7fff7a94f677c866910b8e07e2830473c9ef84da0f01fa9e","sha512":"4b9b0252665f704d49cafca04e04d96d8ffe1f2348946d655d3d0d7780342b865e6b8451bb687c6acb4f2690473c13fec9b10a1b036f1d2a028a8e34c6dd35a6","ssdeep":"","tlshash":"7ec08cc4a0c23d001a23646120bf34e49038402770881b428d94d8482e230f08337e9c","size":148,"data":"","first_seen":"2023-07-15T02:55:06Z","last_seen":"2026-08-09T23:33:25.463552Z","times_seen":143,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"telegram.org/js/telegram-web-app.js","fqdn":"telegram.org","domain":"telegram.org","tld":"org"},"ip":{"addr":"149.154.167.99","port":443,"asn":62041,"as":"Telegram Messenger Inc","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":false,"md5":"bb0a2fecf6cd27fba9cd29610fd2ccdc","sha1":"7546ed807d56be081be97fa1e4859381ecccf58e","sha256":"dc67f1e084e069a3fb629f3154765856fe0aa805a4e138bc42c228bc3d656a78","sha512":"5350795e68c371956350f88354aac62900d7fc5974817e93f49f218fa60becda436da0a8bf17d6239e2ef882cee0b18bfe66e181baa6f1ca04b57817c2920166","ssdeep":"1536:pO5TpRdoKd4F0WN2ZbBcn9cF9KTfVjLo03ueLE+wFFz1NIVIB/MGYV7p/xHK8ITq:s5TpRdfcKFU7Rx1H","tlshash":"31b33e4d6cb3612285b3b1bf8b5f924172759883301def20794d9b646f80e7c53eaad8","size":114950,"data":"","first_seen":"2026-03-10T21:38:17.367441Z","last_seen":"2026-08-06T08:41:46.722793Z","times_seen":775,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.lieshou.vip/assets/BaseMainBtn.vue_vue_type_style_index_0_lang-6bca2a13.js","fqdn":"www.lieshou.vip","domain":"lieshou.vip","tld":"vip"},"ip":{"addr":"172.67.142.235","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"76fd3901c38e5aaea30e8d0b17318185","sha1":"351915c8421083fcc3fb7cdeb56ebff67f3c8666","sha256":"77033933d573b779e2e46413c340f7a82fc88f3547bcd588045c57a497e960ee","sha512":"1902b794f2fa38b6fe136da50d040e1aea01b4b8b542dd5ae3602a2f7f1d576b1f9db1a79676213a4da24bad4febde2bb848c6917431f253909eb142292ebcff","ssdeep":"","tlshash":"4ef07e0a6c02c5bc2c82060a2e8520109204367fe324a0fca6df217cb79f0f9783a32c","size":556,"data":"","first_seen":"2026-03-17T16:23:32.426824Z","last_seen":"2026-04-19T22:13:03.131151Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.lieshou.vip/assets/BaseUserTab.vue_vue_type_style_index_0_lang-9da38b9d.js","fqdn":"www.lieshou.vip","domain":"lieshou.vip","tld":"vip"},"ip":{"addr":"172.67.142.235","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"993f5d213d6664bd8f9c42cec307ae8d","sha1":"79f9fcb9b82d2d3b5482af327b23e7fa75a9f18e","sha256":"9fd3abeba6395b7e4605d07386b7d2dea90d1c9a608493dbde56bb429bdf3106","sha512":"a49a856b7ac147c32fc539253aee9c2ed7e9c582736eac01aefd84dbd6e79f856c893f196a797b65c70f1fc062f8a18d5ae27ec46a6a92183037e561fbfce0cc","ssdeep":"","tlshash":"330115dc48e5cbfa849306543e2a1050d0958f94db398d4570ec1a22274b8a1b6de33c","size":724,"data":"","first_seen":"2026-03-17T16:23:32.418672Z","last_seen":"2026-04-19T22:13:03.117216Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.lieshou.vip/#/register?ref=982017","fqdn":"www.lieshou.vip","domain":"lieshou.vip","tld":"vip"},"ip":{"addr":"172.67.142.235","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"0ae64cce4f24529caa56156b159bdade","sha1":"3f1c5a480a93a0bfdc86eb0d7769ea098682b7a5","sha256":"99cb12f023e5c6752e9a7e0132343acf246a432e31d1e7326a3fad10704711a5","sha512":"0ce54f9c86d027c6895c449a7be022ab96d9df608d39f56a3eb0c2721f49aac55b9f82668c5265ba231c626d7a841bcb68c13b169f5f5f9be40244d0c3abec61","ssdeep":"","tlshash":"eec08cc8a0c22d002602a45010bf38e4a024842770481b028de4dc4c3e230f08233e98","size":141,"data":"","first_seen":"2023-04-14T14:41:51Z","last_seen":"2026-08-10T11:55:45.626286Z","times_seen":2562,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.lieshou.vip/#/register?ref=982017","fqdn":"www.lieshou.vip","domain":"lieshou.vip","tld":"vip"},"ip":{"addr":"172.67.142.235","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"a28e056a6989b49de8bf0c6fe7a9078e","sha1":"166889dc07218cf99767d4179177e393a87c50b5","sha256":"5adba9de6f8cd98bd9f208363a88990f71f45bc7eaa3b277fa7fc86d54f0ecbb","sha512":"5fca1b898fe0243788c1e8403086ea2b8f6374b3575b8c71ff971b969f1e1325eb301221aad3fa4f9447bb8df6c43021297674123c156e4fd1a322d5cd3cdcc9","ssdeep":"","tlshash":"acf0ab0b199008319707b17a2a7fec0a1e42201f29646671be0c95109fce97e4664d5c","size":506,"data":"","first_seen":"2024-07-26T08:05:53Z","last_seen":"2026-06-07T05:03:57.026572Z","times_seen":599,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.lieshou.vip/assets/login-c6e297-5638315b.js","fqdn":"www.lieshou.vip","domain":"lieshou.vip","tld":"vip"},"ip":{"addr":"172.67.142.235","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"8d4976d22aa948250a135c00d3d9a28b","sha1":"80d5ae9a3c2e3ddefc51119105b945e7ecacf92d","sha256":"80ac60742cda817e1d84a928ff9d93588793b60acd461fb0dd0a1291cb4ce262","sha512":"b6213399deb3a996557ca5ed9026d2a49c63966495f9ca854c5548c7b5222cbccb309c84539645db2d74df21c66f62cfd3f28db5a0f87a193aea4e58b3361d15","ssdeep":"","tlshash":"bb11822aca585d3f112c390d02c6e9e4010d332b9868ef7cc336852c6c18b1746d6c70","size":955,"data":"","first_seen":"2025-02-18T16:23:29.571893Z","last_seen":"2026-08-09T10:03:19.802024Z","times_seen":139,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.lieshou.vip/#/register?ref=982017","fqdn":"www.lieshou.vip","domain":"lieshou.vip","tld":"vip"},"ip":{"addr":"172.67.142.235","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"5d2708a77893ceb11c8b3f0e91577be9","sha1":"03b99e84959dbe39a70040b995cb89903a4c7bf7","sha256":"09b0d72a54ff43296c4f1fecdd41751dc3adabdff2b2c666ac35bea522b3c7eb","sha512":"4e4cfad51a593abef468c3c285b0da15ea08bd043730a40f39637f0c056c0ec9f6c393dbc91407c3b0b106ce629ba988f8a5956dedb7a767c1dd06625c3c7c85","ssdeep":"","tlshash":"76c08cc5a0c7ad002e526c2010bf25e4a034402ab0485b028d94e8492e230b48233e98","size":147,"data":"","first_seen":"2024-12-08T21:22:12.713431Z","last_seen":"2026-07-12T13:55:37.743241Z","times_seen":27,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.lieshou.vip/assets/index-54757ceb.js","fqdn":"www.lieshou.vip","domain":"lieshou.vip","tld":"vip"},"ip":{"addr":"172.67.142.235","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"895f0b405d5839028b882466778e9c4b","sha1":"0acd97967297f8a13352264b6e609710759a7ff4","sha256":"948da5f1c6f0bb53a75d1732a982344830978f5178bffc8e0d08ba695f39c169","sha512":"1d344293669b1a904545fdc52611a71fd9e725ecec0c8f6f46e00d7e683038b54e43ced38b24a029c24aa3fca2ca47f43bf19a9efb0bb9a6390e8356a9f7dd39","ssdeep":"","tlshash":"6611659a6cf08ef940bd08867b930515551f0299565058e0f88e8e5c26bc9c25a2ff1c","size":1077,"data":"","first_seen":"2026-03-17T16:23:32.390021Z","last_seen":"2026-03-18T18:48:17.263374Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.lieshou.vip/#/register?ref=982017","fqdn":"www.lieshou.vip","domain":"lieshou.vip","tld":"vip"},"ip":{"addr":"172.67.142.235","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"dd736b319204af5dfab55929ccd55877","sha1":"8cde638a47bc414ffa37fe9758d6e7ecb499644a","sha256":"75df447b2d365684b20a365175ed1901ea7d2f1dcb108208ab31d280e8a4f9e7","sha512":"958638099f6557326e2a174d0fcb5487fa05c365ea917f4a42ba5d5e76ba69170ace887f9adbcfc1250206a61d2f044212f2c38758a73f9778efbb820c6f0030","ssdeep":"","tlshash":"a9c08cc8b0c22d101b42685458af64e49038c82a784c1b068c98e89a3e230b08233eec","size":150,"data":"","first_seen":"2023-11-04T18:18:58Z","last_seen":"2026-04-16T04:49:47.509106Z","times_seen":34,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.lieshou.vip/#/register?ref=982017","fqdn":"www.lieshou.vip","domain":"lieshou.vip","tld":"vip"},"ip":{"addr":"172.67.142.235","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"0aed7a1bd59d1aaf1421e72681bf6818","sha1":"7bb27cd0f1087b45d3f57579b27ba3e9680cd8f0","sha256":"feceba1c6e558da676e8d4a0d744eb0ba688c49ea1c2eb5911b5bcbc19259fb4","sha512":"8da463abe7f4636c44732a13c9e5c94ee29cec252dc5b0ef3e20bf2525ab7e0cf2f890cdc75928b91cf6c509241b229b743f82cadd195421db0fd3a9c1f9333a","ssdeep":"","tlshash":"f7c08cc8a0c23d106a16682011ef24e49024402674486b12dca4d8582e625b08233e98","size":145,"data":"","first_seen":"2024-10-23T22:11:12.431326Z","last_seen":"2026-08-11T08:51:32.539805Z","times_seen":65,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.lieshou.vip/#/register?ref=982017","fqdn":"www.lieshou.vip","domain":"lieshou.vip","tld":"vip"},"ip":{"addr":"172.67.142.235","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"c771a56c31bff8ba6299f63241568899","sha1":"3d6509d1f412e744a937e891546180b1093f7ccd","sha256":"c0b3a74335ec3f96e25be399971bafea9e3513f821dd3b4009608de199fd4f2a","sha512":"f859c02090a494b60671d2dea13324fc38d926b315de977edb5889e587917facd9d2e4c1e73e0edb3f0112b5af30b8d05d33a173612c81f4cdbcab5bcf47a03c","ssdeep":"","tlshash":"7b0128e59986483146db31fa2a9e301070318003b908beb0386f15446fdd33ed3f6bd8","size":689,"data":"","first_seen":"2024-11-20T07:54:53.452195Z","last_seen":"2026-06-07T05:03:57.027217Z","times_seen":489,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.lieshou.vip/assets/ContainerForm-c5503bf7.js","fqdn":"www.lieshou.vip","domain":"lieshou.vip","tld":"vip"},"ip":{"addr":"172.67.142.235","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"4485b5e8d0969798ad360219bfcb8047","sha1":"b911008967fca2b70e5f8eff97d9e6aa3587e3fb","sha256":"587ee6488ac37db3c7146de8d71b8a42d1858c0c0f36455df08ee40d3c50194e","sha512":"6527a25e468b3d0d8d32953e46f03e5b0088a4897bbf5b803b791f39a2830f7541d0bd8d6b82dece4ddf2f849afcf2ddf9a669b9e76b6777134e0d6ee9ddeddc","ssdeep":"","tlshash":"6ad0220d6c5092b780120e8c77663536cbae3f3633b48d92105b84a58b164af220ef4c","size":217,"data":"","first_seen":"2026-03-17T16:23:32.410306Z","last_seen":"2026-03-18T18:48:17.276809Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.lieshou.vip/#/register?ref=982017","fqdn":"www.lieshou.vip","domain":"lieshou.vip","tld":"vip"},"ip":{"addr":"172.67.142.235","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"95a1d47af6ed5d0451d09a2ede9df733","sha1":"18992381f196ec53b4a7170f27a57959d7705fe9","sha256":"80057449a96f88844455fb3f9d28e24f9b77f7a871b7da5a7c04441d5efc234d","sha512":"49bdd33459d0e087dd037abd02f62efd7eab565fb2da01bcc02453a4ed0e1ae680a6e48c621e0830bb9f2b8a6fde9b25ebbb059f2c8dc2935371fe139bbcd217","ssdeep":"","tlshash":"9ac08cc8a0d32d102603a51020af38e4a0348027704c1b078da8dc493e630f08233ed8","size":149,"data":"","first_seen":"2024-08-20T15:10:12.50161Z","last_seen":"2026-04-16T04:49:47.509892Z","times_seen":21,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.lieshou.vip/#/register?ref=982017","fqdn":"www.lieshou.vip","domain":"lieshou.vip","tld":"vip"},"ip":{"addr":"172.67.142.235","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"5d860e04454fa825ccf8d7c91a80c48e","sha1":"46d75823757172181cb408537bc34a4891e2501e","sha256":"b5d8a0b035a8145892c8a5fdfa42287e4252f75c4c5163c6502f20bcecc730c3","sha512":"f83783a980875c43bb289e9ee627c58f1bceb58cbc46a588b45b78f25ddaa518bccf4bff4cedb6edf343319781ff807c2002274538b5641565d380b9daabc8f6","ssdeep":"","tlshash":"e5c08cc4a0d66d005f02a41021ef24e890248026b4481b028d94d8882e220b09233e9c","size":139,"data":"","first_seen":"2023-06-05T21:34:11Z","last_seen":"2026-08-09T10:03:19.86065Z","times_seen":1690,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.lieshou.vip/#/register?ref=982017","fqdn":"www.lieshou.vip","domain":"lieshou.vip","tld":"vip"},"ip":{"addr":"172.67.142.235","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"5c934f1fd2e5c0aa2ed66018bf4a5ddd","sha1":"6d8946d53d1e7257ed7322123c8cbd97ec5ad9d2","sha256":"81e02995c42089b88fdb04c0c59f0a31a3c845f192c596c20c99f585a18fbbb6","sha512":"96b3d20e1f38bc30d790353a4dd549883e61cc4fa61bd55524c4ef88cd71739585d2d9c34eb4f7a270bd1c7429db3c53a1823f8d3d48b0d4c9e4feeb0128d1c7","ssdeep":"","tlshash":"5ac08cdcb0c22d00260668145aaf75e4a0348436708c2b128d94d8482e230b08233e98","size":150,"data":"","first_seen":"2023-11-21T13:50:07Z","last_seen":"2026-07-12T13:55:37.743907Z","times_seen":15,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.lieshou.vip/#/register?ref=982017","fqdn":"www.lieshou.vip","domain":"lieshou.vip","tld":"vip"},"ip":{"addr":"172.67.142.235","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"a28e056a6989b49de8bf0c6fe7a9078e","sha1":"166889dc07218cf99767d4179177e393a87c50b5","sha256":"5adba9de6f8cd98bd9f208363a88990f71f45bc7eaa3b277fa7fc86d54f0ecbb","sha512":"5fca1b898fe0243788c1e8403086ea2b8f6374b3575b8c71ff971b969f1e1325eb301221aad3fa4f9447bb8df6c43021297674123c156e4fd1a322d5cd3cdcc9","ssdeep":"","tlshash":"acf0ab0b199008319707b17a2a7fec0a1e42201f29646671be0c95109fce97e4664d5c","size":506,"data":"","first_seen":"2024-07-26T08:05:53Z","last_seen":"2026-06-07T05:03:57.026572Z","times_seen":599,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.lieshou.vip/#/register?ref=982017","fqdn":"www.lieshou.vip","domain":"lieshou.vip","tld":"vip"},"ip":{"addr":"172.67.142.235","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"6d2b2b050757ba3d24426c42c3e4676f","sha1":"6a3359c5389d7d41f4b9647878b29cf654f5fc63","sha256":"da3abe33f5dd2abd814eb50229fb90d0ab61f7553b0154dae0cf129be7e7980f","sha512":"1c678470e263ef5bc0a5f8b44714ccd7cac330e2a61742d4735579da012208167e3b6672534f5ed217b285ff49c4204cc060936cf2f2d7e1625e10df79bed04e","ssdeep":"","tlshash":"b0f0eb130cd900af6f2710bd2b3faa1236a41113044ac020fc0e8720af20e7c1724acc","size":656,"data":"","first_seen":"2025-09-10T03:49:42.458429Z","last_seen":"2026-06-07T05:03:57.031683Z","times_seen":357,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.lieshou.vip/assets/BaseLogo.vue_vue_type_script_setup_true_lang-2c4d6139.js","fqdn":"www.lieshou.vip","domain":"lieshou.vip","tld":"vip"},"ip":{"addr":"172.67.142.235","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"a9f3b89fa967d042099e12739e6b16d1","sha1":"bddbdb6df82d8d37b74bc32c070e68cda59a2b50","sha256":"a331a4ce0a98b23952092a9e0d87c4155dd9a8a0f9584e5937974b8e5a859f02","sha512":"61307662ec8ae17a5f739b5db1ded6f57d467245dc71f95a4ec9200deaf235cd4b63590bd7c99f0a2474a9a673c57e9df3379dceb669183991db377ba59a4f69","ssdeep":"","tlshash":"eaf0c90f5c2a91ff80a658982f47204212085fbdca2099d5f2e5227462418aab01eb68","size":522,"data":"","first_seen":"2026-03-17T16:23:32.420787Z","last_seen":"2026-04-19T22:13:03.078856Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.lieshou.vip/#/register?ref=982017","fqdn":"www.lieshou.vip","domain":"lieshou.vip","tld":"vip"},"ip":{"addr":"172.67.142.235","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"c413d2be75f07c801978090a3ccf10e3","sha1":"773ea0d1d4ee53f9670dee6fdf7562cc4630ea13","sha256":"ccb04fa8e25ade741486698e70583c55c02eb598e46433ff2502e276436bea5f","sha512":"de6620ccc14d5b2bfc7cbf623236b049297c8b31bc7917355bf04cb6fbc48db2449054ae9ba95aa2431da23d29e2969b13ea52247877bb36b69e515e19520702","ssdeep":"","tlshash":"bdc08cc8a0e26d101b42641464af34e49028842a784c1b068c98e8983e230b09233ea9","size":150,"data":"","first_seen":"2023-11-04T18:18:58Z","last_seen":"2026-04-16T04:49:47.516697Z","times_seen":34,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"www.lieshou.vip/#/register?ref=982017","fqdn":"www.lieshou.vip","domain":"lieshou.vip","tld":"vip"},"ip":{"addr":"172.67.142.235","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-17T16:23:04.413Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lieshou.vip","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Mar 2026 11:34:23 GMT","end":"Mon, 15 Jun 2026 11:34:22 GMT"},"fingerprint":{"sha1":"D7:5D:64:B7:86:F7:C2:6A:02:BE:66:BB:A3:3D:EC:2A:CC:CE:07:B3","sha256":"DB:AB:85:D9:A5:98:26:4C:58:FD:83:A8:92:34:C4:57:A1:BA:28:B3:A9:C3:78:8C:42:0F:B8:1E:FE:64:88:60"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: www.lieshou.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 17 Mar 2026 16:23:04 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\nlast-modified: Tue, 17 Mar 2026 12:18:14 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dHfPmwu3D1zwtlAqhrhMzZSzETif%2B5F00O7FPTd016Rbbuv%2BJYS7rondK6AAQu1oM9Q20Igbwa64Gwqr2xCJHRBkMKjMQCxmxn6TbeBk7Q%3D%3D\"}]}\r\nage: 143\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: br\r\ncf-ray: 9ddd570d0ae40b9c-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":152986,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (54279)","md5":"33033c07e87d74c9c98c66fde9524647","sha1":"98a8e67a64623670ea9fab673d879caca19ad006","sha256":"6d4dd73854ef88200f342fc8aea8c1594f28fc91fa5fab5e7677a1ebde749832","sha512":"bd50b3aed360f04ca3fe1c0406ea840a0f333848e3aec7e6cbd2065f1f6763fdd6293f2297479f112d957940797bbc7f2909178e4fc3f9c92e9489175c9aa9f7","ssdeep":"1536:imoOZI7RqsqLZJFApnPq4LBjJPu9WYZ9uGptLLWv2XyTO5Kwulq:emuq","tlshash":"13e309f6a3e8a1e8e80bd3b8e676a476352b30ff3f45c648719c5a64fb2105d854dd80","first_seen":"2026-03-17T16:23:32.38207Z","last_seen":"2026-04-19T22:13:03.037724Z","times_seen":7,"resource_available":false,"data":null}},"time_used":168,"timings":{"blocked":69,"dns":44,"connect":8,"send":0,"wait":24,"receive":0,"ssl":20},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"www.lieshou.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.lieshou.vip/assets/index-8920794d.js","fqdn":"www.lieshou.vip","domain":"lieshou.vip","tld":"vip"},"ip":{"addr":"172.67.142.235","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.lieshou.vip/#/register?ref=982017","date":"2026-03-17T16:23:04.659Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lieshou.vip","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Mar 2026 11:34:23 GMT","end":"Mon, 15 Jun 2026 11:34:22 GMT"},"fingerprint":{"sha1":"D7:5D:64:B7:86:F7:C2:6A:02:BE:66:BB:A3:3D:EC:2A:CC:CE:07:B3","sha256":"DB:AB:85:D9:A5:98:26:4C:58:FD:83:A8:92:34:C4:57:A1:BA:28:B3:A9:C3:78:8C:42:0F:B8:1E:FE:64:88:60"}}},"request":{"raw":"GET /assets/index-8920794d.js HTTP/1.1\r\nHost: www.lieshou.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.lieshou.vip/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 17 Mar 2026 16:23:04 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 17 Mar 2026 12:18:14 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69b94686-1598db\"\r\nexpires: Wed, 18 Mar 2026 04:22:09 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\nage: 55\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jP7mdYJgQqs%2FcpKL1ayXtR%2BFFPHLrfL7vYibtrEBNq7SOLZpkJVkmPa28nuA4WNsvoI%2Fd7r70pFp5EFHwjiMnxw4j6%2FZyeV5cRkHGAMS%2FQ%3D%3D\"}]}\r\ncf-ray: 9ddd570e2ba6ddf7-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1415387,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (18617)","md5":"0bb81449a425eb22bb842ef411aa9ca5","sha1":"14943fe819b47822662aeaa64bd1dd5d417a892e","sha256":"d3f1c33e06e32a96e2d1049454822d2d8a7d5a4df9e42a83fc018999164b7f9c","sha512":"2385632f21b1c192c10d46fc5bc45b3abfa3b6356e03e5d61c523d937f0897fe981d7777ea0d8e6a0df55906aed2ed6e3e259a11e27fb1f8904c1d66ef35e013","ssdeep":"6144:Ju3shb2QMhx4qLglcLhEeeQAJJPDHUqZI6zYGe6LrLJjpyMo2R:JN12QMhx4qLglcLhEB/oqZBeMppVo2R","tlshash":"ca2528282a6bf344a419c0d7fa373c84c59de18aa40b64d15f754bb31bb2753eaacd13","first_seen":"2026-03-17T16:23:32.384299Z","last_seen":"2026-04-19T22:13:03.125264Z","times_seen":7,"resource_available":false,"data":null}},"time_used":46,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":23,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"www.lieshou.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.lieshou.vip/upload/img/69b95674aa34.webp","fqdn":"api.lieshou.vip","domain":"lieshou.vip","tld":"vip"},"ip":{"addr":"172.67.142.235","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.lieshou.vip/#/register?ref=982017","date":"2026-03-17T16:23:06.207Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lieshou.vip","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Mar 2026 11:34:23 GMT","end":"Mon, 15 Jun 2026 11:34:22 GMT"},"fingerprint":{"sha1":"D7:5D:64:B7:86:F7:C2:6A:02:BE:66:BB:A3:3D:EC:2A:CC:CE:07:B3","sha256":"DB:AB:85:D9:A5:98:26:4C:58:FD:83:A8:92:34:C4:57:A1:BA:28:B3:A9:C3:78:8C:42:0F:B8:1E:FE:64:88:60"}}},"request":{"raw":"GET /upload/img/69b95674aa34.webp HTTP/1.1\r\nHost: api.lieshou.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.lieshou.vip/\r\nCookie: _scid=0eQkWkK66oLGxT_KX9CIVb_54N5Lg9NQ; _scid_r=0eQkWkK66oLGxT_KX9CIVb_54N5Lg9NQ\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 17 Mar 2026 16:23:06 GMT\r\ncontent-type: image/webp\r\ncontent-length: 124182\r\nlast-modified: Tue, 17 Mar 2026 13:26:12 GMT\r\npriority: u=4,i=?0\r\netag: \"69b95674-1e516\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nage: 563\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jeoIAyciSoVxbPVHX%2BpZdCBxV%2Fd3c5GvRD9MewfLoM0hbSqV8lSHM65frzysVbirTspL%2F51j4nY3yMe1%2FYRyXe087IsoZJb3Dfs%2Fj5qekw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ddd5717dd69ddf7-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":124182,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1170x808, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"a34fd2d2498c2e6e18287c15f9d720e7","sha1":"eb7eaca73f98aa26936a27c858bd8bd859a27de2","sha256":"2f1c0b605c8d65ad3fe07fbe48314d3a9fc7bcc635afca1a3cede22d34cbcbd3","sha512":"5e7763193f0bf4f9fea58fae333286eaa662e9ad322c420ba447759a106ea867e25b0d5e53c09c81d8fdf346b6a585318e33a0002deb24ec429d5b3525b04f5c","ssdeep":"3072:0jP9peYPuS6PFo36NWU+c0gkGjIpTM/vmBhHeCyu5TQ0:0jlXuSyo38+c05EIpCmnHvFT","tlshash":"25c3128eaa2ff367e54951e802cf07ee0cfe97015610ac16be63645476d8e7de4e304a","first_seen":"2026-03-17T16:23:32.386289Z","last_seen":"2026-03-17T16:25:26.067143Z","times_seen":2,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":18,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"api.lieshou.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.lieshou.vip/api/public/index_info?d=1773764586650\u0026language_type=en","fqdn":"api.lieshou.vip","domain":"lieshou.vip","tld":"vip"},"ip":{"addr":"172.67.142.235","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.lieshou.vip/#/register?ref=982017","date":"2026-03-17T16:23:06.656Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lieshou.vip","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Mar 2026 11:34:23 GMT","end":"Mon, 15 Jun 2026 11:34:22 GMT"},"fingerprint":{"sha1":"D7:5D:64:B7:86:F7:C2:6A:02:BE:66:BB:A3:3D:EC:2A:CC:CE:07:B3","sha256":"DB:AB:85:D9:A5:98:26:4C:58:FD:83:A8:92:34:C4:57:A1:BA:28:B3:A9:C3:78:8C:42:0F:B8:1E:FE:64:88:60"}}},"request":{"raw":"OPTIONS /api/public/index_info?d=1773764586650\u0026language_type=en HTTP/1.1\r\nHost: api.lieshou.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: st-ctime,st-lang,st-ttgn\r\nReferer: https://www.lieshou.vip/\r\nOrigin: https://www.lieshou.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 17 Mar 2026 16:23:06 GMT\r\ncontent-type: text/html;charset=utf-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://www.lieshou.vip\r\naccess-control-allow-methods: GET\r\naccess-control-allow-headers: st-ctime,st-lang,st-ttgn\r\nstrict-transport-security: max-age=31536000\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RgP8xc4oS8kuNSKHvZ4NQq5eSPciP%2B4ow96MBEaowlTkLPi1dPFCztpA3lN0LArzn12fAFScL5ayjEfg2uLqcuVyDjhyJ%2FtCMJEuyZkE9g%3D%3D\"}]}\r\ncf-ray: 9ddd571aadadddf7-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-11T09:57:30.082626Z","times_seen":17834258,"resource_available":true,"data":null}},"time_used":138,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":138,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"api.lieshou.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.lieshou.vip/assets/BaseMainBtn-cf1599ad.css","fqdn":"www.lieshou.vip","domain":"lieshou.vip","tld":"vip"},"ip":{"addr":"172.67.142.235","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.lieshou.vip/#/register?ref=982017","date":"2026-03-17T16:23:06.666Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lieshou.vip","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Mar 2026 11:34:23 GMT","end":"Mon, 15 Jun 2026 11:34:22 GMT"},"fingerprint":{"sha1":"D7:5D:64:B7:86:F7:C2:6A:02:BE:66:BB:A3:3D:EC:2A:CC:CE:07:B3","sha256":"DB:AB:85:D9:A5:98:26:4C:58:FD:83:A8:92:34:C4:57:A1:BA:28:B3:A9:C3:78:8C:42:0F:B8:1E:FE:64:88:60"}}},"request":{"raw":"GET /assets/BaseMainBtn-cf1599ad.css HTTP/1.1\r\nHost: www.lieshou.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.lieshou.vip/\r\nCookie: _scid=0eQkWkK66oLGxT_KX9CIVb_54N5Lg9NQ; _scid_r=0eQkWkK66oLGxT_KX9CIVb_54N5Lg9NQ\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 17 Mar 2026 16:23:06 GMT\r\ncontent-type: text/css\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=o3g0PfXXZe3QPLniXPcFFksqPwCjdcV0HLFaDRLpHIY4fwZL45mlHlZwvSAe3QdiEIyWmc6s5TsgpYkveAUXcE28QlBhmA9kgHsP%2BoxdUQ%3D%3D\"}]}\r\nlast-modified: Wed, 24 Sep 2025 08:26:09 GMT\r\npriority: u=2,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Wed, 18 Mar 2026 04:13:43 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: br\r\nage: 563\r\ncf-cache-status: HIT\r\netag: W/\"68d3ab21-da\"\r\ncf-ray: 9ddd571abdafddf7-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":218,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"c1fb97309cdf49465e4f0c30d3076578","sha1":"a89aad9837fa74c4b617ae97df0cb4bd6be84cd8","sha256":"cf1599ad93a05243bea5ed51b989a7bf72f5292a94b612154a39d30d50e35e9c","sha512":"c43620fa6919ff89a83a41252ce19bfef4cf68662f34b0a054749d7293c2dcb601ba2dace836f22635988cd596f8bc16b3f7b331a7eb622cb0df89e256ce9030","ssdeep":"","tlshash":"4ad0128d3191b97e18be87cc75ec50214b8038975f51beb9655429dd43872773c7305e","first_seen":"2023-11-04T18:18:58Z","last_seen":"2026-08-09T10:03:19.797916Z","times_seen":311,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"www.lieshou.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.lieshou.vip/assets/index-54757ceb.js","fqdn":"www.lieshou.vip","domain":"lieshou.vip","tld":"vip"},"ip":{"addr":"172.67.142.235","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.lieshou.vip/#/register?ref=982017","date":"2026-03-17T16:23:06.714Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lieshou.vip","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Mar 2026 11:34:23 GMT","end":"Mon, 15 Jun 2026 11:34:22 GMT"},"fingerprint":{"sha1":"D7:5D:64:B7:86:F7:C2:6A:02:BE:66:BB:A3:3D:EC:2A:CC:CE:07:B3","sha256":"DB:AB:85:D9:A5:98:26:4C:58:FD:83:A8:92:34:C4:57:A1:BA:28:B3:A9:C3:78:8C:42:0F:B8:1E:FE:64:88:60"}}},"request":{"raw":"GET /assets/index-54757ceb.js HTTP/1.1\r\nHost: www.lieshou.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.lieshou.vip/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 17 Mar 2026 16:23:06 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 17 Mar 2026 12:18:14 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69b94686-435\"\r\nexpires: Wed, 18 Mar 2026 04:23:06 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=L95YjmO30Flglc3QAu5mtGd7WcYkWvlzyhxzPWbomuCyCqnFDPOE2uZDcAiKttf72KG%2FyhI2UWHOW8hKxMSEqGNhEm7foNiJxqICLbcsQw%3D%3D\"}]}\r\ncf-ray: 9ddd571aedbfddf7-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1077,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (1076)","md5":"895f0b405d5839028b882466778e9c4b","sha1":"0acd97967297f8a13352264b6e609710759a7ff4","sha256":"948da5f1c6f0bb53a75d1732a982344830978f5178bffc8e0d08ba695f39c169","sha512":"1d344293669b1a904545fdc52611a71fd9e725ecec0c8f6f46e00d7e683038b54e43ced38b24a029c24aa3fca2ca47f43bf19a9efb0bb9a6390e8356a9f7dd39","ssdeep":"","tlshash":"6611659a6cf08ef940bd08867b930515551f0299565058e0f88e8e5c26bc9c25a2ff1c","first_seen":"2026-03-17T16:23:32.390021Z","last_seen":"2026-03-18T18:48:17.263374Z","times_seen":2,"resource_available":true,"data":null}},"time_used":273,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":273,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"www.lieshou.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.lieshou.vip/assets/index-08801986.js","fqdn":"www.lieshou.vip","domain":"lieshou.vip","tld":"vip"},"ip":{"addr":"172.67.142.235","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.lieshou.vip/#/register?ref=982017","date":"2026-03-17T16:23:06.715Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lieshou.vip","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Mar 2026 11:34:23 GMT","end":"Mon, 15 Jun 2026 11:34:22 GMT"},"fingerprint":{"sha1":"D7:5D:64:B7:86:F7:C2:6A:02:BE:66:BB:A3:3D:EC:2A:CC:CE:07:B3","sha256":"DB:AB:85:D9:A5:98:26:4C:58:FD:83:A8:92:34:C4:57:A1:BA:28:B3:A9:C3:78:8C:42:0F:B8:1E:FE:64:88:60"}}},"request":{"raw":"GET /assets/index-08801986.js HTTP/1.1\r\nHost: www.lieshou.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.lieshou.vip/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 17 Mar 2026 16:23:06 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 17 Mar 2026 12:18:14 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69b94686-7a6\"\r\nexpires: Wed, 18 Mar 2026 04:23:06 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EMFQndCc7BeuPnbKMS0xADsTXJYFxzTCAM%2BzwG3eSfO9PiHmUB%2BHiHQndh9kAoo7R8RqF9iCx6EQL2QBb0aSDVrsoQXh%2BGBGcwrUl%2F6P8g%3D%3D\"}]}\r\ncf-ray: 9ddd571aedc0ddf7-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1958,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (1957)","md5":"f1bd75d1404a6090bea4a7168f0a6540","sha1":"a540f10959c183110c2f75d0c50b5e741134f2c6","sha256":"b994a8a8fc787822a56a755c9fc6bfc2106420dbc803bdad683555950efc712d","sha512":"ff0ea2ee85e500a239a8f49d89c57f72515e77b8f0651d6408f649b0972fda2d94adb7672b7d7eba4dd95e6c0d7b4c9476ca69c959d35d8d4ae71922adacdf7b","ssdeep":"","tlshash":"4c41727d78cc1035cbbbd888846a4913b26f8b1c062889f1d0ab5d9c2e2e10cf177e31","first_seen":"2026-03-17T16:23:32.392533Z","last_seen":"2026-03-18T18:48:17.254052Z","times_seen":2,"resource_available":true,"data":null}},"time_used":276,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":276,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"www.lieshou.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"telegram.org/js/telegram-web-app.js","fqdn":"telegram.org","domain":"telegram.org","tld":"org"},"ip":{"addr":"149.154.167.99","port":443,"asn":62041,"as":"Telegram Messenger Inc","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.lieshou.vip/#/register?ref=982017","date":"2026-03-17T16:23:04.657Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.telegram.org","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Mon, 11 Aug 2025 13:36:48 GMT","end":"Sat, 12 Sep 2026 13:36:48 GMT"},"fingerprint":{"sha1":"85:08:98:2F:A3:60:90:21:E8:78:21:C8:A4:96:E1:A2:E6:9D:2C:64","sha256":"49:35:FF:BC:17:D1:E9:B3:15:37:E4:67:C2:3A:A0:69:6C:37:DC:52:3F:7C:02:D6:30:C4:6E:45:7C:CA:F0:D2"}}},"request":{"raw":"GET /js/telegram-web-app.js HTTP/1.1\r\nHost: telegram.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.lieshou.vip/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.18.0\r\ndate: Tue, 17 Mar 2026 16:23:04 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 10 Mar 2026 10:53:09 GMT\r\netag: W/\"69aff815-1c106\"\r\nexpires: Sat, 21 Mar 2026 16:23:04 GMT\r\ncache-control: max-age=345600\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":114950,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (768)","md5":"bb0a2fecf6cd27fba9cd29610fd2ccdc","sha1":"7546ed807d56be081be97fa1e4859381ecccf58e","sha256":"dc67f1e084e069a3fb629f3154765856fe0aa805a4e138bc42c228bc3d656a78","sha512":"5350795e68c371956350f88354aac62900d7fc5974817e93f49f218fa60becda436da0a8bf17d6239e2ef882cee0b18bfe66e181baa6f1ca04b57817c2920166","ssdeep":"1536:pO5TpRdoKd4F0WN2ZbBcn9cF9KTfVjLo03ueLE+wFFz1NIVIB/MGYV7p/xHK8ITq:s5TpRdfcKFU7Rx1H","tlshash":"31b33e4d6cb3612285b3b1bf8b5f924172759883301def20794d9b646f80e7c53eaad8","first_seen":"2026-03-10T21:38:17.367441Z","last_seen":"2026-08-06T08:41:46.722793Z","times_seen":775,"resource_available":true,"data":null}},"time_used":306,"timings":{"blocked":140,"dns":1,"connect":21,"send":0,"wait":22,"receive":0,"ssl":119},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.lieshou.vip/assets/index-f340e98c.css","fqdn":"www.lieshou.vip","domain":"lieshou.vip","tld":"vip"},"ip":{"addr":"172.67.142.235","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.lieshou.vip/#/register?ref=982017","date":"2026-03-17T16:23:04.662Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lieshou.vip","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Mar 2026 11:34:23 GMT","end":"Mon, 15 Jun 2026 11:34:22 GMT"},"fingerprint":{"sha1":"D7:5D:64:B7:86:F7:C2:6A:02:BE:66:BB:A3:3D:EC:2A:CC:CE:07:B3","sha256":"DB:AB:85:D9:A5:98:26:4C:58:FD:83:A8:92:34:C4:57:A1:BA:28:B3:A9:C3:78:8C:42:0F:B8:1E:FE:64:88:60"}}},"request":{"raw":"GET /assets/index-f340e98c.css HTTP/1.1\r\nHost: www.lieshou.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.lieshou.vip/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 17 Mar 2026 16:23:04 GMT\r\ncontent-type: text/css\r\nlast-modified: Sat, 14 Mar 2026 16:20:13 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69b58abd-1073ac\"\r\nexpires: Wed, 18 Mar 2026 04:23:04 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hUsOAeZxFVUJ2xXV%2B47DHbxP%2BLt5lIyAAdXpIeG7PScCi4JV%2F7pSDGt%2Blt8FlOXBuenNYWittFwdAyr74D2uZ7CBRV4gDcZ48rhcxJ%2F8TA%3D%3D\"}]}\r\ncf-ray: 9ddd570e2ba7ddf7-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1078188,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (65018), with no line terminators","md5":"f14143c0518897b329cb35be8da273f9","sha1":"2f36a901c767ed6c7d2edd843587948c7235cae8","sha256":"5c311cde73e8175b0bd108702a3c9c073cab906cab23426ca6008b9151ff37f0","sha512":"fabaa2ba4d23d7a3eabb705309affceead856078a238a05c9f9611bc18e3c418878aeb06651d4ea175c43a3e9298530ddfe41f37a7b08f9f52b36cb5c8557a85","ssdeep":"12288:6n1HgnTIakPOmwagu0uRNNcD55TSS12FhKR7hGucwesKzN8vFD:6n1qTI1OW0ocD55TSS12FhKR7hGucwJ","tlshash":"24254bb86f8451befd0bcf7a4728958c691ef093ef424e846619f53043c72a77663268","first_seen":"2026-03-10T21:38:17.232313Z","last_seen":"2026-06-09T16:29:13.139254Z","times_seen":29,"resource_available":false,"data":null}},"time_used":759,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":272,"receive":487,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"www.lieshou.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.lieshou.vip/assets/index-d56192c0.css","fqdn":"www.lieshou.vip","domain":"lieshou.vip","tld":"vip"},"ip":{"addr":"172.67.142.235","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.lieshou.vip/#/register?ref=982017","date":"2026-03-17T16:23:06.689Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lieshou.vip","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Mar 2026 11:34:23 GMT","end":"Mon, 15 Jun 2026 11:34:22 GMT"},"fingerprint":{"sha1":"D7:5D:64:B7:86:F7:C2:6A:02:BE:66:BB:A3:3D:EC:2A:CC:CE:07:B3","sha256":"DB:AB:85:D9:A5:98:26:4C:58:FD:83:A8:92:34:C4:57:A1:BA:28:B3:A9:C3:78:8C:42:0F:B8:1E:FE:64:88:60"}}},"request":{"raw":"GET /assets/index-d56192c0.css HTTP/1.1\r\nHost: www.lieshou.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.lieshou.vip/\r\nCookie: _scid=0eQkWkK66oLGxT_KX9CIVb_54N5Lg9NQ; _scid_r=0eQkWkK66oLGxT_KX9CIVb_54N5Lg9NQ\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 17 Mar 2026 16:23:06 GMT\r\ncontent-type: text/css\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=s4Xr5G20CUMHaqmWZ2%2FdEk1LYq24yb1X8SRIxNF0bsGXlSOoWESXLnjrYgqETOLkKqBCv8siYdGIqJzoiMAmCSU%2BbKgoMoaCkrPB6ObhTw%3D%3D\"}]}\r\nlast-modified: Wed, 24 Sep 2025 08:26:09 GMT\r\npriority: u=2,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Wed, 18 Mar 2026 04:13:43 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: br\r\nage: 563\r\ncf-cache-status: HIT\r\netag: W/\"68d3ab21-3d\"\r\ncf-ray: 9ddd571addb4ddf7-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":61,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"186fb1b7bcf7b4484422f657a2d0a66a","sha1":"bac6f21e45e86ce5fc7ae63485ff8f0ae004176d","sha256":"d56192c060bf7a99d3f3b4c0423b887037f7f99353920242b8cd8ef520a8fb62","sha512":"b552c8d0495770108a31d5ac0dfeedce31e5b9b6f0cee914031774bed544000fccbc690024c355019e86c314e59667b3c32635ceb95fa4e1c7372cd280a523a9","ssdeep":"","tlshash":"60a0026249545e641a9240820d8407578434c1044a136e6dd4b99d1a2cce4810e534dc","first_seen":"2024-06-07T16:46:44Z","last_seen":"2026-08-09T10:03:19.804272Z","times_seen":189,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"www.lieshou.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.lieshou.vip/assets/BaseInput-6cb66fbc.css","fqdn":"www.lieshou.vip","domain":"lieshou.vip","tld":"vip"},"ip":{"addr":"172.67.142.235","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.lieshou.vip/#/register?ref=982017","date":"2026-03-17T16:23:06.693Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lieshou.vip","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Mar 2026 11:34:23 GMT","end":"Mon, 15 Jun 2026 11:34:22 GMT"},"fingerprint":{"sha1":"D7:5D:64:B7:86:F7:C2:6A:02:BE:66:BB:A3:3D:EC:2A:CC:CE:07:B3","sha256":"DB:AB:85:D9:A5:98:26:4C:58:FD:83:A8:92:34:C4:57:A1:BA:28:B3:A9:C3:78:8C:42:0F:B8:1E:FE:64:88:60"}}},"request":{"raw":"GET /assets/BaseInput-6cb66fbc.css HTTP/1.1\r\nHost: www.lieshou.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.lieshou.vip/\r\nCookie: _scid=0eQkWkK66oLGxT_KX9CIVb_54N5Lg9NQ; _scid_r=0eQkWkK66oLGxT_KX9CIVb_54N5Lg9NQ\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 17 Mar 2026 16:23:06 GMT\r\ncontent-type: text/css\r\nlast-modified: Sat, 14 Mar 2026 16:20:13 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69b58abd-597\"\r\nexpires: Wed, 18 Mar 2026 04:13:43 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\nage: 563\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=q1BEXGXKos3Feo%2Br04WTT4j9gHFIhmndGsueY2hrk12jl4iinzd%2B9QdjMVylZeCCtFnN4AzWH7uQBKOFGIEIYOw7BEKMJa%2FzRrs1sVSb%2FA%3D%3D\"}]}\r\ncf-ray: 9ddd571addb6ddf7-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1431,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (1430)","md5":"b3d037c37356ce62fe0bfb73ca394c95","sha1":"d77a30c52c8b7b275f944bff952376f2ea4d54b0","sha256":"6cb66fbcdf648305a59b5c33637cf0e9969cbbe498dc8fc3627d89019e64317f","sha512":"32c4d7e029372cebef4d89d0e3d119302fe562441306d600e84fee35b1672371ed5765778f7b6fcffe8d3669d9b9e5a7bcf2086967fd269fc855f4a6fff1353e","ssdeep":"","tlshash":"39217d080d60df1b2caa6ef3e5c8da872c0854b34fb39d05d140602687958b53f3fe68","first_seen":"2026-01-03T15:18:18.18816Z","last_seen":"2026-08-09T10:03:19.846391Z","times_seen":97,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"www.lieshou.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.lieshou.vip/assets/NavBar-faa64b88.css","fqdn":"www.lieshou.vip","domain":"lieshou.vip","tld":"vip"},"ip":{"addr":"172.67.142.235","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.lieshou.vip/#/register?ref=982017","date":"2026-03-17T16:23:06.704Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lieshou.vip","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Mar 2026 11:34:23 GMT","end":"Mon, 15 Jun 2026 11:34:22 GMT"},"fingerprint":{"sha1":"D7:5D:64:B7:86:F7:C2:6A:02:BE:66:BB:A3:3D:EC:2A:CC:CE:07:B3","sha256":"DB:AB:85:D9:A5:98:26:4C:58:FD:83:A8:92:34:C4:57:A1:BA:28:B3:A9:C3:78:8C:42:0F:B8:1E:FE:64:88:60"}}},"request":{"raw":"GET /assets/NavBar-faa64b88.css HTTP/1.1\r\nHost: www.lieshou.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.lieshou.vip/\r\nCookie: _scid=0eQkWkK66oLGxT_KX9CIVb_54N5Lg9NQ; _scid_r=0eQkWkK66oLGxT_KX9CIVb_54N5Lg9NQ\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 17 Mar 2026 16:23:06 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 14 Nov 2025 01:32:47 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"691686bf-5c7e\"\r\nexpires: Wed, 18 Mar 2026 04:13:43 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\nage: 563\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mCqWWsZdMHo0aoyKj77v5qk7S6wzhKfpk8i%2FPJ9g8WeHsmYQGA1IX9t44wthlDO%2FWNXZw6S7%2Bpp1gkE7f%2Fq3iAEqhvqNGNHSywKOiWUUfg%3D%3D\"}]}\r\ncf-ray: 9ddd571addb8ddf7-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":23678,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (23677)","md5":"468f2ddc6e3aa1b8eaad881853ad4eaa","sha1":"3dc5d872bdf5b920b14a9785be130086ca981ff1","sha256":"faa64b884a32121e72154c982db040a08bffc528d5f6605f6355486a31bbc7a8","sha512":"562cb73416ff54d30da51daa11b726bec115156c4359c701af70648563a3f68b876aaa59cbb0af5aa2b4d207de044f31919e59c492a8a8c15e7a2b4b1fe4fc9b","ssdeep":"384:9Qus6Dn1lvW04hbGC2WNuf1BVyGQ8ApopxgS3JS57:eu1D1VN0bV2WNuf1yGZlL+7","tlshash":"16b274e403a4b33cff1fa41666ed8ac92e149209c237f9599e017336d1df29716b9d88","first_seen":"2025-10-16T04:09:02.764428Z","last_seen":"2026-07-18T04:13:55.353677Z","times_seen":175,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"www.lieshou.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.lieshou.vip/assets/login-c6e297-5638315b.js","fqdn":"www.lieshou.vip","domain":"lieshou.vip","tld":"vip"},"ip":{"addr":"172.67.142.235","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.lieshou.vip/#/register?ref=982017","date":"2026-03-17T16:23:06.721Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lieshou.vip","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Mar 2026 11:34:23 GMT","end":"Mon, 15 Jun 2026 11:34:22 GMT"},"fingerprint":{"sha1":"D7:5D:64:B7:86:F7:C2:6A:02:BE:66:BB:A3:3D:EC:2A:CC:CE:07:B3","sha256":"DB:AB:85:D9:A5:98:26:4C:58:FD:83:A8:92:34:C4:57:A1:BA:28:B3:A9:C3:78:8C:42:0F:B8:1E:FE:64:88:60"}}},"request":{"raw":"GET /assets/login-c6e297-5638315b.js HTTP/1.1\r\nHost: www.lieshou.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.lieshou.vip/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 17 Mar 2026 16:23:06 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Q3X8bpL%2BBwlsN7z3SNZkBW8Ehs0pGU3yMGKdu7b28zYG7SB2kZKJelC37E6Tpz1KaEym2yoHNxgbc5dkWzX6s6Uppmio6%2BNpA7pMVlzKCQ%3D%3D\"}]}\r\nlast-modified: Wed, 24 Sep 2025 08:26:09 GMT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Wed, 18 Mar 2026 04:23:06 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: br\r\ncf-cache-status: MISS\r\netag: W/\"68d3ab21-3bb\"\r\ncf-ray: 9ddd571afdc5ddf7-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":955,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (954)","md5":"8d4976d22aa948250a135c00d3d9a28b","sha1":"80d5ae9a3c2e3ddefc51119105b945e7ecacf92d","sha256":"80ac60742cda817e1d84a928ff9d93588793b60acd461fb0dd0a1291cb4ce262","sha512":"b6213399deb3a996557ca5ed9026d2a49c63966495f9ca854c5548c7b5222cbccb309c84539645db2d74df21c66f62cfd3f28db5a0f87a193aea4e58b3361d15","ssdeep":"","tlshash":"bb11822aca585d3f112c390d02c6e9e4010d332b9868ef7cc336852c6c18b1746d6c70","first_seen":"2025-02-18T16:23:29.571893Z","last_seen":"2026-08-09T10:03:19.802024Z","times_seen":139,"resource_available":true,"data":null}},"time_used":268,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":268,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"www.lieshou.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.lieshou.vip/assets/index-08801986.js","fqdn":"www.lieshou.vip","domain":"lieshou.vip","tld":"vip"},"ip":{"addr":"172.67.142.235","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.lieshou.vip/#/register?ref=982017","date":"2026-03-17T16:23:07.182Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lieshou.vip","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Mar 2026 11:34:23 GMT","end":"Mon, 15 Jun 2026 11:34:22 GMT"},"fingerprint":{"sha1":"D7:5D:64:B7:86:F7:C2:6A:02:BE:66:BB:A3:3D:EC:2A:CC:CE:07:B3","sha256":"DB:AB:85:D9:A5:98:26:4C:58:FD:83:A8:92:34:C4:57:A1:BA:28:B3:A9:C3:78:8C:42:0F:B8:1E:FE:64:88:60"}}},"request":{"raw":"GET /assets/index-08801986.js HTTP/1.1\r\nHost: www.lieshou.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.lieshou.vip/assets/register-7183de6a.js\r\nCookie: _scid=0eQkWkK66oLGxT_KX9CIVb_54N5Lg9NQ; _scid_r=0eQkWkK66oLGxT_KX9CIVb_54N5Lg9NQ\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 17 Mar 2026 16:23:07 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 17 Mar 2026 12:18:14 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69b94686-7a6\"\r\nexpires: Wed, 18 Mar 2026 04:23:06 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\nage: 0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Y%2FVdHHlyf9CYtbJjJ5fGGdihJkSO%2Bs90McOXbbVaiArLl3pXHg0AYLsGjKIyHOEubbN%2BagrQbl7HM5r%2BRaKA9LllHU6sZ9HUlCTWzGQ9Sw%3D%3D\"}]}\r\ncf-ray: 9ddd571dde3cddf7-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1958,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (1957)","md5":"f1bd75d1404a6090bea4a7168f0a6540","sha1":"a540f10959c183110c2f75d0c50b5e741134f2c6","sha256":"b994a8a8fc787822a56a755c9fc6bfc2106420dbc803bdad683555950efc712d","sha512":"ff0ea2ee85e500a239a8f49d89c57f72515e77b8f0651d6408f649b0972fda2d94adb7672b7d7eba4dd95e6c0d7b4c9476ca69c959d35d8d4ae71922adacdf7b","ssdeep":"","tlshash":"4c41727d78cc1035cbbbd888846a4913b26f8b1c062889f1d0ab5d9c2e2e10cf177e31","first_seen":"2026-03-17T16:23:32.392533Z","last_seen":"2026-03-18T18:48:17.254052Z","times_seen":2,"resource_available":true,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"www.lieshou.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.lieshou.vip/assets/BaseInput.vue_vue_type_style_index_0_lang-c56f899e.js","fqdn":"www.lieshou.vip","domain":"lieshou.vip","tld":"vip"},"ip":{"addr":"172.67.142.235","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.lieshou.vip/#/register?ref=982017","date":"2026-03-17T16:23:07.184Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lieshou.vip","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Mar 2026 11:34:23 GMT","end":"Mon, 15 Jun 2026 11:34:22 GMT"},"fingerprint":{"sha1":"D7:5D:64:B7:86:F7:C2:6A:02:BE:66:BB:A3:3D:EC:2A:CC:CE:07:B3","sha256":"DB:AB:85:D9:A5:98:26:4C:58:FD:83:A8:92:34:C4:57:A1:BA:28:B3:A9:C3:78:8C:42:0F:B8:1E:FE:64:88:60"}}},"request":{"raw":"GET /assets/BaseInput.vue_vue_type_style_index_0_lang-c56f899e.js HTTP/1.1\r\nHost: www.lieshou.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.lieshou.vip/assets/register-7183de6a.js\r\nCookie: _scid=0eQkWkK66oLGxT_KX9CIVb_54N5Lg9NQ; _scid_r=0eQkWkK66oLGxT_KX9CIVb_54N5Lg9NQ\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 17 Mar 2026 16:23:07 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 17 Mar 2026 12:18:14 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69b94686-95c\"\r\nexpires: Wed, 18 Mar 2026 04:23:06 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\nage: 0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IpPCrB1k4tw1oqyUtLCDM1sIk7ypW1dU%2BMhAOsquLhyLu2f6VDoJXXP0iVY5e2lkDrA5wpBTPSCTkn0gvvMPJia26Vt1MG6bkicpGoz4ng%3D%3D\"}]}\r\ncf-ray: 9ddd571dee3fddf7-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2396,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (2395)","md5":"f637760231be31562f755e1eeb8cd85d","sha1":"ba8690542249e0eacccbb81732eab53c9d7e7c8c","sha256":"fea2a52dce24a3885cf6f5fa1c68a11fca19e8173b292aaf2e5c33c90f975fbc","sha512":"c20d559f13d1465dbf8762a5f0330ea108114ebd59201231e4cb03700db1a58f281e5e7a1815712088a0ca664a6b6b9c3fc8e591c9619434a559e7c7514cce12","ssdeep":"","tlshash":"5141670addaaafb2c673d6a5a2df0c20e0153767c95049a150fd192d2b8cde4173ff18","first_seen":"2026-03-17T16:23:32.404024Z","last_seen":"2026-03-18T18:48:17.261949Z","times_seen":2,"resource_available":true,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"www.lieshou.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sc-static.net/scevent.min.js","fqdn":"sc-static.net","domain":"sc-static.net","tld":"net"},"ip":{"addr":"3.163.248.4","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.lieshou.vip/#/register?ref=982017","date":"2026-03-17T16:23:04.935Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sc-static.net","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Wed, 22 Oct 2025 00:00:00 GMT","end":"Fri, 20 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"1D:63:7D:63:F2:DF:8F:C5:65:EF:16:8E:06:3E:E4:66:D9:41:67:CD","sha256":"91:A8:D7:CD:20:36:14:EC:9A:D5:10:BC:DD:44:F1:9D:26:20:78:F8:92:93:7B:37:6A:F8:E9:7B:FC:7E:72:66"}}},"request":{"raw":"GET /scevent.min.js HTTP/1.1\r\nHost: sc-static.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.lieshou.vip/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript;charset=utf-8\r\ncontent-length: 24779\r\nserver: CloudFront\r\ndate: Tue, 17 Mar 2026 16:23:04 GMT\r\naccess-control-allow-headers: Content-Type\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\ncache-control: private, s-maxage=0, max-age=600\r\nset-cookie: X-AB=0c63259e9d784f0a999d3b56e6dc48d1;max-age=86400;expires=Wed, 18 Mar 2026 16:23:04 GMT;Path=/scevent.min.js;Secure;SameSite=None\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 2f3a70deb5812eb0e48215ada7b72404.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: 6s9a3xQrmPBNKl3ywMU4CaIjZLx613dGbLR3sRHK0TEjg9F7AEbAnQ==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":58763,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (58736)","md5":"63bbf59a9554735b8434a2ef930fce23","sha1":"55c56de71b33c059fe2995213bcfac8ecf6a32f5","sha256":"6c4d214f158b408350da732ed8049847e5d4ca2df28ee87c9605225560943398","sha512":"85b3693442f3e1f01fca64fb2fa4e3de4a9764bd16ac01ca1e04625322cc9b79cbe347f63cec3008de0d654a3dd60c15f38e03ba9249ec2c82d6c9bd050db3db","ssdeep":"1536:kQ870ziaaTzjPOevVJm0tlsuHrih9HHVZ1GJV51kxx0Kb:785hTl49dx0G","tlshash":"1c43d78cb7e9b02503973472497f541be33bb9646c0bc650c526e5883dbc69e9237eac","first_seen":"2026-03-17T00:15:22.962945Z","last_seen":"2026-03-17T17:22:31.995662Z","times_seen":77,"resource_available":true,"data":null}},"time_used":113,"timings":{"blocked":34,"dns":29,"connect":1,"send":0,"wait":41,"receive":1,"ssl":5},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.lieshou.vip/upload/img/69b9564ce459.webp","fqdn":"api.lieshou.vip","domain":"lieshou.vip","tld":"vip"},"ip":{"addr":"172.67.142.235","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.lieshou.vip/#/register?ref=982017","date":"2026-03-17T16:23:06.552Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lieshou.vip","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Mar 2026 11:34:23 GMT","end":"Mon, 15 Jun 2026 11:34:22 GMT"},"fingerprint":{"sha1":"D7:5D:64:B7:86:F7:C2:6A:02:BE:66:BB:A3:3D:EC:2A:CC:CE:07:B3","sha256":"DB:AB:85:D9:A5:98:26:4C:58:FD:83:A8:92:34:C4:57:A1:BA:28:B3:A9:C3:78:8C:42:0F:B8:1E:FE:64:88:60"}}},"request":{"raw":"GET /upload/img/69b9564ce459.webp HTTP/1.1\r\nHost: api.lieshou.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.lieshou.vip/\r\nCookie: _scid=0eQkWkK66oLGxT_KX9CIVb_54N5Lg9NQ; _scid_r=0eQkWkK66oLGxT_KX9CIVb_54N5Lg9NQ\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 17 Mar 2026 16:23:06 GMT\r\ncontent-type: image/webp\r\ncontent-length: 27240\r\nlast-modified: Tue, 17 Mar 2026 13:25:32 GMT\r\npriority: u=6,i=?0\r\netag: \"69b9564c-6a68\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nage: 564\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=izbqZY%2FFl2%2Fxg8%2BpCcOcczUrzL7LXqk1kvBbegpiX8TTFMvQ6porzIC%2BL8kaSLUuU%2BFz5x4d1KGQxMppivMHSQtBaMYvGt5%2FnRU%2Bb3W2TQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ddd5719fd96ddf7-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":27240,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 402x281, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"f95e87cd76264864a00ade8df0f56d85","sha1":"ceceea3461793325121391b47fc93717347a5fa1","sha256":"12b1f5d5e8e5324cb3445f5414585537f14f14a6cc36e63a61a8499d1350523b","sha512":"df92c868dc96530f5e25a5cf35b77d5015f7edcb8a331bae01ab43de570a4d9dcc7400168112d0eacc1f76bf9e0e445244ca465d90b42021336fb38ce1f46621","ssdeep":"768:S6D4y4+DHQzuEMFnNCYCUxjryB89Bv5qfS:4zLzubnGcOG9","tlshash":"0dc2e1a4401b59f07fec5ea0990c3b44a86bdee46d80e55caceee70bdfa150c8f40a0d","first_seen":"2026-03-17T16:23:32.406999Z","last_seen":"2026-03-17T16:25:26.090606Z","times_seen":2,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"api.lieshou.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.lieshou.vip/assets/ContainerForm-4e418d51.css","fqdn":"www.lieshou.vip","domain":"lieshou.vip","tld":"vip"},"ip":{"addr":"172.67.142.235","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.lieshou.vip/#/register?ref=982017","date":"2026-03-17T16:23:06.679Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lieshou.vip","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Mar 2026 11:34:23 GMT","end":"Mon, 15 Jun 2026 11:34:22 GMT"},"fingerprint":{"sha1":"D7:5D:64:B7:86:F7:C2:6A:02:BE:66:BB:A3:3D:EC:2A:CC:CE:07:B3","sha256":"DB:AB:85:D9:A5:98:26:4C:58:FD:83:A8:92:34:C4:57:A1:BA:28:B3:A9:C3:78:8C:42:0F:B8:1E:FE:64:88:60"}}},"request":{"raw":"GET /assets/ContainerForm-4e418d51.css HTTP/1.1\r\nHost: www.lieshou.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.lieshou.vip/\r\nCookie: _scid=0eQkWkK66oLGxT_KX9CIVb_54N5Lg9NQ; _scid_r=0eQkWkK66oLGxT_KX9CIVb_54N5Lg9NQ\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 17 Mar 2026 16:23:06 GMT\r\ncontent-type: text/css\r\ncontent-length: 43\r\nlast-modified: Wed, 24 Sep 2025 08:26:09 GMT\r\npriority: u=2,i=?0\r\netag: \"68d3ab21-2b\"\r\nexpires: Wed, 18 Mar 2026 04:13:43 GMT\r\ncache-control: max-age=43200\r\naccept-ranges: bytes\r\nage: 563\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5vbQC5OuB1IsH75oXFPuP2g0ald4bfByybJ7EX%2FAx7AMVSanHxZ6TMZJN4qcN6KdCjIPKN7sE1Aez%2FcUXD02rXlQjItU8wbyNiU3UEjMHQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ddd571acdb1ddf7-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":43,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"210bc0aef74b653b3356a9a9b785006d","sha1":"b77ab851a4963c96af01c55e7dafb33240202fdc","sha256":"4e418d51c9ed84b3998be57770f4d38289e5e8d86351b032b91fd304eedd2a49","sha512":"dc96806e9bdb062655a1d74a5b387b0d13121d6d4a427c31a5af4c23daf6378dd5073e051dca208189f335e6a31088d3149d6cb9d0503f6e27dde66172eb67ea","ssdeep":"","tlshash":"429002441980647ab501919d255402150604a84b84404e65a014595051d15f60051a58","first_seen":"2023-11-09T00:35:11Z","last_seen":"2026-08-09T10:03:19.795945Z","times_seen":228,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"www.lieshou.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.lieshou.vip/assets/ContainerForm-c5503bf7.js","fqdn":"www.lieshou.vip","domain":"lieshou.vip","tld":"vip"},"ip":{"addr":"172.67.142.235","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.lieshou.vip/#/register?ref=982017","date":"2026-03-17T16:23:06.713Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lieshou.vip","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Mar 2026 11:34:23 GMT","end":"Mon, 15 Jun 2026 11:34:22 GMT"},"fingerprint":{"sha1":"D7:5D:64:B7:86:F7:C2:6A:02:BE:66:BB:A3:3D:EC:2A:CC:CE:07:B3","sha256":"DB:AB:85:D9:A5:98:26:4C:58:FD:83:A8:92:34:C4:57:A1:BA:28:B3:A9:C3:78:8C:42:0F:B8:1E:FE:64:88:60"}}},"request":{"raw":"GET /assets/ContainerForm-c5503bf7.js HTTP/1.1\r\nHost: www.lieshou.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.lieshou.vip/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 17 Mar 2026 16:23:06 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=o34CjAh%2Bemv9zkoJk99PB3VGjBsT9esBaR5hxIKTRHmTHA6p1MCrvod%2FDyTCp7%2FCDJ3r6eI1hhAMABGobPvr29%2Fm2kCv1IGAt1%2FAmrWBjg%3D%3D\"}]}\r\nlast-modified: Tue, 17 Mar 2026 12:18:14 GMT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Wed, 18 Mar 2026 04:23:06 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: br\r\ncf-cache-status: MISS\r\netag: W/\"69b94686-d9\"\r\ncf-ray: 9ddd571aedbdddf7-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":217,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text","md5":"4485b5e8d0969798ad360219bfcb8047","sha1":"b911008967fca2b70e5f8eff97d9e6aa3587e3fb","sha256":"587ee6488ac37db3c7146de8d71b8a42d1858c0c0f36455df08ee40d3c50194e","sha512":"6527a25e468b3d0d8d32953e46f03e5b0088a4897bbf5b803b791f39a2830f7541d0bd8d6b82dece4ddf2f849afcf2ddf9a669b9e76b6777134e0d6ee9ddeddc","ssdeep":"","tlshash":"6ad0220d6c5092b780120e8c77663536cbae3f3633b48d92105b84a58b164af220ef4c","first_seen":"2026-03-17T16:23:32.410306Z","last_seen":"2026-03-18T18:48:17.276809Z","times_seen":2,"resource_available":true,"data":null}},"time_used":272,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":272,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"www.lieshou.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.lieshou.vip/assets/register-7183de6a.js","fqdn":"www.lieshou.vip","domain":"lieshou.vip","tld":"vip"},"ip":{"addr":"172.67.142.235","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.lieshou.vip/#/register?ref=982017","date":"2026-03-17T16:23:06.738Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lieshou.vip","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Mar 2026 11:34:23 GMT","end":"Mon, 15 Jun 2026 11:34:22 GMT"},"fingerprint":{"sha1":"D7:5D:64:B7:86:F7:C2:6A:02:BE:66:BB:A3:3D:EC:2A:CC:CE:07:B3","sha256":"DB:AB:85:D9:A5:98:26:4C:58:FD:83:A8:92:34:C4:57:A1:BA:28:B3:A9:C3:78:8C:42:0F:B8:1E:FE:64:88:60"}}},"request":{"raw":"GET /assets/register-7183de6a.js HTTP/1.1\r\nHost: www.lieshou.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.lieshou.vip/assets/index-8920794d.js\r\nCookie: _scid=0eQkWkK66oLGxT_KX9CIVb_54N5Lg9NQ; _scid_r=0eQkWkK66oLGxT_KX9CIVb_54N5Lg9NQ\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 17 Mar 2026 16:23:06 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 17 Mar 2026 12:18:14 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69b94686-43dc6\"\r\nexpires: Wed, 18 Mar 2026 04:23:06 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\nage: 0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WJIuhVcLStnV47joPjvqSl9nO1lePhYWzmpDYPaoJPlSvrV6DXE4mkRDJ4UYfYYjOqFBKYXEoeYhEk1C0CvpJSzvmSutxIWpmbC%2BYUylWQ%3D%3D\"}]}\r\ncf-ray: 9ddd571b2dd4ddf7-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":277958,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"2ed17af12d1dc5af0a7abbd20a931b6c","sha1":"6eebbcecbe99f49af4dc092f2d39da8f235858a1","sha256":"0f5c3752d81bab4b1011beab8b83faba34ac78cb68acf611d47e507c06d4b27e","sha512":"c17068d3902d5ae7eb7f1460cd201cf87b330beffe6c8b022ab5f3ebc76c3b69eb4610a1141c2fddae0afec5470378ac4716d2a90e507d9314df4b3d49de2152","ssdeep":"6144:78crRsL6EJDpw1rM1cAgtx/MNhRogSV4ghfUWlUa5CoJHGfAseGRTYDeLzry7f0R:x1mlRq14KbHOP7CXV9q2B94pLNsGn0sR","tlshash":"2a44619cd0b4cf76d4b79661385ea4a0b05e4befc2405714a3fc4a252edacf0a3b57a4","first_seen":"2026-03-17T16:23:32.412232Z","last_seen":"2026-03-18T18:48:17.271182Z","times_seen":2,"resource_available":true,"data":null}},"time_used":354,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":231,"receive":123,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"www.lieshou.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.lieshou.vip/api/public/index_info?d=1773764586650\u0026language_type=en","fqdn":"api.lieshou.vip","domain":"lieshou.vip","tld":"vip"},"ip":{"addr":"172.67.142.235","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.lieshou.vip/#/register?ref=982017","date":"2026-03-17T16:23:06.796Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lieshou.vip","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Mar 2026 11:34:23 GMT","end":"Mon, 15 Jun 2026 11:34:22 GMT"},"fingerprint":{"sha1":"D7:5D:64:B7:86:F7:C2:6A:02:BE:66:BB:A3:3D:EC:2A:CC:CE:07:B3","sha256":"DB:AB:85:D9:A5:98:26:4C:58:FD:83:A8:92:34:C4:57:A1:BA:28:B3:A9:C3:78:8C:42:0F:B8:1E:FE:64:88:60"}}},"request":{"raw":"GET /api/public/index_info?d=1773764586650\u0026language_type=en HTTP/1.1\r\nHost: api.lieshou.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nst-lang: en\r\nst-ctime: 1773764586650\r\nst-ttgn: 89032ec0d154a98f7f8fab189d75fafa\r\nOrigin: https://www.lieshou.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.lieshou.vip/\r\nCookie: _scid=0eQkWkK66oLGxT_KX9CIVb_54N5Lg9NQ; _scid_r=0eQkWkK66oLGxT_KX9CIVb_54N5Lg9NQ\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 17 Mar 2026 16:23:06 GMT\r\ncontent-type: application/json\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=in3XDPQjtOJiNjQJgN527tMztxftO%2F%2FyogKIX34q1deM%2FcmblAj0KxrKqetDQlx%2BMBx0jzURYhe2khTlehrHiWk1SUS5PuPNc4YOj0GclQ%3D%3D\"}]}\r\npriority: u=3,i=?0\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://www.lieshou.vip\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\nstrict-transport-security: max-age=31536000\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ddd571b8deeddf7-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6063,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"ba072efbeea3d5cd179bfb265716c472","sha1":"129d8887cb098a4285723c8944ddd24534e40b33","sha256":"ad1cbe0943f030a5f75f5f72ed6feb82b8633d14ba59e80e3fb3df5276be2a91","sha512":"fb8a5b8701844def066c1744aa8e13d3f170b248cecefd485decc7d8387dff5d5d8b0f97b5eefd2d1c400c2e84d4e7215aee9f8022dd95ea7e18c97bccf3a16d","ssdeep":"96:I/d9ymTAM2KgXfH9MgV/JwY3pg8IFycJ17qydfr2aK8pMpja6WBfERFqPzf67iY:I/d9yTM2BFM+5pKycj7HdyaFpKOzBfef","tlshash":"d5c121f221be8c1112f11ec17ecf716169adb09a4ec49f949fadaf7c8498177112bc92","first_seen":"2026-03-17T16:23:32.414729Z","last_seen":"2026-03-17T16:23:32.414729Z","times_seen":1,"resource_available":false,"data":null}},"time_used":144,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":144,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"api.lieshou.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.lieshou.vip/api/public/visit","fqdn":"api.lieshou.vip","domain":"lieshou.vip","tld":"vip"},"ip":{"addr":"172.67.142.235","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.lieshou.vip/#/register?ref=982017","date":"2026-03-17T16:23:07.293Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lieshou.vip","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Mar 2026 11:34:23 GMT","end":"Mon, 15 Jun 2026 11:34:22 GMT"},"fingerprint":{"sha1":"D7:5D:64:B7:86:F7:C2:6A:02:BE:66:BB:A3:3D:EC:2A:CC:CE:07:B3","sha256":"DB:AB:85:D9:A5:98:26:4C:58:FD:83:A8:92:34:C4:57:A1:BA:28:B3:A9:C3:78:8C:42:0F:B8:1E:FE:64:88:60"}}},"request":{"raw":"OPTIONS /api/public/visit HTTP/1.1\r\nHost: api.lieshou.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,st-ctime,st-lang,st-ttgn\r\nReferer: https://www.lieshou.vip/\r\nOrigin: https://www.lieshou.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 17 Mar 2026 16:23:07 GMT\r\ncontent-type: text/html;charset=utf-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://www.lieshou.vip\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: content-type,st-ctime,st-lang,st-ttgn\r\nstrict-transport-security: max-age=31536000\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8z0xzaVYHb7DtunrZz8nqGt4R4fJfnceIzIGf5KxsUQ04AfZnV672ABL%2BSLaNDyxpP75rHoT7HxuUUlySmyrBNaLBs9ZbTyjqkKdEFBpHA%3D%3D\"}]}\r\ncf-ray: 9ddd571e9e5bddf7-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-11T09:57:30.082626Z","times_seen":17834258,"resource_available":true,"data":null}},"time_used":136,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":136,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"api.lieshou.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.lieshou.vip/api/public/get_lang_json?d=1773764586214\u0026lang=en","fqdn":"api.lieshou.vip","domain":"lieshou.vip","tld":"vip"},"ip":{"addr":"172.67.142.235","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.lieshou.vip/#/register?ref=982017","date":"2026-03-17T16:23:06.361Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lieshou.vip","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Mar 2026 11:34:23 GMT","end":"Mon, 15 Jun 2026 11:34:22 GMT"},"fingerprint":{"sha1":"D7:5D:64:B7:86:F7:C2:6A:02:BE:66:BB:A3:3D:EC:2A:CC:CE:07:B3","sha256":"DB:AB:85:D9:A5:98:26:4C:58:FD:83:A8:92:34:C4:57:A1:BA:28:B3:A9:C3:78:8C:42:0F:B8:1E:FE:64:88:60"}}},"request":{"raw":"GET /api/public/get_lang_json?d=1773764586214\u0026lang=en HTTP/1.1\r\nHost: api.lieshou.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nst-ctime: 1773764586215\r\nst-ttgn: 9477c2a93697223ee4755f3496e6de2b\r\nOrigin: https://www.lieshou.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.lieshou.vip/\r\nCookie: _scid=0eQkWkK66oLGxT_KX9CIVb_54N5Lg9NQ; _scid_r=0eQkWkK66oLGxT_KX9CIVb_54N5Lg9NQ\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 17 Mar 2026 16:23:06 GMT\r\ncontent-type: application/json\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3DkGHlIyUkMpIOU0KAPw4rVg5wGTJLjsOSE8Q3R7z7jBiPgD3%2BGigbyPld5mPFdaQl9oQ4PdMfWwHVuXUs6xHXroCIo0NhuWCJgA5rkYjA%3D%3D\"}]}\r\npriority: u=3,i=?0\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://www.lieshou.vip\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\nstrict-transport-security: max-age=31536000\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ddd5718cd7dddf7-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":24978,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"31fee0072b1ae273c09b38a2d3a77ec0","sha1":"fc8a585c0cc1a185f2284c6ecf320fbd691acd29","sha256":"1504cdf6387322881d7faeb0d25bf2abd6c7cd29536b8a0bb24a9bf58b38d7a1","sha512":"4ffac5d43307e51c67715ea748fb27aa978c368ca4d120df79c5cfb47dbd6869d10256b0687833d2ec4f55859018fe3b740a3334a51e5e5ebae1eba1695cbb56","ssdeep":"384:/PvNQBAT0a1djWglUdz6h4BlCqcP8ya6N+UdUE/2KyKBqfGSu/eLX7CA7xlG:XlQST0ajWgKcPHfuE/2KmzRf7S","tlshash":"52b2c84f720a1eb3afd25bc1789b6d1725f951c31680084d8cdece2c12adf99b22f589","first_seen":"2026-01-28T21:22:52.53228Z","last_seen":"2026-06-09T16:29:13.183771Z","times_seen":22,"resource_available":false,"data":null}},"time_used":262,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":143,"receive":119,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"api.lieshou.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.lieshou.vip/assets/index-9e27b9a5.css","fqdn":"www.lieshou.vip","domain":"lieshou.vip","tld":"vip"},"ip":{"addr":"172.67.142.235","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.lieshou.vip/#/register?ref=982017","date":"2026-03-17T16:23:06.686Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lieshou.vip","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Mar 2026 11:34:23 GMT","end":"Mon, 15 Jun 2026 11:34:22 GMT"},"fingerprint":{"sha1":"D7:5D:64:B7:86:F7:C2:6A:02:BE:66:BB:A3:3D:EC:2A:CC:CE:07:B3","sha256":"DB:AB:85:D9:A5:98:26:4C:58:FD:83:A8:92:34:C4:57:A1:BA:28:B3:A9:C3:78:8C:42:0F:B8:1E:FE:64:88:60"}}},"request":{"raw":"GET /assets/index-9e27b9a5.css HTTP/1.1\r\nHost: www.lieshou.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.lieshou.vip/\r\nCookie: _scid=0eQkWkK66oLGxT_KX9CIVb_54N5Lg9NQ; _scid_r=0eQkWkK66oLGxT_KX9CIVb_54N5Lg9NQ\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 17 Mar 2026 16:23:06 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 24 Sep 2025 08:26:09 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"68d3ab21-8b1\"\r\nexpires: Wed, 18 Mar 2026 04:13:43 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\nage: 563\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=z0WzI%2FCF2ATgtSbROfCCksrXW8zK6a8IgDdxjWjq0rSSDB%2FaqZ4SwPmBHaGDz%2FKteotWkAtk5vIWpWvhd%2Bhi%2B1V3lXE0A9f08y84A2hoyg%3D%3D\"}]}\r\ncf-ray: 9ddd571acdb2ddf7-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2225,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (2224)","md5":"291bcc8d7a5ff72598f2133c707795f4","sha1":"e802d64cec514c1bba71d5924634ff5f446ec12c","sha256":"9e27b9a5b1a029c7571fb301b2c6f1b38c813f064b1b739515f31fb95bf40768","sha512":"4267b9006927c13708bc59cbb549b5820c15563b4ec9320180fb2949c7a1a1e88c237beb580e60c9e8759cb8182f22c0bf526e9b3d680d2270e7cfc95c95e6d1","ssdeep":"","tlshash":"f041f367daa045faae33a5990f5588c9b13ce9208e00df72b180d11c8dcf6f626136ec","first_seen":"2025-05-06T14:23:01.801794Z","last_seen":"2026-08-09T10:03:19.799323Z","times_seen":154,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"www.lieshou.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.lieshou.vip/assets/register-7183de6a.js","fqdn":"www.lieshou.vip","domain":"lieshou.vip","tld":"vip"},"ip":{"addr":"172.67.142.235","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.lieshou.vip/#/register?ref=982017","date":"2026-03-17T16:23:06.709Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lieshou.vip","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Mar 2026 11:34:23 GMT","end":"Mon, 15 Jun 2026 11:34:22 GMT"},"fingerprint":{"sha1":"D7:5D:64:B7:86:F7:C2:6A:02:BE:66:BB:A3:3D:EC:2A:CC:CE:07:B3","sha256":"DB:AB:85:D9:A5:98:26:4C:58:FD:83:A8:92:34:C4:57:A1:BA:28:B3:A9:C3:78:8C:42:0F:B8:1E:FE:64:88:60"}}},"request":{"raw":"GET /assets/register-7183de6a.js HTTP/1.1\r\nHost: www.lieshou.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.lieshou.vip/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 17 Mar 2026 16:23:06 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 17 Mar 2026 12:18:14 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69b94686-43dc6\"\r\nexpires: Wed, 18 Mar 2026 04:23:06 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=X6K7lr06Ouzm0idTOcOnDqjiWvlA%2FEMHmUIAn4yilAEl3nUPvtdXTXCKp1AGHR2z1bJ1reEzZJJ%2B0urMLp5XLyLosE4KtXj%2FQLVi%2B%2FAomw%3D%3D\"}]}\r\ncf-ray: 9ddd571aedbaddf7-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":277958,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"2ed17af12d1dc5af0a7abbd20a931b6c","sha1":"6eebbcecbe99f49af4dc092f2d39da8f235858a1","sha256":"0f5c3752d81bab4b1011beab8b83faba34ac78cb68acf611d47e507c06d4b27e","sha512":"c17068d3902d5ae7eb7f1460cd201cf87b330beffe6c8b022ab5f3ebc76c3b69eb4610a1141c2fddae0afec5470378ac4716d2a90e507d9314df4b3d49de2152","ssdeep":"6144:78crRsL6EJDpw1rM1cAgtx/MNhRogSV4ghfUWlUa5CoJHGfAseGRTYDeLzry7f0R:x1mlRq14KbHOP7CXV9q2B94pLNsGn0sR","tlshash":"2a44619cd0b4cf76d4b79661385ea4a0b05e4befc2405714a3fc4a252edacf0a3b57a4","first_seen":"2026-03-17T16:23:32.412232Z","last_seen":"2026-03-18T18:48:17.271182Z","times_seen":2,"resource_available":true,"data":null}},"time_used":400,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":278,"receive":122,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"www.lieshou.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.lieshou.vip/assets/BaseUserTab.vue_vue_type_style_index_0_lang-9da38b9d.js","fqdn":"www.lieshou.vip","domain":"lieshou.vip","tld":"vip"},"ip":{"addr":"172.67.142.235","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.lieshou.vip/#/register?ref=982017","date":"2026-03-17T16:23:07.185Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lieshou.vip","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Mar 2026 11:34:23 GMT","end":"Mon, 15 Jun 2026 11:34:22 GMT"},"fingerprint":{"sha1":"D7:5D:64:B7:86:F7:C2:6A:02:BE:66:BB:A3:3D:EC:2A:CC:CE:07:B3","sha256":"DB:AB:85:D9:A5:98:26:4C:58:FD:83:A8:92:34:C4:57:A1:BA:28:B3:A9:C3:78:8C:42:0F:B8:1E:FE:64:88:60"}}},"request":{"raw":"GET /assets/BaseUserTab.vue_vue_type_style_index_0_lang-9da38b9d.js HTTP/1.1\r\nHost: www.lieshou.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.lieshou.vip/assets/register-7183de6a.js\r\nCookie: _scid=0eQkWkK66oLGxT_KX9CIVb_54N5Lg9NQ; _scid_r=0eQkWkK66oLGxT_KX9CIVb_54N5Lg9NQ\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 17 Mar 2026 16:23:07 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qspmRgP0HcTyKKdJbv98HNqH5GSnn3BSFO6LW1Hwc5L75LdcS9STf88ujAzbZnC7Eu2QDT1O%2BGfQUjYKO5%2Bi6vXVH6uFz2X9Y7%2B7UoMmCw%3D%3D\"}]}\r\nlast-modified: Tue, 17 Mar 2026 12:18:14 GMT\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Wed, 18 Mar 2026 04:23:06 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: br\r\nage: 0\r\ncf-cache-status: HIT\r\netag: W/\"69b94686-2d4\"\r\ncf-ray: 9ddd571dee41ddf7-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":724,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (723)","md5":"993f5d213d6664bd8f9c42cec307ae8d","sha1":"79f9fcb9b82d2d3b5482af327b23e7fa75a9f18e","sha256":"9fd3abeba6395b7e4605d07386b7d2dea90d1c9a608493dbde56bb429bdf3106","sha512":"a49a856b7ac147c32fc539253aee9c2ed7e9c582736eac01aefd84dbd6e79f856c893f196a797b65c70f1fc062f8a18d5ae27ec46a6a92183037e561fbfce0cc","ssdeep":"","tlshash":"330115dc48e5cbfa849306543e2a1050d0958f94db398d4570ec1a22274b8a1b6de33c","first_seen":"2026-03-17T16:23:32.418672Z","last_seen":"2026-04-19T22:13:03.117216Z","times_seen":7,"resource_available":true,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"www.lieshou.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.lieshou.vip/assets/BaseLogo.vue_vue_type_script_setup_true_lang-2c4d6139.js","fqdn":"www.lieshou.vip","domain":"lieshou.vip","tld":"vip"},"ip":{"addr":"172.67.142.235","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.lieshou.vip/#/register?ref=982017","date":"2026-03-17T16:23:07.188Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lieshou.vip","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Mar 2026 11:34:23 GMT","end":"Mon, 15 Jun 2026 11:34:22 GMT"},"fingerprint":{"sha1":"D7:5D:64:B7:86:F7:C2:6A:02:BE:66:BB:A3:3D:EC:2A:CC:CE:07:B3","sha256":"DB:AB:85:D9:A5:98:26:4C:58:FD:83:A8:92:34:C4:57:A1:BA:28:B3:A9:C3:78:8C:42:0F:B8:1E:FE:64:88:60"}}},"request":{"raw":"GET /assets/BaseLogo.vue_vue_type_script_setup_true_lang-2c4d6139.js HTTP/1.1\r\nHost: www.lieshou.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.lieshou.vip/assets/register-7183de6a.js\r\nCookie: _scid=0eQkWkK66oLGxT_KX9CIVb_54N5Lg9NQ; _scid_r=0eQkWkK66oLGxT_KX9CIVb_54N5Lg9NQ\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 17 Mar 2026 16:23:07 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=d43VooVO%2BX48pivnYTkCdml1cezCO5bjEnCtV2tqlGG5jDXA%2Bmr8QuyIViOliqABFI23aMZSWTJBJNE83JTWJBFA%2BNpabDtHcM4HQaSqXA%3D%3D\"}]}\r\nlast-modified: Tue, 17 Mar 2026 12:18:14 GMT\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Wed, 18 Mar 2026 04:23:06 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: br\r\nage: 0\r\ncf-cache-status: HIT\r\netag: W/\"69b94686-20a\"\r\ncf-ray: 9ddd571dee44ddf7-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":522,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (521)","md5":"a9f3b89fa967d042099e12739e6b16d1","sha1":"bddbdb6df82d8d37b74bc32c070e68cda59a2b50","sha256":"a331a4ce0a98b23952092a9e0d87c4155dd9a8a0f9584e5937974b8e5a859f02","sha512":"61307662ec8ae17a5f739b5db1ded6f57d467245dc71f95a4ec9200deaf235cd4b63590bd7c99f0a2474a9a673c57e9df3379dceb669183991db377ba59a4f69","ssdeep":"","tlshash":"eaf0c90f5c2a91ff80a658982f47204212085fbdca2099d5f2e5227462418aab01eb68","first_seen":"2026-03-17T16:23:32.420787Z","last_seen":"2026-04-19T22:13:03.078856Z","times_seen":7,"resource_available":true,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"www.lieshou.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.lieshou.vip/assets/login-c6e297-5638315b.js","fqdn":"www.lieshou.vip","domain":"lieshou.vip","tld":"vip"},"ip":{"addr":"172.67.142.235","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.lieshou.vip/#/register?ref=982017","date":"2026-03-17T16:23:07.193Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lieshou.vip","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Mar 2026 11:34:23 GMT","end":"Mon, 15 Jun 2026 11:34:22 GMT"},"fingerprint":{"sha1":"D7:5D:64:B7:86:F7:C2:6A:02:BE:66:BB:A3:3D:EC:2A:CC:CE:07:B3","sha256":"DB:AB:85:D9:A5:98:26:4C:58:FD:83:A8:92:34:C4:57:A1:BA:28:B3:A9:C3:78:8C:42:0F:B8:1E:FE:64:88:60"}}},"request":{"raw":"GET /assets/login-c6e297-5638315b.js HTTP/1.1\r\nHost: www.lieshou.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.lieshou.vip/assets/register-7183de6a.js\r\nCookie: _scid=0eQkWkK66oLGxT_KX9CIVb_54N5Lg9NQ; _scid_r=0eQkWkK66oLGxT_KX9CIVb_54N5Lg9NQ\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 17 Mar 2026 16:23:07 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CH12dZB4nZ8MVtZ3BhDeu3eU7KHHKD1Q0Qdf91V5FGorGE5B3pvLOX164NKeVtbhD3H14%2F17KZNQqz%2FD5oFt4Sc94O6jSHeQTcXZkbJyDw%3D%3D\"}]}\r\nlast-modified: Wed, 24 Sep 2025 08:26:09 GMT\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Wed, 18 Mar 2026 04:23:06 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: br\r\nage: 0\r\ncf-cache-status: HIT\r\netag: W/\"68d3ab21-3bb\"\r\ncf-ray: 9ddd571dee46ddf7-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":955,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (954)","md5":"8d4976d22aa948250a135c00d3d9a28b","sha1":"80d5ae9a3c2e3ddefc51119105b945e7ecacf92d","sha256":"80ac60742cda817e1d84a928ff9d93588793b60acd461fb0dd0a1291cb4ce262","sha512":"b6213399deb3a996557ca5ed9026d2a49c63966495f9ca854c5548c7b5222cbccb309c84539645db2d74df21c66f62cfd3f28db5a0f87a193aea4e58b3361d15","ssdeep":"","tlshash":"bb11822aca585d3f112c390d02c6e9e4010d332b9868ef7cc336852c6c18b1746d6c70","first_seen":"2025-02-18T16:23:29.571893Z","last_seen":"2026-08-09T10:03:19.802024Z","times_seen":139,"resource_available":true,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"www.lieshou.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.lieshou.vip/api/public/visit","fqdn":"api.lieshou.vip","domain":"lieshou.vip","tld":"vip"},"ip":{"addr":"172.67.142.235","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.lieshou.vip/#/register?ref=982017","date":"2026-03-17T16:23:07.432Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lieshou.vip","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Mar 2026 11:34:23 GMT","end":"Mon, 15 Jun 2026 11:34:22 GMT"},"fingerprint":{"sha1":"D7:5D:64:B7:86:F7:C2:6A:02:BE:66:BB:A3:3D:EC:2A:CC:CE:07:B3","sha256":"DB:AB:85:D9:A5:98:26:4C:58:FD:83:A8:92:34:C4:57:A1:BA:28:B3:A9:C3:78:8C:42:0F:B8:1E:FE:64:88:60"}}},"request":{"raw":"POST /api/public/visit HTTP/1.1\r\nHost: api.lieshou.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nst-lang: en\r\nst-ctime: 1773764587276\r\nst-ttgn: 8be57bb5038e48b01939d3a7c000597e\r\nContent-Length: 55\r\nOrigin: https://www.lieshou.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.lieshou.vip/\r\nCookie: _scid=0eQkWkK66oLGxT_KX9CIVb_54N5Lg9NQ; _scid_r=0eQkWkK66oLGxT_KX9CIVb_54N5Lg9NQ\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":55,"data":"{\"code\":\"982017\",\"language\":\"en\",\"device\":\"windows pc\"}"}},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 17 Mar 2026 16:23:07 GMT\r\ncontent-type: application/json\r\ncontent-length: 40\r\npriority: u=3,i=?0\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://www.lieshou.vip\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\nstrict-transport-security: max-age=31536000\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0PVPlkucAuf9eBZNK8D8ZrmkixJA7%2BZq%2FUK8ezLcAIpraLzxJHEXqlAl%2Bz0r7YTEou5JRBDkJYLdaMOgsOEpZs0wiNU1zLbm0pWTDv%2Fe2w%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ddd571f7e7addf7-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":40,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"dac22ea265ef2b988f6f7e6e88fd6076","sha1":"8eb3ea36343bacab1c48f88e22db10c0883d52e4","sha256":"b7c34be4da9a56e57a6dbb79e887c829a077dac9cbd3d4226d7fc20e5fddbd17","sha512":"5da4520e219e0f158cf84c790a0c0168bd7c1710a2f37e9900cb33e7c9bcab4ffa9e8bdef10cef64656a59ae5ad5a083c3872ee45729428efd78929225f89fea","ssdeep":"","tlshash":"409004111c0454435c403c4d0143475035d13574410503c0405c503cc70d0f5f445c34","first_seen":"2023-06-08T13:28:08Z","last_seen":"2026-08-03T14:06:42.894453Z","times_seen":219,"resource_available":false,"data":null}},"time_used":147,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":146,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"api.lieshou.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.lieshou.vip/api/public/get_lang_json?d=1773764586214\u0026lang=en","fqdn":"api.lieshou.vip","domain":"lieshou.vip","tld":"vip"},"ip":{"addr":"172.67.142.235","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.lieshou.vip/#/register?ref=982017","date":"2026-03-17T16:23:06.222Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lieshou.vip","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Mar 2026 11:34:23 GMT","end":"Mon, 15 Jun 2026 11:34:22 GMT"},"fingerprint":{"sha1":"D7:5D:64:B7:86:F7:C2:6A:02:BE:66:BB:A3:3D:EC:2A:CC:CE:07:B3","sha256":"DB:AB:85:D9:A5:98:26:4C:58:FD:83:A8:92:34:C4:57:A1:BA:28:B3:A9:C3:78:8C:42:0F:B8:1E:FE:64:88:60"}}},"request":{"raw":"OPTIONS /api/public/get_lang_json?d=1773764586214\u0026lang=en HTTP/1.1\r\nHost: api.lieshou.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: st-ctime,st-ttgn\r\nReferer: https://www.lieshou.vip/\r\nOrigin: https://www.lieshou.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 17 Mar 2026 16:23:06 GMT\r\ncontent-type: text/html;charset=utf-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://www.lieshou.vip\r\naccess-control-allow-methods: GET\r\naccess-control-allow-headers: st-ctime,st-ttgn\r\nstrict-transport-security: max-age=31536000\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lvTVrmtCC2NQSgoTOKlCXHyk0hjVlZHJuWrpFMeVaULfH1GVp7FhDZ6LT0h8AhXb5oLh2%2F9IfInodPLAC42e0KMbBpa7l2ZKT9FCoxER1A%3D%3D\"}]}\r\ncf-ray: 9ddd5717ed6bddf7-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-11T09:57:30.082626Z","times_seen":17834258,"resource_available":true,"data":null}},"time_used":137,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":137,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"api.lieshou.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.lieshou.vip/assets/register-b5beeeeb.css","fqdn":"www.lieshou.vip","domain":"lieshou.vip","tld":"vip"},"ip":{"addr":"172.67.142.235","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.lieshou.vip/#/register?ref=982017","date":"2026-03-17T16:23:06.706Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lieshou.vip","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Mar 2026 11:34:23 GMT","end":"Mon, 15 Jun 2026 11:34:22 GMT"},"fingerprint":{"sha1":"D7:5D:64:B7:86:F7:C2:6A:02:BE:66:BB:A3:3D:EC:2A:CC:CE:07:B3","sha256":"DB:AB:85:D9:A5:98:26:4C:58:FD:83:A8:92:34:C4:57:A1:BA:28:B3:A9:C3:78:8C:42:0F:B8:1E:FE:64:88:60"}}},"request":{"raw":"GET /assets/register-b5beeeeb.css HTTP/1.1\r\nHost: www.lieshou.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.lieshou.vip/\r\nCookie: _scid=0eQkWkK66oLGxT_KX9CIVb_54N5Lg9NQ; _scid_r=0eQkWkK66oLGxT_KX9CIVb_54N5Lg9NQ\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 17 Mar 2026 16:23:06 GMT\r\ncontent-type: text/css\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TnvunJtELeB%2Fdr23leYloVB9i50HPbE5%2F71OK32VpJbE4ZlkpOxd4JpQFmYSMqVc6GJpYrptgcAI9Gmjg7WdlCez0R%2F5IKZ7eADUveNn6w%3D%3D\"}]}\r\nlast-modified: Wed, 24 Sep 2025 08:26:09 GMT\r\npriority: u=2,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Wed, 18 Mar 2026 04:13:43 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: br\r\nage: 563\r\ncf-cache-status: HIT\r\netag: W/\"68d3ab21-78\"\r\ncf-ray: 9ddd571addb9ddf7-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":120,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"c36615ba21a8e943990d2670c50112da","sha1":"8ceb181413615c75b135ee908c0241f7834d7524","sha256":"b5beeeebdacd2c3d94e9602b1e1e264e3c5e1ec512df91326f6d04b789320682","sha512":"0342d30fe7269a2661eba63bd1ec0e1bfb639de5df54618a22ad960d1778e8cd0efa3d4542ed7e0eb9a7cced6a76263665df5a6184b423b3e6011b4752796c12","ssdeep":"","tlshash":"93b0923c81f8f0fbe8b0522ad6434cc8202b610d132286a9de04beab806680e54300f5","first_seen":"2024-08-20T12:48:46.96777Z","last_seen":"2026-03-25T10:59:22.585018Z","times_seen":25,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"www.lieshou.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.lieshou.vip/assets/login-E86A33-591e34e9.js","fqdn":"www.lieshou.vip","domain":"lieshou.vip","tld":"vip"},"ip":{"addr":"172.67.142.235","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.lieshou.vip/#/register?ref=982017","date":"2026-03-17T16:23:06.710Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lieshou.vip","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Mar 2026 11:34:23 GMT","end":"Mon, 15 Jun 2026 11:34:22 GMT"},"fingerprint":{"sha1":"D7:5D:64:B7:86:F7:C2:6A:02:BE:66:BB:A3:3D:EC:2A:CC:CE:07:B3","sha256":"DB:AB:85:D9:A5:98:26:4C:58:FD:83:A8:92:34:C4:57:A1:BA:28:B3:A9:C3:78:8C:42:0F:B8:1E:FE:64:88:60"}}},"request":{"raw":"GET /assets/login-E86A33-591e34e9.js HTTP/1.1\r\nHost: www.lieshou.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.lieshou.vip/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 17 Mar 2026 16:23:06 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 17 Mar 2026 12:18:14 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69b94686-6333\"\r\nexpires: Wed, 18 Mar 2026 04:23:06 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tZFpefZcJpxnbIRqNe3G4n96l%2B4op9YuK5rTPKggnrBvmkLrx%2BlIohYKLcW8dwafCHST7bgdF2Yh9jUhMTroMZ3uAfECOaofG7lyoUC69Q%3D%3D\"}]}\r\ncf-ray: 9ddd571aedbbddf7-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":25395,"size_decoded":0,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text, with very long lines (24045)","md5":"a6ecb637e11f7c5feab69c0e3553fc77","sha1":"c0db01971a811bba05d12020f54796441d32f270","sha256":"ced4b87218b8ab9a44fb8c4c344e944091ce291ce6d30aa5eee1fb423f81b639","sha512":"d416bd8c636ee68d000b0d0514beace93d316b3e064099ed8ab681ab4903f6864c3c535715b70d435d51f724d57d1c8b0cd6e2ef80fef6b1c70eb55cf0fc59d7","ssdeep":"384:zI/5P5a28wa8H5to08u/+kDRHmHD0upJDjJDXOCkG2Dz+RG:M/jajwa8ZuLuLHcwupttt72vYG","tlshash":"27b2e37b00b017baf7f09324f101f8a623891e866c56a5f78d7f539299a00e7b5cb65c","first_seen":"2026-03-17T16:23:32.424833Z","last_seen":"2026-03-18T18:48:17.252256Z","times_seen":2,"resource_available":true,"data":null}},"time_used":271,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":271,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"www.lieshou.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.lieshou.vip/assets/BaseMainBtn.vue_vue_type_style_index_0_lang-6bca2a13.js","fqdn":"www.lieshou.vip","domain":"lieshou.vip","tld":"vip"},"ip":{"addr":"172.67.142.235","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.lieshou.vip/#/register?ref=982017","date":"2026-03-17T16:23:06.711Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lieshou.vip","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Mar 2026 11:34:23 GMT","end":"Mon, 15 Jun 2026 11:34:22 GMT"},"fingerprint":{"sha1":"D7:5D:64:B7:86:F7:C2:6A:02:BE:66:BB:A3:3D:EC:2A:CC:CE:07:B3","sha256":"DB:AB:85:D9:A5:98:26:4C:58:FD:83:A8:92:34:C4:57:A1:BA:28:B3:A9:C3:78:8C:42:0F:B8:1E:FE:64:88:60"}}},"request":{"raw":"GET /assets/BaseMainBtn.vue_vue_type_style_index_0_lang-6bca2a13.js HTTP/1.1\r\nHost: www.lieshou.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.lieshou.vip/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 17 Mar 2026 16:23:06 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sARs1ijkkWw78dpD9avztuCmMsTx335%2FI%2B%2FLg4iHNcX5irY%2FMWkDShFTM4yOfhLM5rK07wFvENn6Htk6HvXKAtWKzS%2FZy3EiWYaCwW0Byg%3D%3D\"}]}\r\nlast-modified: Tue, 17 Mar 2026 12:18:14 GMT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Wed, 18 Mar 2026 04:23:06 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: br\r\ncf-cache-status: MISS\r\netag: W/\"69b94686-22c\"\r\ncf-ray: 9ddd571aedbcddf7-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":556,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (555)","md5":"76fd3901c38e5aaea30e8d0b17318185","sha1":"351915c8421083fcc3fb7cdeb56ebff67f3c8666","sha256":"77033933d573b779e2e46413c340f7a82fc88f3547bcd588045c57a497e960ee","sha512":"1902b794f2fa38b6fe136da50d040e1aea01b4b8b542dd5ae3602a2f7f1d576b1f9db1a79676213a4da24bad4febde2bb848c6917431f253909eb142292ebcff","ssdeep":"","tlshash":"4ef07e0a6c02c5bc2c82060a2e8520109204367fe324a0fca6df217cb79f0f9783a32c","first_seen":"2026-03-17T16:23:32.426824Z","last_seen":"2026-04-19T22:13:03.131151Z","times_seen":7,"resource_available":true,"data":null}},"time_used":268,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":267,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"www.lieshou.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.lieshou.vip/assets/BaseUserTab.vue_vue_type_style_index_0_lang-9da38b9d.js","fqdn":"www.lieshou.vip","domain":"lieshou.vip","tld":"vip"},"ip":{"addr":"172.67.142.235","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.lieshou.vip/#/register?ref=982017","date":"2026-03-17T16:23:06.717Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lieshou.vip","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Mar 2026 11:34:23 GMT","end":"Mon, 15 Jun 2026 11:34:22 GMT"},"fingerprint":{"sha1":"D7:5D:64:B7:86:F7:C2:6A:02:BE:66:BB:A3:3D:EC:2A:CC:CE:07:B3","sha256":"DB:AB:85:D9:A5:98:26:4C:58:FD:83:A8:92:34:C4:57:A1:BA:28:B3:A9:C3:78:8C:42:0F:B8:1E:FE:64:88:60"}}},"request":{"raw":"GET /assets/BaseUserTab.vue_vue_type_style_index_0_lang-9da38b9d.js HTTP/1.1\r\nHost: www.lieshou.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.lieshou.vip/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 17 Mar 2026 16:23:06 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HisiiP01jf00tZbjtTe4VPthSvu7OZh6TxQG8bAuovJ0wgtd6jhcYGoT9DRhDaGbkNAHgKAaq1VrOUrsfb5zBp0yEE8upzJpScKDAk7wog%3D%3D\"}]}\r\nlast-modified: Tue, 17 Mar 2026 12:18:14 GMT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Wed, 18 Mar 2026 04:23:06 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: br\r\ncf-cache-status: MISS\r\netag: W/\"69b94686-2d4\"\r\ncf-ray: 9ddd571aedc2ddf7-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":724,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (723)","md5":"993f5d213d6664bd8f9c42cec307ae8d","sha1":"79f9fcb9b82d2d3b5482af327b23e7fa75a9f18e","sha256":"9fd3abeba6395b7e4605d07386b7d2dea90d1c9a608493dbde56bb429bdf3106","sha512":"a49a856b7ac147c32fc539253aee9c2ed7e9c582736eac01aefd84dbd6e79f856c893f196a797b65c70f1fc062f8a18d5ae27ec46a6a92183037e561fbfce0cc","ssdeep":"","tlshash":"330115dc48e5cbfa849306543e2a1050d0958f94db398d4570ec1a22274b8a1b6de33c","first_seen":"2026-03-17T16:23:32.418672Z","last_seen":"2026-04-19T22:13:03.117216Z","times_seen":7,"resource_available":true,"data":null}},"time_used":261,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":261,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"www.lieshou.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.lieshou.vip/assets/ContainerForm-c5503bf7.js","fqdn":"www.lieshou.vip","domain":"lieshou.vip","tld":"vip"},"ip":{"addr":"172.67.142.235","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.lieshou.vip/#/register?ref=982017","date":"2026-03-17T16:23:07.177Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lieshou.vip","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Mar 2026 11:34:23 GMT","end":"Mon, 15 Jun 2026 11:34:22 GMT"},"fingerprint":{"sha1":"D7:5D:64:B7:86:F7:C2:6A:02:BE:66:BB:A3:3D:EC:2A:CC:CE:07:B3","sha256":"DB:AB:85:D9:A5:98:26:4C:58:FD:83:A8:92:34:C4:57:A1:BA:28:B3:A9:C3:78:8C:42:0F:B8:1E:FE:64:88:60"}}},"request":{"raw":"GET /assets/ContainerForm-c5503bf7.js HTTP/1.1\r\nHost: www.lieshou.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.lieshou.vip/assets/register-7183de6a.js\r\nCookie: _scid=0eQkWkK66oLGxT_KX9CIVb_54N5Lg9NQ; _scid_r=0eQkWkK66oLGxT_KX9CIVb_54N5Lg9NQ\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 17 Mar 2026 16:23:07 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gwKCStTPXemCyxXnn%2FI9QyqVv3iYAhOppQPG6OB9RT5lPptFJSvyaMVtdq4vkoZL6AxkB%2FeYZufkuc64yLdot4tLKz1G5Nzt%2Ffhii1Xc%2BA%3D%3D\"}]}\r\nlast-modified: Tue, 17 Mar 2026 12:18:14 GMT\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Wed, 18 Mar 2026 04:23:06 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: br\r\nage: 0\r\ncf-cache-status: HIT\r\netag: W/\"69b94686-d9\"\r\ncf-ray: 9ddd571dde37ddf7-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":217,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text","md5":"4485b5e8d0969798ad360219bfcb8047","sha1":"b911008967fca2b70e5f8eff97d9e6aa3587e3fb","sha256":"587ee6488ac37db3c7146de8d71b8a42d1858c0c0f36455df08ee40d3c50194e","sha512":"6527a25e468b3d0d8d32953e46f03e5b0088a4897bbf5b803b791f39a2830f7541d0bd8d6b82dece4ddf2f849afcf2ddf9a669b9e76b6777134e0d6ee9ddeddc","ssdeep":"","tlshash":"6ad0220d6c5092b780120e8c77663536cbae3f3633b48d92105b84a58b164af220ef4c","first_seen":"2026-03-17T16:23:32.410306Z","last_seen":"2026-03-18T18:48:17.276809Z","times_seen":2,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"www.lieshou.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.lieshou.vip/upload/img/69b9564ce459.webp","fqdn":"api.lieshou.vip","domain":"lieshou.vip","tld":"vip"},"ip":{"addr":"172.67.142.235","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.lieshou.vip/#/register?ref=982017","date":"2026-03-17T16:23:07.240Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lieshou.vip","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Mar 2026 11:34:23 GMT","end":"Mon, 15 Jun 2026 11:34:22 GMT"},"fingerprint":{"sha1":"D7:5D:64:B7:86:F7:C2:6A:02:BE:66:BB:A3:3D:EC:2A:CC:CE:07:B3","sha256":"DB:AB:85:D9:A5:98:26:4C:58:FD:83:A8:92:34:C4:57:A1:BA:28:B3:A9:C3:78:8C:42:0F:B8:1E:FE:64:88:60"}}},"request":{"raw":"GET /upload/img/69b9564ce459.webp HTTP/1.1\r\nHost: api.lieshou.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.lieshou.vip/\r\nCookie: _scid=0eQkWkK66oLGxT_KX9CIVb_54N5Lg9NQ; _scid_r=0eQkWkK66oLGxT_KX9CIVb_54N5Lg9NQ\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 17 Mar 2026 16:23:07 GMT\r\ncontent-type: image/webp\r\ncontent-length: 27240\r\nlast-modified: Tue, 17 Mar 2026 13:25:32 GMT\r\npriority: u=4,i=?0\r\netag: \"69b9564c-6a68\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nage: 564\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tzoWTDbtJgvhDfZTQ6tjVYBjKJb6rJf5iv%2BvNgJy89MpZZZQ7P8ubOFj2Lm2qSqgOg2A2Y43OqsZbQ2FujeAGUEMo2defZVB1dK7DzIs9Q%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ddd571e4e57ddf7-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":27240,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 402x281, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"f95e87cd76264864a00ade8df0f56d85","sha1":"ceceea3461793325121391b47fc93717347a5fa1","sha256":"12b1f5d5e8e5324cb3445f5414585537f14f14a6cc36e63a61a8499d1350523b","sha512":"df92c868dc96530f5e25a5cf35b77d5015f7edcb8a331bae01ab43de570a4d9dcc7400168112d0eacc1f76bf9e0e445244ca465d90b42021336fb38ce1f46621","ssdeep":"768:S6D4y4+DHQzuEMFnNCYCUxjryB89Bv5qfS:4zLzubnGcOG9","tlshash":"0dc2e1a4401b59f07fec5ea0990c3b44a86bdee46d80e55caceee70bdfa150c8f40a0d","first_seen":"2026-03-17T16:23:32.406999Z","last_seen":"2026-03-17T16:25:26.090606Z","times_seen":2,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":15,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"api.lieshou.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.lieshou.vip/api/user/app_info?d=1773764585652","fqdn":"api.lieshou.vip","domain":"lieshou.vip","tld":"vip"},"ip":{"addr":"104.21.27.142","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.lieshou.vip/#/register?ref=982017","date":"2026-03-17T16:23:05.661Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lieshou.vip","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Mar 2026 11:34:23 GMT","end":"Mon, 15 Jun 2026 11:34:22 GMT"},"fingerprint":{"sha1":"D7:5D:64:B7:86:F7:C2:6A:02:BE:66:BB:A3:3D:EC:2A:CC:CE:07:B3","sha256":"DB:AB:85:D9:A5:98:26:4C:58:FD:83:A8:92:34:C4:57:A1:BA:28:B3:A9:C3:78:8C:42:0F:B8:1E:FE:64:88:60"}}},"request":{"raw":"OPTIONS /api/user/app_info?d=1773764585652 HTTP/1.1\r\nHost: api.lieshou.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: st-ctime,st-ttgn\r\nReferer: https://www.lieshou.vip/\r\nOrigin: https://www.lieshou.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 17 Mar 2026 16:23:06 GMT\r\ncontent-type: text/html;charset=utf-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://www.lieshou.vip\r\naccess-control-allow-methods: GET\r\naccess-control-allow-headers: st-ctime,st-ttgn\r\nstrict-transport-security: max-age=31536000\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zNLiZ8fawi8dcwhsGPuoitlQgLdZM3hw9TIcoP6BLWcEOm0MEqYbtlwe8V7dKJyTdX8Ix99bSq3KZ7npnC5BqpEpYlrfq4x9agRuPCyhdQ%3D%3D\"}]}\r\ncf-ray: 9ddd57150fe65621-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-11T09:57:30.082626Z","times_seen":17834258,"resource_available":true,"data":null}},"time_used":458,"timings":{"blocked":96,"dns":62,"connect":11,"send":0,"wait":266,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"api.lieshou.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.lieshou.vip/api/public/index_info?d=1773764586232","fqdn":"api.lieshou.vip","domain":"lieshou.vip","tld":"vip"},"ip":{"addr":"172.67.142.235","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.lieshou.vip/#/register?ref=982017","date":"2026-03-17T16:23:06.501Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lieshou.vip","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Mar 2026 11:34:23 GMT","end":"Mon, 15 Jun 2026 11:34:22 GMT"},"fingerprint":{"sha1":"D7:5D:64:B7:86:F7:C2:6A:02:BE:66:BB:A3:3D:EC:2A:CC:CE:07:B3","sha256":"DB:AB:85:D9:A5:98:26:4C:58:FD:83:A8:92:34:C4:57:A1:BA:28:B3:A9:C3:78:8C:42:0F:B8:1E:FE:64:88:60"}}},"request":{"raw":"GET /api/public/index_info?d=1773764586232 HTTP/1.1\r\nHost: api.lieshou.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nst-ctime: 1773764586232\r\nst-ttgn: 660ca91f68b3dba87d1d847b3815809d\r\nOrigin: https://www.lieshou.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.lieshou.vip/\r\nCookie: _scid=0eQkWkK66oLGxT_KX9CIVb_54N5Lg9NQ; _scid_r=0eQkWkK66oLGxT_KX9CIVb_54N5Lg9NQ\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 17 Mar 2026 16:23:06 GMT\r\ncontent-type: application/json\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VJUwq%2BuLYQRTwkM9FzqH0CDX2AKQ4NDIsJnHRDhzmx8p1oyvncGyx1D3YBf4bcXG6jZk1l189iS1wBmrTwH2aV1FmAhDQFanV0IBi3feuA%3D%3D\"}]}\r\npriority: u=3,i=?0\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://www.lieshou.vip\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\nstrict-transport-security: max-age=31536000\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ddd5719ad92ddf7-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6063,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"ba072efbeea3d5cd179bfb265716c472","sha1":"129d8887cb098a4285723c8944ddd24534e40b33","sha256":"ad1cbe0943f030a5f75f5f72ed6feb82b8633d14ba59e80e3fb3df5276be2a91","sha512":"fb8a5b8701844def066c1744aa8e13d3f170b248cecefd485decc7d8387dff5d5d8b0f97b5eefd2d1c400c2e84d4e7215aee9f8022dd95ea7e18c97bccf3a16d","ssdeep":"96:I/d9ymTAM2KgXfH9MgV/JwY3pg8IFycJ17qydfr2aK8pMpja6WBfERFqPzf67iY:I/d9yTM2BFM+5pKycj7HdyaFpKOzBfef","tlshash":"d5c121f221be8c1112f11ec17ecf716169adb09a4ec49f949fadaf7c8498177112bc92","first_seen":"2026-03-17T16:23:32.414729Z","last_seen":"2026-03-17T16:23:32.414729Z","times_seen":1,"resource_available":false,"data":null}},"time_used":146,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":145,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"api.lieshou.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.lieshou.vip/upload/img/69b947a296cd.webp","fqdn":"api.lieshou.vip","domain":"lieshou.vip","tld":"vip"},"ip":{"addr":"172.67.142.235","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.lieshou.vip/#/register?ref=982017","date":"2026-03-17T16:23:06.550Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lieshou.vip","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Mar 2026 11:34:23 GMT","end":"Mon, 15 Jun 2026 11:34:22 GMT"},"fingerprint":{"sha1":"D7:5D:64:B7:86:F7:C2:6A:02:BE:66:BB:A3:3D:EC:2A:CC:CE:07:B3","sha256":"DB:AB:85:D9:A5:98:26:4C:58:FD:83:A8:92:34:C4:57:A1:BA:28:B3:A9:C3:78:8C:42:0F:B8:1E:FE:64:88:60"}}},"request":{"raw":"GET /upload/img/69b947a296cd.webp HTTP/1.1\r\nHost: api.lieshou.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.lieshou.vip/\r\nCookie: _scid=0eQkWkK66oLGxT_KX9CIVb_54N5Lg9NQ; _scid_r=0eQkWkK66oLGxT_KX9CIVb_54N5Lg9NQ\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 17 Mar 2026 16:23:06 GMT\r\ncontent-type: image/webp\r\ncontent-length: 26974\r\nlast-modified: Tue, 17 Mar 2026 12:22:58 GMT\r\npriority: u=6,i=?0\r\netag: \"69b947a2-695e\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nage: 3637\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0hxSK83zpMqB1o5ibXVS9AjWvR3vx2sxOt2s9yPaXG7dsFUO7UBQG1QbmWXCVub6Aab8YzaB%2FIIo13qogNO8p6vS19t69epQmX6ETyV7nQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ddd5719fd95ddf7-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":26974,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 402x281, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"1685d619008e0f92f5e7f2e44568eaba","sha1":"96aff3920cc9f0a8e4271a03ddbb2709450049d6","sha256":"1c44d586676dde68e8d30de8578f541d0225f8a554a0c879dbad6437ba60dd51","sha512":"926326f96e4645c3722e6ff7fc53380aeae0e59dc6f1d47dbd399226635c248dd1b2d7f5fe9737a448cec63e4db2f485282f4d55ab8e1f1b2b40ddd70b253c03","ssdeep":"768:3OiIyTGl0mzEuf8e8QQjHJVtnu459/0mCXmYU:3XIyVmwGxtgJVtu4598mGbU","tlshash":"e2c2f1ae824a8a18ff0977a9f00db80760815e49ff575cd6d848e09906e9f835439f9e","first_seen":"2026-03-17T16:23:32.428929Z","last_seen":"2026-03-17T16:25:26.114759Z","times_seen":2,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"api.lieshou.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.lieshou.vip/assets/BaseInput.vue_vue_type_style_index_0_lang-c56f899e.js","fqdn":"www.lieshou.vip","domain":"lieshou.vip","tld":"vip"},"ip":{"addr":"172.67.142.235","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.lieshou.vip/#/register?ref=982017","date":"2026-03-17T16:23:06.716Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lieshou.vip","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Mar 2026 11:34:23 GMT","end":"Mon, 15 Jun 2026 11:34:22 GMT"},"fingerprint":{"sha1":"D7:5D:64:B7:86:F7:C2:6A:02:BE:66:BB:A3:3D:EC:2A:CC:CE:07:B3","sha256":"DB:AB:85:D9:A5:98:26:4C:58:FD:83:A8:92:34:C4:57:A1:BA:28:B3:A9:C3:78:8C:42:0F:B8:1E:FE:64:88:60"}}},"request":{"raw":"GET /assets/BaseInput.vue_vue_type_style_index_0_lang-c56f899e.js HTTP/1.1\r\nHost: www.lieshou.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.lieshou.vip/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 17 Mar 2026 16:23:06 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 17 Mar 2026 12:18:14 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69b94686-95c\"\r\nexpires: Wed, 18 Mar 2026 04:23:06 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lYejlsKkm%2BzfhCB6KJdaN5hbfto1viHK7vtA4BO5%2Btvv4z%2BC7kNiZ%2Bict9PvaNJefnBY3vJ6GELN8Flaywpgtli%2BpSpMxzkMXZi%2F494nRg%3D%3D\"}]}\r\ncf-ray: 9ddd571aedc1ddf7-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2396,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (2395)","md5":"f637760231be31562f755e1eeb8cd85d","sha1":"ba8690542249e0eacccbb81732eab53c9d7e7c8c","sha256":"fea2a52dce24a3885cf6f5fa1c68a11fca19e8173b292aaf2e5c33c90f975fbc","sha512":"c20d559f13d1465dbf8762a5f0330ea108114ebd59201231e4cb03700db1a58f281e5e7a1815712088a0ca664a6b6b9c3fc8e591c9619434a559e7c7514cce12","ssdeep":"","tlshash":"5141670addaaafb2c673d6a5a2df0c20e0153767c95049a150fd192d2b8cde4173ff18","first_seen":"2026-03-17T16:23:32.404024Z","last_seen":"2026-03-18T18:48:17.261949Z","times_seen":2,"resource_available":true,"data":null}},"time_used":270,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":270,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"www.lieshou.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.lieshou.vip/assets/NavBar.vue_vue_type_style_index_0_lang-9577b1c8.js","fqdn":"www.lieshou.vip","domain":"lieshou.vip","tld":"vip"},"ip":{"addr":"172.67.142.235","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.lieshou.vip/#/register?ref=982017","date":"2026-03-17T16:23:06.720Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lieshou.vip","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Mar 2026 11:34:23 GMT","end":"Mon, 15 Jun 2026 11:34:22 GMT"},"fingerprint":{"sha1":"D7:5D:64:B7:86:F7:C2:6A:02:BE:66:BB:A3:3D:EC:2A:CC:CE:07:B3","sha256":"DB:AB:85:D9:A5:98:26:4C:58:FD:83:A8:92:34:C4:57:A1:BA:28:B3:A9:C3:78:8C:42:0F:B8:1E:FE:64:88:60"}}},"request":{"raw":"GET /assets/NavBar.vue_vue_type_style_index_0_lang-9577b1c8.js HTTP/1.1\r\nHost: www.lieshou.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.lieshou.vip/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 17 Mar 2026 16:23:06 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 17 Mar 2026 12:18:14 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69b94686-5c34\"\r\nexpires: Wed, 18 Mar 2026 04:23:06 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BzsTquf%2FLn31lZenc6CsgvlK8ZujEauqYzAlatxvvfdxD7uwAkiPTu7Wqa29xYCRLR3wv5Ao%2BIaAfmHq71FOJSjXlxorF8266%2BdIlAe1Wg%3D%3D\"}]}\r\ncf-ray: 9ddd571afdc3ddf7-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":23604,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (23603)","md5":"aaa5c03ecdb6f5e52c8c1be561882b0a","sha1":"67c05ad1b77a334ecdfdf848f92fd7d1581b1f5a","sha256":"1c3a86d9db6821391eb7502c06a4b5c3121b103741b7e07451d83968ae894606","sha512":"6a48ad6b9853215d0b7d86b6cb712c628247b5526de5ec400f18ccb5e84d29b94c58923c74a0911b22b30eb482540eefb1925336d4133a0968d9d3baf1e2b216","ssdeep":"384:QHGMVMzf2wOXwJMZDJZLJjBMb3WOHMVBEKUNcSrF/8aecfHwo1mk:QdMiMhycH","tlshash":"d5b20c40f5528a7cdab70239de9a6441b24c5f8fd546a9a1f1fc282f37c6cf97048b68","first_seen":"2026-03-17T16:23:32.43123Z","last_seen":"2026-04-19T22:13:03.064454Z","times_seen":7,"resource_available":true,"data":null}},"time_used":272,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":272,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"www.lieshou.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.lieshou.vip/assets/BaseLogo.vue_vue_type_script_setup_true_lang-2c4d6139.js","fqdn":"www.lieshou.vip","domain":"lieshou.vip","tld":"vip"},"ip":{"addr":"172.67.142.235","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.lieshou.vip/#/register?ref=982017","date":"2026-03-17T16:23:06.721Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lieshou.vip","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Mar 2026 11:34:23 GMT","end":"Mon, 15 Jun 2026 11:34:22 GMT"},"fingerprint":{"sha1":"D7:5D:64:B7:86:F7:C2:6A:02:BE:66:BB:A3:3D:EC:2A:CC:CE:07:B3","sha256":"DB:AB:85:D9:A5:98:26:4C:58:FD:83:A8:92:34:C4:57:A1:BA:28:B3:A9:C3:78:8C:42:0F:B8:1E:FE:64:88:60"}}},"request":{"raw":"GET /assets/BaseLogo.vue_vue_type_script_setup_true_lang-2c4d6139.js HTTP/1.1\r\nHost: www.lieshou.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.lieshou.vip/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 17 Mar 2026 16:23:06 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qYAIJRK%2BUe66ysokflrOeez6opclTxbH%2FSmfY0WmoTGcMhKh2ptvG%2B60LV8X9e0w3xG2AD3J0Al6%2BJm4BQLIE3DFhoFLNUT8XMmrtISSRA%3D%3D\"}]}\r\nlast-modified: Tue, 17 Mar 2026 12:18:14 GMT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Wed, 18 Mar 2026 04:23:06 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: br\r\ncf-cache-status: MISS\r\netag: W/\"69b94686-20a\"\r\ncf-ray: 9ddd571afdc4ddf7-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":522,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (521)","md5":"a9f3b89fa967d042099e12739e6b16d1","sha1":"bddbdb6df82d8d37b74bc32c070e68cda59a2b50","sha256":"a331a4ce0a98b23952092a9e0d87c4155dd9a8a0f9584e5937974b8e5a859f02","sha512":"61307662ec8ae17a5f739b5db1ded6f57d467245dc71f95a4ec9200deaf235cd4b63590bd7c99f0a2474a9a673c57e9df3379dceb669183991db377ba59a4f69","ssdeep":"","tlshash":"eaf0c90f5c2a91ff80a658982f47204212085fbdca2099d5f2e5227462418aab01eb68","first_seen":"2026-03-17T16:23:32.420787Z","last_seen":"2026-04-19T22:13:03.078856Z","times_seen":7,"resource_available":true,"data":null}},"time_used":267,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":267,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"www.lieshou.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.lieshou.vip/assets/login-E86A33-591e34e9.js","fqdn":"www.lieshou.vip","domain":"lieshou.vip","tld":"vip"},"ip":{"addr":"172.67.142.235","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.lieshou.vip/#/register?ref=982017","date":"2026-03-17T16:23:07.170Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lieshou.vip","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Mar 2026 11:34:23 GMT","end":"Mon, 15 Jun 2026 11:34:22 GMT"},"fingerprint":{"sha1":"D7:5D:64:B7:86:F7:C2:6A:02:BE:66:BB:A3:3D:EC:2A:CC:CE:07:B3","sha256":"DB:AB:85:D9:A5:98:26:4C:58:FD:83:A8:92:34:C4:57:A1:BA:28:B3:A9:C3:78:8C:42:0F:B8:1E:FE:64:88:60"}}},"request":{"raw":"GET /assets/login-E86A33-591e34e9.js HTTP/1.1\r\nHost: www.lieshou.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.lieshou.vip/assets/register-7183de6a.js\r\nCookie: _scid=0eQkWkK66oLGxT_KX9CIVb_54N5Lg9NQ; _scid_r=0eQkWkK66oLGxT_KX9CIVb_54N5Lg9NQ\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 17 Mar 2026 16:23:07 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 17 Mar 2026 12:18:14 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69b94686-6333\"\r\nexpires: Wed, 18 Mar 2026 04:23:06 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\nage: 0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FjLX0MeXhNldhbkI4grwX%2Farc5oQlWqvhNPL3HHZVJmPzPyQaAS2px5jOQZ5cx1cnT%2FsBB2O63LRo%2Fo99Vrvkq%2F7NDIGP0VnOI8OpBctng%3D%3D\"}]}\r\ncf-ray: 9ddd571dde2addf7-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":25395,"size_decoded":0,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text, with very long lines (24045)","md5":"a6ecb637e11f7c5feab69c0e3553fc77","sha1":"c0db01971a811bba05d12020f54796441d32f270","sha256":"ced4b87218b8ab9a44fb8c4c344e944091ce291ce6d30aa5eee1fb423f81b639","sha512":"d416bd8c636ee68d000b0d0514beace93d316b3e064099ed8ab681ab4903f6864c3c535715b70d435d51f724d57d1c8b0cd6e2ef80fef6b1c70eb55cf0fc59d7","ssdeep":"384:zI/5P5a28wa8H5to08u/+kDRHmHD0upJDjJDXOCkG2Dz+RG:M/jajwa8ZuLuLHcwupttt72vYG","tlshash":"27b2e37b00b017baf7f09324f101f8a623891e866c56a5f78d7f539299a00e7b5cb65c","first_seen":"2026-03-17T16:23:32.424833Z","last_seen":"2026-03-18T18:48:17.252256Z","times_seen":2,"resource_available":true,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"www.lieshou.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.lieshou.vip/assets/BaseMainBtn.vue_vue_type_style_index_0_lang-6bca2a13.js","fqdn":"www.lieshou.vip","domain":"lieshou.vip","tld":"vip"},"ip":{"addr":"172.67.142.235","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.lieshou.vip/#/register?ref=982017","date":"2026-03-17T16:23:07.173Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lieshou.vip","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Mar 2026 11:34:23 GMT","end":"Mon, 15 Jun 2026 11:34:22 GMT"},"fingerprint":{"sha1":"D7:5D:64:B7:86:F7:C2:6A:02:BE:66:BB:A3:3D:EC:2A:CC:CE:07:B3","sha256":"DB:AB:85:D9:A5:98:26:4C:58:FD:83:A8:92:34:C4:57:A1:BA:28:B3:A9:C3:78:8C:42:0F:B8:1E:FE:64:88:60"}}},"request":{"raw":"GET /assets/BaseMainBtn.vue_vue_type_style_index_0_lang-6bca2a13.js HTTP/1.1\r\nHost: www.lieshou.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.lieshou.vip/assets/register-7183de6a.js\r\nCookie: _scid=0eQkWkK66oLGxT_KX9CIVb_54N5Lg9NQ; _scid_r=0eQkWkK66oLGxT_KX9CIVb_54N5Lg9NQ\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 17 Mar 2026 16:23:07 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RqMR0YxypIdxFiHEi9LoEZ%2BQAEUqn%2BL%2BYTfBS5m6Md0TsmcXtfbV5elM6xutq6Fs49KlBIV8gCZS9rlKGpf%2FOu5NH%2FCy0MPKmbPdv9uUJw%3D%3D\"}]}\r\nlast-modified: Tue, 17 Mar 2026 12:18:14 GMT\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Wed, 18 Mar 2026 04:23:06 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: br\r\nage: 0\r\ncf-cache-status: HIT\r\netag: W/\"69b94686-22c\"\r\ncf-ray: 9ddd571dde35ddf7-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":556,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (555)","md5":"76fd3901c38e5aaea30e8d0b17318185","sha1":"351915c8421083fcc3fb7cdeb56ebff67f3c8666","sha256":"77033933d573b779e2e46413c340f7a82fc88f3547bcd588045c57a497e960ee","sha512":"1902b794f2fa38b6fe136da50d040e1aea01b4b8b542dd5ae3602a2f7f1d576b1f9db1a79676213a4da24bad4febde2bb848c6917431f253909eb142292ebcff","ssdeep":"","tlshash":"4ef07e0a6c02c5bc2c82060a2e8520109204367fe324a0fca6df217cb79f0f9783a32c","first_seen":"2026-03-17T16:23:32.426824Z","last_seen":"2026-04-19T22:13:03.131151Z","times_seen":7,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"www.lieshou.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.lieshou.vip/favicon.ico","fqdn":"www.lieshou.vip","domain":"lieshou.vip","tld":"vip"},"ip":{"addr":"172.67.142.235","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.lieshou.vip/#/register?ref=982017","date":"2026-03-17T16:23:05.781Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lieshou.vip","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Mar 2026 11:34:23 GMT","end":"Mon, 15 Jun 2026 11:34:22 GMT"},"fingerprint":{"sha1":"D7:5D:64:B7:86:F7:C2:6A:02:BE:66:BB:A3:3D:EC:2A:CC:CE:07:B3","sha256":"DB:AB:85:D9:A5:98:26:4C:58:FD:83:A8:92:34:C4:57:A1:BA:28:B3:A9:C3:78:8C:42:0F:B8:1E:FE:64:88:60"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: www.lieshou.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.lieshou.vip/\r\nCookie: _scid=0eQkWkK66oLGxT_KX9CIVb_54N5Lg9NQ; _scid_r=0eQkWkK66oLGxT_KX9CIVb_54N5Lg9NQ\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\nserver: cloudflare\r\ndate: Tue, 17 Mar 2026 16:23:06 GMT\r\ncontent-type: text/html\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wiBUHCBXK4ptEiuKIWWGyt7%2B0%2BS%2FgooKEunWIkcqOgk9voMKcexKNb4ZfNTV7xUSCs0Ukjec%2F4skUCNBN4ukpVp8%2FmHp0PLi5JTAMosDsw%3D%3D\"}]}\r\npriority: u=6,i=?0\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: EXPIRED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ddd57152cd3ddf7-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":138,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"7389d931c86b3d7bb6b8af46d8c4172b","sha1":"8d2a4760aa0b47984d11cd1a66448719177fb791","sha256":"301bd9f16f94feedfae7a946a14bac38cb73c43efe6117bc5586835af03d7d6f","sha512":"dd6d1511e4fcd5bc09d821ffe091fb5946ac9654c48664aed504e479e9ac20c1cad44b6df90f42190d47e28f5f96bfb09d24056df6b950243d68ee8100a9a889","ssdeep":"","tlshash":"d9c09b5d755366449913155167c33641d196837f689a84510941c593f0cf69ac4c73a9","first_seen":"2023-03-13T12:56:15Z","last_seen":"2026-08-11T10:00:33.458226Z","times_seen":318384,"resource_available":true,"data":null}},"time_used":270,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":270,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"www.lieshou.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.lieshou.vip/api/user/app_info?d=1773764585652","fqdn":"api.lieshou.vip","domain":"lieshou.vip","tld":"vip"},"ip":{"addr":"172.67.142.235","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.lieshou.vip/#/register?ref=982017","date":"2026-03-17T16:23:06.026Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lieshou.vip","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Mar 2026 11:34:23 GMT","end":"Mon, 15 Jun 2026 11:34:22 GMT"},"fingerprint":{"sha1":"D7:5D:64:B7:86:F7:C2:6A:02:BE:66:BB:A3:3D:EC:2A:CC:CE:07:B3","sha256":"DB:AB:85:D9:A5:98:26:4C:58:FD:83:A8:92:34:C4:57:A1:BA:28:B3:A9:C3:78:8C:42:0F:B8:1E:FE:64:88:60"}}},"request":{"raw":"GET /api/user/app_info?d=1773764585652 HTTP/1.1\r\nHost: api.lieshou.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nst-ctime: 1773764585652\r\nst-ttgn: 0e1d75563359620f357e32e2c72f936e\r\nOrigin: https://www.lieshou.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.lieshou.vip/\r\nCookie: _scid=0eQkWkK66oLGxT_KX9CIVb_54N5Lg9NQ; _scid_r=0eQkWkK66oLGxT_KX9CIVb_54N5Lg9NQ\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 17 Mar 2026 16:23:06 GMT\r\ncontent-type: application/json\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=30U%2BTM8VHAUgicUOa6tLwBJGFaOT0a%2FARCybaqJ1wqtgYXIpvUrTjv7B%2BkPgviiUSPGR2u6c09TAnUTDia7tZwPtWdvMcQ2c3VfqbkV%2FHQ%3D%3D\"}]}\r\npriority: u=3,i=?0\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://www.lieshou.vip\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\nstrict-transport-security: max-age=31536000\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ddd5716bd22ddf7-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5799,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"b121613540a0f0acd509ae1d0695c74b","sha1":"bdd226dab7d8ce6ec986a200844abc8d4f7886c1","sha256":"c576123736af8e297042e3499da483ff157d1488f058df56d0f32efb91072777","sha512":"f72e968ea95df147fe4c1923411a21a7f8e3334abee572dbd739650043c76bae4506191ce1435b58425e968e830dcb1fa33abe0f630afd623f520e51e9cb6c16","ssdeep":"96:IlS2U/yV3y7LXDZFR0UQe4WccyygRGZMZDjNYAkIAOI3iI+gj9YAmBYAmAYAm7YQ:IlS2U/yV3y7Lz3R0xedczVN/kIY3p+IZ","tlshash":"75c10b11256acc7bd5a7bdc02acf3115899d3c9beccd8f8aab2cdda5058d0e2612f103","first_seen":"2026-03-17T16:23:32.434274Z","last_seen":"2026-03-17T16:23:32.434274Z","times_seen":1,"resource_available":false,"data":null}},"time_used":150,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":150,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"api.lieshou.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.lieshou.vip/assets/BaseUserTab-c449726b.css","fqdn":"www.lieshou.vip","domain":"lieshou.vip","tld":"vip"},"ip":{"addr":"172.67.142.235","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.lieshou.vip/#/register?ref=982017","date":"2026-03-17T16:23:06.699Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lieshou.vip","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Mar 2026 11:34:23 GMT","end":"Mon, 15 Jun 2026 11:34:22 GMT"},"fingerprint":{"sha1":"D7:5D:64:B7:86:F7:C2:6A:02:BE:66:BB:A3:3D:EC:2A:CC:CE:07:B3","sha256":"DB:AB:85:D9:A5:98:26:4C:58:FD:83:A8:92:34:C4:57:A1:BA:28:B3:A9:C3:78:8C:42:0F:B8:1E:FE:64:88:60"}}},"request":{"raw":"GET /assets/BaseUserTab-c449726b.css HTTP/1.1\r\nHost: www.lieshou.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.lieshou.vip/\r\nCookie: _scid=0eQkWkK66oLGxT_KX9CIVb_54N5Lg9NQ; _scid_r=0eQkWkK66oLGxT_KX9CIVb_54N5Lg9NQ\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 17 Mar 2026 16:23:06 GMT\r\ncontent-type: text/css\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UtpJd2baFvsoy21mjtlIMEzOS0Xvzh1kIknWUBz0aykNt%2FAK%2F%2B8oLXte6d0%2BUkhNhuHZSBBH0EwHMOViQX%2Fx3HISzmUWnHOVGDTKDSacpA%3D%3D\"}]}\r\nlast-modified: Wed, 24 Sep 2025 08:26:09 GMT\r\npriority: u=2,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Wed, 18 Mar 2026 04:13:43 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: br\r\nage: 563\r\ncf-cache-status: HIT\r\netag: W/\"68d3ab21-67\"\r\ncf-ray: 9ddd571addb7ddf7-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":103,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"b8d7ddd09f6113fe70a8ce29ce0f4f9a","sha1":"e5e5284a913c5a08cb36b655cee62fab9ae2f736","sha256":"c449726b38d5164aa8a8d9c73e9c00f401e74c59b1bf2d6b974d15db8722372e","sha512":"b385a0a7b17f175fe07b11341303935f1327d46d8bc66073e545fa18a160d6e60dbe3e74b75e100ec6714b6ad09390305ae9d9bb2ca00a039a51913d6bf18320","ssdeep":"","tlshash":"5cb0924c1840b02a288161f80f5642e808493244ae028eb870243d5101c36f9207392a","first_seen":"2025-05-06T14:23:01.793345Z","last_seen":"2026-08-09T10:03:19.801288Z","times_seen":308,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"www.lieshou.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.lieshou.vip/assets/NavBar.vue_vue_type_style_index_0_lang-9577b1c8.js","fqdn":"www.lieshou.vip","domain":"lieshou.vip","tld":"vip"},"ip":{"addr":"172.67.142.235","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.lieshou.vip/#/register?ref=982017","date":"2026-03-17T16:23:07.187Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lieshou.vip","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Mar 2026 11:34:23 GMT","end":"Mon, 15 Jun 2026 11:34:22 GMT"},"fingerprint":{"sha1":"D7:5D:64:B7:86:F7:C2:6A:02:BE:66:BB:A3:3D:EC:2A:CC:CE:07:B3","sha256":"DB:AB:85:D9:A5:98:26:4C:58:FD:83:A8:92:34:C4:57:A1:BA:28:B3:A9:C3:78:8C:42:0F:B8:1E:FE:64:88:60"}}},"request":{"raw":"GET /assets/NavBar.vue_vue_type_style_index_0_lang-9577b1c8.js HTTP/1.1\r\nHost: www.lieshou.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.lieshou.vip/assets/register-7183de6a.js\r\nCookie: _scid=0eQkWkK66oLGxT_KX9CIVb_54N5Lg9NQ; _scid_r=0eQkWkK66oLGxT_KX9CIVb_54N5Lg9NQ\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 17 Mar 2026 16:23:07 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 17 Mar 2026 12:18:14 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69b94686-5c34\"\r\nexpires: Wed, 18 Mar 2026 04:23:06 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\nage: 0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PHJS6jgDohC0K5d4R2E0LvLiBFrajQWKuUyF%2BiRMRcNfHsM7%2FNGAmOHqmD6kLSydFJIY%2FY9TFQ88g1K1DaLr7H0nrhIihYF4qNSfFEBMaA%3D%3D\"}]}\r\ncf-ray: 9ddd571dee43ddf7-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":23604,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (23603)","md5":"aaa5c03ecdb6f5e52c8c1be561882b0a","sha1":"67c05ad1b77a334ecdfdf848f92fd7d1581b1f5a","sha256":"1c3a86d9db6821391eb7502c06a4b5c3121b103741b7e07451d83968ae894606","sha512":"6a48ad6b9853215d0b7d86b6cb712c628247b5526de5ec400f18ccb5e84d29b94c58923c74a0911b22b30eb482540eefb1925336d4133a0968d9d3baf1e2b216","ssdeep":"384:QHGMVMzf2wOXwJMZDJZLJjBMb3WOHMVBEKUNcSrF/8aecfHwo1mk:QdMiMhycH","tlshash":"d5b20c40f5528a7cdab70239de9a6441b24c5f8fd546a9a1f1fc282f37c6cf97048b68","first_seen":"2026-03-17T16:23:32.43123Z","last_seen":"2026-04-19T22:13:03.064454Z","times_seen":7,"resource_available":true,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"www.lieshou.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.lieshou.vip/api/public/index_info?d=1773764586232","fqdn":"api.lieshou.vip","domain":"lieshou.vip","tld":"vip"},"ip":{"addr":"172.67.142.235","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.lieshou.vip/#/register?ref=982017","date":"2026-03-17T16:23:06.239Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lieshou.vip","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Mar 2026 11:34:23 GMT","end":"Mon, 15 Jun 2026 11:34:22 GMT"},"fingerprint":{"sha1":"D7:5D:64:B7:86:F7:C2:6A:02:BE:66:BB:A3:3D:EC:2A:CC:CE:07:B3","sha256":"DB:AB:85:D9:A5:98:26:4C:58:FD:83:A8:92:34:C4:57:A1:BA:28:B3:A9:C3:78:8C:42:0F:B8:1E:FE:64:88:60"}}},"request":{"raw":"OPTIONS /api/public/index_info?d=1773764586232 HTTP/1.1\r\nHost: api.lieshou.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: st-ctime,st-ttgn\r\nReferer: https://www.lieshou.vip/\r\nOrigin: https://www.lieshou.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 17 Mar 2026 16:23:06 GMT\r\ncontent-type: text/html;charset=utf-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://www.lieshou.vip\r\naccess-control-allow-methods: GET\r\naccess-control-allow-headers: st-ctime,st-ttgn\r\nstrict-transport-security: max-age=31536000\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9Pni%2FLCrr7yx83NoTVQyzj2DRfbpYLK6jRm7PjnF%2BMg5LVbv57RN6v0qNa3lYTYGFtinbrVbTPumNxijlZNTCMd%2BWCa%2BFJz2OBkWJkITBA%3D%3D\"}]}\r\ncf-ray: 9ddd57180d6fddf7-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-11T09:57:30.082626Z","times_seen":17834258,"resource_available":true,"data":null}},"time_used":258,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":258,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"api.lieshou.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.lieshou.vip/assets/index-54757ceb.js","fqdn":"www.lieshou.vip","domain":"lieshou.vip","tld":"vip"},"ip":{"addr":"172.67.142.235","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.lieshou.vip/#/register?ref=982017","date":"2026-03-17T16:23:07.180Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lieshou.vip","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Mar 2026 11:34:23 GMT","end":"Mon, 15 Jun 2026 11:34:22 GMT"},"fingerprint":{"sha1":"D7:5D:64:B7:86:F7:C2:6A:02:BE:66:BB:A3:3D:EC:2A:CC:CE:07:B3","sha256":"DB:AB:85:D9:A5:98:26:4C:58:FD:83:A8:92:34:C4:57:A1:BA:28:B3:A9:C3:78:8C:42:0F:B8:1E:FE:64:88:60"}}},"request":{"raw":"GET /assets/index-54757ceb.js HTTP/1.1\r\nHost: www.lieshou.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.lieshou.vip/assets/register-7183de6a.js\r\nCookie: _scid=0eQkWkK66oLGxT_KX9CIVb_54N5Lg9NQ; _scid_r=0eQkWkK66oLGxT_KX9CIVb_54N5Lg9NQ\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 17 Mar 2026 16:23:07 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 17 Mar 2026 12:18:14 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69b94686-435\"\r\nexpires: Wed, 18 Mar 2026 04:23:06 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\nage: 0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kaaurcLVx3t%2BLoqiBpltCPDH6UjjxiXCSEQkbEw%2BumKNA%2F8z7B4%2FaS%2BCewwZPmXRmM5qAdpAf6YlZfqPzRjC%2Fcnbv2zZy1jBCLJ0D4Knrw%3D%3D\"}]}\r\ncf-ray: 9ddd571dde39ddf7-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1077,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (1076)","md5":"895f0b405d5839028b882466778e9c4b","sha1":"0acd97967297f8a13352264b6e609710759a7ff4","sha256":"948da5f1c6f0bb53a75d1732a982344830978f5178bffc8e0d08ba695f39c169","sha512":"1d344293669b1a904545fdc52611a71fd9e725ecec0c8f6f46e00d7e683038b54e43ced38b24a029c24aa3fca2ca47f43bf19a9efb0bb9a6390e8356a9f7dd39","ssdeep":"","tlshash":"6611659a6cf08ef940bd08867b930515551f0299565058e0f88e8e5c26bc9c25a2ff1c","first_seen":"2026-03-17T16:23:32.390021Z","last_seen":"2026-03-18T18:48:17.263374Z","times_seen":2,"resource_available":true,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"www.lieshou.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}
