{"report_id":"eb735707-7505-4bdf-99e0-f6dd75a97563","version":6,"status":"done","tags":[],"date":"2026-02-09T10:40:52Z","url":{"schema":"http","addr":"www.downza.cn/soft/27933.html","fqdn":"www.downza.cn","domain":"downza.cn","tld":"cn"},"ip":{"addr":"113.240.117.108","port":0,"asn":63835,"as":"No.293,Wanbao Avenue","country":"China","country_code":"CN"},"final":{"url":{"schema":"https","addr":"www.downza.cn/soft/27933.html","fqdn":"www.downza.cn","domain":"downza.cn","tld":"cn"},"title":"360wifi下载-360wifi下载电脑版客户端下载[2026最新版]-下载之家","dom":{"size":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"www.downza.cn/soft/27933.html","fqdn":"www.downza.cn","domain":"downza.cn","tld":"cn"},"ip":{"addr":"113.240.117.108","port":0,"asn":63835,"as":"No.293,Wanbao Avenue","country":"China","country_code":"CN"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-03-16T10:40:52Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":2,"urlquery":0,"analyzer":2}},"detection":{"ids":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-02-09T10:40:28Z","timestamp":1770633628,"ip_dst":{"addr":"Client IP","port":56546,"asn":0,"as":"","country":"","country_code":"zz"},"ip_src":{"addr":"122.112.196.83","port":443,"asn":55990,"as":"Huawei Cloud Service data center","country":"China","country_code":"CN"},"severity":"low","alert":"ET INFO Observed ZeroSSL SSL/TLS Certificate","source":"{\"timestamp\":\"2026-02-09T10:40:28.640036+0000\",\"flow_id\":811086212993434,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"122.112.196.83\",\"src_port\":443,\"dest_ip\":\"172.18.0.14\",\"dest_port\":56546,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2031231,\"rev\":3,\"signature\":\"ET INFO Observed ZeroSSL SSL/TLS Certificate\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"confidence\":[\"High\"],\"created_at\":[\"2020_11_23\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2022_12_01\"]}},\"tls\":{\"subject\":\"CN=bigdata.downza.com\",\"issuerdn\":\"C=AT, O=ZeroSSL, CN=ZeroSSL ECC Domain Secure Site CA\",\"serial\":\"7C:F7:CE:33:33:CC:F1:40:29:BA:D5:E4:5C:8E:61:1B\",\"fingerprint\":\"1d:ee:64:20:4c:e4:ff:49:a7:08:b2:93:b4:5b:f8:eb:1f:c4:f9:d2\",\"sni\":\"bigdata.downza.com\",\"version\":\"TLS 1.2\",\"notbefore\":\"2026-01-12T00:00:00\",\"notafter\":\"2026-04-12T23:59:59\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"fe0146829eef1917ba6c2dd4f5c08905\",\"string\":\"771,49196,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":7,\"pkts_toclient\":6,\"bytes_toserver\":1223,\"bytes_toclient\":3634,\"start\":\"2026-02-09T10:40:27.823706+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-02-09T10:40:28Z","timestamp":1770633628,"ip_dst":{"addr":"Client IP","port":56552,"asn":0,"as":"","country":"","country_code":"zz"},"ip_src":{"addr":"122.112.196.83","port":443,"asn":55990,"as":"Huawei Cloud Service data center","country":"China","country_code":"CN"},"severity":"low","alert":"ET INFO Observed ZeroSSL SSL/TLS Certificate","source":"{\"timestamp\":\"2026-02-09T10:40:28.897043+0000\",\"flow_id\":1834972056659087,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"122.112.196.83\",\"src_port\":443,\"dest_ip\":\"172.18.0.14\",\"dest_port\":56552,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2031231,\"rev\":3,\"signature\":\"ET INFO Observed ZeroSSL SSL/TLS Certificate\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"confidence\":[\"High\"],\"created_at\":[\"2020_11_23\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2022_12_01\"]}},\"tls\":{\"subject\":\"CN=bigdata.downza.com\",\"issuerdn\":\"C=AT, O=ZeroSSL, CN=ZeroSSL ECC Domain Secure Site CA\",\"serial\":\"7C:F7:CE:33:33:CC:F1:40:29:BA:D5:E4:5C:8E:61:1B\",\"fingerprint\":\"1d:ee:64:20:4c:e4:ff:49:a7:08:b2:93:b4:5b:f8:eb:1f:c4:f9:d2\",\"sni\":\"bigdata.downza.com\",\"version\":\"TLS 1.2\",\"notbefore\":\"2026-01-12T00:00:00\",\"notafter\":\"2026-04-12T23:59:59\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"fe0146829eef1917ba6c2dd4f5c08905\",\"string\":\"771,49196,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":7,\"pkts_toclient\":6,\"bytes_toserver\":1211,\"bytes_toclient\":3634,\"start\":\"2026-02-09T10:40:28.074895+0000\"}}"}],"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-09","alert":"Sinkholed","trigger":"api-shoulei-ssl.xunlei.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-09","alert":"Sinkholed","trigger":"res-etl-ssl.xunlei.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null},"summary":[{"fqdn":"zz314.downza.cn","ip":{"addr":"116.153.39.131","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"domain_registered":"2007-12-10","domain_rank":0,"first_seen":"2025-02-11T04:22:08.090945Z","last_seen":"2026-01-24T21:21:44.35563Z","alert_count":0,"request_count":16,"received_data":313616,"sent_data":7746,"comment":"","tags":null,"fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"res.njxzwh.com","ip":{"addr":"113.240.117.108","port":443,"asn":63835,"as":"No.293,Wanbao Avenue","country":"China","country_code":"CN"},"domain_registered":"2016-03-02","domain_rank":0,"first_seen":"2016-11-14T20:56:28Z","last_seen":"2026-02-01T07:41:41.523051Z","alert_count":0,"request_count":23,"received_data":331994,"sent_data":10841,"comment":"","tags":null,"fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}]},{"fqdn":"dup.baidustatic.com","ip":{"addr":"119.188.176.49","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"domain_registered":"2012-03-28","domain_rank":643308,"first_seen":"2013-08-22T22:41:21Z","last_seen":"2026-02-08T06:24:56.639664Z","alert_count":0,"request_count":1,"received_data":117733,"sent_data":414,"comment":"","tags":null,"fingerprints":null},{"fqdn":"www.downza.cn","ip":{"addr":"218.11.0.26","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"domain_registered":"2007-12-10","domain_rank":539636,"first_seen":"2012-08-25T15:49:53Z","last_seen":"2026-01-24T21:21:44.924812Z","alert_count":0,"request_count":2,"received_data":155912,"sent_data":945,"comment":"","tags":null,"fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"jQuery:1.12.4","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}]},{"fqdn":"api-shoulei-ssl.xunlei.com","ip":{"addr":"106.15.105.54","port":443,"asn":37963,"as":"Hangzhou Alibaba Advertising Co.,Ltd.","country":"China","country_code":"CN"},"domain_registered":"2004-01-13","domain_rank":739502,"first_seen":"2017-01-31T22:36:21Z","last_seen":"2026-02-06T06:03:32.287539Z","alert_count":1,"request_count":1,"received_data":527,"sent_data":509,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"9j7eaq.yzhy20.cn","ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2020-01-09","domain_rank":0,"first_seen":"2026-02-09T10:40:53.97195Z","last_seen":"2026-02-09T10:40:53.97195Z","alert_count":0,"request_count":1,"received_data":0,"sent_data":437,"comment":"","tags":null,"fingerprints":null},{"fqdn":"at.alicdn.com","ip":{"addr":"47.246.44.177","port":443,"asn":24429,"as":"Zhejiang Taobao Network Co.,Ltd","country":"Sweden","country_code":"SE"},"domain_registered":"2008-06-25","domain_rank":96084,"first_seen":"2013-11-28T05:03:29Z","last_seen":"2026-02-04T12:46:17.782344Z","alert_count":0,"request_count":1,"received_data":22369,"sent_data":448,"comment":"","tags":null,"fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]},{"name":"Tengine","description":"Tengine is a web server which is based on the Nginx HTTP server.","website":"https://tengine.taobao.org","common_platform_enumeration":"","icon":"Tengine.png","categories":["Web servers"]}]},{"fqdn":"push.zhanzhang.baidu.com","ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"1999-10-11","domain_rank":1485849,"first_seen":"2015-07-22T05:44:02Z","last_seen":"2026-02-04T22:54:43.419841Z","alert_count":0,"request_count":1,"received_data":0,"sent_data":418,"comment":"","tags":null,"fingerprints":null},{"fqdn":"bigdata.downza.com","ip":{"addr":"122.112.196.83","port":443,"asn":55990,"as":"Huawei Cloud Service data center","country":"China","country_code":"CN"},"domain_registered":"2011-03-27","domain_rank":0,"first_seen":"2021-06-08T10:16:41Z","last_seen":"2026-02-01T07:41:41.648197Z","alert_count":0,"request_count":3,"received_data":3802,"sent_data":1930,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"127.0.0.1","ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":1,"received_data":0,"sent_data":555,"comment":"","tags":null,"fingerprints":null},{"fqdn":"cbjs.baidu.com","ip":{"addr":"119.188.176.49","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"domain_registered":"1999-10-11","domain_rank":2850591,"first_seen":"2012-05-23T12:16:29Z","last_seen":"2026-02-01T05:04:55.400243Z","alert_count":0,"request_count":1,"received_data":117758,"sent_data":408,"comment":"","tags":null,"fingerprints":null},{"fqdn":"img3.downza.cn","ip":{"addr":"121.22.232.168","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"domain_registered":"2007-12-10","domain_rank":6189449,"first_seen":"2016-04-30T23:51:45Z","last_seen":"2026-02-02T23:24:25.787568Z","alert_count":0,"request_count":29,"received_data":526058,"sent_data":12783,"comment":"","tags":null,"fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}]},{"fqdn":"res-etl-ssl.xunlei.com","ip":{"addr":"101.133.169.157","port":443,"asn":37963,"as":"Hangzhou Alibaba Advertising Co.,Ltd.","country":"China","country_code":"CN"},"domain_registered":"2004-01-13","domain_rank":2017599,"first_seen":"2016-11-18T02:24:15Z","last_seen":"2026-02-06T02:30:16.131869Z","alert_count":1,"request_count":1,"received_data":14627,"sent_data":426,"comment":"","tags":null,"fingerprints":null},{"fqdn":"s.union.360.cn","ip":{"addr":"171.8.167.94","port":443,"asn":137687,"as":"Luoyang, Henan Province, P.R.China.","country":"China","country_code":"CN"},"domain_registered":"2003-03-17","domain_rank":1507248,"first_seen":"2015-09-25T05:40:38Z","last_seen":"2026-02-08T05:19:45.874998Z","alert_count":0,"request_count":1,"received_data":2340,"sent_data":524,"comment":"","tags":null,"fingerprints":[{"name":"OpenResty:1.9.15.1","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"api.oss.downza.com","ip":{"addr":"113.240.117.106","port":443,"asn":63835,"as":"No.293,Wanbao Avenue","country":"China","country_code":"CN"},"domain_registered":"2011-03-27","domain_rank":0,"first_seen":"2022-10-21T16:46:02Z","last_seen":"2026-01-24T21:21:44.093704Z","alert_count":0,"request_count":2,"received_data":1936,"sent_data":1040,"comment":"","tags":null,"fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"open.thunderurl.com","ip":{"addr":"221.194.141.170","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"domain_registered":"2018-03-13","domain_rank":4948650,"first_seen":"2018-11-02T14:05:19Z","last_seen":"2026-02-07T06:26:45.21479Z","alert_count":0,"request_count":1,"received_data":356352,"sent_data":421,"comment":"","tags":null,"fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"zz.bdstatic.com","ip":{"addr":"157.255.63.48","port":443,"asn":136958,"as":"China Unicom Guangdong IP network","country":"China","country_code":"CN"},"domain_registered":"2011-12-26","domain_rank":365334,"first_seen":"2017-01-30T07:45:48Z","last_seen":"2026-02-04T11:57:02.699565Z","alert_count":0,"request_count":1,"received_data":767,"sent_data":420,"comment":"","tags":null,"fingerprints":null},{"fqdn":"www.360.cn","ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2003-03-17","domain_rank":730033,"first_seen":"2013-01-19T20:06:14Z","last_seen":"2026-02-06T16:58:07.026111Z","alert_count":0,"request_count":1,"received_data":0,"sent_data":521,"comment":"","tags":null,"fingerprints":null},{"fqdn":"bigdata.onlinedown.net","ip":{"addr":"115.223.9.119","port":443,"asn":134771,"as":"WENZHOU, ZHEJIANG Province, P.R.China.","country":"China","country_code":"CN"},"domain_registered":"2001-03-01","domain_rank":0,"first_seen":"2025-07-05T15:46:28.799932Z","last_seen":"2026-02-01T08:37:44.707803Z","alert_count":0,"request_count":1,"received_data":5785,"sent_data":441,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"res.njxzwh.com/redirect/dist/bundle.js?2026020913","fqdn":"res.njxzwh.com","domain":"njxzwh.com","tld":"com"},"ip":{"addr":"113.240.117.108","port":443,"asn":63835,"as":"No.293,Wanbao Avenue","country":"China","country_code":"CN"},"introduction_type":"scriptElement","is_inline":false,"md5":"a15b12ecfca4ad041ce999d9739fcff0","sha1":"9543940c6f82d897bc5b6fb9f149303fbc3c8fa0","sha256":"bb245e02ce438ad0655fefc83d386cc5a24dfede2fa9a16176e05b0da6e55d51","sha512":"a831c09652bbbfb50d8396d51f004391a08e28c79bf526a22ee26f050e8d37b31bc78a3f09ae24f95fd61969dea0aabab447fd25f9421bc2a50ffcbac7f7a169","ssdeep":"192:IX+hkzcGGB/qrc2T+tgdiz2PhfN793/uQrbO++ljrxFVD4yggOyz:IX+esGc2OzYDuQrijrxFFz","tlshash":"2ce286ddabce4d649a48dbccb2fd660cb6031ed3d5c5589bc20dac9967322e02b1435e","size":34130,"data":"","first_seen":"2024-12-25T04:18:22.998709Z","last_seen":"2026-06-06T23:56:38.288349Z","times_seen":144,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"res.njxzwh.com/downza/pc/v2023/js/jquery.SuperSlide.2.1.1.js?2026020913","fqdn":"res.njxzwh.com","domain":"njxzwh.com","tld":"com"},"ip":{"addr":"113.240.117.108","port":443,"asn":63835,"as":"No.293,Wanbao Avenue","country":"China","country_code":"CN"},"introduction_type":"scriptElement","is_inline":false,"md5":"0b9bc63ab05e21e3830da5bbb4ccee67","sha1":"d162156bdaf14217d76d920e0e57b86d8feb1d97","sha256":"349e46b2c65028736d0bbff7b829c7fc6fbdebc1fb1e8b12365a0ca2e6e9e848","sha512":"bdfa220da1f08e29f05a9984c4999d7e742bea10ad86b7e497a0d112c7992cc52b7f1e9f5430b4286f14bb2336110f85cbdc3164a92121caaf5c91961f7e69c9","ssdeep":"192:j+K3bxH+nqfhD9VUVjIItpfg5uXG3+1tSCl+7flvSXwaHxImISLTNSfYXH7Le2HE:jNcnqflKFgEWulE8REcS3j/CkR1Xh3","tlshash":"9532c65fb66635ca4597b3f1107f940d222b5965fc8a8ca0b17082c0adb9a1c243bfed","size":11264,"data":"","first_seen":"2023-04-05T11:06:31Z","last_seen":"2026-06-17T23:54:24.234926Z","times_seen":13913,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.downza.cn/soft/27933.html","fqdn":"www.downza.cn","domain":"downza.cn","tld":"cn"},"ip":{"addr":"218.11.0.26","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"introduction_type":"scriptElement","is_inline":true,"md5":"28803a406fa992b89da012dd9d6b31fd","sha1":"00562b15d09e7fa8395963c5c76eb9086be4a1c5","sha256":"0d68dc7ba304aea1220b292dfc262f21578d7bf6ceda6b5fa8ce20f87651b00e","sha512":"9c1c5771f54754e5642de39757eecc8f67095290e27bed9179c9432dbdd8f5ebc249f47090ca93d95dd37871d2fbb28a67f8c66067886ac028239c669f370588","ssdeep":"","tlshash":"a37000202c22000000880200a002e0002a0a3ab3202a820208a800e208822882020002","size":21,"data":"","first_seen":"2026-02-09T10:41:32.074865Z","last_seen":"2026-02-09T10:41:32.074865Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google-analytics.com/analytics.js","fqdn":"www.google-analytics.com","domain":"google-analytics.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"f24128d0c9cba7be2916c693427a3483","sha1":"1b6397d496ea896ebc2018b01b995cee4f166029","sha256":"58173de4697da1a218f04c3a783a733bab4e769ceabc37cd42da9dc3e036a7e8","sha512":"c4950733b44e258bbc817ce6396f002caec1e11a6413fd0038c9baef2d5f1d992b1fd0ec52515aba52faedb52c28b996a7fc063f28a0f45f3aab5e2f91bf5be5","ssdeep":"96:A1VdZYqhPnjpWx4/eTe8qSMbqaQd6VL2Jyt9LdJoyayCVPVD5wdBfQPfCHiUr3:AXdZYqNjpU4yPqSMbqaQGL2QfdDayCZC","tlshash":"a6a1dc9939fb50210233b1bd1bafa918b23895236208dd61b98c9364bf94437d7f1fc9","size":4691,"data":"","first_seen":"2023-04-11T21:07:53Z","last_seen":"2026-06-07T08:18:38.899011Z","times_seen":919823,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.downza.cn/soft/27933.html","fqdn":"www.downza.cn","domain":"downza.cn","tld":"cn"},"ip":{"addr":"218.11.0.26","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"introduction_type":"scriptElement","is_inline":true,"md5":"482e17ffa611640df27dcd8bffd70b10","sha1":"2e10922994bd13291ce2dc1ec8c1bca98a6135f4","sha256":"bc73c2fd7fa601897501b408f5eed4786d20dbcdb724d99e836e98d0f4c48315","sha512":"8c2c2953f02c248314170b984f473cb9abd5027fe75417faa70c6b9e3eb19abea7d1bf05d3d6d917fb63fe07445bcbb671f4526f45c57f6ed45c6f198f86c457","ssdeep":"","tlshash":"37e07d5d244e108442abb4e67bb382083682234ea0348470bead40905f38dcd148141c","size":333,"data":"","first_seen":"2025-02-11T04:22:14.279823Z","last_seen":"2026-06-06T23:56:38.358814Z","times_seen":53,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"res-etl-ssl.xunlei.com/v1.0.0/xla.min.js","fqdn":"res-etl-ssl.xunlei.com","domain":"xunlei.com","tld":"com"},"ip":{"addr":"101.133.169.157","port":443,"asn":37963,"as":"Hangzhou Alibaba Advertising Co.,Ltd.","country":"China","country_code":"CN"},"introduction_type":"scriptElement","is_inline":false,"md5":"80b7b16ffa8b5d8f91a66841b3c572b6","sha1":"c90f3805a1f71be10f8e975db44722db5be34915","sha256":"f1a0b5c230e0005dc4f672cdb642e09b3323d1e3024b9979a3d4441b5e53942a","sha512":"b48170401a2205f335631d33783f7ec9aa01abddc97d6d32986958b4f95197dea875f0b268007a3ce7ff91dcad41e02c9fb95976ed3fbdba8da74bd535501a27","ssdeep":"192:fxWB6UHJsio0sFYPvCmzHK096O+aTtfHO9Gda6xw4L4fafp26Lr4T4S139AxPcqv:fxWBA0s6HB9HlqIa6xRM7EPc/PDNu","tlshash":"3f52c99a3364b49683a73ce41d6f3946e0b58c156858d490fb74c8e26874e6f833be3c","size":14341,"data":"","first_seen":"2023-03-10T11:33:41Z","last_seen":"2026-06-06T23:56:38.340739Z","times_seen":332,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.downza.cn/soft/27933.html","fqdn":"www.downza.cn","domain":"downza.cn","tld":"cn"},"ip":{"addr":"218.11.0.26","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"introduction_type":"scriptElement","is_inline":true,"md5":"559bb2435b8ea5738344b5b4199f4191","sha1":"f7c4bde5606e213e13c5e93ca29ad1bb5792ac88","sha256":"04e8b2a3e7915a5cdd9474ffcb36b44aa820d604b667c8c58e1961488423868e","sha512":"c2c8ef0357aaf6c83b6e9728a5ae85638c924c0f8e5e37fa79b48eeea75dbc10489e70bbf0f84f7ee26859b190dd701cdbd990a05669b2586f474047fd5b3263","ssdeep":"","tlshash":"95119beb595246b1ec5730152b6dc300b2373887d628cc05be2ca847bfd06355599fe8","size":1006,"data":"","first_seen":"2026-02-09T10:41:32.078483Z","last_seen":"2026-02-09T10:41:32.078483Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.downza.cn/soft/27933.html","fqdn":"www.downza.cn","domain":"downza.cn","tld":"cn"},"ip":{"addr":"218.11.0.26","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"introduction_type":"scriptElement","is_inline":true,"md5":"9ce10c8e4be4142f63982663e617910c","sha1":"79fe91dc27434639bdc63d9c270ff3e112ebbbac","sha256":"e17c2c3cb854ebb4fa92dcf76d02f8f410d5c79f7e1637e48137ec4f042acf58","sha512":"f2b8c48d9f67750e532faf947169ba45388146d143a48d3b63372ad87bc63bc3569d35f4dc9225ffe5e198751929b1da39253e6eb1d117e7c6c01385cd902851","ssdeep":"","tlshash":"40115779dc9682e0295f30195a7dca00b635202bc35ccd857a2ca8792ff86355b99fe8","size":1006,"data":"","first_seen":"2026-02-09T10:41:32.080908Z","last_seen":"2026-02-09T10:41:32.080908Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"res.njxzwh.com/downza/pc/v2023/js/detail.js?2026020913","fqdn":"res.njxzwh.com","domain":"njxzwh.com","tld":"com"},"ip":{"addr":"113.240.117.108","port":443,"asn":63835,"as":"No.293,Wanbao Avenue","country":"China","country_code":"CN"},"introduction_type":"scriptElement","is_inline":false,"md5":"b9df3fe2e7265ce4938428ed4f20f03c","sha1":"bf8d062485b95aaf40898508172256dca7b051ee","sha256":"51c50d7e774b5ffdcf1f84fd2349932ae5a3e2527551bb05d43b499435232938","sha512":"41ed7dde17f83cc0724a3194174b24f11ac3d226add096539d042fb82ace14184dc8418c60d9b0d1434ae0dd8e218a10c3ee4bb6a317f7531afd3e929669fb15","ssdeep":"96:w4zYnZ4z8nDV4zYn44wMmwHW6nk27ENACWIvAK2L4:w4zYZ4z8R4zY44wMmwR3XL4","tlshash":"af912f49b9002a6468bfa73f6a7b6404db1a5513c161e200f09e48e61f701a477f3ede","size":4413,"data":"","first_seen":"2025-11-02T09:13:30.168288Z","last_seen":"2026-06-06T23:56:38.286398Z","times_seen":37,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.downza.cn/soft/27933.html","fqdn":"www.downza.cn","domain":"downza.cn","tld":"cn"},"ip":{"addr":"218.11.0.26","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"introduction_type":"eventHandler","is_inline":false,"md5":"3d711c88dbe3921fff761d7217f63fad","sha1":"ca847f574fd94d6252f6a07600968afb7a6d865b","sha256":"792037eb34b381ceb91a170df267b730baab9ddd8e937f5b583cf29158253a7b","sha512":"41ec32043c3634c0cd93df2985193fb66a7578f0a43eedd005becac977396e15283262e067813940965781166fac4d9af663b564a37ed7dd513eea2698c3f805","ssdeep":"","tlshash":"1b90027009a3101c40b925a15c264c6165f4660e1358461aa55825847d65738e44154d","size":55,"data":"","first_seen":"2026-02-09T10:41:32.083113Z","last_seen":"2026-02-09T10:41:32.083113Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.downza.cn/soft/27933.html","fqdn":"www.downza.cn","domain":"downza.cn","tld":"cn"},"ip":{"addr":"218.11.0.26","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"introduction_type":"scriptElement","is_inline":true,"md5":"64398f2ec71ac203b6697e9dfb9ef871","sha1":"505fada846a09148b5b67bca3e73534b87beb053","sha256":"119f31afe683c7642b0c57c0981d9ea36bc63593c245836269d5a67c48719fe7","sha512":"565f2328196d205ba3ff8cbdf4df027c179a48f9b83fcc25b295f5019c0fbdbd8398972f5f9af46562a283b9d08a2be08255c2e23130e1c7a4e5d249ed58c856","ssdeep":"","tlshash":"3eb02208b2230020003f20208bff80002822000f2000f000388c0ac20f38808a0cbb08","size":99,"data":"","first_seen":"2026-02-09T10:41:32.08542Z","last_seen":"2026-03-17T15:47:07.942227Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.downza.cn/soft/27933.html","fqdn":"www.downza.cn","domain":"downza.cn","tld":"cn"},"ip":{"addr":"218.11.0.26","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"introduction_type":"scriptElement","is_inline":true,"md5":"26780c68753983b8eab3d268a721cd27","sha1":"df2b85d22116134533701da730e94d0c7e6b7749","sha256":"a9d62077f87e4be7c7e1f201ca27719d96f6b2c4ebc9d84421e3a39129f63b64","sha512":"61b16bb0a1c056e25ab3163226710bc06f58f6d2a96733c2742752b8bc758fa47c89b4d3998233dfbfd9fdebad1310266f7930a2e08ff8f423995c3f9c2ad38f","ssdeep":"","tlshash":"7de0614e346854e595e3a1f737b3491c7412370c6550f9a349ad854c2400551409b1dc","size":395,"data":"","first_seen":"2025-02-11T04:22:14.282922Z","last_seen":"2026-06-06T23:56:38.372137Z","times_seen":54,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"res.njxzwh.com/downza/pc/v2023/js/jquery-1.12.4.min.js","fqdn":"res.njxzwh.com","domain":"njxzwh.com","tld":"com"},"ip":{"addr":"113.240.117.108","port":443,"asn":63835,"as":"No.293,Wanbao Avenue","country":"China","country_code":"CN"},"introduction_type":"scriptElement","is_inline":false,"md5":"618538b4ab9639d444e962729a927f15","sha1":"dacc1f76630a9708add066819b1aabf8dce01056","sha256":"27d92130c0321dad5a03760fd5ac98a3d04ed4c94d88418fe6d50da1f7fc5cbe","sha512":"bcb6754ea246939a19a917cc0b810e1753c1b0f1a8b1b7e652128ef15dee4fc79111e4d88fe12f9188449a307e82240d0261af402d783428edfe5785c860372d","ssdeep":"1536:jYE1JVoiB9JqZdXXe2pD3PgoIiulrUdTJ5Fk/zkZ4HjL5o8srOaS9TwDhb7/Jp96:y4J+03jL5TCOauTwDhFdnCVQNLa98Hrc","tlshash":"9693d7d9b6d6706287b734a851bf410bb17aa8eab40c4c60f058c8e47e74e9d507bf2d","size":97168,"data":"","first_seen":"2023-03-07T01:12:12Z","last_seen":"2026-06-17T17:20:45.274998Z","times_seen":5353,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.downza.cn/soft/27933.html","fqdn":"www.downza.cn","domain":"downza.cn","tld":"cn"},"ip":{"addr":"218.11.0.26","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"introduction_type":"scriptElement","is_inline":false,"md5":"f9a5cdea6fcb9ddfacad637c96c9a9ee","sha1":"645a87617a4eec18cb9dcd147eafdcc8d92df94f","sha256":"d25a435c6c6247157c32dea99733a11d1dca5b469100e0b2ed618540315217c0","sha512":"3750c70a7f6da513f51fd889bdf9fc095b443ae515eeaf0ea733de5bee544978eb0f01a7808bae0e7250ccc53f569fa601999f95826b7b0773092470b79f2680","ssdeep":"","tlshash":"95800080ac08b83aa2a823002233b20c202000f228e2b2c038a08c0820003cf38008c0","size":29,"data":"","first_seen":"2026-02-09T10:41:32.090105Z","last_seen":"2026-02-09T10:41:32.090105Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dup.baidustatic.com/js/ds.js","fqdn":"dup.baidustatic.com","domain":"baidustatic.com","tld":"com"},"ip":{"addr":"119.188.176.49","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"introduction_type":"scriptElement","is_inline":false,"md5":"b543dbe074718c21f7f5e7cbf1aff034","sha1":"99ef1caf9c69e99a60c2f0ee33720cb40cdf1cc8","sha256":"b6a34b928d00909e40ec7edfadd89ac0cfa1fcc5892bdf3168b60b28a5bfe1f6","sha512":"56d74637e8023b8983c240ec595528c56ed7d84f461fd4a1e16d329906a2dbfd023a8d519a68b1458a48f9cd19176df60dc099102640f0c3589c3bddd69221b7","ssdeep":"3072:GpOyaTRXqCpCOjwlfbitfD9mxf1W4OwYsRQD+fgpNCpIdlw:GpBApCO0fyfDcTQD+fgXRdlw","tlshash":"f4b3e899f6d2742546a220a4162f2609b2375548748b8480f67ee8d1fdbcf4f607bfbc","size":117379,"data":"","first_seen":"2025-06-30T07:43:55.721259Z","last_seen":"2026-06-15T10:15:23.743114Z","times_seen":1044,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bigdata.onlinedown.net/win_heartbeat_tool.js?2026020913","fqdn":"bigdata.onlinedown.net","domain":"onlinedown.net","tld":"net"},"ip":{"addr":"115.223.9.119","port":443,"asn":134771,"as":"WENZHOU, ZHEJIANG Province, P.R.China.","country":"China","country_code":"CN"},"introduction_type":"scriptElement","is_inline":false,"md5":"4e979ccfd61b1b2edd7c35c38e983d65","sha1":"42e9c12a32f3d71d4dd1f54218d109eaa4ed225a","sha256":"c3d3ad3880a8c5c7ff719b98acadbbb2127bc2bd2796dea8f535f1b503320887","sha512":"c6cb9f8906181aab8afb067ecf46e79951130d50ce1a898053814201e247d07d11f5260871b012892f81e9e0e651e1040203d3afc8408663b8951a21383b48fd","ssdeep":"96:Q6WIKZ7Wk+mj/hCP4C1wZD1ZD5BnX+B68pkO967zE/DCKlQ1mxp6wti:Q6WI3obP3XBnOBdto74m1mbPI","tlshash":"9ab1959425d970aa45bbbb705f63e08af3305a131940e198bddd87160f33bf89245fd9","size":5222,"data":"","first_seen":"2025-12-19T23:36:25.989321Z","last_seen":"2026-06-06T22:27:36.490719Z","times_seen":82,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"res.njxzwh.com/w2/js/app/tongji.js","fqdn":"res.njxzwh.com","domain":"njxzwh.com","tld":"com"},"ip":{"addr":"113.240.117.108","port":443,"asn":63835,"as":"No.293,Wanbao Avenue","country":"China","country_code":"CN"},"introduction_type":"scriptElement","is_inline":false,"md5":"98e4c22ce59e9effa9bde2788477fceb","sha1":"ee3517ea667977f21e09e8355591c46d5e7cad96","sha256":"5515312c90eca191e9c7ba662587459b5f746dc4372e6237416be4f63a75a4b6","sha512":"b87d693fb7b6f493ac7763f870f490325f3744aef1f41bef7f45ee86e27fa36d846fd6270f5fcc21adcf94f6a92af0b0716e048d9737049e325fd0c4ae2718d1","ssdeep":"","tlshash":"b611309b2c7b6834176c08f650bdf508b2b8101ca486d603a8acd9050ab0fed1c0d998","size":1108,"data":"","first_seen":"2025-02-11T04:22:13.827294Z","last_seen":"2026-06-06T23:56:38.295545Z","times_seen":63,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.downza.cn/soft/27933.html","fqdn":"www.downza.cn","domain":"downza.cn","tld":"cn"},"ip":{"addr":"218.11.0.26","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"introduction_type":"scriptElement","is_inline":true,"md5":"cfec53eed51251bb8e779f6132fb284f","sha1":"3e43cff8a79a60825b7596180d757f0cfc21d76b","sha256":"2fb8bb1809df59f05a7b4983d99585fec8c50335730e55a08965a10d520db894","sha512":"feaae2b53897686d791752a1260bafaf876fe52bbd42dca6896345366f1c220b6552ba8b46944fa5cc31fd1378ab26f55120db0987bb822d883b51d2411cb907","ssdeep":"","tlshash":"33d02b2fac5b147037db087d52bed548b1d2119f2079c004b4dcf4104f50ec1082ebc8","size":289,"data":"","first_seen":"2025-06-15T16:39:48.443851Z","last_seen":"2026-06-06T23:56:38.37268Z","times_seen":28,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.downza.cn/soft/sandbox%20eval%20code","fqdn":"www.downza.cn","domain":"downza.cn","tld":"cn"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"","is_inline":false,"md5":"92b651082ce234f66bb544e678befda3","sha1":"14c21c55ddce43b6f677caadf51d4ab98c6a3df8","sha256":"25d57d1d97abeb84531d3d3e5754dd5cb19a2c115edfa7cfc7af8247084faded","sha512":"b4fcbc037e0a3d91db2a624921e96b878e9e18dd998ad5649d77d7d053faf28b09c8725a0542aef702310bf85f3037b70985c274db8acabd021efb171d41f361","ssdeep":"","tlshash":"34c08ca3e74026ae2a1166b2b810e003a2866b015aa78402b00a003b1441fe21aaa1a8","size":147,"data":"","first_seen":"2023-04-11T21:07:53Z","last_seen":"2026-06-07T08:18:38.896325Z","times_seen":921522,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.downza.cn/soft/27933.html","fqdn":"www.downza.cn","domain":"downza.cn","tld":"cn"},"ip":{"addr":"218.11.0.26","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"introduction_type":"scriptElement","is_inline":true,"md5":"02f078ff88a01b91735bf8481ff4153f","sha1":"68c60327688da7f043bc1370fb77748eef2f5764","sha256":"282c157729661c8bb551f5789ba53ceffe6907075bcf1d15cdb38873f2acfbe5","sha512":"a38bc6f7c6d37dc578f5f1754e966bba275e32e7ef4e71a26a4cd41d89138eede758e55fb93d8f4048753eafd09f4c9c1f2ac51babe8c650a021997033933e41","ssdeep":"","tlshash":"5ee0721a30c2003a12b384ba23f7810a2622370fc48e8b12ba6fc9a66f24ca5040a60c","size":309,"data":"","first_seen":"2025-02-11T04:22:14.285457Z","last_seen":"2026-06-06T23:56:38.373288Z","times_seen":53,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.downza.cn/soft/27933.html","fqdn":"www.downza.cn","domain":"downza.cn","tld":"cn"},"ip":{"addr":"218.11.0.26","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"introduction_type":"scriptElement","is_inline":true,"md5":"81a9982fc04f379107e855281333d240","sha1":"4cc29ca88916c5c7dd41494ce6b380da49b253f3","sha256":"fffa4774be1e14dd8a8d4d50ce6e358b8c400aaf8b0b6320f7db7d018c17cf2a","sha512":"3d2f5875cb88f50be1bb0d6e45d40aa6e38b0038adddc8114e5e78f8d51a08cd486b0531d77d6defe517a5b474844ff8d8f786a0efec786dbf7ab301a95e3832","ssdeep":"","tlshash":"6ee0206ebc7746b43b5100bf453fa51cf1da103d5058d0127488e8114e20ed64b1ead5","size":346,"data":"","first_seen":"2025-11-02T09:13:30.312984Z","last_seen":"2026-06-06T23:56:38.382331Z","times_seen":40,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s.union.360.cn/proxy.html","fqdn":"s.union.360.cn","domain":"360.cn","tld":"cn"},"ip":{"addr":"171.8.167.94","port":443,"asn":137687,"as":"Luoyang, Henan Province, P.R.China.","country":"China","country_code":"CN"},"introduction_type":"scriptElement","is_inline":true,"md5":"555c36219d4234ecf3edb2e8a71c7a6b","sha1":"f4200b6dffb233dee4d864477412388073b3945c","sha256":"8751a80fa876d7f2aa7001e26fc071fa7f77e5a9f1e1fa0668dcb2544a25fb75","sha512":"4d42d8341e01994c9e3af535ec859e4fa049089874f953f97725d8113f696150425e5eaa833b3bfa7380d8791b0cdc017706df2e681cf5b4bd1cc9c83ba28514","ssdeep":"","tlshash":"4341a8ad320970b900664e2136af370e7238122658478ca42f26f9f37cb574f8312ded","size":1881,"data":"","first_seen":"2025-03-02T07:00:46.154522Z","last_seen":"2026-06-06T23:56:38.367261Z","times_seen":768,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.downza.cn/soft/27933.html","fqdn":"www.downza.cn","domain":"downza.cn","tld":"cn"},"ip":{"addr":"218.11.0.26","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"introduction_type":"scriptElement","is_inline":true,"md5":"b381cd4672d0cf7e322c940905ab0d1f","sha1":"48acf2da99c8fe4b3914ea63e95613e942a3a8c3","sha256":"f011750af64c966af12e12b930afab0396495e0c2c83dbad98796a143129dc21","sha512":"3a84154680380bbc4e707117613e4ef508b4ec89b3264db047ccd258537f90ac45619ed175c0b26d820927c23b544cddeeb27d2c5e781816308f582d8b150375","ssdeep":"","tlshash":"cb3121e96afb6e15c47730271f3f9005b869143fa128dd08fc4c15c82faa811d45a34d","size":1611,"data":"","first_seen":"2026-02-09T10:41:32.102264Z","last_seen":"2026-02-09T10:41:32.102264Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bigdata.downza.com/js/xingzhi.js?6bd0","fqdn":"bigdata.downza.com","domain":"downza.com","tld":"com"},"ip":{"addr":"122.112.196.83","port":443,"asn":55990,"as":"Huawei Cloud Service data center","country":"China","country_code":"CN"},"introduction_type":"scriptElement","is_inline":false,"md5":"20cfe5a66ceaa704c9134202b3197360","sha1":"1465772bfe2402479f12f67574cde3e4515b77f7","sha256":"df9d37d34bbd878277d92fa3633976f3a4f61a076c86a76bdbf51c350e928e0a","sha512":"4c93a2504530954a3e0f5535cc2ac214c94d14540af20fec2e8d2aa6f54aed586045d9e5ce92d93224a845dfe08e7c0bf04c892369f134faef9797e762201cee","ssdeep":"","tlshash":"57612274b294247540a12069672b734b63365146b84f6491a43eeef0bd74f47a123fbf","size":3300,"data":"","first_seen":"2023-03-09T21:13:51Z","last_seen":"2026-06-06T23:56:38.253001Z","times_seen":169,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.downza.cn/soft/27933.html","fqdn":"www.downza.cn","domain":"downza.cn","tld":"cn"},"ip":{"addr":"218.11.0.26","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"introduction_type":"scriptElement","is_inline":true,"md5":"54be0b3ce9f618e7085251f6d0246f64","sha1":"9c686a230d9b44aa4820f26af9a81060bcc3beba","sha256":"c6f478948d0beda6e9d15585837e885d8e9a3024de0f6bf2800522c38aab830b","sha512":"b578610d97a1d8b6fcbdbb4823611f0d316e62b84d2512c8bc74cc11b8143fd3b7ae154a50cebc993faf2731a9454bdadf39179df3a6d5954d00342572b14ca6","ssdeep":"","tlshash":"521148286af36021d6b730fa072fa2543277000b7204cf5c784c5a926fbdb0c95d368e","size":1022,"data":"","first_seen":"2026-02-09T10:41:32.106161Z","last_seen":"2026-02-09T10:41:32.106161Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"res.njxzwh.com/downza/pc/v2023/js/layer/layer.js?2026020913","fqdn":"res.njxzwh.com","domain":"njxzwh.com","tld":"com"},"ip":{"addr":"113.240.117.108","port":443,"asn":63835,"as":"No.293,Wanbao Avenue","country":"China","country_code":"CN"},"introduction_type":"scriptElement","is_inline":false,"md5":"47db0e57d73194c6a41bab5b4d55e860","sha1":"9db378fa8d56979e86519f483993486dc476902b","sha256":"69025fc1818313fb94c9ca4975c6a45e8385a6fd0ab9d0c60c0ac93cd997566e","sha512":"851e8630a4e631b332027850905245cb68ea56fddab22a8b7504bb4689c1a26b955ddf1b0ef23d1b1a0ecd83d668e115c9e10caf823029046a97a9f7b5c858b7","ssdeep":"384:N1xCih92A3igrLXSt/SdMrXqE6tGLxzAOTElH0jjhtjfs8:N1EiV3i+WtXItqF13k8","tlshash":"85a2b66a754034976323906ad11fba0b31f21d24d7078128f22bb4ae1dbcd95a2b7f5f","size":22105,"data":"","first_seen":"2023-04-07T19:23:28Z","last_seen":"2026-06-15T09:17:33.745008Z","times_seen":1194,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s.union.360.cn/336149.js","fqdn":"s.union.360.cn","domain":"360.cn","tld":"cn"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"ae81ebdbe772a3085a01fc9b00be60fd","sha1":"74e1f218294fcc79d014a8098f7a00bcb887f192","sha256":"22dd5addafe5afcb307f8bb522404b9a438cbd5aea504d8af932eb6cdabc8281","sha512":"e1653e9c950efa6fb061f33252ebc824b5bacbe653991923d5374143819561fd4ebcdca8b518479d9c44594251ee3616597f035c07a2cdfe19107f4a3bf71c52","ssdeep":"384:AbDnrogINt+Mg8Jl95M5ce2QcLgjsKZSSDnyZWyqwS5ThvC4Sh+7LD2qwza/aWDL:AXnmE8JNNLueLql5Tu+8WGeX","tlshash":"34c2b3ccb6d2b06183d73439827f600af23fad19781ec054e256e9d56c38a5a9237f6c","size":26367,"data":"","first_seen":"2026-02-09T10:41:32.117899Z","last_seen":"2026-02-09T10:41:32.117899Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.downza.cn/soft/27933.html","fqdn":"www.downza.cn","domain":"downza.cn","tld":"cn"},"ip":{"addr":"218.11.0.26","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"introduction_type":"scriptElement","is_inline":true,"md5":"23a719abfaee08a6e7ace0466933801a","sha1":"c678c995d8902730a3c1fa94e3123d04b4d0cd90","sha256":"99ad770a59b34c3b81db0819253d812e110f47573d974c42cf24743e4489229a","sha512":"720fb914a1e2310982d481f7fe723c33e0dcc411c1138fd06e56c0f8b7128c8a47d6568290972d34da17330dcab30cb36e35fe5e349912c0495dfc5178d0af85","ssdeep":"","tlshash":"32e07d0bd0a684105a2395843bf35700554674076f40d8717aae43546f5896583c131c","size":342,"data":"","first_seen":"2026-02-09T10:41:32.1233Z","last_seen":"2026-02-09T10:41:32.1233Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cbjs.baidu.com/js/m.js","fqdn":"cbjs.baidu.com","domain":"baidu.com","tld":"com"},"ip":{"addr":"119.188.176.49","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"introduction_type":"scriptElement","is_inline":false,"md5":"b543dbe074718c21f7f5e7cbf1aff034","sha1":"99ef1caf9c69e99a60c2f0ee33720cb40cdf1cc8","sha256":"b6a34b928d00909e40ec7edfadd89ac0cfa1fcc5892bdf3168b60b28a5bfe1f6","sha512":"56d74637e8023b8983c240ec595528c56ed7d84f461fd4a1e16d329906a2dbfd023a8d519a68b1458a48f9cd19176df60dc099102640f0c3589c3bddd69221b7","ssdeep":"3072:GpOyaTRXqCpCOjwlfbitfD9mxf1W4OwYsRQD+fgpNCpIdlw:GpBApCO0fyfDcTQD+fgXRdlw","tlshash":"f4b3e899f6d2742546a220a4162f2609b2375548748b8480f67ee8d1fdbcf4f607bfbc","size":117379,"data":"","first_seen":"2025-06-30T07:43:55.721259Z","last_seen":"2026-06-15T10:15:23.743114Z","times_seen":1044,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"res.njxzwh.com/downza/pc/v2023/js/public.js?2026020913","fqdn":"res.njxzwh.com","domain":"njxzwh.com","tld":"com"},"ip":{"addr":"113.240.117.108","port":443,"asn":63835,"as":"No.293,Wanbao Avenue","country":"China","country_code":"CN"},"introduction_type":"scriptElement","is_inline":false,"md5":"eda88714ebfd43d4e934a0a8cec072ac","sha1":"699b3f74fb9d75b838c54ae9327a06638714597b","sha256":"5b431ed61701ed4718f82518a545c5530bd00e6150d9bf2b2b57874362218800","sha512":"2349334d1427db374cb46e85c6794a31fc4e9560a70800206e4b9b501ce5e7f73ca61cb235ad841dd5d8a41cfabf089d5bb188be8e5af6355ab3ea76f14bfde8","ssdeep":"","tlshash":"8921c458e8a20295897fb3b1873f5204ff7a2837510347083deea4c40f70929a392eec","size":1253,"data":"","first_seen":"2025-02-11T04:22:13.832274Z","last_seen":"2026-06-06T23:56:38.320935Z","times_seen":64,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.downza.cn/soft/27933.html","fqdn":"www.downza.cn","domain":"downza.cn","tld":"cn"},"ip":{"addr":"218.11.0.26","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"introduction_type":"scriptElement","is_inline":true,"md5":"bedb644aa0729847d665e111e552777f","sha1":"2aa897307f63f0cc574d5ed6a566d609ad669942","sha256":"119d483617bcc712fee8f5912041e212e16ecfa423b78a16fb27edc0bf17fce8","sha512":"8e9da29e8757f53422e419a8633f7af71d42233d6beccd13e3bc9375a35df22ed3af22d28c46aff9f40c63a064a575bcb0377ec21172746a4ceb836cda3ede2c","ssdeep":"","tlshash":"ad214e4fb590f078074752f5a2bfa40ef636206611db20c1a72ac8b4bd394ca7121f9d","size":1350,"data":"","first_seen":"2025-06-15T16:39:48.461548Z","last_seen":"2026-06-06T23:56:38.393106Z","times_seen":106,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.downza.cn/soft/27933.html","fqdn":"www.downza.cn","domain":"downza.cn","tld":"cn"},"ip":{"addr":"218.11.0.26","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"introduction_type":"scriptElement","is_inline":true,"md5":"c3c7dd1f0e113b2c5ec9bde9e7238e19","sha1":"130bf80dccafaf77700219378550d3b243d92be4","sha256":"b7f132498b5f204cc378b32e49d0e3423fb0bf330c07d6ae6a1de245a1603a0f","sha512":"9a87f1f7da8194e48d4ac8d77233d1d729078f7d8e0ebc7fe9b495b56a64a6ffa0dd5620e1141e122b1b69974672591e32f531283d4a10d7aa969eb20b51c4ea","ssdeep":"","tlshash":"b2d0a72b92239425bc7e22708f1795142bb5450f1375482e7dde01872f2758ad143347","size":236,"data":"","first_seen":"2026-02-09T10:41:32.12615Z","last_seen":"2026-02-09T10:41:32.12615Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zz.bdstatic.com/linksubmit/push.js","fqdn":"zz.bdstatic.com","domain":"bdstatic.com","tld":"com"},"ip":{"addr":"157.255.63.48","port":443,"asn":136958,"as":"China Unicom Guangdong IP network","country":"China","country_code":"CN"},"introduction_type":"scriptElement","is_inline":false,"md5":"f9fc52ab67f035b8baf5d558714cc94d","sha1":"37062a6fb1ef410d496137d44275738ae743c747","sha256":"c31f2003f1c93ac1e34b09f376d97a65da6e110bf451cf1e0e50a7946c5e7212","sha512":"ebb0415852fbb5b964094e2e55a28b90f701dff1977c8b98c6f24d65d09067dc0c417d01492ca28a4be6747816d7c0bfac87b73a33725aee047a5d2f7ab83182","ssdeep":"","tlshash":"11e0cde86054c01c0dcb107135bb324ce7771d675a645545c04d9445396cb1f8247fe9","size":308,"data":"","first_seen":"2023-03-07T01:18:58Z","last_seen":"2026-06-15T02:27:31.015338Z","times_seen":23342,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"open.thunderurl.com/thunder-link.js","fqdn":"open.thunderurl.com","domain":"thunderurl.com","tld":"com"},"ip":{"addr":"221.194.141.170","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"introduction_type":"scriptElement","is_inline":false,"md5":"8f262a34cf525da728ce7f1ad664e8ce","sha1":"63f6905af9a8217e1436d6acd1a8f3c7a1e6ded4","sha256":"b554cde3b95c578f003b33fdd1de73a0a366c12ef4deecc269ec955206240872","sha512":"d2db1af5d037e9a78ca172151b2968dd4766b7a48f67ddf4fd85882144cea9659c539c603053092119739f7760a7fedca013668e7d723fb3d28d7d0f7d7b431c","ssdeep":"3072:I+AXJCaTlvK3boCXe01no3/vnu0s9cRwEZ2CQGv6bNwRuLsl6Ab9rCE4c/VhI:InBl0mvvqGAIpb9rCE4T","tlshash":"ee747e8fb246b1664baa2ef6c4bf590ff176111528488c60f269d8d5ac7cb8c411bf7c","size":355726,"data":"","first_seen":"2025-04-17T21:39:16.941184Z","last_seen":"2026-03-19T02:36:59.123155Z","times_seen":162,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.downza.cn/soft/27933.html","fqdn":"www.downza.cn","domain":"downza.cn","tld":"cn"},"ip":{"addr":"218.11.0.26","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"introduction_type":"scriptElement","is_inline":true,"md5":"d76670491e5c49aedca09065fa75fa07","sha1":"9b2059b44753b0b2c1125144cc4e7907a7deed8f","sha256":"5280bbeaa5a727640b7f841635b148b877b0fe4fe99953d4af5146cfb8277fc1","sha512":"b506f54040f0901e4a8a282979017e2b0b40ae6ce3f5e365932ac26fd0956e27388e13666896c60d77c2a6527fe585ad0c2f414e9d7bbf0366a7358d306c2c70","ssdeep":"","tlshash":"69f0d5ce801a72a18b903218139d3f980802000b4830ea10fd2ea32cff27eb8ca91687","size":533,"data":"","first_seen":"2026-02-09T10:41:32.127442Z","last_seen":"2026-04-04T14:27:36.549531Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.downza.cn/soft/27933.html","fqdn":"www.downza.cn","domain":"downza.cn","tld":"cn"},"ip":{"addr":"218.11.0.26","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"introduction_type":"eval","is_inline":false,"md5":"a49a77a913e0c2282a1de7f43f53d227","sha1":"d83bef79d7f74adf6175f6beca1fa0adb53aed89","sha256":"6d7ba239a552078c17d9f7e5ebd37d16ce472966db23f0d6a2804ed7c0ef0d4d","sha512":"11e2f8dba6e7bdcb2fabc17be8c54408cefbf26be52296b60f09001526055a45bda7e92a48594e4c4db4e06e6a5ef181263fe8cc2dc2af224dc82821311fe2bf","ssdeep":"","tlshash":"08c09b4612574475313554572a9725062cc10217584178303fec46756f5d90f8d759e9","size":167,"data":"","first_seen":"2025-06-15T16:39:48.46428Z","last_seen":"2026-03-17T15:47:07.967075Z","times_seen":20,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":[{"md5":"904fe3d893ac56d0d471605049f9daf0","sha1":"45aaa2b2f2588b6901e997122ac07246fe88c94e","sha256":"58b10ecfe7dccb5318ed7e6699706fadd6f86eac1ee559dcde77ae984761a4ff","sha512":"7d151e6e94c98ca9fb0d9013303dbbe30b386c4f92fa68715b5952da96583a86709a07427684540cf2b63e684b747bcb58cde3255d629a4339350c52bb6a6936","ssdeep":"","tlshash":"48c02b833e6fe5d807384ec0e9e0f23c80d8101125c0cc9484cd1410017c65c5d08115","size":139,"data":"","first_seen":"2025-02-11T04:22:14.294555Z","last_seen":"2026-06-06T23:56:38.397663Z","times_seen":53,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"console":null},"http":[{"url":{"schema":"https","addr":"zz314.downza.cn/softbaike/PCsoft/2016-09-22/761c677899d070b43861426f99bdc17e.png","fqdn":"zz314.downza.cn","domain":"downza.cn","tld":"cn"},"ip":{"addr":"116.153.39.131","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.downza.cn/soft/27933.html","date":"2026-02-09T10:40:26.100Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zz314.downza.cn","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Sat, 17 Jan 2026 00:00:00 GMT","end":"Fri, 17 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"B5:A8:10:C3:A9:D4:76:FC:F4:79:44:C2:A6:E2:15:3E:AF:B6:C6:2F","sha256":"DD:95:3F:93:75:AA:52:73:B4:C6:A7:79:71:FD:05:06:D4:44:57:E1:A7:A7:9B:59:87:70:10:08:59:44:1F:53"}}},"request":{"raw":"GET /softbaike/PCsoft/2016-09-22/761c677899d070b43861426f99bdc17e.png HTTP/1.1\r\nHost: zz314.downza.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.downza.cn/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 09 Feb 2026 10:40:42 GMT\r\nContent-Type: image/png\r\nContent-Length: 36868\r\nConnection: keep-alive\r\nServer: openresty\r\nx-reserved: amazon, aws and amazon web services are trademarks or registered trademarks of Amazon Technologies, Inc\r\nCloudServiceDiscount: CDN\r\nx-amz-request-id: 0000019AE29BC3C49746F368A8F07410\r\nContent-MD5: yaT79SpLzLnViAO66zrNlw==\r\nETag: \"c9a4fbf52a4bccb9d58803baeb3acd97\"\r\nLast-Modified: Wed, 03 Apr 2019 04:29:30 GMT\r\nx-amz-meta-md5chksum: c9a4fbf52a4bccb9d58803baeb3acd97\r\nx-amz-tagging-count: 0\r\nx-amz-id-2: 36AAAQAAEAABAAAQAAEAABAAAQAAEAABAAAaI=AAAAAAAAAAAAAAAAAAAAAAAAAA\r\nX-CCDN-Expires: 30204735\r\nvia: CHN-JXnanchang-AREACUCC1-CACHE19[22],CHN-JXnanchang-AREACUCC1-CACHE7[0,TCP_HIT,19],CHN-JSwuxi-GLOBAL2-CACHE7[16],CHN-JSwuxi-GLOBAL2-CACHE7[0,TCP_HIT,7]\r\nx-hcs-proxy-type: 1\r\nX-CCDN-CacheTTL: 31536000\r\nX-CCDN-REQ-ID-46B1: 52c1ab1f6b3a689a565a3fa11d4c9ae6\r\nnginx-hit: 1\r\nAge: 1331265\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":36868,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 528 x 318, 8-bit/color RGBA, non-interlaced","md5":"c9a4fbf52a4bccb9d58803baeb3acd97","sha1":"dfb9c67c2789b091f903aa2ee216c45ba8dfe93e","sha256":"26dd651e670e4a447b16db10662a31576e5792178a15de9dced17846e00fd4a8","sha512":"1e8fce2a7b9f603a066c8075c0e86a11f366b9000bf99cc09aa1480396a968eb319dc08886881d7ef20be076356049ab5b6f5bce7e7c3688f53629ef3ee86aec","ssdeep":"768:/fQ699Xqdlnh+ys/sOvGa7UO1x+jmjEI7h0HEfPWyIt4ATlZ1s:/fZDklnh+9/sOD7UO1x0mx7eHE6eAts","tlshash":"2df2f1b64a80b2f9ebc6fa156eff3491f09772181379368ec24a8fd1386c95328057d5","first_seen":"2026-02-09T10:41:31.918487Z","last_seen":"2026-02-09T10:41:31.918487Z","times_seen":1,"resource_available":false,"data":null}},"time_used":16795,"timings":{"blocked":16307,"dns":0,"connect":0,"send":0,"wait":388,"receive":100,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"res.njxzwh.com/downza/pc/v2023/js/jquery.SuperSlide.2.1.1.js?2026020913","fqdn":"res.njxzwh.com","domain":"njxzwh.com","tld":"com"},"ip":{"addr":"113.240.117.108","port":443,"asn":63835,"as":"No.293,Wanbao Avenue","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.downza.cn/soft/27933.html","date":"2026-02-09T10:40:26.604Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"res.njxzwh.com","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Sun, 04 Jan 2026 00:00:00 GMT","end":"Sat, 04 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"CD:91:C8:DC:75:28:A2:68:09:8B:A1:E3:80:02:F5:FA:FD:F0:C2:E6","sha256":"4D:AF:FF:F9:76:6E:B8:BD:6E:50:11:7E:3A:D1:3E:70:7D:9D:6B:2E:56:2C:34:46:80:3E:A1:C8:01:14:CB:61"}}},"request":{"raw":"GET /downza/pc/v2023/js/jquery.SuperSlide.2.1.1.js?2026020913 HTTP/1.1\r\nHost: res.njxzwh.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.downza.cn/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 09 Feb 2026 10:40:29 GMT\r\nContent-Type: text/javascript\r\nContent-Length: 11422\r\nConnection: keep-alive\r\nServer: openresty\r\nx-reserved: amazon, aws and amazon web services are trademarks or registered trademarks of Amazon Technologies, Inc\r\nCloudServiceDiscount: CDN\r\nx-amz-request-id: 0000019C40C559D59058AAEBE5DE6C9C\r\nETag: \"cd674d9e02f20426d9acf1d11c85539b\"\r\nLast-Modified: Thu, 30 Oct 2025 09:32:43 GMT\r\nx-amz-id-2: 36AAAQAAEAABAAAQAAEAABAAAQAAEAABAAAaI=AAAAAAAAAAAAAAAAAAAAAAAAAA\r\nX-CCDN-Expires: 66009\r\nvia: CHN-HNchangsha-AREACT1-CACHE12[8],CHN-HNchangsha-AREACT1-CACHE64[0,TCP_HIT,3],CHN-JSwuxi-GLOBAL2-CACHE41[2],CHN-JSwuxi-GLOBAL2-CACHE64[0,TCP_HIT,0]\r\nx-hcs-proxy-type: 1\r\nX-CCDN-CacheTTL: 86400\r\nnginx-hit: 1\r\nAge: 20391\r\nAccept-Ranges: bytes\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: OPTION,GET\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":11422,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (10855), with CRLF line terminators","md5":"0b9bc63ab05e21e3830da5bbb4ccee67","sha1":"d162156bdaf14217d76d920e0e57b86d8feb1d97","sha256":"349e46b2c65028736d0bbff7b829c7fc6fbdebc1fb1e8b12365a0ca2e6e9e848","sha512":"bdfa220da1f08e29f05a9984c4999d7e742bea10ad86b7e497a0d112c7992cc52b7f1e9f5430b4286f14bb2336110f85cbdc3164a92121caaf5c91961f7e69c9","ssdeep":"192:j+K3bxH+nqfhD9VUVjIItpfg5uXG3+1tSCl+7flvSXwaHxImISLTNSfYXH7Le2HE:jNcnqflKFgEWulE8REcS3j/CkR1Xh3","tlshash":"9532c65fb66635ca4597b3f1107f940d222b5965fc8a8ca0b17082c0adb9a1c243bfed","first_seen":"2023-04-05T11:06:31Z","last_seen":"2026-06-17T23:54:24.234926Z","times_seen":13913,"resource_available":true,"data":null}},"time_used":2878,"timings":{"blocked":2549,"dns":0,"connect":0,"send":0,"wait":328,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"res.njxzwh.com/downza/pc/v2023/images/iphone.png","fqdn":"res.njxzwh.com","domain":"njxzwh.com","tld":"com"},"ip":{"addr":"113.240.117.108","port":443,"asn":63835,"as":"No.293,Wanbao Avenue","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.downza.cn/soft/27933.html","date":"2026-02-09T10:40:41.015Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"res.njxzwh.com","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Sun, 04 Jan 2026 00:00:00 GMT","end":"Sat, 04 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"CD:91:C8:DC:75:28:A2:68:09:8B:A1:E3:80:02:F5:FA:FD:F0:C2:E6","sha256":"4D:AF:FF:F9:76:6E:B8:BD:6E:50:11:7E:3A:D1:3E:70:7D:9D:6B:2E:56:2C:34:46:80:3E:A1:C8:01:14:CB:61"}}},"request":{"raw":"GET /downza/pc/v2023/images/iphone.png HTTP/1.1\r\nHost: res.njxzwh.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://res.njxzwh.com/downza/pc/v2023/css/detail.css?2026020913\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 09 Feb 2026 10:40:41 GMT\r\nContent-Type: image/png\r\nContent-Length: 740\r\nConnection: keep-alive\r\nServer: openresty\r\nx-reserved: amazon, aws and amazon web services are trademarks or registered trademarks of Amazon Technologies, Inc\r\nCloudServiceDiscount: CDN\r\nx-amz-request-id: 0000019A347CD56B97C7252B1F3686F7\r\nETag: \"98d016dc6a615918664fff4ac73a76ee\"\r\nLast-Modified: Thu, 30 Oct 2025 09:32:41 GMT\r\nx-amz-id-2: 36AAAQAAEAABAAAQAAEAABAAAQAAEAABAAAaI=AAAAAAAAAAAAAAAAAAAAAAAAAA\r\nX-CCDN-Expires: 1553682\r\nvia: CHN-HNchangsha-AREACT1-CACHE12[3],CHN-HNchangsha-AREACT1-CACHE57[0,TCP_HIT,0],CHN-JSwuxi-GLOBAL2-CACHE67[4],CHN-JSwuxi-GLOBAL2-CACHE57[0,TCP_HIT,2]\r\nx-hcs-proxy-type: 1\r\nX-CCDN-CacheTTL: 2592000\r\nnginx-hit: 1\r\nAge: 1038338\r\nAccept-Ranges: bytes\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: OPTION,GET\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":740,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced","md5":"98d016dc6a615918664fff4ac73a76ee","sha1":"0f2098d199bdd5d7478e5e80879d9edf25e006ba","sha256":"f07d36640559fc4977de9112781555bcf2f0006eb81abf84bace065fa0b307aa","sha512":"0bfbc0b0ba503756385752d7fd3a128992dc440d1ce1bdf02cbea061c2fbdf782adb243e7ef12ed9311aee5e3ae896e3476da864045e958468167d7b70625e71","ssdeep":"","tlshash":"c60199f31f887475e6b27f568433448ce652e5357bbc14452c5480d73c07007d29d588","first_seen":"2025-06-15T16:39:48.192989Z","last_seen":"2026-05-02T16:31:30.677073Z","times_seen":4,"resource_available":false,"data":null}},"time_used":340,"timings":{"blocked":78,"dns":0,"connect":0,"send":0,"wait":262,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"push.zhanzhang.baidu.com/push.js","fqdn":"push.zhanzhang.baidu.com","domain":"baidu.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.downza.cn/soft/27933.html","date":"2026-02-09T10:40:41.206Z","timestamp":0,"http_version":"","security_state":"broken","security_info":null,"request":{"raw":"GET /push.js HTTP/1.1\r\nHost: push.zhanzhang.baidu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.downza.cn/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-18T01:31:21.233037Z","times_seen":16497762,"resource_available":true,"data":null}},"time_used":1466,"timings":{"blocked":-1,"dns":940,"connect":257,"send":0,"wait":0,"receive":0,"ssl":269},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dup.baidustatic.com/js/ds.js","fqdn":"dup.baidustatic.com","domain":"baidustatic.com","tld":"com"},"ip":{"addr":"119.188.176.49","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.downza.cn/soft/27933.html","date":"2026-02-09T10:40:26.064Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"baidu.com","organization":"Beijing Baidu Netcom Science Technology Co., Ltd"},"issuer":{"commonName":"GlobalSign RSA OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 09 Jul 2025 07:01:02 GMT","end":"Mon, 10 Aug 2026 07:01:01 GMT"},"fingerprint":{"sha1":"21:BF:66:0D:67:BE:7A:7F:49:48:05:30:F4:7F:09:F2:30:36:CA:63","sha256":"0D:82:2C:9A:90:5A:EF:E9:8F:37:12:C0:E0:26:30:EE:95:33:2C:45:5F:E7:74:5D:F0:8D:BC:79:F4:B0:A1:49"}}},"request":{"raw":"GET /js/ds.js HTTP/1.1\r\nHost: dup.baidustatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.downza.cn/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: JSP3/2.0.14\r\ndate: Mon, 09 Feb 2026 10:40:27 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\nlast-modified: Fri, 20 Jun 2025 03:28:07 GMT\r\ncontent-encoding: br\r\nage: 51\r\naccept-ranges: bytes\r\nohc-global-saved-time: Mon, 09 Feb 2026 10:39:36 GMT\r\nohc-cache-hit: jn2un50 [2]\r\nohc-response-time: 1 0 0 0 0 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":117379,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65532), with no line terminators","md5":"b543dbe074718c21f7f5e7cbf1aff034","sha1":"99ef1caf9c69e99a60c2f0ee33720cb40cdf1cc8","sha256":"b6a34b928d00909e40ec7edfadd89ac0cfa1fcc5892bdf3168b60b28a5bfe1f6","sha512":"56d74637e8023b8983c240ec595528c56ed7d84f461fd4a1e16d329906a2dbfd023a8d519a68b1458a48f9cd19176df60dc099102640f0c3589c3bddd69221b7","ssdeep":"3072:GpOyaTRXqCpCOjwlfbitfD9mxf1W4OwYsRQD+fgpNCpIdlw:GpBApCO0fyfDcTQD+fgXRdlw","tlshash":"f4b3e899f6d2742546a220a4162f2609b2375548748b8480f67ee8d1fdbcf4f607bfbc","first_seen":"2025-06-30T07:43:55.721259Z","last_seen":"2026-06-15T10:15:23.743114Z","times_seen":1044,"resource_available":true,"data":null}},"time_used":1721,"timings":{"blocked":-1,"dns":581,"connect":258,"send":0,"wait":361,"receive":0,"ssl":519},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img3.downza.cn/softbaike/202405/171156-664b13dc6b0f1.jpg","fqdn":"img3.downza.cn","domain":"downza.cn","tld":"cn"},"ip":{"addr":"121.22.232.168","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.downza.cn/soft/27933.html","date":"2026-02-09T10:40:26.474Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img3.downza.cn","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Thu, 15 Jan 2026 00:00:00 GMT","end":"Wed, 15 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"4D:77:54:39:09:D0:ED:EE:10:10:0E:82:47:48:45:9A:1F:AC:36:7A","sha256":"86:A8:1B:F9:16:89:4D:41:B2:D3:65:4D:15:83:34:E8:F4:AC:0C:46:D1:F5:0A:AE:99:D0:B7:33:F3:EE:5A:9B"}}},"request":{"raw":"GET /softbaike/202405/171156-664b13dc6b0f1.jpg HTTP/1.1\r\nHost: img3.downza.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.downza.cn/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 09 Feb 2026 10:40:42 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 38561\r\nConnection: keep-alive\r\nServer: openresty\r\nx-reserved: amazon, aws and amazon web services are trademarks or registered trademarks of Amazon Technologies, Inc\r\nCloudServiceDiscount: CDN\r\nx-amz-request-id: 0000019B67C95A3B904B3F07B7474B42\r\nETag: \"fa6c0e1e342522005cbf29829a81d95d\"\r\nLast-Modified: Mon, 20 May 2024 09:11:56 GMT\r\nx-amz-id-2: 36AAAQAAEAABAAAQAAEAABAAAQAAEAABAAAaI=AAAAAAAAAAAAAAAAAAAAAAAAAA\r\nvia: CHN-HEqinhuangdao-AREACUCC1-CACHE6[11],CHN-HEqinhuangdao-AREACUCC1-CACHE90[0,TCP_HIT,10],CHN-TJ-GLOBAL6-CACHE68[10],CHN-TJ-GLOBAL6-CACHE4[0,TCP_HIT,9]\r\nx-hcs-proxy-type: 1\r\nX-CCDN-CacheTTL: 31536000\r\nnginx-hit: 1\r\nAge: 3379887\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":38561,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 233 x 233, 8-bit/color RGBA, non-interlaced","md5":"fa6c0e1e342522005cbf29829a81d95d","sha1":"2f7d900286d3ad55eea563a793dc864340945773","sha256":"004456c2156a762c7e455e81b3285d58928f99191d3590ba2ea2480e07eb9372","sha512":"2e1a7a941b166a35ad76d20f26bac0581f916fa1ced64fcb4679c7a485607e2d74a95bc93c5a0f2184fc1cace7ee37627f622b5aef7850fe88f89157cb9fef78","ssdeep":"768:nKLXoLKbr3/kzHkn/AW+BrrgGifzCpUJ9vxS:nKLYLwMaIfgGSXfS","tlshash":"c703f18172d6a7047dbbec3f84d2c055137832f1bc77141624a2f9626e9b0678f5eb94","first_seen":"2025-06-15T16:39:48.170562Z","last_seen":"2026-06-06T23:56:38.342882Z","times_seen":27,"resource_available":false,"data":null}},"time_used":16165,"timings":{"blocked":15618,"dns":0,"connect":0,"send":0,"wait":347,"receive":200,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zz314.downza.cn/soft/xzgj-54/2018-04-24/a58254279e81cfe586ff403c1df6fe40.jpg","fqdn":"zz314.downza.cn","domain":"downza.cn","tld":"cn"},"ip":{"addr":"116.153.39.131","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.downza.cn/soft/27933.html","date":"2026-02-09T10:40:26.067Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zz314.downza.cn","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Sat, 17 Jan 2026 00:00:00 GMT","end":"Fri, 17 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"B5:A8:10:C3:A9:D4:76:FC:F4:79:44:C2:A6:E2:15:3E:AF:B6:C6:2F","sha256":"DD:95:3F:93:75:AA:52:73:B4:C6:A7:79:71:FD:05:06:D4:44:57:E1:A7:A7:9B:59:87:70:10:08:59:44:1F:53"}}},"request":{"raw":"GET /soft/xzgj-54/2018-04-24/a58254279e81cfe586ff403c1df6fe40.jpg HTTP/1.1\r\nHost: zz314.downza.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.downza.cn/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 09 Feb 2026 10:40:42 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 3616\r\nConnection: keep-alive\r\nServer: openresty\r\nx-reserved: amazon, aws and amazon web services are trademarks or registered trademarks of Amazon Technologies, Inc\r\nCloudServiceDiscount: CDN\r\nx-amz-request-id: 00000196577CBA1797A834949F27794C\r\nContent-MD5: 6l12tUgGxWpSQv64kWmfOw==\r\nETag: \"ea5d76b54806c56a5242feb891699f3b\"\r\nLast-Modified: Tue, 02 Apr 2019 03:41:24 GMT\r\nx-amz-meta-md5chksum: ea5d76b54806c56a5242feb891699f3b\r\nx-amz-tagging-count: 0\r\nx-amz-id-2: 32AAAQAAEAABAAAQAAEAABAAAQAAEAABCSAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA\r\nX-CCDN-Expires: 30204735\r\nvia: CHN-JXnanchang-AREACUCC1-CACHE16[26],CHN-JXnanchang-AREACUCC1-CACHE11[0,TCP_HIT,23],CHN-JSwuxi-GLOBAL2-CACHE40[8],CHN-JSwuxi-GLOBAL2-CACHE47[0,TCP_HIT,5]\r\nx-hcs-proxy-type: 1\r\nX-CCDN-CacheTTL: 31536000\r\nX-CCDN-REQ-ID-46B1: 61e5e0ee18ab20cc7e998ce972135b7e\r\nnginx-hit: 1\r\nAge: 1331265\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3616,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1, software=www.meitu.com], baseline, precision 8, 80x80, components 3","md5":"ea5d76b54806c56a5242feb891699f3b","sha1":"81e588b75246025cf509b5b45436ad397919275a","sha256":"c90ef2ab2c91a145ab657e5a5017d2b7a791b483a7d8bad3612c002ce7ad04eb","sha512":"5f19ee8208ecafb65c561321a568d2612af77c6e85099df52e5c48aff98804ca25afd91133d08a52d548d43a7998e7dbbb9be2bcf580a571186726c64b926e23","ssdeep":"","tlshash":"20716d2a3a137c648fd102b84e43c90596e627676fd7f7274f6901c0704c8919a02e78","first_seen":"2026-02-09T10:41:31.933285Z","last_seen":"2026-02-09T10:41:31.933285Z","times_seen":1,"resource_available":false,"data":null}},"time_used":16196,"timings":{"blocked":15886,"dns":0,"connect":0,"send":0,"wait":309,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img3.downza.cn/thumb/201507/416fd367cfc563932ebec5537570f706-50x50.jpg","fqdn":"img3.downza.cn","domain":"downza.cn","tld":"cn"},"ip":{"addr":"121.22.232.168","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.downza.cn/soft/27933.html","date":"2026-02-09T10:40:26.111Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img3.downza.cn","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Thu, 15 Jan 2026 00:00:00 GMT","end":"Wed, 15 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"4D:77:54:39:09:D0:ED:EE:10:10:0E:82:47:48:45:9A:1F:AC:36:7A","sha256":"86:A8:1B:F9:16:89:4D:41:B2:D3:65:4D:15:83:34:E8:F4:AC:0C:46:D1:F5:0A:AE:99:D0:B7:33:F3:EE:5A:9B"}}},"request":{"raw":"GET /thumb/201507/416fd367cfc563932ebec5537570f706-50x50.jpg HTTP/1.1\r\nHost: img3.downza.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 09 Feb 2026 10:40:42 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 2294\r\nConnection: keep-alive\r\nServer: openresty\r\nx-reserved: amazon, aws and amazon web services are trademarks or registered trademarks of Amazon Technologies, Inc\r\nCloudServiceDiscount: CDN\r\nx-amz-request-id: 0000019C174064D5904B414ADD36EF81\r\nETag: \"4fdc52ed30e78956030ad4d914d1dd53\"\r\nLast-Modified: Thu, 07 Nov 2019 03:44:18 GMT\r\nx-amz-tagging-count: 0\r\nx-amz-id-2: 36AAAQAAEAABAAAQAAEAABAAAQAAEAABAAAaI=AAAAAAAAAAAAAAAAAAAAAAAAAA\r\nvia: CHN-HEqinhuangdao-AREACUCC1-CACHE11[5],CHN-HEqinhuangdao-AREACUCC1-CACHE89[0,TCP_HIT,3],CHN-TJ-GLOBAL6-CACHE101[5],CHN-TJ-GLOBAL6-CACHE1[0,TCP_HIT,3]\r\nx-hcs-proxy-type: 1\r\nX-CCDN-CacheTTL: 31536000\r\nnginx-hit: 1\r\nAge: 361686\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":2294,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 50x50, components 3","md5":"4fdc52ed30e78956030ad4d914d1dd53","sha1":"d2c1d689a788ef0dedb29e3fe5d8f351893a5127","sha256":"c126dccc18ba0b36968ba853def4f726b362c267d8f7bd4a2de1494b10bb6331","sha512":"c81a9b4bfea2acadf6898c0a78ad30c3503763b5c4cb32bdcd8dfe3beb99439a05c04fa626028ae5e4bff2980510e6c95fa8f2efbeb9823cbb43ea3cc6b630e0","ssdeep":"","tlshash":"1b414c0af388105cdd671ef411f78edf603ebea4d1eaa6654fc88300bb803710740945","first_seen":"2026-02-09T10:41:31.935225Z","last_seen":"2026-02-09T10:41:31.935225Z","times_seen":1,"resource_available":false,"data":null}},"time_used":16179,"timings":{"blocked":15930,"dns":0,"connect":0,"send":0,"wait":249,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img3.downza.cn/thumb/201804/a58254279e81cfe586ff403c1df6fe40-50x50.jpg","fqdn":"img3.downza.cn","domain":"downza.cn","tld":"cn"},"ip":{"addr":"121.22.232.168","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.downza.cn/soft/27933.html","date":"2026-02-09T10:40:26.198Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img3.downza.cn","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Thu, 15 Jan 2026 00:00:00 GMT","end":"Wed, 15 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"4D:77:54:39:09:D0:ED:EE:10:10:0E:82:47:48:45:9A:1F:AC:36:7A","sha256":"86:A8:1B:F9:16:89:4D:41:B2:D3:65:4D:15:83:34:E8:F4:AC:0C:46:D1:F5:0A:AE:99:D0:B7:33:F3:EE:5A:9B"}}},"request":{"raw":"GET /thumb/201804/a58254279e81cfe586ff403c1df6fe40-50x50.jpg HTTP/1.1\r\nHost: img3.downza.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 09 Feb 2026 10:40:42 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 1838\r\nConnection: keep-alive\r\nServer: openresty\r\nx-reserved: amazon, aws and amazon web services are trademarks or registered trademarks of Amazon Technologies, Inc\r\nCloudServiceDiscount: CDN\r\nx-amz-request-id: 0000019C0A5DEE6D9019AC539C2B60F8\r\nETag: \"8f15c9e06d4e39390540d2e25a24660b\"\r\nLast-Modified: Thu, 07 Nov 2019 04:07:54 GMT\r\nx-amz-tagging-count: 0\r\nx-amz-id-2: 36AAAQAAEAABAAAQAAEAABAAAQAAEAABAAAaI=AAAAAAAAAAAAAAAAAAAAAAAAAA\r\nvia: CHN-HEqinhuangdao-AREACUCC1-CACHE86[26],CHN-HEqinhuangdao-AREACUCC1-CACHE74[0,TCP_HIT,24],CHN-TJ-GLOBAL6-CACHE22[4],CHN-TJ-GLOBAL6-CACHE50[0,TCP_HIT,2]\r\nx-hcs-proxy-type: 1\r\nX-CCDN-CacheTTL: 31536000\r\nnginx-hit: 1\r\nAge: 701799\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":1838,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 50x50, components 3","md5":"8f15c9e06d4e39390540d2e25a24660b","sha1":"7bc2ffbbd65acd33a511c1012416c59346e9831f","sha256":"ee2b15aa2a8fe2b752589c9f110a99283a957892bbc60b69ce2291591ca50df0","sha512":"77243d14c721eda637ed266ace4911902ad0ba53470080754fb1cbe9f5359bc57ef7c6b0fd6d005f05dfbb1657af7c9a5b2682014ad23565b78c6ac8f245f3bf","ssdeep":"","tlshash":"2c31e9004dcbefe2dfd6d1320d91c21484c952a8c60bda6db6c1317bb1db5d289a969b","first_seen":"2026-02-09T10:41:31.936888Z","last_seen":"2026-02-09T10:41:31.936888Z","times_seen":1,"resource_available":false,"data":null}},"time_used":16922,"timings":{"blocked":16667,"dns":0,"connect":0,"send":0,"wait":255,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zz314.downza.cn/softbaike/PCsoft/2016-12-27/6187cc4f9a3d8388732de1216060371c.jpg","fqdn":"zz314.downza.cn","domain":"downza.cn","tld":"cn"},"ip":{"addr":"116.153.39.131","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.downza.cn/soft/27933.html","date":"2026-02-09T10:40:26.483Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zz314.downza.cn","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Sat, 17 Jan 2026 00:00:00 GMT","end":"Fri, 17 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"B5:A8:10:C3:A9:D4:76:FC:F4:79:44:C2:A6:E2:15:3E:AF:B6:C6:2F","sha256":"DD:95:3F:93:75:AA:52:73:B4:C6:A7:79:71:FD:05:06:D4:44:57:E1:A7:A7:9B:59:87:70:10:08:59:44:1F:53"}}},"request":{"raw":"GET /softbaike/PCsoft/2016-12-27/6187cc4f9a3d8388732de1216060371c.jpg HTTP/1.1\r\nHost: zz314.downza.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.downza.cn/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 09 Feb 2026 10:40:42 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 1800\r\nConnection: keep-alive\r\nServer: openresty\r\nx-reserved: amazon, aws and amazon web services are trademarks or registered trademarks of Amazon Technologies, Inc\r\nCloudServiceDiscount: CDN\r\nx-amz-request-id: 0000019BB6A42A63900B14619935324D\r\nContent-MD5: azB9RyBKT9SeHFc6xRei6Q==\r\nETag: \"6b307d47204a4fd49e1c573ac517a2e9\"\r\nLast-Modified: Wed, 03 Apr 2019 04:58:05 GMT\r\nx-amz-meta-md5chksum: 6b307d47204a4fd49e1c573ac517a2e9\r\nx-amz-tagging-count: 0\r\nx-amz-id-2: 36AAAQAAEAABAAAQAAEAABAAAQAAEAABAAAaI=AAAAAAAAAAAAAAAAAAAAAAAAAA\r\nX-CCDN-Expires: 30301261\r\nvia: CHN-JXnanchang-AREACUCC1-CACHE16[6],CHN-JXnanchang-AREACUCC1-CACHE14[0,TCP_HIT,1],CHN-JSwuxi-GLOBAL2-CACHE59[4],CHN-JSwuxi-GLOBAL2-CACHE14[0,TCP_HIT,3]\r\nx-hcs-proxy-type: 1\r\nX-CCDN-CacheTTL: 31536000\r\nX-CCDN-REQ-ID-46B1: 7eaebab420dcf5412d98bf8705b4835b\r\nnginx-hit: 1\r\nAge: 1234739\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":1800,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 9\", baseline, precision 8, 180x180, components 3","md5":"6b307d47204a4fd49e1c573ac517a2e9","sha1":"7dad48c2159f3cf87b6bdc6b632cdd4fe88ae8d0","sha256":"6fce49a6bd2da04ce6640c75d732bb457bd70695d279d02e3a5162d002566b1d","sha512":"20c7269cefe478f773825ee713c6696a20e3931d8fe71d9914dcda6e69da857fa4e1e7d4cac112189fce06b9a0af55e796fe72e8f9c371b2b97ad738d18f585f","ssdeep":"","tlshash":"f431929bde01c3a2e82682fef8120cf5051e4e0579517b887aa17be6b830ad81d470ad","first_seen":"2025-06-15T16:39:48.414776Z","last_seen":"2026-06-06T22:27:36.466734Z","times_seen":34,"resource_available":false,"data":null}},"time_used":16137,"timings":{"blocked":15860,"dns":0,"connect":0,"send":0,"wait":277,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"res.njxzwh.com/downza/pc/v2023/images/icon-goTop.png","fqdn":"res.njxzwh.com","domain":"njxzwh.com","tld":"com"},"ip":{"addr":"113.240.117.108","port":443,"asn":63835,"as":"No.293,Wanbao Avenue","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.downza.cn/soft/27933.html","date":"2026-02-09T10:40:41.319Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"res.njxzwh.com","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Sun, 04 Jan 2026 00:00:00 GMT","end":"Sat, 04 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"CD:91:C8:DC:75:28:A2:68:09:8B:A1:E3:80:02:F5:FA:FD:F0:C2:E6","sha256":"4D:AF:FF:F9:76:6E:B8:BD:6E:50:11:7E:3A:D1:3E:70:7D:9D:6B:2E:56:2C:34:46:80:3E:A1:C8:01:14:CB:61"}}},"request":{"raw":"GET /downza/pc/v2023/images/icon-goTop.png HTTP/1.1\r\nHost: res.njxzwh.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://res.njxzwh.com/downza/pc/v2023/css/public.css?2026020913\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 09 Feb 2026 10:40:41 GMT\r\nContent-Type: image/png\r\nContent-Length: 227\r\nConnection: keep-alive\r\nServer: openresty\r\nx-reserved: amazon, aws and amazon web services are trademarks or registered trademarks of Amazon Technologies, Inc\r\nCloudServiceDiscount: CDN\r\nx-amz-request-id: 0000019A347CC5C597A7B909FAF62A21\r\nETag: \"385424c135679968aabae48149cc24c4\"\r\nLast-Modified: Thu, 30 Oct 2025 09:32:39 GMT\r\nx-amz-id-2: 36AAAQAAEAABAAAQAAEAABAAAQAAEAABAAAaI=AAAAAAAAAAAAAAAAAAAAAAAAAA\r\nX-CCDN-Expires: 1553384\r\nvia: CHN-HNchangsha-AREACT1-CACHE56[8],CHN-HNchangsha-AREACT1-CACHE61[0,TCP_HIT,0],CHN-JSwuxi-GLOBAL2-CACHE102[4],CHN-JSwuxi-GLOBAL2-CACHE61[0,TCP_HIT,1]\r\nx-hcs-proxy-type: 1\r\nX-CCDN-CacheTTL: 2592000\r\nnginx-hit: 1\r\nAge: 1038634\r\nAccept-Ranges: bytes\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: OPTION,GET\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":227,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 16 x 10, 8-bit/color RGBA, non-interlaced","md5":"385424c135679968aabae48149cc24c4","sha1":"ed69e993cff9ea613e83c73ee35cafb1ee6f7904","sha256":"69929324e0c1349babca27eb65bb886fe661b5186be0cf8a61b4006e22745b9a","sha512":"93f3cc24301c016c90517ad2b135d202d91669c38311b286211eb8cf8462d183b621cd7061d9edf4802a53ae34d280dccb1b8be014465cd06b5d47286443e631","ssdeep":"","tlshash":"86d0a7a9d2a1be3bb65400270b491a578c76010452d4a45a4056973b7349937d68da07","first_seen":"2025-02-11T04:22:13.971268Z","last_seen":"2026-06-06T23:56:38.331911Z","times_seen":54,"resource_available":false,"data":null}},"time_used":573,"timings":{"blocked":289,"dns":0,"connect":0,"send":0,"wait":283,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.downza.cn/soft/27933.html","fqdn":"www.downza.cn","domain":"downza.cn","tld":"cn"},"ip":{"addr":"218.11.0.26","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-02-09T10:40:22.714Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.downza.cn","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Wed, 14 Jan 2026 00:00:00 GMT","end":"Tue, 14 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C4:07:BD:CE:54:5E:05:CD:08:0F:F6:54:9B:2E:75:2F:B4:5F:A2:45","sha256":"67:0E:58:53:43:DC:CF:E6:39:80:FD:77:C9:F7:40:94:9F:A4:65:1F:7B:74:55:48:2C:3B:C5:A5:82:ED:BE:03"}}},"request":{"raw":"GET /soft/27933.html HTTP/1.1\r\nHost: www.downza.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 09 Feb 2026 10:40:25 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nContent-Length: 153307\r\nConnection: keep-alive\r\nServer: openresty\r\nVary: Accept-Encoding\r\nExpires: Mon, 09 Feb 2026 07:16:45 GMT\r\nCache-Control: max-age=7200, public\r\nX-CCDN-Expires: 23793\r\nvia: CHN-HEshijiazhuang-AREACUCC8-CACHE32[32],CHN-HEshijiazhuang-AREACUCC8-CACHE12[17,TCP_MISS,30],CHN-TJ-GLOBAL6-CACHE75[6],CHN-TJ-GLOBAL6-CACHE21[0,TCP_HIT,3]\r\nx-hcs-proxy-type: 1\r\nX-CCDN-CacheTTL: 43200\r\nAge: 1\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"jQuery:1.12.4","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}],"data":{"size":153307,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (533), with LF, NEL line terminators","md5":"2d87127203279f720b6beed888b9ad53","sha1":"38f8f21bc0de4e7f21ff09fc5742f003b247f5e0","sha256":"63a2c07283c83fc4db05649e6cc3bd0f7bcf505a2037aab06bd2ce6bbdf4075e","sha512":"5083a39a9d42a8ef8c6e5fb214117509d48d28a72f8037592c8aacf1e1e25577fe3881912ee946727d241a7634b5449531077cf869d75005961d75df68ac5437","ssdeep":"1536:4WR9L082OPFGBM5B0V+VGVQVdLgLNBcBkjQjy01RMMKUVRKMBPP:G8+MCMjyCKolB3","tlshash":"d3e3b76686faa9b31142d1d15b75a71cfe8310cbcb825947f5ad0accffc4e618a0329d","first_seen":"2026-02-09T10:41:31.942668Z","last_seen":"2026-02-09T10:41:31.942668Z","times_seen":1,"resource_available":false,"data":null}},"time_used":6666,"timings":{"blocked":2796,"dns":2198,"connect":257,"send":0,"wait":364,"receive":709,"ssl":340},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.oss.downza.com/oss/advertisingApi/getAdvertisingCodeByModuleIdNew?moduleId=23\u0026classify=-1-6-54\u0026source=3","fqdn":"api.oss.downza.com","domain":"downza.com","tld":"com"},"ip":{"addr":"113.240.117.106","port":443,"asn":63835,"as":"No.293,Wanbao Avenue","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.downza.cn/soft/27933.html","date":"2026-02-09T10:40:41.002Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.oss.downza.com","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Tue, 06 Jan 2026 00:00:00 GMT","end":"Mon, 06 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"94:2E:25:7B:27:E0:47:2E:EB:73:8C:B5:8F:4A:F6:5B:5B:4A:E2:E0","sha256":"90:6A:68:C2:5E:D2:43:36:E0:52:0E:C1:DF:64:A8:08:D9:32:62:1D:06:96:B5:81:2C:2A:B1:15:72:99:30:2E"}}},"request":{"raw":"GET /oss/advertisingApi/getAdvertisingCodeByModuleIdNew?moduleId=23\u0026classify=-1-6-54\u0026source=3 HTTP/1.1\r\nHost: api.oss.downza.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.downza.cn\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.downza.cn/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 09 Feb 2026 10:40:43 GMT\r\nContent-Type: application/json;charset=UTF-8\r\nContent-Length: 287\r\nConnection: keep-alive\r\nServer: openresty\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: GET,POST,DELETE,PUT,OPTIONS\r\nAccess-Control-Allow-Headers: *\r\nX-CCDN-Expires: 872067\r\nvia: CHN-HNchangsha-AREACT1-CACHE37[4],CHN-HNchangsha-AREACT1-CACHE4[0,TCP_HIT,1],CHN-JSwuxi-GLOBAL2-CACHE60[15],CHN-JSwuxi-GLOBAL2-CACHE97[0,TCP_HIT,9]\r\nx-hcs-proxy-type: 1\r\nX-CCDN-CacheTTL: 2592000\r\nnginx-hit: 1\r\nAge: 1719933\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":287,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"aef3d3951eabcc44414315b4835438f8","sha1":"3212add1b00aea61f7b522b3f8333328897dbfb9","sha256":"a0ab555b26f65bb2658db34ca6d82ce8c5b9cc906001e712e78017d30f15f4b6","sha512":"d3ccd07733e61f360b4795f1a743d8b999e7b065fc3688f188a12bd02179aa69c7f5dbf2716696d784c4bef45a17a21bba549f3a449860a3f39fa138a20aa8cd","ssdeep":"","tlshash":"55d0ebe3e58ccdd88aa5408c171a70ecd0e3b2870c8bd4005c2c452ce590032202eeeb","first_seen":"2025-08-18T23:56:19.288174Z","last_seen":"2026-04-04T14:27:36.512899Z","times_seen":17,"resource_available":false,"data":null}},"time_used":2338,"timings":{"blocked":-1,"dns":1153,"connect":528,"send":0,"wait":276,"receive":0,"ssl":381},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img3.downza.cn/download/202108/155530-611e0e7267cd4.jpg","fqdn":"img3.downza.cn","domain":"downza.cn","tld":"cn"},"ip":{"addr":"121.22.232.168","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.downza.cn/soft/27933.html","date":"2026-02-09T10:40:26.537Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img3.downza.cn","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Thu, 15 Jan 2026 00:00:00 GMT","end":"Wed, 15 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"4D:77:54:39:09:D0:ED:EE:10:10:0E:82:47:48:45:9A:1F:AC:36:7A","sha256":"86:A8:1B:F9:16:89:4D:41:B2:D3:65:4D:15:83:34:E8:F4:AC:0C:46:D1:F5:0A:AE:99:D0:B7:33:F3:EE:5A:9B"}}},"request":{"raw":"GET /download/202108/155530-611e0e7267cd4.jpg HTTP/1.1\r\nHost: img3.downza.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 09 Feb 2026 10:40:42 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 31790\r\nConnection: keep-alive\r\nServer: openresty\r\nx-reserved: amazon, aws and amazon web services are trademarks or registered trademarks of Amazon Technologies, Inc\r\nCloudServiceDiscount: CDN\r\nx-amz-request-id: 0000019B84C3C6A8904B406995C45464\r\nETag: \"311c25c528a817f9f8be3a0b0a71f547\"\r\nLast-Modified: Thu, 19 Aug 2021 07:55:30 GMT\r\nx-amz-id-2: 36AAAQAAEAABAAAQAAEAABAAAQAAEAABAAAaI=AAAAAAAAAAAAAAAAAAAAAAAAAA\r\nvia: CHN-HEqinhuangdao-AREACUCC1-CACHE86[7],CHN-HEqinhuangdao-AREACUCC1-CACHE90[0,TCP_HIT,4],CHN-TJ-GLOBAL6-CACHE15[32],CHN-TJ-GLOBAL6-CACHE81[0,TCP_HIT,29]\r\nx-hcs-proxy-type: 1\r\nX-CCDN-CacheTTL: 31536000\r\nnginx-hit: 1\r\nAge: 2985478\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":31790,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1, software=www.meitu.com], baseline, precision 8, 200x200, components 3","md5":"311c25c528a817f9f8be3a0b0a71f547","sha1":"2a9e62852d5f58ffe197034c61d38558debfcc3f","sha256":"39c0d04aba9568ee856f14cd1bda1646dace52606a247541cccf2efc74ae760e","sha512":"084d20501d44223fe31e65a0e7b2862d878f49ca2ed2fd607862c35df25ca166524f8a8d8ece1cd37d66d26efb6662676dbb23ecfe32f7558baa11abc2fc0e39","ssdeep":"768:7cRJAzEmaNk1L0VCXoxFztwrkCyCSPFi+QBfbiGLkW8DR:7cm2HVWoxN1CJSPFi+QJbiGLkW8DR","tlshash":"69e2f1a537c08fab29fb14633062be91de1651ca4f01b146972142e1c7dc38fa77af54","first_seen":"2026-02-09T10:41:31.946579Z","last_seen":"2026-02-09T10:41:31.946579Z","times_seen":1,"resource_available":false,"data":null}},"time_used":16327,"timings":{"blocked":15959,"dns":0,"connect":0,"send":0,"wait":295,"receive":73,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img3.downza.cn/thumb/201903/163318-5c8a11ceefe8c-50x50.jpg","fqdn":"img3.downza.cn","domain":"downza.cn","tld":"cn"},"ip":{"addr":"121.22.232.168","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.downza.cn/soft/27933.html","date":"2026-02-09T10:40:26.108Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img3.downza.cn","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Thu, 15 Jan 2026 00:00:00 GMT","end":"Wed, 15 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"4D:77:54:39:09:D0:ED:EE:10:10:0E:82:47:48:45:9A:1F:AC:36:7A","sha256":"86:A8:1B:F9:16:89:4D:41:B2:D3:65:4D:15:83:34:E8:F4:AC:0C:46:D1:F5:0A:AE:99:D0:B7:33:F3:EE:5A:9B"}}},"request":{"raw":"GET /thumb/201903/163318-5c8a11ceefe8c-50x50.jpg HTTP/1.1\r\nHost: img3.downza.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 09 Feb 2026 10:40:41 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 1737\r\nConnection: keep-alive\r\nServer: openresty\r\nx-reserved: amazon, aws and amazon web services are trademarks or registered trademarks of Amazon Technologies, Inc\r\nCloudServiceDiscount: CDN\r\nx-amz-request-id: 0000019B6A5100599053820671F14970\r\nETag: \"8625e8f345eec648e63d6f0f1b51ae12\"\r\nLast-Modified: Thu, 07 Nov 2019 04:09:53 GMT\r\nx-amz-tagging-count: 0\r\nx-amz-id-2: 36AAAQAAEAABAAAQAAEAABAAAQAAEAABAAAaI=AAAAAAAAAAAAAAAAAAAAAAAAAA\r\nvia: CHN-HEqinhuangdao-AREACUCC1-CACHE11[12],CHN-HEqinhuangdao-AREACUCC1-CACHE76[0,TCP_HIT,8],CHN-TJ-GLOBAL6-CACHE10[4],CHN-TJ-GLOBAL6-CACHE27[0,TCP_HIT,2]\r\nx-hcs-proxy-type: 1\r\nX-CCDN-CacheTTL: 31536000\r\nnginx-hit: 1\r\nAge: 3253922\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":1737,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 90\", baseline, precision 8, 50x50, components 3","md5":"8625e8f345eec648e63d6f0f1b51ae12","sha1":"1d6fc936171e15b31ca7aa7a3f2b51e247e9e586","sha256":"869b41254f412104d293f1d70f44f84315aac1b09cdfb547e056e52bcb48b6e1","sha512":"16af3d26031b89a77cd7d504230221c63adce73eeb44374aed2edec3d892eb0c0591621cbed03808735db0daf7bfdbfc1475c77c055844b6e454d7e1a05f9577","ssdeep":"","tlshash":"56311d3a1f08c1c4fd3680e5c6911c74fbec9d037984b6425bf82996c470bc6805ca9c","first_seen":"2026-02-09T10:41:31.948092Z","last_seen":"2026-02-09T10:41:31.948092Z","times_seen":1,"resource_available":false,"data":null}},"time_used":15932,"timings":{"blocked":15682,"dns":0,"connect":0,"send":0,"wait":249,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"res.njxzwh.com/downza/pc/v2023/css/list.css?2026020913","fqdn":"res.njxzwh.com","domain":"njxzwh.com","tld":"com"},"ip":{"addr":"113.240.117.108","port":443,"asn":63835,"as":"No.293,Wanbao Avenue","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.downza.cn/soft/27933.html","date":"2026-02-09T10:40:26.057Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"res.njxzwh.com","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Sun, 04 Jan 2026 00:00:00 GMT","end":"Sat, 04 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"CD:91:C8:DC:75:28:A2:68:09:8B:A1:E3:80:02:F5:FA:FD:F0:C2:E6","sha256":"4D:AF:FF:F9:76:6E:B8:BD:6E:50:11:7E:3A:D1:3E:70:7D:9D:6B:2E:56:2C:34:46:80:3E:A1:C8:01:14:CB:61"}}},"request":{"raw":"GET /downza/pc/v2023/css/list.css?2026020913 HTTP/1.1\r\nHost: res.njxzwh.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.downza.cn/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 09 Feb 2026 10:40:28 GMT\r\nContent-Type: text/css\r\nContent-Length: 6672\r\nConnection: keep-alive\r\nServer: openresty\r\nx-reserved: amazon, aws and amazon web services are trademarks or registered trademarks of Amazon Technologies, Inc\r\nCloudServiceDiscount: CDN\r\nx-amz-request-id: 0000019C40C55C5397C72548D6D91953\r\nETag: \"5c1622b93334ffb83b72f35d29442abc\"\r\nLast-Modified: Thu, 30 Oct 2025 09:32:36 GMT\r\nx-amz-id-2: 36AAAQAAEAABAAAQAAEAABAAAQAAEAABAAAaI=AAAAAAAAAAAAAAAAAAAAAAAAAA\r\nX-CCDN-Expires: 66567\r\nvia: CHN-HNchangsha-AREACT1-CACHE10[19],CHN-HNchangsha-AREACT1-CACHE62[0,TCP_HIT,2],CHN-JSwuxi-GLOBAL2-CACHE26[6],CHN-JSwuxi-GLOBAL2-CACHE62[0,TCP_HIT,3]\r\nx-hcs-proxy-type: 1\r\nX-CCDN-CacheTTL: 86400\r\nnginx-hit: 1\r\nAge: 19833\r\nAccept-Ranges: bytes\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: OPTION,GET\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":6672,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"5c1622b93334ffb83b72f35d29442abc","sha1":"e3d2f36c7bb699c0d447a72c2387c05450faaa08","sha256":"6f662535140215f16b3ccb145d91a673b412c4dcb198cf3db71e75ab4bad4907","sha512":"8c941e67101570ff7fecc7a889f834a6cdcad5306e00ff8c24854c35f7494cb8cb0b51f2635687dbc860cde612622c2eedf2144cb86accdeba22f478453cca72","ssdeep":"96:UXiT3EhZqNpU20VFtUHzWVYFTuzUmeK2uKkeZXNtSxJ1t+A1CGvF+zA7HrpG9Rnr:4fZqk7k0/jy2Oj8rhlC","tlshash":"7dd1ef6cfb0d4a223172e76b67109be2775362a1c35102edbef4b614ad48efc5532d88","first_seen":"2025-06-15T16:39:48.411752Z","last_seen":"2026-06-06T23:56:38.264418Z","times_seen":49,"resource_available":false,"data":null}},"time_used":5502,"timings":{"blocked":2593,"dns":1969,"connect":269,"send":0,"wait":304,"receive":0,"ssl":365},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bigdata.downza.com/js/xingzhi.js?6bd0","fqdn":"bigdata.downza.com","domain":"downza.com","tld":"com"},"ip":{"addr":"122.112.196.83","port":443,"asn":55990,"as":"Huawei Cloud Service data center","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.downza.cn/soft/27933.html","date":"2026-02-09T10:40:26.065Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"bigdata.downza.com","organization":""},"issuer":{"commonName":"ZeroSSL ECC Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Mon, 12 Jan 2026 00:00:00 GMT","end":"Sun, 12 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"1D:EE:64:20:4C:E4:FF:49:A7:08:B2:93:B4:5B:F8:EB:1F:C4:F9:D2","sha256":"71:5B:06:AD:59:2A:D1:95:61:B4:50:C3:35:EE:5F:84:84:AA:DE:DB:EE:F2:DA:39:8C:02:79:E8:BE:82:44:61"}}},"request":{"raw":"GET /js/xingzhi.js?6bd0 HTTP/1.1\r\nHost: bigdata.downza.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.downza.cn/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 09 Feb 2026 10:40:28 GMT\r\nContent-Type: application/javascript\r\nLast-Modified: Fri, 14 Jan 2022 07:11:30 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"61e12222-ce4\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3300,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (3300), with no line terminators","md5":"20cfe5a66ceaa704c9134202b3197360","sha1":"1465772bfe2402479f12f67574cde3e4515b77f7","sha256":"df9d37d34bbd878277d92fa3633976f3a4f61a076c86a76bdbf51c350e928e0a","sha512":"4c93a2504530954a3e0f5535cc2ac214c94d14540af20fec2e8d2aa6f54aed586045d9e5ce92d93224a845dfe08e7c0bf04c892369f134faef9797e762201cee","ssdeep":"","tlshash":"57612274b294247540a12069672b734b63365146b84f6491a43eeef0bd74f47a123fbf","first_seen":"2023-03-09T21:13:51Z","last_seen":"2026-06-06T23:56:38.253001Z","times_seen":169,"resource_available":true,"data":null}},"time_used":2860,"timings":{"blocked":-1,"dns":1772,"connect":271,"send":0,"wait":271,"receive":0,"ssl":546},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"res.njxzwh.com/downza/pc/v2023/images/logo.png","fqdn":"res.njxzwh.com","domain":"njxzwh.com","tld":"com"},"ip":{"addr":"113.240.117.108","port":443,"asn":63835,"as":"No.293,Wanbao Avenue","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.downza.cn/soft/27933.html","date":"2026-02-09T10:40:26.066Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"res.njxzwh.com","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Sun, 04 Jan 2026 00:00:00 GMT","end":"Sat, 04 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"CD:91:C8:DC:75:28:A2:68:09:8B:A1:E3:80:02:F5:FA:FD:F0:C2:E6","sha256":"4D:AF:FF:F9:76:6E:B8:BD:6E:50:11:7E:3A:D1:3E:70:7D:9D:6B:2E:56:2C:34:46:80:3E:A1:C8:01:14:CB:61"}}},"request":{"raw":"GET /downza/pc/v2023/images/logo.png HTTP/1.1\r\nHost: res.njxzwh.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.downza.cn/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 09 Feb 2026 10:40:41 GMT\r\nContent-Type: image/png\r\nContent-Length: 17183\r\nConnection: keep-alive\r\nServer: openresty\r\nx-reserved: amazon, aws and amazon web services are trademarks or registered trademarks of Amazon Technologies, Inc\r\nCloudServiceDiscount: CDN\r\nx-amz-request-id: 0000019A347CCAC997485873F391660E\r\nETag: \"2574cd7ed542c26b9f99e293108749ad\"\r\nLast-Modified: Thu, 30 Oct 2025 09:32:41 GMT\r\nx-amz-id-2: 36AAAQAAEAABAAAQAAEAABAAAQAAEAABAAAaI=AAAAAAAAAAAAAAAAAAAAAAAAAA\r\nX-CCDN-Expires: 1553365\r\nvia: CHN-HNchangsha-AREACT1-CACHE9[8],CHN-HNchangsha-AREACT1-CACHE42[0,TCP_HIT,2],CHN-JSwuxi-GLOBAL2-CACHE117[7],CHN-JSwuxi-GLOBAL2-CACHE95[0,TCP_HIT,5]\r\nx-hcs-proxy-type: 1\r\nX-CCDN-CacheTTL: 2592000\r\nnginx-hit: 1\r\nAge: 1038635\r\nAccept-Ranges: bytes\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: OPTION,GET\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":17183,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 107 x 39, 8-bit/color RGBA, non-interlaced","md5":"2574cd7ed542c26b9f99e293108749ad","sha1":"c7d8ca97763dca067477c0be05673268dc668d8e","sha256":"0e77996a966214e9a98d9bb0069ed5e28754db8a3f2be466939268cabddea1a1","sha512":"bf75bdcfa2c55a2897bbf57e3d56cc278068755e821b981c103215f6c5b3dac5b4c98bd326eb96069e16b916c480f2d378be3cad2ea91ee333572b3a179c4bf9","ssdeep":"96:5S/kEWR2xNXrNGQhGKy79csc5hGlAFkhbYIrzngIcBEbL79dJPUzMkIe:5S/ktM5Dy79xLxFceLhdJU1Ie","tlshash":"90720898eef134919589e4320ec0354a9da31e8789d2dc06bbcd9e5bff117a94c6f182","first_seen":"2024-05-31T23:55:31Z","last_seen":"2026-06-06T23:56:38.280139Z","times_seen":83,"resource_available":false,"data":null}},"time_used":15170,"timings":{"blocked":14851,"dns":0,"connect":0,"send":0,"wait":309,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img3.downza.cn/download/202404/182418-66263ad262ef2.jpg?x-image-process=style/50-50","fqdn":"img3.downza.cn","domain":"downza.cn","tld":"cn"},"ip":{"addr":"121.22.232.168","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.downza.cn/soft/27933.html","date":"2026-02-09T10:40:26.074Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img3.downza.cn","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Thu, 15 Jan 2026 00:00:00 GMT","end":"Wed, 15 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"4D:77:54:39:09:D0:ED:EE:10:10:0E:82:47:48:45:9A:1F:AC:36:7A","sha256":"86:A8:1B:F9:16:89:4D:41:B2:D3:65:4D:15:83:34:E8:F4:AC:0C:46:D1:F5:0A:AE:99:D0:B7:33:F3:EE:5A:9B"}}},"request":{"raw":"GET /download/202404/182418-66263ad262ef2.jpg?x-image-process=style/50-50 HTTP/1.1\r\nHost: img3.downza.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 09 Feb 2026 10:40:41 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 4948\r\nConnection: keep-alive\r\nServer: openresty\r\nx-reserved: amazon, aws and amazon web services are trademarks or registered trademarks of Amazon Technologies, Inc\r\nCloudServiceDiscount: CDN\r\nx-amz-id-2: 36AAAQAAEAABAAAQAAEAABAAAQAAEAABAAAaE=AAAAAAAAAAAAAAAAAAAAAAAAAA\r\nx-amz-request-id: 0000019BCF0C32EC9056967773D22429\r\nETag: bccbeb03aa45ca4bfb0ccfe5a8fc3179\r\nX-Oef-Request-Id: 31336564383439386362303a3233372e3132393a\r\nX-Request-Id: 31336564383439386362303a3233372e3132393a\r\nX-Transcode-Length: 53138\r\nvia: CHN-HEqinhuangdao-AREACUCC1-CACHE21[6],CHN-HEqinhuangdao-AREACUCC1-CACHE87[0,TCP_HIT,2],CHN-TJ-GLOBAL6-CACHE112[37],CHN-TJ-GLOBAL6-CACHE23[0,TCP_HIT,34]\r\nx-hcs-proxy-type: 1\r\nX-CCDN-CacheTTL: 31536000\r\nnginx-hit: 1\r\nAge: 1630507\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":4948,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 0x0, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1, software=www.meitu.com], baseline, precision 8, 50x50, components 3","md5":"15656027f216e1baf6be8423cd602150","sha1":"fd26a20586385aa1fd514b3e22e8afd478759daf","sha256":"253f2c7eee56408c914d25c0de2b4c4d9bc1e4e4821007d6f9fb494384f1d459","sha512":"8c3e7324164b479f07c9bd60cf12ab35571c962c319bb4ff866ef936d83a2ee44d206302cf214a9fdfe12a56b3862cd6f767994079507150d40bb4131b740ea6","ssdeep":"96:VGVuoYWaVuxoMG2AKjr405voqcrsbUQaHFDufyNsnKtutlTdHxKE/3hwYLBKgjK:gVuoYrV4K4340to3sbHaFC8qQu7dHFKB","tlshash":"6fa15b0c892bbc68cd587ebb949c81a2cb0204fe3dfe4ed4cdc78966d243038649168b","first_seen":"2026-02-09T10:41:31.954169Z","last_seen":"2026-06-06T23:56:38.275656Z","times_seen":2,"resource_available":false,"data":null}},"time_used":15976,"timings":{"blocked":15716,"dns":0,"connect":0,"send":0,"wait":259,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img3.downza.cn/softbaike/202407/173717-669f79cd70cce.jpg","fqdn":"img3.downza.cn","domain":"downza.cn","tld":"cn"},"ip":{"addr":"121.22.232.168","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.downza.cn/soft/27933.html","date":"2026-02-09T10:40:26.468Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img3.downza.cn","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Thu, 15 Jan 2026 00:00:00 GMT","end":"Wed, 15 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"4D:77:54:39:09:D0:ED:EE:10:10:0E:82:47:48:45:9A:1F:AC:36:7A","sha256":"86:A8:1B:F9:16:89:4D:41:B2:D3:65:4D:15:83:34:E8:F4:AC:0C:46:D1:F5:0A:AE:99:D0:B7:33:F3:EE:5A:9B"}}},"request":{"raw":"GET /softbaike/202407/173717-669f79cd70cce.jpg HTTP/1.1\r\nHost: img3.downza.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.downza.cn/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 09 Feb 2026 10:40:42 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 59283\r\nConnection: keep-alive\r\nServer: openresty\r\nx-reserved: amazon, aws and amazon web services are trademarks or registered trademarks of Amazon Technologies, Inc\r\nCloudServiceDiscount: CDN\r\nx-amz-request-id: 0000019BF94371059047E1AA3E5448D0\r\nETag: \"72d458e528938af9ed09697fb202ee39\"\r\nLast-Modified: Tue, 23 Jul 2024 09:37:17 GMT\r\nx-amz-id-2: 36AAAQAAEAABAAAQAAEAABAAAQAAEAABAAAaI=AAAAAAAAAAAAAAAAAAAAAAAAAA\r\nvia: CHN-HEqinhuangdao-AREACUCC1-CACHE21[18],CHN-HEqinhuangdao-AREACUCC1-CACHE19[0,TCP_HIT,14],CHN-TJ-GLOBAL6-CACHE118[5],CHN-TJ-GLOBAL6-CACHE88[0,TCP_HIT,2]\r\nx-hcs-proxy-type: 1\r\nX-CCDN-CacheTTL: 31536000\r\nnginx-hit: 1\r\nAge: 1011604\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":59283,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=1, software=www.meitu.com], baseline, precision 8, 243x243, components 3","md5":"72d458e528938af9ed09697fb202ee39","sha1":"66478ac59b8039b3b0965ec538db3ebfb0006e5e","sha256":"744903056f9effb93ebb65a918ba3dc84d653b8a852d63c1f21030d60ad5408e","sha512":"330439216482e55efc8526ef09d747b8183a1256830edd43a623370ee9a8e6a1b3155f203f06095836d807d3c6c61c514be6587029f76dc6e1fd7a0d032c51c5","ssdeep":"1536:CAP1RDi9BJ4S0aRSZdTlsQEoBBkuVESgkJ/tHqzBvhIVDeHcLr8aNkRa7:RP1RDu/DqbBykekj8gd0Fc7","tlshash":"914301e6f7cafc4e433e262482e62454739869d922c0d8d1020fd5d6e3e9e78e541b6c","first_seen":"2025-06-15T16:39:48.23145Z","last_seen":"2026-06-06T23:56:38.221612Z","times_seen":27,"resource_available":false,"data":null}},"time_used":16218,"timings":{"blocked":15583,"dns":0,"connect":0,"send":0,"wait":321,"receive":314,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zz314.downza.cn/softbaike/PCsoft/2016-12-28/f6012aacebac30b2804e9eb444a4f505.png","fqdn":"zz314.downza.cn","domain":"downza.cn","tld":"cn"},"ip":{"addr":"116.153.39.131","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.downza.cn/soft/27933.html","date":"2026-02-09T10:40:26.471Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zz314.downza.cn","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Sat, 17 Jan 2026 00:00:00 GMT","end":"Fri, 17 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"B5:A8:10:C3:A9:D4:76:FC:F4:79:44:C2:A6:E2:15:3E:AF:B6:C6:2F","sha256":"DD:95:3F:93:75:AA:52:73:B4:C6:A7:79:71:FD:05:06:D4:44:57:E1:A7:A7:9B:59:87:70:10:08:59:44:1F:53"}}},"request":{"raw":"GET /softbaike/PCsoft/2016-12-28/f6012aacebac30b2804e9eb444a4f505.png HTTP/1.1\r\nHost: zz314.downza.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.downza.cn/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 09 Feb 2026 10:40:41 GMT\r\nContent-Type: image/png\r\nContent-Length: 2620\r\nConnection: keep-alive\r\nServer: openresty\r\nx-reserved: amazon, aws and amazon web services are trademarks or registered trademarks of Amazon Technologies, Inc\r\nCloudServiceDiscount: CDN\r\nx-amz-request-id: 00000194730D40FF97A624B1EED5C36E\r\nContent-MD5: ITShp84NNDhstDlJcOEljQ==\r\nETag: \"2134a1a7ce0d34386cb4394970e1258d\"\r\nLast-Modified: Wed, 03 Apr 2019 04:54:32 GMT\r\nx-amz-meta-md5chksum: 2134a1a7ce0d34386cb4394970e1258d\r\nx-amz-tagging-count: 0\r\nx-amz-id-2: 32AAAQAAEAABAAAQAAEAABAAAQAAEAABCSAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA\r\nX-CCDN-Expires: 29806943\r\nvia: CHN-JXnanchang-AREACUCC1-CACHE16[7],CHN-JXnanchang-AREACUCC1-CACHE23[0,TCP_HIT,4],CHN-JSwuxi-GLOBAL2-CACHE23[27],CHN-JSwuxi-GLOBAL2-CACHE84[0,TCP_HIT,22],CHN-SH-GLOBAL4-CACHE108[14],CHN-SH-GLOBAL4-CACHE158[0,TCP_HIT,11]\r\nx-hcs-proxy-type: 1\r\nX-CCDN-CacheTTL: 31536000\r\nX-CCDN-REQ-ID-46B1: 022e122103afa9ae5ad227cd4b4de3c4\r\nnginx-hit: 1\r\nAge: 1729057\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2620,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 72 x 72, 8-bit/color RGBA, non-interlaced","md5":"2134a1a7ce0d34386cb4394970e1258d","sha1":"6283dad95d671baaf7aadad5ea4f09b154951dd7","sha256":"49ed1a7bd933870e683118d2b4d648e2a351849e12666ea1ff3890200ccdacc3","sha512":"a966bf8639cf8b26eedf8834238b0027202d342c290fbd8aec217e83ac5849f8cc72376057a7fffea8ee8c65e8ce9c3421f2583c0c623417524eb27256d6394a","ssdeep":"","tlshash":"f5513abd4e5502bd7179143a6fa14ed1a448be927bc55f60380a222de5649acc8df350","first_seen":"2025-06-15T16:39:48.281939Z","last_seen":"2026-06-06T22:27:36.450422Z","times_seen":34,"resource_available":false,"data":null}},"time_used":15385,"timings":{"blocked":14447,"dns":1,"connect":269,"send":0,"wait":278,"receive":0,"ssl":389},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zz314.downza.cn/softbaike/PCsoft/2017-07-08/ba2cc1ca812fd524366b62913f04d403.png","fqdn":"zz314.downza.cn","domain":"downza.cn","tld":"cn"},"ip":{"addr":"116.153.39.131","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.downza.cn/soft/27933.html","date":"2026-02-09T10:40:26.477Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zz314.downza.cn","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Sat, 17 Jan 2026 00:00:00 GMT","end":"Fri, 17 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"B5:A8:10:C3:A9:D4:76:FC:F4:79:44:C2:A6:E2:15:3E:AF:B6:C6:2F","sha256":"DD:95:3F:93:75:AA:52:73:B4:C6:A7:79:71:FD:05:06:D4:44:57:E1:A7:A7:9B:59:87:70:10:08:59:44:1F:53"}}},"request":{"raw":"GET /softbaike/PCsoft/2017-07-08/ba2cc1ca812fd524366b62913f04d403.png HTTP/1.1\r\nHost: zz314.downza.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.downza.cn/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 09 Feb 2026 10:40:41 GMT\r\nContent-Type: image/png\r\nContent-Length: 17117\r\nConnection: keep-alive\r\nServer: openresty\r\nx-reserved: amazon, aws and amazon web services are trademarks or registered trademarks of Amazon Technologies, Inc\r\nCloudServiceDiscount: CDN\r\nx-amz-request-id: 000001942C4F2C6090161C46F96BEAC8\r\nContent-MD5: a/VxNvX5xFqJlDOyMogcig==\r\nETag: \"6bf57136f5f9c45a899433b232881c8a\"\r\nLast-Modified: Wed, 03 Apr 2019 04:57:20 GMT\r\nx-amz-meta-md5chksum: 6bf57136f5f9c45a899433b232881c8a\r\nx-amz-tagging-count: 0\r\nx-amz-id-2: 32AAAQAAEAABAAAQAAEAABAAAQAAEAABCSAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA\r\nX-CCDN-Expires: 29310900\r\nvia: CHN-JXnanchang-AREACUCC1-CACHE16[5],CHN-JXnanchang-AREACUCC1-CACHE66[0,TCP_HIT,3],CHN-JSwuxi-GLOBAL2-CACHE79[6],CHN-JSwuxi-GLOBAL2-CACHE74[0,TCP_HIT,3],CHN-SH-GLOBAL4-CACHE85[24],CHN-SH-GLOBAL4-CACHE101[0,TCP_HIT,21]\r\nx-hcs-proxy-type: 1\r\nX-CCDN-CacheTTL: 31536000\r\nX-CCDN-REQ-ID-46B1: 0ec76c1e44c7da4f3ede7413176d3592\r\nnginx-hit: 1\r\nAge: 2225100\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":17117,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 121 x 121, 8-bit/color RGBA, non-interlaced","md5":"6bf57136f5f9c45a899433b232881c8a","sha1":"1b2c034a351d3b6e6a544f15b883e42980329326","sha256":"25ca9981d96def7c61e83e22a33cd8cd17108d4127a6b9a3bddf3caa20028407","sha512":"1ba7e6bce3824c55f0030ff58cf04455883d95e40c72b73e36b79b20bae0be830c8b2b5d9fe1a8f32779edb193ca8b85dd9a92aaaf6a80da687955953792e9e0","ssdeep":"384:o+WP7/ZD3YSUl8huoerdOqSbIQUMgosSIA6N5ExzKMHo7WO4dSR:o+WDhDoSUiQokIUrA6N5OKMGYwR","tlshash":"9c72e0082701b33a8e20c82e6fb61bb9c75d59bd2f8052dd9a56d73374244cd68639cc","first_seen":"2025-06-15T16:39:48.359048Z","last_seen":"2026-06-06T22:27:36.470234Z","times_seen":35,"resource_available":false,"data":null}},"time_used":15475,"timings":{"blocked":14441,"dns":1,"connect":273,"send":0,"wait":356,"receive":21,"ssl":381},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bigdata.downza.com/2.gif?event=coordinate\u0026track=onclick_102,1-6-54,27933,local,1,1\u0026aId=a9fcd354-3bda-28be-226e-51f90b701377\u0026ak=6bd0\u0026da=www.downza.cn\u0026r=\u0026mp=0,0\u0026ds=1280x1024\u0026su=https%3A%2F%2Fwww.downza.cn%2Fsoft%2F27933.html\u0026random=0.6060535848467706","fqdn":"bigdata.downza.com","domain":"downza.com","tld":"com"},"ip":{"addr":"122.112.196.83","port":443,"asn":55990,"as":"Huawei Cloud Service data center","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.downza.cn/soft/27933.html","date":"2026-02-09T10:40:41.341Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"bigdata.downza.com","organization":""},"issuer":{"commonName":"ZeroSSL ECC Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Mon, 12 Jan 2026 00:00:00 GMT","end":"Sun, 12 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"1D:EE:64:20:4C:E4:FF:49:A7:08:B2:93:B4:5B:F8:EB:1F:C4:F9:D2","sha256":"71:5B:06:AD:59:2A:D1:95:61:B4:50:C3:35:EE:5F:84:84:AA:DE:DB:EE:F2:DA:39:8C:02:79:E8:BE:82:44:61"}}},"request":{"raw":"GET /2.gif?event=coordinate\u0026track=onclick_102,1-6-54,27933,local,1,1\u0026aId=a9fcd354-3bda-28be-226e-51f90b701377\u0026ak=6bd0\u0026da=www.downza.cn\u0026r=\u0026mp=0,0\u0026ds=1280x1024\u0026su=https%3A%2F%2Fwww.downza.cn%2Fsoft%2F27933.html\u0026random=0.6060535848467706 HTTP/1.1\r\nHost: bigdata.downza.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.downza.cn/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 \r\nServer: nginx\r\nDate: Mon, 09 Feb 2026 10:40:41 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-18T01:31:21.233037Z","times_seen":16497762,"resource_available":true,"data":null}},"time_used":561,"timings":{"blocked":267,"dns":0,"connect":0,"send":0,"wait":294,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"res.njxzwh.com/downza/pc/v2023/css/public.css?2026020913","fqdn":"res.njxzwh.com","domain":"njxzwh.com","tld":"com"},"ip":{"addr":"113.240.117.108","port":443,"asn":63835,"as":"No.293,Wanbao Avenue","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.downza.cn/soft/27933.html","date":"2026-02-09T10:40:26.052Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"res.njxzwh.com","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Sun, 04 Jan 2026 00:00:00 GMT","end":"Sat, 04 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"CD:91:C8:DC:75:28:A2:68:09:8B:A1:E3:80:02:F5:FA:FD:F0:C2:E6","sha256":"4D:AF:FF:F9:76:6E:B8:BD:6E:50:11:7E:3A:D1:3E:70:7D:9D:6B:2E:56:2C:34:46:80:3E:A1:C8:01:14:CB:61"}}},"request":{"raw":"GET /downza/pc/v2023/css/public.css?2026020913 HTTP/1.1\r\nHost: res.njxzwh.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.downza.cn/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 09 Feb 2026 10:40:28 GMT\r\nContent-Type: text/css\r\nContent-Length: 20223\r\nConnection: keep-alive\r\nServer: openresty\r\nx-reserved: amazon, aws and amazon web services are trademarks or registered trademarks of Amazon Technologies, Inc\r\nCloudServiceDiscount: CDN\r\nx-amz-request-id: 0000019C40C559E597662908E6BFE371\r\nETag: \"e1598075249dad0417ab0baa81dcc47a\"\r\nLast-Modified: Thu, 30 Oct 2025 09:32:36 GMT\r\nx-amz-id-2: 36AAAQAAEAABAAAQAAEAABAAAQAAEAABAAAaI=AAAAAAAAAAAAAAAAAAAAAAAAAA\r\nX-CCDN-Expires: 66541\r\nvia: CHN-HNchangsha-AREACT1-CACHE65[4],CHN-HNchangsha-AREACT1-CACHE3[0,TCP_HIT,3],CHN-JSwuxi-GLOBAL2-CACHE12[6],CHN-JSwuxi-GLOBAL2-CACHE88[0,TCP_HIT,5]\r\nx-hcs-proxy-type: 1\r\nX-CCDN-CacheTTL: 86400\r\nnginx-hit: 1\r\nAge: 19859\r\nAccept-Ranges: bytes\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: OPTION,GET\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":20223,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with CRLF, LF line terminators","md5":"e7df0a79476b058c9da2bc4439537420","sha1":"7d9504ec84eb1774f1136ae3ff6a5d52d04a9971","sha256":"60052fea0c062f7e22b2394a89a04f753214d34e4a06074732233a3865b05d3d","sha512":"5a4fd40038d62bd21f0693f6e0074d424ebc6eb9e437c1199d41d9a61dafe65688be23d419bc0c763349ba4170f318400dc599a5b11753f8320ae7f1afd06ba9","ssdeep":"192:qRMQySejzVRLQ2uAREpgHJrehwjxmkHdR0n9QMutNqT7Wsdc:Xj95mZOB","tlshash":"b692416ed75641067233da7a7b016fa67b6901328b020368bff4a514b688fbc5172fdc","first_seen":"2025-06-15T16:39:48.335299Z","last_seen":"2026-06-06T23:56:38.298536Z","times_seen":60,"resource_available":false,"data":null}},"time_used":5745,"timings":{"blocked":2597,"dns":1969,"connect":274,"send":0,"wait":351,"receive":191,"ssl":361},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img3.downza.cn/download/202008/164832-5f3109e091080.jpg?x-image-process=style/50-50","fqdn":"img3.downza.cn","domain":"downza.cn","tld":"cn"},"ip":{"addr":"121.22.232.168","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.downza.cn/soft/27933.html","date":"2026-02-09T10:40:26.204Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img3.downza.cn","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Thu, 15 Jan 2026 00:00:00 GMT","end":"Wed, 15 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"4D:77:54:39:09:D0:ED:EE:10:10:0E:82:47:48:45:9A:1F:AC:36:7A","sha256":"86:A8:1B:F9:16:89:4D:41:B2:D3:65:4D:15:83:34:E8:F4:AC:0C:46:D1:F5:0A:AE:99:D0:B7:33:F3:EE:5A:9B"}}},"request":{"raw":"GET /download/202008/164832-5f3109e091080.jpg?x-image-process=style/50-50 HTTP/1.1\r\nHost: img3.downza.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 09 Feb 2026 10:40:41 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 1461\r\nConnection: keep-alive\r\nServer: openresty\r\nx-reserved: amazon, aws and amazon web services are trademarks or registered trademarks of Amazon Technologies, Inc\r\nCloudServiceDiscount: CDN\r\nx-amz-id-2: 36AAAQAAEAABAAAQAAEAABAAAQAAEAABAAAaI=AAAAAAAAAAAAAAAAAAAAAAAAAA\r\nx-amz-request-id: 0000019BDB88F79F90060AF4F36D5552\r\nETag: 77f7614dfc424054c4b6f2ca6d7944b9\r\nX-Oef-Request-Id: 34623863353334393934643a3233372e3131353a\r\nX-Request-Id: 34623863353334393934643a3233372e3131353a\r\nX-Transcode-Length: 12887\r\nvia: CHN-HEqinhuangdao-AREACUCC1-CACHE6[5],CHN-HEqinhuangdao-AREACUCC1-CACHE77[0,TCP_HIT,2],CHN-TJ-GLOBAL6-CACHE130[1151],CHN-TJ-GLOBAL6-CACHE111[1138,TCP_MISS,1146]\r\nx-hcs-proxy-type: 1\r\nX-CCDN-CacheTTL: 31536000\r\nnginx-hit: 1\r\nAge: 1718895\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":1461,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1, software=www.meitu.com], baseline, precision 8, 50x50, components 3","md5":"396fb0398058aa2dc5ec64849dd71848","sha1":"fd4131af61112ac089c9ca7ab9938a3410c2e49b","sha256":"f6d1fa8764bec2f44fec0c7c94d4e743cddb955ed190d274bca541d18473f4a2","sha512":"90121ff109db9687d4a0639f8bfea0b689a2523a6d134917759e7c4971cb6748a5bdd76901034e23c70bd375df848fb6b0d19ba8f84c3b26d24b2c6ec1773e52","ssdeep":"","tlshash":"fa31d89285926dc9fafc7c3565098f68e3c5f11790b2485590ccbc7390122f6ac31b28","first_seen":"2026-02-09T10:41:31.968298Z","last_seen":"2026-02-09T10:41:31.968298Z","times_seen":1,"resource_available":false,"data":null}},"time_used":15586,"timings":{"blocked":14715,"dns":0,"connect":255,"send":0,"wait":258,"receive":0,"ssl":356},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img3.downza.cn/download/202108/120448-611c86e0611c5.jpg","fqdn":"img3.downza.cn","domain":"downza.cn","tld":"cn"},"ip":{"addr":"121.22.232.168","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.downza.cn/soft/27933.html","date":"2026-02-09T10:40:26.597Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img3.downza.cn","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Thu, 15 Jan 2026 00:00:00 GMT","end":"Wed, 15 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"4D:77:54:39:09:D0:ED:EE:10:10:0E:82:47:48:45:9A:1F:AC:36:7A","sha256":"86:A8:1B:F9:16:89:4D:41:B2:D3:65:4D:15:83:34:E8:F4:AC:0C:46:D1:F5:0A:AE:99:D0:B7:33:F3:EE:5A:9B"}}},"request":{"raw":"GET /download/202108/120448-611c86e0611c5.jpg HTTP/1.1\r\nHost: img3.downza.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 09 Feb 2026 10:40:43 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 33275\r\nConnection: keep-alive\r\nServer: openresty\r\nx-reserved: amazon, aws and amazon web services are trademarks or registered trademarks of Amazon Technologies, Inc\r\nCloudServiceDiscount: CDN\r\nx-amz-request-id: 0000019B9ACC249690538231281A0A42\r\nETag: \"7ae9ffd44f9635975afca8bdab4e490a\"\r\nLast-Modified: Wed, 18 Aug 2021 04:04:48 GMT\r\nx-amz-id-2: 36AAAQAAEAABAAAQAAEAABAAAQAAEAABAAAaI=AAAAAAAAAAAAAAAAAAAAAAAAAA\r\nvia: CHN-HEqinhuangdao-AREACUCC1-CACHE11[7],CHN-HEqinhuangdao-AREACUCC1-CACHE93[0,TCP_HIT,6],CHN-TJ-GLOBAL6-CACHE39[17],CHN-TJ-GLOBAL6-CACHE69[0,TCP_HIT,16]\r\nx-hcs-proxy-type: 1\r\nX-CCDN-CacheTTL: 31536000\r\nnginx-hit: 1\r\nAge: 2739581\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":33275,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1, software=www.meitu.com], baseline, precision 8, 200x200, components 3","md5":"7ae9ffd44f9635975afca8bdab4e490a","sha1":"11352957b470a31278302f8de5111d2ad9ab342b","sha256":"92a6694212cd7e35ad4563acb88b477d8ab1f578bca6a386205edfe4c277eb49","sha512":"58a53f3461f1f38907f4e4e2828fe21f6a498a4340b119ab42cd99b97d8c610403f830796f04b3deec9e3f8b58b0226b306e023cac5e5f464794335e2ffb7133","ssdeep":"768:7sA+l9yZCO+c0mTKMRkpOQ4xGs+LPkXxn+sbC8eQLSCrFjL:7tUspTlkoQ4j+LcXx+sPLnF","tlshash":"53e2e10349d6ce45d3efe4971b059221a0b917d3cfe56c2086a34cefc2e5b5991c746d","first_seen":"2025-02-11T04:22:13.901891Z","last_seen":"2026-06-06T23:56:38.289371Z","times_seen":31,"resource_available":false,"data":null}},"time_used":16860,"timings":{"blocked":16539,"dns":0,"connect":0,"send":0,"wait":275,"receive":46,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api-shoulei-ssl.xunlei.com/pss/static/config_json_fa07/thunder_page_apk_download_url_config.json","fqdn":"api-shoulei-ssl.xunlei.com","domain":"xunlei.com","tld":"com"},"ip":{"addr":"106.15.105.54","port":443,"asn":37963,"as":"Hangzhou Alibaba Advertising Co.,Ltd.","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.downza.cn/soft/27933.html","date":"2026-02-09T10:40:40.959Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.xunlei.com","organization":"Shenzhen Xunlei Networking Technologies Co., Ltd."},"issuer":{"commonName":"GlobalSign RSA OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 14 May 2025 07:30:49 GMT","end":"Mon, 15 Jun 2026 07:30:48 GMT"},"fingerprint":{"sha1":"BA:01:25:07:4E:8B:85:C9:0E:27:3E:A0:F8:CF:0A:2D:B8:75:24:81","sha256":"9D:CE:53:1C:87:46:BA:05:F3:28:6D:D0:99:B2:26:FB:59:C4:50:9C:A7:8D:5A:BA:5D:14:F7:17:30:4D:10:46"}}},"request":{"raw":"GET /pss/static/config_json_fa07/thunder_page_apk_download_url_config.json HTTP/1.1\r\nHost: api-shoulei-ssl.xunlei.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.downza.cn\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.downza.cn/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 09 Feb 2026 10:40:41 GMT\r\ncontent-type: application/json\r\ncontent-length: 0\r\nlast-modified: Wed, 23 Dec 2020 07:44:41 GMT\r\netag: \"5fe2f569-0\"\r\nexpires: Mon, 09 Feb 2026 10:40:40 GMT\r\ncache-control: no-cache\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, OPTIONS\r\naccess-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=0;\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/json","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-18T01:31:21.233037Z","times_seen":16497762,"resource_available":true,"data":null}},"time_used":1179,"timings":{"blocked":-1,"dns":13,"connect":279,"send":0,"wait":282,"receive":2,"ssl":602},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-09","alert":"Sinkholed","trigger":"api-shoulei-ssl.xunlei.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"res.njxzwh.com/downza/pc/v2023/images/download3.png","fqdn":"res.njxzwh.com","domain":"njxzwh.com","tld":"com"},"ip":{"addr":"113.240.117.108","port":443,"asn":63835,"as":"No.293,Wanbao Avenue","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.downza.cn/soft/27933.html","date":"2026-02-09T10:40:41.102Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"res.njxzwh.com","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Sun, 04 Jan 2026 00:00:00 GMT","end":"Sat, 04 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"CD:91:C8:DC:75:28:A2:68:09:8B:A1:E3:80:02:F5:FA:FD:F0:C2:E6","sha256":"4D:AF:FF:F9:76:6E:B8:BD:6E:50:11:7E:3A:D1:3E:70:7D:9D:6B:2E:56:2C:34:46:80:3E:A1:C8:01:14:CB:61"}}},"request":{"raw":"GET /downza/pc/v2023/images/download3.png HTTP/1.1\r\nHost: res.njxzwh.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://res.njxzwh.com/downza/pc/v2023/css/detail.css?2026020913\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 09 Feb 2026 10:40:41 GMT\r\nContent-Type: image/png\r\nContent-Length: 334\r\nConnection: keep-alive\r\nServer: openresty\r\nx-reserved: amazon, aws and amazon web services are trademarks or registered trademarks of Amazon Technologies, Inc\r\nCloudServiceDiscount: CDN\r\nx-amz-request-id: 0000019A347CC42097CA5C20877EA859\r\nETag: \"926063fafb47ff0aceb1956589d4b55d\"\r\nLast-Modified: Thu, 30 Oct 2025 09:32:38 GMT\r\nx-amz-id-2: 36AAAQAAEAABAAAQAAEAABAAAQAAEAABAAAaI=AAAAAAAAAAAAAAAAAAAAAAAAAA\r\nX-CCDN-Expires: 1553682\r\nvia: CHN-HNchangsha-AREACT1-CACHE56[3],CHN-HNchangsha-AREACT1-CACHE18[0,TCP_HIT,0],CHN-JSwuxi-GLOBAL2-CACHE13[9],CHN-JSwuxi-GLOBAL2-CACHE98[0,TCP_HIT,8]\r\nx-hcs-proxy-type: 1\r\nX-CCDN-CacheTTL: 2592000\r\nnginx-hit: 1\r\nAge: 1038338\r\nAccept-Ranges: bytes\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: OPTION,GET\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":334,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 20 x 20, 8-bit/color RGBA, non-interlaced","md5":"926063fafb47ff0aceb1956589d4b55d","sha1":"ebb40f618282e27d2917f68ee750d181a2504073","sha256":"6dcd81e312384b956320074756821f7d6f64dab0afa8e0db87157a49a9a71a0b","sha512":"bb9ce1b87e9f8e357299666b88728a2ad8f67afbdde5bbac54cdd4e01a6ea5daae95e9444037cd6ba678cbc45b726f5601fce6ecb5f2babad61b2eca1956015c","ssdeep":"","tlshash":"f1e02de177802c887bc0632633f8e043ad0a48ec6983130b4819d0770ae20846be6bf3","first_seen":"2025-06-15T16:39:48.287999Z","last_seen":"2026-06-06T23:56:38.317038Z","times_seen":39,"resource_available":false,"data":null}},"time_used":413,"timings":{"blocked":125,"dns":0,"connect":0,"send":0,"wait":288,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bigdata.downza.com/1.gif?ak=6bd0\u0026aId=a9fcd354-3bda-28be-226e-51f90b701377\u0026su=https%3A%2F%2Fwww.downza.cn%2Fsoft%2F27933.html\u0026da=www.downza.cn\u0026tt=360wifi%E4%B8%8B%E8%BD%BD-360wifi%E4%B8%8B%E8%BD%BD%E7%94%B5%E8%84%91%E7%89%88%E5%AE%A2%E6%88%B7%E7%AB%AF%E4%B8%8B%E8%BD%BD%5B2026%E6%9C%80%E6%96%B0%E7%89%88%5D-%E4%B8%8B%E8%BD%BD%E4%B9%8B%E5%AE%B6\u0026r=\u0026pt=down\u0026fl=1-6-54\u0026ds=1280x1024\u0026cd=24\u0026lt=-1770633622689\u0026ln=en-US\u0026ce=1\u0026je=0\u0026random=0.7745237150485685","fqdn":"bigdata.downza.com","domain":"downza.com","tld":"com"},"ip":{"addr":"122.112.196.83","port":443,"asn":55990,"as":"Huawei Cloud Service data center","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.downza.cn/soft/27933.html","date":"2026-02-09T10:40:41.239Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"bigdata.downza.com","organization":""},"issuer":{"commonName":"ZeroSSL ECC Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Mon, 12 Jan 2026 00:00:00 GMT","end":"Sun, 12 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"1D:EE:64:20:4C:E4:FF:49:A7:08:B2:93:B4:5B:F8:EB:1F:C4:F9:D2","sha256":"71:5B:06:AD:59:2A:D1:95:61:B4:50:C3:35:EE:5F:84:84:AA:DE:DB:EE:F2:DA:39:8C:02:79:E8:BE:82:44:61"}}},"request":{"raw":"GET /1.gif?ak=6bd0\u0026aId=a9fcd354-3bda-28be-226e-51f90b701377\u0026su=https%3A%2F%2Fwww.downza.cn%2Fsoft%2F27933.html\u0026da=www.downza.cn\u0026tt=360wifi%E4%B8%8B%E8%BD%BD-360wifi%E4%B8%8B%E8%BD%BD%E7%94%B5%E8%84%91%E7%89%88%E5%AE%A2%E6%88%B7%E7%AB%AF%E4%B8%8B%E8%BD%BD%5B2026%E6%9C%80%E6%96%B0%E7%89%88%5D-%E4%B8%8B%E8%BD%BD%E4%B9%8B%E5%AE%B6\u0026r=\u0026pt=down\u0026fl=1-6-54\u0026ds=1280x1024\u0026cd=24\u0026lt=-1770633622689\u0026ln=en-US\u0026ce=1\u0026je=0\u0026random=0.7745237150485685 HTTP/1.1\r\nHost: bigdata.downza.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.downza.cn/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 \r\nServer: nginx\r\nDate: Mon, 09 Feb 2026 10:40:41 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-18T01:31:21.233037Z","times_seen":16497762,"resource_available":true,"data":null}},"time_used":299,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":299,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zz314.downza.cn/p/2015-09-10/66eb16857fc3870499252b18de0e3dfa.jpg","fqdn":"zz314.downza.cn","domain":"downza.cn","tld":"cn"},"ip":{"addr":"116.153.39.131","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.downza.cn/soft/27933.html","date":"2026-02-09T10:40:26.296Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zz314.downza.cn","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Sat, 17 Jan 2026 00:00:00 GMT","end":"Fri, 17 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"B5:A8:10:C3:A9:D4:76:FC:F4:79:44:C2:A6:E2:15:3E:AF:B6:C6:2F","sha256":"DD:95:3F:93:75:AA:52:73:B4:C6:A7:79:71:FD:05:06:D4:44:57:E1:A7:A7:9B:59:87:70:10:08:59:44:1F:53"}}},"request":{"raw":"GET /p/2015-09-10/66eb16857fc3870499252b18de0e3dfa.jpg HTTP/1.1\r\nHost: zz314.downza.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.downza.cn/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 09 Feb 2026 10:40:41 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 28653\r\nConnection: keep-alive\r\nServer: openresty\r\nx-reserved: amazon, aws and amazon web services are trademarks or registered trademarks of Amazon Technologies, Inc\r\nCloudServiceDiscount: CDN\r\nx-amz-request-id: 00000194397C8C669748248B82B9CBA6\r\nContent-MD5: 2N0YrCN52pZ48r9Vuxly+g==\r\nETag: \"d8dd18ac2379da9678f2bf55bb1972fa\"\r\nLast-Modified: Tue, 02 Apr 2019 09:53:29 GMT\r\nx-amz-meta-md5chksum: d8dd18ac2379da9678f2bf55bb1972fa\r\nx-amz-tagging-count: 0\r\nx-amz-id-2: 32AAAQAAEAABAAAQAAEAABAAAQAAEAABCSAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA\r\nX-CCDN-Expires: 30767062\r\nvia: CHN-JXnanchang-AREACUCC1-CACHE19[30],CHN-JXnanchang-AREACUCC1-CACHE28[0,TCP_HIT,24],CHN-JSwuxi-GLOBAL2-CACHE13[9],CHN-JSwuxi-GLOBAL2-CACHE28[0,TCP_HIT,7],CHN-SH-GLOBAL4-CACHE80[17],CHN-SH-GLOBAL4-CACHE139[0,TCP_HIT,14]\r\nx-hcs-proxy-type: 1\r\nX-CCDN-CacheTTL: 31536000\r\nX-CCDN-REQ-ID-46B1: 7b6fddf75314b90d792ce2173fc75408\r\nnginx-hit: 1\r\nAge: 768938\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":28653,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CC 2015 (Windows), datetime=2015:09:06 16:58:13], baseline, precision 8, 128x96, components 3","md5":"d8dd18ac2379da9678f2bf55bb1972fa","sha1":"751c9b09a03e9cdeaab284ecc6754ce8a671936d","sha256":"19804a21b4e431ed09748a1ee1f82e5025540a39caa62dc2f1b944b4c3ae2810","sha512":"14617c7ea8df9a4d4c685d3eb8593c7481b034e39a3e08dc067134ee327c445d098bf71e6f6f11563a753ed5aa7cfb2efa110c0b8fe7b6cfa120dcfe6bbefae2","ssdeep":"384:yI4FBlPiUI4FBXnK+P5YNg70f3JZdFb6CIcP7XDNd2WaW7cNPQXjDrBUW:EFBlPrFBXTYyGcCIcj23W7cNPm3rBUW","tlshash":"b0d2be228f42ae11f6d0137994e1dbc6625196aeb3b32792b90d7101ffb97808e6d347","first_seen":"2026-02-09T10:41:31.975062Z","last_seen":"2026-02-09T10:41:31.975062Z","times_seen":1,"resource_available":false,"data":null}},"time_used":15812,"timings":{"blocked":14622,"dns":1,"connect":244,"send":0,"wait":341,"receive":186,"ssl":415},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img3.downza.cn/download/202109/114321-613ad4599559d.jpg","fqdn":"img3.downza.cn","domain":"downza.cn","tld":"cn"},"ip":{"addr":"121.22.232.168","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.downza.cn/soft/27933.html","date":"2026-02-09T10:40:26.539Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img3.downza.cn","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Thu, 15 Jan 2026 00:00:00 GMT","end":"Wed, 15 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"4D:77:54:39:09:D0:ED:EE:10:10:0E:82:47:48:45:9A:1F:AC:36:7A","sha256":"86:A8:1B:F9:16:89:4D:41:B2:D3:65:4D:15:83:34:E8:F4:AC:0C:46:D1:F5:0A:AE:99:D0:B7:33:F3:EE:5A:9B"}}},"request":{"raw":"GET /download/202109/114321-613ad4599559d.jpg HTTP/1.1\r\nHost: img3.downza.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 09 Feb 2026 10:40:42 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 45779\r\nConnection: keep-alive\r\nServer: openresty\r\nx-reserved: amazon, aws and amazon web services are trademarks or registered trademarks of Amazon Technologies, Inc\r\nCloudServiceDiscount: CDN\r\nx-amz-request-id: 0000019BC851A8D7904670D651774E76\r\nETag: \"eca5bd2a4b0a91b52f3957acc11cd5d8\"\r\nLast-Modified: Fri, 10 Sep 2021 03:43:21 GMT\r\nx-amz-id-2: 36AAAQAAEAABAAAQAAEAABAAAQAAEAABAAAaI=AAAAAAAAAAAAAAAAAAAAAAAAAA\r\nvia: CHN-HEqinhuangdao-AREACUCC1-CACHE15[12],CHN-HEqinhuangdao-AREACUCC1-CACHE18[0,TCP_HIT,4],CHN-TJ-GLOBAL6-CACHE121[93],CHN-TJ-GLOBAL6-CACHE96[71,TCP_MISS,92]\r\nx-hcs-proxy-type: 1\r\nX-CCDN-CacheTTL: 31536000\r\nnginx-hit: 1\r\nAge: 2041289\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":45779,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CS6 (Windows), datetime=2021:09:10 11:43:03], progressive, precision 8, 200x200, components 3","md5":"eca5bd2a4b0a91b52f3957acc11cd5d8","sha1":"74667bb3e40aa14b8af1b2b3d77fdb82368d10de","sha256":"c3840dd117e803a69d6502eef316514c666abee23853d18072a5f3e248d0eebc","sha512":"2ff1d93ba956d4afb0762ac17e06d24137bb0cc6d5ec8148efdd558080c37ea34d60d70b279b0ae9972c421e9c49fc1aa4fe77a41460203845d3b283f4fdbc7d","ssdeep":"768:/rYy98lPMBPBYy98lPMjsYYy+51fpsefeOfg+qVn0:jx6Psx6PEsY8NpTfFI0","tlshash":"2923c062d787de23f9d19ef864e5e795a3616f3893636783349c611527b21c01c8e08f","first_seen":"2026-02-09T10:41:31.977294Z","last_seen":"2026-02-09T10:41:31.977294Z","times_seen":1,"resource_available":false,"data":null}},"time_used":16612,"timings":{"blocked":16034,"dns":0,"connect":0,"send":0,"wait":328,"receive":250,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"res.njxzwh.com/downza/pc/v2023/images/download2.png","fqdn":"res.njxzwh.com","domain":"njxzwh.com","tld":"com"},"ip":{"addr":"113.240.117.108","port":443,"asn":63835,"as":"No.293,Wanbao Avenue","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.downza.cn/soft/27933.html","date":"2026-02-09T10:40:41.316Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"res.njxzwh.com","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Sun, 04 Jan 2026 00:00:00 GMT","end":"Sat, 04 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"CD:91:C8:DC:75:28:A2:68:09:8B:A1:E3:80:02:F5:FA:FD:F0:C2:E6","sha256":"4D:AF:FF:F9:76:6E:B8:BD:6E:50:11:7E:3A:D1:3E:70:7D:9D:6B:2E:56:2C:34:46:80:3E:A1:C8:01:14:CB:61"}}},"request":{"raw":"GET /downza/pc/v2023/images/download2.png HTTP/1.1\r\nHost: res.njxzwh.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://res.njxzwh.com/downza/pc/v2023/css/detail.css?2026020913\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 09 Feb 2026 10:40:41 GMT\r\nContent-Type: image/png\r\nContent-Length: 266\r\nConnection: keep-alive\r\nServer: openresty\r\nx-reserved: amazon, aws and amazon web services are trademarks or registered trademarks of Amazon Technologies, Inc\r\nCloudServiceDiscount: CDN\r\nx-amz-request-id: 0000019A347CC5379744E1B181552B6D\r\nETag: \"5ee8bc4f8c2c23625e69e7e3868030c6\"\r\nLast-Modified: Thu, 30 Oct 2025 09:32:38 GMT\r\nx-amz-id-2: 36AAAQAAEAABAAAQAAEAABAAAQAAEAABAAAaI=AAAAAAAAAAAAAAAAAAAAAAAAAA\r\nX-CCDN-Expires: 1553682\r\nvia: CHN-HNchangsha-AREACT1-CACHE9[3],CHN-HNchangsha-AREACT1-CACHE74[0,TCP_HIT,0],CHN-JSwuxi-GLOBAL2-CACHE89[5],CHN-JSwuxi-GLOBAL2-CACHE74[0,TCP_HIT,4]\r\nx-hcs-proxy-type: 1\r\nX-CCDN-CacheTTL: 2592000\r\nnginx-hit: 1\r\nAge: 1038337\r\nAccept-Ranges: bytes\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: OPTION,GET\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":266,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 15 x 15, 8-bit/color RGBA, non-interlaced","md5":"5ee8bc4f8c2c23625e69e7e3868030c6","sha1":"06d6bb74603c44b984f9d06e570831c17ad8ca7e","sha256":"598caf6948a2ca183c6dc80e3270ecc138577a3ac31bd04de7614b988e18715c","sha512":"f24d1ddbd877958bbe0e5794d7e01e911de0856f7e207e7c07a0b9eabded793d79c35027eed9b989c985ac7e5bc073bdc90b7b72002aaa18c359c333a205d761","ssdeep":"","tlshash":"61d0ebc3c92c8820e7c96daf6b282a06e8a151ff88302034a8ce202ec068028e284503","first_seen":"2025-06-15T16:39:48.151769Z","last_seen":"2026-06-06T23:56:38.260783Z","times_seen":39,"resource_available":false,"data":null}},"time_used":547,"timings":{"blocked":292,"dns":0,"connect":0,"send":0,"wait":255,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"res.njxzwh.com/downza/pc/v2023/js/jquery-1.12.4.min.js","fqdn":"res.njxzwh.com","domain":"njxzwh.com","tld":"com"},"ip":{"addr":"113.240.117.108","port":443,"asn":63835,"as":"No.293,Wanbao Avenue","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.downza.cn/soft/27933.html","date":"2026-02-09T10:40:26.055Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"res.njxzwh.com","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Sun, 04 Jan 2026 00:00:00 GMT","end":"Sat, 04 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"CD:91:C8:DC:75:28:A2:68:09:8B:A1:E3:80:02:F5:FA:FD:F0:C2:E6","sha256":"4D:AF:FF:F9:76:6E:B8:BD:6E:50:11:7E:3A:D1:3E:70:7D:9D:6B:2E:56:2C:34:46:80:3E:A1:C8:01:14:CB:61"}}},"request":{"raw":"GET /downza/pc/v2023/js/jquery-1.12.4.min.js HTTP/1.1\r\nHost: res.njxzwh.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.downza.cn/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 09 Feb 2026 10:40:28 GMT\r\nContent-Type: text/javascript\r\nContent-Length: 97168\r\nConnection: keep-alive\r\nServer: openresty\r\nx-reserved: amazon, aws and amazon web services are trademarks or registered trademarks of Amazon Technologies, Inc\r\nCloudServiceDiscount: CDN\r\nx-amz-request-id: 0000019A347CCADA9745589B66A7CF7C\r\nETag: \"618538b4ab9639d444e962729a927f15\"\r\nLast-Modified: Thu, 30 Oct 2025 09:32:43 GMT\r\nx-amz-id-2: 36AAAQAAEAABAAAQAAEAABAAAQAAEAABAAAaI=AAAAAAAAAAAAAAAAAAAAAAAAAA\r\nX-CCDN-Expires: 53035\r\nvia: CHN-HNchangsha-AREACT1-CACHE56[3],CHN-HNchangsha-AREACT1-CACHE78[0,TCP_HIT,0],CHN-JSwuxi-GLOBAL2-CACHE119[5],CHN-JSwuxi-GLOBAL2-CACHE101[0,TCP_HIT,3]\r\nx-hcs-proxy-type: 1\r\nX-CCDN-CacheTTL: 86400\r\nnginx-hit: 1\r\nAge: 33373\r\nAccept-Ranges: bytes\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: OPTION,GET\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":97168,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (32077), with CRLF line terminators","md5":"618538b4ab9639d444e962729a927f15","sha1":"dacc1f76630a9708add066819b1aabf8dce01056","sha256":"27d92130c0321dad5a03760fd5ac98a3d04ed4c94d88418fe6d50da1f7fc5cbe","sha512":"bcb6754ea246939a19a917cc0b810e1753c1b0f1a8b1b7e652128ef15dee4fc79111e4d88fe12f9188449a307e82240d0261af402d783428edfe5785c860372d","ssdeep":"1536:jYE1JVoiB9JqZdXXe2pD3PgoIiulrUdTJ5Fk/zkZ4HjL5o8srOaS9TwDhb7/Jp96:y4J+03jL5TCOauTwDhFdnCVQNLa98Hrc","tlshash":"9693d7d9b6d6706287b734a851bf410bb17aa8eab40c4c60f058c8e47e74e9d507bf2d","first_seen":"2023-03-07T01:12:12Z","last_seen":"2026-06-17T17:20:45.274998Z","times_seen":5353,"resource_available":true,"data":null}},"time_used":6181,"timings":{"blocked":2582,"dns":2000,"connect":283,"send":0,"wait":355,"receive":620,"ssl":339},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img3.downza.cn/thumb/201806/d00bfadb41efd382e383775fa240e159-50x50.jpg","fqdn":"img3.downza.cn","domain":"downza.cn","tld":"cn"},"ip":{"addr":"121.22.232.168","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.downza.cn/soft/27933.html","date":"2026-02-09T10:40:26.204Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img3.downza.cn","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Thu, 15 Jan 2026 00:00:00 GMT","end":"Wed, 15 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"4D:77:54:39:09:D0:ED:EE:10:10:0E:82:47:48:45:9A:1F:AC:36:7A","sha256":"86:A8:1B:F9:16:89:4D:41:B2:D3:65:4D:15:83:34:E8:F4:AC:0C:46:D1:F5:0A:AE:99:D0:B7:33:F3:EE:5A:9B"}}},"request":{"raw":"GET /thumb/201806/d00bfadb41efd382e383775fa240e159-50x50.jpg HTTP/1.1\r\nHost: img3.downza.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 09 Feb 2026 10:40:41 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 2021\r\nConnection: keep-alive\r\nServer: openresty\r\nx-reserved: amazon, aws and amazon web services are trademarks or registered trademarks of Amazon Technologies, Inc\r\nCloudServiceDiscount: CDN\r\nx-amz-request-id: 0000019B9B0723A290167AF7D656E07D\r\nETag: \"4457782811ecb0998422722072e21d6a\"\r\nLast-Modified: Thu, 07 Nov 2019 04:08:35 GMT\r\nx-amz-tagging-count: 0\r\nx-amz-id-2: 36AAAQAAEAABAAAQAAEAABAAAQAAEAABAAAaI=AAAAAAAAAAAAAAAAAAAAAAAAAA\r\nvia: CHN-HEqinhuangdao-AREACUCC1-CACHE21[26],CHN-HEqinhuangdao-AREACUCC1-CACHE82[0,TCP_HIT,21],CHN-TJ-GLOBAL6-CACHE80[18],CHN-TJ-GLOBAL6-CACHE112[0,TCP_HIT,16]\r\nx-hcs-proxy-type: 1\r\nX-CCDN-CacheTTL: 31536000\r\nnginx-hit: 1\r\nAge: 2376149\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":2021,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 50x50, components 3","md5":"4457782811ecb0998422722072e21d6a","sha1":"79381fefb6d9622979a9df3d8be224d6f04ba4e8","sha256":"e6246a6d8d2b53b6bf279135874f4b8824f3d20a9224eb2678759efb3fb0d568","sha512":"ac410d1cac9cdc72772b7c3c68aaea796637aa41cd83a8bfe0c0729f317c3f5163e7cef20ffba6584ca3582d01f2073e5d400f0fce46dcf7610657720e8fc45e","ssdeep":"","tlshash":"0b41480d61244c01e6f82ab0ff8ee1202e7f4a54432372398620dba53e7888176be3b1","first_seen":"2026-02-09T10:41:31.982284Z","last_seen":"2026-02-09T10:41:31.982284Z","times_seen":1,"resource_available":false,"data":null}},"time_used":15566,"timings":{"blocked":14714,"dns":0,"connect":233,"send":0,"wait":255,"receive":0,"ssl":354},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img3.downza.cn/download/202108/140011-611ca1ebe079b.jpg","fqdn":"img3.downza.cn","domain":"downza.cn","tld":"cn"},"ip":{"addr":"121.22.232.168","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.downza.cn/soft/27933.html","date":"2026-02-09T10:40:26.534Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img3.downza.cn","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Thu, 15 Jan 2026 00:00:00 GMT","end":"Wed, 15 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"4D:77:54:39:09:D0:ED:EE:10:10:0E:82:47:48:45:9A:1F:AC:36:7A","sha256":"86:A8:1B:F9:16:89:4D:41:B2:D3:65:4D:15:83:34:E8:F4:AC:0C:46:D1:F5:0A:AE:99:D0:B7:33:F3:EE:5A:9B"}}},"request":{"raw":"GET /download/202108/140011-611ca1ebe079b.jpg HTTP/1.1\r\nHost: img3.downza.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 09 Feb 2026 10:40:42 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 54094\r\nConnection: keep-alive\r\nServer: openresty\r\nx-reserved: amazon, aws and amazon web services are trademarks or registered trademarks of Amazon Technologies, Inc\r\nCloudServiceDiscount: CDN\r\nx-amz-request-id: 0000019B659361A1901BFC57A1E2020F\r\nETag: \"d21901d2027e7afe78a99626fad18596\"\r\nLast-Modified: Wed, 18 Aug 2021 06:00:11 GMT\r\nx-amz-id-2: 36AAAQAAEAABAAAQAAEAABAAAQAAEAABAAAaI=AAAAAAAAAAAAAAAAAAAAAAAAAA\r\nvia: CHN-HEqinhuangdao-AREACUCC1-CACHE11[5],CHN-HEqinhuangdao-AREACUCC1-CACHE89[0,TCP_HIT,3],CHN-TJ-GLOBAL6-CACHE117[7],CHN-TJ-GLOBAL6-CACHE3[0,TCP_HIT,4]\r\nx-hcs-proxy-type: 1\r\nX-CCDN-CacheTTL: 31536000\r\nnginx-hit: 1\r\nAge: 3649286\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":54094,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CS6 (Windows), datetime=2021:08:18 13:58:47], baseline, precision 8, 200x200, components 3","md5":"d21901d2027e7afe78a99626fad18596","sha1":"5a4a4817bafd93e1fc411fa395f078012e725e27","sha256":"b1073dac2ee673083a6c3f05c1da84996f28f20ddc2c5139500578fc16180d6e","sha512":"b8da59a8bfb3876d9d78fadc3c16be63f7269036c0ad3fa32f114e1364c60b467d3af2626c66cf864f4a26075442bbc2bdad8598b6e9a73fb6fe56b9f42757fd","ssdeep":"768:uPYyYrJP8YyYr4bBYyLxQx8VaA4EEHv82iVMXzMcxuZ/0UfU2fKfeBbkU:iEmE4bBQ8VaA49HkUjMcU90zxwbJ","tlshash":"1b33d061fb73d651fee2667858e1dbd973519b68a3232700705caf13bba05c06e8e207","first_seen":"2024-05-31T23:55:32Z","last_seen":"2026-02-09T10:41:31.984085Z","times_seen":19,"resource_available":false,"data":null}},"time_used":16339,"timings":{"blocked":15756,"dns":0,"connect":0,"send":0,"wait":314,"receive":269,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"res.njxzwh.com/w2/js/app/tongji.js","fqdn":"res.njxzwh.com","domain":"njxzwh.com","tld":"com"},"ip":{"addr":"113.240.117.108","port":443,"asn":63835,"as":"No.293,Wanbao Avenue","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.downza.cn/soft/27933.html","date":"2026-02-09T10:40:26.579Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"res.njxzwh.com","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Sun, 04 Jan 2026 00:00:00 GMT","end":"Sat, 04 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"CD:91:C8:DC:75:28:A2:68:09:8B:A1:E3:80:02:F5:FA:FD:F0:C2:E6","sha256":"4D:AF:FF:F9:76:6E:B8:BD:6E:50:11:7E:3A:D1:3E:70:7D:9D:6B:2E:56:2C:34:46:80:3E:A1:C8:01:14:CB:61"}}},"request":{"raw":"GET /w2/js/app/tongji.js HTTP/1.1\r\nHost: res.njxzwh.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.downza.cn/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 09 Feb 2026 10:40:28 GMT\r\nContent-Type: text/javascript\r\nContent-Length: 1108\r\nConnection: keep-alive\r\nServer: openresty\r\nx-reserved: amazon, aws and amazon web services are trademarks or registered trademarks of Amazon Technologies, Inc\r\nCloudServiceDiscount: CDN\r\nx-amz-request-id: 0000019BDF5F87299747A33C69B36ECE\r\nETag: \"98e4c22ce59e9effa9bde2788477fceb\"\r\nLast-Modified: Tue, 02 Jan 2024 02:36:48 GMT\r\nx-amz-tagging-count: 0\r\nx-amz-id-2: 36AAAQAAEAABAAAQAAEAABAAAQAAEAABAAAaI=AAAAAAAAAAAAAAAAAAAAAAAAAA\r\nX-CCDN-Expires: 75913\r\nvia: CHN-HNchangsha-AREACT1-CACHE12[4],CHN-HNchangsha-AREACT1-CACHE49[0,TCP_HIT,0],CHN-JSwuxi-GLOBAL2-CACHE117[6],CHN-JSwuxi-GLOBAL2-CACHE49[0,TCP_HIT,4]\r\nx-hcs-proxy-type: 1\r\nX-CCDN-CacheTTL: 86400\r\nnginx-hit: 1\r\nAge: 10494\r\nAccept-Ranges: bytes\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: OPTION,GET\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":1108,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"98e4c22ce59e9effa9bde2788477fceb","sha1":"ee3517ea667977f21e09e8355591c46d5e7cad96","sha256":"5515312c90eca191e9c7ba662587459b5f746dc4372e6237416be4f63a75a4b6","sha512":"b87d693fb7b6f493ac7763f870f490325f3744aef1f41bef7f45ee86e27fa36d846fd6270f5fcc21adcf94f6a92af0b0716e048d9737049e325fd0c4ae2718d1","ssdeep":"","tlshash":"b611309b2c7b6834176c08f650bdf508b2b8101ca486d603a8acd9050ab0fed1c0d998","first_seen":"2025-02-11T04:22:13.827294Z","last_seen":"2026-06-06T23:56:38.295545Z","times_seen":63,"resource_available":true,"data":null}},"time_used":2315,"timings":{"blocked":-1,"dns":1435,"connect":255,"send":0,"wait":259,"receive":0,"ssl":365},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img3.downza.cn/download/202008/183039-5f4639cf775d1.jpg","fqdn":"img3.downza.cn","domain":"downza.cn","tld":"cn"},"ip":{"addr":"121.22.232.168","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.downza.cn/soft/27933.html","date":"2026-02-09T10:40:26.596Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img3.downza.cn","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Thu, 15 Jan 2026 00:00:00 GMT","end":"Wed, 15 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"4D:77:54:39:09:D0:ED:EE:10:10:0E:82:47:48:45:9A:1F:AC:36:7A","sha256":"86:A8:1B:F9:16:89:4D:41:B2:D3:65:4D:15:83:34:E8:F4:AC:0C:46:D1:F5:0A:AE:99:D0:B7:33:F3:EE:5A:9B"}}},"request":{"raw":"GET /download/202008/183039-5f4639cf775d1.jpg HTTP/1.1\r\nHost: img3.downza.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 09 Feb 2026 10:40:43 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 36238\r\nConnection: keep-alive\r\nServer: openresty\r\nx-reserved: amazon, aws and amazon web services are trademarks or registered trademarks of Amazon Technologies, Inc\r\nCloudServiceDiscount: CDN\r\nx-amz-request-id: 0000019B7C524E1A90466EBFF7A021E8\r\nETag: \"7327a7fb8e01d2e842c03e02c4efe16b\"\r\nLast-Modified: Wed, 26 Aug 2020 10:30:39 GMT\r\nx-amz-id-2: 36AAAQAAEAABAAAQAAEAABAAAQAAEAABAAAaI=AAAAAAAAAAAAAAAAAAAAAAAAAA\r\nvia: CHN-HEqinhuangdao-AREACUCC1-CACHE86[10],CHN-HEqinhuangdao-AREACUCC1-CACHE79[0,TCP_HIT,5],CHN-TJ-GLOBAL6-CACHE126[25],CHN-TJ-GLOBAL6-CACHE100[0,TCP_HIT,23]\r\nx-hcs-proxy-type: 1\r\nX-CCDN-CacheTTL: 31536000\r\nnginx-hit: 1\r\nAge: 3214447\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":36238,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=12, height=246, bps=0, PhotometricInterpretation=RGB, orientation=upper-left, width=246], progressive, precision 8, 240x240, components 3","md5":"7327a7fb8e01d2e842c03e02c4efe16b","sha1":"46b046b2cca86d2580b7c3eab4d38ba9c0e031ef","sha256":"1a15a66bf82e95df57c690a680bd9240c31718bff49de4508d7a79f6c34d2daa","sha512":"5cd33cb5c140898f984c1157e23f0391d2a4ee9a544c3d457fe3eb0462bfe6a6c3421585919924518f18dd59837ff552a8b228e5d6dda57859c8be14eee34644","ssdeep":"768:vk8yPHk86KVruyxy9vCCv+sdlrIdh0OJvVsC2:M8F8/VJU9qCvRlkEOzz2","tlshash":"95f2d017bf55ee22f4e016358095efe6b2288b8472db2a4b710c391e3bb0bd05a499d1","first_seen":"2023-05-26T03:28:21Z","last_seen":"2026-06-06T23:56:38.254102Z","times_seen":50,"resource_available":false,"data":null}},"time_used":16891,"timings":{"blocked":16525,"dns":0,"connect":0,"send":0,"wait":289,"receive":77,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img3.downza.cn/thumb/201712/4fc8f3d7c0e5db63298c747a8d0c80d6-50x50.jpg","fqdn":"img3.downza.cn","domain":"downza.cn","tld":"cn"},"ip":{"addr":"121.22.232.168","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.downza.cn/soft/27933.html","date":"2026-02-09T10:40:26.312Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img3.downza.cn","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Thu, 15 Jan 2026 00:00:00 GMT","end":"Wed, 15 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"4D:77:54:39:09:D0:ED:EE:10:10:0E:82:47:48:45:9A:1F:AC:36:7A","sha256":"86:A8:1B:F9:16:89:4D:41:B2:D3:65:4D:15:83:34:E8:F4:AC:0C:46:D1:F5:0A:AE:99:D0:B7:33:F3:EE:5A:9B"}}},"request":{"raw":"GET /thumb/201712/4fc8f3d7c0e5db63298c747a8d0c80d6-50x50.jpg HTTP/1.1\r\nHost: img3.downza.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 09 Feb 2026 10:40:41 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 3046\r\nConnection: keep-alive\r\nServer: openresty\r\nx-reserved: amazon, aws and amazon web services are trademarks or registered trademarks of Amazon Technologies, Inc\r\nCloudServiceDiscount: CDN\r\nx-amz-request-id: 0000019BB0861F5390060867D909488B\r\nETag: \"94df0deda5df7f59c95230d2f3b95725\"\r\nLast-Modified: Thu, 07 Nov 2019 04:06:21 GMT\r\nx-amz-tagging-count: 0\r\nx-amz-id-2: 36AAAQAAEAABAAAQAAEAABAAAQAAEAABAAAaI=AAAAAAAAAAAAAAAAAAAAAAAAAA\r\nvia: CHN-HEqinhuangdao-AREACUCC1-CACHE15[24],CHN-HEqinhuangdao-AREACUCC1-CACHE21[0,TCP_HIT,21],CHN-TJ-GLOBAL6-CACHE97[13],CHN-TJ-GLOBAL6-CACHE110[0,TCP_HIT,13]\r\nx-hcs-proxy-type: 1\r\nX-CCDN-CacheTTL: 31536000\r\nnginx-hit: 1\r\nAge: 2320993\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":3046,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPCM), density 37x37, segment length 16, baseline, precision 8, 50x50, components 3","md5":"94df0deda5df7f59c95230d2f3b95725","sha1":"99679fbe19affe7b9e70c8a0249ff5e2a9f5a0ef","sha256":"848552e0c38c17f56d20083eb4e1f331abdf09f807953868a58d9eea7482dc74","sha512":"ff8ce795115e48f505edeba12051b3cbd956eab66c57cd5250568c9a32a4552d873b91fa42206df50db1b039dd8e1c55124504baf6511e4e615329c28db3ad0d","ssdeep":"","tlshash":"78516c0bcb01180dee9b1476e0a206bb7ddbab0fd8452f4d95bb29a4901e07a6d5905c","first_seen":"2026-02-09T10:41:31.987898Z","last_seen":"2026-02-09T10:41:31.987898Z","times_seen":1,"resource_available":false,"data":null}},"time_used":15469,"timings":{"blocked":14607,"dns":0,"connect":233,"send":0,"wait":261,"receive":1,"ssl":364},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.oss.downza.com/oss/advertisingApi/getAdvertisingCodeByModuleIdNew?moduleId=22\u0026classify=-1-6-54\u0026source=3","fqdn":"api.oss.downza.com","domain":"downza.com","tld":"com"},"ip":{"addr":"113.240.117.106","port":443,"asn":63835,"as":"No.293,Wanbao Avenue","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.downza.cn/soft/27933.html","date":"2026-02-09T10:40:40.995Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.oss.downza.com","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Tue, 06 Jan 2026 00:00:00 GMT","end":"Mon, 06 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"94:2E:25:7B:27:E0:47:2E:EB:73:8C:B5:8F:4A:F6:5B:5B:4A:E2:E0","sha256":"90:6A:68:C2:5E:D2:43:36:E0:52:0E:C1:DF:64:A8:08:D9:32:62:1D:06:96:B5:81:2C:2A:B1:15:72:99:30:2E"}}},"request":{"raw":"GET /oss/advertisingApi/getAdvertisingCodeByModuleIdNew?moduleId=22\u0026classify=-1-6-54\u0026source=3 HTTP/1.1\r\nHost: api.oss.downza.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.downza.cn\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.downza.cn/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 09 Feb 2026 10:40:43 GMT\r\nContent-Type: application/json;charset=UTF-8\r\nContent-Length: 517\r\nConnection: keep-alive\r\nServer: openresty\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: GET,POST,DELETE,PUT,OPTIONS\r\nAccess-Control-Allow-Headers: *\r\nX-CCDN-Expires: 959247\r\nvia: CHN-HNchangsha-AREACT1-CACHE55[8],CHN-HNchangsha-AREACT1-CACHE68[0,TCP_HIT,7],CHN-JSwuxi-GLOBAL2-CACHE104[3],CHN-JSwuxi-GLOBAL2-CACHE102[0,TCP_HIT,2]\r\nx-hcs-proxy-type: 1\r\nX-CCDN-CacheTTL: 2592000\r\nnginx-hit: 1\r\nAge: 1632753\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":517,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"07c6fa24dc747eb1a28eb7948e141637","sha1":"951039cac6cb2b35efe7ac31cfb94c43d17599c5","sha256":"d0d59217fd7d969b7395556eadf862c5f15f4c12d16776d104a8754945e201e4","sha512":"e392046802e6eff743f4f541992019a86eec1d161c5d38b41dc197e129e82f2529e0d33710cb0fd7f51f508e43c0cd867ffb92e69f473b306c7bc0a6368f3742","ssdeep":"","tlshash":"cef054071dcac6b925121c963777d91e6cc971015450cc1d7adcd9792745f668c09eb4","first_seen":"2025-06-15T16:39:48.172759Z","last_seen":"2026-03-17T15:47:07.848203Z","times_seen":20,"resource_available":false,"data":null}},"time_used":2345,"timings":{"blocked":-1,"dns":1161,"connect":529,"send":0,"wait":273,"receive":1,"ssl":380},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"open.thunderurl.com/thunder-link.js","fqdn":"open.thunderurl.com","domain":"thunderurl.com","tld":"com"},"ip":{"addr":"221.194.141.170","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.downza.cn/soft/27933.html","date":"2026-02-09T10:40:26.060Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.thunderurl.com","organization":""},"issuer":{"commonName":"Encryption Everywhere DV TLS CA - G2","organization":"DigiCert Inc"},"validity":{"start":"Tue, 30 Dec 2025 00:00:00 GMT","end":"Sat, 30 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"D8:95:0B:B8:A3:A8:B4:22:36:26:D9:8D:20:1F:F7:F4:FC:0F:30:FC","sha256":"EC:32:FE:AC:C8:6D:D3:0B:01:DF:F0:60:87:A2:F5:F1:91:75:FD:FF:98:24:55:4E:E5:60:F5:F0:9E:56:85:F6"}}},"request":{"raw":"GET /thunder-link.js HTTP/1.1\r\nHost: open.thunderurl.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.downza.cn/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 09 Feb 2026 10:40:28 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 111411\r\nserver: openresty\r\nlast-modified: Sun, 06 Apr 2025 01:54:08 GMT\r\nexpires: 7d\r\nvary: Accept-Encoding, Accept-Encoding, User-Agent\r\ncontent-encoding: gzip\r\nx-ccdn-expires: 86400\r\nvia: CHN-HElangfang-AREACUCC2-CACHE7[5],CHN-HElangfang-AREACUCC2-CACHE36[0,TCP_HIT,0],CHN-TJ-GLOBAL6-CACHE8[5],CHN-TJ-GLOBAL6-CACHE56[0,TCP_HIT,3]\r\nx-hcs-proxy-type: 1\r\nx-ccdn-cachettl: 86400\r\nnginx-hit: 1\r\nage: 85370\r\ncache-control: max-age=2592000\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":355734,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65480)","md5":"8f262a34cf525da728ce7f1ad664e8ce","sha1":"63f6905af9a8217e1436d6acd1a8f3c7a1e6ded4","sha256":"b554cde3b95c578f003b33fdd1de73a0a366c12ef4deecc269ec955206240872","sha512":"d2db1af5d037e9a78ca172151b2968dd4766b7a48f67ddf4fd85882144cea9659c539c603053092119739f7760a7fedca013668e7d723fb3d28d7d0f7d7b431c","ssdeep":"3072:I+AXJCaTlvK3boCXe01no3/vnu0s9cRwEZ2CQGv6bNwRuLsl6Ab9rCE4c/VhI:InBl0mvvqGAIpb9rCE4T","tlshash":"ee747e8fb246b1664baa2ef6c4bf590ff176111528488c60f269d8d5ac7cb8c411bf7c","first_seen":"2025-04-17T21:39:16.941184Z","last_seen":"2026-03-19T02:36:59.123155Z","times_seen":162,"resource_available":true,"data":null}},"time_used":3893,"timings":{"blocked":-1,"dns":2244,"connect":276,"send":0,"wait":551,"receive":511,"ssl":310},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img3.downza.cn/thumb/201609/02c0fb77bc4d98a6d71553522580332c-50x50.jpg","fqdn":"img3.downza.cn","domain":"downza.cn","tld":"cn"},"ip":{"addr":"121.22.232.168","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.downza.cn/soft/27933.html","date":"2026-02-09T10:40:26.111Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img3.downza.cn","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Thu, 15 Jan 2026 00:00:00 GMT","end":"Wed, 15 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"4D:77:54:39:09:D0:ED:EE:10:10:0E:82:47:48:45:9A:1F:AC:36:7A","sha256":"86:A8:1B:F9:16:89:4D:41:B2:D3:65:4D:15:83:34:E8:F4:AC:0C:46:D1:F5:0A:AE:99:D0:B7:33:F3:EE:5A:9B"}}},"request":{"raw":"GET /thumb/201609/02c0fb77bc4d98a6d71553522580332c-50x50.jpg HTTP/1.1\r\nHost: img3.downza.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 09 Feb 2026 10:40:41 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 2022\r\nConnection: keep-alive\r\nServer: openresty\r\nx-reserved: amazon, aws and amazon web services are trademarks or registered trademarks of Amazon Technologies, Inc\r\nCloudServiceDiscount: CDN\r\nx-amz-request-id: 0000019C04A13A40904B43F780B6954B\r\nETag: \"7ad9ac0fc6f165de24c5bfbe68a9ba35\"\r\nLast-Modified: Thu, 07 Nov 2019 03:46:47 GMT\r\nx-amz-tagging-count: 0\r\nx-amz-id-2: 36AAAQAAEAABAAAQAAEAABAAAQAAEAABAAAaI=AAAAAAAAAAAAAAAAAAAAAAAAAA\r\nvia: CHN-HEqinhuangdao-AREACUCC1-CACHE86[24],CHN-HEqinhuangdao-AREACUCC1-CACHE2[0,TCP_HIT,16],CHN-TJ-GLOBAL6-CACHE49[4],CHN-TJ-GLOBAL6-CACHE102[0,TCP_HIT,3]\r\nx-hcs-proxy-type: 1\r\nX-CCDN-CacheTTL: 31536000\r\nnginx-hit: 1\r\nAge: 753579\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":2022,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 50x50, components 3","md5":"7ad9ac0fc6f165de24c5bfbe68a9ba35","sha1":"f8cf4037e413332dddc2c387b410d3959087bb5f","sha256":"a80fa93ebc5acd55cedfbe27b7cf67ffc5f83852a0d0adf2d4ea40ade528b961","sha512":"4bfc272068cc887059ab4c4e4355f50f6c0fac4259bcebed8f92e4c3158355618336c2ee22732b10676f8cf545e3cf2ce8d320d28f7b8a3901d5cd6a8973f02b","ssdeep":"","tlshash":"f4412a1ec883fb52e1779f70195946ac4f27660fdebfa98d692d4e807451063e801218","first_seen":"2026-02-09T10:41:31.99288Z","last_seen":"2026-02-09T10:41:31.99288Z","times_seen":1,"resource_available":false,"data":null}},"time_used":15995,"timings":{"blocked":15740,"dns":0,"connect":0,"send":0,"wait":254,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img3.downza.cn/download/202008/164832-5f3109e091080.jpg","fqdn":"img3.downza.cn","domain":"downza.cn","tld":"cn"},"ip":{"addr":"121.22.232.168","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.downza.cn/soft/27933.html","date":"2026-02-09T10:40:26.541Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img3.downza.cn","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Thu, 15 Jan 2026 00:00:00 GMT","end":"Wed, 15 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"4D:77:54:39:09:D0:ED:EE:10:10:0E:82:47:48:45:9A:1F:AC:36:7A","sha256":"86:A8:1B:F9:16:89:4D:41:B2:D3:65:4D:15:83:34:E8:F4:AC:0C:46:D1:F5:0A:AE:99:D0:B7:33:F3:EE:5A:9B"}}},"request":{"raw":"GET /download/202008/164832-5f3109e091080.jpg HTTP/1.1\r\nHost: img3.downza.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 09 Feb 2026 10:40:42 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 12887\r\nConnection: keep-alive\r\nServer: openresty\r\nx-reserved: amazon, aws and amazon web services are trademarks or registered trademarks of Amazon Technologies, Inc\r\nCloudServiceDiscount: CDN\r\nx-amz-request-id: 0000019BA0D13AFC901AE1DA860B1545\r\nETag: \"6c3bc8e53f535ab984b7693901963ca6\"\r\nLast-Modified: Mon, 10 Aug 2020 08:48:32 GMT\r\nx-amz-id-2: 36AAAQAAEAABAAAQAAEAABAAAQAAEAABAAAaI=AAAAAAAAAAAAAAAAAAAAAAAAAA\r\nvia: CHN-HEqinhuangdao-AREACUCC1-CACHE21[60],CHN-HEqinhuangdao-AREACUCC1-CACHE12[0,TCP_HIT,55],CHN-TJ-GLOBAL6-CACHE93[5],CHN-TJ-GLOBAL6-CACHE138[0,TCP_HIT,3]\r\nx-hcs-proxy-type: 1\r\nX-CCDN-CacheTTL: 31536000\r\nnginx-hit: 1\r\nAge: 2267569\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":12887,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1, software=www.meitu.com], baseline, precision 8, 240x240, components 3","md5":"6c3bc8e53f535ab984b7693901963ca6","sha1":"ae5f8f8c7559acd6d5360a4e665599ae97225f4f","sha256":"f856d2ee5d4c16ebefd36c2cd3005a735114d093d154e86dead7daa82fc17db8","sha512":"98521a62b76b77ef294ae64d8c567001ee8c24d1d8434cac9d3c22b4141e1a842e757caa986794a47eb4b114ca7f738035aa70b548947c98944ac4a5c2dca9e5","ssdeep":"192:PvPvvvoxiOnx+f9m1XbXXLKGGZ7bs8lA5A67iPMDRe22EP+nabuQQjLpOOb:PvPvvvwUaXbrUZ7o8lA5liKBWnfQ2","tlshash":"20428ca65789c6f77728728cd134bc435bf5a37320a8db0485d5281fbb906d880ef92c","first_seen":"2026-02-09T10:41:31.994772Z","last_seen":"2026-02-09T10:41:31.994772Z","times_seen":1,"resource_available":false,"data":null}},"time_used":16463,"timings":{"blocked":16146,"dns":0,"connect":0,"send":0,"wait":316,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"res.njxzwh.com/downza/pc/v2023/js/layer/theme/default/layer.css?v=3.1.1","fqdn":"res.njxzwh.com","domain":"njxzwh.com","tld":"com"},"ip":{"addr":"113.240.117.108","port":443,"asn":63835,"as":"No.293,Wanbao Avenue","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.downza.cn/soft/27933.html","date":"2026-02-09T10:40:41.299Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"res.njxzwh.com","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Sun, 04 Jan 2026 00:00:00 GMT","end":"Sat, 04 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"CD:91:C8:DC:75:28:A2:68:09:8B:A1:E3:80:02:F5:FA:FD:F0:C2:E6","sha256":"4D:AF:FF:F9:76:6E:B8:BD:6E:50:11:7E:3A:D1:3E:70:7D:9D:6B:2E:56:2C:34:46:80:3E:A1:C8:01:14:CB:61"}}},"request":{"raw":"GET /downza/pc/v2023/js/layer/theme/default/layer.css?v=3.1.1 HTTP/1.1\r\nHost: res.njxzwh.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.downza.cn/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 09 Feb 2026 10:40:41 GMT\r\nContent-Type: text/css\r\nContent-Length: 14367\r\nConnection: keep-alive\r\nServer: openresty\r\nx-reserved: amazon, aws and amazon web services are trademarks or registered trademarks of Amazon Technologies, Inc\r\nCloudServiceDiscount: CDN\r\nx-amz-request-id: 0000019A347CC56597C9929B5566BFAA\r\nETag: \"3d2e0d91c5c0b96abb8dbdc2234aba77\"\r\nLast-Modified: Thu, 30 Oct 2025 09:32:52 GMT\r\nx-amz-id-2: 36AAAQAAEAABAAAQAAEAABAAAQAAEAABAAAaI=AAAAAAAAAAAAAAAAAAAAAAAAAA\r\nX-CCDN-Expires: 1018\r\nvia: CHN-HNchangsha-AREACT1-CACHE53[2],CHN-HNchangsha-AREACT1-CACHE53[0,TCP_HIT,0],CHN-JSwuxi-GLOBAL2-CACHE73[13],CHN-JSwuxi-GLOBAL2-CACHE53[0,TCP_HIT,10]\r\nx-hcs-proxy-type: 1\r\nX-CCDN-CacheTTL: 86400\r\nnginx-hit: 1\r\nAge: 85401\r\nAccept-Ranges: bytes\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: OPTION,GET\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":14367,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (14367), with no line terminators","md5":"3d2e0d91c5c0b96abb8dbdc2234aba77","sha1":"9d55e153b30fd7414fada5718e20918e9c7f65e7","sha256":"e3144d018a6a24f733c6fc2a2ee603fb583f0030585e9d4b71bec471b78e31fc","sha512":"42bf3eff281998d088ce012b9a5910f72951c91715595572bb968fbfc5fa2b1cddacef3ca683a1734eb41114b302b6a4dad8b7432c5877b3563a080a2547ae05","ssdeep":"96:mp+Ntha8qNEp+wRY1vUPXiK6nMLPD2OtLzXyPHL/LztJDzyv2OQ7KGx1jyd2/SWz:1WmLr2OtSrzzt42OQ7KGx1jCWR2b+RcU","tlshash":"2e5221e144811299b0278721d6dc7eba32f88d43e5630daef257381f874c6dba2b6647","first_seen":"2023-04-05T06:05:22Z","last_seen":"2026-06-17T17:45:27.079347Z","times_seen":6590,"resource_available":false,"data":null}},"time_used":322,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":321,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zz314.downza.cn/softbaike/PCsoft/2016-09-22/69a808c953d8cf18a00b646cacf8d792.png","fqdn":"zz314.downza.cn","domain":"downza.cn","tld":"cn"},"ip":{"addr":"116.153.39.131","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.downza.cn/soft/27933.html","date":"2026-02-09T10:40:26.101Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zz314.downza.cn","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Sat, 17 Jan 2026 00:00:00 GMT","end":"Fri, 17 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"B5:A8:10:C3:A9:D4:76:FC:F4:79:44:C2:A6:E2:15:3E:AF:B6:C6:2F","sha256":"DD:95:3F:93:75:AA:52:73:B4:C6:A7:79:71:FD:05:06:D4:44:57:E1:A7:A7:9B:59:87:70:10:08:59:44:1F:53"}}},"request":{"raw":"GET /softbaike/PCsoft/2016-09-22/69a808c953d8cf18a00b646cacf8d792.png HTTP/1.1\r\nHost: zz314.downza.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.downza.cn/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 09 Feb 2026 10:40:42 GMT\r\nContent-Type: image/png\r\nContent-Length: 33537\r\nConnection: keep-alive\r\nServer: openresty\r\nx-reserved: amazon, aws and amazon web services are trademarks or registered trademarks of Amazon Technologies, Inc\r\nCloudServiceDiscount: CDN\r\nx-amz-request-id: 0000019720B6F99A905680B30FDDDF29\r\nContent-MD5: w/6aaT4yetRY4PcSYFMGZQ==\r\nETag: \"c3fe9a693e327ad458e0f71260530665\"\r\nLast-Modified: Wed, 03 Apr 2019 04:29:21 GMT\r\nx-amz-meta-md5chksum: c3fe9a693e327ad458e0f71260530665\r\nx-amz-tagging-count: 0\r\nx-amz-id-2: 32AAAQAAEAABAAAQAAEAABAAAQAAEAABCTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA\r\nX-CCDN-Expires: 9502909\r\nvia: CHN-JXnanchang-AREACUCC1-CACHE19[66],CHN-JXnanchang-AREACUCC1-CACHE30[29,TCP_MISS,63],CHN-JSwuxi-GLOBAL2-CACHE113[9],CHN-JSwuxi-GLOBAL2-CACHE98[0,TCP_HIT,3]\r\nx-hcs-proxy-type: 1\r\nX-CCDN-CacheTTL: 31536000\r\nX-CCDN-REQ-ID-46B1: 72cf2bd5099d21b05fa8eb8917761f1e\r\nAge: 1\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":33537,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 525 x 320, 8-bit/color RGBA, non-interlaced","md5":"c3fe9a693e327ad458e0f71260530665","sha1":"2b9fc99361705ab850639c7e270ae77b1bc745e8","sha256":"c3a2518d30a6dfe9102b34cb1619dd46ea734aececa3a7d635a83f007e238afc","sha512":"6f0ad0b188457c9d65fd3ab6b02a22ea918712efaf8bbbc785cd82e1ce1fbe32bb06ce2048a5d711b2f77651c3c2a6bccd4a09b055f081d7bdc1d97ba2c13991","ssdeep":"768:3OKF7U6YPdHT5DKwKUxZUMiA7FCp9cO/OPQx5fH:3eZPd9uwFxZUXARCP97jH","tlshash":"22e2e1202e2612f7996f2c4354ddb51cb0f139af8b023894d66ace04daa64ddd88bd68","first_seen":"2026-02-09T10:41:31.997552Z","last_seen":"2026-02-09T10:41:31.997552Z","times_seen":1,"resource_available":false,"data":null}},"time_used":16813,"timings":{"blocked":16404,"dns":0,"connect":0,"send":0,"wait":360,"receive":49,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"127.0.0.1:28317/get_thunder_version/?thunderPid=11111\u0026sign=f1bd42598d63f741eb48dbcaa8704e5a","fqdn":"127.0.0.1","domain":"127.0.0.1","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.downza.cn/soft/27933.html","date":"2026-02-09T10:40:40.971Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /get_thunder_version/?thunderPid=11111\u0026sign=f1bd42598d63f741eb48dbcaa8704e5a HTTP/1.1\r\nHost: 127.0.0.1:28317\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/javascript, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded\r\nOrigin: https://www.downza.cn\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-18T01:31:21.233037Z","times_seen":16497762,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"res.njxzwh.com/downza/pc/v2023/images/icon-down3.png","fqdn":"res.njxzwh.com","domain":"njxzwh.com","tld":"com"},"ip":{"addr":"113.240.117.108","port":443,"asn":63835,"as":"No.293,Wanbao Avenue","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.downza.cn/soft/27933.html","date":"2026-02-09T10:40:41.109Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"res.njxzwh.com","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Sun, 04 Jan 2026 00:00:00 GMT","end":"Sat, 04 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"CD:91:C8:DC:75:28:A2:68:09:8B:A1:E3:80:02:F5:FA:FD:F0:C2:E6","sha256":"4D:AF:FF:F9:76:6E:B8:BD:6E:50:11:7E:3A:D1:3E:70:7D:9D:6B:2E:56:2C:34:46:80:3E:A1:C8:01:14:CB:61"}}},"request":{"raw":"GET /downza/pc/v2023/images/icon-down3.png HTTP/1.1\r\nHost: res.njxzwh.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://res.njxzwh.com/downza/pc/v2023/css/detail.css?2026020913\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 09 Feb 2026 10:40:41 GMT\r\nContent-Type: image/png\r\nContent-Length: 1101\r\nConnection: keep-alive\r\nServer: openresty\r\nx-reserved: amazon, aws and amazon web services are trademarks or registered trademarks of Amazon Technologies, Inc\r\nCloudServiceDiscount: CDN\r\nx-amz-request-id: 0000019A347CC44F9747A011814E229B\r\nETag: \"53cc3fdc4ee1f6bcf026487033306c6c\"\r\nLast-Modified: Thu, 30 Oct 2025 09:32:39 GMT\r\nx-amz-id-2: 36AAAQAAEAABAAAQAAEAABAAAQAAEAABAAAaI=AAAAAAAAAAAAAAAAAAAAAAAAAA\r\nX-CCDN-Expires: 1553682\r\nvia: CHN-HNchangsha-AREACT1-CACHE9[3],CHN-HNchangsha-AREACT1-CACHE39[0,TCP_HIT,0],CHN-JSwuxi-GLOBAL2-CACHE77[6],CHN-JSwuxi-GLOBAL2-CACHE65[0,TCP_HIT,4]\r\nx-hcs-proxy-type: 1\r\nX-CCDN-CacheTTL: 2592000\r\nnginx-hit: 1\r\nAge: 1038338\r\nAccept-Ranges: bytes\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: OPTION,GET\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1101,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 26 x 26, 8-bit/color RGBA, non-interlaced","md5":"53cc3fdc4ee1f6bcf026487033306c6c","sha1":"db4d19d0902dbbc2f8c0d97f83bb93986a8f8660","sha256":"e669089b250199f1fc73cb6f341be272d72148183dc509d09d5e2a72efb74687","sha512":"773afc3f1cbb4e5e5d1aec3c26871ba4ea778fa21fb9e9b040876f09a94b60eb6fbb2458925d7b6172167e4a19a1d526da9b3acced85ee68a5d17195f164e6d1","ssdeep":"","tlshash":"4f11f9d17136809ca5b451fb4aeac0d89e8320bce45328603446d3f20493fcc271dfb2","first_seen":"2023-07-03T04:23:05Z","last_seen":"2026-06-06T23:56:38.341777Z","times_seen":43,"resource_available":false,"data":null}},"time_used":390,"timings":{"blocked":128,"dns":0,"connect":0,"send":0,"wait":259,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"res.njxzwh.com/redirect/dist/bundle.js?2026020913","fqdn":"res.njxzwh.com","domain":"njxzwh.com","tld":"com"},"ip":{"addr":"113.240.117.108","port":443,"asn":63835,"as":"No.293,Wanbao Avenue","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.downza.cn/soft/27933.html","date":"2026-02-09T10:40:26.058Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"res.njxzwh.com","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Sun, 04 Jan 2026 00:00:00 GMT","end":"Sat, 04 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"CD:91:C8:DC:75:28:A2:68:09:8B:A1:E3:80:02:F5:FA:FD:F0:C2:E6","sha256":"4D:AF:FF:F9:76:6E:B8:BD:6E:50:11:7E:3A:D1:3E:70:7D:9D:6B:2E:56:2C:34:46:80:3E:A1:C8:01:14:CB:61"}}},"request":{"raw":"GET /redirect/dist/bundle.js?2026020913 HTTP/1.1\r\nHost: res.njxzwh.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.downza.cn/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 09 Feb 2026 10:40:28 GMT\r\nContent-Type: text/javascript\r\nContent-Length: 34130\r\nConnection: keep-alive\r\nServer: openresty\r\nx-reserved: amazon, aws and amazon web services are trademarks or registered trademarks of Amazon Technologies, Inc\r\nCloudServiceDiscount: CDN\r\nx-amz-request-id: 0000019C40C55C6997642880A2D72545\r\nETag: \"a15b12ecfca4ad041ce999d9739fcff0\"\r\nLast-Modified: Fri, 24 May 2024 09:26:41 GMT\r\nx-amz-id-2: 36AAAQAAEAABAAAQAAEAABAAAQAAEAABAAAaI=AAAAAAAAAAAAAAAAAAAAAAAAAA\r\nX-CCDN-Expires: 66166\r\nvia: CHN-HNchangsha-AREACT1-CACHE53[14],CHN-HNchangsha-AREACT1-CACHE15[0,TCP_HIT,12],CHN-JSwuxi-GLOBAL2-CACHE84[5],CHN-JSwuxi-GLOBAL2-CACHE71[0,TCP_HIT,1]\r\nx-hcs-proxy-type: 1\r\nX-CCDN-CacheTTL: 86400\r\nnginx-hit: 1\r\nAge: 20234\r\nAccept-Ranges: bytes\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: OPTION,GET\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":34130,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (34126), with no line terminators","md5":"a15b12ecfca4ad041ce999d9739fcff0","sha1":"9543940c6f82d897bc5b6fb9f149303fbc3c8fa0","sha256":"bb245e02ce438ad0655fefc83d386cc5a24dfede2fa9a16176e05b0da6e55d51","sha512":"a831c09652bbbfb50d8396d51f004391a08e28c79bf526a22ee26f050e8d37b31bc78a3f09ae24f95fd61969dea0aabab447fd25f9421bc2a50ffcbac7f7a169","ssdeep":"192:IX+hkzcGGB/qrc2T+tgdiz2PhfN793/uQrbO++ljrxFVD4yggOyz:IX+esGc2OzYDuQrijrxFFz","tlshash":"2ce286ddabce4d649a48dbccb2fd660cb6031ed3d5c5589bc20dac9967322e02b1435e","first_seen":"2024-12-25T04:18:22.998709Z","last_seen":"2026-06-06T23:56:38.288349Z","times_seen":144,"resource_available":true,"data":null}},"time_used":3221,"timings":{"blocked":-1,"dns":1967,"connect":267,"send":0,"wait":361,"receive":263,"ssl":363},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zz314.downza.cn/softbaike/PCsoft/2016-12-27/94323eca890465056be80f22a777541a.jpg","fqdn":"zz314.downza.cn","domain":"downza.cn","tld":"cn"},"ip":{"addr":"116.153.39.131","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.downza.cn/soft/27933.html","date":"2026-02-09T10:40:26.479Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zz314.downza.cn","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Sat, 17 Jan 2026 00:00:00 GMT","end":"Fri, 17 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"B5:A8:10:C3:A9:D4:76:FC:F4:79:44:C2:A6:E2:15:3E:AF:B6:C6:2F","sha256":"DD:95:3F:93:75:AA:52:73:B4:C6:A7:79:71:FD:05:06:D4:44:57:E1:A7:A7:9B:59:87:70:10:08:59:44:1F:53"}}},"request":{"raw":"GET /softbaike/PCsoft/2016-12-27/94323eca890465056be80f22a777541a.jpg HTTP/1.1\r\nHost: zz314.downza.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.downza.cn/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 09 Feb 2026 10:40:42 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 46597\r\nConnection: keep-alive\r\nServer: openresty\r\nx-reserved: amazon, aws and amazon web services are trademarks or registered trademarks of Amazon Technologies, Inc\r\nCloudServiceDiscount: CDN\r\nx-amz-request-id: 000001987F2494FA97A74C0E1CBCB06E\r\nContent-MD5: AJz9cq40YRPq8Cs06MFMyg==\r\nETag: \"009cfd72ae346113eaf02b34e8c14cca\"\r\nLast-Modified: Wed, 03 Apr 2019 04:58:09 GMT\r\nx-amz-meta-md5chksum: 009cfd72ae346113eaf02b34e8c14cca\r\nx-amz-tagging-count: 0\r\nx-amz-id-2: 36AAAQAAEAABAAAQAAEAABAAAQAAEAABAAAaI=AAAAAAAAAAAAAAAAAAAAAAAAAA\r\nX-CCDN-Expires: 29574057\r\nvia: CHN-JXnanchang-AREACUCC1-CACHE19[8],CHN-JXnanchang-AREACUCC1-CACHE31[0,TCP_HIT,3],CHN-JSwuxi-GLOBAL2-CACHE111[16],CHN-JSwuxi-GLOBAL2-CACHE31[0,TCP_HIT,11]\r\nx-hcs-proxy-type: 1\r\nX-CCDN-CacheTTL: 31536000\r\nX-CCDN-REQ-ID-46B1: 12faea47457378500285bf3a4b85bad0\r\nnginx-hit: 1\r\nAge: 1961943\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":46597,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CS5 Windows, datetime=2016:12:27 16:04:20], progressive, precision 8, 244x244, components 3","md5":"009cfd72ae346113eaf02b34e8c14cca","sha1":"142b7dfe2288eb02614baa3e1089a5b536b22bc5","sha256":"55d8103b610e27e95ea74493dc9da665ac2bf86d90dae7114c4c818d2b2fead4","sha512":"9b5c26662389e7758c7bed3eaf4f19070a7e135c6ac8ad57423bbccb83b6f55bdab6d130ad60b486c756671b2bd04706b45e5d86233b16313f874818a5dbdbbb","ssdeep":"768:CTYV5grdYV5geK1YVHPDlMfqTXjAItzOZcgRlHA8QyRpQzrf2GQ+ZPBcZ8H:Z5r5rW6HJMfUzi5RlHTQyRpsz2GQ+1BZ","tlshash":"3223f151e7056f52edd30879e09bf1f79f35aa1c90836b17708c7789b3392a29e09301","first_seen":"2025-06-15T16:39:48.38276Z","last_seen":"2026-06-06T22:27:36.448867Z","times_seen":32,"resource_available":false,"data":null}},"time_used":16025,"timings":{"blocked":15629,"dns":0,"connect":0,"send":0,"wait":292,"receive":104,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img3.downza.cn/thumb/201806/7768d8d93de388d59570bc4f7db5a06f-50x50.jpg","fqdn":"img3.downza.cn","domain":"downza.cn","tld":"cn"},"ip":{"addr":"121.22.232.168","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.downza.cn/soft/27933.html","date":"2026-02-09T10:40:26.073Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img3.downza.cn","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Thu, 15 Jan 2026 00:00:00 GMT","end":"Wed, 15 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"4D:77:54:39:09:D0:ED:EE:10:10:0E:82:47:48:45:9A:1F:AC:36:7A","sha256":"86:A8:1B:F9:16:89:4D:41:B2:D3:65:4D:15:83:34:E8:F4:AC:0C:46:D1:F5:0A:AE:99:D0:B7:33:F3:EE:5A:9B"}}},"request":{"raw":"GET /thumb/201806/7768d8d93de388d59570bc4f7db5a06f-50x50.jpg HTTP/1.1\r\nHost: img3.downza.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 09 Feb 2026 10:40:41 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 2239\r\nConnection: keep-alive\r\nServer: openresty\r\nx-reserved: amazon, aws and amazon web services are trademarks or registered trademarks of Amazon Technologies, Inc\r\nCloudServiceDiscount: CDN\r\nx-amz-request-id: 0000019BCBCAC81D9006087D9999997D\r\nETag: \"f50d01a93e1af091a2d1e568b1920149\"\r\nLast-Modified: Thu, 07 Nov 2019 04:08:31 GMT\r\nx-amz-tagging-count: 0\r\nx-amz-id-2: 36AAAQAAEAABAAAQAAEAABAAAQAAEAABAAAaI=AAAAAAAAAAAAAAAAAAAAAAAAAA\r\nvia: CHN-HEqinhuangdao-AREACUCC1-CACHE15[36],CHN-HEqinhuangdao-AREACUCC1-CACHE28[0,TCP_HIT,34],CHN-TJ-GLOBAL6-CACHE103[13],CHN-TJ-GLOBAL6-CACHE3[0,TCP_HIT,12]\r\nx-hcs-proxy-type: 1\r\nX-CCDN-CacheTTL: 31536000\r\nnginx-hit: 1\r\nAge: 1842195\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":2239,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 50x50, components 3","md5":"f50d01a93e1af091a2d1e568b1920149","sha1":"2f37ca486f6c75b9d4b20d3e8a5676e1418baf12","sha256":"ce631d38e622ec767f4094de35ad816a06f938f0608ddb0c6f04f629fcbc4e75","sha512":"362514cc4338e0b26479ee149fc5e5647b080894617ad2521f45b8363bdfd6cf6933d4514c8e8ce88153302356a10e274e4878c0934c2d10a1ae1ecb1285ea15","ssdeep":"","tlshash":"c5410967098fccfedfe841316092d88d04a51c3880937ab25e054dfc32d11a7ad8e31c","first_seen":"2026-02-09T10:41:32.005901Z","last_seen":"2026-02-09T10:41:32.005901Z","times_seen":1,"resource_available":false,"data":null}},"time_used":15990,"timings":{"blocked":15712,"dns":0,"connect":0,"send":0,"wait":278,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zz314.downza.cn/softbaike/PCsoft/2016-12-27/ab8dd768b50bb719ba13770d903e2284.png","fqdn":"zz314.downza.cn","domain":"downza.cn","tld":"cn"},"ip":{"addr":"116.153.39.131","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.downza.cn/soft/27933.html","date":"2026-02-09T10:40:26.482Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zz314.downza.cn","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Sat, 17 Jan 2026 00:00:00 GMT","end":"Fri, 17 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"B5:A8:10:C3:A9:D4:76:FC:F4:79:44:C2:A6:E2:15:3E:AF:B6:C6:2F","sha256":"DD:95:3F:93:75:AA:52:73:B4:C6:A7:79:71:FD:05:06:D4:44:57:E1:A7:A7:9B:59:87:70:10:08:59:44:1F:53"}}},"request":{"raw":"GET /softbaike/PCsoft/2016-12-27/ab8dd768b50bb719ba13770d903e2284.png HTTP/1.1\r\nHost: zz314.downza.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.downza.cn/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 09 Feb 2026 10:40:42 GMT\r\nContent-Type: image/png\r\nContent-Length: 11045\r\nConnection: keep-alive\r\nServer: openresty\r\nx-reserved: amazon, aws and amazon web services are trademarks or registered trademarks of Amazon Technologies, Inc\r\nCloudServiceDiscount: CDN\r\nx-amz-request-id: 000001941721158597A924ABEC4393F8\r\nContent-MD5: gDjQWJGTLj1FX79v2pycLg==\r\nETag: \"8038d05891932e3d455fbf6fda9c9c2e\"\r\nLast-Modified: Wed, 03 Apr 2019 04:58:09 GMT\r\nx-amz-meta-md5chksum: 8038d05891932e3d455fbf6fda9c9c2e\r\nx-amz-tagging-count: 0\r\nx-amz-id-2: 32AAAQAAEAABAAAQAAEAABAAAQAAEAABCSAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA\r\nX-CCDN-Expires: 29477161\r\nvia: CHN-JXnanchang-AREACUCC1-CACHE6[11],CHN-JXnanchang-AREACUCC1-CACHE59[0,TCP_HIT,8],CHN-JSwuxi-GLOBAL2-CACHE71[24],CHN-JSwuxi-GLOBAL2-CACHE67[0,TCP_HIT,15],CHN-SH-GLOBAL4-CACHE31[10],CHN-SH-GLOBAL4-CACHE144[0,TCP_HIT,6]\r\nx-hcs-proxy-type: 1\r\nX-CCDN-CacheTTL: 31536000\r\nX-CCDN-REQ-ID-46B1: 1580e0401af710e93f0c168a1ba4606c\r\nnginx-hit: 1\r\nAge: 2058839\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":11045,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 72 x 72, 8-bit/color RGBA, non-interlaced","md5":"8038d05891932e3d455fbf6fda9c9c2e","sha1":"b3c246db7a6ec2a289ff2df19e01e59385bda9a7","sha256":"613e023c3db5a7da1446098b7e90d4cb91028efdf25af4b3f296deff93c7651a","sha512":"4105f6157678320bf09b802ed12622d4381cd37231d2ce2a12e9adbdd6af03286c7b00b7ef54b3235c6ea29ae6961e67fa8edd98168d4216b2dafb3ceea75359","ssdeep":"192:9SHIIHUCD4waxwnVQsn3TfOIvYfFRdx5bhelMGT4I1TcYJRUzDoKQtMCPD+o:850w/fn3T2IQfFRP5FeWSJcY8zotM8DF","tlshash":"ac32c0eaa284063d38020e263466feca0acef162d34b4ec6defde21d846d4f4149c707","first_seen":"2025-06-15T16:39:48.391688Z","last_seen":"2026-06-06T22:27:36.471002Z","times_seen":34,"resource_available":false,"data":null}},"time_used":16108,"timings":{"blocked":15792,"dns":0,"connect":0,"send":0,"wait":315,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img3.downza.cn/download/202403/160314-65fa98422d9e7.jpg","fqdn":"img3.downza.cn","domain":"downza.cn","tld":"cn"},"ip":{"addr":"121.22.232.168","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.downza.cn/soft/27933.html","date":"2026-02-09T10:40:26.599Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img3.downza.cn","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Thu, 15 Jan 2026 00:00:00 GMT","end":"Wed, 15 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"4D:77:54:39:09:D0:ED:EE:10:10:0E:82:47:48:45:9A:1F:AC:36:7A","sha256":"86:A8:1B:F9:16:89:4D:41:B2:D3:65:4D:15:83:34:E8:F4:AC:0C:46:D1:F5:0A:AE:99:D0:B7:33:F3:EE:5A:9B"}}},"request":{"raw":"GET /download/202403/160314-65fa98422d9e7.jpg HTTP/1.1\r\nHost: img3.downza.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 09 Feb 2026 10:40:43 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 6948\r\nConnection: keep-alive\r\nServer: openresty\r\nx-reserved: amazon, aws and amazon web services are trademarks or registered trademarks of Amazon Technologies, Inc\r\nCloudServiceDiscount: CDN\r\nx-amz-request-id: 0000019BDFA1507E90167994454969FB\r\nETag: \"2550a5f6e3c732940735d0b642a453fa\"\r\nLast-Modified: Wed, 20 Mar 2024 08:03:14 GMT\r\nx-amz-id-2: 36AAAQAAEAABAAAQAAEAABAAAQAAEAABAAAaI=AAAAAAAAAAAAAAAAAAAAAAAAAA\r\nvia: CHN-HEqinhuangdao-AREACUCC1-CACHE21[12],CHN-HEqinhuangdao-AREACUCC1-CACHE21[0,TCP_HIT,8],CHN-TJ-GLOBAL6-CACHE99[3],CHN-TJ-GLOBAL6-CACHE146[0,TCP_HIT,3]\r\nx-hcs-proxy-type: 1\r\nX-CCDN-CacheTTL: 31536000\r\nnginx-hit: 1\r\nAge: 1443405\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":6948,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 256x256, components 3","md5":"2550a5f6e3c732940735d0b642a453fa","sha1":"ea0229916695d8b11ed5153b09a639987717b0ea","sha256":"5c0ec76089b035e8dd04fe339fbbaea2b9b5f087988a10f2f8723f028f168bd2","sha512":"cea64b16b155ac59c35f92eaec7415d9cac04f8f88c1d3e97a3c26249829937a433ebcb0fad0bd72431d5e04ebc45a0d1a29a3b63cb311019145b984d43d0fd4","ssdeep":"192:WKFsvrzFYgDTfyCYRPU6Su2JSftd/q4bz:1FsvvWrxVkwtdS4bz","tlshash":"76e19d2b2e0caf1127274665f7171edf598abf8929243f7b14020de8af30c3460ac359","first_seen":"2025-06-15T16:39:48.285789Z","last_seen":"2026-06-06T23:56:38.287826Z","times_seen":27,"resource_available":false,"data":null}},"time_used":16912,"timings":{"blocked":16654,"dns":0,"connect":0,"send":0,"wait":257,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"9j7eaq.yzhy20.cn/res/downza/js/qrcode.js?2026020913","fqdn":"9j7eaq.yzhy20.cn","domain":"yzhy20.cn","tld":"cn"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.downza.cn/soft/27933.html","date":"2026-02-09T10:40:26.058Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /res/downza/js/qrcode.js?2026020913 HTTP/1.1\r\nHost: 9j7eaq.yzhy20.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.downza.cn/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-18T01:31:21.233037Z","times_seen":16497762,"resource_available":true,"data":null}},"time_used":7859,"timings":{"blocked":7859,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zz314.downza.cn/softbaike/PCsoft/2016-09-22/6f30284889bbaf9bde3d420f63b5d263.png","fqdn":"zz314.downza.cn","domain":"downza.cn","tld":"cn"},"ip":{"addr":"116.153.39.131","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.downza.cn/soft/27933.html","date":"2026-02-09T10:40:26.102Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zz314.downza.cn","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Sat, 17 Jan 2026 00:00:00 GMT","end":"Fri, 17 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"B5:A8:10:C3:A9:D4:76:FC:F4:79:44:C2:A6:E2:15:3E:AF:B6:C6:2F","sha256":"DD:95:3F:93:75:AA:52:73:B4:C6:A7:79:71:FD:05:06:D4:44:57:E1:A7:A7:9B:59:87:70:10:08:59:44:1F:53"}}},"request":{"raw":"GET /softbaike/PCsoft/2016-09-22/6f30284889bbaf9bde3d420f63b5d263.png HTTP/1.1\r\nHost: zz314.downza.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.downza.cn/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 09 Feb 2026 10:40:41 GMT\r\nContent-Type: image/png\r\nContent-Length: 48105\r\nConnection: keep-alive\r\nServer: openresty\r\nx-reserved: amazon, aws and amazon web services are trademarks or registered trademarks of Amazon Technologies, Inc\r\nCloudServiceDiscount: CDN\r\nx-amz-request-id: 00000197A4B2A1D39047BF40A4C9FAED\r\nContent-MD5: fiBZchjPIPWdi4dfBMG82g==\r\nETag: \"7e20597218cf20f59d8b875f04c1bcda\"\r\nLast-Modified: Wed, 03 Apr 2019 04:29:21 GMT\r\nx-amz-meta-md5chksum: 7e20597218cf20f59d8b875f04c1bcda\r\nx-amz-tagging-count: 0\r\nx-amz-id-2: 36AAAQAAEAABAAAQAAEAABAAAQAAEAABAAAaI=AAAAAAAAAAAAAAAAAAAAAAAAAA\r\nX-CCDN-Expires: 29687368\r\nvia: CHN-JXnanchang-AREACUCC1-CACHE19[43],CHN-JXnanchang-AREACUCC1-CACHE4[0,TCP_HIT,41],CHN-JSwuxi-GLOBAL2-CACHE94[9],CHN-JSwuxi-GLOBAL2-CACHE103[0,TCP_HIT,3]\r\nx-hcs-proxy-type: 1\r\nX-CCDN-CacheTTL: 31536000\r\nX-CCDN-REQ-ID-46B1: 38da0ceb1f25b1cc41bb18aa205167e7\r\nnginx-hit: 1\r\nAge: 1848632\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":48105,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 337 x 543, 8-bit/color RGBA, non-interlaced","md5":"7e20597218cf20f59d8b875f04c1bcda","sha1":"0d1e67c4131a4e26eb15443ee8a5205efdcf32d1","sha256":"39c8800ee6633a6f3f275f0d046129eb39bfc14c534193889b062700c8e7c093","sha512":"08c8194b7608dc4e0c303fe7cde5042178dad4c3f1205cace34a70a0ff32ab676b2dae45f640e18df6ab845fb3e4c9b3fe314b6b0342576958a8202e52b46df9","ssdeep":"768:D2ljjt87jA8prJ1JIu4B11km2VwGL/l5GhDZT3HVdOTC9mz7mbPyvi6VMfUt3W:DWjj0VHGuOUmKLd5mZT3HrGN7mcimbW","tlshash":"482302f8b2b540221926aa5633a800d17f39b4b70b8f73da3a1eb4a914df434f74d759","first_seen":"2026-02-09T10:41:32.012121Z","last_seen":"2026-02-09T10:41:32.012121Z","times_seen":1,"resource_available":false,"data":null}},"time_used":16304,"timings":{"blocked":14816,"dns":1,"connect":307,"send":0,"wait":447,"receive":379,"ssl":353},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img3.downza.cn/download/202008/184751-5f3125d72c7da.jpg","fqdn":"img3.downza.cn","domain":"downza.cn","tld":"cn"},"ip":{"addr":"121.22.232.168","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.downza.cn/soft/27933.html","date":"2026-02-09T10:40:26.591Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img3.downza.cn","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Thu, 15 Jan 2026 00:00:00 GMT","end":"Wed, 15 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"4D:77:54:39:09:D0:ED:EE:10:10:0E:82:47:48:45:9A:1F:AC:36:7A","sha256":"86:A8:1B:F9:16:89:4D:41:B2:D3:65:4D:15:83:34:E8:F4:AC:0C:46:D1:F5:0A:AE:99:D0:B7:33:F3:EE:5A:9B"}}},"request":{"raw":"GET /download/202008/184751-5f3125d72c7da.jpg HTTP/1.1\r\nHost: img3.downza.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 09 Feb 2026 10:40:43 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 50299\r\nConnection: keep-alive\r\nServer: openresty\r\nx-reserved: amazon, aws and amazon web services are trademarks or registered trademarks of Amazon Technologies, Inc\r\nCloudServiceDiscount: CDN\r\nx-amz-request-id: 0000019BE0E182189058DA141A32B750\r\nETag: \"0f9c02de186fa64c4e55cf52b135d40d\"\r\nLast-Modified: Mon, 10 Aug 2020 10:47:51 GMT\r\nx-amz-id-2: 36AAAQAAEAABAAAQAAEAABAAAQAAEAABAAAaI=AAAAAAAAAAAAAAAAAAAAAAAAAA\r\nvia: CHN-HEqinhuangdao-AREACUCC1-CACHE6[7],CHN-HEqinhuangdao-AREACUCC1-CACHE28[0,TCP_HIT,5],CHN-TJ-GLOBAL6-CACHE45[143],CHN-TJ-GLOBAL6-CACHE138[87,TCP_MISS,141]\r\nx-hcs-proxy-type: 1\r\nX-CCDN-CacheTTL: 31536000\r\nnginx-hit: 1\r\nAge: 1629209\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":50299,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=6, xresolution=86, yresolution=94, resolutionunit=2, software=www.meitu.com, datetime=2016:11:21 17:05:01], baseline, precision 8, 240x240, components 3","md5":"0f9c02de186fa64c4e55cf52b135d40d","sha1":"3dc5f67a92715a984456da9d6be6307fdc0966b4","sha256":"9cd6588a757388b195489bf7815382080b2efc7c6627cd0049a14fe39fb319e3","sha512":"8c7a94e7ca6f877657081ed173aff5e0e36f9bc76e98c51cd3cfc3ef97877026b891aa9c71e65bb6b1e17ff87e614f4d70a3c9fbb8b5f0c6190e7e11aee4d33c","ssdeep":"1536:9HbA7Vb1lKZVD2fmrKZj+SK8yqvq/ObqF4rV1:NA7V+ZVCerKNG8yqSL451","tlshash":"2c33021afe31ce9afa4f675f488d969351a41680d1c34b1931009cf1e7e085da632bfd","first_seen":"2025-02-11T04:22:13.930528Z","last_seen":"2026-06-06T23:56:38.286887Z","times_seen":31,"resource_available":false,"data":null}},"time_used":16722,"timings":{"blocked":16327,"dns":0,"connect":0,"send":0,"wait":297,"receive":98,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img3.downza.cn/download/202110/135705-616e5e310726f.jpg","fqdn":"img3.downza.cn","domain":"downza.cn","tld":"cn"},"ip":{"addr":"121.22.232.168","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.downza.cn/soft/27933.html","date":"2026-02-09T10:40:26.598Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img3.downza.cn","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Thu, 15 Jan 2026 00:00:00 GMT","end":"Wed, 15 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"4D:77:54:39:09:D0:ED:EE:10:10:0E:82:47:48:45:9A:1F:AC:36:7A","sha256":"86:A8:1B:F9:16:89:4D:41:B2:D3:65:4D:15:83:34:E8:F4:AC:0C:46:D1:F5:0A:AE:99:D0:B7:33:F3:EE:5A:9B"}}},"request":{"raw":"GET /download/202110/135705-616e5e310726f.jpg HTTP/1.1\r\nHost: img3.downza.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 09 Feb 2026 10:40:43 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 41767\r\nConnection: keep-alive\r\nServer: openresty\r\nx-reserved: amazon, aws and amazon web services are trademarks or registered trademarks of Amazon Technologies, Inc\r\nCloudServiceDiscount: CDN\r\nx-amz-request-id: 0000019BA817A1D69006098230E2E717\r\nETag: \"1b0dc7ad3cd1e1a0b8bbd7e675b77f29\"\r\nLast-Modified: Tue, 19 Oct 2021 05:57:05 GMT\r\nx-amz-id-2: 36AAAQAAEAABAAAQAAEAABAAAQAAEAABAAAaI=AAAAAAAAAAAAAAAAAAAAAAAAAA\r\nvia: CHN-HEqinhuangdao-AREACUCC1-CACHE15[14],CHN-HEqinhuangdao-AREACUCC1-CACHE2[0,TCP_HIT,9],CHN-TJ-GLOBAL6-CACHE14[13],CHN-TJ-GLOBAL6-CACHE64[0,TCP_HIT,3]\r\nx-hcs-proxy-type: 1\r\nX-CCDN-CacheTTL: 31536000\r\nnginx-hit: 1\r\nAge: 2239579\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":41767,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1, software=www.meitu.com], baseline, precision 8, 200x200, components 3","md5":"1b0dc7ad3cd1e1a0b8bbd7e675b77f29","sha1":"ba7e194d09ad8a95f8a2ef054881e7d8da8904ea","sha256":"30767453387d23a4c5655f2a278778ad80f2ca3b406ce6653bee86f17e0e4e95","sha512":"32b5ed45484eb4507256313e65f2bf48fc4baed8f9c244fc597363bddb1f1ac002e8ca5323aefae846bbdb59a2c9714bb734be8a91b7450ea09b5f44038eec2a","ssdeep":"768:7O8IdlF5uiwaCc4hXFMYvNPgpaA/LtxbyvSEoJ565kZDrLI:7O8Coc4hHgYaLryvzoeaZLI","tlshash":"42130154479772a074e865c8f63d949b848ceb1438ce7e0c3804467ac2367d7e8d779d","first_seen":"2025-02-11T04:22:14.063334Z","last_seen":"2026-06-06T23:56:38.287339Z","times_seen":31,"resource_available":false,"data":null}},"time_used":16908,"timings":{"blocked":16552,"dns":0,"connect":0,"send":0,"wait":285,"receive":71,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.downza.cn/favicon.ico","fqdn":"www.downza.cn","domain":"downza.cn","tld":"cn"},"ip":{"addr":"218.11.0.26","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.downza.cn/soft/27933.html","date":"2026-02-09T10:40:35.410Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.downza.cn","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Wed, 14 Jan 2026 00:00:00 GMT","end":"Tue, 14 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C4:07:BD:CE:54:5E:05:CD:08:0F:F6:54:9B:2E:75:2F:B4:5F:A2:45","sha256":"67:0E:58:53:43:DC:CF:E6:39:80:FD:77:C9:F7:40:94:9F:A4:65:1F:7B:74:55:48:2C:3B:C5:A5:82:ED:BE:03"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: www.downza.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.downza.cn/soft/27933.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 09 Feb 2026 10:40:40 GMT\r\nContent-Type: image/x-icon\r\nContent-Length: 1587\r\nConnection: keep-alive\r\nServer: openresty\r\nLast-Modified: Tue, 18 Jul 2023 02:56:51 GMT\r\nETag: \"64b5ff73-633\"\r\nX-CCDN-Expires: 2558482\r\nvia: CHN-HEshijiazhuang-AREACUCC8-CACHE32[9],CHN-HEshijiazhuang-AREACUCC8-CACHE12[0,TCP_HIT,2],CHN-TJ-GLOBAL6-CACHE51[3],CHN-TJ-GLOBAL6-CACHE56[0,TCP_HIT,1]\r\nx-hcs-proxy-type: 1\r\nX-CCDN-CacheTTL: 2592000\r\nnginx-hit: 1\r\nAge: 33518\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":1587,"size_decoded":0,"mime_type":"image/x-icon","magic":"PNG image data, 39 x 38, 8-bit/color RGB, non-interlaced","md5":"878b63b0fbeb5f0764294ab553cc36a7","sha1":"09a225787b4af9c60f2ac92165b933acddc4cf4c","sha256":"b66e68a8ba526564aad39ba0c72630ae005671dd2f5541716fff68fd9c85de9c","sha512":"75438f1ccd8d473c8852982d90622940a52e268190239a38a070db8eec6493ce86b6b7815cfbcef4ec3e30f6b69a1e73dec992fa2eb19b27b794c6109ca41473","ssdeep":"","tlshash":"ef312a87414d9e5d466dd47ce127288cc9532fca303b7c4805f99a98153739e13eaf93","first_seen":"2023-05-11T21:10:33Z","last_seen":"2026-06-06T23:56:38.279488Z","times_seen":68,"resource_available":false,"data":null}},"time_used":5774,"timings":{"blocked":5508,"dns":0,"connect":0,"send":0,"wait":265,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"res-etl-ssl.xunlei.com/v1.0.0/xla.min.js","fqdn":"res-etl-ssl.xunlei.com","domain":"xunlei.com","tld":"com"},"ip":{"addr":"101.133.169.157","port":443,"asn":37963,"as":"Hangzhou Alibaba Advertising Co.,Ltd.","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.downza.cn/soft/27933.html","date":"2026-02-09T10:40:40.950Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.xunlei.com","organization":"Shenzhen Xunlei Networking Technologies Co., Ltd."},"issuer":{"commonName":"GlobalSign RSA OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 14 May 2025 07:30:49 GMT","end":"Mon, 15 Jun 2026 07:30:48 GMT"},"fingerprint":{"sha1":"BA:01:25:07:4E:8B:85:C9:0E:27:3E:A0:F8:CF:0A:2D:B8:75:24:81","sha256":"9D:CE:53:1C:87:46:BA:05:F3:28:6D:D0:99:B2:26:FB:59:C4:50:9C:A7:8D:5A:BA:5D:14:F7:17:30:4D:10:46"}}},"request":{"raw":"GET /v1.0.0/xla.min.js HTTP/1.1\r\nHost: res-etl-ssl.xunlei.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.downza.cn/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 09 Feb 2026 10:40:42 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 07 Jan 2019 08:10:53 GMT\r\netag: W/\"5c33098d-3805\"\r\nexpires: Mon, 09 Feb 2026 10:40:41 GMT\r\ncache-control: no-cache\r\nvia: a013099\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":14341,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (14305)","md5":"80b7b16ffa8b5d8f91a66841b3c572b6","sha1":"c90f3805a1f71be10f8e975db44722db5be34915","sha256":"f1a0b5c230e0005dc4f672cdb642e09b3323d1e3024b9979a3d4441b5e53942a","sha512":"b48170401a2205f335631d33783f7ec9aa01abddc97d6d32986958b4f95197dea875f0b268007a3ce7ff91dcad41e02c9fb95976ed3fbdba8da74bd535501a27","ssdeep":"192:fxWB6UHJsio0sFYPvCmzHK096O+aTtfHO9Gda6xw4L4fafp26Lr4T4S139AxPcqv:fxWBA0s6HB9HlqIa6xRM7EPc/PDNu","tlshash":"3f52c99a3364b49683a73ce41d6f3946e0b58c156858d490fb74c8e26874e6f833be3c","first_seen":"2023-03-10T11:33:41Z","last_seen":"2026-06-06T23:56:38.340739Z","times_seen":332,"resource_available":true,"data":null}},"time_used":1326,"timings":{"blocked":-1,"dns":284,"connect":243,"send":0,"wait":276,"receive":0,"ssl":522},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-09","alert":"Sinkholed","trigger":"res-etl-ssl.xunlei.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"at.alicdn.com/t/font_210132_a1ve2v7g9dq2gldi.css","fqdn":"at.alicdn.com","domain":"alicdn.com","tld":"com"},"ip":{"addr":"47.246.44.177","port":443,"asn":24429,"as":"Zhejiang Taobao Network Co.,Ltd","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.downza.cn/soft/27933.html","date":"2026-02-09T10:40:26.050Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tbcdn.cn","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Fri, 28 Nov 2025 03:07:13 GMT","end":"Sat, 18 Jul 2026 09:41:04 GMT"},"fingerprint":{"sha1":"01:40:62:EF:8C:E5:C1:8A:19:4C:8D:B6:F5:C2:24:7F:DC:C0:9C:8A","sha256":"60:3C:41:A0:78:62:E6:5E:82:F0:FA:CF:5C:C9:D3:22:E4:64:EE:1A:EE:C7:CC:BA:DD:25:08:90:6F:CC:C4:F2"}}},"request":{"raw":"GET /t/font_210132_a1ve2v7g9dq2gldi.css HTTP/1.1\r\nHost: at.alicdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.downza.cn/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: Tengine\r\ncontent-type: text/css\r\ndate: Thu, 30 Oct 2025 15:49:29 GMT\r\nvary: Accept-Encoding, Accept-Encoding, Accept-Encoding, Origin\r\nx-oss-request-id: 690389096AD0C431300D15E7\r\netag: W/\"0A48B5404E3D488867D76F4F011EE380\"\r\nlast-modified: Fri, 24 Dec 2021 20:05:53 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 6465900413072983531\r\nx-oss-storage-class: Standard\r\ncache-control: max-age=63072000\r\ncontent-md5: Cki1QE49SIhn129PAR7jgA==\r\nx-oss-server-time: 7\r\nvia: ens-cache23.l2de4[0,0,200-0,H], ens-cache12.l2de4[1,0], ens-cache20.se2[0,0,200-0,H], ens-cache9.se2[1,0]\r\nage: 8794257\r\nali-swift-global-savetime: 1761839369\r\nx-cache: HIT TCP_MEM_HIT dirn:-2:-2\r\nx-swift-savetime: Fri, 31 Oct 2025 18:20:33 GMT\r\nx-swift-cachetime: 62976536\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\neagleid: 2ff62c9d17706336266332934e\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]},{"name":"Tengine","description":"Tengine is a web server which is based on the Nginx HTTP server.","website":"https://tengine.taobao.org","common_platform_enumeration":"","icon":"Tengine.png","categories":["Web servers"]}],"data":{"size":21463,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (17895)","md5":"0a48b5404e3d488867d76f4f011ee380","sha1":"7132fe5922538950f7be3474e762f4339021c157","sha256":"fd217a4c4c5d4c49e3695189c05724a8bd9c7dc4b84f11286d3d9dcf58ef4756","sha512":"d144377b1d38432bd637b60c5910f040abb0182b3c1447a4361db91b6362737ed5485093e0c74873e760614c2c87a12c1c7a85c49b4b9340cb81845574db8a71","ssdeep":"384:kwBFuVZJXPqwZRiWxJCFsSYVd1mekIgS+NdKHN6ZdtRT85jATCXR:kOFuz3LJZ/LmxIlHNsdbT+jAGR","tlshash":"d4a26cf2987c19f55b14e4902713a7849f42b71a8a825c1be1072dcdf3e3209f693aec","first_seen":"2025-03-13T07:56:58.625954Z","last_seen":"2026-06-06T23:56:38.298072Z","times_seen":72,"resource_available":false,"data":null}},"time_used":1267,"timings":{"blocked":593,"dns":52,"connect":20,"send":0,"wait":43,"receive":0,"ssl":556},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zz314.downza.cn/softbaike/PCsoft/2016-12-27/268bbe1f092463ebf2bc8487491480c4.jpg","fqdn":"zz314.downza.cn","domain":"downza.cn","tld":"cn"},"ip":{"addr":"116.153.39.131","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.downza.cn/soft/27933.html","date":"2026-02-09T10:40:26.478Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zz314.downza.cn","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Sat, 17 Jan 2026 00:00:00 GMT","end":"Fri, 17 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"B5:A8:10:C3:A9:D4:76:FC:F4:79:44:C2:A6:E2:15:3E:AF:B6:C6:2F","sha256":"DD:95:3F:93:75:AA:52:73:B4:C6:A7:79:71:FD:05:06:D4:44:57:E1:A7:A7:9B:59:87:70:10:08:59:44:1F:53"}}},"request":{"raw":"GET /softbaike/PCsoft/2016-12-27/268bbe1f092463ebf2bc8487491480c4.jpg HTTP/1.1\r\nHost: zz314.downza.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.downza.cn/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 09 Feb 2026 10:40:41 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 22079\r\nConnection: keep-alive\r\nServer: openresty\r\nx-reserved: amazon, aws and amazon web services are trademarks or registered trademarks of Amazon Technologies, Inc\r\nCloudServiceDiscount: CDN\r\nx-amz-request-id: 000001992763C9CC90070F0C3D4149DF\r\nContent-MD5: y+KJjy6+YSDXYrmPJgGunQ==\r\nETag: \"cbe2898f2ebe6120d762b98f2601ae9d\"\r\nLast-Modified: Wed, 03 Apr 2019 04:58:09 GMT\r\nx-amz-meta-md5chksum: cbe2898f2ebe6120d762b98f2601ae9d\r\nx-amz-tagging-count: 0\r\nx-amz-id-2: 36AAAQAAEAABAAAQAAEAABAAAQAAEAABAAAaI=AAAAAAAAAAAAAAAAAAAAAAAAAA\r\nX-CCDN-Expires: 29472168\r\nvia: CHN-JXnanchang-AREACUCC1-CACHE62[20],CHN-JXnanchang-AREACUCC1-CACHE45[0,TCP_HIT,15],CHN-JSwuxi-GLOBAL2-CACHE30[11],CHN-JSwuxi-GLOBAL2-CACHE28[0,TCP_HIT,8]\r\nx-hcs-proxy-type: 1\r\nX-CCDN-CacheTTL: 31536000\r\nX-CCDN-REQ-ID-46B1: 27654d045f09b37f29ecbbff60797954\r\nnginx-hit: 1\r\nAge: 2063832\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":22079,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CS5 Windows, datetime=2016:12:27 09:26:21], baseline, precision 8, 150x150, components 3","md5":"cbe2898f2ebe6120d762b98f2601ae9d","sha1":"04f2f4b85b15a4b5d83d366a3e79d790ef566db5","sha256":"2fbd4adf5a90eec4435308c6ceaae1647564d2b9de3f1a153f06d01501355692","sha512":"bac008fe3bd2cac178abcb927bbe21782b7ad0cbcdd0177a06d144635cdfb58312fa9846bbde4542b069ec24f472c52d9fbb3a5839ad9a562cc13ca5ee40fd6b","ssdeep":"384:Prxfl1qiGxfl1tn1koBsB+6gsncwA1YTEXZQpV:Pr/c3/vn+zOGMiz","tlshash":"9aa29d2833409f32fada537a8912cc5397219d15936327c3be8c3a427f76bd15d2a693","first_seen":"2025-06-15T16:39:48.413244Z","last_seen":"2026-06-06T22:27:36.47397Z","times_seen":32,"resource_available":false,"data":null}},"time_used":15739,"timings":{"blocked":14440,"dns":1,"connect":307,"send":0,"wait":425,"receive":208,"ssl":354},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"res.njxzwh.com/downza/pc/v2023/js/public.js?2026020913","fqdn":"res.njxzwh.com","domain":"njxzwh.com","tld":"com"},"ip":{"addr":"113.240.117.108","port":443,"asn":63835,"as":"No.293,Wanbao Avenue","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.downza.cn/soft/27933.html","date":"2026-02-09T10:40:26.602Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"res.njxzwh.com","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Sun, 04 Jan 2026 00:00:00 GMT","end":"Sat, 04 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"CD:91:C8:DC:75:28:A2:68:09:8B:A1:E3:80:02:F5:FA:FD:F0:C2:E6","sha256":"4D:AF:FF:F9:76:6E:B8:BD:6E:50:11:7E:3A:D1:3E:70:7D:9D:6B:2E:56:2C:34:46:80:3E:A1:C8:01:14:CB:61"}}},"request":{"raw":"GET /downza/pc/v2023/js/public.js?2026020913 HTTP/1.1\r\nHost: res.njxzwh.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.downza.cn/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 09 Feb 2026 10:40:28 GMT\r\nContent-Type: text/javascript\r\nContent-Length: 1253\r\nConnection: keep-alive\r\nServer: openresty\r\nx-reserved: amazon, aws and amazon web services are trademarks or registered trademarks of Amazon Technologies, Inc\r\nCloudServiceDiscount: CDN\r\nx-amz-request-id: 0000019C40C55ABD9746EB012F7FC780\r\nETag: \"eda88714ebfd43d4e934a0a8cec072ac\"\r\nLast-Modified: Thu, 30 Oct 2025 09:32:43 GMT\r\nx-amz-id-2: 36AAAQAAEAABAAAQAAEAABAAAQAAEAABAAAaI=AAAAAAAAAAAAAAAAAAAAAAAAAA\r\nX-CCDN-Expires: 66539\r\nvia: CHN-HNchangsha-AREACT1-CACHE12[4],CHN-HNchangsha-AREACT1-CACHE18[0,TCP_HIT,2],CHN-JSwuxi-GLOBAL2-CACHE8[5],CHN-JSwuxi-GLOBAL2-CACHE18[0,TCP_HIT,2]\r\nx-hcs-proxy-type: 1\r\nX-CCDN-CacheTTL: 86400\r\nnginx-hit: 1\r\nAge: 19861\r\nAccept-Ranges: bytes\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: OPTION,GET\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":1253,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with CRLF line terminators","md5":"eda88714ebfd43d4e934a0a8cec072ac","sha1":"699b3f74fb9d75b838c54ae9327a06638714597b","sha256":"5b431ed61701ed4718f82518a545c5530bd00e6150d9bf2b2b57874362218800","sha512":"2349334d1427db374cb46e85c6794a31fc4e9560a70800206e4b9b501ce5e7f73ca61cb235ad841dd5d8a41cfabf089d5bb188be8e5af6355ab3ea76f14bfde8","ssdeep":"","tlshash":"8921c458e8a20295897fb3b1873f5204ff7a2837510347083deea4c40f70929a392eec","first_seen":"2025-02-11T04:22:13.832274Z","last_seen":"2026-06-06T23:56:38.320935Z","times_seen":64,"resource_available":true,"data":null}},"time_used":2551,"timings":{"blocked":2291,"dns":0,"connect":0,"send":0,"wait":260,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"res.njxzwh.com/downza/pc/v2023/images/logo_guide.png","fqdn":"res.njxzwh.com","domain":"njxzwh.com","tld":"com"},"ip":{"addr":"113.240.117.108","port":443,"asn":63835,"as":"No.293,Wanbao Avenue","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.downza.cn/soft/27933.html","date":"2026-02-09T10:40:41.007Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"res.njxzwh.com","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Sun, 04 Jan 2026 00:00:00 GMT","end":"Sat, 04 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"CD:91:C8:DC:75:28:A2:68:09:8B:A1:E3:80:02:F5:FA:FD:F0:C2:E6","sha256":"4D:AF:FF:F9:76:6E:B8:BD:6E:50:11:7E:3A:D1:3E:70:7D:9D:6B:2E:56:2C:34:46:80:3E:A1:C8:01:14:CB:61"}}},"request":{"raw":"GET /downza/pc/v2023/images/logo_guide.png HTTP/1.1\r\nHost: res.njxzwh.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://res.njxzwh.com/downza/pc/v2023/css/public.css?2026020913\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 09 Feb 2026 10:40:41 GMT\r\nContent-Type: image/png\r\nContent-Length: 3314\r\nConnection: keep-alive\r\nServer: openresty\r\nx-reserved: amazon, aws and amazon web services are trademarks or registered trademarks of Amazon Technologies, Inc\r\nCloudServiceDiscount: CDN\r\nx-amz-request-id: 0000019C07E617149058AB6346B690A2\r\nETag: \"7f6d17cbf20ab24096f9e76fa84d127e\"\r\nLast-Modified: Thu, 30 Oct 2025 09:32:41 GMT\r\nx-amz-id-2: 36AAAQAAEAABAAAQAAEAABAAAQAAEAABAAAaI=AAAAAAAAAAAAAAAAAAAAAAAAAA\r\nX-CCDN-Expires: 2187544\r\nvia: CHN-HNchangsha-AREACT1-CACHE53[5],CHN-HNchangsha-AREACT1-CACHE53[0,TCP_HIT,3],CHN-JSwuxi-GLOBAL2-CACHE43[4],CHN-JSwuxi-GLOBAL2-CACHE106[0,TCP_HIT,3]\r\nx-hcs-proxy-type: 1\r\nX-CCDN-CacheTTL: 2592000\r\nnginx-hit: 1\r\nAge: 404456\r\nAccept-Ranges: bytes\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: OPTION,GET\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":3314,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 167 x 51, 8-bit/color RGBA, non-interlaced","md5":"7f6d17cbf20ab24096f9e76fa84d127e","sha1":"7d03e0a56d2a53085fca2d8fa6431c2652c0ce2a","sha256":"f3555d4eb97ceb8814615e62e6a0f4bac0489f4e8496b39469fd61dd020776e5","sha512":"63286862e693ca09e2bf81f86eef196fab5340293beb80b566dbe2ac7f99cc1eb622746f5506e8beed29304f2b2a2d34566271371e3ecd0b64e5a9a73caa527e","ssdeep":"","tlshash":"eb614a5360348bf927fb677d4ebe15a2201a01bd12d80eda7ab8605ac348a1dd776730","first_seen":"2025-02-11T04:22:13.845713Z","last_seen":"2026-06-06T23:56:38.297514Z","times_seen":59,"resource_available":false,"data":null}},"time_used":280,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":279,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zz314.downza.cn/softbaike/PCsoft/2016-12-27/08d4dd0f159282d8f4723fc1214c264a.png","fqdn":"zz314.downza.cn","domain":"downza.cn","tld":"cn"},"ip":{"addr":"116.153.39.131","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.downza.cn/soft/27933.html","date":"2026-02-09T10:40:26.480Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zz314.downza.cn","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Sat, 17 Jan 2026 00:00:00 GMT","end":"Fri, 17 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"B5:A8:10:C3:A9:D4:76:FC:F4:79:44:C2:A6:E2:15:3E:AF:B6:C6:2F","sha256":"DD:95:3F:93:75:AA:52:73:B4:C6:A7:79:71:FD:05:06:D4:44:57:E1:A7:A7:9B:59:87:70:10:08:59:44:1F:53"}}},"request":{"raw":"GET /softbaike/PCsoft/2016-12-27/08d4dd0f159282d8f4723fc1214c264a.png HTTP/1.1\r\nHost: zz314.downza.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.downza.cn/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 09 Feb 2026 10:40:42 GMT\r\nContent-Type: image/png\r\nContent-Length: 5139\r\nConnection: keep-alive\r\nServer: openresty\r\nx-reserved: amazon, aws and amazon web services are trademarks or registered trademarks of Amazon Technologies, Inc\r\nCloudServiceDiscount: CDN\r\nx-amz-request-id: 00000194159890FC974524D3E622814F\r\nContent-MD5: YEoknK1aZnNLHqeyIlVOHQ==\r\nETag: \"604a249cad5a66734b1ea7b222554e1d\"\r\nLast-Modified: Wed, 03 Apr 2019 04:58:08 GMT\r\nx-amz-meta-md5chksum: 604a249cad5a66734b1ea7b222554e1d\r\nx-amz-tagging-count: 0\r\nx-amz-id-2: 32AAAQAAEAABAAAQAAEAABAAAQAAEAABCSAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA\r\nX-CCDN-Expires: 29201927\r\nvia: CHN-JXnanchang-AREACUCC1-CACHE62[19],CHN-JXnanchang-AREACUCC1-CACHE37[0,TCP_HIT,11],CHN-JSwuxi-GLOBAL2-CACHE28[14],CHN-JSwuxi-GLOBAL2-CACHE37[0,TCP_HIT,6],CHN-SH-GLOBAL4-CACHE4[16],CHN-SH-GLOBAL4-CACHE1[0,TCP_HIT,12]\r\nx-hcs-proxy-type: 1\r\nX-CCDN-CacheTTL: 31536000\r\nX-CCDN-REQ-ID-46B1: 738366ac70f8afbf2b87569b747c222d\r\nnginx-hit: 1\r\nAge: 2334073\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5139,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 72 x 72, 8-bit/color RGBA, non-interlaced","md5":"604a249cad5a66734b1ea7b222554e1d","sha1":"48543c4ce6ecb5bcd87adad196aaa0d93988c0fa","sha256":"8e05ddc05395d1d696a3a01601d09947b1cbad06d70446bcacd6a9c90ace73cd","sha512":"c455e3c14c362a093c739dce1574b7a6b8f8df573d1318694d048717c7f287b6efac1488ee7367a728108c5de2c02f3526bf2fb257386d9848b5441845a51e6d","ssdeep":"96:pCxdtf7vFiRapXiBBYX1JgqyeN0CAij9fYoTEXJB:kx7vYapXAK12CbfYoTYB","tlshash":"f6b190fe4da12e1d75a7c264544271099c347d58967e4e498ff8e97e2fa3660883031d","first_seen":"2025-06-15T16:39:48.403064Z","last_seen":"2026-06-06T22:27:36.491483Z","times_seen":32,"resource_available":false,"data":null}},"time_used":16086,"timings":{"blocked":15737,"dns":0,"connect":0,"send":0,"wait":348,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"res.njxzwh.com/downza/pc/v2023/css/detail.css?2026020913","fqdn":"res.njxzwh.com","domain":"njxzwh.com","tld":"com"},"ip":{"addr":"113.240.117.108","port":443,"asn":63835,"as":"No.293,Wanbao Avenue","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.downza.cn/soft/27933.html","date":"2026-02-09T10:40:26.056Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"res.njxzwh.com","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Sun, 04 Jan 2026 00:00:00 GMT","end":"Sat, 04 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"CD:91:C8:DC:75:28:A2:68:09:8B:A1:E3:80:02:F5:FA:FD:F0:C2:E6","sha256":"4D:AF:FF:F9:76:6E:B8:BD:6E:50:11:7E:3A:D1:3E:70:7D:9D:6B:2E:56:2C:34:46:80:3E:A1:C8:01:14:CB:61"}}},"request":{"raw":"GET /downza/pc/v2023/css/detail.css?2026020913 HTTP/1.1\r\nHost: res.njxzwh.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.downza.cn/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 09 Feb 2026 10:40:28 GMT\r\nContent-Type: text/css\r\nContent-Length: 47820\r\nConnection: keep-alive\r\nServer: openresty\r\nx-reserved: amazon, aws and amazon web services are trademarks or registered trademarks of Amazon Technologies, Inc\r\nCloudServiceDiscount: CDN\r\nx-amz-request-id: 0000019C40C55C15901AE23A9DF1E265\r\nETag: \"87b580e29b584562c6b7a1af81ec12b3\"\r\nLast-Modified: Thu, 30 Oct 2025 09:32:36 GMT\r\nx-amz-id-2: 36AAAQAAEAABAAAQAAEAABAAAQAAEAABAAAaI=AAAAAAAAAAAAAAAAAAAAAAAAAA\r\nX-CCDN-Expires: 67299\r\nvia: CHN-HNchangsha-AREACT1-CACHE9[10],CHN-HNchangsha-AREACT1-CACHE7[0,TCP_HIT,6],CHN-JSwuxi-GLOBAL2-CACHE106[5],CHN-JSwuxi-GLOBAL2-CACHE7[0,TCP_HIT,4]\r\nx-hcs-proxy-type: 1\r\nX-CCDN-CacheTTL: 86400\r\nnginx-hit: 1\r\nAge: 19101\r\nAccept-Ranges: bytes\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: OPTION,GET\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":47820,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"87b580e29b584562c6b7a1af81ec12b3","sha1":"408ac88ee15360ab1d803c94d0b0a8e4fad61bac","sha256":"d5f853100ea8008200404d7ef311fe252ae6c6f8c0b6b640a878a060236f8969","sha512":"8a70c75c67a2414c202884ebc1f66ef07e1440898f23ba5c23c7d6576f13e6b9ccfb066f5cd3e7621eaa69c3f32bf63cc821f5d95b6548d79960401312a0d1e8","ssdeep":"384:kabXyz5ybUrFTw1wsJApejeOFcFkvF3K2L5Y9Hm:kabWqahowsOoj1FcFkvF3K2L5Y9Hm","tlshash":"de23336cfb411709727bcaba7741679363531463838202e8bfe16a58bbc48ad4572fcd","first_seen":"2025-11-02T09:13:30.179527Z","last_seen":"2026-06-06T23:56:38.300675Z","times_seen":37,"resource_available":false,"data":null}},"time_used":5830,"timings":{"blocked":2577,"dns":1971,"connect":252,"send":0,"wait":335,"receive":327,"ssl":365},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img3.downza.cn/thumb/201804/e4615a9580c897f978341f7a4ed1e51c-50x50.png","fqdn":"img3.downza.cn","domain":"downza.cn","tld":"cn"},"ip":{"addr":"121.22.232.168","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.downza.cn/soft/27933.html","date":"2026-02-09T10:40:26.536Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img3.downza.cn","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Thu, 15 Jan 2026 00:00:00 GMT","end":"Wed, 15 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"4D:77:54:39:09:D0:ED:EE:10:10:0E:82:47:48:45:9A:1F:AC:36:7A","sha256":"86:A8:1B:F9:16:89:4D:41:B2:D3:65:4D:15:83:34:E8:F4:AC:0C:46:D1:F5:0A:AE:99:D0:B7:33:F3:EE:5A:9B"}}},"request":{"raw":"GET /thumb/201804/e4615a9580c897f978341f7a4ed1e51c-50x50.png HTTP/1.1\r\nHost: img3.downza.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 09 Feb 2026 10:40:42 GMT\r\nContent-Type: image/png\r\nContent-Length: 2149\r\nConnection: keep-alive\r\nServer: openresty\r\nx-reserved: amazon, aws and amazon web services are trademarks or registered trademarks of Amazon Technologies, Inc\r\nCloudServiceDiscount: CDN\r\nx-amz-request-id: 0000019BF8484C76901AE374FAC9B86D\r\nETag: \"32ed1480031b5a46275959de0a9f3050\"\r\nLast-Modified: Thu, 07 Nov 2019 04:07:58 GMT\r\nx-amz-tagging-count: 0\r\nx-amz-id-2: 36AAAQAAEAABAAAQAAEAABAAAQAAEAABAAAaI=AAAAAAAAAAAAAAAAAAAAAAAAAA\r\nvia: CHN-HEqinhuangdao-AREACUCC1-CACHE15[21],CHN-HEqinhuangdao-AREACUCC1-CACHE27[0,TCP_HIT,19],CHN-TJ-GLOBAL6-CACHE108[7],CHN-TJ-GLOBAL6-CACHE38[0,TCP_HIT,3]\r\nx-hcs-proxy-type: 1\r\nX-CCDN-CacheTTL: 31536000\r\nnginx-hit: 1\r\nAge: 960578\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":2149,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPCM), density 0x0, segment length 16, baseline, precision 8, 50x50, components 3","md5":"32ed1480031b5a46275959de0a9f3050","sha1":"b285d800967eaa6bf325ae07d2454390857ba06e","sha256":"10fb0e27007305b888a5d7916e99373f7d92ee4178e84f29da8bb99de08aa28e","sha512":"8fb9193bd90d25886daad881fca1b4695a61dd8ef16f99acaeda5fad0c88e887df40e9bc2f8468e7d22fcb68ad9b5be07f9a7ef54a521812848001f31ad8efd8","ssdeep":"","tlshash":"9c410967c22aa157c395d1ff20dc08458827e998e63bcf1f41526222a83580e466baac","first_seen":"2026-02-09T10:41:32.028668Z","last_seen":"2026-02-09T10:41:32.028668Z","times_seen":1,"resource_available":false,"data":null}},"time_used":16036,"timings":{"blocked":15773,"dns":0,"connect":0,"send":0,"wait":263,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"res.njxzwh.com/downza/pc/v2023/images/iconpic-star-S-default_to.png","fqdn":"res.njxzwh.com","domain":"njxzwh.com","tld":"com"},"ip":{"addr":"113.240.117.108","port":443,"asn":63835,"as":"No.293,Wanbao Avenue","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.downza.cn/soft/27933.html","date":"2026-02-09T10:40:41.010Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"res.njxzwh.com","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Sun, 04 Jan 2026 00:00:00 GMT","end":"Sat, 04 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"CD:91:C8:DC:75:28:A2:68:09:8B:A1:E3:80:02:F5:FA:FD:F0:C2:E6","sha256":"4D:AF:FF:F9:76:6E:B8:BD:6E:50:11:7E:3A:D1:3E:70:7D:9D:6B:2E:56:2C:34:46:80:3E:A1:C8:01:14:CB:61"}}},"request":{"raw":"GET /downza/pc/v2023/images/iconpic-star-S-default_to.png HTTP/1.1\r\nHost: res.njxzwh.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://res.njxzwh.com/downza/pc/v2023/css/detail.css?2026020913\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 09 Feb 2026 10:40:41 GMT\r\nContent-Type: image/png\r\nContent-Length: 1574\r\nConnection: keep-alive\r\nServer: openresty\r\nx-reserved: amazon, aws and amazon web services are trademarks or registered trademarks of Amazon Technologies, Inc\r\nCloudServiceDiscount: CDN\r\nx-amz-request-id: 0000019A347CC3EC97A7BB05FA133F12\r\nETag: \"f539bbfa3dc84d8cd387a95854aacea5\"\r\nLast-Modified: Thu, 30 Oct 2025 09:32:40 GMT\r\nx-amz-id-2: 36AAAQAAEAABAAAQAAEAABAAAQAAEAABAAAaI=AAAAAAAAAAAAAAAAAAAAAAAAAA\r\nX-CCDN-Expires: 1553682\r\nvia: CHN-HNchangsha-AREACT1-CACHE10[3],CHN-HNchangsha-AREACT1-CACHE1[0,TCP_HIT,0],CHN-JSwuxi-GLOBAL2-CACHE115[46],CHN-JSwuxi-GLOBAL2-CACHE85[0,TCP_HIT,39]\r\nx-hcs-proxy-type: 1\r\nX-CCDN-CacheTTL: 2592000\r\nnginx-hit: 1\r\nAge: 1038338\r\nAccept-Ranges: bytes\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: OPTION,GET\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":1574,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 17 x 31, 8-bit/color RGBA, non-interlaced","md5":"f539bbfa3dc84d8cd387a95854aacea5","sha1":"d8bcab50d8a5a9372060b5148bb23f616197a841","sha256":"0a68c926965cb332664a9a54e57c5cc5d8682b52232913df6999f157de34d4e1","sha512":"84a14a500a2fe662fa9b6c09f67cc403c984096b15abb6149380dedc768e12919a93df38ecb1090644dd41466fdcb367cefc758efedf97d660d062f0aa08e793","ssdeep":"","tlshash":"fc31dac8f7987411839487c935fbc827da9b0dc14ad4e57eb589e45b49781fa0d3c0ca","first_seen":"2023-05-26T03:28:21Z","last_seen":"2026-06-06T23:56:38.273935Z","times_seen":56,"resource_available":false,"data":null}},"time_used":333,"timings":{"blocked":59,"dns":0,"connect":0,"send":0,"wait":273,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zz314.downza.cn/soft/xzgj-54/2018-04-24/605e0c22bf8124b0645389f52f486ef4.jpg","fqdn":"zz314.downza.cn","domain":"downza.cn","tld":"cn"},"ip":{"addr":"116.153.39.131","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.downza.cn/soft/27933.html","date":"2026-02-09T10:40:26.096Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zz314.downza.cn","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Sat, 17 Jan 2026 00:00:00 GMT","end":"Fri, 17 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"B5:A8:10:C3:A9:D4:76:FC:F4:79:44:C2:A6:E2:15:3E:AF:B6:C6:2F","sha256":"DD:95:3F:93:75:AA:52:73:B4:C6:A7:79:71:FD:05:06:D4:44:57:E1:A7:A7:9B:59:87:70:10:08:59:44:1F:53"}}},"request":{"raw":"GET /soft/xzgj-54/2018-04-24/605e0c22bf8124b0645389f52f486ef4.jpg HTTP/1.1\r\nHost: zz314.downza.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.downza.cn/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 09 Feb 2026 10:40:42 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 4064\r\nConnection: keep-alive\r\nServer: openresty\r\nx-reserved: amazon, aws and amazon web services are trademarks or registered trademarks of Amazon Technologies, Inc\r\nCloudServiceDiscount: CDN\r\nx-amz-request-id: 0000019661F71210904B64149FEB6877\r\nContent-MD5: 1avusqKh0wvsZpZuUCOnRQ==\r\nETag: \"d5abeeb2a2a1d30bec66966e5023a745\"\r\nLast-Modified: Tue, 02 Apr 2019 03:41:24 GMT\r\nx-amz-meta-md5chksum: d5abeeb2a2a1d30bec66966e5023a745\r\nx-amz-tagging-count: 0\r\nx-amz-id-2: 32AAAQAAEAABAAAQAAEAABAAAQAAEAABCSAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA\r\nX-CCDN-Expires: 30204735\r\nvia: CHN-JXnanchang-AREACUCC1-CACHE6[186],CHN-JXnanchang-AREACUCC1-CACHE39[0,TCP_HIT,184],CHN-JSwuxi-GLOBAL2-CACHE44[11],CHN-JSwuxi-GLOBAL2-CACHE111[0,TCP_HIT,9]\r\nx-hcs-proxy-type: 1\r\nX-CCDN-CacheTTL: 31536000\r\nX-CCDN-REQ-ID-46B1: 0a197fe95cee9fbb19a9d1eb68ca336a\r\nnginx-hit: 1\r\nAge: 1331265\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":4064,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1, software=www.meitu.com], baseline, precision 8, 121x75, components 3","md5":"d5abeeb2a2a1d30bec66966e5023a745","sha1":"48ffbd298fb04df55eee8b0c1a977f0ce7f12e6c","sha256":"e7e5241664d4f30e8b3fb654b0b4b93c62292fca3229ca0f652406ba7a0c9b7f","sha512":"36ca59e510303640686d98a7a5cbc89b4e1d97745040607c2536e9e6a0677c34a840227dd3c755590415300d04b71d4f20f7f2111b0c8a2091c3c29ce5a5f73c","ssdeep":"","tlshash":"44813b33dab7dc4a5df25d7a5012c23aa8ce85a03e4be3161ab052def95025df27484d","first_seen":"2026-02-09T10:41:32.032609Z","last_seen":"2026-02-09T10:41:32.032609Z","times_seen":1,"resource_available":false,"data":null}},"time_used":16177,"timings":{"blocked":15736,"dns":0,"connect":0,"send":0,"wait":440,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zz314.downza.cn/soft/xzgj-54/2017-12-19/1a50dcc2d9404957564dd6941eeebac7.jpg","fqdn":"zz314.downza.cn","domain":"downza.cn","tld":"cn"},"ip":{"addr":"116.153.39.131","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.downza.cn/soft/27933.html","date":"2026-02-09T10:40:26.098Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zz314.downza.cn","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Sat, 17 Jan 2026 00:00:00 GMT","end":"Fri, 17 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"B5:A8:10:C3:A9:D4:76:FC:F4:79:44:C2:A6:E2:15:3E:AF:B6:C6:2F","sha256":"DD:95:3F:93:75:AA:52:73:B4:C6:A7:79:71:FD:05:06:D4:44:57:E1:A7:A7:9B:59:87:70:10:08:59:44:1F:53"}}},"request":{"raw":"GET /soft/xzgj-54/2017-12-19/1a50dcc2d9404957564dd6941eeebac7.jpg HTTP/1.1\r\nHost: zz314.downza.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.downza.cn/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 09 Feb 2026 10:40:42 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 24187\r\nConnection: keep-alive\r\nServer: openresty\r\nx-reserved: amazon, aws and amazon web services are trademarks or registered trademarks of Amazon Technologies, Inc\r\nCloudServiceDiscount: CDN\r\nx-amz-request-id: 000001942B95650697AA24802D4ED8B3\r\nContent-MD5: MM6urSlZhW+Cj2dVPxssRA==\r\nETag: \"30ceaead2959856f828f67553f1b2c44\"\r\nLast-Modified: Tue, 02 Apr 2019 03:41:31 GMT\r\nx-amz-meta-md5chksum: 30ceaead2959856f828f67553f1b2c44\r\nx-amz-tagging-count: 0\r\nx-amz-id-2: 32AAAQAAEAABAAAQAAEAABAAAQAAEAABCSAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA\r\nX-CCDN-Expires: 29947371\r\nvia: CHN-JXnanchang-AREACUCC1-CACHE16[62],CHN-JXnanchang-AREACUCC1-CACHE61[55,TCP_MISS,59],CHN-JSwuxi-GLOBAL2-CACHE62[6],CHN-JSwuxi-GLOBAL2-CACHE69[0,TCP_HIT,2],CHN-SH-GLOBAL4-CACHE153[23],CHN-SH-GLOBAL4-CACHE93[0,TCP_HIT,21]\r\nx-hcs-proxy-type: 1\r\nX-CCDN-CacheTTL: 31536000\r\nX-CCDN-REQ-ID-46B1: 43d6725a03264b9c46aae05a56e2010b\r\nAge: 1\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":24187,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 531x325, components 3","md5":"30ceaead2959856f828f67553f1b2c44","sha1":"8833b0b10d3d96eeab44942410f85e24e162b4ad","sha256":"ec4e33354e5dab26e102ed49e04746095534818b8b523bc21477a6e0217fe4cf","sha512":"578fd948b308a33cb554771cd5f3e159a068f6f9a548bddee693f3ad79efd72b602647b0e67c3ed5cb01f2e90e258c34459dacc3dc335949e79cbea0acc5998f","ssdeep":"384:QTzs75N8ewSMgXeQoCjlAqWFLOk5b2I2FrdOeK+HJgJ/0PKTe07heejM:Q/s4yMgXrOJ2D7PJu0Pg7heejM","tlshash":"f7b2c09998695be97dcc11eacd0ffc64bac00a1950d1084c47e48f86abc6a6c69de37c","first_seen":"2026-02-09T10:41:32.034434Z","last_seen":"2026-02-09T10:41:32.034434Z","times_seen":1,"resource_available":false,"data":null}},"time_used":16244,"timings":{"blocked":15759,"dns":0,"connect":0,"send":0,"wait":428,"receive":57,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img3.downza.cn/thumb/201804/165853-5b1e39cdd0370-50x50.png","fqdn":"img3.downza.cn","domain":"downza.cn","tld":"cn"},"ip":{"addr":"121.22.232.168","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.downza.cn/soft/27933.html","date":"2026-02-09T10:40:26.203Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img3.downza.cn","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Thu, 15 Jan 2026 00:00:00 GMT","end":"Wed, 15 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"4D:77:54:39:09:D0:ED:EE:10:10:0E:82:47:48:45:9A:1F:AC:36:7A","sha256":"86:A8:1B:F9:16:89:4D:41:B2:D3:65:4D:15:83:34:E8:F4:AC:0C:46:D1:F5:0A:AE:99:D0:B7:33:F3:EE:5A:9B"}}},"request":{"raw":"GET /thumb/201804/165853-5b1e39cdd0370-50x50.png HTTP/1.1\r\nHost: img3.downza.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 09 Feb 2026 10:40:41 GMT\r\nContent-Type: image/png\r\nContent-Length: 1389\r\nConnection: keep-alive\r\nServer: openresty\r\nx-reserved: amazon, aws and amazon web services are trademarks or registered trademarks of Amazon Technologies, Inc\r\nCloudServiceDiscount: CDN\r\nx-amz-request-id: 0000019B815FDB32900B1461B183D289\r\nETag: \"c48c65232091f3f27fd3eb7a106a2aa1\"\r\nLast-Modified: Thu, 07 Nov 2019 04:07:44 GMT\r\nx-amz-tagging-count: 0\r\nx-amz-id-2: 36AAAQAAEAABAAAQAAEAABAAAQAAEAABAAAaI=AAAAAAAAAAAAAAAAAAAAAAAAAA\r\nvia: CHN-HEqinhuangdao-AREACUCC1-CACHE11[28],CHN-HEqinhuangdao-AREACUCC1-CACHE89[0,TCP_HIT,27],CHN-TJ-GLOBAL6-CACHE39[20],CHN-TJ-GLOBAL6-CACHE92[0,TCP_HIT,17]\r\nx-hcs-proxy-type: 1\r\nX-CCDN-CacheTTL: 31536000\r\nnginx-hit: 1\r\nAge: 3190220\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":1389,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPCM), density 37x37, segment length 16, baseline, precision 8, 50x50, components 3","md5":"c48c65232091f3f27fd3eb7a106a2aa1","sha1":"d39e0980f4f1cca6da3289bdee7bd1272c0694a7","sha256":"7536bb3f78554e2718f57fa86c7adf113757bd09b4475790dac446a44f7a3c05","sha512":"a9f6c16a7811fe06d9ed51fe824ed789ba0b1adc9cdc5ad31a565fdab245f6fcd8692e058110b867c8d1437846391d6c891babcedac58f86acc873704d545874","ssdeep":"","tlshash":"7f21cbb8fd004964e5fa99bb372a23d25b217c2dc41bd64f7d45ab247f540837b039a0","first_seen":"2026-02-09T10:41:32.036437Z","last_seen":"2026-02-09T10:41:32.036437Z","times_seen":1,"resource_available":false,"data":null}},"time_used":15585,"timings":{"blocked":14716,"dns":0,"connect":242,"send":0,"wait":266,"receive":0,"ssl":358},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cbjs.baidu.com/js/m.js","fqdn":"cbjs.baidu.com","domain":"baidu.com","tld":"com"},"ip":{"addr":"119.188.176.49","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.downza.cn/soft/27933.html","date":"2026-02-09T10:40:26.062Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"baidu.com","organization":"Beijing Baidu Netcom Science Technology Co., Ltd"},"issuer":{"commonName":"GlobalSign RSA OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 09 Jul 2025 07:01:02 GMT","end":"Mon, 10 Aug 2026 07:01:01 GMT"},"fingerprint":{"sha1":"21:BF:66:0D:67:BE:7A:7F:49:48:05:30:F4:7F:09:F2:30:36:CA:63","sha256":"0D:82:2C:9A:90:5A:EF:E9:8F:37:12:C0:E0:26:30:EE:95:33:2C:45:5F:E7:74:5D:F0:8D:BC:79:F4:B0:A1:49"}}},"request":{"raw":"GET /js/m.js HTTP/1.1\r\nHost: cbjs.baidu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.downza.cn/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: JSP3/2.0.14\r\ndate: Mon, 09 Feb 2026 10:40:27 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncontent-length: 39420\r\nlast-modified: Fri, 20 Jun 2025 03:28:07 GMT\r\ncontent-encoding: gzip\r\nage: 44\r\naccept-ranges: bytes\r\nohc-global-saved-time: Mon, 09 Feb 2026 10:39:43 GMT\r\nohc-cache-hit: jn2un54 [2]\r\nohc-response-time: 1 0 0 0 0 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":117379,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65532), with no line terminators","md5":"b543dbe074718c21f7f5e7cbf1aff034","sha1":"99ef1caf9c69e99a60c2f0ee33720cb40cdf1cc8","sha256":"b6a34b928d00909e40ec7edfadd89ac0cfa1fcc5892bdf3168b60b28a5bfe1f6","sha512":"56d74637e8023b8983c240ec595528c56ed7d84f461fd4a1e16d329906a2dbfd023a8d519a68b1458a48f9cd19176df60dc099102640f0c3589c3bddd69221b7","ssdeep":"3072:GpOyaTRXqCpCOjwlfbitfD9mxf1W4OwYsRQD+fgpNCpIdlw:GpBApCO0fyfDcTQD+fgXRdlw","tlshash":"f4b3e899f6d2742546a220a4162f2609b2375548748b8480f67ee8d1fdbcf4f607bfbc","first_seen":"2025-06-30T07:43:55.721259Z","last_seen":"2026-06-15T10:15:23.743114Z","times_seen":1044,"resource_available":true,"data":null}},"time_used":1721,"timings":{"blocked":-1,"dns":581,"connect":226,"send":0,"wait":228,"receive":227,"ssl":459},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img3.downza.cn/softbaike/202407/112801-668cae41296b2.jpg","fqdn":"img3.downza.cn","domain":"downza.cn","tld":"cn"},"ip":{"addr":"121.22.232.168","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.downza.cn/soft/27933.html","date":"2026-02-09T10:40:26.470Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img3.downza.cn","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Thu, 15 Jan 2026 00:00:00 GMT","end":"Wed, 15 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"4D:77:54:39:09:D0:ED:EE:10:10:0E:82:47:48:45:9A:1F:AC:36:7A","sha256":"86:A8:1B:F9:16:89:4D:41:B2:D3:65:4D:15:83:34:E8:F4:AC:0C:46:D1:F5:0A:AE:99:D0:B7:33:F3:EE:5A:9B"}}},"request":{"raw":"GET /softbaike/202407/112801-668cae41296b2.jpg HTTP/1.1\r\nHost: img3.downza.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.downza.cn/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 09 Feb 2026 10:40:42 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 986\r\nConnection: keep-alive\r\nServer: openresty\r\nx-reserved: amazon, aws and amazon web services are trademarks or registered trademarks of Amazon Technologies, Inc\r\nCloudServiceDiscount: CDN\r\nx-amz-request-id: 0000019B5ADD8AD490077F3BB552D69B\r\nETag: \"c4ac4814e4e1e506c63bddfbbebc14c8\"\r\nLast-Modified: Tue, 09 Jul 2024 03:28:01 GMT\r\nx-amz-id-2: 36AAAQAAEAABAAAQAAEAABAAAQAAEAABAAAaI=AAAAAAAAAAAAAAAAAAAAAAAAAA\r\nvia: CHN-HEqinhuangdao-AREACUCC1-CACHE15[11],CHN-HEqinhuangdao-AREACUCC1-CACHE92[0,TCP_HIT,10],CHN-TJ-GLOBAL6-CACHE36[4],CHN-TJ-GLOBAL6-CACHE20[0,TCP_HIT,2]\r\nx-hcs-proxy-type: 1\r\nX-CCDN-CacheTTL: 31536000\r\nnginx-hit: 1\r\nAge: 3366794\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":986,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 72 x 72, 8-bit colormap, non-interlaced","md5":"c4ac4814e4e1e506c63bddfbbebc14c8","sha1":"16f528ee8f46ec2b8f760149c023e45f2cc2697a","sha256":"a729f19798782a3903c1f4d8b779d7764bcd4296a9ea533869adf9dda41229df","sha512":"7feca19276672d43c23083c1e436fe20419dc11e8b2057034ce91f15fb4026dbf458780db296e3ba9caa232d13966de0f8265edfc0114a837f70bfa6ec4f94e6","ssdeep":"","tlshash":"1e115c86b7c41baca6c11523468b0b29da67c4384011b116efef78ea4e527de70dae4c","first_seen":"2025-06-15T16:39:48.266456Z","last_seen":"2026-06-06T23:56:38.285871Z","times_seen":27,"resource_available":false,"data":null}},"time_used":15839,"timings":{"blocked":15594,"dns":0,"connect":0,"send":0,"wait":245,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img3.downza.cn/download/202302/151556-63fdaa2c99a7e.jpg","fqdn":"img3.downza.cn","domain":"downza.cn","tld":"cn"},"ip":{"addr":"121.22.232.168","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.downza.cn/soft/27933.html","date":"2026-02-09T10:40:26.542Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img3.downza.cn","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Thu, 15 Jan 2026 00:00:00 GMT","end":"Wed, 15 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"4D:77:54:39:09:D0:ED:EE:10:10:0E:82:47:48:45:9A:1F:AC:36:7A","sha256":"86:A8:1B:F9:16:89:4D:41:B2:D3:65:4D:15:83:34:E8:F4:AC:0C:46:D1:F5:0A:AE:99:D0:B7:33:F3:EE:5A:9B"}}},"request":{"raw":"GET /download/202302/151556-63fdaa2c99a7e.jpg HTTP/1.1\r\nHost: img3.downza.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 09 Feb 2026 10:40:42 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 10080\r\nConnection: keep-alive\r\nServer: openresty\r\nx-reserved: amazon, aws and amazon web services are trademarks or registered trademarks of Amazon Technologies, Inc\r\nCloudServiceDiscount: CDN\r\nx-amz-request-id: 0000019BB04F887890167B33813D0B93\r\nETag: \"3e97240d16f97c4a1557429fab38c60e\"\r\nLast-Modified: Tue, 28 Feb 2023 07:15:56 GMT\r\nx-amz-id-2: 36AAAQAAEAABAAAQAAEAABAAAQAAEAABAAAaI=AAAAAAAAAAAAAAAAAAAAAAAAAA\r\nvia: CHN-HEqinhuangdao-AREACUCC1-CACHE11[8],CHN-HEqinhuangdao-AREACUCC1-CACHE84[0,TCP_HIT,6],CHN-TJ-GLOBAL6-CACHE120[19],CHN-TJ-GLOBAL6-CACHE13[0,TCP_HIT,17]\r\nx-hcs-proxy-type: 1\r\nX-CCDN-CacheTTL: 31536000\r\nnginx-hit: 1\r\nAge: 2355842\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":10080,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 120x120, components 3","md5":"3e97240d16f97c4a1557429fab38c60e","sha1":"ac680ec9f74c5e111c0fbfa5a57dd4941fe1f12f","sha256":"efffa7e18b4b399b6af19eb79e8a8283459cf0dfb40bfb6b06cbad87e6fae632","sha512":"aebfc8a3019ed4a7ef6e3bb2321086b81083c004134b7d9afc43dc8c2d5bc3846793cc8ffac7cc83aea3af56c0d242b36cce91b5ff8ccc85637b09461db8c82f","ssdeep":"192:/6EVkVMVU9NThgzd4TJUNDj4w1awNQBrn0hmutmNql:/6EKaVU/lAd4TJ+4oaUaLuCql","tlshash":"ec22af7c78c9a02fc400c491787549b23e7ea75310727f4b7970a290ded5aaeca9d89f","first_seen":"2026-02-09T10:41:32.039788Z","last_seen":"2026-02-09T10:41:32.039788Z","times_seen":1,"resource_available":false,"data":null}},"time_used":16593,"timings":{"blocked":16331,"dns":0,"connect":0,"send":0,"wait":261,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"res.njxzwh.com/downza/pc/v2023/js/layer/layer.js?2026020913","fqdn":"res.njxzwh.com","domain":"njxzwh.com","tld":"com"},"ip":{"addr":"113.240.117.108","port":443,"asn":63835,"as":"No.293,Wanbao Avenue","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.downza.cn/soft/27933.html","date":"2026-02-09T10:40:26.603Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"res.njxzwh.com","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Sun, 04 Jan 2026 00:00:00 GMT","end":"Sat, 04 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"CD:91:C8:DC:75:28:A2:68:09:8B:A1:E3:80:02:F5:FA:FD:F0:C2:E6","sha256":"4D:AF:FF:F9:76:6E:B8:BD:6E:50:11:7E:3A:D1:3E:70:7D:9D:6B:2E:56:2C:34:46:80:3E:A1:C8:01:14:CB:61"}}},"request":{"raw":"GET /downza/pc/v2023/js/layer/layer.js?2026020913 HTTP/1.1\r\nHost: res.njxzwh.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.downza.cn/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 09 Feb 2026 10:40:29 GMT\r\nContent-Type: text/javascript\r\nContent-Length: 22117\r\nConnection: keep-alive\r\nServer: openresty\r\nx-reserved: amazon, aws and amazon web services are trademarks or registered trademarks of Amazon Technologies, Inc\r\nCloudServiceDiscount: CDN\r\nx-amz-request-id: 0000019C40C56D3D97688B0475A1BF95\r\nETag: \"b4b722614d6d4b6b5f345361b8e5355f\"\r\nLast-Modified: Thu, 30 Oct 2025 09:32:46 GMT\r\nx-amz-id-2: 36AAAQAAEAABAAAQAAEAABAAAQAAEAABAAAaI=AAAAAAAAAAAAAAAAAAAAAAAAAA\r\nX-CCDN-Expires: 67840\r\nvia: CHN-HNchangsha-AREACT1-CACHE10[11],CHN-HNchangsha-AREACT1-CACHE1[0,TCP_HIT,9],CHN-JSwuxi-GLOBAL2-CACHE75[11],CHN-JSwuxi-GLOBAL2-CACHE1[0,TCP_HIT,1]\r\nx-hcs-proxy-type: 1\r\nX-CCDN-CacheTTL: 86400\r\nnginx-hit: 1\r\nAge: 18560\r\nAccept-Ranges: bytes\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: OPTION,GET\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":22117,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (22020), with CRLF line terminators","md5":"47db0e57d73194c6a41bab5b4d55e860","sha1":"9db378fa8d56979e86519f483993486dc476902b","sha256":"69025fc1818313fb94c9ca4975c6a45e8385a6fd0ab9d0c60c0ac93cd997566e","sha512":"851e8630a4e631b332027850905245cb68ea56fddab22a8b7504bb4689c1a26b955ddf1b0ef23d1b1a0ecd83d668e115c9e10caf823029046a97a9f7b5c858b7","ssdeep":"384:N1xCih92A3igrLXSt/SdMrXqE6tGLxzAOTElH0jjhtjfs8:N1EiV3i+WtXItqF13k8","tlshash":"85a2b66a754034976323906ad11fba0b31f21d24d7078128f22bb4ae1dbcd95a2b7f5f","first_seen":"2023-04-07T19:23:28Z","last_seen":"2026-06-15T09:17:33.745008Z","times_seen":1194,"resource_available":true,"data":null}},"time_used":2751,"timings":{"blocked":2351,"dns":0,"connect":0,"send":0,"wait":362,"receive":38,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"res.njxzwh.com/downza/pc/v2023/js/detail.js?2026020913","fqdn":"res.njxzwh.com","domain":"njxzwh.com","tld":"com"},"ip":{"addr":"113.240.117.108","port":443,"asn":63835,"as":"No.293,Wanbao Avenue","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.downza.cn/soft/27933.html","date":"2026-02-09T10:40:26.606Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"res.njxzwh.com","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Sun, 04 Jan 2026 00:00:00 GMT","end":"Sat, 04 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"CD:91:C8:DC:75:28:A2:68:09:8B:A1:E3:80:02:F5:FA:FD:F0:C2:E6","sha256":"4D:AF:FF:F9:76:6E:B8:BD:6E:50:11:7E:3A:D1:3E:70:7D:9D:6B:2E:56:2C:34:46:80:3E:A1:C8:01:14:CB:61"}}},"request":{"raw":"GET /downza/pc/v2023/js/detail.js?2026020913 HTTP/1.1\r\nHost: res.njxzwh.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.downza.cn/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 09 Feb 2026 10:40:29 GMT\r\nContent-Type: text/javascript\r\nContent-Length: 4413\r\nConnection: keep-alive\r\nServer: openresty\r\nx-reserved: amazon, aws and amazon web services are trademarks or registered trademarks of Amazon Technologies, Inc\r\nCloudServiceDiscount: CDN\r\nx-amz-request-id: 0000019C40C56D7B900607B9108BA68F\r\nETag: \"b9df3fe2e7265ce4938428ed4f20f03c\"\r\nLast-Modified: Thu, 30 Oct 2025 09:32:43 GMT\r\nx-amz-id-2: 36AAAQAAEAABAAAQAAEAABAAAQAAEAABAAAaI=AAAAAAAAAAAAAAAAAAAAAAAAAA\r\nX-CCDN-Expires: 67841\r\nvia: CHN-HNchangsha-AREACT1-CACHE65[3],CHN-HNchangsha-AREACT1-CACHE9[0,TCP_HIT,3],CHN-JSwuxi-GLOBAL2-CACHE55[5],CHN-JSwuxi-GLOBAL2-CACHE9[0,TCP_HIT,2]\r\nx-hcs-proxy-type: 1\r\nX-CCDN-CacheTTL: 86400\r\nnginx-hit: 1\r\nAge: 18559\r\nAccept-Ranges: bytes\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: OPTION,GET\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":4413,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with CRLF line terminators","md5":"b9df3fe2e7265ce4938428ed4f20f03c","sha1":"bf8d062485b95aaf40898508172256dca7b051ee","sha256":"51c50d7e774b5ffdcf1f84fd2349932ae5a3e2527551bb05d43b499435232938","sha512":"41ed7dde17f83cc0724a3194174b24f11ac3d226add096539d042fb82ace14184dc8418c60d9b0d1434ae0dd8e218a10c3ee4bb6a317f7531afd3e929669fb15","ssdeep":"96:w4zYnZ4z8nDV4zYn44wMmwHW6nk27ENACWIvAK2L4:w4zYZ4z8R4zY44wMmwR3XL4","tlshash":"af912f49b9002a6468bfa73f6a7b6404db1a5513c161e200f09e48e61f701a477f3ede","first_seen":"2025-11-02T09:13:30.168288Z","last_seen":"2026-06-06T23:56:38.286398Z","times_seen":37,"resource_available":true,"data":null}},"time_used":2870,"timings":{"blocked":2586,"dns":0,"connect":0,"send":0,"wait":283,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"res.njxzwh.com/downza/pc/v2023/images/xiazai-2.png","fqdn":"res.njxzwh.com","domain":"njxzwh.com","tld":"com"},"ip":{"addr":"113.240.117.108","port":443,"asn":63835,"as":"No.293,Wanbao Avenue","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.downza.cn/soft/27933.html","date":"2026-02-09T10:40:41.112Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"res.njxzwh.com","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Sun, 04 Jan 2026 00:00:00 GMT","end":"Sat, 04 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"CD:91:C8:DC:75:28:A2:68:09:8B:A1:E3:80:02:F5:FA:FD:F0:C2:E6","sha256":"4D:AF:FF:F9:76:6E:B8:BD:6E:50:11:7E:3A:D1:3E:70:7D:9D:6B:2E:56:2C:34:46:80:3E:A1:C8:01:14:CB:61"}}},"request":{"raw":"GET /downza/pc/v2023/images/xiazai-2.png HTTP/1.1\r\nHost: res.njxzwh.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://res.njxzwh.com/downza/pc/v2023/css/detail.css?2026020913\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 09 Feb 2026 10:40:41 GMT\r\nContent-Type: image/png\r\nContent-Length: 2992\r\nConnection: keep-alive\r\nServer: openresty\r\nx-reserved: amazon, aws and amazon web services are trademarks or registered trademarks of Amazon Technologies, Inc\r\nCloudServiceDiscount: CDN\r\nx-amz-request-id: 0000019A347EB6D997A9F13A67CEF6B3\r\nETag: \"c31c63fb6529b7b36420650927449ea0\"\r\nLast-Modified: Thu, 30 Oct 2025 09:32:43 GMT\r\nx-amz-id-2: 36AAAQAAEAABAAAQAAEAABAAAQAAEAABAAAaI=AAAAAAAAAAAAAAAAAAAAAAAAAA\r\nX-CCDN-Expires: 1553662\r\nvia: CHN-HNchangsha-AREACT1-CACHE10[8],CHN-HNchangsha-AREACT1-CACHE69[0,TCP_HIT,7],CHN-JSwuxi-GLOBAL2-CACHE68[6],CHN-JSwuxi-GLOBAL2-CACHE101[0,TCP_HIT,2]\r\nx-hcs-proxy-type: 1\r\nX-CCDN-CacheTTL: 2592000\r\nnginx-hit: 1\r\nAge: 1038338\r\nAccept-Ranges: bytes\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: OPTION,GET\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":2992,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 200 x 200, 8-bit/color RGBA, non-interlaced","md5":"c31c63fb6529b7b36420650927449ea0","sha1":"ede917a301f6c7ce67dbf87334fb7d328d5c54e7","sha256":"72062c5ca533c72716ce62df17ccfdc1ce55c0b8ac62a974cfd0377daaccccc3","sha512":"5e67e88fea4b09b35e740a8c23c671bbec564d78bcad510c707f95bb38b1ce924cac4b5fc0572c8a95c2dd86789f3a13bfda425e3df333f3c0ba0eec3af2d969","ssdeep":"","tlshash":"9f5176c324c59ab909adf1da09c7c746e51692af1b545c0f9a600a3be431ff9f406ec1","first_seen":"2025-06-15T16:39:48.167451Z","last_seen":"2026-06-06T23:56:38.321533Z","times_seen":98,"resource_available":false,"data":null}},"time_used":778,"timings":{"blocked":496,"dns":0,"connect":0,"send":0,"wait":281,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"res.njxzwh.com/downza/pc/v2023/images/xiazai-1.png","fqdn":"res.njxzwh.com","domain":"njxzwh.com","tld":"com"},"ip":{"addr":"113.240.117.108","port":443,"asn":63835,"as":"No.293,Wanbao Avenue","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.downza.cn/soft/27933.html","date":"2026-02-09T10:40:41.114Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"res.njxzwh.com","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Sun, 04 Jan 2026 00:00:00 GMT","end":"Sat, 04 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"CD:91:C8:DC:75:28:A2:68:09:8B:A1:E3:80:02:F5:FA:FD:F0:C2:E6","sha256":"4D:AF:FF:F9:76:6E:B8:BD:6E:50:11:7E:3A:D1:3E:70:7D:9D:6B:2E:56:2C:34:46:80:3E:A1:C8:01:14:CB:61"}}},"request":{"raw":"GET /downza/pc/v2023/images/xiazai-1.png HTTP/1.1\r\nHost: res.njxzwh.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://res.njxzwh.com/downza/pc/v2023/css/detail.css?2026020913\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 09 Feb 2026 10:40:41 GMT\r\nContent-Type: image/png\r\nContent-Length: 3867\r\nConnection: keep-alive\r\nServer: openresty\r\nx-reserved: amazon, aws and amazon web services are trademarks or registered trademarks of Amazon Technologies, Inc\r\nCloudServiceDiscount: CDN\r\nx-amz-request-id: 0000019A347CC51A90077BFFA6726248\r\nETag: \"ed963ecabf5e24e322b15fe4da860928\"\r\nLast-Modified: Thu, 30 Oct 2025 09:32:43 GMT\r\nx-amz-id-2: 36AAAQAAEAABAAAQAAEAABAAAQAAEAABAAAaI=AAAAAAAAAAAAAAAAAAAAAAAAAA\r\nX-CCDN-Expires: 1553662\r\nvia: CHN-HNchangsha-AREACT1-CACHE65[2],CHN-HNchangsha-AREACT1-CACHE60[0,TCP_HIT,1],CHN-JSwuxi-GLOBAL2-CACHE105[6],CHN-JSwuxi-GLOBAL2-CACHE95[0,TCP_HIT,3]\r\nx-hcs-proxy-type: 1\r\nX-CCDN-CacheTTL: 2592000\r\nnginx-hit: 1\r\nAge: 1038338\r\nAccept-Ranges: bytes\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: OPTION,GET\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":3867,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 201 x 200, 8-bit/color RGBA, non-interlaced","md5":"ed963ecabf5e24e322b15fe4da860928","sha1":"6e93a190a437fed5c5e2827af21042486eb2b2ee","sha256":"906467c5d896dbe87749d74f950162a0de1511befb540f07aa031ec1f24d210e","sha512":"20b7af3047e61067da169942ca735005e0f259db5ed7aba7e444aa43f5f67b3965229b455895e79cdd6832fc18d5b28314a8c33627302903177e9e0b7d595619","ssdeep":"","tlshash":"8c816de995d0de0241b99fbc8eb56962f5298df5892cd061ee057071550a84390ff788","first_seen":"2025-06-15T16:39:48.208799Z","last_seen":"2026-06-06T23:56:38.296017Z","times_seen":104,"resource_available":false,"data":null}},"time_used":780,"timings":{"blocked":494,"dns":0,"connect":0,"send":0,"wait":285,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"res.njxzwh.com/downza/pc/v2023/images/andior.png","fqdn":"res.njxzwh.com","domain":"njxzwh.com","tld":"com"},"ip":{"addr":"113.240.117.108","port":443,"asn":63835,"as":"No.293,Wanbao Avenue","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.downza.cn/soft/27933.html","date":"2026-02-09T10:40:41.013Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"res.njxzwh.com","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Sun, 04 Jan 2026 00:00:00 GMT","end":"Sat, 04 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"CD:91:C8:DC:75:28:A2:68:09:8B:A1:E3:80:02:F5:FA:FD:F0:C2:E6","sha256":"4D:AF:FF:F9:76:6E:B8:BD:6E:50:11:7E:3A:D1:3E:70:7D:9D:6B:2E:56:2C:34:46:80:3E:A1:C8:01:14:CB:61"}}},"request":{"raw":"GET /downza/pc/v2023/images/andior.png HTTP/1.1\r\nHost: res.njxzwh.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://res.njxzwh.com/downza/pc/v2023/css/detail.css?2026020913\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 09 Feb 2026 10:40:41 GMT\r\nContent-Type: image/png\r\nContent-Length: 707\r\nConnection: keep-alive\r\nServer: openresty\r\nx-reserved: amazon, aws and amazon web services are trademarks or registered trademarks of Amazon Technologies, Inc\r\nCloudServiceDiscount: CDN\r\nx-amz-request-id: 0000019A347CD59E97A9F3A1614A5A0C\r\nETag: \"4c26f012aa7af4b0b836c59d1005fadd\"\r\nLast-Modified: Thu, 30 Oct 2025 09:32:37 GMT\r\nx-amz-id-2: 36AAAQAAEAABAAAQAAEAABAAAQAAEAABAAAaI=AAAAAAAAAAAAAAAAAAAAAAAAAA\r\nX-CCDN-Expires: 1553682\r\nvia: CHN-HNchangsha-AREACT1-CACHE65[2],CHN-HNchangsha-AREACT1-CACHE20[0,TCP_HIT,0],CHN-JSwuxi-GLOBAL2-CACHE53[6],CHN-JSwuxi-GLOBAL2-CACHE104[0,TCP_HIT,4]\r\nx-hcs-proxy-type: 1\r\nX-CCDN-CacheTTL: 2592000\r\nnginx-hit: 1\r\nAge: 1038338\r\nAccept-Ranges: bytes\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: OPTION,GET\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":707,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced","md5":"4c26f012aa7af4b0b836c59d1005fadd","sha1":"df95ac64e5776203654521009c12355fd5fb76c1","sha256":"5c9ec5f3b44551b2d481850a165388fe3b3476eb4544f919eb90d85021f831ba","sha512":"882333038b42b63c176376db6a5a5226499dafe84c3e16fce82203bf154ef0f924755b0efae655f1e07749593c5c75475a6ff0f3db8a6575ec8ac9fadd8847ad","ssdeep":"","tlshash":"6d0110e7c10f6a381a156a9939280cc2f392958402a469ae0f249967d5a4d6d7181b14","first_seen":"2025-06-15T16:39:48.373053Z","last_seen":"2026-06-06T22:27:36.488922Z","times_seen":13,"resource_available":false,"data":null}},"time_used":341,"timings":{"blocked":68,"dns":0,"connect":0,"send":0,"wait":272,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"res.njxzwh.com/downza/pc/v2023/images/gwba.png","fqdn":"res.njxzwh.com","domain":"njxzwh.com","tld":"com"},"ip":{"addr":"113.240.117.108","port":443,"asn":63835,"as":"No.293,Wanbao Avenue","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.downza.cn/soft/27933.html","date":"2026-02-09T10:40:26.578Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"res.njxzwh.com","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Sun, 04 Jan 2026 00:00:00 GMT","end":"Sat, 04 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"CD:91:C8:DC:75:28:A2:68:09:8B:A1:E3:80:02:F5:FA:FD:F0:C2:E6","sha256":"4D:AF:FF:F9:76:6E:B8:BD:6E:50:11:7E:3A:D1:3E:70:7D:9D:6B:2E:56:2C:34:46:80:3E:A1:C8:01:14:CB:61"}}},"request":{"raw":"GET /downza/pc/v2023/images/gwba.png HTTP/1.1\r\nHost: res.njxzwh.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.downza.cn/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 09 Feb 2026 10:40:41 GMT\r\nContent-Type: image/png\r\nContent-Length: 19256\r\nConnection: keep-alive\r\nServer: openresty\r\nx-reserved: amazon, aws and amazon web services are trademarks or registered trademarks of Amazon Technologies, Inc\r\nCloudServiceDiscount: CDN\r\nx-amz-request-id: 0000019A347CC443901AE23AD07F3E92\r\nETag: \"d0289dc0a46fc5b15b3363ffa78cf6c7\"\r\nLast-Modified: Thu, 30 Oct 2025 09:32:38 GMT\r\nx-amz-id-2: 36AAAQAAEAABAAAQAAEAABAAAQAAEAABAAAaI=AAAAAAAAAAAAAAAAAAAAAAAAAA\r\nX-CCDN-Expires: 1553386\r\nvia: CHN-HNchangsha-AREACT1-CACHE56[2],CHN-HNchangsha-AREACT1-CACHE67[0,TCP_HIT,0],CHN-JSwuxi-GLOBAL2-CACHE94[5],CHN-JSwuxi-GLOBAL2-CACHE67[0,TCP_HIT,4]\r\nx-hcs-proxy-type: 1\r\nX-CCDN-CacheTTL: 2592000\r\nnginx-hit: 1\r\nAge: 1038634\r\nAccept-Ranges: bytes\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: OPTION,GET\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":19256,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 20 x 20, 8-bit/color RGBA, non-interlaced","md5":"d0289dc0a46fc5b15b3363ffa78cf6c7","sha1":"29c400bc3b89f6085766dac4e0330ded5cb73d52","sha256":"a20583c81805fe64f7fa210851ce29754af9d25fd6aa5a3225a9557529602513","sha512":"10a9cd6fd64b8107db8b058eb8c4cc0fe23bb5c13a91d40caf93d323f4a15f1b34463bf0eacb0239c6dbd699ec6c49a8625e86cec674cc7b351509155b889e7f","ssdeep":"96:VSMllcHitlIxv9vk7C1+I4wWHLihk/xGWvki7rxmVKXUsDEVWvdNGthls+GfNXrL:VSHIIHUCD4wabkijpso15909rfEx","tlshash":"1c823928fcf0b125548993393de674095c779bc3c681ac45badc8a0b6f00fa95d6b183","first_seen":"2023-04-16T20:03:19Z","last_seen":"2026-06-17T23:43:04.616447Z","times_seen":10295,"resource_available":false,"data":null}},"time_used":14647,"timings":{"blocked":14339,"dns":0,"connect":0,"send":0,"wait":302,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zz.bdstatic.com/linksubmit/push.js","fqdn":"zz.bdstatic.com","domain":"bdstatic.com","tld":"com"},"ip":{"addr":"157.255.63.48","port":443,"asn":136958,"as":"China Unicom Guangdong IP network","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.downza.cn/soft/27933.html","date":"2026-02-09T10:40:41.290Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"baidu.com","organization":"Beijing Baidu Netcom Science Technology Co., Ltd"},"issuer":{"commonName":"GlobalSign RSA OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 09 Jul 2025 07:01:02 GMT","end":"Mon, 10 Aug 2026 07:01:01 GMT"},"fingerprint":{"sha1":"21:BF:66:0D:67:BE:7A:7F:49:48:05:30:F4:7F:09:F2:30:36:CA:63","sha256":"0D:82:2C:9A:90:5A:EF:E9:8F:37:12:C0:E0:26:30:EE:95:33:2C:45:5F:E7:74:5D:F0:8D:BC:79:F4:B0:A1:49"}}},"request":{"raw":"GET /linksubmit/push.js HTTP/1.1\r\nHost: zz.bdstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.downza.cn/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: JSP3/2.0.14\r\ndate: Mon, 09 Feb 2026 10:40:42 GMT\r\ncontent-type: application/x-javascript\r\nlast-modified: Wed, 04 Feb 2026 10:28:05 GMT\r\netag: \"69831f35-134\"\r\ncache-control: max-age=86400\r\ncontent-encoding: br\r\nage: 24895\r\naccept-ranges: bytes\r\ntracecode: 22420813770564956938020911\r\nohc-global-saved-time: Mon, 09 Feb 2026 03:37:22 GMT\r\nohc-cache-hit: gz5un58 [2], jnuncache65 [2]\r\nohc-response-time: 1 0 0 0 0 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":308,"size_decoded":0,"mime_type":"application/x-javascript","magic":"ASCII text, with very long lines (308), with no line terminators","md5":"f9fc52ab67f035b8baf5d558714cc94d","sha1":"37062a6fb1ef410d496137d44275738ae743c747","sha256":"c31f2003f1c93ac1e34b09f376d97a65da6e110bf451cf1e0e50a7946c5e7212","sha512":"ebb0415852fbb5b964094e2e55a28b90f701dff1977c8b98c6f24d65d09067dc0c417d01492ca28a4be6747816d7c0bfac87b73a33725aee047a5d2f7ab83182","ssdeep":"","tlshash":"11e0cde86054c01c0dcb107135bb324ce7771d675a645545c04d9445396cb1f8247fe9","first_seen":"2023-03-07T01:18:58Z","last_seen":"2026-06-15T02:27:31.015338Z","times_seen":23342,"resource_available":true,"data":null}},"time_used":1425,"timings":{"blocked":-1,"dns":630,"connect":258,"send":0,"wait":268,"receive":0,"ssl":268},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img3.downza.cn/zt/201806/181646-5b1e4c0e531ed.jpg","fqdn":"img3.downza.cn","domain":"downza.cn","tld":"cn"},"ip":{"addr":"121.22.232.168","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.downza.cn/soft/27933.html","date":"2026-02-09T10:40:26.298Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img3.downza.cn","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Thu, 15 Jan 2026 00:00:00 GMT","end":"Wed, 15 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"4D:77:54:39:09:D0:ED:EE:10:10:0E:82:47:48:45:9A:1F:AC:36:7A","sha256":"86:A8:1B:F9:16:89:4D:41:B2:D3:65:4D:15:83:34:E8:F4:AC:0C:46:D1:F5:0A:AE:99:D0:B7:33:F3:EE:5A:9B"}}},"request":{"raw":"GET /zt/201806/181646-5b1e4c0e531ed.jpg HTTP/1.1\r\nHost: img3.downza.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.downza.cn/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 09 Feb 2026 10:40:41 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 14940\r\nConnection: keep-alive\r\nServer: openresty\r\nx-reserved: amazon, aws and amazon web services are trademarks or registered trademarks of Amazon Technologies, Inc\r\nCloudServiceDiscount: CDN\r\nx-amz-request-id: 0000019BB73BFD819056967D71963C63\r\nETag: \"f0c2ca9501d4aaf3ad7a1656b768a4c7\"\r\nLast-Modified: Thu, 07 Nov 2019 05:25:58 GMT\r\nx-amz-tagging-count: 0\r\nx-amz-id-2: 36AAAQAAEAABAAAQAAEAABAAAQAAEAABAAAaI=AAAAAAAAAAAAAAAAAAAAAAAAAA\r\nvia: CHN-HEqinhuangdao-AREACUCC1-CACHE86[26],CHN-HEqinhuangdao-AREACUCC1-CACHE4[0,TCP_HIT,23],CHN-TJ-GLOBAL6-CACHE88[7],CHN-TJ-GLOBAL6-CACHE106[0,TCP_HIT,3]\r\nx-hcs-proxy-type: 1\r\nX-CCDN-CacheTTL: 31536000\r\nnginx-hit: 1\r\nAge: 2021423\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":14940,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CS5 Windows, datetime=2017:02:24 17:07:01], baseline, precision 8, 200x100, components 3","md5":"f0c2ca9501d4aaf3ad7a1656b768a4c7","sha1":"9376865706100f74a2592e76bce79b6119a8ce3e","sha256":"40350d427242d516a322f02b758924b645a774e178a78e794e94925d0165135b","sha512":"c0c43bedfd8baf8f232f1bc074fb7b4027b1c049465bac85d9c7dee02c07ae27ee5afb9a0969a416ed9270110b993af193867a7d62fd9c11359e2821b87ca0e3","ssdeep":"192:2DecYyey2aMPy4lP9qjsSUNkEnwkniCr/vE2uj6Eh5axxUwAsR:wDV2ani0ykEnrniCLO6Eh8a0","tlshash":"4a625a18bb41ad61efd016764896c393e720ddc435a36b72389c61a2bf31fb28c0c342","first_seen":"2026-02-09T10:41:32.050043Z","last_seen":"2026-02-09T10:41:32.050043Z","times_seen":1,"resource_available":false,"data":null}},"time_used":15551,"timings":{"blocked":14621,"dns":0,"connect":229,"send":0,"wait":320,"receive":1,"ssl":379},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img3.downza.cn/softbaike/202011/150316-5fbcb0346ddff.jpg","fqdn":"img3.downza.cn","domain":"downza.cn","tld":"cn"},"ip":{"addr":"121.22.232.168","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.downza.cn/soft/27933.html","date":"2026-02-09T10:40:26.476Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img3.downza.cn","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Thu, 15 Jan 2026 00:00:00 GMT","end":"Wed, 15 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"4D:77:54:39:09:D0:ED:EE:10:10:0E:82:47:48:45:9A:1F:AC:36:7A","sha256":"86:A8:1B:F9:16:89:4D:41:B2:D3:65:4D:15:83:34:E8:F4:AC:0C:46:D1:F5:0A:AE:99:D0:B7:33:F3:EE:5A:9B"}}},"request":{"raw":"GET /softbaike/202011/150316-5fbcb0346ddff.jpg HTTP/1.1\r\nHost: img3.downza.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.downza.cn/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 09 Feb 2026 10:40:42 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 30890\r\nConnection: keep-alive\r\nServer: openresty\r\nx-reserved: amazon, aws and amazon web services are trademarks or registered trademarks of Amazon Technologies, Inc\r\nCloudServiceDiscount: CDN\r\nx-amz-request-id: 0000019C28F513F99015023D647C26DD\r\nETag: \"e876c3d22535b5fc0eb7a86b8a64879c\"\r\nLast-Modified: Tue, 24 Nov 2020 07:03:16 GMT\r\nx-amz-id-2: 36AAAQAAEAABAAAQAAEAABAAAQAAEAABAAAaI=AAAAAAAAAAAAAAAAAAAAAAAAAA\r\nvia: CHN-HEqinhuangdao-AREACUCC1-CACHE86[5],CHN-HEqinhuangdao-AREACUCC1-CACHE5[0,TCP_HIT,4],CHN-TJ-GLOBAL6-CACHE126[12],CHN-TJ-GLOBAL6-CACHE60[0,TCP_HIT,10]\r\nx-hcs-proxy-type: 1\r\nX-CCDN-CacheTTL: 31536000\r\nnginx-hit: 1\r\nAge: 354198\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":30890,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CS2 Windows, datetime=2013:04:18 03:13:21], baseline, precision 8, 128x128, components 3","md5":"e876c3d22535b5fc0eb7a86b8a64879c","sha1":"93aec7e7018d9add6001bd50c951cecf55e48226","sha256":"66507819fabb8045521910b7d185d1cc335864a9acc4ebf085dbde7ecdb15578","sha512":"122006c791e668b796c49d30896336d0626c663d8c7bcc0820d44db376247959e3d89fc1458c2f80e438ae92b19ef0af4a3025a7a215556f4f78098ee06cb700","ssdeep":"192:H21sAIwikXhvIWrUaG1sAIwikXhvIWrHkA6Ftm553PYNMtKwAtV+p23xfndsOVSp:Hbp8Nltp8NlY9+53PYNg7SVf35PFl8p","tlshash":"6ed28d241f64be52e4d5833859d2ebd6e6213e1b71737e86354c36193f31b820e9e247","first_seen":"2025-06-15T16:39:48.246342Z","last_seen":"2026-06-06T23:56:38.343954Z","times_seen":29,"resource_available":false,"data":null}},"time_used":16019,"timings":{"blocked":15630,"dns":0,"connect":0,"send":0,"wait":308,"receive":81,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s.union.360.cn/proxy.html","fqdn":"s.union.360.cn","domain":"360.cn","tld":"cn"},"ip":{"addr":"171.8.167.94","port":443,"asn":137687,"as":"Luoyang, Henan Province, P.R.China.","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://www.downza.cn/soft/27933.html","date":"2026-02-09T10:40:43.149Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"s.union.360.cn","organization":""},"issuer":{"commonName":"WoTrus DV Server CA  [Run by the Issuer]","organization":"WoTrus CA Limited"},"validity":{"start":"Tue, 11 Mar 2025 00:00:00 GMT","end":"Sat, 11 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"9D:87:2A:18:C2:1B:CF:BC:4B:67:6F:0A:D2:88:97:AD:D4:5C:08:80","sha256":"69:6F:8B:35:C7:8A:0A:6D:A4:7E:BF:17:AF:AA:21:1D:83:3B:2D:B7:B0:D3:A4:A6:B1:26:14:1B:7F:49:2A:C3"}}},"request":{"raw":"GET /proxy.html HTTP/1.1\r\nHost: s.union.360.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.downza.cn/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: openresty/1.9.15.1\r\nDate: Mon, 09 Feb 2026 10:40:43 GMT\r\nContent-Type: text/html\r\nLast-Modified: Thu, 04 Sep 2025 08:11:50 GMT\r\nTransfer-Encoding: chunked\r\nConnection: close\r\nVary: Accept-Encoding\r\nETag: W/\"68b949c6-7c7\"\r\nP3P: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty:1.9.15.1","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1991,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (1991), with no line terminators","md5":"d89cb9c53d3744759aa660ab5c0a6866","sha1":"fec1278a3b957ee56c7a68ebb0a561e070bf3d75","sha256":"0ff72f560db1021a6ebfb448ff1f0e2577e84cdcc994939da93557f6244881bc","sha512":"78c30468fc3653a08b3beb418be72eb86a22a9175da798722bb3477f4c6a49a717d60df75d536164c44375a5d4746f262175f56da435089f0f91a7245696c0fc","ssdeep":"","tlshash":"2241b8ed3249706900664e512aef370e723812366847cca03e66f9f27ca974f8713dd9","first_seen":"2023-06-16T09:54:32Z","last_seen":"2026-06-06T23:56:38.2915Z","times_seen":972,"resource_available":false,"data":null}},"time_used":327,"timings":{"blocked":-1,"dns":2,"connect":285,"send":0,"wait":282,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zz314.downza.cn/softbaike/PCsoft/2016-12-27/ac7425e00796a5bfc2d7e8647b436735.png","fqdn":"zz314.downza.cn","domain":"downza.cn","tld":"cn"},"ip":{"addr":"116.153.39.131","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.downza.cn/soft/27933.html","date":"2026-02-09T10:40:26.481Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zz314.downza.cn","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Sat, 17 Jan 2026 00:00:00 GMT","end":"Fri, 17 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"B5:A8:10:C3:A9:D4:76:FC:F4:79:44:C2:A6:E2:15:3E:AF:B6:C6:2F","sha256":"DD:95:3F:93:75:AA:52:73:B4:C6:A7:79:71:FD:05:06:D4:44:57:E1:A7:A7:9B:59:87:70:10:08:59:44:1F:53"}}},"request":{"raw":"GET /softbaike/PCsoft/2016-12-27/ac7425e00796a5bfc2d7e8647b436735.png HTTP/1.1\r\nHost: zz314.downza.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.downza.cn/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 09 Feb 2026 10:40:42 GMT\r\nContent-Type: image/png\r\nContent-Length: 8575\r\nConnection: keep-alive\r\nServer: openresty\r\nx-reserved: amazon, aws and amazon web services are trademarks or registered trademarks of Amazon Technologies, Inc\r\nCloudServiceDiscount: CDN\r\nx-amz-request-id: 000001941157142997652F57B785F1AD\r\nContent-MD5: vJUTdPw+0FPqWyuSMYttBw==\r\nETag: \"bc951374fc3ed053ea5b2b92318b6d07\"\r\nLast-Modified: Wed, 03 Apr 2019 04:58:09 GMT\r\nx-amz-meta-md5chksum: bc951374fc3ed053ea5b2b92318b6d07\r\nx-amz-tagging-count: 0\r\nx-amz-id-2: 32AAAQAAEAABAAAQAAEAABAAAQAAEAABCSAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA\r\nX-CCDN-Expires: 29434874\r\nvia: CHN-JXnanchang-AREACUCC1-CACHE16[6],CHN-JXnanchang-AREACUCC1-CACHE15[0,TCP_HIT,2],CHN-JSwuxi-GLOBAL2-CACHE5[23],CHN-JSwuxi-GLOBAL2-CACHE15[0,TCP_HIT,20],CHN-SH-GLOBAL4-CACHE109[15],CHN-SH-GLOBAL4-CACHE102[0,TCP_HIT,14]\r\nx-hcs-proxy-type: 1\r\nX-CCDN-CacheTTL: 31536000\r\nX-CCDN-REQ-ID-46B1: 4ead347136e871093a58eee71783b5ac\r\nnginx-hit: 1\r\nAge: 2101126\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":8575,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 229 x 229, 8-bit/color RGBA, non-interlaced","md5":"bc951374fc3ed053ea5b2b92318b6d07","sha1":"4550ce9a857c8e12a72ce42882562518c62bdb33","sha256":"f7c4e14ad1c95a69008cb65fea0d50ee40d71ff26d1b63472c38af4d759e498f","sha512":"8b70c77a82b5d95e91c8adb444fe6cdfdfa3291e128a0b297f5b9ac029e175788f88ce5227a819c096264a282f830c83ad73aa483dcfed933d5ebf8d544df75e","ssdeep":"192:ySjsuBeOaYJ8kSHhOLpImLsrBT0EvcsTt/slDCxfCQB926pE2iVS7OC:NjYhkwhOLpImQrBT0KcmPCAz7D","tlshash":"f202aeeca5d3cc21de45030761ad4aa6dd99204a06db789623a2bc1fdff8e2606edd04","first_seen":"2025-06-15T16:39:48.203354Z","last_seen":"2026-06-06T22:27:36.479018Z","times_seen":34,"resource_available":false,"data":null}},"time_used":16107,"timings":{"blocked":15783,"dns":0,"connect":0,"send":0,"wait":323,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.360.cn/isinst.html","fqdn":"www.360.cn","domain":"360.cn","tld":"cn"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://www.downza.cn/soft/27933.html","date":"2026-02-09T10:40:41.325Z","timestamp":0,"http_version":"","security_state":"broken","security_info":null,"request":{"raw":"GET /isinst.html HTTP/1.1\r\nHost: www.360.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.downza.cn/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-18T01:31:21.233037Z","times_seen":16497762,"resource_available":true,"data":null}},"time_used":675,"timings":{"blocked":-1,"dns":675,"connect":505,"send":0,"wait":0,"receive":0,"ssl":182},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img3.downza.cn/download/202108/145051-611cadcb2c970.jpg?x-image-process=style/50-50","fqdn":"img3.downza.cn","domain":"downza.cn","tld":"cn"},"ip":{"addr":"121.22.232.168","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.downza.cn/soft/27933.html","date":"2026-02-09T10:40:26.110Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img3.downza.cn","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Thu, 15 Jan 2026 00:00:00 GMT","end":"Wed, 15 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"4D:77:54:39:09:D0:ED:EE:10:10:0E:82:47:48:45:9A:1F:AC:36:7A","sha256":"86:A8:1B:F9:16:89:4D:41:B2:D3:65:4D:15:83:34:E8:F4:AC:0C:46:D1:F5:0A:AE:99:D0:B7:33:F3:EE:5A:9B"}}},"request":{"raw":"GET /download/202108/145051-611cadcb2c970.jpg?x-image-process=style/50-50 HTTP/1.1\r\nHost: img3.downza.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 09 Feb 2026 10:40:41 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 3839\r\nConnection: keep-alive\r\nServer: openresty\r\nx-reserved: amazon, aws and amazon web services are trademarks or registered trademarks of Amazon Technologies, Inc\r\nCloudServiceDiscount: CDN\r\nx-amz-id-2: 36AAAQAAEAABAAAQAAEAABAAAQAAEAABAAAaI=AAAAAAAAAAAAAAAAAAAAAAAAAA\r\nx-amz-request-id: 0000019BC580EDF2901AE3ACFC22EA98\r\nETag: 10a4e23432b4985ef8fbe48c41f5809d\r\nX-Oef-Request-Id: 34363965363034383361363a3233372e35363a66\r\nX-Request-Id: 34363965363034383361363a3233372e35363a66\r\nX-Transcode-Length: 32564\r\nvia: CHN-HEqinhuangdao-AREACUCC1-CACHE6[37],CHN-HEqinhuangdao-AREACUCC1-CACHE24[0,TCP_HIT,27],CHN-TJ-GLOBAL6-CACHE129[24],CHN-TJ-GLOBAL6-CACHE18[0,TCP_HIT,22]\r\nx-hcs-proxy-type: 1\r\nX-CCDN-CacheTTL: 31536000\r\nnginx-hit: 1\r\nAge: 1755796\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3839,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1, software=www.meitu.com], baseline, precision 8, 50x50, components 3","md5":"4bf45a3473445021b6db071e35065b45","sha1":"4bcf6fa6b0057f9363300277d589840e7a67f74e","sha256":"4d0a7669e1a118d23ddf5d096b73061a5e916195522a27bc4e8459ac1cbc1c30","sha512":"cbbdff365dd2580428da981565e6e14de05b4fa06228bfa8896bf86dfbe7b0400d919732809107d6853c1fb90d4241fb3bcc6620262d18ae1e1ea968c36ebb76","ssdeep":"","tlshash":"dd816b972f2dce8cf820137c9528cc4ab70d997d88b0d92a3020a246d681bcbf565db4","first_seen":"2026-02-09T10:41:32.064266Z","last_seen":"2026-02-09T10:41:32.064266Z","times_seen":1,"resource_available":false,"data":null}},"time_used":15981,"timings":{"blocked":15682,"dns":0,"connect":0,"send":0,"wait":299,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bigdata.onlinedown.net/win_heartbeat_tool.js?2026020913","fqdn":"bigdata.onlinedown.net","domain":"onlinedown.net","tld":"net"},"ip":{"addr":"115.223.9.119","port":443,"asn":134771,"as":"WENZHOU, ZHEJIANG Province, P.R.China.","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.downza.cn/soft/27933.html","date":"2026-02-09T10:40:26.059Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.onlinedown.net","organization":""},"issuer":{"commonName":"RapidSSL TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 11 Sep 2025 00:00:00 GMT","end":"Thu, 24 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"FC:FA:0E:D8:11:22:B7:C8:E2:EA:47:2C:3F:C4:35:3E:75:4F:D4:A6","sha256":"DC:64:A6:5B:03:F0:08:02:D6:8F:BF:26:A0:58:6F:5C:2D:9B:38:6A:12:95:AA:9E:B9:2F:3D:3D:E9:A6:A2:95"}}},"request":{"raw":"GET /win_heartbeat_tool.js?2026020913 HTTP/1.1\r\nHost: bigdata.onlinedown.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.downza.cn/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 09 Feb 2026 10:40:29 GMT\r\nContent-Type: application/javascript\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nServer: openresty\r\nLast-Modified: Mon, 01 Dec 2025 06:22:17 GMT\r\nVary: Accept-Encoding\r\nETag: W/\"692d3419-1466\"\r\nContent-Encoding: gzip\r\nX-CCDN-Origin-Time: 13\r\nvia: CHN-ZJwenzhou-AREACT1-CACHE49[35],CHN-ZJwenzhou-AREACT1-CACHE12[30,TCP_MISS,33],CHN-JSwuxi-GLOBAL2-CACHE112[16],CHN-JSwuxi-GLOBAL2-CACHE13[13,TCP_MISS,14]\r\nx-hcs-proxy-type: 0\r\nX-CCDN-CacheTTL: 0\r\nX-CCDN-REQ-ID-46B1: 216e37a1137552110738c94a6c5f1df4\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":5222,"size_decoded":0,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text, with CRLF line terminators","md5":"4e979ccfd61b1b2edd7c35c38e983d65","sha1":"42e9c12a32f3d71d4dd1f54218d109eaa4ed225a","sha256":"c3d3ad3880a8c5c7ff719b98acadbbb2127bc2bd2796dea8f535f1b503320887","sha512":"c6cb9f8906181aab8afb067ecf46e79951130d50ce1a898053814201e247d07d11f5260871b012892f81e9e0e651e1040203d3afc8408663b8951a21383b48fd","ssdeep":"96:Q6WIKZ7Wk+mj/hCP4C1wZD1ZD5BnX+B68pkO967zE/DCKlQ1mxp6wti:Q6WI3obP3XBnOBdto74m1mbPI","tlshash":"9ab1959425d970aa45bbbb705f63e08af3305a131940e198bddd87160f33bf89245fd9","first_seen":"2025-12-19T23:36:25.989321Z","last_seen":"2026-06-06T22:27:36.490719Z","times_seen":82,"resource_available":true,"data":null}},"time_used":3295,"timings":{"blocked":-1,"dns":1990,"connect":302,"send":0,"wait":334,"receive":0,"ssl":668},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img3.downza.cn/thumb/201802/c2f931d8a9c7a306f6605d980496e0b7-50x50.jpg","fqdn":"img3.downza.cn","domain":"downza.cn","tld":"cn"},"ip":{"addr":"121.22.232.168","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.downza.cn/soft/27933.html","date":"2026-02-09T10:40:26.540Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img3.downza.cn","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Thu, 15 Jan 2026 00:00:00 GMT","end":"Wed, 15 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"4D:77:54:39:09:D0:ED:EE:10:10:0E:82:47:48:45:9A:1F:AC:36:7A","sha256":"86:A8:1B:F9:16:89:4D:41:B2:D3:65:4D:15:83:34:E8:F4:AC:0C:46:D1:F5:0A:AE:99:D0:B7:33:F3:EE:5A:9B"}}},"request":{"raw":"GET /thumb/201802/c2f931d8a9c7a306f6605d980496e0b7-50x50.jpg HTTP/1.1\r\nHost: img3.downza.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 09 Feb 2026 10:40:42 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 1040\r\nConnection: keep-alive\r\nServer: openresty\r\nx-reserved: amazon, aws and amazon web services are trademarks or registered trademarks of Amazon Technologies, Inc\r\nCloudServiceDiscount: CDN\r\nx-amz-request-id: 0000019C0CE8120D90167D1DDE39A447\r\nETag: \"7a952355069f0914c9986cb0c2a613e5\"\r\nLast-Modified: Thu, 07 Nov 2019 04:07:19 GMT\r\nx-amz-tagging-count: 0\r\nx-amz-id-2: 36AAAQAAEAABAAAQAAEAABAAAQAAEAABAAAaI=AAAAAAAAAAAAAAAAAAAAAAAAAA\r\nvia: CHN-HEqinhuangdao-AREACUCC1-CACHE6[23],CHN-HEqinhuangdao-AREACUCC1-CACHE74[0,TCP_HIT,20],CHN-TJ-GLOBAL6-CACHE78[6],CHN-TJ-GLOBAL6-CACHE108[0,TCP_HIT,3]\r\nx-hcs-proxy-type: 1\r\nX-CCDN-CacheTTL: 31536000\r\nnginx-hit: 1\r\nAge: 608716\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":1040,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 50x50, components 3","md5":"7a952355069f0914c9986cb0c2a613e5","sha1":"a6c73000b5a642564a30b1e63dae2ab8dd791ec5","sha256":"cb9bbb00c72e9ce2454f6647871c074edbbe59d2b618b080c57e248daaec7a69","sha512":"7879a9ad1902f476ba736b84b6f2ff2d3c47cda5b6c501e8c52200ad8ac659cc48a2ccd3daa68765a66383cb44e53e2e39127ecfe23c47181ecbfc2c056d1c6e","ssdeep":"","tlshash":"b711943b16a6d507cf917a750a523f61c2c2181aba5209f801a82a1c6ebbcf0e8651e2","first_seen":"2026-02-09T10:41:32.068875Z","last_seen":"2026-02-09T10:41:32.068875Z","times_seen":1,"resource_available":false,"data":null}},"time_used":16375,"timings":{"blocked":16099,"dns":0,"connect":0,"send":0,"wait":276,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zz314.downza.cn/soft/spbf-184/2018-05-25/cfed5a28194d1f521cc1a4b5512b889d.jpg","fqdn":"zz314.downza.cn","domain":"downza.cn","tld":"cn"},"ip":{"addr":"116.153.39.131","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.downza.cn/soft/27933.html","date":"2026-02-09T10:40:26.574Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zz314.downza.cn","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Sat, 17 Jan 2026 00:00:00 GMT","end":"Fri, 17 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"B5:A8:10:C3:A9:D4:76:FC:F4:79:44:C2:A6:E2:15:3E:AF:B6:C6:2F","sha256":"DD:95:3F:93:75:AA:52:73:B4:C6:A7:79:71:FD:05:06:D4:44:57:E1:A7:A7:9B:59:87:70:10:08:59:44:1F:53"}}},"request":{"raw":"GET /soft/spbf-184/2018-05-25/cfed5a28194d1f521cc1a4b5512b889d.jpg HTTP/1.1\r\nHost: zz314.downza.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.downza.cn/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 09 Feb 2026 10:40:41 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 3745\r\nConnection: keep-alive\r\nServer: openresty\r\nx-reserved: amazon, aws and amazon web services are trademarks or registered trademarks of Amazon Technologies, Inc\r\nCloudServiceDiscount: CDN\r\nx-amz-request-id: 000001974A8B15129057254B113AD70C\r\nContent-MD5: PdbLFOVxiCnDnswEOjDtXA==\r\nETag: \"3dd6cb14e5718829c39ecc043a30ed5c\"\r\nLast-Modified: Tue, 02 Apr 2019 08:29:48 GMT\r\nx-amz-meta-md5chksum: 3dd6cb14e5718829c39ecc043a30ed5c\r\nx-amz-tagging-count: 0\r\nx-amz-id-2: 32AAAQAAEAABAAAQAAEAABAAAQAAEAABCSAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA\r\nX-CCDN-Expires: 29707352\r\nvia: CHN-JXnanchang-AREACUCC1-CACHE6[7],CHN-JXnanchang-AREACUCC1-CACHE6[0,TCP_HIT,4],CHN-JSwuxi-GLOBAL2-CACHE40[23],CHN-JSwuxi-GLOBAL2-CACHE6[0,TCP_HIT,18]\r\nx-hcs-proxy-type: 1\r\nX-CCDN-CacheTTL: 31536000\r\nX-CCDN-REQ-ID-46B1: 21823ff24988baeb0742c452346e3763\r\nnginx-hit: 1\r\nAge: 1828648\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3745,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1, software=www.meitu.com], baseline, precision 8, 80x80, components 3","md5":"3dd6cb14e5718829c39ecc043a30ed5c","sha1":"4bebaa9c978ed5f0e6e08f139ca87ebe0fe2e96d","sha256":"aa9565f1ffad64e4dcde73bafe69055bfd54a5baa76b0e533038e372f2b4500e","sha512":"34e3dd4b5503b5bf9ceeaa910f63fa9541762284a781115d9542e9c6329055dd1368c1f899381dcc184df7f298385fa9797f1e925fe58b1b4fdbdb329183aef3","ssdeep":"","tlshash":"34716b37e603eea2cdf355b50b49ed85700ae6e8a2c3161eba521964f504bd2404637c","first_seen":"2025-06-15T16:39:48.404638Z","last_seen":"2026-06-06T22:27:36.47323Z","times_seen":34,"resource_available":false,"data":null}},"time_used":15257,"timings":{"blocked":14344,"dns":1,"connect":250,"send":0,"wait":251,"receive":2,"ssl":408},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img3.downza.cn/mobile/202205/140639-6274baefc92b5.jpg","fqdn":"img3.downza.cn","domain":"downza.cn","tld":"cn"},"ip":{"addr":"121.22.232.168","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.downza.cn/soft/27933.html","date":"2026-02-09T10:40:26.594Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img3.downza.cn","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Thu, 15 Jan 2026 00:00:00 GMT","end":"Wed, 15 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"4D:77:54:39:09:D0:ED:EE:10:10:0E:82:47:48:45:9A:1F:AC:36:7A","sha256":"86:A8:1B:F9:16:89:4D:41:B2:D3:65:4D:15:83:34:E8:F4:AC:0C:46:D1:F5:0A:AE:99:D0:B7:33:F3:EE:5A:9B"}}},"request":{"raw":"GET /mobile/202205/140639-6274baefc92b5.jpg HTTP/1.1\r\nHost: img3.downza.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 09 Feb 2026 10:40:43 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 5452\r\nConnection: keep-alive\r\nServer: openresty\r\nx-reserved: amazon, aws and amazon web services are trademarks or registered trademarks of Amazon Technologies, Inc\r\nCloudServiceDiscount: CDN\r\nx-amz-request-id: 0000019BF507EF1D9056964CEEA4C6C4\r\nETag: \"52e6f4acaef81bb962f2ba1be3b9706e\"\r\nLast-Modified: Fri, 06 May 2022 06:06:39 GMT\r\nx-amz-id-2: 36AAAQAAEAABAAAQAAEAABAAAQAAEAABAAAaI=AAAAAAAAAAAAAAAAAAAAAAAAAA\r\nvia: CHN-HEqinhuangdao-AREACUCC1-CACHE21[9],CHN-HEqinhuangdao-AREACUCC1-CACHE10[0,TCP_HIT,4],CHN-TJ-GLOBAL6-CACHE34[10],CHN-TJ-GLOBAL6-CACHE48[0,TCP_HIT,7]\r\nx-hcs-proxy-type: 1\r\nX-CCDN-CacheTTL: 31536000\r\nnginx-hit: 1\r\nAge: 927847\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":5452,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90\", baseline, precision 8, 128x128, components 3","md5":"52e6f4acaef81bb962f2ba1be3b9706e","sha1":"081604271fdc9cd8e2f97d5e0997a8b5e3f66509","sha256":"1c892ee2f59423a852931ed24b26049ddd58e68c2e2fde4ddb1def197b4d76f9","sha512":"65e86c0af19d1bf30c7cc6fb4d8d719f621b0e4eb3070affb35c38d58a0a1e43e7259375e78825faf90214dc5c0b23900c2a957d2fb9d8db3e6851f6f75def86","ssdeep":"96:7EZYXFzIZ8k46d7wVRJJyzV7aVNXYHL9z9VPbgo4ZI7uYC3CVWsRqhW:7FFzIv4zVRJQzV7aHXYHLaBUq37G","tlshash":"31b15c6b63e242dc3ada91afe8222d4fa3cb69cfaf9015447be55570c490e1169c478c","first_seen":"2024-05-31T23:55:31Z","last_seen":"2026-06-06T23:56:38.222166Z","times_seen":47,"resource_available":false,"data":null}},"time_used":16659,"timings":{"blocked":16409,"dns":0,"connect":0,"send":0,"wait":250,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}
