{"report_id":"f6f25b90-319a-4012-9e8a-92d7b4604115","version":6,"status":"done","tags":[],"date":"2025-10-04T16:38:15Z","url":{"schema":"https","addr":"x3os.com/4/7307286?dovr=true\u0026branch=131201\u0026os=android\u0026is_mobile=true","fqdn":"x3os.com","domain":"x3os.com","tld":"com"},"ip":{"addr":"139.45.196.64","port":0,"asn":9002,"as":"RETN Limited","country":"United Kingdom","country_code":"GB"},"final":{"url":{"schema":"https","addr":"x3os.com/partitial/5117867?var=7307286\u0026ab2r=131201\u0026prfrev=false\u0026rhd=false\u0026sf=1","fqdn":"x3os.com","domain":"x3os.com","tld":"com"},"title":"Redirect"},"submit":{"url":{"schema":"https","addr":"x3os.com/4/7307286?dovr=true\u0026branch=131201\u0026os=android\u0026is_mobile=true","fqdn":"x3os.com","domain":"x3os.com","tld":"com"},"ip":{"addr":"139.45.196.64","port":0,"asn":9002,"as":"RETN Limited","country":"United Kingdom","country_code":"GB"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-11-08T16:38:15Z","useragent":"Mozilla/5.0 (Linux; Android 6.0; Nexus 5 Build/MRA58N) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Mobile Safari/537.36","referer":"","cookies":null,"exit_node":"71qnj4gab9j33y3"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-04","alert":"Sinkholed","trigger":"x3os.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null},"summary":[{"fqdn":"x3os.com","ip":{"addr":"139.45.196.64","port":443,"asn":9002,"as":"RETN Limited","country":"United Kingdom","country_code":"GB"},"domain_registered":"2021-03-18","domain_rank":19468,"first_seen":"2025-04-24T02:39:31.647355Z","last_seen":"2025-10-02T12:57:44.152654Z","alert_count":2,"request_count":2,"received_data":2564,"sent_data":1099,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"my.rtmark.net","ip":{"addr":"172.64.146.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2014-10-29","domain_rank":43911,"first_seen":"2015-02-04T09:54:57Z","last_seen":"2025-09-29T00:18:56.050225Z","alert_count":0,"request_count":1,"received_data":771,"sent_data":463,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"click.alibaba.com","ip":{"addr":"47.246.146.72","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"United States","country_code":"US"},"domain_registered":"1999-04-15","domain_rank":521684,"first_seen":"2015-08-21T08:16:20Z","last_seen":"2025-09-30T16:52:08.867485Z","alert_count":0,"request_count":1,"received_data":1635,"sent_data":559,"comment":"","tags":null,"fingerprints":[{"name":"Java","description":"Java is a class-based, object-oriented programming language that is designed to have as few implementation dependencies as possible.","website":"https://java.com","common_platform_enumeration":"cpe:2.3:a:oracle:jre:*:*:*:*:*:*:*:*","icon":"Java.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Spring","description":"","website":"https://spring.io/","common_platform_enumeration":"","icon":"Spring.png","categories":["Web frameworks"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":null}],"analyzer":null,"urlquery":null},"javascript":{"script":null,"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"x3os.com/favicon.ico","fqdn":"x3os.com","domain":"x3os.com","tld":"com"},"ip":{"addr":"139.45.196.64","port":443,"asn":9002,"as":"RETN Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://x3os.com/4/7307286?dovr=true\u0026branch=131201\u0026os=android\u0026is_mobile=true","date":"2025-10-04T16:37:49.047Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"x3os.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 29 Sep 2025 05:23:11 GMT","end":"Sun, 28 Dec 2025 05:23:10 GMT"},"fingerprint":{"sha1":"4C:6E:3B:CA:38:7D:B2:00:EF:B4:4F:88:9B:3E:29:55:91:FE:AF:0E","sha256":"D2:5C:87:BC:0F:B8:02:33:A0:8D:AD:46:BB:C5:BC:CF:EF:1B:AA:A6:7C:F2:DE:D3:6F:DC:A2:89:AC:97:C0:87"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: x3os.com\r\nUser-Agent: Mozilla/5.0 (Linux; Android 6.0; Nexus 5 Build/MRA58N) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Mobile Safari/537.36\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: OAID=008258cf27ba4c0cee861d60dfbdbab3; oaidts=1759595868\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 204 No Content\r\nserver: nginx\r\ndate: Sat, 04 Oct 2025 16:37:49 GMT\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\npragma: public\r\ncache-control: max-age=315360000, public, must-revalidate, proxy-revalidate\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/x-icon","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-24T17:07:59.023654Z","times_seen":15665480,"resource_available":true,"data":null}},"time_used":45,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":45,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-04","alert":"Sinkholed","trigger":"x3os.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"x3os.com/4/7307286?dovr=true\u0026branch=131201\u0026os=android\u0026is_mobile=true","fqdn":"x3os.com","domain":"x3os.com","tld":"com"},"ip":{"addr":"139.45.196.64","port":443,"asn":9002,"as":"RETN Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-10-04T16:37:48.614Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"x3os.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 29 Sep 2025 05:23:11 GMT","end":"Sun, 28 Dec 2025 05:23:10 GMT"},"fingerprint":{"sha1":"4C:6E:3B:CA:38:7D:B2:00:EF:B4:4F:88:9B:3E:29:55:91:FE:AF:0E","sha256":"D2:5C:87:BC:0F:B8:02:33:A0:8D:AD:46:BB:C5:BC:CF:EF:1B:AA:A6:7C:F2:DE:D3:6F:DC:A2:89:AC:97:C0:87"}}},"request":{"raw":"GET /4/7307286?dovr=true\u0026branch=131201\u0026os=android\u0026is_mobile=true HTTP/1.1\r\nHost: x3os.com\r\nUser-Agent: Mozilla/5.0 (Linux; Android 6.0; Nexus 5 Build/MRA58N) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Mobile Safari/537.36\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 04 Oct 2025 16:37:48 GMT\r\ncontent-type: text/html; charset=utf8\r\nx-trace-id: fbd3d79dbbe9324ce419209af2d6b7c5\r\nlink: \u003chttps://my.rtmark.net\u003e; rel=\"preconnect dns-prefetch\", \u003chttps://click.alibaba.com\u003e; rel=\"preconnect dns-prefetch\"\r\naccept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace, favicon\r\naccess-control-max-age: 86400\r\npragma: no-cache\r\ncache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0\r\nexpires: Tue, 11 Jan 1994 10:00:00 GMT\r\nset-cookie: OAID=008258cf27ba4c0cee861d60dfbdbab3; expires=Sun, 04 Oct 2026 16:37:48 GMT; path=/; secure; SameSite=None\noaidts=1759595868; expires=Sun, 04 Oct 2026 16:37:48 GMT; path=/; secure; SameSite=None\nsyncedCookie=; expires=Tue, 10 Nov 2009 23:00:00 GMT\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ntiming-allow-origin: *, *\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1056,"size_decoded":0,"mime_type":"text/html; charset=utf8","magic":"HTML document, ASCII text","md5":"19bf330cd6b32b0f149b23d906b19f4b","sha1":"9254946a81d1415d7e2b0910787f3a4a83ce8d11","sha256":"70d0bbbfc0a9dec87d2809af92f0e394b917bdbffb466a3f27269bd303ec8325","sha512":"0105f0485c2139ac50d668bf8e0ed07e0bf0c30dc573436e99dfad48a7c25a504c858a476dde8f3285a7dc5bac8a1a0a72b6358724c6f6c1f2dde4916409e089","ssdeep":"","tlshash":"2c11c2df08827427597350b42a5eb11d61837407499dde94f7cd4a325f94f93cd42399","first_seen":"2025-10-04T16:38:16.987008Z","last_seen":"2025-10-04T16:38:16.987008Z","times_seen":1,"resource_available":false,"data":null}},"time_used":423,"timings":{"blocked":184,"dns":45,"connect":46,"send":0,"wait":54,"receive":0,"ssl":93},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-04","alert":"Sinkholed","trigger":"x3os.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"my.rtmark.net/img.gif?f=merge\u0026userId=008258cf27ba4c0cee861d60dfbdbab3","fqdn":"my.rtmark.net","domain":"rtmark.net","tld":"net"},"ip":{"addr":"172.64.146.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://x3os.com/4/7307286?dovr=true\u0026branch=131201\u0026os=android\u0026is_mobile=true","date":"2025-10-04T16:37:48.947Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"my.rtmark.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 28 Aug 2025 13:14:02 GMT","end":"Wed, 26 Nov 2025 14:13:48 GMT"},"fingerprint":{"sha1":"7A:B2:21:7F:72:E3:39:3E:95:5D:FB:ED:BB:1C:7E:88:C4:7A:B1:B3","sha256":"FB:1D:6D:AF:DA:57:8D:9A:8B:B2:CC:FF:A2:55:C8:F3:71:3D:49:77:06:FC:4D:6F:16:91:61:6F:89:1C:A3:CB"}}},"request":{"raw":"POST /img.gif?f=merge\u0026userId=008258cf27ba4c0cee861d60dfbdbab3 HTTP/1.1\r\nHost: my.rtmark.net\r\nUser-Agent: Mozilla/5.0 (Linux; Android 6.0; Nexus 5 Build/MRA58N) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Mobile Safari/537.36\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: null\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 04 Oct 2025 16:37:49 GMT\r\ncontent-type: image/gif\r\ncontent-length: 43\r\ncf-ray: 98961b270e029f9c-AMS\r\naccess-control-allow-origin: null\r\naccess-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE\r\naccess-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, Authorization,X-CSRF-Token\r\naccess-control-expose-headers: Authorization\r\naccess-control-allow-credentials: true\r\nset-cookie: ID=008258cf27ba4c0cee861d60dfbdbab3; expires=Sun, 04 Oct 2026 16:37:49 GMT; secure; SameSite=None\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ntiming-allow-origin: *\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"b4491705564909da7f9eaf749dbbfbb1","sha1":"279315d507855c6a4351e1e2c2f39dd9cd2fccd8","sha256":"4e0705327480ad2323cb03d9c450ffcae4a98bf3a5382fa0c7882145ed620e49","sha512":"b8d82d64ec656c63570b82215564929adad167e61643fd72283b94f3e448ef8ab0ad42202f3537a0da89960bbdc69498608fc6ec89502c6c338b6226c8bf5e14","ssdeep":"","tlshash":"c5900403d140d041c351c0300d0cc740174471304514030f70fc175dfc353510c13000","first_seen":"2023-04-05T09:54:56Z","last_seen":"2026-05-24T16:34:34.703774Z","times_seen":100330,"resource_available":true,"data":null}},"time_used":729,"timings":{"blocked":324,"dns":55,"connect":46,"send":0,"wait":80,"receive":0,"ssl":223},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"click.alibaba.com/apprd/orbgmp1q?lang=EN","fqdn":"click.alibaba.com","domain":"alibaba.com","tld":"com"},"ip":{"addr":"47.246.146.72","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-10-04T16:37:48.946Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.alibaba.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 11 Mar 2025 05:07:02 GMT","end":"Sun, 12 Apr 2026 05:01:06 GMT"},"fingerprint":{"sha1":"5D:34:66:EE:A8:8C:B2:D4:AF:90:98:90:65:36:B3:C7:5F:E8:4D:5B","sha256":"2F:B9:FB:33:64:3A:01:53:79:F3:6B:55:05:CE:EA:42:29:C5:70:F7:0E:3C:14:63:6C:AA:6E:5D:98:D4:34:F2"}}},"request":{"raw":"GET /apprd/orbgmp1q?lang=EN HTTP/1.1\r\nHost: click.alibaba.com\r\nUser-Agent: Mozilla/5.0 (Linux; Android 6.0; Nexus 5 Build/MRA58N) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Mobile Safari/537.36\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\ndate: Sat, 04 Oct 2025 16:37:49 GMT\r\ncontent-length: 0\r\nlocation: market://details?referrer=click_id%3D15917340685ls6s71j6o1cdph29nhUGN%26utm_source%3D1591734068\u0026id=com.alibaba.intl.android.apps.poseidon\r\nset-cookie: ali_apache_id=33.3.135.198.1759595869998.560487.6; path=/; domain=.alibaba.com; expires=Wed, 30-Nov-2084 01:01:01 GMT\nXSRF-TOKEN=c2702b84-f41c-4d76-b8cf-ad15514d0a00; Path=/; HttpOnly\nXSRF-TOKEN=c2702b84-f41c-4d76-b8cf-ad15514d0a00;Path=/;Secure;SameSite=None;Partitioned;\ncookie2=d6eff62fbeefafae51cf793f35b4dd4b; Domain=.alibaba.com; Path=/; Secure; HttpOnly; SameSite=None\nicbu_s_tag=0_2_11; Domain=.alibaba.com; Expires=Sat, 11-Oct-2025 16:37:50 GMT; Path=/; Secure; HttpOnly; SameSite=None\r\nx-application-context: ugclickserver:7001\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: 0\r\nx-frame-options: DENY\r\nstrict-transport-security: max-age=31536000 ; includeSubDomains\r\nicbu_s_tag: 0_2_11\r\nicbu_s_ip: VjZhvR1T7Tr6+rKkycH3tNvQf5MlBR+X9W/c/v7dMUKei6iq8a3++w==\r\nicbu_s_hostname: +jqBQzugFjQD4xktCAYBQXZTcLGaQn9ys2QTRG1Z79iyM3e+Xye2OzTA9jgpQA/lqZ3LlPU/CEJZgR9WlrUUMg==\r\nicbu_s_unit: rg-de-3\r\nicbu_s_v: 1.0.21\r\ncontent-language: en-US\r\nups-target-key: click.alibaba.com\r\nx-protocol: HTTP/2.0\r\neagleeye-traceid: 210387c617595958699905534e0ca2\r\ns-brt: 7\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\ns-rt: 8\r\ntiming-allow-origin: *\r\neagleid: 210387c617595958699905534e0ca2\r\nserver-timing: rt;dur=0.008,eagleid;desc=210387c617595958699905534e0ca2,brt;dur=7\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Java","description":"Java is a class-based, object-oriented programming language that is designed to have as few implementation dependencies as possible.","website":"https://java.com","common_platform_enumeration":"cpe:2.3:a:oracle:jre:*:*:*:*:*:*:*:*","icon":"Java.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Spring","description":"","website":"https://spring.io/","common_platform_enumeration":"","icon":"Spring.png","categories":["Web frameworks"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/x-unknown-content-type","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-24T17:07:59.023654Z","times_seen":15665480,"resource_available":true,"data":null}},"time_used":2122,"timings":{"blocked":1024,"dns":672,"connect":64,"send":0,"wait":72,"receive":0,"ssl":289},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}