{"report_id":"f9709da9-4e14-4eb5-9bc3-cbfaa09aba45","version":6,"status":"done","tags":[],"date":"2026-04-15T13:51:26Z","url":{"schema":"http","addr":"h5.goldcicada.xin","fqdn":"h5.goldcicada.xin","domain":"goldcicada.xin","tld":"xin"},"ip":{"addr":"172.67.131.213","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"h5.goldcicada.xin/","fqdn":"h5.goldcicada.xin","domain":"goldcicada.xin","tld":"xin"},"title":"Customer Service","dom":{"size":7078,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (6267)","md5":"9b8c35978c091ba149a9cd6eec55c876","sha1":"6b615ba21588ad79e3ad37d1c78b98d6051a3182","sha256":"ecccd97eed9dd3e22614c29dcea4d2671cd209948d9d69e388baa42ced3aca62","sha512":"d85ecc90e5253937f2026639742a60db1fb76c20eece48d65feddda793f85e7dc294e5ed1a12a664d7063fffd6847c4e14cfeb6afd0deda8c74469ee38c9cd28","ssdeep":"96:nLYOZUWayCqmQ7fDm368mait7p5UC1CcP5MdSog4IxX8bBDoYjjnv1u0muXannnX:L7aWBCqmCfDm368mHNbThS1OMVcYPpFu","tlshash":"a3e1be2451291338709f83bbc4d459feb015bd41eaeed978adfe362f8689d28113a11f","dom_hash":"domhashe060e7ec355679d9e09c5495df5004ec","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"h5.goldcicada.xin","fqdn":"h5.goldcicada.xin","domain":"goldcicada.xin","tld":"xin"},"ip":{"addr":"172.67.131.213","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-05-20T13:51:26Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":null},"summary":[{"fqdn":"h5.goldcicada.xin","ip":{"addr":"104.21.11.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-09-08","domain_rank":0,"first_seen":"2026-04-15T13:51:12.366611Z","last_seen":"2026-04-15T13:51:12.366611Z","alert_count":0,"request_count":7,"received_data":3483325,"sent_data":3374,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"h5.goldcicada.xin/assets/index-XlT5BoF-.js","fqdn":"h5.goldcicada.xin","domain":"goldcicada.xin","tld":"xin"},"ip":{"addr":"104.21.11.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"b956b1f669e174dfe711a12e97798448","sha1":"0aadd591c278e3c4bb9f8023b693ba46896e0405","sha256":"5f55bd197a78f32019d71b49454270918d4b82c971f9e49cff7d216a49bc1037","sha512":"b4d9dd3c5a61a01add24cce2379621dd3a795513d61a88ab74247cccbf05a85390193a6f327f156cfbf7be1699737bc6a20dcd6c6bf346bdc5be0f4fb06966e6","ssdeep":"49152:YS446ozFQ6vi620iqJsZMZ03gYdurLqlXXBFSVRCyWCh9voSdzFTm:C9phdvPs4","tlshash":"6da58de4324478b643b7c5e990bb0501b2395e41b409c4e4f2bdd8ea2b96e1c61b7f7e","size":2108971,"data":"","first_seen":"2026-04-15T13:51:15.893903Z","last_seen":"2026-04-15T13:51:29.805106Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"h5.goldcicada.xin/assets/index-XlT5BoF-.js","fqdn":"h5.goldcicada.xin","domain":"goldcicada.xin","tld":"xin"},"ip":{"addr":"104.21.11.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://h5.goldcicada.xin/","date":"2026-04-15T13:51:02.707Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"goldcicada.xin","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Mar 2026 20:45:05 GMT","end":"Tue, 02 Jun 2026 21:43:45 GMT"},"fingerprint":{"sha1":"F1:E6:7C:FC:F7:C4:C9:C7:71:6B:38:B5:5D:BF:EE:E3:42:E0:1D:87","sha256":"2F:EC:55:9E:DF:65:FA:A1:9E:CE:DF:23:DE:9D:12:E7:2F:59:0E:C7:AC:C2:48:4C:08:67:2A:F8:94:F3:91:DF"}}},"request":{"raw":"GET /assets/index-XlT5BoF-.js HTTP/1.1\r\nHost: h5.goldcicada.xin\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://h5.goldcicada.xin/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 15 Apr 2026 13:51:02 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Wed, 24 Dec 2025 12:02:53 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"694bd66d-202e2b\"\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: interest-cohort=()\r\ncontent-encoding: gzip\r\nage: 14\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6ng1DEmiMTiPZ6Xubs5uZufC4HRWM4W%2FUKG9d1eOO1q2xJmZcabUswnZ3XqNvMXsIr2DDuToWF65M2KiAnJ5izJQglLifuJHmRtz26Iri9bLjx%2BshVCSzChpfgLTSbK%2FWA6r4A%3D%3D\"}]}\r\ncf-ray: 9ecb6c39e8afb51e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2108971,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"6d534418d783bf5c878087f552623417","sha1":"85b2fcabc55c2a5c989a3b6ce001f0da8fd72650","sha256":"2cc816ff1d1e14e7500a705b3640dc66c903df4e74a4b669227dc5fa46e67734","sha512":"e9d9c051255caa7bb41c3247dd029c4a6cab49ad3346e3a0d28c1f723d7c062cc28f9d78ee1a219a5ed039b0724dc3423cdb12122ae1567eafc957226f0188eb","ssdeep":"12288:YS4YjzWxoLPDcwQ6TzxKll6O7WDqHqrX1sZw1EMQfEygZh8y:YS4YP6ozFQ6vil62WDqHqr1s4WMZay","tlshash":"5b255ed47384b8a243b7c5d590bb0501b63a1f40b419c4e4f2bd98aa3b96e1d61b7f3e","first_seen":"2026-04-15T13:51:15.880382Z","last_seen":"2026-04-15T13:51:29.799066Z","times_seen":2,"resource_available":false,"data":null}},"time_used":43,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":28,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5.goldcicada.xin/assets/index-DGKUElLj.css","fqdn":"h5.goldcicada.xin","domain":"goldcicada.xin","tld":"xin"},"ip":{"addr":"104.21.11.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://h5.goldcicada.xin/","date":"2026-04-15T13:51:02.712Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"goldcicada.xin","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Mar 2026 20:45:05 GMT","end":"Tue, 02 Jun 2026 21:43:45 GMT"},"fingerprint":{"sha1":"F1:E6:7C:FC:F7:C4:C9:C7:71:6B:38:B5:5D:BF:EE:E3:42:E0:1D:87","sha256":"2F:EC:55:9E:DF:65:FA:A1:9E:CE:DF:23:DE:9D:12:E7:2F:59:0E:C7:AC:C2:48:4C:08:67:2A:F8:94:F3:91:DF"}}},"request":{"raw":"GET /assets/index-DGKUElLj.css HTTP/1.1\r\nHost: h5.goldcicada.xin\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://h5.goldcicada.xin/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 15 Apr 2026 13:51:02 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 24 Dec 2025 12:02:53 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"694bd66d-322d\"\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: interest-cohort=()\r\ncontent-encoding: gzip\r\nage: 14\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=w93y8eh9aMKDKilrQP%2Bt3IssD%2Fn31i0vMqJKT6M8w6dPBIDXPMLtkGgf0X0KtoUU%2Bydif9Pd7r7tmhGvDPsfYm%2BfuYBI5i5tD7BycHJj79HsY8qa%2FusxoDzYanET0qUw%2B8rlsA%3D%3D\"}]}\r\ncf-ray: 9ecb6c39e8b0b51e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12845,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (12844)","md5":"4df85bd0f8f14212758fa261d6fbbacb","sha1":"2ee36d89825cc2750b7e6a6008ea8850943d91c0","sha256":"2e9d7c743325c821f5a0fe4dc19f8045775f7d0f81b2b7c3aa2b0cafcab21602","sha512":"494c3a12d502bfb417d5e1253015cfdce15aa0f450296dcc815fdb34fc68f759835c0f332cd8ee17cc2665cd05c3b8cdf615514c38b2194dcd723b71937b0503","ssdeep":"192:JwYc+Jr2niE6pm2z+9t5WxMVP7MNMQ/ln8u2MTWFUT4:JweJrrdwt5W87MNMa8u22k","tlshash":"ea426232aa1a143cb477d92a399233cd1234d423d15665ffab095a3ac6caed33077b47","first_seen":"2026-04-15T13:51:15.884085Z","last_seen":"2026-04-15T13:51:29.800042Z","times_seen":2,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5.goldcicada.xin/assets/bg-0w-s7PjG.png","fqdn":"h5.goldcicada.xin","domain":"goldcicada.xin","tld":"xin"},"ip":{"addr":"104.21.11.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://h5.goldcicada.xin/","date":"2026-04-15T13:51:03.266Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"goldcicada.xin","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Mar 2026 20:45:05 GMT","end":"Tue, 02 Jun 2026 21:43:45 GMT"},"fingerprint":{"sha1":"F1:E6:7C:FC:F7:C4:C9:C7:71:6B:38:B5:5D:BF:EE:E3:42:E0:1D:87","sha256":"2F:EC:55:9E:DF:65:FA:A1:9E:CE:DF:23:DE:9D:12:E7:2F:59:0E:C7:AC:C2:48:4C:08:67:2A:F8:94:F3:91:DF"}}},"request":{"raw":"GET /assets/bg-0w-s7PjG.png HTTP/1.1\r\nHost: h5.goldcicada.xin\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://h5.goldcicada.xin/assets/index-DGKUElLj.css\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 15 Apr 2026 13:51:03 GMT\r\ncontent-type: image/png\r\ncontent-length: 1107550\r\nlast-modified: Wed, 24 Dec 2025 12:02:53 GMT\r\npriority: u=4,i=?0\r\netag: \"694bd66d-10e65e\"\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: interest-cohort=()\r\naccept-ranges: bytes\r\nage: 12\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=C7B7%2B%2FiBQ1YP07d8qdl%2FXKziLKSrIo2C4VhZz6jAAuXCj525lslt%2Fuo2BhSgGmnIm2Eaprz1RLHktHPZf%2FLAp8P4tXKt50ZNod2TJVn9JycZ46t0LuHqs%2FCgFPAXFr%2FbbdSS6A%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ecb6c3d68e1b51e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1107550,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1440 x 810, 8-bit/color RGBA, non-interlaced","md5":"296fce3c48b2e1692ab5e8fb39e9c1b0","sha1":"ccf44ae728f9d5f6a39430e01ae5d97b2b5133d0","sha256":"ca62aa0bbf4f8134f9449e8bce2ffdb31361392378626a8e97cee3872139f439","sha512":"34f085087f6f2142fcd9e1e9de9df59229a82cf75c3edae3ed19b3587c17eb1e3d462ef93c40e1d75494c25c93fb66fad923b4f7dccb005c678053360afee207","ssdeep":"24576:WIDmNRxPlLeHHk8R4rzpd502331tzMFr4at0jMXSE:WIDIPlD8ROpLX31tQFr4at7X/","tlshash":"e52533b57369b0c33647ebb5bbfd11547955bad2917a110403a33702ba80ebcb29fd42","first_seen":"2026-04-15T13:51:15.858774Z","last_seen":"2026-04-15T13:51:29.800935Z","times_seen":2,"resource_available":false,"data":null}},"time_used":84,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":76,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"wss","addr":"h5.goldcicada.xin/ws/im","fqdn":"h5.goldcicada.xin","domain":"goldcicada.xin","tld":"xin"},"ip":{"addr":"104.21.11.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://h5.goldcicada.xin/","date":"2026-04-15T13:51:03.270Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"goldcicada.xin","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Mar 2026 20:45:05 GMT","end":"Tue, 02 Jun 2026 21:43:45 GMT"},"fingerprint":{"sha1":"F1:E6:7C:FC:F7:C4:C9:C7:71:6B:38:B5:5D:BF:EE:E3:42:E0:1D:87","sha256":"2F:EC:55:9E:DF:65:FA:A1:9E:CE:DF:23:DE:9D:12:E7:2F:59:0E:C7:AC:C2:48:4C:08:67:2A:F8:94:F3:91:DF"}}},"request":{"raw":"GET /ws/im HTTP/1.1\r\nHost: h5.goldcicada.xin\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nSec-WebSocket-Version: 13\r\nOrigin: https://h5.goldcicada.xin\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: qF2ZakGftvZASu9z/sQCRg==\r\nDNT: 1\r\nConnection: keep-alive, Upgrade\r\nSec-Fetch-Dest: websocket\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 101 Switching Protocols\r\nDate: Wed, 15 Apr 2026 13:51:03 GMT\r\nConnection: upgrade\r\nupgrade: websocket\r\nsec-websocket-accept: X7zWj14LpMKgZghUX/7PujwbfFo=\r\nX-XSS-Protection: 1; mode=block\r\nX-Content-Type-Options: nosniff\r\nReferrer-Policy: strict-origin-when-cross-origin\r\nPermissions-Policy: interest-cohort=()\r\ncf-cache-status: DYNAMIC\r\nReport-To: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=cOvjfDC%2FGQ4ZwpvmuZTFWErjZqpClUPzx61GeaIfaYJEbqlv0%2BZk%2BzFT%2Bhgt8j5MaPnrNCVE%2BiH%2BJ3gHy4gxLR3Xkac70pPTrP%2FhtiN8jKbM8E360QfEuwKPtPU1SyC1DmdGvQ%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nNEL: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nServer: cloudflare\r\nCF-RAY: 9ecb6c3e0de256a2-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"101","status_text":"Switching Protocols","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-31T04:23:24.762412Z","times_seen":15943653,"resource_available":true,"data":null}},"time_used":763,"timings":{"blocked":-1,"dns":36,"connect":41,"send":0,"wait":629,"receive":0,"ssl":97},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5.goldcicada.xin/sounds/tips.mp3","fqdn":"h5.goldcicada.xin","domain":"goldcicada.xin","tld":"xin"},"ip":{"addr":"104.21.11.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://h5.goldcicada.xin/","date":"2026-04-15T13:51:03.308Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"goldcicada.xin","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Mar 2026 20:45:05 GMT","end":"Tue, 02 Jun 2026 21:43:45 GMT"},"fingerprint":{"sha1":"F1:E6:7C:FC:F7:C4:C9:C7:71:6B:38:B5:5D:BF:EE:E3:42:E0:1D:87","sha256":"2F:EC:55:9E:DF:65:FA:A1:9E:CE:DF:23:DE:9D:12:E7:2F:59:0E:C7:AC:C2:48:4C:08:67:2A:F8:94:F3:91:DF"}}},"request":{"raw":"GET /sounds/tips.mp3 HTTP/1.1\r\nHost: h5.goldcicada.xin\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: audio/webm,audio/ogg,audio/wav,audio/*;q=0.9,application/ogg;q=0.7,video/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nReferer: https://h5.goldcicada.xin/\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: audio\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 206 Partial Content\r\nserver: cloudflare\r\ndate: Wed, 15 Apr 2026 13:51:03 GMT\r\ncontent-type: audio/mpeg\r\ncontent-length: 80044\r\nlast-modified: Wed, 24 Dec 2025 12:02:52 GMT\r\npriority: u=4,i=?0\r\netag: \"694bd66c-138ac\"\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: interest-cohort=()\r\nage: 12\r\ncontent-range: bytes 0-80043/80044\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=m4xhx9VQsAJWrjfTbRiGkOUPEoSXWdU%2BDqjTt9zpvWOU%2BhDZqrFAWI9U7xYfYKi%2BoR%2B%2Bn9jDRv4Wolhoultc19doeOsJfpQy4QJmmXbHvr6TlXd1ZJtoG23VUmld%2B12sRBl0%2BQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ecb6c3da8e6b51e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":80044,"size_decoded":0,"mime_type":"audio/x-wav","magic":"RIFF (little-endian) data, WAVE audio, Microsoft PCM, 16 bit, stereo 22050 Hz","md5":"7068643e386bf1276785c9eeb750eb7e","sha1":"0627e8a1a5acfff02e6575ef96aef32ad835c0aa","sha256":"99197d9d58f0928fb28bde70c771a1d62b578f89e7249e5dc82420f0b3a1e22e","sha512":"2283b0a2b853d1df2014460d001c3bc22e89f7c9e0250308d537e294b5c3ccefe0f24b7e4e9d44b7d316ca35212365f3ab1d27475b5e88f06fcbc72bb6ffd8c4","ssdeep":"1536:f+3e6zIlH/F5y3qQbzYTqe/BjKtVYDO4U4bkqPJwrg5bY0dfX:Gu6of7W+Dc4hCgFYK/","tlshash":"0873e492f603dd15c51a6f3a8a66dfe95637be05bf0ba3573045bb5fae326c04e01280","first_seen":"2024-08-29T18:15:15.995036Z","last_seen":"2026-05-10T12:59:17.192941Z","times_seen":61,"resource_available":false,"data":null}},"time_used":48,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":42,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5.goldcicada.xin/assets/logo-C2DycnMN.png","fqdn":"h5.goldcicada.xin","domain":"goldcicada.xin","tld":"xin"},"ip":{"addr":"104.21.11.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://h5.goldcicada.xin/","date":"2026-04-15T13:51:03.477Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"goldcicada.xin","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Mar 2026 20:45:05 GMT","end":"Tue, 02 Jun 2026 21:43:45 GMT"},"fingerprint":{"sha1":"F1:E6:7C:FC:F7:C4:C9:C7:71:6B:38:B5:5D:BF:EE:E3:42:E0:1D:87","sha256":"2F:EC:55:9E:DF:65:FA:A1:9E:CE:DF:23:DE:9D:12:E7:2F:59:0E:C7:AC:C2:48:4C:08:67:2A:F8:94:F3:91:DF"}}},"request":{"raw":"GET /assets/logo-C2DycnMN.png HTTP/1.1\r\nHost: h5.goldcicada.xin\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://h5.goldcicada.xin/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 15 Apr 2026 13:51:03 GMT\r\ncontent-type: image/png\r\ncontent-length: 167462\r\nlast-modified: Wed, 24 Dec 2025 12:02:53 GMT\r\npriority: u=6,i=?0\r\netag: \"694bd66d-28e26\"\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: interest-cohort=()\r\naccept-ranges: bytes\r\nage: 12\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BY5eBQS%2BwcXcjS%2FGkurguKQ6DTosboZxji4r3bKX6m9bTMEQT3Nop2Ow5RDcK7njohuoQ2uVDbD4pybjEPhAuiHrEHuEigzDBvjNXL6Brr0Iszt1mFBIz%2F0enZagG9aneDKAog%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ecb6c3eb8edb51e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":167462,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 860 x 860, 8-bit/color RGBA, non-interlaced","md5":"60b7a1db48b1029e2e925136b2e28277","sha1":"46ad10fb8e3cfb45f6a12fd2feb9cb04f0fad83a","sha256":"647e4e79296f6e744af9c52464316bace8101b49f2e6df535ea1b720059600e9","sha512":"12b72c22679c03c3cb37c9721543c71b563abc468c412d2f1746de2f4c6b7021da0f7cfa9b9178d8da7b890ef694e0c434d1d1ae030c1a2178376da1a0a5c6ea","ssdeep":"3072:fTdxjpZ7YLaATM5Xi8RWCDbA5B9L5DwKER4/pfAzlKQpb/Ytno:fXjpZ7YLN4p0hwK99GKL+","tlshash":"84f3016dc6d1cb624deb06782238df473b5322565ac422fed14a1c8d6c3df3da29194e","first_seen":"2026-04-15T13:51:15.867002Z","last_seen":"2026-04-15T13:51:29.803151Z","times_seen":2,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":19,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5.goldcicada.xin/","fqdn":"h5.goldcicada.xin","domain":"goldcicada.xin","tld":"xin"},"ip":{"addr":"104.21.11.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-04-15T13:51:02.264Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"goldcicada.xin","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Mar 2026 20:45:05 GMT","end":"Tue, 02 Jun 2026 21:43:45 GMT"},"fingerprint":{"sha1":"F1:E6:7C:FC:F7:C4:C9:C7:71:6B:38:B5:5D:BF:EE:E3:42:E0:1D:87","sha256":"2F:EC:55:9E:DF:65:FA:A1:9E:CE:DF:23:DE:9D:12:E7:2F:59:0E:C7:AC:C2:48:4C:08:67:2A:F8:94:F3:91:DF"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: h5.goldcicada.xin\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 15 Apr 2026 13:51:02 GMT\r\ncontent-type: text/html; charset=utf-8\r\nserver: cloudflare\r\nlast-modified: Wed, 24 Dec 2025 12:02:53 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: interest-cohort=()\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bw3bOzIoR3Fd1Ei4aYQ52uV%2FwOz9UUezRjuGpDDbxPuPbtBGIIlG%2Fiox1LAOI8TsUorsXSsPvM8Pf0DqKyYrkPCpNU941QTtkN8I19sM%2FVO0QvReo42%2Fl1YfrPSh1dtc4B7cHw%3D%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 9ecb6c37489d712a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":474,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"94b94540eeed27f95c0c41b2f310f6d7","sha1":"4f9b56f1d9e9198ff10758d49a626f428ab0a911","sha256":"53b42a95eaa0172570a91626090897cce4aaab01f0a4d10c3c7d631fe86e05ab","sha512":"e4bc13c6f82e17a007ddcb64ba666d79b07ae8a7bac384c501af5a3cd1aa97222415116f8b5b89ecd7dbdb48811406080f86fbf0a42cf292d49b5238be9c1ee3","ssdeep":"","tlshash":"36f0d44084f08c65423017141dd2f8049a43e747c349ad0831e7507c4fc4bc6cadf478","first_seen":"2026-04-15T13:51:15.872453Z","last_seen":"2026-04-15T13:51:29.804033Z","times_seen":2,"resource_available":true,"data":null}},"time_used":294,"timings":{"blocked":25,"dns":1,"connect":1,"send":0,"wait":243,"receive":0,"ssl":20},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}