{"report_id":"73f6d477-e042-461f-80da-986320bf5e73","version":6,"status":"done","tags":[],"date":"2025-12-23T14:30:26Z","url":{"schema":"http","addr":"iw63v.crqeraf.xyz/archives/65129","fqdn":"iw63v.crqeraf.xyz","domain":"crqeraf.xyz","tld":"xyz"},"ip":{"addr":"156.255.123.129","port":0,"asn":63888,"as":"DATAWING LIMITED","country":"Hong Kong","country_code":"HK"},"final":{"url":{"schema":"https","addr":"iw63v.crqeraf.xyz/archives/65129/","fqdn":"iw63v.crqeraf.xyz","domain":"crqeraf.xyz","tld":"xyz"},"title":"黑料网-推特高颜值网红女神 狐狸小妖 极品蜜桃臀美乳大长腿迷死人！粉嫩蜜穴配逆天爆乳撸管必备","dom":{"size":701,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (624)","md5":"db0ce0972f16ec25d0eaf188851efd56","sha1":"61d373a3cbb6975b7efc7fe789e6c1b390874a1f","sha256":"70df9b0f1ba0a0c1abf5bf2b5c117ebf58ae868cb3e3232ee22efe01958ece7a","sha512":"74489b9f2710004926e320f04cd00ac45e6b3ef4082710c0f4665a67aaded43c67f5288a0e6fce1213779b6014b7b7be76f237728bc007ee038de744cf841cc4","ssdeep":"","tlshash":"ed01448bf405382d9673032430e93d89987e93608c402230b24e62c346c47e75b06b95","dom_hash":"domhash66fb451f1b6f50d037d5916aa3d25bcf","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"iw63v.crqeraf.xyz/archives/65129","fqdn":"iw63v.crqeraf.xyz","domain":"crqeraf.xyz","tld":"xyz"},"ip":{"addr":"156.255.123.129","port":0,"asn":63888,"as":"DATAWING LIMITED","country":"Hong Kong","country_code":"HK"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-01-27T14:30:26Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-23","alert":"Sinkholed","trigger":"iw63v.crqeraf.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"hls.aycaku.cn","ip":{"addr":"103.198.200.7","port":443,"asn":138915,"as":"Kaopu Cloud HK Limited","country":"Hong Kong","country_code":"HK"},"domain_registered":"2025-03-30","domain_rank":0,"first_seen":"2025-12-22T09:51:35.131482Z","last_seen":"2025-12-22T09:51:37.510325Z","alert_count":0,"request_count":1,"received_data":53666,"sent_data":549,"comment":"","tags":null,"fingerprints":null},{"fqdn":"region1.analytics.google.com","ip":{"addr":"216.239.34.36","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"1997-09-15","domain_rank":22257,"first_seen":"2022-03-17T11:26:33Z","last_seen":"2025-12-21T22:22:55.693237Z","alert_count":0,"request_count":1,"received_data":830,"sent_data":1318,"comment":"","tags":null,"fingerprints":null},{"fqdn":"mts.delipu.cc","ip":{"addr":"101.33.21.239","port":443,"asn":139341,"as":"ACE","country":"United States","country_code":"US"},"domain_registered":"2021-08-07","domain_rank":0,"first_seen":"2025-12-23T09:01:00.161446Z","last_seen":"2025-12-23T09:01:00.161447Z","alert_count":0,"request_count":4,"received_data":3913791,"sent_data":2105,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"www.google.no","ip":{"addr":"142.251.38.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2001-02-26","domain_rank":92680,"first_seen":"2012-06-26T23:22:08Z","last_seen":"2025-12-21T22:19:29.872886Z","alert_count":0,"request_count":1,"received_data":580,"sent_data":750,"comment":"","tags":null,"fingerprints":null},{"fqdn":"www.googletagmanager.com","ip":{"addr":"142.251.38.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2011-11-11","domain_rank":283,"first_seen":"2012-10-04T01:07:32Z","last_seen":"2025-12-21T22:17:33.83847Z","alert_count":0,"request_count":3,"received_data":1306595,"sent_data":1451,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"heiliao.com","ip":{"addr":"3.167.2.63","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"domain_registered":"2005-12-31","domain_rank":0,"first_seen":"2025-09-07T03:24:41.819202Z","last_seen":"2025-12-23T05:48:33.900987Z","alert_count":0,"request_count":3,"received_data":11412,"sent_data":1239,"comment":"","tags":null,"fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}]},{"fqdn":"iw63v.crqeraf.xyz","ip":{"addr":"154.207.127.39","port":443,"asn":0,"as":"","country":"Hong Kong","country_code":"HK"},"domain_registered":"2025-04-20","domain_rank":0,"first_seen":"2025-08-24T10:27:13.984985Z","last_seen":"2025-11-19T02:59:30.27502Z","alert_count":67,"request_count":67,"received_data":3835983,"sent_data":32044,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"pic.wdsrie.cn","ip":{"addr":"43.152.140.79","port":443,"asn":139341,"as":"ACE","country":"Singapore","country_code":"SG"},"domain_registered":"2025-03-30","domain_rank":0,"first_seen":"2025-12-22T03:55:29.548893Z","last_seen":"2025-12-22T03:55:31.367349Z","alert_count":0,"request_count":130,"received_data":16387199,"sent_data":58034,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}]},{"fqdn":"static.addtoany.com","ip":{"addr":"172.66.171.172","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2006-03-10","domain_rank":28267,"first_seen":"2012-05-21T12:58:18Z","last_seen":"2025-12-22T01:57:09.076286Z","alert_count":0,"request_count":12,"received_data":93918,"sent_data":5177,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"static.addtoany.com/menu/svg/icons/wechat.js","fqdn":"static.addtoany.com","domain":"addtoany.com","tld":"com"},"ip":{"addr":"172.66.171.172","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"b0e286d45d3573a78afc388522472eac","sha1":"0981eaedebb795e282ce807724037b8088adf405","sha256":"315a36857f81419cc32e1f7bf3caf201f1c28fb86e534d4084cea148cd3f4269","sha512":"d0072e5438a94100e68c3d556a5a213c047187bec9230d9fda9a14a49e6b0ce9725f9843f0662a314d18f4ea42cf79637a3440ed261e01e49023c6f03b6d117d","ssdeep":"","tlshash":"b02102c12a10678ca8c2a8aedf1e7048272960f97a7942a52d5ec364508b40de543825","size":1193,"data":"","first_seen":"2024-04-27T04:58:36Z","last_seen":"2026-04-03T18:42:08.313144Z","times_seen":8160,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"iw63v.crqeraf.xyz/static/web/js/swiper-bundle.min.js?v=20251130","fqdn":"iw63v.crqeraf.xyz","domain":"crqeraf.xyz","tld":"xyz"},"ip":{"addr":"154.207.127.39","port":443,"asn":0,"as":"","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"cc95039616320bbfd32f0e1d25de52ea","sha1":"0578100302ce98656bed1bd977cbbabd7744662c","sha256":"8f3c9c3e4fb304b751dfee79548e7698c9de260a1f6152d76b9854e70a17907c","sha512":"f968ce5130df518b9381f151cb40e7aac29459c649b414ac66917bb47f589913982dedf90425633ecf507a373beda266ab3ebfd30e645c4d40d9699a33be3e67","ssdeep":"","tlshash":"3e1135862430a6e6a57749e3a05ec48b9044a0ef765ae0a05125ccfc5c24c9c165596b","size":1000,"data":"","first_seen":"2025-04-07T09:38:32.672069Z","last_seen":"2026-04-03T18:51:06.326418Z","times_seen":2443,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"iw63v.crqeraf.xyz/static/pc/editor/js/jquery.min.js?v=20251130","fqdn":"iw63v.crqeraf.xyz","domain":"crqeraf.xyz","tld":"xyz"},"ip":{"addr":"154.207.127.39","port":443,"asn":0,"as":"","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"f742893d8d1358cccb46bef623e7c9a8","sha1":"c345aa7b60c32e221d2b9db00d4683c0023011a6","sha256":"864e0a789aba9cd21aae29cd7f817b54687c18b4e0d51aadd38de2a344e64769","sha512":"73f1f3eba951d4b5bc7d18b60925af165f339bc8dd8b61e1258bc80f0dd01598a348d4297f3b75ec9c3deab7948bc641be276a5ed33ee99304a001efd9c97fcf","ssdeep":"1536:EPEkjP+iADIOr/NEe876nmBu3HvF38sEeL8FoqqhJ7SerN5wVI+xcBpPv7E+nzmR:bNMzqhJvN32cBd7M6Whca98Hrw","tlshash":"c993c8d9b6d27162977730b850bf510bb13a98eab80c4c60f1a4d8e47d78e89507bf2d","size":95874,"data":"","first_seen":"2023-10-15T11:56:14Z","last_seen":"2026-04-03T18:43:45.455722Z","times_seen":7074,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-D19N9LPLRP\u0026l=dataLayer\u0026cx=c\u0026gtm=45je54p1v9218846652za204\u0026tag_exp=102887800~103051953~103077950~103106314~103106316~103116026~103200004","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.251.38.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"4a17f8195c88cb97ec112f03d776ac78","sha1":"508492c3711a95fdd31cac22bebf99f983ddd60f","sha256":"3bf0c03df893267585b2bfcd04b2273a361107ac02278d0a5268490371a54aef","sha512":"c690806e9f89ef7c046073a476c8e70e47c05913d0b31083af34522520e27f93e737df4a3bac3f4aa84a473270d8d97483708656241358ebe4d7c5fcd6c4871f","ssdeep":"6144:wSIe7ma2bulKY/1u99xHDmHYmyBFzvnsyRO6jJWoNPad4FpC1pY:yC8bu7/1mbrnsy39WbMpL","tlshash":"de9419ce73c674269396e078503f118ba57b29e2b45dc896f189cce01e74a9a4237f7c","size":435778,"data":"","first_seen":"2025-12-23T08:10:49.395703Z","last_seen":"2025-12-24T07:46:55.143234Z","times_seen":34,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-SY99S66RFE\u0026l=dataLayer\u0026cx=c\u0026gtm=45je54p1v9218846652za204\u0026tag_exp=102887800~103051953~103077950~103106314~103106316~103116026~103200004","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.251.38.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"88a5300a6bdcef12b0053145af8bce47","sha1":"07e1adde074a4aac73ddcf2558c682ba32100c43","sha256":"e4fed851a49aa8a621a93d15dc64d98c736a12a65012cb1a633abe7098a4bb9c","sha512":"e61b18e4e889002a16fa6c3a674da0f5cd3086a954bf0b95533c117abf859f869e932c331218e775114995ea6f60d76585b37105e0d4cac577db8d467b68af73","ssdeep":"6144:4vIe7ma2bulKY/1u99xHDmHYmyBFzvnsyRO6jJWoNPad4FpC1xY:NC8bu7/1mbrnsy39WbMpb","tlshash":"62941ace73d674269396e078503f118ba57b29e2b45cc896f189cce02d74a9a4237f7c","size":433258,"data":"","first_seen":"2025-12-23T08:10:49.319644Z","last_seen":"2025-12-24T07:46:54.953479Z","times_seen":35,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.addtoany.com/menu/modules/core.oafg07ee.js","fqdn":"static.addtoany.com","domain":"addtoany.com","tld":"com"},"ip":{"addr":"172.66.171.172","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"7a0efe46283cac93dd3c057bc30548a5","sha1":"e488c97789dd77545c8bcfff0efbaea93f9adbd0","sha256":"292d24e79b1e264ced629c35d3b59a7a83093f972cdd0eac61e7b32189964772","sha512":"a04fd7ce8bc19db42cefa9bcfd3cdcc1b2766f2b89f33a6abb10e67d0853a29cd5715a30aa92de70bdc8b00c2a5cbdb519be310adf8f6bcdc51d1dd1f37cda72","ssdeep":"1536:e8fJLQgdDGsto0AnVnCN2kw3vnNvCAvJd84OZQrKxRNa6upg1fE3i4BQ:VfKg6PvCulOmrKxiNpg1eQ","tlshash":"16635c9f37066937aa1b30e8a8efa508a037275e9e080954f5a5d4b511fdecd3067f2c","size":72512,"data":"","first_seen":"2025-10-23T06:03:39.901486Z","last_seen":"2026-04-02T08:50:54.034167Z","times_seen":16586,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.addtoany.com/menu/svg/icons/x.js","fqdn":"static.addtoany.com","domain":"addtoany.com","tld":"com"},"ip":{"addr":"172.66.171.172","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"885be296b72c01b844a2addc97be03db","sha1":"0696c38c7746aa5c930b4a679282a156fc69784f","sha256":"122ed4db2019348aef89a605e3eb79c6004f5727f16144dc46b61f31ee131764","sha512":"d498e95238c70940c277188c7aba66f260e721daeb220386a80424d5bd4641854019f6c797fb920ed8ebb9ce0b14d2e9b04689671cb2d492edbaa88e18d6256e","ssdeep":"","tlshash":"6ee0c28125115a418d230367db2f104f7332707a715c14d662ad99fde4d506e885bb13","size":297,"data":"","first_seen":"2023-09-17T09:47:27Z","last_seen":"2026-04-03T18:42:08.296587Z","times_seen":11288,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"iw63v.crqeraf.xyz/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"iw63v.crqeraf.xyz","domain":"crqeraf.xyz","tld":"xyz"},"ip":{"addr":"154.207.127.39","port":443,"asn":0,"as":"","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"9e8f56e8e1806253ba01a95cfc3d392c","sha1":"a8af90d7482e1e99d03de6bf88fed2315c5dd728","sha256":"2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8","sha512":"63f0f6f94fbabadc3f774ccaa6a401696e8a7651a074bc077d214f91da080b36714fd799eb40fed64154972008e34fc733d6ee314ac675727b37b58ffbebebee","ssdeep":"","tlshash":"6021d5743a18107e226a0133e56f66cee1f23715fd17e440408ad89566e4fe5063fed9","size":1239,"data":"","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-04-03T18:31:24.123309Z","times_seen":291357,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"iw63v.crqeraf.xyz/static/common/image.0821.js?v=20251130","fqdn":"iw63v.crqeraf.xyz","domain":"crqeraf.xyz","tld":"xyz"},"ip":{"addr":"154.207.127.39","port":443,"asn":0,"as":"","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"a61741ae746c7e5510719acf9df5eb60","sha1":"ea5e0eabcb0d3f2ef674015dd562e7a8032c43e4","sha256":"8c067ddb24ff25321c6a914e46341f2074dc6ee07cb746513911034da98c7876","sha512":"65f6de10253f5846b7fc82ce94166c19b89c49bbe6d8559a2ee6bc17dfa853c8ae1f5317a64fdecbf1b1ded38aca9a6947f1ed78b455c9e5ac3b841e154901c6","ssdeep":"","tlshash":"a511ab6124b6b161442ff069ab0ba226372ab1533504cdbc372debe90fe3111e4c74ed","size":1030,"data":"","first_seen":"2025-11-21T05:52:39.71451Z","last_seen":"2026-04-03T19:03:03.721822Z","times_seen":3463,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"iw63v.crqeraf.xyz/static/pc/editor/swiper-bundle.min.js?v=20251130","fqdn":"iw63v.crqeraf.xyz","domain":"crqeraf.xyz","tld":"xyz"},"ip":{"addr":"154.207.127.39","port":443,"asn":0,"as":"","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"9f29f764a849f0bfe674dc670b6877b5","sha1":"6823554ad9b5f173817d2d1a469ad10246faa5ff","sha256":"90b7b18b5803994347c8fb09713f3e125ccb20660bce44a3da5f5fe5b56e02ff","sha512":"cae9bc7f0f23724f61c20ab476715bebf414addf0883e571c58b130b7f004803fdd6c4286c35b749ab12d550486c7a5ad8e909025549a6009b6b970e0caf7932","ssdeep":"","tlshash":"f91102862430a6e6a57649e3a01ec48ba145a0efba6ae0a05129ccfc6c74cac175596a","size":1000,"data":"","first_seen":"2025-07-23T04:08:54.122499Z","last_seen":"2026-04-03T19:02:15.183658Z","times_seen":654,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"iw63v.crqeraf.xyz/static/pc/layer/layer.js?v=20251130","fqdn":"iw63v.crqeraf.xyz","domain":"crqeraf.xyz","tld":"xyz"},"ip":{"addr":"154.207.127.39","port":443,"asn":0,"as":"","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"3b35eeefb3793f6debaa81fa3b1c1d15","sha1":"cd9fb4356610594fd9f321f069b9128150d23700","sha256":"0059b22afce68bbfbc47946752eb1bf3ca14f68606e7240d9445e92514d8b4f3","sha512":"0da54e909c37ee75dc3a346b502c52bdc449abf9caf5461c0fa231f311e8ef88716eb2354ae89304c813ebd6a42520794cdd79e440147b35a33f203df7c6e588","ssdeep":"","tlshash":"3a1161ac3d866c7c6ec52889346fa25df9362b267918c0104aadc898b4b4f80405aeda","size":1014,"data":"","first_seen":"2025-04-13T09:06:20.862147Z","last_seen":"2026-04-03T18:43:45.468615Z","times_seen":1702,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"iw63v.crqeraf.xyz/static/js/gtag.js","fqdn":"iw63v.crqeraf.xyz","domain":"crqeraf.xyz","tld":"xyz"},"ip":{"addr":"154.207.127.39","port":443,"asn":0,"as":"","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"18022cc6642c8758a48e6320a80dfb01","sha1":"253a59f478c2123e64983a5cfc2dd23460d4b13b","sha256":"85209508260229a5484d374f01701b4b2e2859a47f6666b9f9335da27ef5ab31","sha512":"257fe549f8a70380503a1cc2e51636e9115ec14a65c4106cead58274722b11f2fcb21b1a92722a425794fa6d14bb90a43e07afd2bbd48dea777d84047648145c","ssdeep":"","tlshash":"be115b59e02c283bc4a6e532a14f69067afc44f30bec3440d3adce4c2db1976360b56b","size":1000,"data":"","first_seen":"2025-05-19T19:36:08.205936Z","last_seen":"2026-04-03T18:43:45.471156Z","times_seen":2507,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"iw63v.crqeraf.xyz/archives/65129/","fqdn":"iw63v.crqeraf.xyz","domain":"crqeraf.xyz","tld":"xyz"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eventHandler","is_inline":false,"md5":"7863f395130d1a12928a68823368a8b7","sha1":"f16d86e4cf7962ce52e7f25ad134a7c66cde10cd","sha256":"f48fd28e0e10670d2506091e4e43d655669c3f6998d3d274cd449fd1bf03f595","sha512":"e4edbbc55e7e230b4215f21f55e04be6628e52183e19125758088ce535baac05875469d8bcff1022535599e3856c53ef64e150389e68a7d29db52aea51dc0ae5","ssdeep":"","tlshash":"cfb0122312e378090d9d411401765440ca8d13fb10c5061071ba04f75c005041112818","size":87,"data":"","first_seen":"2025-12-23T12:51:39.332625Z","last_seen":"2025-12-23T20:24:24.932427Z","times_seen":11,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"iw63v.crqeraf.xyz/static/common/vue.prod.js?v=20251130","fqdn":"iw63v.crqeraf.xyz","domain":"crqeraf.xyz","tld":"xyz"},"ip":{"addr":"154.207.127.39","port":443,"asn":0,"as":"","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"de7abf4d43f144b780fc86236b5eebd6","sha1":"487259535f3903caee0e2825d4d70e6c273e56f7","sha256":"a43ac70eed708306fcd8911a746c2a92064e529969a1556c1d3dd289e493bdb9","sha512":"43800eaba113898adb4c1c8e98912ac7f5566377d323552d39ea5cd13aa3be5b0280158d4ddbc98419dff57799df8b9bf9c9b4f8a09591d7a1f7fb013eebed0a","ssdeep":"","tlshash":"d51154b90c04f6133ab726d384476198e670402c70adf48525e8affd84a31fe9677f1a","size":1000,"data":"","first_seen":"2025-06-30T03:33:26.758879Z","last_seen":"2026-04-03T18:46:54.707256Z","times_seen":7578,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.addtoany.com/menu/svg/icons/qzone.js","fqdn":"static.addtoany.com","domain":"addtoany.com","tld":"com"},"ip":{"addr":"172.66.171.172","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"a17eac8495145dd9e47449ade51d723b","sha1":"b4c560e4b9f3d0a1bc1750068cd7431960ca867f","sha256":"71db88183ecf13443169be6691fe13b7ba21d71484e4f78aaacc06ee1940fed8","sha512":"de46f36992408061aa9269f864aea9edf5c2d546618ff5bab34b523d0d8b2aa656620aaa45b4e940ebe020d35e103c82c0346e5f147bde0459f67084a26ac8a6","ssdeep":"","tlshash":"dc1150cb7214570ac50446dbc3ebe8d20605703a083810c286ffcb797069c8eed00d45","size":908,"data":"","first_seen":"2024-08-19T19:49:02.25879Z","last_seen":"2026-04-03T18:43:45.413109Z","times_seen":7842,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.addtoany.com/menu/svg/icons/douban.js","fqdn":"static.addtoany.com","domain":"addtoany.com","tld":"com"},"ip":{"addr":"172.66.171.172","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"58b9ee38409760d31f206b8b9c253591","sha1":"8ade058793e2da9258c077a1bcfe8fd0f6091a6d","sha256":"1706d83eb48b3c68a21f90e902db4d8de26298bb95c44c21c498fa2b9ee60dd2","sha512":"1a3557ed08952610327a74e52ffb09839b957b6177f8df21373ed290dc60429b604ce910dcb7335cb03def3cdfb95794c229ea297ca82ed76837cef837236b72","ssdeep":"","tlshash":"12e07d56b13419418d3309bad32e140f5276346c02a9a0e19168c0b3747b07e4406703","size":313,"data":"","first_seen":"2024-08-19T19:49:02.269203Z","last_seen":"2026-04-03T18:43:45.434948Z","times_seen":7527,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"iw63v.crqeraf.xyz/static/pc/js/qrcode.js?v=20251130","fqdn":"iw63v.crqeraf.xyz","domain":"crqeraf.xyz","tld":"xyz"},"ip":{"addr":"154.207.127.39","port":443,"asn":0,"as":"","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"e985e04be5630ad546ff427cdfbc35ff","sha1":"60fe119bd5ad24e79c33043b62a3fc90289dd11d","sha256":"413ce17a2260d2957fe8e65507863ee40a485a8a83ec5e993e4b3856c66cad83","sha512":"f9e120d9cdf797d345715c6e3c2cae8fd89d5d8a71fd5048b4cb4a75a3cba460a9ac4aa03cc5a8ee20fb357665b4546fe49a67fc185e3150cfdc4281090110f8","ssdeep":"","tlshash":"9a1159983b79734ed0ab1412084f42e96332b95f0c8a017c7642e4d5beb0e7c768e97c","size":1000,"data":"","first_seen":"2025-04-05T12:07:32.445857Z","last_seen":"2026-04-03T19:00:13.626334Z","times_seen":2382,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"iw63v.crqeraf.xyz/static/common/imageZoom.js?v=20251130","fqdn":"iw63v.crqeraf.xyz","domain":"crqeraf.xyz","tld":"xyz"},"ip":{"addr":"154.207.127.39","port":443,"asn":0,"as":"","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"7bdd0f1534db1206721c7c37b4038161","sha1":"647e0f7ff0548d594a27aa622bcd21c12f7203bd","sha256":"f1de47de2ba08a9d8c059a664dbb17a9500b3efef3d37b18adf0b970b4dad128","sha512":"f459aa8ffe84f70751a7429c05024eb0bca42d8723b80d3d48028494353fbdab2e4e0565999f7850a71ad93b99f1722a9bb8d3d7b3bcb054143dda2e11ff8337","ssdeep":"","tlshash":"386100452ab211249333542f0bafe21579944113e605de093bcdcb6edfe1a7481ba6f7","size":3428,"data":"","first_seen":"2025-06-27T04:20:30.534386Z","last_seen":"2026-03-30T00:23:21.699299Z","times_seen":7024,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"iw63v.crqeraf.xyz/archives/65129/","fqdn":"iw63v.crqeraf.xyz","domain":"crqeraf.xyz","tld":"xyz"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eventHandler","is_inline":false,"md5":"fe50d9bb2ee117204a4bc47ff47689ca","sha1":"36c104572f94ab42e902e2c63a2f4c560b39e0de","sha256":"d6a35261413d919fbafd34a064a123090c3865ad8a78665c13285a62fb2fdbbb","sha512":"f095f7fe4cc59be8aded0a02c75b5d98fceb2bbb6c13b3e6121516ff0af01a1604924b9d44d79b27f75bef6bb68558ed4abd02ac99d3b5b4c08c673afafb5302","ssdeep":"","tlshash":"dbb0121383d2465b0d9c121107e63d04c2d8261b94400218b31900f684090029736c08","size":89,"data":"","first_seen":"2025-12-22T03:30:57.58222Z","last_seen":"2025-12-23T20:30:18.668858Z","times_seen":52,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"iw63v.crqeraf.xyz/static/common/index.js?v=20251130","fqdn":"iw63v.crqeraf.xyz","domain":"crqeraf.xyz","tld":"xyz"},"ip":{"addr":"154.207.127.39","port":443,"asn":0,"as":"","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"d713d712201a9102e6c36a2d25558209","sha1":"dde9c391b60e52589d3bccc7a43718fba9552197","sha256":"8fb5c5ff6263b500e4a86da4df90aa9a12eec99df661f482eaa26e363839f23e","sha512":"ee576b018b9f763b73a36000aa03303fd4a49c5b24178564470944a76b0ebcd0a40a6cb1f19e3315a153c22e072dacf237accebbdaf08236d35ff1a71798a959","ssdeep":"","tlshash":"dc112b2b4afea8828875a0d733d62020a33164235552d90c7e5f87eccfd69894395ebb","size":1080,"data":"","first_seen":"2025-11-21T01:03:13.197661Z","last_seen":"2026-04-03T18:43:45.470649Z","times_seen":3992,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"iw63v.crqeraf.xyz/static/web/assets/index.js?v=20251130","fqdn":"iw63v.crqeraf.xyz","domain":"crqeraf.xyz","tld":"xyz"},"ip":{"addr":"154.207.127.39","port":443,"asn":0,"as":"","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"16f356501a0ae311ce5315e14c36e4f4","sha1":"edf0cfc5450141e85f4ebeba9f93c2f704b8d6d7","sha256":"341c81ac8b5cf8483f5755c29af8873235f3bdcdde8d0246cf22f182838d2119","sha512":"0b56ac8e90a39bb8ed9f9d1df1356d7fe0b591fa00278efd097774d13adce9569e27ec9a1ec4dfa0fbc03d1141e4a7aa2be1046f9e6090450cc30d0936fb70f5","ssdeep":"96:+AFI/M25FrH9nWwnym0uGCLScjLqEi9m+mvemi:+su951Iwnym0/CLwm+mWmi","tlshash":"a7a1324c1674203141b7a3becf67a648eb353117a20259687d9ecb846fb153983a3fcd","size":4994,"data":"","first_seen":"2025-12-23T08:10:49.312025Z","last_seen":"2026-01-17T05:31:57.849703Z","times_seen":530,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"iw63v.crqeraf.xyz/static/pc/js/crypto-js.js?v=20251130","fqdn":"iw63v.crqeraf.xyz","domain":"crqeraf.xyz","tld":"xyz"},"ip":{"addr":"154.207.127.39","port":443,"asn":0,"as":"","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"22c6d277087cdfe391e80e8429f1fa6e","sha1":"dae61555c633058d5b5bbc231267aaa0899f50b1","sha256":"01105f1e04d914a4e29f113090b9010cabef6d9876ba154721891f8609d5d0fe","sha512":"decbb485692383d6f4a4b2d8cfffb1de54817c2af1f48f8765b3ec6296c6b4a78f999cf50cc4ffbc0fb4cfd60ffecfa34292b2b7e0af6055da48521119a5474f","ssdeep":"","tlshash":"9411e2581deef05106a2247953bff14ab013c473024d9b203b4d4b689fe083b5b85eea","size":1000,"data":"","first_seen":"2025-06-20T19:12:00.064429Z","last_seen":"2026-04-03T18:41:45.513931Z","times_seen":1942,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"iw63v.crqeraf.xyz/static/pc/js/clipboard.min.js?v=20251130","fqdn":"iw63v.crqeraf.xyz","domain":"crqeraf.xyz","tld":"xyz"},"ip":{"addr":"154.207.127.39","port":443,"asn":0,"as":"","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"ed4f52a6cfbb2ddbc15685bfd3f5ce85","sha1":"d46e7f688f0e4161f8e74be8630dff39256610af","sha256":"f213f836000b039989a1adc63555538510409731db9d8cc9fd8d224eb3fa357c","sha512":"c09d8422880ce9bf77d322e74c536c4565568a6f826fb2206a6b479c1970d6dc6d307f3a3446859b274e30a6598c16b4ce3664c0173987cd7f4593db79786471","ssdeep":"","tlshash":"23110e5a7880b13366eb2061815f414b3972a9067c9b80d1f36ad5e1e8b852e54a3e7c","size":1000,"data":"","first_seen":"2025-04-04T08:32:33.6825Z","last_seen":"2026-04-03T18:43:45.470166Z","times_seen":1838,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"iw63v.crqeraf.xyz/static/pc/js/hls.min.js?v=20251130","fqdn":"iw63v.crqeraf.xyz","domain":"crqeraf.xyz","tld":"xyz"},"ip":{"addr":"154.207.127.39","port":443,"asn":0,"as":"","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"84be164daf181fb0c09d59077a57f33f","sha1":"9da6f05d6d30b15b02b7d8a547286818ee2fbc9b","sha256":"7486ce51514f189af5ff82e59ad55150d10dd0f30a9198b0f18e2558aba67fec","sha512":"8a8bfbd56886a49d8c9fdcab893434f6385ed0eeaca16af9a5bedc14c4e846027404e7f7493ab2a76335cfb39e3c960e0d9ed95775dcbfc3900e39bc34e501d9","ssdeep":"","tlshash":"f8117bc9f92178cb63a75070412b901f64b61e3444d41028b7b0eef464b452f9597f7d","size":1000,"data":"","first_seen":"2025-04-13T03:23:15.026246Z","last_seen":"2026-04-03T19:02:15.152111Z","times_seen":1049,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.addtoany.com/menu/svg/icons/a2a.js","fqdn":"static.addtoany.com","domain":"addtoany.com","tld":"com"},"ip":{"addr":"172.66.171.172","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"baf0595a19bdc7f7497b74731d2166c4","sha1":"fd5714384c52fc0338083574434d12328313896c","sha256":"3dab93242ee573bbcfc22c9d15acd47794e500ed44e6bd48a35400b39d65aa43","sha512":"da0e15a709b3d043e8cd9e4f97cf70d8c1addc2a7d90b6bb11d71cd72aba9133e5b9388528691cf6a354a6aaa346045f64d82b947883057471e1f1a2fdbd1901","ssdeep":"","tlshash":"74c01291501575418c1342fb475e500b167120bd015c14ca36a881f9595613f8c42fc3","size":182,"data":"","first_seen":"2023-03-08T14:25:33Z","last_seen":"2026-04-03T18:42:08.443451Z","times_seen":13468,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"iw63v.crqeraf.xyz/static/common/vant.min.js?v=20251130","fqdn":"iw63v.crqeraf.xyz","domain":"crqeraf.xyz","tld":"xyz"},"ip":{"addr":"154.207.127.39","port":443,"asn":0,"as":"","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"8e7f17e24f74afcaa04f72a0f7e18bd4","sha1":"be2b895dbaec44939160a2b46fca1b4efd1f1f03","sha256":"254331bf0fa52650cd86f9f8fae9ee2483c81e5c3c44142ae33f62fd3778179f","sha512":"d22c99fa8fa9cbec950016a23c6950812c329767d69d855a1317d0afe2d91902056da906baf96a9c6c42ec802e918c55e7f86335743ee14931dc6719118e9ef9","ssdeep":"","tlshash":"a411c2953c12b451263724e6813f852fa075c43f95cc94b4f1d1acf2697357e8641e9a","size":1000,"data":"","first_seen":"2025-06-30T03:33:26.753852Z","last_seen":"2026-04-03T18:43:45.468168Z","times_seen":7433,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"iw63v.crqeraf.xyz/archives/65129/","fqdn":"iw63v.crqeraf.xyz","domain":"crqeraf.xyz","tld":"xyz"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eventHandler","is_inline":false,"md5":"2f450bd9c2ac545816fca95a1e821328","sha1":"1bd10195ce218389569d237c1f87bf27f5c7fac6","sha256":"f9f1f4cde50c6ce8252e81beea5fc3fa893f70a7af761805fbafb38b9509413c","sha512":"a178a9ec1a82fd71bb19d4c9de548ee65ae4eb3d4cf3b1630f61bcae93222ea6b060789a7e0df956d63091a67d3580343d8419f389bd74b5aaf1b74110f6b0c2","ssdeep":"","tlshash":"d1b012130ed375090f9cd100013a1901d369131b54c20350339808f341844002812c48","size":87,"data":"","first_seen":"2025-12-22T03:30:57.527203Z","last_seen":"2025-12-23T20:30:18.683191Z","times_seen":51,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"iw63v.crqeraf.xyz/static/ai/js/ai.js?v=20251130","fqdn":"iw63v.crqeraf.xyz","domain":"crqeraf.xyz","tld":"xyz"},"ip":{"addr":"154.207.127.39","port":443,"asn":0,"as":"","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"d4fd1e342a0986595cbac2a2cf1389e0","sha1":"b7164c6f0a8c02f04e29a2206cce2b1ace8adfb5","sha256":"b1f8c05d4bc8d1b3e50bc7db24f3d276f369723204b055b0e65b75f3b08e9309","sha512":"ade3727199e11c15769d127fc14d91d017859330bbdbe82fa28435960a3adb4a33d4279e662dd125bda3f5c887116b244389e2508892c0ffe1a68910fc7f8223","ssdeep":"","tlshash":"fb119781dbfe64349706b67d1a9b13ccbe08942b5c8aad6d3b4c57100f0e02d03a2dae","size":1060,"data":"","first_seen":"2025-11-21T01:03:13.199881Z","last_seen":"2026-04-03T19:08:59.523539Z","times_seen":3906,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.addtoany.com/menu/svg/icons/sms.js","fqdn":"static.addtoany.com","domain":"addtoany.com","tld":"com"},"ip":{"addr":"172.66.171.172","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"3d619161b4679be7fbcdbc6e7219510e","sha1":"cefe1ce56517fa0f2701ad7686e9a9167890f5fb","sha256":"8aa5087a5c31564c259063d074756190d836a064365e67c0e8306b8e30267f9b","sha512":"fbf14b751905bb549e902677fe24079a31a6b2df456ece7b258ee7bf581e62ad1d40f42df72ecb884063d175770c0b82817e088736a61ff2792086bbc2bd65ba","ssdeep":"","tlshash":"bc21e1b3171455dc54abaa5fce30ac04a26de8edaa7a00c1851fdaa950cf94af503d52","size":1303,"data":"","first_seen":"2024-05-13T15:11:57Z","last_seen":"2026-04-03T18:43:45.439948Z","times_seen":7978,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"iw63v.crqeraf.xyz/static/pc/js/base.js?v=20251130","fqdn":"iw63v.crqeraf.xyz","domain":"crqeraf.xyz","tld":"xyz"},"ip":{"addr":"154.207.127.39","port":443,"asn":0,"as":"","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"33c620362494c2d77d8ea07912f86740","sha1":"f0062f930b0099be3c44a34cbb2955d599630df8","sha256":"3d506f0ee9bf64f929513cd36a57fb26e12fc824cdc0eb9d17c4f6569616a122","sha512":"6ed11f979319ffb92ab80254886f38deb9bd84e9d660f7bb97abe78be6fe8faf34feaf56e783fce5f7a3609bd1326d8787a0c689a4c1d5f90057a4246c653f57","ssdeep":"","tlshash":"6c113ca3354916c66d759ee30a6f908e00a513129330e5b4f32edc44cbdde21a174b28","size":1000,"data":"","first_seen":"2025-10-30T06:30:22.080405Z","last_seen":"2026-03-19T03:45:41.030395Z","times_seen":2084,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.addtoany.com/menu/svg/icons/sina_weibo.js","fqdn":"static.addtoany.com","domain":"addtoany.com","tld":"com"},"ip":{"addr":"172.66.171.172","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d04028d2133db89a77370d4187c75d17","sha1":"6cb4e55459e9ae15b908aa5c6d89d9cc2647f3d2","sha256":"98b8300b847aa93435040de98b9e9c8624c0cf250231682b42506efbe4606623","sha512":"28ec46b0d94db80a620c09d0fcbc5e3ab311ad9f709bd6de8e97ad0191a346102eb493f18b1d60e90de24499bc05195e7676d914337b2eb410930c6e8954b936","ssdeep":"","tlshash":"8f212fd17254a6cc3897ddeedf119022672e74bd3a1a0690079feb79f8ab08cf202c55","size":1380,"data":"","first_seen":"2024-06-16T13:40:34Z","last_seen":"2026-04-03T18:43:45.406215Z","times_seen":7862,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"iw63v.crqeraf.xyz/static/ldy/20230615/assets/js/index.js?v=20251130","fqdn":"iw63v.crqeraf.xyz","domain":"crqeraf.xyz","tld":"xyz"},"ip":{"addr":"154.207.127.39","port":443,"asn":0,"as":"","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"cb0c6c91f7ab32d78e63fe6e419edee8","sha1":"0db7a2d3cb9a6e889d1275215289991fd9ecbbd0","sha256":"b55c6b20d284c370b6f3a62817f4a57c65d3e23ca71c8d44c85384f6d955f07c","sha512":"f9e528f1ef737aa85e71208a002dbd6554eba6be0dae0f4192160134c321e24a94494eb3311ca3e579e9b009d48af91283be1ec0200699a1477ff747c60d6d3f","ssdeep":"192:O71HiFixi6iZiliVOiniwiviFiehisizxO9ii6iSsoaaitisvLwrRKc:giFixi6iZiliwiniwiviFiEisi09iria","tlshash":"29f1dedb769308b04b4fa17b562f53983530905b1804d6693d2ccbd0df24ab666bbfe8","size":8091,"data":"","first_seen":"2024-05-10T06:44:57Z","last_seen":"2026-01-23T13:06:38.375545Z","times_seen":3625,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"iw63v.crqeraf.xyz/static/common/axios.min.js?v=20251130","fqdn":"iw63v.crqeraf.xyz","domain":"crqeraf.xyz","tld":"xyz"},"ip":{"addr":"154.207.127.39","port":443,"asn":0,"as":"","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"597fc2353c460cd7f142be46124fa38a","sha1":"0f8ff42de3c33785d80b0e0a20463d824cbaaabe","sha256":"fd5670e03a58d86a0e3723817a351e51a8311765b05371ef47dc0d160fc7618e","sha512":"90df399ec9f078b01b315b66dbdac2e0070422e4ffd542a2e0aee099f723e7ef7405344cc6db80f7cb84217706cb219f035aa69f02808133cdd360047a3c3493","ssdeep":"","tlshash":"441132c57958b455a2a3ae33e01f100b227668336d0e1800b319fde4ccb74aca3a3e0d","size":1000,"data":"","first_seen":"2025-11-12T04:33:15.881594Z","last_seen":"2026-04-03T18:18:51.637072Z","times_seen":7267,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"iw63v.crqeraf.xyz/static/ai/js/payModal.js?v=20251130","fqdn":"iw63v.crqeraf.xyz","domain":"crqeraf.xyz","tld":"xyz"},"ip":{"addr":"154.207.127.39","port":443,"asn":0,"as":"","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"8a9718ed12bdaad60e78bbb58c5bd07c","sha1":"97dbfe61b3e7157fe88d72556c85cba090bc1486","sha256":"a9596cf162a66cf1001614449604205189e284019ed8a180427068763b94434a","sha512":"7984a59a65afde7f6831385739be9d1ec96e8e0489678d15585ad4dc84637c1d1acaeb18c622f464d49ba34b5f23769b4cd66cb3242408335d09e50d54e952a6","ssdeep":"48:bvL/9rWWptWfCBkIy3o3yx8ctO4yQJEvUjsgeh1kDsGZ1v:bj9WEtWfaU4iMgE8k7kDdv","tlshash":"9481de6488f142f70ab3d0d20f5b26177f90f027ea4e4a48395e6bf04f9ec96b683585","size":4113,"data":"","first_seen":"2025-11-21T00:42:42.291722Z","last_seen":"2026-04-03T18:41:28.51402Z","times_seen":7102,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.addtoany.com/menu/page.js","fqdn":"static.addtoany.com","domain":"addtoany.com","tld":"com"},"ip":{"addr":"172.66.171.172","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"e9a3b98e2acbdadac054fdc26332edf6","sha1":"e79c2933e456e2bc1031ad2bb59c006a8b602090","sha256":"fcb4248858836c831fd9ab8fa4c5a8fe0b8cd038c804fa6cc44a5e9004e163b6","sha512":"d6c64f6804ad98d601ea30808b63008698e9c199892da2b587e61fabb4a35de8badff61b02534234d8ca1ad09945849433a19dca3cdb5215d672ebfc1782c564","ssdeep":"","tlshash":"4861b74f774ea8734a5736bac19fb60f2223731e5c6588048914e4d449bcec6501fa7e","size":3179,"data":"","first_seen":"2025-10-23T06:03:39.971585Z","last_seen":"2026-04-02T08:50:54.045828Z","times_seen":16683,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"iw63v.crqeraf.xyz/static/common/imagejx.js?v=20251130","fqdn":"iw63v.crqeraf.xyz","domain":"crqeraf.xyz","tld":"xyz"},"ip":{"addr":"154.207.127.39","port":443,"asn":0,"as":"","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"3278ecc8ffdd6500dc1a1b686ad547da","sha1":"95e017bf94e0ceb658191ea710b1736a147a85ac","sha256":"8b27640b85fb9f506e0cc9f8766b79b03cddb18da58281760ec5de3946cfb985","sha512":"042035ea24389fbe6b54f799c3d1a978e102d6377e236bfe181e8631b943d6bb46624a2fa24e57ac5603e0c40ef658f590c53dc7dbbeaeeda0fe44c7814c0199","ssdeep":"","tlshash":"dd11eb603c933586a378b8f9d23fc829a9269c127238c2a1d9169946fdf2121c171adc","size":1000,"data":"","first_seen":"2025-09-11T22:20:51.211544Z","last_seen":"2026-04-03T18:52:32.250018Z","times_seen":4133,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.addtoany.com/menu/svg/icons/facebook.js","fqdn":"static.addtoany.com","domain":"addtoany.com","tld":"com"},"ip":{"addr":"172.66.171.172","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"014bcc757e484e12e3aea6c9d768fd4b","sha1":"4c17157d0012f8002e4e6cf77c5f4a9747792cf4","sha256":"4b475960843a5619b907af1f0a89e3136bd5e6a4a700ec78cb417f302647cf49","sha512":"b00fab0ce2e56b56c18e0dc54ac3329d77fc18096e63bc2aef34342770f40dac91c10f7a8a9db1dcc5ce42fbafe637fcb1fdd51994ef937aa00923375476d467","ssdeep":"","tlshash":"dae0ab951236d9864d51093ec71fa48fb3b0b67fa1d8298006bc80b289d20fd3e0ba03","size":429,"data":"","first_seen":"2024-04-12T16:11:44Z","last_seen":"2026-04-03T18:42:08.415222Z","times_seen":15747,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"iw63v.crqeraf.xyz/static/pc/js/jquery.min.js?v=20251130","fqdn":"iw63v.crqeraf.xyz","domain":"crqeraf.xyz","tld":"xyz"},"ip":{"addr":"154.207.127.39","port":443,"asn":0,"as":"","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"175657812bfb42fea1fc42f4b5846145","sha1":"f2e3e1d49f044bb611aa91eb660f88ffd8ea85fb","sha256":"328369e9404f2c7ed22b1c58b5502a2c40f343a836384b2b8c60dccaca34f5ea","sha512":"7f11111b820651b2c38cc95e3904cdb4337802756b7090c565c9e97b74744364ee8505a955d1b047b9a902940ad2582da3c4aee08e230543359299c60a521fe9","ssdeep":"","tlshash":"5511eb9839f2b21ed33324a0313b414bf2b350ddb55c5c25a56cc4e17db041981b6dac","size":1000,"data":"","first_seen":"2023-05-09T14:28:01Z","last_seen":"2026-04-03T18:40:41.354814Z","times_seen":1355,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"iw63v.crqeraf.xyz/static/pc/js/DPlayer.min.js?v=20221103","fqdn":"iw63v.crqeraf.xyz","domain":"crqeraf.xyz","tld":"xyz"},"ip":{"addr":"154.207.127.39","port":443,"asn":0,"as":"","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"0d4c06fcdaf7eff11abe92dfc672cd32","sha1":"9ea7452a7e254d629a5b8228cac7f50963634b6c","sha256":"b56e3355bd9f367512b1b1280f3dad089ba306c0d43eca22793d52f9e9d0e074","sha512":"dbc8ccb227033be3fda38dce4a421198c9461630610f1a4ac31a9ca9868884fe8b4ee7a468d46dd105dbf1f726f90537bb1d95c2f2e0a45363f4d6614dc232e3","ssdeep":"","tlshash":"6c11571208888436024260d0874d9f0f7eb2633684995b53b3aeabec5b9ac5dcc2b462","size":1000,"data":"","first_seen":"2025-04-13T03:23:15.029327Z","last_seen":"2026-04-03T18:18:51.250333Z","times_seen":5261,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.addtoany.com/menu/svg/icons/telegram.js","fqdn":"static.addtoany.com","domain":"addtoany.com","tld":"com"},"ip":{"addr":"172.66.171.172","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"48f25c508c92c3601cf047609318001f","sha1":"59117e825084c63a0dda48edec82c14a60e16f23","sha256":"6415561e892cf9d614e7179f71353af4ceadfd641d71c42fe54c9420eb0d0138","sha512":"32ca9e672cb26c5cc9370d32a2739ad99a933a700250e310955b68ca4a974964f22095179d1a56f8f57c160ee6ab4d3ff659b4bba5838879472289b06bf53a42","ssdeep":"","tlshash":"66e02077611084814c2a54bbda1e614f5434f069529d65d3436ac4f754d726f5c12d8b","size":360,"data":"","first_seen":"2023-03-08T15:33:09Z","last_seen":"2026-04-03T18:43:45.443436Z","times_seen":9788,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":[{"md5":"c5e17dcd7f2a1281ffa30766c9c7ad0f","sha1":"3218888a493beac2f776e02e469eba4278aac167","sha256":"20147e227059e5712f403950df1bce38df01e46286592ee4927723f803d01d63","sha512":"fe016f39f78140249ee11afcecc557a963a86d3fbcbd43026abc0a98c4a333fa5eeb3a3a98e919edc589a2835f421693acd9078de17694aed84b3fed3efe591d","ssdeep":"","tlshash":"3fc08c323c1182bed80ae0c0295e6f146293e21b8b50889580b90980f320d2e590d803","size":163,"data":"","first_seen":"2025-11-19T02:59:39.836942Z","last_seen":"2025-12-23T14:30:42.534034Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"84d4119dca755c3b70b5e182ff440fd7","sha1":"df258134cbdc69b48ca7bb3b3bf8c127581ced61","sha256":"b7b52a997845468aba763232a25a300389130d931cd2cbae0ececf90c001113f","sha512":"325ad1da940e65dd5cae0901788ccb5654bd4e2d7ce0d6f2e6a3a350057329bdfed53c3668da69068d764cc7e460d4ff642698817b083d614198fcb754579880","ssdeep":"","tlshash":"ec11f21021ee915a0173e0d76df76f223982fb1bc18e18447adc56f80f97c6ef965188","size":1088,"data":"","first_seen":"2025-11-19T02:59:39.838372Z","last_seen":"2025-12-23T14:30:42.535458Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]},"http":[{"url":{"schema":"https","addr":"heiliao.com/favicon-new.ico","fqdn":"heiliao.com","domain":"heiliao.com","tld":"com"},"ip":{"addr":"3.167.2.63","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://iw63v.crqeraf.xyz/archives/65129/","date":"2025-12-23T14:29:59.100Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"heiliao.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Mon, 22 Dec 2025 00:00:00 GMT","end":"Wed, 20 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"E6:37:12:41:7E:C0:A0:A9:95:A8:F1:A3:E7:44:FA:C1:D9:E2:91:AA","sha256":"09:0E:DA:FA:2E:EF:EA:F0:0C:E4:93:6F:E9:5B:88:27:B0:6A:BA:5F:EC:33:8A:BD:1A:5E:15:83:F1:2A:56:7F"}}},"request":{"raw":"GET /favicon-new.ico HTTP/1.1\r\nHost: heiliao.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/x-icon\r\ncontent-length: 9662\r\ndate: Mon, 22 Dec 2025 19:12:17 GMT\r\naccept-ranges: bytes\r\nserver: nginx/1.22.1\r\nlast-modified: Thu, 11 Sep 2025 07:44:00 GMT\r\netag: \"68c27dc0-25be\"\r\nexpires: Mon, 29 Dec 2025 19:12:17 GMT\r\ncache-control: max-age=604800, public, max-age=604800, immutable\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 c66a2f390287242c7df16dd5190aa68e.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P2\r\nx-amz-cf-id: bYqLNi1n2n6VomoT8sf54cQa-5QzEOX_Vt5Zirl6adWABfPY7i2bXQ==\r\nage: 69462\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":9662,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 48x48, 32 bits/pixel","md5":"20e1e6480cc182aac2558e506cd97a8e","sha1":"4502c0d978e8f2a576cfae4f0646773649545d65","sha256":"446695c0587aedaed3930e4c9d580fa0acffbd9677aa062ee0177b0b049dc109","sha512":"276ffcd611fe75ecf4ef674b6a24a75d436b7cf005f83c2eff4f456323a0b8fb1e2ff0ef18970913284a3fe66ed17d6228b8214fe552a8d71c31ba1c2e077049","ssdeep":"48:92kNsAL8yHtENknaIn999N2HMqCIMERRR3OjNDtMUsYO:92kNbL8dkbn999N2BMERRRhUBO","tlshash":"471253cb91ad9407c5aa2434c9d2e834c1df6eca3d1d82ede3e0cd9b7fd268452951e8","first_seen":"2024-06-23T22:38:35Z","last_seen":"2026-03-02T18:54:57.667774Z","times_seen":191,"resource_available":false,"data":null}},"time_used":3,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"iw63v.crqeraf.xyz/static/pc/js/qrcode.js?v=20251130","fqdn":"iw63v.crqeraf.xyz","domain":"crqeraf.xyz","tld":"xyz"},"ip":{"addr":"154.207.127.39","port":443,"asn":0,"as":"","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://iw63v.crqeraf.xyz/archives/65129/","date":"2025-12-23T14:29:55.964Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"crqeraf.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 12 Dec 2025 08:17:25 GMT","end":"Thu, 12 Mar 2026 09:15:12 GMT"},"fingerprint":{"sha1":"9A:B6:D6:FC:9F:B5:E4:7C:4E:60:81:74:C5:1D:1F:16:43:65:9B:C0","sha256":"6B:D5:92:C2:2E:E8:B1:3D:EE:9E:2C:51:0B:D3:32:29:71:17:1E:3D:93:07:59:A9:C9:59:7C:A8:D8:9B:2B:8C"}}},"request":{"raw":"GET /static/pc/js/qrcode.js?v=20251130 HTTP/1.1\r\nHost: iw63v.crqeraf.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://iw63v.crqeraf.xyz/archives/65129/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 23 Dec 2025 14:29:55 GMT\r\ncontent-type: application/javascript\r\npriority: u=2,i=?0\r\nserver: cloudflare\r\nlast-modified: Sat, 13 Sep 2025 03:47:39 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68c4e95b-4dd7\"\r\nexpires: Tue, 30 Dec 2025 07:16:36 GMT\r\ncache-control: public, max-age=604800, immutable\r\ncontent-encoding: gzip\r\nage: 25999\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=namweCutEW1dvPblImRuMp0InTHSirR4BqNrU40nEWReGEmhcSFfsnrqxSpEnfmQR3DpTAYZTNKwCiINoi2b6JtKNL4xvOOaX8%2F6QxRtAw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b288dd04b0056b4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19927,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (19927), with no line terminators","md5":"517b55d3688ce9ef1085a3d9632bcb97","sha1":"2d06c1f823f34c19981c6ae0b0eb0f5861c5e14b","sha256":"c541ef06327885a8415bca8df6071e14189b4855336def4f36db54bde8484f36","sha512":"08d80845e706a3b9e985b799d3849cd7791ad3ba5aa9d793bb4591d4833890d7299810144874905f416c94d8530da74be0ee520066a91ade05a1da8bf0ccb498","ssdeep":"384:WRQ2kvcAAdTRhQLThP2yO9/9G84U5xOiKQYHHHsglDep9m1yfB8dKLMyA+LyUyy9:xThP2V/9N4U/gQYPXa8CAPLyrZ","tlshash":"8c92c7e4f36542f6915e6cd4283f104b64a0a4636c1490acbfb5c1e6a9f8fe0647af74","first_seen":"2023-03-07T01:14:56Z","last_seen":"2026-04-03T18:35:50.27001Z","times_seen":47383,"resource_available":true,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-23","alert":"Sinkholed","trigger":"iw63v.crqeraf.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"iw63v.crqeraf.xyz/static/pc/img/logo2.png","fqdn":"iw63v.crqeraf.xyz","domain":"crqeraf.xyz","tld":"xyz"},"ip":{"addr":"154.207.127.39","port":443,"asn":0,"as":"","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://iw63v.crqeraf.xyz/archives/65129/","date":"2025-12-23T14:29:56.037Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"crqeraf.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 12 Dec 2025 08:17:25 GMT","end":"Thu, 12 Mar 2026 09:15:12 GMT"},"fingerprint":{"sha1":"9A:B6:D6:FC:9F:B5:E4:7C:4E:60:81:74:C5:1D:1F:16:43:65:9B:C0","sha256":"6B:D5:92:C2:2E:E8:B1:3D:EE:9E:2C:51:0B:D3:32:29:71:17:1E:3D:93:07:59:A9:C9:59:7C:A8:D8:9B:2B:8C"}}},"request":{"raw":"GET /static/pc/img/logo2.png HTTP/1.1\r\nHost: iw63v.crqeraf.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://iw63v.crqeraf.xyz/archives/65129/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 23 Dec 2025 14:29:55 GMT\r\ncontent-type: image/png\r\ncontent-length: 1412\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\nlast-modified: Sat, 13 Sep 2025 03:47:28 GMT\r\netag: \"68c4e950-584\"\r\nexpires: Tue, 30 Dec 2025 03:07:03 GMT\r\ncache-control: public, max-age=604800, immutable\r\naccept-ranges: bytes\r\nage: 40972\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OfmEAqhDheAuYQGOxqOMQYuNAvs%2BJxPs6VHfDIgfLENbxo5fc7m02N1%2BajruxKhd%2BJzKeZMr0FqOlVZFU%2B7tG6fM%2Bcl8B2u1%2B6FDhUrJIA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b288dd06b2856b4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1412,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 150 x 48, 8-bit colormap, non-interlaced","md5":"3013bf8f46191b50029ddc06cfb179c0","sha1":"7b5a95588b58d401bb1ff39898722e30aca1f1aa","sha256":"61871694a02f6b829051657eae6ea4faa166eaa2fd804c614a556f0d820bf100","sha512":"b4d0334f57b0c3eb56e7e8881870ef1f24622c3ff0a006357de5b9bef526ef4f23c50d8edc087616c4463e32d768c105a74d2bdb6f8e6abfda7e13c06031d9f9","ssdeep":"","tlshash":"fb21b9e71ec19fa6c8a7fd379a8fb4715cfcd0f67176153839e05b68140b95c5021a02","first_seen":"2023-09-24T18:31:27Z","last_seen":"2026-04-03T18:43:45.393899Z","times_seen":7557,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-23","alert":"Sinkholed","trigger":"iw63v.crqeraf.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"iw63v.crqeraf.xyz/static/pc/img/telegram.4c6d424.png","fqdn":"iw63v.crqeraf.xyz","domain":"crqeraf.xyz","tld":"xyz"},"ip":{"addr":"154.207.127.39","port":443,"asn":0,"as":"","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://iw63v.crqeraf.xyz/archives/65129/","date":"2025-12-23T14:29:56.109Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"crqeraf.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 12 Dec 2025 08:17:25 GMT","end":"Thu, 12 Mar 2026 09:15:12 GMT"},"fingerprint":{"sha1":"9A:B6:D6:FC:9F:B5:E4:7C:4E:60:81:74:C5:1D:1F:16:43:65:9B:C0","sha256":"6B:D5:92:C2:2E:E8:B1:3D:EE:9E:2C:51:0B:D3:32:29:71:17:1E:3D:93:07:59:A9:C9:59:7C:A8:D8:9B:2B:8C"}}},"request":{"raw":"GET /static/pc/img/telegram.4c6d424.png HTTP/1.1\r\nHost: iw63v.crqeraf.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://iw63v.crqeraf.xyz/archives/65129/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 23 Dec 2025 14:29:55 GMT\r\ncontent-type: image/png\r\ncontent-length: 1733\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\nlast-modified: Sat, 13 Sep 2025 03:47:28 GMT\r\netag: \"68c4e950-6c5\"\r\nexpires: Sun, 28 Dec 2025 18:17:47 GMT\r\ncache-control: public, max-age=604800, immutable\r\naccept-ranges: bytes\r\nage: 159128\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=U%2BJu3luEjttrYuY5yGMBbsLx35nzjfTzZX404TrntOPBLg6IW6VhJX%2B3HxFsa3DQ%2BdwzYawC8yYizwXn9EtZaKhtfCkK0halCT938Gxe4Q%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b288dd0ab7056b4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1733,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 50 x 48, 8-bit/color RGBA, non-interlaced","md5":"fa01a050366320a3be4c477714d5db5d","sha1":"42b4ca6aaa9c0ebba4a89c691f699ec4f3918a2a","sha256":"e9d0ba5b190dfcce00a8b4b3f26d30c5f83aef03191941cd00cc0f6aa92c93a5","sha512":"d790120bb785fb3639fb4d835477e71dc580d431138ca563bced87bbd416624f5b17c3edac3949432ca1118fe1b7540533d97781ebb131f83c166a2080cf494e","ssdeep":"","tlshash":"2b311ad604699f865781d3be6ae21286106cc237784fe11d9ec2402eec10b2d7d8b103","first_seen":"2023-09-24T18:31:27Z","last_seen":"2026-04-03T18:43:45.40431Z","times_seen":7867,"resource_available":false,"data":null}},"time_used":39,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":39,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-23","alert":"Sinkholed","trigger":"iw63v.crqeraf.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pic.wdsrie.cn/upload_01/upload/20250408/2025040815475739337.jpg","fqdn":"pic.wdsrie.cn","domain":"wdsrie.cn","tld":"cn"},"ip":{"addr":"43.152.140.79","port":443,"asn":139341,"as":"ACE","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://iw63v.crqeraf.xyz/archives/65129/","date":"2025-12-23T14:29:57.212Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.wdsrie.cn","organization":""},"issuer":{"commonName":"ZeroSSL ECC Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Sat, 20 Dec 2025 00:00:00 GMT","end":"Fri, 20 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E9:73:86:E2:44:76:13:6D:6B:AE:EE:E0:BA:B0:C0:68:B0:97:37:B8","sha256":"B9:DF:B5:64:69:80:D3:48:0B:F1:C2:39:96:52:89:9A:DE:23:24:F8:50:8B:E3:B3:38:A6:99:51:B3:9A:55:5E"}}},"request":{"raw":"GET /upload_01/upload/20250408/2025040815475739337.jpg HTTP/1.1\r\nHost: pic.wdsrie.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://iw63v.crqeraf.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Type: binary/octet-stream\r\nDate: Tue, 23 Dec 2025 14:29:59 GMT\r\nETag: \"bfbbe34dea4a8c579c87ed5c141a282f\"\r\nx-amz-server-side-encryption: AES256\r\nServer: nginx\r\nX-Cache: Miss from cloudfront\r\nVia: 1.1 0ca3a24436a7d86916b35130b21285a8.cloudfront.net (CloudFront)\r\nX-Amz-Cf-Pop: ARN53-P2\r\nLast-Modified: Tue, 08 Apr 2025 09:23:48 GMT\r\nContent-Length: 216848\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 13200271897305560151\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Miss\r\nAccess-Control-Allow-Origin: *\r\nCache-Control: max-age=864000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":216848,"size_decoded":0,"mime_type":"binary/octet-stream","magic":"data","md5":"bfbbe34dea4a8c579c87ed5c141a282f","sha1":"2294787ccf19690a40262cec07fa3595110d5fe1","sha256":"6b5a419c997e395998b1567ca65ae53e9f77c6ef2195f6551eb7d1e515e2e996","sha512":"d06af279ff8b7460b5a656fc797e7e1a7749a143c2d21cfe1b60cc36e59e76a63393b772c9d2fc7dd1dde8afc501f7d1739471483fc437eb03289c3bff42462a","ssdeep":"3072:ex19RFuVoWnBRRiCfwVJI4QwQUFr0R9nWVFUyV2DtOhncKLR9OiUS1dx07e/MFb5:G9PCfXHfIVWyVQ0Sw9OiH58p3oo","tlshash":"d32412530be6aab6913c4393f995a77d05621f49fceb88ca50b3a4cf57e1408cd50ae3","first_seen":"2025-12-23T14:30:42.285875Z","last_seen":"2025-12-23T14:30:42.285875Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1778,"timings":{"blocked":767,"dns":0,"connect":0,"send":0,"wait":553,"receive":458,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pic.wdsrie.cn/upload_01/upload/20251201/2025120121250294940.gif","fqdn":"pic.wdsrie.cn","domain":"wdsrie.cn","tld":"cn"},"ip":{"addr":"43.152.140.79","port":443,"asn":139341,"as":"ACE","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://iw63v.crqeraf.xyz/archives/65129/","date":"2025-12-23T14:29:57.281Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.wdsrie.cn","organization":""},"issuer":{"commonName":"ZeroSSL ECC Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Sat, 20 Dec 2025 00:00:00 GMT","end":"Fri, 20 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E9:73:86:E2:44:76:13:6D:6B:AE:EE:E0:BA:B0:C0:68:B0:97:37:B8","sha256":"B9:DF:B5:64:69:80:D3:48:0B:F1:C2:39:96:52:89:9A:DE:23:24:F8:50:8B:E3:B3:38:A6:99:51:B3:9A:55:5E"}}},"request":{"raw":"GET /upload_01/upload/20251201/2025120121250294940.gif HTTP/1.1\r\nHost: pic.wdsrie.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://iw63v.crqeraf.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Mon, 01 Dec 2025 13:25:13 GMT\r\nEtag: \"50df234b2b79ee51436e5759bfd0dbd3\"\r\nContent-Type: binary/octet-stream\r\nDate: Mon, 01 Dec 2025 13:25:14 GMT\r\nx-amz-server-side-encryption: AES256\r\nServer: nginx\r\nX-Cache: Miss from cloudfront\r\nX-Amz-Cf-Pop: ARN52-P1\r\nAlt-Svc: h3=\":443\"; ma=86400\r\nContent-Length: 47984\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 3736741787041777878\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\nAccess-Control-Allow-Origin: *\r\nCache-Control: max-age=864000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":47984,"size_decoded":0,"mime_type":"binary/octet-stream","magic":"data","md5":"50df234b2b79ee51436e5759bfd0dbd3","sha1":"16874a838568bac6acd4481d5b71318046c3b910","sha256":"203bf0083b2a2341f3fde77a16cbd58bdc820e481b392b0a363464a59504c8be","sha512":"97bb15103bda91525a6ea6e7e337d1bdffdea6c0839561c71d2cfa9fb6e74db3b09ac32da9cd2ae1e6af19968c391133db21f38a8b80170f310de8da9a6f379e","ssdeep":"768:pwRvuPCBkoXMaatusNdDc7Tov4QVnPbMc48tdVhShIt39qsLcp+BZj3g8cPHLmpZ:p+BksfaTNC/ov46PbB1VSIt39qF0jyvy","tlshash":"cb2302d98b3e6982f22e85afdc623244e093930b58c642d6713a55f791c126cd9c3ccf","first_seen":"2025-12-01T13:26:51.307175Z","last_seen":"2026-01-25T14:37:59.502471Z","times_seen":2486,"resource_available":false,"data":null}},"time_used":918,"timings":{"blocked":902,"dns":0,"connect":0,"send":0,"wait":14,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pic.wdsrie.cn/upload/upload/20230927/2023092719460029025.png","fqdn":"pic.wdsrie.cn","domain":"wdsrie.cn","tld":"cn"},"ip":{"addr":"43.152.140.79","port":443,"asn":139341,"as":"ACE","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://iw63v.crqeraf.xyz/archives/65129/","date":"2025-12-23T14:29:57.764Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.wdsrie.cn","organization":""},"issuer":{"commonName":"ZeroSSL ECC Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Sat, 20 Dec 2025 00:00:00 GMT","end":"Fri, 20 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E9:73:86:E2:44:76:13:6D:6B:AE:EE:E0:BA:B0:C0:68:B0:97:37:B8","sha256":"B9:DF:B5:64:69:80:D3:48:0B:F1:C2:39:96:52:89:9A:DE:23:24:F8:50:8B:E3:B3:38:A6:99:51:B3:9A:55:5E"}}},"request":{"raw":"GET /upload/upload/20230927/2023092719460029025.png HTTP/1.1\r\nHost: pic.wdsrie.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://iw63v.crqeraf.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Thu, 28 Dec 2023 12:24:12 GMT\r\nEtag: \"0ae95fe87841d9aa24b34baf5fe63047\"\r\nContent-Type: binary/octet-stream\r\nDate: Mon, 10 Nov 2025 00:52:09 GMT\r\nx-amz-server-side-encryption: AES256\r\nServer: nginx\r\nX-Cache: Miss from cloudfront\r\nX-Amz-Cf-Pop: ARN53-P2\r\nContent-Length: 2784\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 7989847466159284436\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\nAccess-Control-Allow-Origin: *\r\nCache-Control: max-age=864000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2784,"size_decoded":0,"mime_type":"binary/octet-stream","magic":"data","md5":"0ae95fe87841d9aa24b34baf5fe63047","sha1":"434c38eb28e372174b513b2f55b4396ad558d73a","sha256":"752393349289dbabad2ccf35567eec143967b03d799334ec2a65932cec8875ae","sha512":"c1fb64c5cc7a7740b0b168f062e8c5a2ee8c2d273aa6157cc7d3bd5e70d7551e9c00ec901d51c2dde76e28e572e600a407b989d21231a59ad2da5c512b216a2f","ssdeep":"","tlshash":"ea513d2b6842be8127481725f705f30d3ff0d010661fd314ead48bc286197d9e266a40","first_seen":"2023-11-14T11:24:50Z","last_seen":"2026-04-03T18:43:45.367936Z","times_seen":7795,"resource_available":false,"data":null}},"time_used":911,"timings":{"blocked":889,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"iw63v.crqeraf.xyz/static/pc/editor/js/jquery.min.js?v=20251130","fqdn":"iw63v.crqeraf.xyz","domain":"crqeraf.xyz","tld":"xyz"},"ip":{"addr":"154.207.127.39","port":443,"asn":0,"as":"","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://iw63v.crqeraf.xyz/archives/65129/","date":"2025-12-23T14:29:55.945Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"crqeraf.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 12 Dec 2025 08:17:25 GMT","end":"Thu, 12 Mar 2026 09:15:12 GMT"},"fingerprint":{"sha1":"9A:B6:D6:FC:9F:B5:E4:7C:4E:60:81:74:C5:1D:1F:16:43:65:9B:C0","sha256":"6B:D5:92:C2:2E:E8:B1:3D:EE:9E:2C:51:0B:D3:32:29:71:17:1E:3D:93:07:59:A9:C9:59:7C:A8:D8:9B:2B:8C"}}},"request":{"raw":"GET /static/pc/editor/js/jquery.min.js?v=20251130 HTTP/1.1\r\nHost: iw63v.crqeraf.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://iw63v.crqeraf.xyz/archives/65129/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 23 Dec 2025 14:29:55 GMT\r\ncontent-type: application/javascript\r\npriority: u=2,i=?0\r\nserver: cloudflare\r\nlast-modified: Sat, 13 Sep 2025 03:47:28 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68c4e950-17682\"\r\nexpires: Tue, 30 Dec 2025 07:16:35 GMT\r\ncache-control: public, max-age=604800, immutable\r\ncontent-encoding: gzip\r\nage: 26000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YJBUkN9%2BZnCLi9NeJfqWBQbjcpRL%2Fru4YaVDDsg1vUXYT6XkogO1fkwZ%2FZDajXt4IzK%2BRr%2FGB22CN9Fvt%2Bby9dS4sPKWkYUgoEKqfK4mXg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b288dd03af056b4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":95874,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (32086), with CRLF line terminators","md5":"f742893d8d1358cccb46bef623e7c9a8","sha1":"c345aa7b60c32e221d2b9db00d4683c0023011a6","sha256":"864e0a789aba9cd21aae29cd7f817b54687c18b4e0d51aadd38de2a344e64769","sha512":"73f1f3eba951d4b5bc7d18b60925af165f339bc8dd8b61e1258bc80f0dd01598a348d4297f3b75ec9c3deab7948bc641be276a5ed33ee99304a001efd9c97fcf","ssdeep":"1536:EPEkjP+iADIOr/NEe876nmBu3HvF38sEeL8FoqqhJ7SerN5wVI+xcBpPv7E+nzmR:bNMzqhJvN32cBd7M6Whca98Hrw","tlshash":"c993c8d9b6d27162977730b850bf510bb13a98eab80c4c60f1a4d8e47d78e89507bf2d","first_seen":"2023-10-15T11:56:14Z","last_seen":"2026-04-03T18:43:45.455722Z","times_seen":7074,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-23","alert":"Sinkholed","trigger":"iw63v.crqeraf.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"iw63v.crqeraf.xyz/static/pc/img/gb.png","fqdn":"iw63v.crqeraf.xyz","domain":"crqeraf.xyz","tld":"xyz"},"ip":{"addr":"154.207.127.39","port":443,"asn":0,"as":"","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://iw63v.crqeraf.xyz/archives/65129/","date":"2025-12-23T14:29:56.030Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"crqeraf.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 12 Dec 2025 08:17:25 GMT","end":"Thu, 12 Mar 2026 09:15:12 GMT"},"fingerprint":{"sha1":"9A:B6:D6:FC:9F:B5:E4:7C:4E:60:81:74:C5:1D:1F:16:43:65:9B:C0","sha256":"6B:D5:92:C2:2E:E8:B1:3D:EE:9E:2C:51:0B:D3:32:29:71:17:1E:3D:93:07:59:A9:C9:59:7C:A8:D8:9B:2B:8C"}}},"request":{"raw":"GET /static/pc/img/gb.png HTTP/1.1\r\nHost: iw63v.crqeraf.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://iw63v.crqeraf.xyz/archives/65129/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 23 Dec 2025 14:29:55 GMT\r\ncontent-type: image/png\r\ncontent-length: 522\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\nlast-modified: Sat, 13 Sep 2025 03:47:28 GMT\r\netag: \"68c4e950-20a\"\r\nexpires: Tue, 30 Dec 2025 03:07:03 GMT\r\ncache-control: public, max-age=604800, immutable\r\naccept-ranges: bytes\r\nage: 40972\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qz9h1%2Bm1EcJTqxEmBKuRnyZxZYCQmzndQO8rxIC2dVHtFq2mgzqZG5416sq0xCnje1E3r2%2F58el0KMloYSimuaWiRy4UolNkYBiYzC95XA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b288dd06b2656b4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":522,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 30 x 30, 8-bit/color RGBA, non-interlaced","md5":"683a2cda2e4803a24bc571db222f1e09","sha1":"686869e4090ffc91edce70954ee5d41d9bbc32d3","sha256":"ec6d11661e3c50c709b374e5a8b7ec67414a905370a7fb0742b282b3fbcf3303","sha512":"9dc1dd969a935cedf3fe0b5524435bc9a6c94b41bc8417c4dcef70c68d2cc89eb0b9b960fc24ddea5ce3486934e4161ea48e6de281fe73a8c8ac3c29b6089d21","ssdeep":"","tlshash":"a8f075028f8e5a16ca105c379b01a208fc1098cd920836c6023d48358ca57da4ce9054","first_seen":"2023-09-24T18:31:27Z","last_seen":"2026-04-03T18:43:45.398679Z","times_seen":7867,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-23","alert":"Sinkholed","trigger":"iw63v.crqeraf.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"iw63v.crqeraf.xyz/static/pc/img/user.4671f24.png","fqdn":"iw63v.crqeraf.xyz","domain":"crqeraf.xyz","tld":"xyz"},"ip":{"addr":"154.207.127.39","port":443,"asn":0,"as":"","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://iw63v.crqeraf.xyz/archives/65129/","date":"2025-12-23T14:29:56.022Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"crqeraf.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 12 Dec 2025 08:17:25 GMT","end":"Thu, 12 Mar 2026 09:15:12 GMT"},"fingerprint":{"sha1":"9A:B6:D6:FC:9F:B5:E4:7C:4E:60:81:74:C5:1D:1F:16:43:65:9B:C0","sha256":"6B:D5:92:C2:2E:E8:B1:3D:EE:9E:2C:51:0B:D3:32:29:71:17:1E:3D:93:07:59:A9:C9:59:7C:A8:D8:9B:2B:8C"}}},"request":{"raw":"GET /static/pc/img/user.4671f24.png HTTP/1.1\r\nHost: iw63v.crqeraf.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://iw63v.crqeraf.xyz/archives/65129/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 23 Dec 2025 14:29:55 GMT\r\ncontent-type: image/png\r\ncontent-length: 1537\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\nlast-modified: Sat, 13 Sep 2025 03:47:40 GMT\r\netag: \"68c4e95c-601\"\r\nexpires: Fri, 26 Dec 2025 11:48:54 GMT\r\ncache-control: public, max-age=604800, immutable\r\naccept-ranges: bytes\r\nage: 355261\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WDoeP3qlxXx8kVbP5h8b0GbvTkmFciy4kPjKHBlr9kf%2BDqpxjMth%2FdJ37jGZyTlFMzTb%2Bt%2FCWQ%2FmAtdc6UsfQRUTsCpjVYdE6ekCAzfl%2Fg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b288dd06b2556b4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1537,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 40 x 40, 8-bit/color RGBA, non-interlaced","md5":"2501bfa50a0bdb5bafe44fad6ae3a032","sha1":"0fcb795cbfc19f4d8f5ee65a9dc821406c49a098","sha256":"c574b9ceb4f952dc098564d4e461340af7e79de48976ba45eadfdd933b0da949","sha512":"e1bcb65ce6d9ce377e68c82803ecc51ee4f898b6e205b071009d5c6af8358216bfca3270f833ce3752cf0a510755605b1812e4768e2f77f2747cbfe73c76d246","ssdeep":"","tlshash":"7d31f98da174df7dc6f10b7206b790baea0d86916982b45c618c88d44fbeb0d250ddd0","first_seen":"2023-09-24T18:31:27Z","last_seen":"2026-04-03T18:43:45.367432Z","times_seen":7860,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-23","alert":"Sinkholed","trigger":"iw63v.crqeraf.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"iw63v.crqeraf.xyz/static/pc/img/arrow-up-1.png","fqdn":"iw63v.crqeraf.xyz","domain":"crqeraf.xyz","tld":"xyz"},"ip":{"addr":"154.207.127.39","port":443,"asn":0,"as":"","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://iw63v.crqeraf.xyz/archives/65129/","date":"2025-12-23T14:29:56.047Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"crqeraf.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 12 Dec 2025 08:17:25 GMT","end":"Thu, 12 Mar 2026 09:15:12 GMT"},"fingerprint":{"sha1":"9A:B6:D6:FC:9F:B5:E4:7C:4E:60:81:74:C5:1D:1F:16:43:65:9B:C0","sha256":"6B:D5:92:C2:2E:E8:B1:3D:EE:9E:2C:51:0B:D3:32:29:71:17:1E:3D:93:07:59:A9:C9:59:7C:A8:D8:9B:2B:8C"}}},"request":{"raw":"GET /static/pc/img/arrow-up-1.png HTTP/1.1\r\nHost: iw63v.crqeraf.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://iw63v.crqeraf.xyz/archives/65129/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 23 Dec 2025 14:29:55 GMT\r\ncontent-type: image/png\r\ncontent-length: 242\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\nlast-modified: Sat, 13 Sep 2025 03:47:39 GMT\r\netag: \"68c4e95b-f2\"\r\nexpires: Fri, 26 Dec 2025 11:48:55 GMT\r\ncache-control: public, max-age=604800, immutable\r\naccept-ranges: bytes\r\nage: 355260\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fi2rc8XlX%2Fpjyf3cF6seSWQT2nLqyTQvuUlxzqlM44bDzb4FB4RUSKShNlYQV3B3uICkjt8DxNeJhPNazi4BlmW0YrVU1AI7c4wpjulLCQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b288dd07b3556b4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":242,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 60 x 60, 4-bit colormap, non-interlaced","md5":"4f456588b6d7b51c608a3863dcdf666c","sha1":"ec24e69325daab32f8e356db59dd89d91f764891","sha256":"45d1f74cd4ac0c4db053d6574954180bff836bdf861fd844cc8ccf05e51f8118","sha512":"c24f17f125b6a1c8d43d95be50103ea20c662645b2d0cb1323ea7723b301deb50ec45296efe7f347aa4e3175747e691b68a7cfcb9e88a96a552a2d355a9c6ec1","ssdeep":"","tlshash":"85d0a792679adc594e5650b996664284bca82d1d2015510ada46b0045dbc5d8d1c53c7","first_seen":"2024-06-29T19:14:32Z","last_seen":"2026-04-03T18:43:45.459059Z","times_seen":7567,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-23","alert":"Sinkholed","trigger":"iw63v.crqeraf.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pic.wdsrie.cn/upload_01/upload/20250618/2025061818090282319.png","fqdn":"pic.wdsrie.cn","domain":"wdsrie.cn","tld":"cn"},"ip":{"addr":"43.152.140.79","port":443,"asn":139341,"as":"ACE","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://iw63v.crqeraf.xyz/archives/65129/","date":"2025-12-23T14:29:56.790Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.wdsrie.cn","organization":""},"issuer":{"commonName":"ZeroSSL ECC Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Sat, 20 Dec 2025 00:00:00 GMT","end":"Fri, 20 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E9:73:86:E2:44:76:13:6D:6B:AE:EE:E0:BA:B0:C0:68:B0:97:37:B8","sha256":"B9:DF:B5:64:69:80:D3:48:0B:F1:C2:39:96:52:89:9A:DE:23:24:F8:50:8B:E3:B3:38:A6:99:51:B3:9A:55:5E"}}},"request":{"raw":"GET /upload_01/upload/20250618/2025061818090282319.png HTTP/1.1\r\nHost: pic.wdsrie.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://iw63v.crqeraf.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Wed, 18 Jun 2025 10:09:49 GMT\r\nEtag: \"4b0c1bd0479d0f0b0a1af57c3e2f81d3\"\r\nContent-Type: binary/octet-stream\r\nDate: Fri, 25 Jul 2025 18:11:23 GMT\r\nx-amz-server-side-encryption: AES256\r\nServer: nginx\r\nX-Cache: Hit from cloudfront\r\nX-Amz-Cf-Pop: ARN53-P2\r\nAge: 62024\r\nContent-Length: 368\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 5918685933062802912\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\nAccess-Control-Allow-Origin: *\r\nCache-Control: max-age=864000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":368,"size_decoded":0,"mime_type":"binary/octet-stream","magic":"data","md5":"4b0c1bd0479d0f0b0a1af57c3e2f81d3","sha1":"466447637657f76654c79e940699a192630650de","sha256":"88952010850978ce38ae0b4125dac98cd34cc23960ff9a0d7a201aecb7baebb1","sha512":"f38460ec002c1644e0017a46fc75329609c117f719e21a176738125654744addecbdd3dcc7ae529e70501b1ccdb2b8aedb7228eed2ebec7d2af5f5fbb994fa25","ssdeep":"","tlshash":"a8e0c095ebf91ba2600ea03ed408c5114b5535864779e63d8110dae80f2e5b4f7cddbf","first_seen":"2025-06-18T21:56:52.224212Z","last_seen":"2026-04-03T18:43:45.421111Z","times_seen":7474,"resource_available":false,"data":null}},"time_used":184,"timings":{"blocked":175,"dns":0,"connect":0,"send":0,"wait":8,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pic.wdsrie.cn/upload_01/upload/20240627/2024062717534272924.png","fqdn":"pic.wdsrie.cn","domain":"wdsrie.cn","tld":"cn"},"ip":{"addr":"43.152.140.79","port":443,"asn":139341,"as":"ACE","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://iw63v.crqeraf.xyz/archives/65129/","date":"2025-12-23T14:29:56.910Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.wdsrie.cn","organization":""},"issuer":{"commonName":"ZeroSSL ECC Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Sat, 20 Dec 2025 00:00:00 GMT","end":"Fri, 20 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E9:73:86:E2:44:76:13:6D:6B:AE:EE:E0:BA:B0:C0:68:B0:97:37:B8","sha256":"B9:DF:B5:64:69:80:D3:48:0B:F1:C2:39:96:52:89:9A:DE:23:24:F8:50:8B:E3:B3:38:A6:99:51:B3:9A:55:5E"}}},"request":{"raw":"GET /upload_01/upload/20240627/2024062717534272924.png HTTP/1.1\r\nHost: pic.wdsrie.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://iw63v.crqeraf.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Thu, 27 Jun 2024 09:53:49 GMT\r\nEtag: \"44c5b96f0522ae34054b70f411024521\"\r\nContent-Type: binary/octet-stream\r\nDate: Sat, 26 Jul 2025 11:18:57 GMT\r\nx-amz-server-side-encryption: AES256\r\nServer: nginx\r\nX-Cache: Hit from cloudfront\r\nX-Amz-Cf-Pop: ARN53-P2\r\nAge: 370\r\nContent-Length: 688\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 14450859391001997093\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\nAccess-Control-Allow-Origin: *\r\nCache-Control: max-age=864000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":688,"size_decoded":0,"mime_type":"binary/octet-stream","magic":"data","md5":"44c5b96f0522ae34054b70f411024521","sha1":"29833b39fc75e9939cdec79376b528c5598bd2b6","sha256":"97684d090ef70d1751841fed315697e7a0774b9845d03f5586703f4a08c79d8b","sha512":"ebca973fb25070d54c3b0cd01a35c2912a9f00ce5ce712e1949ebef54e9b2a944eadb82a82192a9965493dd881e7d0c265b496fb924f21d6b4dd4c4ae5ca48e5","ssdeep":"","tlshash":"be014466372e80e6150d59206e50cd3738b8a5647bc42b56e8ce52a346d60ab22058de","first_seen":"2024-06-29T19:14:32Z","last_seen":"2026-04-03T18:43:45.365922Z","times_seen":7787,"resource_available":false,"data":null}},"time_used":180,"timings":{"blocked":155,"dns":0,"connect":0,"send":0,"wait":22,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pic.wdsrie.cn/upload_01/upload/20250828/2025082822532994385.jpeg","fqdn":"pic.wdsrie.cn","domain":"wdsrie.cn","tld":"cn"},"ip":{"addr":"43.152.140.79","port":443,"asn":139341,"as":"ACE","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://iw63v.crqeraf.xyz/archives/65129/","date":"2025-12-23T14:29:57.541Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.wdsrie.cn","organization":""},"issuer":{"commonName":"ZeroSSL ECC Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Sat, 20 Dec 2025 00:00:00 GMT","end":"Fri, 20 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E9:73:86:E2:44:76:13:6D:6B:AE:EE:E0:BA:B0:C0:68:B0:97:37:B8","sha256":"B9:DF:B5:64:69:80:D3:48:0B:F1:C2:39:96:52:89:9A:DE:23:24:F8:50:8B:E3:B3:38:A6:99:51:B3:9A:55:5E"}}},"request":{"raw":"GET /upload_01/upload/20250828/2025082822532994385.jpeg HTTP/1.1\r\nHost: pic.wdsrie.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://iw63v.crqeraf.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Thu, 28 Aug 2025 14:58:44 GMT\r\nEtag: \"15b362502d95a0811b7fa5c346315085\"\r\nContent-Type: binary/octet-stream\r\nDate: Thu, 09 Oct 2025 19:02:44 GMT\r\nx-amz-server-side-encryption: AES256\r\nServer: nginx\r\nX-Cache: Hit from cloudfront\r\nX-Amz-Cf-Pop: ARN53-P2\r\nAge: 26979\r\nContent-Length: 9632\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 16938952442368722727\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\nAccess-Control-Allow-Origin: *\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":9632,"size_decoded":0,"mime_type":"binary/octet-stream","magic":"data","md5":"15b362502d95a0811b7fa5c346315085","sha1":"0612bffcdc63b6e76edf787caead855c781bff93","sha256":"a99da0266a1667e96f7abc375a23eb826013bda0af251e74c117886c1eb16d64","sha512":"dd8fddefdf4c4d3bcdd5bb7fa1415a8b12c780d66f21186ef2bbbb0d3f6c08da40a49e6142df03d03d2921a0cebdc1c635410a89c899f7ee2a0aea7a96d0b858","ssdeep":"192:Tk/kcWgcaMCZ4Zv/waDZTsHuXc6hcG5HYG9jJH5Ua/YI3jkT0y4b:TehcNL3waDaHuM6hcmRoa/YI360H","tlshash":"e412c0a29adfd62ccfc2fc3e1869484145e44edb471bf77e40622a1440a759771207f9","first_seen":"2025-08-29T10:40:28.97642Z","last_seen":"2026-02-27T14:40:59.850912Z","times_seen":6418,"resource_available":false,"data":null}},"time_used":973,"timings":{"blocked":964,"dns":0,"connect":0,"send":0,"wait":8,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"iw63v.crqeraf.xyz/static/ai/js/payModal.js?v=20251130","fqdn":"iw63v.crqeraf.xyz","domain":"crqeraf.xyz","tld":"xyz"},"ip":{"addr":"154.207.127.39","port":443,"asn":0,"as":"","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://iw63v.crqeraf.xyz/archives/65129/","date":"2025-12-23T14:29:56.080Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"crqeraf.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 12 Dec 2025 08:17:25 GMT","end":"Thu, 12 Mar 2026 09:15:12 GMT"},"fingerprint":{"sha1":"9A:B6:D6:FC:9F:B5:E4:7C:4E:60:81:74:C5:1D:1F:16:43:65:9B:C0","sha256":"6B:D5:92:C2:2E:E8:B1:3D:EE:9E:2C:51:0B:D3:32:29:71:17:1E:3D:93:07:59:A9:C9:59:7C:A8:D8:9B:2B:8C"}}},"request":{"raw":"GET /static/ai/js/payModal.js?v=20251130 HTTP/1.1\r\nHost: iw63v.crqeraf.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://iw63v.crqeraf.xyz/archives/65129/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 23 Dec 2025 14:29:55 GMT\r\ncontent-type: application/javascript\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\nlast-modified: Thu, 20 Nov 2025 11:34:23 GMT\r\nvary: Accept-Encoding\r\netag: W/\"691efcbf-1011\"\r\nexpires: Tue, 30 Dec 2025 07:16:36 GMT\r\ncache-control: public, max-age=604800, immutable\r\ncontent-encoding: gzip\r\nage: 25998\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GHYC0UU4xkzIVqrnK5gmN6QwJvVycf2d%2FJiHyktUbDT4ml%2BXFii2K%2FY6Jj6de2KccddutjruwozqqYJ1jBwC9LlVf6fZn4VDul0%2Fv8p4Iw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b288dd0ab6956b4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4113,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"8a9718ed12bdaad60e78bbb58c5bd07c","sha1":"97dbfe61b3e7157fe88d72556c85cba090bc1486","sha256":"a9596cf162a66cf1001614449604205189e284019ed8a180427068763b94434a","sha512":"7984a59a65afde7f6831385739be9d1ec96e8e0489678d15585ad4dc84637c1d1acaeb18c622f464d49ba34b5f23769b4cd66cb3242408335d09e50d54e952a6","ssdeep":"48:bvL/9rWWptWfCBkIy3o3yx8ctO4yQJEvUjsgeh1kDsGZ1v:bj9WEtWfaU4iMgE8k7kDdv","tlshash":"9481de6488f142f70ab3d0d20f5b26177f90f027ea4e4a48395e6bf04f9ec96b683585","first_seen":"2025-11-21T00:42:42.291722Z","last_seen":"2026-04-03T18:41:28.51402Z","times_seen":7102,"resource_available":true,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-23","alert":"Sinkholed","trigger":"iw63v.crqeraf.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pic.wdsrie.cn/upload_01/upload/20250124/2025012420393237375.png","fqdn":"pic.wdsrie.cn","domain":"wdsrie.cn","tld":"cn"},"ip":{"addr":"43.152.140.79","port":443,"asn":139341,"as":"ACE","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://iw63v.crqeraf.xyz/archives/65129/","date":"2025-12-23T14:29:56.903Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.wdsrie.cn","organization":""},"issuer":{"commonName":"ZeroSSL ECC Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Sat, 20 Dec 2025 00:00:00 GMT","end":"Fri, 20 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E9:73:86:E2:44:76:13:6D:6B:AE:EE:E0:BA:B0:C0:68:B0:97:37:B8","sha256":"B9:DF:B5:64:69:80:D3:48:0B:F1:C2:39:96:52:89:9A:DE:23:24:F8:50:8B:E3:B3:38:A6:99:51:B3:9A:55:5E"}}},"request":{"raw":"GET /upload_01/upload/20250124/2025012420393237375.png HTTP/1.1\r\nHost: pic.wdsrie.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://iw63v.crqeraf.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Fri, 24 Jan 2025 12:39:49 GMT\r\nEtag: \"5145844745c056abbc7b2968f0909393\"\r\nContent-Type: binary/octet-stream\r\nDate: Sat, 26 Jul 2025 11:18:57 GMT\r\nx-amz-server-side-encryption: AES256\r\nServer: nginx\r\nX-Cache: Hit from cloudfront\r\nX-Amz-Cf-Pop: ARN53-P2\r\nAge: 370\r\nContent-Length: 1856\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 17957462524627370532\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\nAccess-Control-Allow-Origin: *\r\nCache-Control: max-age=864000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1856,"size_decoded":0,"mime_type":"binary/octet-stream","magic":"data","md5":"5145844745c056abbc7b2968f0909393","sha1":"fb32f5f2df5a6e03d6f680ac45cad902d8c55abb","sha256":"994f5b2e4e0b6b9da2b7824e793f184d4af060f9301e9763ba976e32fef84f2e","sha512":"f61f30e095484b457091b32380d650f2d6b09be3d9caeac0b1655db19ed3f053b2d04a666b5ba993b28169c3ed671d08110b9faa53886dbb1a25cdb49c7cbabd","ssdeep":"","tlshash":"4c31f9c835335e84ae49b3e87f1c68671f4353e5455db5980e2352c7e264cab82a490c","first_seen":"2025-02-08T04:21:42.862699Z","last_seen":"2026-04-03T18:43:45.392003Z","times_seen":7494,"resource_available":false,"data":null}},"time_used":165,"timings":{"blocked":156,"dns":0,"connect":0,"send":0,"wait":8,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pic.wdsrie.cn/upload_01/upload/20250618/2025061815125644204.png","fqdn":"pic.wdsrie.cn","domain":"wdsrie.cn","tld":"cn"},"ip":{"addr":"43.152.140.79","port":443,"asn":139341,"as":"ACE","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://iw63v.crqeraf.xyz/archives/65129/","date":"2025-12-23T14:29:56.983Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.wdsrie.cn","organization":""},"issuer":{"commonName":"ZeroSSL ECC Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Sat, 20 Dec 2025 00:00:00 GMT","end":"Fri, 20 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E9:73:86:E2:44:76:13:6D:6B:AE:EE:E0:BA:B0:C0:68:B0:97:37:B8","sha256":"B9:DF:B5:64:69:80:D3:48:0B:F1:C2:39:96:52:89:9A:DE:23:24:F8:50:8B:E3:B3:38:A6:99:51:B3:9A:55:5E"}}},"request":{"raw":"GET /upload_01/upload/20250618/2025061815125644204.png HTTP/1.1\r\nHost: pic.wdsrie.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://iw63v.crqeraf.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Wed, 18 Jun 2025 07:13:19 GMT\r\nEtag: \"5105f9f32adc4bdadd09880ab29e288e\"\r\nContent-Type: binary/octet-stream\r\nDate: Fri, 25 Jul 2025 12:13:00 GMT\r\nx-amz-server-side-encryption: AES256\r\nServer: nginx\r\nX-Cache: Hit from cloudfront\r\nX-Amz-Cf-Pop: ARN53-P2\r\nAge: 83526\r\nContent-Length: 1248\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 8943871618759111248\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\nAccess-Control-Allow-Origin: *\r\nCache-Control: max-age=864000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1248,"size_decoded":0,"mime_type":"binary/octet-stream","magic":"data","md5":"5105f9f32adc4bdadd09880ab29e288e","sha1":"0aea751478496c4ddec8d4aab7a63a7c60a1311e","sha256":"146e98c05e4bb83b194fee49a31f0dfc4101b61b07d18252345d24deffc856e5","sha512":"e7c69133ea7a00d8d827cfe11fb8f9b1d1aaa3a7d12b161843e701bf0a08645a447bd128efdf64d5999edb85b07b9ad2619eac24d93cc137b5eddec88d679657","ssdeep":"","tlshash":"a121eaf31b135d6914843234af4b9be4d1800d786055ea7425ceb19c6aa454bf1757d0","first_seen":"2025-06-18T21:56:52.306082Z","last_seen":"2026-04-03T18:43:45.39488Z","times_seen":7474,"resource_available":false,"data":null}},"time_used":121,"timings":{"blocked":113,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pic.wdsrie.cn/upload_01/upload/20251221/2025122110401117713.gif","fqdn":"pic.wdsrie.cn","domain":"wdsrie.cn","tld":"cn"},"ip":{"addr":"43.152.140.79","port":443,"asn":139341,"as":"ACE","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://iw63v.crqeraf.xyz/archives/65129/","date":"2025-12-23T14:29:57.719Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.wdsrie.cn","organization":""},"issuer":{"commonName":"ZeroSSL ECC Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Sat, 20 Dec 2025 00:00:00 GMT","end":"Fri, 20 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E9:73:86:E2:44:76:13:6D:6B:AE:EE:E0:BA:B0:C0:68:B0:97:37:B8","sha256":"B9:DF:B5:64:69:80:D3:48:0B:F1:C2:39:96:52:89:9A:DE:23:24:F8:50:8B:E3:B3:38:A6:99:51:B3:9A:55:5E"}}},"request":{"raw":"GET /upload_01/upload/20251221/2025122110401117713.gif HTTP/1.1\r\nHost: pic.wdsrie.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://iw63v.crqeraf.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Sun, 21 Dec 2025 02:40:18 GMT\r\nEtag: \"afc12a7e540784fd83eff722f60eff1e\"\r\nContent-Type: binary/octet-stream\r\nDate: Sun, 21 Dec 2025 02:40:18 GMT\r\nx-amz-server-side-encryption: AES256\r\nServer: nginx\r\nX-Cache: Hit from cloudfront\r\nX-Amz-Cf-Pop: ARN53-P2\r\nAge: 199\r\nContent-Length: 137984\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 7031878960904604492\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\nAccess-Control-Allow-Origin: *\r\nCache-Control: max-age=864000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":137984,"size_decoded":0,"mime_type":"binary/octet-stream","magic":"DOS executable (COM), maybe with interrupt 22h, start instruction 0xb847b80e 22e91930","md5":"afc12a7e540784fd83eff722f60eff1e","sha1":"0c6bcfc8343321205adc035246788f84f66575ae","sha256":"acc073ac7fd249dac3671b24b1cade2f7d7317f90f23f9202c9c02ec4cee77d4","sha512":"1c4566342d1a3b62c5c773bc06229116f9a5b502849cb974204a18ab53cdf5bae7fb1346d3877537f7f306a08fd5e1fd2636871d21e48f2bfbd73041fca73776","ssdeep":"3072:rdyjFjqkY5cQywUObZhXP271gchbn6I++GN+ai/B+Xw6:Eeb5c7wVbO1j6J+ad++Xw6","tlshash":"05d31279f024d379cc41a6da3f1e937a58370f7a35988259ad1adbc3f40ac93c897906","first_seen":"2025-12-21T05:35:27.98134Z","last_seen":"2025-12-28T05:29:18.659029Z","times_seen":184,"resource_available":false,"data":null}},"time_used":841,"timings":{"blocked":827,"dns":0,"connect":0,"send":0,"wait":11,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pic.wdsrie.cn/upload_01/upload/20251215/2025121521155164129.gif","fqdn":"pic.wdsrie.cn","domain":"wdsrie.cn","tld":"cn"},"ip":{"addr":"43.152.140.79","port":443,"asn":139341,"as":"ACE","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://iw63v.crqeraf.xyz/archives/65129/","date":"2025-12-23T14:29:57.763Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.wdsrie.cn","organization":""},"issuer":{"commonName":"ZeroSSL ECC Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Sat, 20 Dec 2025 00:00:00 GMT","end":"Fri, 20 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E9:73:86:E2:44:76:13:6D:6B:AE:EE:E0:BA:B0:C0:68:B0:97:37:B8","sha256":"B9:DF:B5:64:69:80:D3:48:0B:F1:C2:39:96:52:89:9A:DE:23:24:F8:50:8B:E3:B3:38:A6:99:51:B3:9A:55:5E"}}},"request":{"raw":"GET /upload_01/upload/20251215/2025121521155164129.gif HTTP/1.1\r\nHost: pic.wdsrie.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://iw63v.crqeraf.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Mon, 15 Dec 2025 13:15:58 GMT\r\nEtag: \"62898e22f7359b3113f400c70eb4b563\"\r\nContent-Type: binary/octet-stream\r\nDate: Mon, 15 Dec 2025 13:16:22 GMT\r\nx-amz-server-side-encryption: AES256\r\nServer: nginx\r\nX-Cache: Miss from cloudfront\r\nX-Amz-Cf-Pop: ARN53-P2\r\nContent-Length: 361472\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 10439934402003932837\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\nAccess-Control-Allow-Origin: *\r\nCache-Control: max-age=864000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":361472,"size_decoded":0,"mime_type":"binary/octet-stream","magic":"data","md5":"62898e22f7359b3113f400c70eb4b563","sha1":"988a794525b6d2c6bbb21b12ae0388e9a21fe5f8","sha256":"c755a91fdee305d7c04e83a9b546e96483a956bab44da560c366295598f9f909","sha512":"d7d77a5ac0e9c4e97b8a9f11e39ded5c42f92c908dcd3f687fb965ed431357b0cb573ca6bd2818e36b5bfdce3eb17634a6e414c80ae289aa8d6633d1ad79b184","ssdeep":"6144:pGDCA/lImd5d/lljDhH30Dlo8BweKSNzsVAIvja9zywzTwox7XY6GM0dq0Oe4SkN:8B/lFd5d9Bt3Elo8BweVjk29uIx7XY6X","tlshash":"62742338d56cd6e7346ca95dcb9f1d4682ed208c346fe87d211e6e9743788c90aa07ec","first_seen":"2025-12-16T02:09:18.485235Z","last_seen":"2026-04-03T18:18:51.58551Z","times_seen":5003,"resource_available":false,"data":null}},"time_used":910,"timings":{"blocked":890,"dns":0,"connect":0,"send":0,"wait":8,"receive":12,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"iw63v.crqeraf.xyz/static/pc/editor/swiper-bundle.min.js?v=20251130","fqdn":"iw63v.crqeraf.xyz","domain":"crqeraf.xyz","tld":"xyz"},"ip":{"addr":"154.207.127.39","port":443,"asn":0,"as":"","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://iw63v.crqeraf.xyz/archives/65129/","date":"2025-12-23T14:29:55.946Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"crqeraf.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 12 Dec 2025 08:17:25 GMT","end":"Thu, 12 Mar 2026 09:15:12 GMT"},"fingerprint":{"sha1":"9A:B6:D6:FC:9F:B5:E4:7C:4E:60:81:74:C5:1D:1F:16:43:65:9B:C0","sha256":"6B:D5:92:C2:2E:E8:B1:3D:EE:9E:2C:51:0B:D3:32:29:71:17:1E:3D:93:07:59:A9:C9:59:7C:A8:D8:9B:2B:8C"}}},"request":{"raw":"GET /static/pc/editor/swiper-bundle.min.js?v=20251130 HTTP/1.1\r\nHost: iw63v.crqeraf.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://iw63v.crqeraf.xyz/archives/65129/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 23 Dec 2025 14:29:55 GMT\r\ncontent-type: application/javascript\r\npriority: u=2,i=?0\r\nserver: cloudflare\r\nlast-modified: Sat, 13 Sep 2025 03:47:27 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68c4e94f-2312c\"\r\nexpires: Tue, 30 Dec 2025 07:16:35 GMT\r\ncache-control: public, max-age=604800, immutable\r\ncontent-encoding: gzip\r\nage: 26000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7sRJdSfuEf4J8bieK%2FFp%2FTIocA1lbrYoEQY8x2sckRosXXUMXYl1YeFSMIVuULDhB9dBARNfhByTYjt2FRswTwiMb5x3hVEb%2FVpIQZ1heg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b288dd03af256b4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":143660,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65280)","md5":"0b1b795755935bcc1326f7ac6279b854","sha1":"d879e64b5b1506086167168123e198e1efdc2db6","sha256":"18fe4b97f6b7e0ff29d983659ceaba26f563439357426b4238522cf55dee34b9","sha512":"c2a772871658efae03bf5bba5a91844e5d05cce23a6a6af9d8f182860e2e9d99a0abe9a2f69c3ff8ed33979d7817164b79b85a7a2c3d9cf061e7a99dcda2e68a","ssdeep":"3072:jJLCyDdkEUYnafpoy9v8cIWyUaV4y+oGeJM91EfrNK/YvD:jJLC4dkEUYnafpl9v8cIWybV4y+oGMM4","tlshash":"73e3f8896360b1a552e3268b93a9c651e3b51400b409c4e871bd0c9b6d7ed9813ffffe","first_seen":"2023-08-06T14:43:39Z","last_seen":"2026-04-03T18:43:45.456183Z","times_seen":7254,"resource_available":true,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-23","alert":"Sinkholed","trigger":"iw63v.crqeraf.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pic.wdsrie.cn/upload/upload/20240510/2024051000170163600.png","fqdn":"pic.wdsrie.cn","domain":"wdsrie.cn","tld":"cn"},"ip":{"addr":"43.152.140.79","port":443,"asn":139341,"as":"ACE","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://iw63v.crqeraf.xyz/archives/65129/","date":"2025-12-23T14:29:56.822Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.wdsrie.cn","organization":""},"issuer":{"commonName":"ZeroSSL ECC Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Sat, 20 Dec 2025 00:00:00 GMT","end":"Fri, 20 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E9:73:86:E2:44:76:13:6D:6B:AE:EE:E0:BA:B0:C0:68:B0:97:37:B8","sha256":"B9:DF:B5:64:69:80:D3:48:0B:F1:C2:39:96:52:89:9A:DE:23:24:F8:50:8B:E3:B3:38:A6:99:51:B3:9A:55:5E"}}},"request":{"raw":"GET /upload/upload/20240510/2024051000170163600.png HTTP/1.1\r\nHost: pic.wdsrie.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://iw63v.crqeraf.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Thu, 09 May 2024 16:17:07 GMT\r\nEtag: \"351841a28c41d32befc77463bfb396ea\"\r\nContent-Type: binary/octet-stream\r\nDate: Fri, 10 Oct 2025 01:25:36 GMT\r\nx-amz-server-side-encryption: AES256\r\nServer: nginx\r\nX-Cache: Hit from cloudfront\r\nX-Amz-Cf-Pop: ARN53-P2\r\nAge: 3900\r\nContent-Length: 4064\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 16122610337956759630\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\nAccess-Control-Allow-Origin: *\r\nCache-Control: max-age=864000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4064,"size_decoded":0,"mime_type":"binary/octet-stream","magic":"data","md5":"351841a28c41d32befc77463bfb396ea","sha1":"0c5ef7d96c16aa212947227ab6b9bcdba07ad6c7","sha256":"c43d8a223a2d16b39abee9310c136bc0bd32464d7b6b79bfb4fe3a10cbdab9a3","sha512":"6924992e50b757de32846d2fa2696e720e0545cf8f8766d4aa22eacdbfcd0fb5ef1ee17b63dabfcff436f410c0ace7cadcc7e0dc1862f4b73cc6db1d43b4d90a","ssdeep":"","tlshash":"da815c57376184cd8abbd021b730234f350cb26e57e831578cc9c396da502ee8c569fa","first_seen":"2024-05-10T06:44:59Z","last_seen":"2026-04-03T18:43:45.399697Z","times_seen":7793,"resource_available":false,"data":null}},"time_used":190,"timings":{"blocked":181,"dns":0,"connect":0,"send":0,"wait":8,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pic.wdsrie.cn/upload/upload/20240510/2024051000221952274.png","fqdn":"pic.wdsrie.cn","domain":"wdsrie.cn","tld":"cn"},"ip":{"addr":"43.152.140.79","port":443,"asn":139341,"as":"ACE","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://iw63v.crqeraf.xyz/archives/65129/","date":"2025-12-23T14:29:56.980Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.wdsrie.cn","organization":""},"issuer":{"commonName":"ZeroSSL ECC Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Sat, 20 Dec 2025 00:00:00 GMT","end":"Fri, 20 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E9:73:86:E2:44:76:13:6D:6B:AE:EE:E0:BA:B0:C0:68:B0:97:37:B8","sha256":"B9:DF:B5:64:69:80:D3:48:0B:F1:C2:39:96:52:89:9A:DE:23:24:F8:50:8B:E3:B3:38:A6:99:51:B3:9A:55:5E"}}},"request":{"raw":"GET /upload/upload/20240510/2024051000221952274.png HTTP/1.1\r\nHost: pic.wdsrie.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://iw63v.crqeraf.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Thu, 09 May 2024 16:22:32 GMT\r\nEtag: \"351841a28c41d32befc77463bfb396ea\"\r\nContent-Type: binary/octet-stream\r\nDate: Fri, 10 Oct 2025 01:02:05 GMT\r\nx-amz-server-side-encryption: AES256\r\nServer: nginx\r\nX-Cache: Hit from cloudfront\r\nX-Amz-Cf-Pop: ARN53-P2\r\nAge: 5313\r\nContent-Length: 4064\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 7042039130876594032\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\nAccess-Control-Allow-Origin: *\r\nCache-Control: max-age=864000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4064,"size_decoded":0,"mime_type":"binary/octet-stream","magic":"data","md5":"351841a28c41d32befc77463bfb396ea","sha1":"0c5ef7d96c16aa212947227ab6b9bcdba07ad6c7","sha256":"c43d8a223a2d16b39abee9310c136bc0bd32464d7b6b79bfb4fe3a10cbdab9a3","sha512":"6924992e50b757de32846d2fa2696e720e0545cf8f8766d4aa22eacdbfcd0fb5ef1ee17b63dabfcff436f410c0ace7cadcc7e0dc1862f4b73cc6db1d43b4d90a","ssdeep":"","tlshash":"da815c57376184cd8abbd021b730234f350cb26e57e831578cc9c396da502ee8c569fa","first_seen":"2024-05-10T06:44:59Z","last_seen":"2026-04-03T18:43:45.399697Z","times_seen":7793,"resource_available":false,"data":null}},"time_used":137,"timings":{"blocked":114,"dns":0,"connect":0,"send":0,"wait":22,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pic.wdsrie.cn/upload_01/upload/20250408/2025040815472468640.jpg","fqdn":"pic.wdsrie.cn","domain":"wdsrie.cn","tld":"cn"},"ip":{"addr":"43.152.140.79","port":443,"asn":139341,"as":"ACE","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://iw63v.crqeraf.xyz/archives/65129/","date":"2025-12-23T14:29:57.125Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.wdsrie.cn","organization":""},"issuer":{"commonName":"ZeroSSL ECC Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Sat, 20 Dec 2025 00:00:00 GMT","end":"Fri, 20 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E9:73:86:E2:44:76:13:6D:6B:AE:EE:E0:BA:B0:C0:68:B0:97:37:B8","sha256":"B9:DF:B5:64:69:80:D3:48:0B:F1:C2:39:96:52:89:9A:DE:23:24:F8:50:8B:E3:B3:38:A6:99:51:B3:9A:55:5E"}}},"request":{"raw":"GET /upload_01/upload/20250408/2025040815472468640.jpg HTTP/1.1\r\nHost: pic.wdsrie.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://iw63v.crqeraf.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Type: binary/octet-stream\r\nDate: Tue, 23 Dec 2025 14:29:58 GMT\r\nETag: \"3b42913f964c93a9e04e0e3071ae75e3\"\r\nx-amz-server-side-encryption: AES256\r\nServer: nginx\r\nX-Cache: Miss from cloudfront\r\nVia: 1.1 36f6f4783c54484f0285e84da74ad1c6.cloudfront.net (CloudFront)\r\nX-Amz-Cf-Pop: ARN53-P2\r\nLast-Modified: Tue, 08 Apr 2025 09:23:52 GMT\r\nContent-Length: 165328\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 4123590844303576736\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Miss\r\nAccess-Control-Allow-Origin: *\r\nCache-Control: max-age=864000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":165328,"size_decoded":0,"mime_type":"binary/octet-stream","magic":"data","md5":"3b42913f964c93a9e04e0e3071ae75e3","sha1":"6bc61d6f13cbaf5c7230c36a565b2fd5a9baba6f","sha256":"adaf3766f7634193f90fc8ff3a4ef6c66868f6413824d2808519410c40dcfba2","sha512":"cb4f48359ec8465afec07628581e145eb8be658894b6643226309f66566ad22a8734879d9244df58a5aa2894cec11cf62715bb2ab5e10d23e7a8824c97382f29","ssdeep":"3072:La60UTdUMLBRpwq64vuMep+EQKUG6VmfoYIPOUMi0ZU5rXfAe:La6ppUMPp52Mep+xBC3UJ0Z4rXfP","tlshash":"06f31238ff0249f94c805971a33ea413ebb562dbd80568ca5d68e3edf6a3707ac1e451","first_seen":"2025-12-23T14:30:42.30463Z","last_seen":"2025-12-23T14:30:42.30463Z","times_seen":1,"resource_available":false,"data":null}},"time_used":862,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":540,"receive":322,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pic.wdsrie.cn/upload_01/upload/20250408/2025040815472878661.jpg","fqdn":"pic.wdsrie.cn","domain":"wdsrie.cn","tld":"cn"},"ip":{"addr":"43.152.140.79","port":443,"asn":139341,"as":"ACE","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://iw63v.crqeraf.xyz/archives/65129/","date":"2025-12-23T14:29:57.144Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.wdsrie.cn","organization":""},"issuer":{"commonName":"ZeroSSL ECC Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Sat, 20 Dec 2025 00:00:00 GMT","end":"Fri, 20 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E9:73:86:E2:44:76:13:6D:6B:AE:EE:E0:BA:B0:C0:68:B0:97:37:B8","sha256":"B9:DF:B5:64:69:80:D3:48:0B:F1:C2:39:96:52:89:9A:DE:23:24:F8:50:8B:E3:B3:38:A6:99:51:B3:9A:55:5E"}}},"request":{"raw":"GET /upload_01/upload/20250408/2025040815472878661.jpg HTTP/1.1\r\nHost: pic.wdsrie.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://iw63v.crqeraf.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Type: binary/octet-stream\r\nDate: Tue, 23 Dec 2025 14:29:58 GMT\r\nETag: \"a969c651936c1c2c67fe0a8c45cde418\"\r\nx-amz-server-side-encryption: AES256\r\nServer: nginx\r\nX-Cache: Miss from cloudfront\r\nVia: 1.1 a0898b0583a86da725106616afdbac76.cloudfront.net (CloudFront)\r\nX-Amz-Cf-Pop: ARN53-P2\r\nLast-Modified: Tue, 08 Apr 2025 09:23:52 GMT\r\nContent-Length: 194912\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 7120786712660238720\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Miss\r\nAccess-Control-Allow-Origin: *\r\nCache-Control: max-age=864000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":194912,"size_decoded":0,"mime_type":"binary/octet-stream","magic":"data","md5":"a969c651936c1c2c67fe0a8c45cde418","sha1":"32f26024a2048e804d3c296172c4ada80289bfd8","sha256":"1ee94dae6c6609a4950cbb2f84cad2f994a0d320bc51bbe1dbd5704932c007e8","sha512":"d77e23b676ce46f7e98dc7c89bc88426a2f2c0ac4c3d3aaddc32d87a5957645656aadd02029de228fd451738bad3272831d0395b0e9dcb6e02187251daa12c51","ssdeep":"3072:DpqtHYyeBfZgJiCxGAOSiL/6Z+1DauNeHI05vGBjlBrYrdgyJEMdl+Nj4MdkIsnB:Dn/BfbZDDa5HHullBrYRgy2UY14NIE","tlshash":"de14120ab8e04930e6d37e6bee4f9fdb38a0d37466050a9173c6f4150ec6e5d8653356","first_seen":"2025-12-23T14:30:42.30692Z","last_seen":"2025-12-23T14:30:42.30692Z","times_seen":1,"resource_available":false,"data":null}},"time_used":975,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":517,"receive":458,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pic.wdsrie.cn/upload_01/upload/20250403/2025040323004368078.png","fqdn":"pic.wdsrie.cn","domain":"wdsrie.cn","tld":"cn"},"ip":{"addr":"43.152.140.79","port":443,"asn":139341,"as":"ACE","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://iw63v.crqeraf.xyz/archives/65129/","date":"2025-12-23T14:29:57.380Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.wdsrie.cn","organization":""},"issuer":{"commonName":"ZeroSSL ECC Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Sat, 20 Dec 2025 00:00:00 GMT","end":"Fri, 20 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E9:73:86:E2:44:76:13:6D:6B:AE:EE:E0:BA:B0:C0:68:B0:97:37:B8","sha256":"B9:DF:B5:64:69:80:D3:48:0B:F1:C2:39:96:52:89:9A:DE:23:24:F8:50:8B:E3:B3:38:A6:99:51:B3:9A:55:5E"}}},"request":{"raw":"GET /upload_01/upload/20250403/2025040323004368078.png HTTP/1.1\r\nHost: pic.wdsrie.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://iw63v.crqeraf.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Thu, 03 Apr 2025 15:47:42 GMT\r\nEtag: \"bbb39590efefd89e49b90820ec69f404\"\r\nContent-Type: binary/octet-stream\r\nDate: Sat, 26 Jul 2025 11:18:59 GMT\r\nx-amz-server-side-encryption: AES256\r\nServer: nginx\r\nX-Cache: Hit from cloudfront\r\nX-Amz-Cf-Pop: ARN53-P2\r\nAge: 292\r\nContent-Length: 195840\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 1730487801980598663\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\nAccess-Control-Allow-Origin: *\r\nCache-Control: max-age=864000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":195840,"size_decoded":0,"mime_type":"binary/octet-stream","magic":"data","md5":"bbb39590efefd89e49b90820ec69f404","sha1":"aa306e9e5da413f5337eec4670051c2bb1e28f83","sha256":"c8b70190af6efee4b3cf85a4643fae3f42525226a134deab595a6928bfc048f5","sha512":"d9b05a7c05837929a14237075d6c0819f9f023de02158f2776dcad33ba9e7a5fd8e8e1db4b7d8815570804392a7fe29a0836b5e7dd80a1a816a535e2d72059cc","ssdeep":"3072:0XmioHMg4QYby9Dnrbc15nphbQvDbxDe7TMHEr76v7LsOHS1SCArelVXZqKaQ:GDgbky9Lrbc1Bpuv/xD0MHErSLs51SCN","tlshash":"f51422fc618fdbf31d85724d842082d931438196d6b6ebeef21ad97985810190feead3","first_seen":"2025-04-04T11:03:24.863522Z","last_seen":"2026-02-03T00:55:20.246816Z","times_seen":4128,"resource_available":false,"data":null}},"time_used":1125,"timings":{"blocked":1102,"dns":0,"connect":0,"send":0,"wait":19,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pic.wdsrie.cn/upload_01/upload/20251223/2025122320471174279.gif","fqdn":"pic.wdsrie.cn","domain":"wdsrie.cn","tld":"cn"},"ip":{"addr":"43.152.140.79","port":443,"asn":139341,"as":"ACE","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://iw63v.crqeraf.xyz/archives/65129/","date":"2025-12-23T14:29:58.011Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.wdsrie.cn","organization":""},"issuer":{"commonName":"ZeroSSL ECC Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Sat, 20 Dec 2025 00:00:00 GMT","end":"Fri, 20 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E9:73:86:E2:44:76:13:6D:6B:AE:EE:E0:BA:B0:C0:68:B0:97:37:B8","sha256":"B9:DF:B5:64:69:80:D3:48:0B:F1:C2:39:96:52:89:9A:DE:23:24:F8:50:8B:E3:B3:38:A6:99:51:B3:9A:55:5E"}}},"request":{"raw":"GET /upload_01/upload/20251223/2025122320471174279.gif HTTP/1.1\r\nHost: pic.wdsrie.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://iw63v.crqeraf.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Tue, 23 Dec 2025 12:47:18 GMT\r\nEtag: \"283a7258f252e0de1adfcbe68b731449\"\r\nContent-Type: binary/octet-stream\r\nDate: Tue, 23 Dec 2025 12:47:26 GMT\r\nx-amz-server-side-encryption: AES256\r\nServer: nginx\r\nX-Cache: Hit from cloudfront\r\nX-Amz-Cf-Pop: ARN53-P2\r\nAge: 211\r\nContent-Length: 104976\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 16819075713186385124\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\nAccess-Control-Allow-Origin: *\r\nCache-Control: max-age=864000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":104976,"size_decoded":0,"mime_type":"binary/octet-stream","magic":"data","md5":"283a7258f252e0de1adfcbe68b731449","sha1":"d66034093ea1bc029b52bed60aa9c2961548d30d","sha256":"56b4f373a033eea1d47713193b4d93b595fec777714ffa6f6307e16447e47eea","sha512":"ebb9e2c423c3b8ae35257a8c006e4f770a10cacf5e8600106643d052be5397ccd00cb714d251cea41a364eac3c10cb793b7fdbf6d5e993500724a873ad74940d","ssdeep":"1536:Fc32C/EtZtpiDHEngsCWZYfEYBcaSRWvWkkkyLLFy6kGt68K0GDNV0DwDqbJmq:FcTx8gsCWZYfhXOkkPLQlBl0amwD4","tlshash":"d7a312cc9350f7c59e8c08e0860f6866f3296a15dbfb25f2554e50d0399e4be967f02e","first_seen":"2025-12-23T12:51:39.191374Z","last_seen":"2025-12-28T05:31:57.387305Z","times_seen":139,"resource_available":false,"data":null}},"time_used":815,"timings":{"blocked":760,"dns":0,"connect":0,"send":0,"wait":51,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pic.wdsrie.cn/upload_01/upload/20250828/2025082822512492159.jpeg","fqdn":"pic.wdsrie.cn","domain":"wdsrie.cn","tld":"cn"},"ip":{"addr":"43.152.140.79","port":443,"asn":139341,"as":"ACE","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://iw63v.crqeraf.xyz/archives/65129/","date":"2025-12-23T14:29:57.317Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.wdsrie.cn","organization":""},"issuer":{"commonName":"ZeroSSL ECC Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Sat, 20 Dec 2025 00:00:00 GMT","end":"Fri, 20 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E9:73:86:E2:44:76:13:6D:6B:AE:EE:E0:BA:B0:C0:68:B0:97:37:B8","sha256":"B9:DF:B5:64:69:80:D3:48:0B:F1:C2:39:96:52:89:9A:DE:23:24:F8:50:8B:E3:B3:38:A6:99:51:B3:9A:55:5E"}}},"request":{"raw":"GET /upload_01/upload/20250828/2025082822512492159.jpeg HTTP/1.1\r\nHost: pic.wdsrie.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://iw63v.crqeraf.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Thu, 28 Aug 2025 14:58:44 GMT\r\nEtag: \"10bd5df2842008156779ae224b40b05b\"\r\nContent-Type: binary/octet-stream\r\nDate: Thu, 28 Aug 2025 14:58:46 GMT\r\nx-amz-server-side-encryption: AES256\r\nServer: nginx\r\nX-Cache: Hit from cloudfront\r\nX-Amz-Cf-Pop: ARN53-P2\r\nAge: 62\r\nContent-Length: 11712\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 3924364860356021476\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\nAccess-Control-Allow-Origin: *\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":11712,"size_decoded":0,"mime_type":"binary/octet-stream","magic":"data","md5":"10bd5df2842008156779ae224b40b05b","sha1":"67dd4657fedf7019ed574008ed511e16dbd8826f","sha256":"6fba622cc039be8684e21b04904bdc9722e2a1deb3e5831817e1dff4d760d010","sha512":"c0b6b7de20416a2aab6c2f093a8ca6f70e7f862d80a53271f6fd29523e374f8d919eb8c69cf0fd6b6960575f6d507a430facd5c603e1a3bbe3f4db8119e890c0","ssdeep":"192:qbhPWectB6Cby+ljBfpzQj6Hgq4aZkLplMUxt3iSiuScDKiQNwuCu5j2CUmD3E3p:ihPWeyFrljBRzQjbaaLpll+1uSc8NwuW","tlshash":"c032d0d061ea9d29cdde320a0b41339349616a3993bdd126c72a06f4969f5238c8567f","first_seen":"2025-01-04T08:16:14.752374Z","last_seen":"2026-01-19T03:45:18.456156Z","times_seen":3205,"resource_available":false,"data":null}},"time_used":1143,"timings":{"blocked":1129,"dns":0,"connect":0,"send":0,"wait":13,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pic.wdsrie.cn/upload_01/upload/20251209/2025120919034760109.gif","fqdn":"pic.wdsrie.cn","domain":"wdsrie.cn","tld":"cn"},"ip":{"addr":"43.152.140.79","port":443,"asn":139341,"as":"ACE","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://iw63v.crqeraf.xyz/archives/65129/","date":"2025-12-23T14:29:57.752Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.wdsrie.cn","organization":""},"issuer":{"commonName":"ZeroSSL ECC Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Sat, 20 Dec 2025 00:00:00 GMT","end":"Fri, 20 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E9:73:86:E2:44:76:13:6D:6B:AE:EE:E0:BA:B0:C0:68:B0:97:37:B8","sha256":"B9:DF:B5:64:69:80:D3:48:0B:F1:C2:39:96:52:89:9A:DE:23:24:F8:50:8B:E3:B3:38:A6:99:51:B3:9A:55:5E"}}},"request":{"raw":"GET /upload_01/upload/20251209/2025120919034760109.gif HTTP/1.1\r\nHost: pic.wdsrie.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://iw63v.crqeraf.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Tue, 09 Dec 2025 11:03:56 GMT\r\nEtag: \"44ee0dedaba674f2e8224d114f930031\"\r\nContent-Type: binary/octet-stream\r\nDate: Tue, 09 Dec 2025 11:03:56 GMT\r\nx-amz-server-side-encryption: AES256\r\nServer: nginx\r\nX-Cache: Miss from cloudfront\r\nX-Amz-Cf-Pop: ARN53-P2\r\nContent-Length: 452064\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 8922785844848818483\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\nAccess-Control-Allow-Origin: *\r\nCache-Control: max-age=864000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":452064,"size_decoded":0,"mime_type":"binary/octet-stream","magic":"data","md5":"44ee0dedaba674f2e8224d114f930031","sha1":"e43d409c918c946ea944c7773ea0192cac2501db","sha256":"1e9f808be6083c2d7aa8f206aef7a2e64bdcf1405cf1d7765a94574122aa6d91","sha512":"b1bc8545a1736b488ee0f12a7a5725b46e8b8a26b0bc434fc5e99eb4d33a92aef00c75ec4bb8752c83caea0dbb8b0ce6e52f83338c3a6b37bdb15dcb54e642f1","ssdeep":"6144:y8pcQZRzrI76LyS0lCsFVssH9zqpIIFTkKp9YO1PAADuYtP+yTfsqh8qQpXcS232:y/QZdrRt0tFVB0tTkAXj+y58vpXX3J","tlshash":"6aa42348d91872cbb22b7b114980ba745f4dcce9dc79b8e726c261e53f8090b83b9753","first_seen":"2025-12-10T02:37:04.509441Z","last_seen":"2026-02-04T07:06:51.297225Z","times_seen":2151,"resource_available":false,"data":null}},"time_used":866,"timings":{"blocked":841,"dns":0,"connect":0,"send":0,"wait":14,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"iw63v.crqeraf.xyz/static/pc/img/like.png","fqdn":"iw63v.crqeraf.xyz","domain":"crqeraf.xyz","tld":"xyz"},"ip":{"addr":"154.207.127.39","port":443,"asn":0,"as":"","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://iw63v.crqeraf.xyz/archives/65129/","date":"2025-12-23T14:29:56.050Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"crqeraf.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 12 Dec 2025 08:17:25 GMT","end":"Thu, 12 Mar 2026 09:15:12 GMT"},"fingerprint":{"sha1":"9A:B6:D6:FC:9F:B5:E4:7C:4E:60:81:74:C5:1D:1F:16:43:65:9B:C0","sha256":"6B:D5:92:C2:2E:E8:B1:3D:EE:9E:2C:51:0B:D3:32:29:71:17:1E:3D:93:07:59:A9:C9:59:7C:A8:D8:9B:2B:8C"}}},"request":{"raw":"GET /static/pc/img/like.png HTTP/1.1\r\nHost: iw63v.crqeraf.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://iw63v.crqeraf.xyz/archives/65129/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 23 Dec 2025 14:29:55 GMT\r\ncontent-type: image/png\r\ncontent-length: 410\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\nlast-modified: Sat, 13 Sep 2025 03:47:28 GMT\r\netag: \"68c4e950-19a\"\r\nexpires: Mon, 29 Dec 2025 07:49:07 GMT\r\ncache-control: public, max-age=604800, immutable\r\naccept-ranges: bytes\r\nage: 110447\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=czpjkrIJMQOWmi1lZuiUJvzBuSBte4OspQX3BiVykbUv9hcwcOof1O%2Fe%2FQX98j9jZHs2WC%2Fqv4sox0BYvqSxrgw3axSBjCnGpOfB9AMQHg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b288dd07b3856b4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":410,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 48 x 48, 8-bit colormap, non-interlaced","md5":"dce0918e463f20b3da8da359e5dfa269","sha1":"f2570748ebb42742bfbf0a7e7a80adf09d252493","sha256":"6a615ff3b378f7cad62b33f651ff932c6e7e094a1b3cd7cad91058b78a332675","sha512":"07452f0d1d6e56ac92df371fcf696e917685e14c2c1afae9997397ac74e5e059c5e90f298e7a03fb93d4411f06bcf9e81acd58c6a14eb2e0573e2f07db2ba29b","ssdeep":"","tlshash":"3be0c0cee5687c148e9bc42910f680c0f21b2d2604819a8e69117357073c86f8345b03","first_seen":"2023-10-15T11:56:15Z","last_seen":"2026-04-03T18:43:45.394382Z","times_seen":7254,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-23","alert":"Sinkholed","trigger":"iw63v.crqeraf.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"iw63v.crqeraf.xyz/static/pc/img/banner.png","fqdn":"iw63v.crqeraf.xyz","domain":"crqeraf.xyz","tld":"xyz"},"ip":{"addr":"154.207.127.39","port":443,"asn":0,"as":"","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://iw63v.crqeraf.xyz/archives/65129/","date":"2025-12-23T14:29:56.059Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"crqeraf.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 12 Dec 2025 08:17:25 GMT","end":"Thu, 12 Mar 2026 09:15:12 GMT"},"fingerprint":{"sha1":"9A:B6:D6:FC:9F:B5:E4:7C:4E:60:81:74:C5:1D:1F:16:43:65:9B:C0","sha256":"6B:D5:92:C2:2E:E8:B1:3D:EE:9E:2C:51:0B:D3:32:29:71:17:1E:3D:93:07:59:A9:C9:59:7C:A8:D8:9B:2B:8C"}}},"request":{"raw":"GET /static/pc/img/banner.png HTTP/1.1\r\nHost: iw63v.crqeraf.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://iw63v.crqeraf.xyz/archives/65129/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 23 Dec 2025 14:29:55 GMT\r\ncontent-type: image/png\r\ncontent-length: 6225\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\nlast-modified: Sat, 13 Sep 2025 03:47:27 GMT\r\netag: \"68c4e94f-1851\"\r\nexpires: Mon, 29 Dec 2025 07:49:08 GMT\r\ncache-control: public, max-age=604800, immutable\r\naccept-ranges: bytes\r\nage: 110447\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yAhzBEfq7Yf45iNOqpHmXuOOWicTu28VknjWTUBPL5O8rKEnrWpDiq%2FhrhUxD9uUrgdhGupZLSFfEiTI1%2FoU7l7bc1IiZJZtzCqLqZdPxQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b288dd0ab6456b4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6225,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 710 x 80, 8-bit/color RGB, non-interlaced","md5":"fcd222c3a79e938703b41aead6bd3561","sha1":"4e5aee5d9016c71b4520aea0f9a6507ec4d44f2d","sha256":"a08bf2a52c424a31d6a56a1f4a9703064350d150c977767d40231a12dc3a4da2","sha512":"b5e751a7328dd3cc60385c09e043bef1d3eb2519e2ed68471c57cf479938a6992c72a5aec0f283cb81f3febb9fc5b6588048658b01aef1bfc6149edec79e5990","ssdeep":"192:IyJfSMKqOHLq3K3CwW6QtTpm5ppBqxi0cLs6vTOUoZ:IaSMKrLq3K3x0tTp8Bqxi096vTOU4","tlshash":"a2d18e95e9fb22e8be56b5ec231d39501a32a6013889dd8a123db03d741614f74eaf0a","first_seen":"2025-09-06T13:11:54.822702Z","last_seen":"2026-04-03T18:43:45.401876Z","times_seen":7177,"resource_available":false,"data":null}},"time_used":40,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":40,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-23","alert":"Sinkholed","trigger":"iw63v.crqeraf.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pic.wdsrie.cn/upload/upload/20240510/2024051000225886556.png","fqdn":"pic.wdsrie.cn","domain":"wdsrie.cn","tld":"cn"},"ip":{"addr":"43.152.140.79","port":443,"asn":139341,"as":"ACE","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://iw63v.crqeraf.xyz/archives/65129/","date":"2025-12-23T14:29:56.961Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.wdsrie.cn","organization":""},"issuer":{"commonName":"ZeroSSL ECC Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Sat, 20 Dec 2025 00:00:00 GMT","end":"Fri, 20 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E9:73:86:E2:44:76:13:6D:6B:AE:EE:E0:BA:B0:C0:68:B0:97:37:B8","sha256":"B9:DF:B5:64:69:80:D3:48:0B:F1:C2:39:96:52:89:9A:DE:23:24:F8:50:8B:E3:B3:38:A6:99:51:B3:9A:55:5E"}}},"request":{"raw":"GET /upload/upload/20240510/2024051000225886556.png HTTP/1.1\r\nHost: pic.wdsrie.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://iw63v.crqeraf.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Thu, 09 May 2024 16:23:15 GMT\r\nEtag: \"996c27a7c6649e91511b0766c0361d35\"\r\nContent-Type: binary/octet-stream\r\nDate: Sat, 26 Jul 2025 01:30:21 GMT\r\nx-amz-server-side-encryption: AES256\r\nServer: nginx\r\nX-Cache: Hit from cloudfront\r\nX-Amz-Cf-Pop: ARN53-P2\r\nAge: 35685\r\nContent-Length: 1904\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 1030997976013801065\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\nAccess-Control-Allow-Origin: *\r\nCache-Control: max-age=864000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1904,"size_decoded":0,"mime_type":"binary/octet-stream","magic":"data","md5":"996c27a7c6649e91511b0766c0361d35","sha1":"6bd5535a2a7705544d8ae97812ac28155e619ed0","sha256":"241fd3d642b1f6a7c1d32a0f52ebc2998b8ad222d98783a58035dce168bbddb4","sha512":"500decd447253853e533e395fe68642d6b972f2b848f07ac3baa66f72524cc86e30eb4a8927c6d5d984d615493a1cac81e6d6bed6a590a8473d8a888a84c5160","ssdeep":"","tlshash":"63412ba6b26c9094472b5abdd9884ac1bf9ad8270c028d71ee73d6f989a0308dc73546","first_seen":"2024-05-10T06:44:59Z","last_seen":"2026-04-03T18:43:45.421613Z","times_seen":7525,"resource_available":false,"data":null}},"time_used":151,"timings":{"blocked":129,"dns":0,"connect":0,"send":0,"wait":21,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pic.wdsrie.cn/upload_01/upload/20250524/2025052417030422038.png","fqdn":"pic.wdsrie.cn","domain":"wdsrie.cn","tld":"cn"},"ip":{"addr":"43.152.140.79","port":443,"asn":139341,"as":"ACE","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://iw63v.crqeraf.xyz/archives/65129/","date":"2025-12-23T14:29:57.010Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.wdsrie.cn","organization":""},"issuer":{"commonName":"ZeroSSL ECC Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Sat, 20 Dec 2025 00:00:00 GMT","end":"Fri, 20 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E9:73:86:E2:44:76:13:6D:6B:AE:EE:E0:BA:B0:C0:68:B0:97:37:B8","sha256":"B9:DF:B5:64:69:80:D3:48:0B:F1:C2:39:96:52:89:9A:DE:23:24:F8:50:8B:E3:B3:38:A6:99:51:B3:9A:55:5E"}}},"request":{"raw":"GET /upload_01/upload/20250524/2025052417030422038.png HTTP/1.1\r\nHost: pic.wdsrie.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://iw63v.crqeraf.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Sat, 24 May 2025 09:03:10 GMT\r\nEtag: \"52d5847e762210c87b7e610d519d1bf7\"\r\nContent-Type: binary/octet-stream\r\nDate: Fri, 25 Jul 2025 15:29:12 GMT\r\nx-amz-server-side-encryption: AES256\r\nServer: nginx\r\nX-Cache: Hit from cloudfront\r\nX-Amz-Cf-Pop: ARN53-P2\r\nAge: 71754\r\nContent-Length: 1632\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 18000264797199828172\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\nAccess-Control-Allow-Origin: *\r\nCache-Control: max-age=864000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1632,"size_decoded":0,"mime_type":"binary/octet-stream","magic":"data","md5":"52d5847e762210c87b7e610d519d1bf7","sha1":"f6de525e2e79f00475fb04772b4a4ca85387c39c","sha256":"0e1e050608e4c76af66e1798b490ac0d9b85fb6e140a3b1c56c16aee238ec2e9","sha512":"459317394652f6eed3f90ea1923a3c4c14b06e7e2a0bf9d66b8a126b4d647d61e76f23043145544d2ed359c28007b930b5f15d2de5fe933b8aee4e9f3cdecadd","ssdeep":"","tlshash":"a0313a59213a140190a33be0172f2eff2882b0fadf8e0513c72ea4d59132f4ed5e4434","first_seen":"2025-06-02T05:32:32.628248Z","last_seen":"2026-04-03T18:43:45.41114Z","times_seen":7469,"resource_available":false,"data":null}},"time_used":114,"timings":{"blocked":105,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"iw63v.crqeraf.xyz/static/web/assets/index.css?v=20251130","fqdn":"iw63v.crqeraf.xyz","domain":"crqeraf.xyz","tld":"xyz"},"ip":{"addr":"154.207.127.39","port":443,"asn":0,"as":"","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://iw63v.crqeraf.xyz/archives/65129/","date":"2025-12-23T14:29:55.979Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"crqeraf.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 12 Dec 2025 08:17:25 GMT","end":"Thu, 12 Mar 2026 09:15:12 GMT"},"fingerprint":{"sha1":"9A:B6:D6:FC:9F:B5:E4:7C:4E:60:81:74:C5:1D:1F:16:43:65:9B:C0","sha256":"6B:D5:92:C2:2E:E8:B1:3D:EE:9E:2C:51:0B:D3:32:29:71:17:1E:3D:93:07:59:A9:C9:59:7C:A8:D8:9B:2B:8C"}}},"request":{"raw":"GET /static/web/assets/index.css?v=20251130 HTTP/1.1\r\nHost: iw63v.crqeraf.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://iw63v.crqeraf.xyz/archives/65129/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 23 Dec 2025 14:29:55 GMT\r\ncontent-type: text/css\r\npriority: u=2,i=?0\r\nserver: cloudflare\r\nlast-modified: Tue, 23 Dec 2025 06:51:40 GMT\r\nvary: Accept-Encoding\r\netag: W/\"694a3bfc-181e\"\r\nexpires: Tue, 30 Dec 2025 07:16:52 GMT\r\ncache-control: public, max-age=604800, immutable\r\ncontent-encoding: gzip\r\nage: 25983\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4HfAZUykBFVFIpN%2FGTz9nyeVPJk4pPuR3jeQ0sfFrzmpxNy3t5GtVdcm9NseRQqoQKDFvTQEXIPVOXWAFGJ1SIHjR4TawTjX1lJyYbMQUQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b288dd04b0356b4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6174,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text","md5":"04ccb0165edac03dcfd608db53f4d8f9","sha1":"712730d03c7c6c2d53edf77c0aaed31cb56db829","sha256":"01922a759e4f54826df8c3e05cec5f6799858192edc44518c0ff7882865c2046","sha512":"972ffec05a873bd09e98feacaec1546ee12d795d7ef40fd4568f16c607ca8f6cc7893a1d530c46b86d0106336b8cae01341662b7e564a07d7e24edbe9adcff0f","ssdeep":"192:WLpsAqTX6++njoSDv7DYqD68DKZDzY7ZV9fUw/cHv2qvxe7:uhX7ByXHpq","tlshash":"c1d1000d0a630944b94bc1942fbebbc4639d90475e0ac96dbfd3ae44cf4e64979a1bcc","first_seen":"2025-12-23T08:10:49.313114Z","last_seen":"2026-01-15T18:30:09.38127Z","times_seen":201,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-23","alert":"Sinkholed","trigger":"iw63v.crqeraf.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"iw63v.crqeraf.xyz/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"iw63v.crqeraf.xyz","domain":"crqeraf.xyz","tld":"xyz"},"ip":{"addr":"154.207.127.39","port":443,"asn":0,"as":"","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://iw63v.crqeraf.xyz/archives/65129/","date":"2025-12-23T14:29:56.052Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"crqeraf.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 12 Dec 2025 08:17:25 GMT","end":"Thu, 12 Mar 2026 09:15:12 GMT"},"fingerprint":{"sha1":"9A:B6:D6:FC:9F:B5:E4:7C:4E:60:81:74:C5:1D:1F:16:43:65:9B:C0","sha256":"6B:D5:92:C2:2E:E8:B1:3D:EE:9E:2C:51:0B:D3:32:29:71:17:1E:3D:93:07:59:A9:C9:59:7C:A8:D8:9B:2B:8C"}}},"request":{"raw":"GET /cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js HTTP/1.1\r\nHost: iw63v.crqeraf.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://iw63v.crqeraf.xyz/archives/65129/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 23 Dec 2025 14:29:55 GMT\r\ncontent-type: application/javascript\r\nexpires: Tue, 23 Dec 2025 15:17:55 GMT\r\ncache-control: public\r\nvary: accept-encoding\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=12rFf1SE%2F5jLPK56N77yTvCgq0jvUxPQ3Nzod%2BoZa5t%2BvbJcu9Y4Lg1eLV3uYEghXPGNnNqHgxKJZN0EsLieTSVCPFBULrBJB6tOGtPRyQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9b288dd0ab5e56b4-OSL\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1239,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1238)","md5":"9e8f56e8e1806253ba01a95cfc3d392c","sha1":"a8af90d7482e1e99d03de6bf88fed2315c5dd728","sha256":"2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8","sha512":"63f0f6f94fbabadc3f774ccaa6a401696e8a7651a074bc077d214f91da080b36714fd799eb40fed64154972008e34fc733d6ee314ac675727b37b58ffbebebee","ssdeep":"","tlshash":"6021d5743a18107e226a0133e56f66cee1f23715fd17e440408ad89566e4fe5063fed9","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-04-03T18:31:24.123309Z","times_seen":291357,"resource_available":true,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-23","alert":"Sinkholed","trigger":"iw63v.crqeraf.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pic.wdsrie.cn/upload_01/upload/20250408/2025040815474531253.jpg","fqdn":"pic.wdsrie.cn","domain":"wdsrie.cn","tld":"cn"},"ip":{"addr":"43.152.140.79","port":443,"asn":139341,"as":"ACE","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://iw63v.crqeraf.xyz/archives/65129/","date":"2025-12-23T14:29:57.187Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.wdsrie.cn","organization":""},"issuer":{"commonName":"ZeroSSL ECC Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Sat, 20 Dec 2025 00:00:00 GMT","end":"Fri, 20 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E9:73:86:E2:44:76:13:6D:6B:AE:EE:E0:BA:B0:C0:68:B0:97:37:B8","sha256":"B9:DF:B5:64:69:80:D3:48:0B:F1:C2:39:96:52:89:9A:DE:23:24:F8:50:8B:E3:B3:38:A6:99:51:B3:9A:55:5E"}}},"request":{"raw":"GET /upload_01/upload/20250408/2025040815474531253.jpg HTTP/1.1\r\nHost: pic.wdsrie.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://iw63v.crqeraf.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Type: binary/octet-stream\r\nDate: Tue, 23 Dec 2025 14:29:59 GMT\r\nETag: \"dd4718d4dc055ae5e1224d82bc9d737a\"\r\nx-amz-server-side-encryption: AES256\r\nServer: nginx\r\nX-Cache: Miss from cloudfront\r\nVia: 1.1 e3aded687d9d5fd28450d38e25aba824.cloudfront.net (CloudFront)\r\nX-Amz-Cf-Pop: ARN53-P2\r\nLast-Modified: Tue, 08 Apr 2025 09:23:48 GMT\r\nContent-Length: 277024\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 1659750202079597652\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Miss\r\nAccess-Control-Allow-Origin: *\r\nCache-Control: max-age=864000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":277024,"size_decoded":0,"mime_type":"binary/octet-stream","magic":"data","md5":"dd4718d4dc055ae5e1224d82bc9d737a","sha1":"02a70f01490e6d0e2e68e9d1c638eb9faa5772e4","sha256":"3c385c0020bb0a12e4510b86379b47d9a5c662098e90bd1f697ba77f412ffdd6","sha512":"f9f3a2d0d0a316f9f2d8e59841ea9eb2e5a5b24f6ac430b9935743c02df87c624ace0b2f05e826198d03b053b7d5c22b1add27377e804869b4b5116118e4e9a2","ssdeep":"6144:MT90AQq+zeJ6WM3l0uTJiwvJyuacEKtHEOKIU7QabCBFWI:MXH+XTJFvHapKtnKIUWBZ","tlshash":"c9442324627e9c8e8114615f85bba0134aaef2c3e94253f4e5ee5f8c436430ea5d73db","first_seen":"2025-12-23T14:30:42.325098Z","last_seen":"2025-12-23T14:30:42.325098Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1510,"timings":{"blocked":537,"dns":0,"connect":0,"send":0,"wait":555,"receive":418,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pic.wdsrie.cn/upload_01/upload/20250828/2025082822560017676.png","fqdn":"pic.wdsrie.cn","domain":"wdsrie.cn","tld":"cn"},"ip":{"addr":"43.152.140.79","port":443,"asn":139341,"as":"ACE","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://iw63v.crqeraf.xyz/archives/65129/","date":"2025-12-23T14:29:57.367Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.wdsrie.cn","organization":""},"issuer":{"commonName":"ZeroSSL ECC Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Sat, 20 Dec 2025 00:00:00 GMT","end":"Fri, 20 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E9:73:86:E2:44:76:13:6D:6B:AE:EE:E0:BA:B0:C0:68:B0:97:37:B8","sha256":"B9:DF:B5:64:69:80:D3:48:0B:F1:C2:39:96:52:89:9A:DE:23:24:F8:50:8B:E3:B3:38:A6:99:51:B3:9A:55:5E"}}},"request":{"raw":"GET /upload_01/upload/20250828/2025082822560017676.png HTTP/1.1\r\nHost: pic.wdsrie.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://iw63v.crqeraf.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Thu, 28 Aug 2025 14:58:44 GMT\r\nEtag: \"88479eb09f541f1a16c208685f25d042\"\r\nContent-Type: binary/octet-stream\r\nDate: Fri, 10 Oct 2025 02:30:55 GMT\r\nx-amz-server-side-encryption: AES256\r\nServer: nginx\r\nX-Cache: Miss from cloudfront\r\nX-Amz-Cf-Pop: ARN53-P2\r\nContent-Length: 3744\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 3162789652611205992\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\nAccess-Control-Allow-Origin: *\r\nCache-Control: max-age=864000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3744,"size_decoded":0,"mime_type":"binary/octet-stream","magic":"data","md5":"88479eb09f541f1a16c208685f25d042","sha1":"864fc9ea6d4924eb94df2f4934fc4b259b251371","sha256":"55f346b78118469551114d55d51be505553b5766b32c16ac0da4edc92fe4a10c","sha512":"d690ce8fd020d0e68397eebab104b0183785e74d93a9c7112d40efbc3a2188603e4facfa2ba14f235a4745383bfd3e12dc7b88196985548af3112391f2463501","ssdeep":"","tlshash":"33718ec5ff686a8fa327390d6fe54d9239304ae6460cbfc08b5730805d126a43f07592","first_seen":"2025-08-29T10:40:29.06075Z","last_seen":"2026-02-02T07:32:21.324544Z","times_seen":4025,"resource_available":false,"data":null}},"time_used":1115,"timings":{"blocked":1107,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"iw63v.crqeraf.xyz/static/pc/img/back.png","fqdn":"iw63v.crqeraf.xyz","domain":"crqeraf.xyz","tld":"xyz"},"ip":{"addr":"154.207.127.39","port":443,"asn":0,"as":"","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://iw63v.crqeraf.xyz/archives/65129/","date":"2025-12-23T14:29:56.018Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"crqeraf.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 12 Dec 2025 08:17:25 GMT","end":"Thu, 12 Mar 2026 09:15:12 GMT"},"fingerprint":{"sha1":"9A:B6:D6:FC:9F:B5:E4:7C:4E:60:81:74:C5:1D:1F:16:43:65:9B:C0","sha256":"6B:D5:92:C2:2E:E8:B1:3D:EE:9E:2C:51:0B:D3:32:29:71:17:1E:3D:93:07:59:A9:C9:59:7C:A8:D8:9B:2B:8C"}}},"request":{"raw":"GET /static/pc/img/back.png HTTP/1.1\r\nHost: iw63v.crqeraf.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://iw63v.crqeraf.xyz/archives/65129/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 23 Dec 2025 14:29:55 GMT\r\ncontent-type: image/png\r\ncontent-length: 321\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\nlast-modified: Sat, 13 Sep 2025 03:47:40 GMT\r\netag: \"68c4e95c-141\"\r\nexpires: Mon, 29 Dec 2025 07:49:06 GMT\r\ncache-control: public, max-age=604800, immutable\r\naccept-ranges: bytes\r\nage: 110449\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yLtyIGSLR41Ke7h4LPNQPNv2cNwmqlCxq%2FKYIqB2KTyWJ9LXbv4faxdNEkuAZIIr3xwhBaB43mUXmQ%2B0OBADgPd3FtqMOuQaQ4bgytgIcw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b288dd06b2056b4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":321,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 60 x 60, 4-bit colormap, non-interlaced","md5":"cafd9d25a2532cc7acf0c375629446cb","sha1":"a03cda6375601ec3301592ce81310574f10431b4","sha256":"68f397bd2a77136a5c5869cc9902aa2e5af9736ba253b5fca7ca467c850d98d5","sha512":"76c96db2eb3e460225c4e77972e3944fb93b5bc436244274f0e193eda75de989a38b4434c26a7c6fd3509f45f352dd538a70412b990ba040a81ff0b7c8937f4b","ssdeep":"","tlshash":"1ee07dc342a8ac964fab217f8a324044af5da9f01122b70b68988818bc09d5440c23a9","first_seen":"2023-10-15T11:56:15Z","last_seen":"2026-04-03T18:43:45.441923Z","times_seen":7415,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-23","alert":"Sinkholed","trigger":"iw63v.crqeraf.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pic.wdsrie.cn/upload/upload/20240112/2024011215491260844.png","fqdn":"pic.wdsrie.cn","domain":"wdsrie.cn","tld":"cn"},"ip":{"addr":"43.152.140.79","port":443,"asn":139341,"as":"ACE","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://iw63v.crqeraf.xyz/archives/65129/","date":"2025-12-23T14:29:56.913Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.wdsrie.cn","organization":""},"issuer":{"commonName":"ZeroSSL ECC Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Sat, 20 Dec 2025 00:00:00 GMT","end":"Fri, 20 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E9:73:86:E2:44:76:13:6D:6B:AE:EE:E0:BA:B0:C0:68:B0:97:37:B8","sha256":"B9:DF:B5:64:69:80:D3:48:0B:F1:C2:39:96:52:89:9A:DE:23:24:F8:50:8B:E3:B3:38:A6:99:51:B3:9A:55:5E"}}},"request":{"raw":"GET /upload/upload/20240112/2024011215491260844.png HTTP/1.1\r\nHost: pic.wdsrie.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://iw63v.crqeraf.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Fri, 12 Jan 2024 07:49:22 GMT\r\nEtag: \"f66bc3943b1ddf92787835e6f0dd214b\"\r\nContent-Type: binary/octet-stream\r\nDate: Sat, 26 Jul 2025 01:30:20 GMT\r\nx-amz-server-side-encryption: AES256\r\nServer: nginx\r\nX-Cache: Hit from cloudfront\r\nX-Amz-Cf-Pop: ARN53-P2\r\nAge: 35687\r\nContent-Length: 1088\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 8186166813961548088\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\nAccess-Control-Allow-Origin: *\r\nCache-Control: max-age=864000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1088,"size_decoded":0,"mime_type":"binary/octet-stream","magic":"data","md5":"f66bc3943b1ddf92787835e6f0dd214b","sha1":"97ac2012d8d8d7f52ef793aecf8462db31da584f","sha256":"cb12f9ea72a7507a3337c30f6e8186a24991e41618f2bfd49d03fa7b03454110","sha512":"585d6c08fba4de933e982c23e49fce993829ebcfa7690128e20e0c18bd797461a7792eb6e007a22217e617be3261d067e15d02c78845f236e966918de481ac5f","ssdeep":"","tlshash":"2c11f65881ae4beb9f03db101832f60287300b004b0fd84cabe48e1f3e30a493aca518","first_seen":"2024-04-20T21:23:38Z","last_seen":"2026-04-03T18:43:45.388002Z","times_seen":7526,"resource_available":false,"data":null}},"time_used":163,"timings":{"blocked":155,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"iw63v.crqeraf.xyz/static/pc/css/c189812.css?v=20251130","fqdn":"iw63v.crqeraf.xyz","domain":"crqeraf.xyz","tld":"xyz"},"ip":{"addr":"154.207.127.39","port":443,"asn":0,"as":"","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://iw63v.crqeraf.xyz/archives/65129/","date":"2025-12-23T14:29:55.889Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"crqeraf.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 12 Dec 2025 08:17:25 GMT","end":"Thu, 12 Mar 2026 09:15:12 GMT"},"fingerprint":{"sha1":"9A:B6:D6:FC:9F:B5:E4:7C:4E:60:81:74:C5:1D:1F:16:43:65:9B:C0","sha256":"6B:D5:92:C2:2E:E8:B1:3D:EE:9E:2C:51:0B:D3:32:29:71:17:1E:3D:93:07:59:A9:C9:59:7C:A8:D8:9B:2B:8C"}}},"request":{"raw":"GET /static/pc/css/c189812.css?v=20251130 HTTP/1.1\r\nHost: iw63v.crqeraf.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://iw63v.crqeraf.xyz/archives/65129/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 23 Dec 2025 14:29:55 GMT\r\ncontent-type: text/css\r\npriority: u=2,i=?0\r\nserver: cloudflare\r\nlast-modified: Wed, 05 Nov 2025 04:46:18 GMT\r\nvary: Accept-Encoding\r\netag: W/\"690ad69a-3765\"\r\nexpires: Tue, 30 Dec 2025 07:16:51 GMT\r\ncache-control: public, max-age=604800, immutable\r\ncontent-encoding: gzip\r\nage: 25983\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mWck5XvxmCW7WPpLnE4cTSRFxqJO39af7Wp%2FHamrXhuaCVvMBB%2Bt3Yd2tkfBNA5bisyDNWYXmM2FRLDacqqR%2Fh0Cmzn2BETxEjyQC4xh%2Bw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b288dcfdaa056b4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14181,"size_decoded":0,"mime_type":"text/css","magic":"assembler source, ASCII text","md5":"dac4775cb43de678d462be3a4ae94078","sha1":"36e34bffe7c4ec150f88cc5403d3c4eaf82d6781","sha256":"e98f803aab4a8195e5cb1c6462b82e7f07666e12cfe4c25cef52ffcbf4523388","sha512":"5133e37f2023a58209cd83b49bce209a9d439ad272a46161a223417a6871bbd77a34f6aea5a5d71c2e78ae66caba2a44bb9e0c9cf553eb9f14a5f18b51821ce2","ssdeep":"192:saQWZ1AYiLQwDKF8/MVWQLF+fqyffuftX2go8FOnFa5+7lFDbP3hX+k62oXc61mJ:sF3zDKFXVF+lfut0FhFDbPbos7","tlshash":"9e52df607abf180074bbd56c6bab5f94321472434d1ec968bfc937444f4b0aab996f8c","first_seen":"2025-11-09T10:21:21.177929Z","last_seen":"2026-04-03T18:42:08.434658Z","times_seen":6745,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-23","alert":"Sinkholed","trigger":"iw63v.crqeraf.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pic.wdsrie.cn/upload_01/upload/20250828/2025082822504734735.png","fqdn":"pic.wdsrie.cn","domain":"wdsrie.cn","tld":"cn"},"ip":{"addr":"43.152.140.79","port":443,"asn":139341,"as":"ACE","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://iw63v.crqeraf.xyz/archives/65129/","date":"2025-12-23T14:29:57.286Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.wdsrie.cn","organization":""},"issuer":{"commonName":"ZeroSSL ECC Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Sat, 20 Dec 2025 00:00:00 GMT","end":"Fri, 20 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E9:73:86:E2:44:76:13:6D:6B:AE:EE:E0:BA:B0:C0:68:B0:97:37:B8","sha256":"B9:DF:B5:64:69:80:D3:48:0B:F1:C2:39:96:52:89:9A:DE:23:24:F8:50:8B:E3:B3:38:A6:99:51:B3:9A:55:5E"}}},"request":{"raw":"GET /upload_01/upload/20250828/2025082822504734735.png HTTP/1.1\r\nHost: pic.wdsrie.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://iw63v.crqeraf.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Thu, 28 Aug 2025 14:58:47 GMT\r\nEtag: \"c8450ac71bc61e046acb96b0ac24c408\"\r\nContent-Type: binary/octet-stream\r\nDate: Fri, 10 Oct 2025 01:25:51 GMT\r\nx-amz-server-side-encryption: AES256\r\nServer: nginx\r\nX-Cache: Hit from cloudfront\r\nX-Amz-Cf-Pop: ARN53-P2\r\nAge: 3902\r\nContent-Length: 138656\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 224335493616469706\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\nAccess-Control-Allow-Origin: *\r\nCache-Control: max-age=864000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":138656,"size_decoded":0,"mime_type":"binary/octet-stream","magic":"data","md5":"c8450ac71bc61e046acb96b0ac24c408","sha1":"1543eabeb5d502e6cd5687fedee581a2b4542211","sha256":"fc533b66c877c69d676df1cff76118dadd8154894f03021dfc5fc782abfa5f10","sha512":"5a3cfbb0f7910c3227a336fd4ecdc61ea629748ddfcc2c139a0a1a75ed2a04c281581ad0543bba667364f01e9d2be5eff3f16ea3e334c629eb34156e3bb7f173","ssdeep":"3072:9Hi2Wr+1UIuHUIqJi31RQ5IxI5X79jgYLRRjM/:9i/UY1myIZ79jDVRY/","tlshash":"65d312ddd643c80fa5ccbe22f9ec95fb1c3365aa29d95d7b5c0005b7bac4aa0d00c65a","first_seen":"2025-08-29T10:40:29.057183Z","last_seen":"2026-02-26T06:59:47.977186Z","times_seen":6240,"resource_available":false,"data":null}},"time_used":1000,"timings":{"blocked":980,"dns":0,"connect":0,"send":0,"wait":15,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"iw63v.crqeraf.xyz/static/pc/img/placeholder.d8718ac.png","fqdn":"iw63v.crqeraf.xyz","domain":"crqeraf.xyz","tld":"xyz"},"ip":{"addr":"154.207.127.39","port":443,"asn":0,"as":"","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://iw63v.crqeraf.xyz/archives/65129/","date":"2025-12-23T14:29:56.058Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"crqeraf.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 12 Dec 2025 08:17:25 GMT","end":"Thu, 12 Mar 2026 09:15:12 GMT"},"fingerprint":{"sha1":"9A:B6:D6:FC:9F:B5:E4:7C:4E:60:81:74:C5:1D:1F:16:43:65:9B:C0","sha256":"6B:D5:92:C2:2E:E8:B1:3D:EE:9E:2C:51:0B:D3:32:29:71:17:1E:3D:93:07:59:A9:C9:59:7C:A8:D8:9B:2B:8C"}}},"request":{"raw":"GET /static/pc/img/placeholder.d8718ac.png HTTP/1.1\r\nHost: iw63v.crqeraf.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://iw63v.crqeraf.xyz/archives/65129/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 23 Dec 2025 14:29:55 GMT\r\ncontent-type: image/png\r\ncontent-length: 301\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\nlast-modified: Sat, 13 Sep 2025 03:47:40 GMT\r\netag: \"68c4e95c-12d\"\r\nexpires: Sun, 28 Dec 2025 18:19:21 GMT\r\ncache-control: public, max-age=604800, immutable\r\naccept-ranges: bytes\r\nage: 159033\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=p8ctqdE7EGmq2lD2HQAuGqSrwOEklzO8s7xUTeGCXCwh2DJ1nFpApwlCuHuZCpIXog1tkC6En1PR2N7TjATBwW%2FDUGA68Oc4g0XKSKBbJw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b288dd0ab6256b4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":301,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 160 x 160, 2-bit colormap, non-interlaced","md5":"a3ff4ec7efac2e84438b585ee1cc5101","sha1":"00f8b359773c15727635f35092dafd8d0748409a","sha256":"11de5e5dcf28404fe22362caba15e33c7d233410540cd1815083606efbac295b","sha512":"7a3317f8263f45830c868605dc6217bf8306afeef105095815735c29c92b1fdb505bdf9ba08053bea1cd73384d559d14f5c1d5871afd7567fbe3ac8f5a6b3859","ssdeep":"","tlshash":"bde07dd6f1719c5dcacbd81b65720441ab15a5510090912556960696898c674e9c1e0b","first_seen":"2024-07-18T20:59:40Z","last_seen":"2025-12-27T21:57:58.062348Z","times_seen":2156,"resource_available":false,"data":null}},"time_used":40,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":40,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-23","alert":"Sinkholed","trigger":"iw63v.crqeraf.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pic.wdsrie.cn/upload_01/xiao/20251221/2025122114592537583.jpeg","fqdn":"pic.wdsrie.cn","domain":"wdsrie.cn","tld":"cn"},"ip":{"addr":"43.152.140.79","port":443,"asn":139341,"as":"ACE","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://iw63v.crqeraf.xyz/archives/65129/","date":"2025-12-23T14:29:57.213Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.wdsrie.cn","organization":""},"issuer":{"commonName":"ZeroSSL ECC Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Sat, 20 Dec 2025 00:00:00 GMT","end":"Fri, 20 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E9:73:86:E2:44:76:13:6D:6B:AE:EE:E0:BA:B0:C0:68:B0:97:37:B8","sha256":"B9:DF:B5:64:69:80:D3:48:0B:F1:C2:39:96:52:89:9A:DE:23:24:F8:50:8B:E3:B3:38:A6:99:51:B3:9A:55:5E"}}},"request":{"raw":"GET /upload_01/xiao/20251221/2025122114592537583.jpeg HTTP/1.1\r\nHost: pic.wdsrie.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://iw63v.crqeraf.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Mon, 22 Dec 2025 00:30:09 GMT\r\nEtag: \"fc30464c132045b6b0affa4cf02a80cb\"\r\nContent-Type: binary/octet-stream\r\nServer: nginx\r\nDate: Mon, 22 Dec 2025 00:36:47 GMT\r\nx-amz-server-side-encryption: AES256\r\nX-Cache: Hit from cloudfront\r\nX-Amz-Cf-Pop: ARN53-P2\r\nAge: 738\r\nContent-Length: 62320\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 2161932372735677706\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\nAccess-Control-Allow-Origin: *\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":62320,"size_decoded":0,"mime_type":"binary/octet-stream","magic":"data","md5":"fc30464c132045b6b0affa4cf02a80cb","sha1":"4577ec5dfde22c062b57e5a21ff2940beda9033e","sha256":"ace2d815e822c33f65e687c7dd0dbd6209da959d21954e344643b61c3daf2dde","sha512":"27feb26ac2ddce7107777edd4a48f426d286aa6e8354a5873e9e3291212da24e8e27eaa50a166e323917ee47acbaf19a4ea75c0cd17a329fb31b1cfd72038708","ssdeep":"1536:PDBlIK6Nbl24FC5tbpHYGxzIyq0A7/MQqHuHDrwukhbaZHqlR:NEH2Rf4GZq37kBOHHVWbvn","tlshash":"395302d20f7ef82a63c1407eae460321337590e5ae496e717f64b469dab231956cc317","first_seen":"2025-12-23T11:33:35.963469Z","last_seen":"2025-12-27T19:33:31.43439Z","times_seen":3,"resource_available":false,"data":null}},"time_used":901,"timings":{"blocked":886,"dns":0,"connect":0,"send":0,"wait":13,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pic.wdsrie.cn/upload_01/upload/20250828/2025082822534375988.jpeg","fqdn":"pic.wdsrie.cn","domain":"wdsrie.cn","tld":"cn"},"ip":{"addr":"43.152.140.79","port":443,"asn":139341,"as":"ACE","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://iw63v.crqeraf.xyz/archives/65129/","date":"2025-12-23T14:29:57.387Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.wdsrie.cn","organization":""},"issuer":{"commonName":"ZeroSSL ECC Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Sat, 20 Dec 2025 00:00:00 GMT","end":"Fri, 20 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E9:73:86:E2:44:76:13:6D:6B:AE:EE:E0:BA:B0:C0:68:B0:97:37:B8","sha256":"B9:DF:B5:64:69:80:D3:48:0B:F1:C2:39:96:52:89:9A:DE:23:24:F8:50:8B:E3:B3:38:A6:99:51:B3:9A:55:5E"}}},"request":{"raw":"GET /upload_01/upload/20250828/2025082822534375988.jpeg HTTP/1.1\r\nHost: pic.wdsrie.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://iw63v.crqeraf.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Thu, 28 Aug 2025 14:58:47 GMT\r\nEtag: \"dbc37e4031932e404cd503a9e16976cf\"\r\nContent-Type: binary/octet-stream\r\nDate: Thu, 09 Oct 2025 13:13:13 GMT\r\nx-amz-server-side-encryption: AES256\r\nServer: nginx\r\nX-Cache: Hit from cloudfront\r\nX-Amz-Cf-Pop: ARN53-P2\r\nAge: 47862\r\nContent-Length: 11504\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 7187746310412980945\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\nAccess-Control-Allow-Origin: *\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":11504,"size_decoded":0,"mime_type":"binary/octet-stream","magic":"data","md5":"dbc37e4031932e404cd503a9e16976cf","sha1":"f6e204e749b21638964f47fe15b0a8e71b8782c2","sha256":"4d9d415b26d0005658f36976b93706a8efb71f76257d9e8e5820b4351b0de919","sha512":"7a7d960f9bf015e9730538d96c64ad949dece600d37d5c5f112866f4ff75729af6004baf47c05c8d8aa19264b7ec87a779fa3a86dfc7bf097a346929a400b6e0","ssdeep":"192:aUY2Eq2FdGqigE9vebhBfP5V535d6bTy6O25U2779vVjRv28w9MxS/xcF4UZE1p6:aU1pqDEAb33WbTy2r7zjRO5QSqhZE1p6","tlshash":"2832bf6dec25b6d5f4dcf849784a74d3e771e0da3d1c75bac15dc9469a6bf328000082","first_seen":"2025-08-29T10:40:28.997958Z","last_seen":"2026-02-06T01:40:52.259458Z","times_seen":4031,"resource_available":false,"data":null}},"time_used":1124,"timings":{"blocked":1102,"dns":0,"connect":0,"send":0,"wait":21,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mts.delipu.cc/videos5/403afd70c1d30e3a3715e9f87c3b069d/403afd70c1d30e3a3715e9f87c3b069d0.ts?auth_key=1766500203-46-0-e80aa7cd470311728f58cc4d8ab063eb","fqdn":"mts.delipu.cc","domain":"delipu.cc","tld":"cc"},"ip":{"addr":"101.33.21.239","port":443,"asn":139341,"as":"ACE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://iw63v.crqeraf.xyz/archives/65129/","date":"2025-12-23T14:30:03.776Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.delipu.cc","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 23 Dec 2025 04:27:53 GMT","end":"Mon, 23 Mar 2026 04:27:52 GMT"},"fingerprint":{"sha1":"B7:E4:49:5C:56:14:FE:A1:A7:00:9F:AE:7C:7B:20:42:52:92:C6:D2","sha256":"93:53:B7:A0:BD:28:6C:69:53:D7:7C:E7:23:F0:6C:EB:FA:F9:EC:90:B4:4E:76:8F:F9:8F:9B:FE:8A:BD:F2:32"}}},"request":{"raw":"GET /videos5/403afd70c1d30e3a3715e9f87c3b069d/403afd70c1d30e3a3715e9f87c3b069d0.ts?auth_key=1766500203-46-0-e80aa7cd470311728f58cc4d8ab063eb HTTP/1.1\r\nHost: mts.delipu.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://iw63v.crqeraf.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Tue, 08 Apr 2025 09:06:47 GMT\r\nEtag: \"08548a1942fcf78fa841bf5ea52b5bee\"\r\nContent-Type: binary/octet-stream\r\nDate: Tue, 23 Dec 2025 09:27:18 GMT\r\nx-amz-server-side-encryption: AES256\r\nServer: nginx\r\nX-Cache: Miss from cloudfront\r\nX-Amz-Cf-Pop: LAX53-P4\r\nContent-Length: 1331424\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 10565798913339849319\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\nAccess-Control-Allow-Origin: *\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1331424,"size_decoded":0,"mime_type":"binary/octet-stream","magic":"data","md5":"09dc794eae5235b1b14818658ff891b1","sha1":"f358f06ab8aafeebc4e8c958630956b9561d7dc8","sha256":"8f6f86ababb79c4e12d0d5bb568c449572835be65e648af9444943d0bcb4aff8","sha512":"5f916997a1e767c1674c2cc1b3f57230fedbd271f2ae296e49b45048617ef3cea462b700ca147f52fc03fb57889e0f9f90d1e82646b02fa4d1a3e14ea85f06de","ssdeep":"12288:FZX/jPxVWk/C7IjmEcsTSScbKbiPJ54vgIOWOC8Tg6auY3ACuw/yhxQlTR7gZdTx:FZXtKMJTbbgYv6mpL7A8yhmTRMnG/ev9","tlshash":"be2533cc88ae4e5e6cd5cc044476cfcc781e8720aa47d6c63e06d3ee5996f8d9728a5c","first_seen":"2025-11-19T02:59:39.730539Z","last_seen":"2025-12-23T14:30:42.335865Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1663,"timings":{"blocked":321,"dns":1,"connect":155,"send":0,"wait":159,"receive":861,"ssl":163},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pic.wdsrie.cn/upload_01/upload/20250408/2025040815474172346.jpg","fqdn":"pic.wdsrie.cn","domain":"wdsrie.cn","tld":"cn"},"ip":{"addr":"43.152.140.79","port":443,"asn":139341,"as":"ACE","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://iw63v.crqeraf.xyz/archives/65129/","date":"2025-12-23T14:29:57.167Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.wdsrie.cn","organization":""},"issuer":{"commonName":"ZeroSSL ECC Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Sat, 20 Dec 2025 00:00:00 GMT","end":"Fri, 20 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E9:73:86:E2:44:76:13:6D:6B:AE:EE:E0:BA:B0:C0:68:B0:97:37:B8","sha256":"B9:DF:B5:64:69:80:D3:48:0B:F1:C2:39:96:52:89:9A:DE:23:24:F8:50:8B:E3:B3:38:A6:99:51:B3:9A:55:5E"}}},"request":{"raw":"GET /upload_01/upload/20250408/2025040815474172346.jpg HTTP/1.1\r\nHost: pic.wdsrie.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://iw63v.crqeraf.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Type: binary/octet-stream\r\nDate: Tue, 23 Dec 2025 14:29:58 GMT\r\nETag: \"977a602d81b6396a7b44172e063f9874\"\r\nx-amz-server-side-encryption: AES256\r\nServer: nginx\r\nX-Cache: Miss from cloudfront\r\nVia: 1.1 36f6f4783c54484f0285e84da74ad1c6.cloudfront.net (CloudFront)\r\nX-Amz-Cf-Pop: ARN53-P2\r\nLast-Modified: Tue, 08 Apr 2025 09:23:51 GMT\r\nContent-Length: 228768\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 17731471781191201373\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Miss\r\nAccess-Control-Allow-Origin: *\r\nCache-Control: max-age=864000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":228768,"size_decoded":0,"mime_type":"binary/octet-stream","magic":"data","md5":"977a602d81b6396a7b44172e063f9874","sha1":"d0c8b9decddd1cbe4fdfe4ec50992bfb6da50139","sha256":"48879a88b003edf6d7278fe57e5e171a32fd44a5057c432aef48fe5bcac95412","sha512":"98c103326a98047ba74b58588a4232e147424b87167292b6e4ffce339d8c3cf0564636c8c01e14b2288fd6c602d38c0ffeb69ed4964b6cd24b77b0a958a7cc02","ssdeep":"3072:cL3V0wpH0rHtREnFLyO5ut2FyPlE5NKC9R6Us2d5fBQ14ZNDmopfjuNkWnll/X:cZ0wR0rHtRal/Kxo5fB7hKkWnDX","tlshash":"8324125f29ec349b37d8a29249061768f0f97d79f13c092af2aa05fc296a175853f81c","first_seen":"2025-12-23T14:30:42.338459Z","last_seen":"2025-12-23T14:30:42.338459Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1011,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":540,"receive":471,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pic.wdsrie.cn/upload_01/upload/20240705/2024070515583268294.png","fqdn":"pic.wdsrie.cn","domain":"wdsrie.cn","tld":"cn"},"ip":{"addr":"43.152.140.79","port":443,"asn":139341,"as":"ACE","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://iw63v.crqeraf.xyz/archives/65129/","date":"2025-12-23T14:29:57.318Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.wdsrie.cn","organization":""},"issuer":{"commonName":"ZeroSSL ECC Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Sat, 20 Dec 2025 00:00:00 GMT","end":"Fri, 20 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E9:73:86:E2:44:76:13:6D:6B:AE:EE:E0:BA:B0:C0:68:B0:97:37:B8","sha256":"B9:DF:B5:64:69:80:D3:48:0B:F1:C2:39:96:52:89:9A:DE:23:24:F8:50:8B:E3:B3:38:A6:99:51:B3:9A:55:5E"}}},"request":{"raw":"GET /upload_01/upload/20240705/2024070515583268294.png HTTP/1.1\r\nHost: pic.wdsrie.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://iw63v.crqeraf.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Fri, 05 Jul 2024 08:52:38 GMT\r\nEtag: \"e240fab57ed95a0aca869c898228e937\"\r\nContent-Type: binary/octet-stream\r\nDate: Fri, 25 Jul 2025 20:13:51 GMT\r\nx-amz-server-side-encryption: AES256\r\nServer: nginx\r\nX-Cache: Hit from cloudfront\r\nX-Amz-Cf-Pop: ARN53-P2\r\nAge: 54725\r\nContent-Length: 11040\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 6087254248411811974\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\nAccess-Control-Allow-Origin: *\r\nCache-Control: max-age=864000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":11040,"size_decoded":0,"mime_type":"binary/octet-stream","magic":"data","md5":"e240fab57ed95a0aca869c898228e937","sha1":"de24fe74127ecad6d0fa56c8a4b5ca7b372c93a2","sha256":"bf0ef7bb05701ae4a321f7e3effb09365a158a7eb3287ae37c73847c62c22ecf","sha512":"cfe96d698511a38e47ed5c3501f3160f2cc8319c13b254f24ea80431efb4c08a9c30a95994cbcc7f90bfe0c0c474c374b17455ecb4606cd9c99c7f1e3f752aea","ssdeep":"192:ZI8FI+PcbYNzxp5jAHDwPs0rUChcIRZVsPtNL9IGhXf+nTtku:ZIf+EbmzxLAHPH8bRZUtR9I0XGTtku","tlshash":"1f32afaa4153a89616b0149cf17164e95be53edad0b25ee186c1389fe172638aef009c","first_seen":"2024-07-18T20:59:41Z","last_seen":"2026-02-28T11:30:56.481448Z","times_seen":6549,"resource_available":false,"data":null}},"time_used":1146,"timings":{"blocked":1137,"dns":0,"connect":0,"send":0,"wait":8,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pic.wdsrie.cn/upload_01/upload/20251010/2025101015060821426.gif","fqdn":"pic.wdsrie.cn","domain":"wdsrie.cn","tld":"cn"},"ip":{"addr":"43.152.140.79","port":443,"asn":139341,"as":"ACE","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://iw63v.crqeraf.xyz/archives/65129/","date":"2025-12-23T14:29:57.354Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.wdsrie.cn","organization":""},"issuer":{"commonName":"ZeroSSL ECC Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Sat, 20 Dec 2025 00:00:00 GMT","end":"Fri, 20 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E9:73:86:E2:44:76:13:6D:6B:AE:EE:E0:BA:B0:C0:68:B0:97:37:B8","sha256":"B9:DF:B5:64:69:80:D3:48:0B:F1:C2:39:96:52:89:9A:DE:23:24:F8:50:8B:E3:B3:38:A6:99:51:B3:9A:55:5E"}}},"request":{"raw":"GET /upload_01/upload/20251010/2025101015060821426.gif HTTP/1.1\r\nHost: pic.wdsrie.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://iw63v.crqeraf.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Fri, 10 Oct 2025 07:06:16 GMT\r\nEtag: \"049973db44f0b69d9feee5156b2044c5\"\r\nContent-Type: binary/octet-stream\r\nDate: Fri, 10 Oct 2025 07:06:45 GMT\r\nx-amz-server-side-encryption: AES256\r\nServer: nginx\r\nX-Cache: Hit from cloudfront\r\nX-Amz-Cf-Pop: ARN53-P2\r\nAge: 335\r\nContent-Length: 131520\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 15855108329894737435\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\nAccess-Control-Allow-Origin: *\r\nCache-Control: max-age=864000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":131520,"size_decoded":0,"mime_type":"binary/octet-stream","magic":"data","md5":"049973db44f0b69d9feee5156b2044c5","sha1":"bd3131a2effb3d4243d765f9ef5ee15978cd1147","sha256":"827a786bc34bede7872889fedd6e70e532d7146ee5700c3ce6cf4de9859b8c26","sha512":"e26416eccaf47fd91882374805b3673bf08d0bd8ba338c04044dcdc1c1d1b00852d1289be61f2a8b909d0de3ccc5b18529fb58fa91c92c03e444dd268063fb4d","ssdeep":"1536:A9ejnvup2ECQeFN8zC4NHS9lSwPQdshMbHxI6LT27UW1afr/TG2OdAEIS5875QPz:PjnfEnHNy9N8xfznDT5XSu7iZk2/GTAl","tlshash":"96d3128c9d8a2f053ce0b2c585b9f7ca55acddb92cd7658c58e8485d010f1232b5aabf","first_seen":"2025-10-10T02:59:11.012009Z","last_seen":"2026-01-19T03:45:18.466252Z","times_seen":3229,"resource_available":false,"data":null}},"time_used":1128,"timings":{"blocked":1116,"dns":0,"connect":0,"send":0,"wait":8,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pic.wdsrie.cn/upload/upload/20230304/2023030412361143874.png","fqdn":"pic.wdsrie.cn","domain":"wdsrie.cn","tld":"cn"},"ip":{"addr":"43.152.140.79","port":443,"asn":139341,"as":"ACE","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://iw63v.crqeraf.xyz/archives/65129/","date":"2025-12-23T14:29:57.767Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.wdsrie.cn","organization":""},"issuer":{"commonName":"ZeroSSL ECC Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Sat, 20 Dec 2025 00:00:00 GMT","end":"Fri, 20 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E9:73:86:E2:44:76:13:6D:6B:AE:EE:E0:BA:B0:C0:68:B0:97:37:B8","sha256":"B9:DF:B5:64:69:80:D3:48:0B:F1:C2:39:96:52:89:9A:DE:23:24:F8:50:8B:E3:B3:38:A6:99:51:B3:9A:55:5E"}}},"request":{"raw":"GET /upload/upload/20230304/2023030412361143874.png HTTP/1.1\r\nHost: pic.wdsrie.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://iw63v.crqeraf.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Thu, 28 Dec 2023 12:24:12 GMT\r\nEtag: \"25aa43326761e061d433a25393157f4d\"\r\nContent-Type: binary/octet-stream\r\nDate: Sat, 26 Jul 2025 11:00:22 GMT\r\nx-amz-server-side-encryption: AES256\r\nServer: nginx\r\nX-Cache: Hit from cloudfront\r\nX-Amz-Cf-Pop: ARN53-P2\r\nAge: 1485\r\nContent-Length: 1552\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 15625081113567142480\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\nAccess-Control-Allow-Origin: *\r\nCache-Control: max-age=864000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1552,"size_decoded":0,"mime_type":"binary/octet-stream","magic":"data","md5":"25aa43326761e061d433a25393157f4d","sha1":"728064c3ef96111218368a6e49ac31609da0c690","sha256":"e34c78ca88f7ae8778f33deb835232a390fccf2f1f09dc8be3d9daca0e33516b","sha512":"27d4e40a831ab3bccf743fca8d03b52e621ebd800e5ba95be66cc9d2f8c16bcef91923680789e20abb43d22be23da0b3647b3d5fff2c3c3a15291de39ef755ba","ssdeep":"","tlshash":"56310a7b711241be3a88a383039e65719080ae2a016fd75584dcc1332ff3e2da7545fd","first_seen":"2023-09-24T18:31:27Z","last_seen":"2026-04-03T18:43:45.392511Z","times_seen":7519,"resource_available":false,"data":null}},"time_used":914,"timings":{"blocked":906,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.addtoany.com/menu/svg/icons/qzone.js","fqdn":"static.addtoany.com","domain":"addtoany.com","tld":"com"},"ip":{"addr":"172.66.171.172","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://iw63v.crqeraf.xyz/archives/65129/","date":"2025-12-23T14:29:58.019Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"static.addtoany.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Dec 2025 13:28:50 GMT","end":"Sun, 22 Mar 2026 14:28:48 GMT"},"fingerprint":{"sha1":"83:E4:54:72:9E:E9:BE:F0:31:A0:E0:3B:5B:38:1D:25:57:6A:CE:67","sha256":"C2:A2:4F:7E:8C:0F:A8:AA:86:24:03:7D:6B:67:31:2E:38:54:D6:C4:27:59:FE:B4:3D:28:7C:D5:DC:F6:F1:1E"}}},"request":{"raw":"GET /menu/svg/icons/qzone.js HTTP/1.1\r\nHost: static.addtoany.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://iw63v.crqeraf.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncf-cache-status: REVALIDATED\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: application/javascript\r\npriority: u=3,i=?0\r\naccess-control-allow-origin: *\r\ncache-control: max-age=7776000, stale-while-revalidate=30, public\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sYyxLkjTj5OIZr1jRWbmtnOLclLBN%2BaFhyRfnAXj3sjcVPqQqbF7Rv0Y3%2BhRYOol0h6rSOZPRp5KnrRhDNajJK9Z3NhapKRnoyjpX8OC%2Bg%3D%3D\"}]}\r\netag: W/\"80c832390da4064ac83b3d7103e123e0\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ndate: Tue, 23 Dec 2025 14:29:57 GMT\r\ncf-ray: 9b288ddd3a12569f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":908,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (908), with no line terminators","md5":"a17eac8495145dd9e47449ade51d723b","sha1":"b4c560e4b9f3d0a1bc1750068cd7431960ca867f","sha256":"71db88183ecf13443169be6691fe13b7ba21d71484e4f78aaacc06ee1940fed8","sha512":"de46f36992408061aa9269f864aea9edf5c2d546618ff5bab34b523d0d8b2aa656620aaa45b4e940ebe020d35e103c82c0346e5f147bde0459f67084a26ac8a6","ssdeep":"","tlshash":"dc1150cb7214570ac50446dbc3ebe8d20605703a083810c286ffcb797069c8eed00d45","first_seen":"2024-08-19T19:49:02.25879Z","last_seen":"2026-04-03T18:43:45.413109Z","times_seen":7842,"resource_available":true,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.no/ads/ga-audiences?v=1\u0026t=sr\u0026slf_rd=1\u0026_r=4\u0026tid=G-D19N9LPLRP\u0026cid=1028203053.1766500197\u0026gtm=45je5ca1v9105002050za200zb9218846652zd9218846652\u0026aip=1\u0026dma=1\u0026dma_cps=syphamo\u0026gcd=13l3l3l2l1l1\u0026npa=1\u0026frm=0\u0026tag_exp=103116026~103200004~104527906~104528500~104684208~104684211~105391252~115583767~115616986~115938466~115938468~116184927~116184929~116251938~116251940\u0026z=413275043","fqdn":"www.google.no","domain":"google.no","tld":"no"},"ip":{"addr":"142.251.38.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://iw63v.crqeraf.xyz/archives/65129/","date":"2025-12-23T14:29:59.094Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.no","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:59:22 GMT","end":"Wed, 25 Feb 2026 15:59:21 GMT"},"fingerprint":{"sha1":"E3:8A:B3:9D:E4:8B:53:E7:04:0F:DC:F1:FF:B6:DA:2F:A5:13:E7:D1","sha256":"3D:CC:25:A1:DF:57:5C:E5:5E:62:8C:3E:4C:9E:BF:21:67:03:6E:09:DE:4F:C1:38:17:4D:91:E4:81:A1:1D:6E"}}},"request":{"raw":"GET /ads/ga-audiences?v=1\u0026t=sr\u0026slf_rd=1\u0026_r=4\u0026tid=G-D19N9LPLRP\u0026cid=1028203053.1766500197\u0026gtm=45je5ca1v9105002050za200zb9218846652zd9218846652\u0026aip=1\u0026dma=1\u0026dma_cps=syphamo\u0026gcd=13l3l3l2l1l1\u0026npa=1\u0026frm=0\u0026tag_exp=103116026~103200004~104527906~104528500~104684208~104684211~105391252~115583767~115616986~115938466~115938468~116184927~116184929~116251938~116251940\u0026z=413275043 HTTP/1.1\r\nHost: www.google.no\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\np3p: policyref=\"https://www.googleadservices.com/pagead/p3p.xml\", CP=\"NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC\"\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\ndate: Tue, 23 Dec 2025 14:29:59 GMT\r\npragma: no-cache\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\ncache-control: no-cache, no-store, must-revalidate\r\ncontent-type: image/gif\r\nx-content-type-options: nosniff\r\nserver: cafe\r\ncontent-length: 42\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":42,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"d89746888da2d9510b64a9f031eaecd5","sha1":"d5fceb6532643d0d84ffe09c40c481ecdf59e15a","sha256":"ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629","sha512":"d5da26b5d496edb0221df1a4057a8b0285d15592a8f8dc7016a294df37ed335f3fde6a2252962e0df38b62847f8b771463a0124ef3f84299f262ed9d9d3cee4c","ssdeep":"","tlshash":"c4900023fa808000c3a8c2300a0b238a2b8c80200a28030b80ae208cec3a3a22c03020","first_seen":"2023-04-05T02:54:03Z","last_seen":"2026-04-03T18:29:47.58696Z","times_seen":760393,"resource_available":true,"data":null}},"time_used":281,"timings":{"blocked":94,"dns":68,"connect":8,"send":0,"wait":24,"receive":0,"ssl":79},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"iw63v.crqeraf.xyz/static/pc/js/crypto-js.js?v=20251130","fqdn":"iw63v.crqeraf.xyz","domain":"crqeraf.xyz","tld":"xyz"},"ip":{"addr":"154.207.127.39","port":443,"asn":0,"as":"","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://iw63v.crqeraf.xyz/archives/65129/","date":"2025-12-23T14:29:56.003Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"crqeraf.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 12 Dec 2025 08:17:25 GMT","end":"Thu, 12 Mar 2026 09:15:12 GMT"},"fingerprint":{"sha1":"9A:B6:D6:FC:9F:B5:E4:7C:4E:60:81:74:C5:1D:1F:16:43:65:9B:C0","sha256":"6B:D5:92:C2:2E:E8:B1:3D:EE:9E:2C:51:0B:D3:32:29:71:17:1E:3D:93:07:59:A9:C9:59:7C:A8:D8:9B:2B:8C"}}},"request":{"raw":"GET /static/pc/js/crypto-js.js?v=20251130 HTTP/1.1\r\nHost: iw63v.crqeraf.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://iw63v.crqeraf.xyz/archives/65129/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 23 Dec 2025 14:29:55 GMT\r\ncontent-type: application/javascript\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\nlast-modified: Sat, 13 Sep 2025 03:47:40 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68c4e95c-33436\"\r\nexpires: Tue, 30 Dec 2025 07:16:36 GMT\r\ncache-control: public, max-age=604800, immutable\r\ncontent-encoding: gzip\r\nage: 25999\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WDSSPi7gRoMhhRwlb0RXVsV0Grp31knh74tY0MRXJ1GClosRnRXWaiMnKzd3qo6K6wHLdx7KP9PcvBKLPeiZeriGaqDv9%2F76hpkw2xcFRg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b288dd06b1b56b4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":209974,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (760)","md5":"651046e3f8c7b536643d3c3b722c15d1","sha1":"1d30b6793357543ce08ebf9b15375caf11f36dc6","sha256":"017313964240414cb29ad82c6001c0f2a8b76a298c3ec857aef7ae5672c414dc","sha512":"6aff1836dbb3acc0f153b9d186c7f76b5e251baa265ded6d0e6f5b472ae80def08f4ac894a797308506eff32053edd95f9e9af2ba8301a05d84dc62ad4e3ebeb","ssdeep":"6144:t9cDBCYgtpe1qFFIxVVl63E67nLscA20KfCH8BgZ7sGE4kNgRzvmUreGFPAqauV4:t9cDBCYgtpe1qFFIxVVl63E67nLscA2V","tlshash":"0224a5499de600c4a853b47c27bfb444e0a2b01b0596dd0a784eafb4cf5de388675bed","first_seen":"2023-08-15T16:46:38Z","last_seen":"2026-04-03T18:43:45.409038Z","times_seen":7929,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-23","alert":"Sinkholed","trigger":"iw63v.crqeraf.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"iw63v.crqeraf.xyz/static/ai/js/ai.js?v=20251130","fqdn":"iw63v.crqeraf.xyz","domain":"crqeraf.xyz","tld":"xyz"},"ip":{"addr":"154.207.127.39","port":443,"asn":0,"as":"","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://iw63v.crqeraf.xyz/archives/65129/","date":"2025-12-23T14:29:56.097Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"crqeraf.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 12 Dec 2025 08:17:25 GMT","end":"Thu, 12 Mar 2026 09:15:12 GMT"},"fingerprint":{"sha1":"9A:B6:D6:FC:9F:B5:E4:7C:4E:60:81:74:C5:1D:1F:16:43:65:9B:C0","sha256":"6B:D5:92:C2:2E:E8:B1:3D:EE:9E:2C:51:0B:D3:32:29:71:17:1E:3D:93:07:59:A9:C9:59:7C:A8:D8:9B:2B:8C"}}},"request":{"raw":"GET /static/ai/js/ai.js?v=20251130 HTTP/1.1\r\nHost: iw63v.crqeraf.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://iw63v.crqeraf.xyz/archives/65129/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 23 Dec 2025 14:29:55 GMT\r\ncontent-type: application/javascript\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\nlast-modified: Fri, 05 Dec 2025 04:45:01 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6932634d-8557\"\r\nexpires: Tue, 30 Dec 2025 07:16:37 GMT\r\ncache-control: public, max-age=604800, immutable\r\ncontent-encoding: gzip\r\nage: 25998\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nwuUqj7y6ezLcsj8lDUaNol%2BQNPvXpUuq5xosB0UzD65UhNYVq4nH8yW%2Fma12ehitXVmTUvLDqSaWsLLwPiRxVu3LHkkxCm7ddoMknw2yw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b288dd0ab6e56b4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":34135,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (301)","md5":"3df4e593c313e4323fa6872a6fafe78f","sha1":"85c1a1b9d38a2a8a583aaf0f90dee8744fcb3dd0","sha256":"3f8c3580ebefab3c559bed8510c51d50cfd0429bb83a47f564a46db4995dce93","sha512":"b6e7a9b5678af66fce9caf20275a0a3a35b1f68a857e14e93b2f20f4a2fd8a315201c431ad2f8e2290574ae5ec8a2f3a4d3c7cdbe37c6b1dfbf5c6057ff03c29","ssdeep":"768:8cHpTv3C8bzpCVrxio4I7qBkJi7xCj8nYm63PqK+EZER:pHNXbodTO+c7MwYPiK8","tlshash":"03e293999bff11274793a01e2f4f60583928d0672a02cd5dbf8c93945fc993891e2bf5","first_seen":"2025-12-06T00:36:57.658246Z","last_seen":"2026-04-03T18:18:51.56062Z","times_seen":5658,"resource_available":true,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-23","alert":"Sinkholed","trigger":"iw63v.crqeraf.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"iw63v.crqeraf.xyz/static/pc/img/messanger.75aeeef.png","fqdn":"iw63v.crqeraf.xyz","domain":"crqeraf.xyz","tld":"xyz"},"ip":{"addr":"154.207.127.39","port":443,"asn":0,"as":"","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://iw63v.crqeraf.xyz/archives/65129/","date":"2025-12-23T14:29:56.110Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"crqeraf.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 12 Dec 2025 08:17:25 GMT","end":"Thu, 12 Mar 2026 09:15:12 GMT"},"fingerprint":{"sha1":"9A:B6:D6:FC:9F:B5:E4:7C:4E:60:81:74:C5:1D:1F:16:43:65:9B:C0","sha256":"6B:D5:92:C2:2E:E8:B1:3D:EE:9E:2C:51:0B:D3:32:29:71:17:1E:3D:93:07:59:A9:C9:59:7C:A8:D8:9B:2B:8C"}}},"request":{"raw":"GET /static/pc/img/messanger.75aeeef.png HTTP/1.1\r\nHost: iw63v.crqeraf.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://iw63v.crqeraf.xyz/archives/65129/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 23 Dec 2025 14:29:55 GMT\r\ncontent-type: image/png\r\ncontent-length: 1903\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\nlast-modified: Sat, 13 Sep 2025 03:47:28 GMT\r\netag: \"68c4e950-76f\"\r\nexpires: Mon, 29 Dec 2025 07:49:08 GMT\r\ncache-control: public, max-age=604800, immutable\r\naccept-ranges: bytes\r\nage: 110447\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RCBW9TUPTKLRwGosTJAr9z9d6gagbrnQ0lxuO3IRhOK7K4gjgYbmSIBIChsh6yN3Nf6Z%2BTR5PulJ%2BLFIkJeQ9NHQwwyyhGmKOFyi%2FlRRSQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b288dd0ab7156b4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1903,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 50 x 48, 8-bit/color RGBA, non-interlaced","md5":"5c738c5c5244a35ac4c781fc85d31ad8","sha1":"461f31d661054b17a54538f40e55bd7067959680","sha256":"308df41c117b8e2df2113bdf51bb1b28ddc6fb8b848dbcb8bd681bec7001ae18","sha512":"eee19aff952a10e4de5b3f01483c3255b32832c104773b639dbfd252051ce70bbf82fd0560485c8d0d201fdb3209862193ac22e918e90101725aeca551d196f2","ssdeep":"","tlshash":"1741fb918fdb787bcae09c374c557666886e6063135c86583f8583335d87542452d708","first_seen":"2023-09-24T18:31:27Z","last_seen":"2026-04-03T18:43:45.391549Z","times_seen":7866,"resource_available":false,"data":null}},"time_used":40,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":40,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-23","alert":"Sinkholed","trigger":"iw63v.crqeraf.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pic.wdsrie.cn/upload_01/upload/20250702/2025070211482292301.gif","fqdn":"pic.wdsrie.cn","domain":"wdsrie.cn","tld":"cn"},"ip":{"addr":"43.152.140.79","port":443,"asn":139341,"as":"ACE","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://iw63v.crqeraf.xyz/archives/65129/","date":"2025-12-23T14:29:57.289Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.wdsrie.cn","organization":""},"issuer":{"commonName":"ZeroSSL ECC Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Sat, 20 Dec 2025 00:00:00 GMT","end":"Fri, 20 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E9:73:86:E2:44:76:13:6D:6B:AE:EE:E0:BA:B0:C0:68:B0:97:37:B8","sha256":"B9:DF:B5:64:69:80:D3:48:0B:F1:C2:39:96:52:89:9A:DE:23:24:F8:50:8B:E3:B3:38:A6:99:51:B3:9A:55:5E"}}},"request":{"raw":"GET /upload_01/upload/20250702/2025070211482292301.gif HTTP/1.1\r\nHost: pic.wdsrie.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://iw63v.crqeraf.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Wed, 02 Jul 2025 03:53:35 GMT\r\nEtag: \"dbe879effef99f57bfa0f7c16c16d026\"\r\nContent-Type: binary/octet-stream\r\nDate: Sat, 26 Jul 2025 01:30:17 GMT\r\nx-amz-server-side-encryption: AES256\r\nServer: nginx\r\nX-Cache: Hit from cloudfront\r\nX-Amz-Cf-Pop: ARN53-P2\r\nAge: 35737\r\nContent-Length: 514720\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 9572399542078847252\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\nAccess-Control-Allow-Origin: *\r\nCache-Control: max-age=864000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":514720,"size_decoded":0,"mime_type":"binary/octet-stream","magic":"data","md5":"dbe879effef99f57bfa0f7c16c16d026","sha1":"6061a6a5b072f4df60630b88c30edbc2497c769a","sha256":"d2214a6ebead19e09f1a3b3f65cd06cb86ecca112be0fb99b8808d359840995a","sha512":"19f9de48a4f705d91d054996ec73b73bb883cac4abd03d54369aea5f1d704c28b49775bf8bc57e88ddf3eaa7d34d78bb2fe4a757b8bf7f40f75a752d51bd9c41","ssdeep":"12288:CJuy8oi0TJE9h0N91jNxSZTH8M8AsnLe8MojG1LQa0nMilKPO/:CJuVoS9yN91HS1jwi5KG1LVilKY","tlshash":"3db4235a130087c9ab35c7ce93ce75fa13b8d3a583b6e1cb9796f5e48a442c031914fa","first_seen":"2025-07-02T04:01:10.646754Z","last_seen":"2026-04-03T18:18:51.602457Z","times_seen":2435,"resource_available":false,"data":null}},"time_used":1089,"timings":{"blocked":1023,"dns":0,"connect":0,"send":0,"wait":47,"receive":19,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pic.wdsrie.cn/upload_01/upload/20250702/2025070211480039778.gif","fqdn":"pic.wdsrie.cn","domain":"wdsrie.cn","tld":"cn"},"ip":{"addr":"43.152.140.79","port":443,"asn":139341,"as":"ACE","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://iw63v.crqeraf.xyz/archives/65129/","date":"2025-12-23T14:29:57.697Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.wdsrie.cn","organization":""},"issuer":{"commonName":"ZeroSSL ECC Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Sat, 20 Dec 2025 00:00:00 GMT","end":"Fri, 20 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E9:73:86:E2:44:76:13:6D:6B:AE:EE:E0:BA:B0:C0:68:B0:97:37:B8","sha256":"B9:DF:B5:64:69:80:D3:48:0B:F1:C2:39:96:52:89:9A:DE:23:24:F8:50:8B:E3:B3:38:A6:99:51:B3:9A:55:5E"}}},"request":{"raw":"GET /upload_01/upload/20250702/2025070211480039778.gif HTTP/1.1\r\nHost: pic.wdsrie.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://iw63v.crqeraf.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Wed, 02 Jul 2025 03:48:06 GMT\r\nEtag: \"5581ce494f3e4a4512e4815b453fa129\"\r\nContent-Type: binary/octet-stream\r\nDate: Sat, 26 Jul 2025 11:01:42 GMT\r\nx-amz-server-side-encryption: AES256\r\nServer: nginx\r\nX-Cache: Hit from cloudfront\r\nX-Amz-Cf-Pop: ARN53-P2\r\nAge: 1454\r\nContent-Length: 49936\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 16912991162188890530\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\nAccess-Control-Allow-Origin: *\r\nCache-Control: max-age=864000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":49936,"size_decoded":0,"mime_type":"binary/octet-stream","magic":"data","md5":"5581ce494f3e4a4512e4815b453fa129","sha1":"7534b65c2fb2b133b2daad0a4e827772de18ea7e","sha256":"f039de9facc92aa013630e63193fcec40b997586924e3f55f98e3e6f1e3e497c","sha512":"23390371443e780e97468fb62be6f307d8b15b0e72c974579b27441aaebadb43b3a155a65e64732dda28aaaa051321b50d20d3d4e2044db5eb59fcbc6d711260","ssdeep":"768:PfFOithJoeFCVmT748W1DxKRlt2J2Yq3JUj9XdGtLEDFafljwgnhi2SseZFqh+cT:Pf9iWmPJzq3J89+wDFAVwCisXh+ckA","tlshash":"8c2302c16b4b859971d104618c2fff5c08f82673ad06f2b06f0eedc66248676b78ad0b","first_seen":"2025-07-02T04:01:10.728783Z","last_seen":"2026-01-03T16:57:32.61011Z","times_seen":2412,"resource_available":false,"data":null}},"time_used":848,"timings":{"blocked":838,"dns":0,"connect":0,"send":0,"wait":8,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mts.delipu.cc/videos5/403afd70c1d30e3a3715e9f87c3b069d/403afd70c1d30e3a3715e9f87c3b069d2.ts?auth_key=1766500203-46-0-b855d814722d990b4fdbed14a2ae341e","fqdn":"mts.delipu.cc","domain":"delipu.cc","tld":"cc"},"ip":{"addr":"101.33.21.239","port":443,"asn":139341,"as":"ACE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://iw63v.crqeraf.xyz/archives/65129/","date":"2025-12-23T14:30:05.750Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.delipu.cc","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 23 Dec 2025 04:27:53 GMT","end":"Mon, 23 Mar 2026 04:27:52 GMT"},"fingerprint":{"sha1":"B7:E4:49:5C:56:14:FE:A1:A7:00:9F:AE:7C:7B:20:42:52:92:C6:D2","sha256":"93:53:B7:A0:BD:28:6C:69:53:D7:7C:E7:23:F0:6C:EB:FA:F9:EC:90:B4:4E:76:8F:F9:8F:9B:FE:8A:BD:F2:32"}}},"request":{"raw":"GET /videos5/403afd70c1d30e3a3715e9f87c3b069d/403afd70c1d30e3a3715e9f87c3b069d2.ts?auth_key=1766500203-46-0-b855d814722d990b4fdbed14a2ae341e HTTP/1.1\r\nHost: mts.delipu.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://iw63v.crqeraf.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nEtag: \"fa7deb198fbd825b7d4dff742089240b\"\r\nContent-Type: binary/octet-stream\r\nDate: Tue, 23 Dec 2025 14:29:57 GMT\r\nx-amz-server-side-encryption: AES256\r\nServer: nginx\r\nX-Cache: Miss from cloudfront\r\nX-Amz-Cf-Pop: LAX53-P6\r\nVary: Origin\r\nLast-Modified: Tue, 08 Apr 2025 09:06:48 GMT\r\nContent-Length: 1372416\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 8866805299268367860\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit, Cache Miss\r\nAccess-Control-Allow-Origin: *\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1372416,"size_decoded":0,"mime_type":"binary/octet-stream","magic":"data","md5":"12660d03f88ea4d3a2d01dd598e93da3","sha1":"f2c3a3b98e9e52522dba4d1df8bf4f5ab811449d","sha256":"27929cf0cc6786b61d34e8890152dec7f2df7347b8dcf8e16c05ba299bd33f26","sha512":"8414324f91c598ed781201cb0001143494b463482a06479136440ee56a15867969b58f018eaea07b2fe4564f7341b9e9bbb1f5720fe865d56683ee074dc6017c","ssdeep":"24576:HConn2WTevCXPxFBAa2Pxe67AC8UWT9bi6sQR:HCwRyvI4a6e6zrUkl0","tlshash":"1a2523fbacc7bcf5bb6a048694eac9efe4ad891802f5270e37d590764d4c0c294c6758","first_seen":"2025-11-19T02:59:39.727568Z","last_seen":"2025-12-23T14:30:42.352194Z","times_seen":2,"resource_available":false,"data":null}},"time_used":208,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":161,"receive":47,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"iw63v.crqeraf.xyz/static/common/vant.css?v=20251130","fqdn":"iw63v.crqeraf.xyz","domain":"crqeraf.xyz","tld":"xyz"},"ip":{"addr":"154.207.127.39","port":443,"asn":0,"as":"","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://iw63v.crqeraf.xyz/archives/65129/","date":"2025-12-23T14:29:55.980Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"crqeraf.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 12 Dec 2025 08:17:25 GMT","end":"Thu, 12 Mar 2026 09:15:12 GMT"},"fingerprint":{"sha1":"9A:B6:D6:FC:9F:B5:E4:7C:4E:60:81:74:C5:1D:1F:16:43:65:9B:C0","sha256":"6B:D5:92:C2:2E:E8:B1:3D:EE:9E:2C:51:0B:D3:32:29:71:17:1E:3D:93:07:59:A9:C9:59:7C:A8:D8:9B:2B:8C"}}},"request":{"raw":"GET /static/common/vant.css?v=20251130 HTTP/1.1\r\nHost: iw63v.crqeraf.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://iw63v.crqeraf.xyz/archives/65129/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 23 Dec 2025 14:29:55 GMT\r\ncontent-type: text/css\r\npriority: u=2,i=?0\r\nserver: cloudflare\r\nlast-modified: Thu, 20 Nov 2025 11:34:19 GMT\r\nvary: Accept-Encoding\r\netag: W/\"691efcbb-30a89\"\r\nexpires: Tue, 30 Dec 2025 07:16:52 GMT\r\ncache-control: public, max-age=604800, immutable\r\ncontent-encoding: gzip\r\nage: 25983\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UtSuhpvaZEI%2BcJ6aRiR92u7infUlaxL9%2Fx%2BQ3QGDUVEq8ZU0c1Vh4F4RlTcU70ATTy6T0S9iq070APDdKfQZ9Di7L8yQEsNOkuD2pomz1A%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b288dd04b0556b4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":199305,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"ec97f98b8f11e72ca35d2a8939500e67","sha1":"fcdcaecbd29eb74c4d507c0f23d3758052aba3eb","sha256":"52fcb2a7486d329611d7fc1562e0dbcde9f4494728b88dc26932388fee77391f","sha512":"16ec7dfa0d84e113ac71cf66bc4aa1659d3a9089fe76c8e2834d0bd1ee25db5fb2ad0dfe35dbb9ba2340957396a603a09c8ebbacf49c90a65df12f522d9b851d","ssdeep":"1536:VjQbFNJ+jqkiHckCwsBlDOFIxuVoxJPBik/1Al5aIzb2VTVaxA:VuClDsIxuVSmRdJA","tlshash":"ec149495e69091bcbf27f275ab8b96dcf23cf560ed01daa4f10051580ec7bf50623a1a","first_seen":"2025-06-27T04:20:30.581604Z","last_seen":"2026-04-03T18:40:13.066063Z","times_seen":21859,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-23","alert":"Sinkholed","trigger":"iw63v.crqeraf.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pic.wdsrie.cn/upload/upload/20230217/2023021719405639284.png","fqdn":"pic.wdsrie.cn","domain":"wdsrie.cn","tld":"cn"},"ip":{"addr":"43.152.140.79","port":443,"asn":139341,"as":"ACE","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://iw63v.crqeraf.xyz/archives/65129/","date":"2025-12-23T14:29:56.998Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.wdsrie.cn","organization":""},"issuer":{"commonName":"ZeroSSL ECC Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Sat, 20 Dec 2025 00:00:00 GMT","end":"Fri, 20 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E9:73:86:E2:44:76:13:6D:6B:AE:EE:E0:BA:B0:C0:68:B0:97:37:B8","sha256":"B9:DF:B5:64:69:80:D3:48:0B:F1:C2:39:96:52:89:9A:DE:23:24:F8:50:8B:E3:B3:38:A6:99:51:B3:9A:55:5E"}}},"request":{"raw":"GET /upload/upload/20230217/2023021719405639284.png HTTP/1.1\r\nHost: pic.wdsrie.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://iw63v.crqeraf.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Thu, 28 Dec 2023 12:24:12 GMT\r\nEtag: \"76d870c413c56866770f79c0c3543ded\"\r\nContent-Type: binary/octet-stream\r\nDate: Sat, 26 Jul 2025 05:48:43 GMT\r\nx-amz-server-side-encryption: AES256\r\nServer: nginx\r\nX-Cache: Hit from cloudfront\r\nX-Amz-Cf-Pop: ARN53-P2\r\nAge: 20025\r\nContent-Length: 432\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 5297123164602394036\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\nAccess-Control-Allow-Origin: *\r\nCache-Control: max-age=864000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":432,"size_decoded":0,"mime_type":"binary/octet-stream","magic":"data","md5":"76d870c413c56866770f79c0c3543ded","sha1":"6863746e315aff67588015e3b325cf0f43377ef6","sha256":"0e579f3fff4efdaf535cc745445ac9135769a7d32aba0fb2e6c4150931604f5a","sha512":"9e01f5c34d8f24c081f715bd28f63906e7d542ff0c0416bc698874811f56218c6e60f14934557d537f410e4ea20e599d82103e2a31d7cdd02153971b64925639","ssdeep":"","tlshash":"d8e023cc617546d45017d8645f3020c26559d283d42cee30e86252db562095d47c5b02","first_seen":"2023-09-24T18:31:27Z","last_seen":"2026-04-03T18:43:45.41808Z","times_seen":7797,"resource_available":false,"data":null}},"time_used":117,"timings":{"blocked":107,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pic.wdsrie.cn/upload_01/upload/20251120/2025112020231699432.gif","fqdn":"pic.wdsrie.cn","domain":"wdsrie.cn","tld":"cn"},"ip":{"addr":"43.152.140.79","port":443,"asn":139341,"as":"ACE","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://iw63v.crqeraf.xyz/archives/65129/","date":"2025-12-23T14:29:57.315Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.wdsrie.cn","organization":""},"issuer":{"commonName":"ZeroSSL ECC Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Sat, 20 Dec 2025 00:00:00 GMT","end":"Fri, 20 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E9:73:86:E2:44:76:13:6D:6B:AE:EE:E0:BA:B0:C0:68:B0:97:37:B8","sha256":"B9:DF:B5:64:69:80:D3:48:0B:F1:C2:39:96:52:89:9A:DE:23:24:F8:50:8B:E3:B3:38:A6:99:51:B3:9A:55:5E"}}},"request":{"raw":"GET /upload_01/upload/20251120/2025112020231699432.gif HTTP/1.1\r\nHost: pic.wdsrie.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://iw63v.crqeraf.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Thu, 20 Nov 2025 12:23:28 GMT\r\nEtag: \"37b1aebec65be43e8089cd79c1ee80bf\"\r\nContent-Type: binary/octet-stream\r\nDate: Thu, 20 Nov 2025 12:23:45 GMT\r\nx-amz-server-side-encryption: AES256\r\nServer: nginx\r\nX-Cache: Hit from cloudfront\r\nX-Amz-Cf-Pop: ARN53-P2\r\nAge: 14\r\nContent-Length: 116816\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 277156852355874833\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\nAccess-Control-Allow-Origin: *\r\nCache-Control: max-age=864000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":116816,"size_decoded":0,"mime_type":"binary/octet-stream","magic":"data","md5":"37b1aebec65be43e8089cd79c1ee80bf","sha1":"f84792704007393d237c13a21fd0fd3847e85bfb","sha256":"043938bbf4a79bf6e9fbe5c73990255083ff71745e47e09530bb830fe252245a","sha512":"add3f12e171a896077ca6396bcc7f34275b0c467f85b90d1d183a4037a682c64af4b9075b83ea01adfd6dbe803fcfeb1711b3b4ac855613f71339272adff025f","ssdeep":"3072:qRKr3Qs7Mkv52ml8/ZrL8ZMUEsDesPhXQkhCSN:qwN7MkR4rwZMuDesPhXLhCSN","tlshash":"58b312a80a164c54193f7755d28c9ed2f740f6bc96227c5c84be0b75785883c89facca","first_seen":"2025-11-21T00:42:42.084993Z","last_seen":"2025-12-27T07:41:52.04354Z","times_seen":2015,"resource_available":false,"data":null}},"time_used":1131,"timings":{"blocked":1089,"dns":0,"connect":0,"send":0,"wait":39,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"iw63v.crqeraf.xyz/static/pc/js/hls.min.js?v=20251130","fqdn":"iw63v.crqeraf.xyz","domain":"crqeraf.xyz","tld":"xyz"},"ip":{"addr":"154.207.127.39","port":443,"asn":0,"as":"","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://iw63v.crqeraf.xyz/archives/65129/","date":"2025-12-23T14:29:55.954Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"crqeraf.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 12 Dec 2025 08:17:25 GMT","end":"Thu, 12 Mar 2026 09:15:12 GMT"},"fingerprint":{"sha1":"9A:B6:D6:FC:9F:B5:E4:7C:4E:60:81:74:C5:1D:1F:16:43:65:9B:C0","sha256":"6B:D5:92:C2:2E:E8:B1:3D:EE:9E:2C:51:0B:D3:32:29:71:17:1E:3D:93:07:59:A9:C9:59:7C:A8:D8:9B:2B:8C"}}},"request":{"raw":"GET /static/pc/js/hls.min.js?v=20251130 HTTP/1.1\r\nHost: iw63v.crqeraf.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://iw63v.crqeraf.xyz/archives/65129/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 23 Dec 2025 14:29:55 GMT\r\ncontent-type: application/javascript\r\npriority: u=2,i=?0\r\nserver: cloudflare\r\nlast-modified: Sat, 13 Sep 2025 03:47:28 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68c4e950-5b409\"\r\nexpires: Tue, 30 Dec 2025 07:16:35 GMT\r\ncache-control: public, max-age=604800, immutable\r\ncontent-encoding: gzip\r\nage: 25999\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LbyuaF6Mp4crutZQp0%2BCPFUswcuCJRFHYmXaw2ZBAFjwVQBjVD73rvS2zf3%2Bj6rkKkUrqnsg1Dn3zIrWDVO1buHjuKZLcoIfdkoQPTlhjw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b288dd03afa56b4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":373769,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"df56bec92a2f579159dcdab086db21ed","sha1":"cad885a8b63aa0fc473319e5200a3c42917b92cd","sha256":"e1c1061bd567af4a4809ad30c93f830c566735f59a6a1080d3b3216df50a6b1c","sha512":"07bde06e05cc907f4195484c1d1bf3cd23aabc9cf913528cebb67194a850b53c719bf2d67bac440d784bd7ce42a465140ec6b4f7ac344d131ff9b895870763d4","ssdeep":"6144:qg2vDNaAQsJOEGPkI+lQ1ysXqJx0eR8y7j/lO:oNQskEGPkVK5qJxntO","tlshash":"3c843cdd7655a06643c2a1a4903f8607623bbd0b3409c1acfa2be9d75cb994db03bf74","first_seen":"2023-10-15T11:56:14Z","last_seen":"2026-04-03T18:43:45.411639Z","times_seen":7241,"resource_available":true,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-23","alert":"Sinkholed","trigger":"iw63v.crqeraf.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"iw63v.crqeraf.xyz/static/pc/img/share-txt1.png","fqdn":"iw63v.crqeraf.xyz","domain":"crqeraf.xyz","tld":"xyz"},"ip":{"addr":"154.207.127.39","port":443,"asn":0,"as":"","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://iw63v.crqeraf.xyz/archives/65129/","date":"2025-12-23T14:29:56.054Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"crqeraf.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 12 Dec 2025 08:17:25 GMT","end":"Thu, 12 Mar 2026 09:15:12 GMT"},"fingerprint":{"sha1":"9A:B6:D6:FC:9F:B5:E4:7C:4E:60:81:74:C5:1D:1F:16:43:65:9B:C0","sha256":"6B:D5:92:C2:2E:E8:B1:3D:EE:9E:2C:51:0B:D3:32:29:71:17:1E:3D:93:07:59:A9:C9:59:7C:A8:D8:9B:2B:8C"}}},"request":{"raw":"GET /static/pc/img/share-txt1.png HTTP/1.1\r\nHost: iw63v.crqeraf.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://iw63v.crqeraf.xyz/archives/65129/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 23 Dec 2025 14:29:55 GMT\r\ncontent-type: image/png\r\ncontent-length: 102624\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\nlast-modified: Sat, 13 Sep 2025 03:47:28 GMT\r\netag: \"68c4e950-190e0\"\r\nexpires: Mon, 29 Dec 2025 07:49:08 GMT\r\ncache-control: public, max-age=604800, immutable\r\naccept-ranges: bytes\r\nage: 110447\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nmWQCs2suEi%2BmnRAFNa1yo0kJKJNVXi8yFsIXTq5J0nNeWO7aINk45dYJ97MGPh7B9fBDc1zpTX%2Fyf1HaG%2FLhcZlb0Mm9c3fi4NuJ9f8AA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b288dd0ab5f56b4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":102624,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 750 x 176, 8-bit/color RGBA, non-interlaced","md5":"092a7bbfed9b6cf9371340612cd82c6f","sha1":"6b3c79ed84bb2f94723affd0c12d1831043ed079","sha256":"b2e294920701ef781aa77eae5b63793f08eb187ee15de56304719439c740a9da","sha512":"9f8cabdfed0a9f1ff6f0a24b279ff8e86164213814affbb89bc60d2e1a22fb92947572a4844c355462ce8fe17652e3d8d9989d2740f714286a13fe575df8b51e","ssdeep":"3072:H8d2XPYzwccu8jUexONfITcqAOGUJGvDCO:H8uPYzZc5ONfec5vDD","tlshash":"02a312239dfe71c6bdcf7295b6be807462b941a50af13f887016ddae05c4e1922d83c5","first_seen":"2025-06-20T06:06:23.087008Z","last_seen":"2026-04-03T18:43:45.456649Z","times_seen":7062,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":12,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-23","alert":"Sinkholed","trigger":"iw63v.crqeraf.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"iw63v.crqeraf.xyz/static/pc/img/share-copy-ok1.png","fqdn":"iw63v.crqeraf.xyz","domain":"crqeraf.xyz","tld":"xyz"},"ip":{"addr":"154.207.127.39","port":443,"asn":0,"as":"","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://iw63v.crqeraf.xyz/archives/65129/","date":"2025-12-23T14:29:56.056Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"crqeraf.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 12 Dec 2025 08:17:25 GMT","end":"Thu, 12 Mar 2026 09:15:12 GMT"},"fingerprint":{"sha1":"9A:B6:D6:FC:9F:B5:E4:7C:4E:60:81:74:C5:1D:1F:16:43:65:9B:C0","sha256":"6B:D5:92:C2:2E:E8:B1:3D:EE:9E:2C:51:0B:D3:32:29:71:17:1E:3D:93:07:59:A9:C9:59:7C:A8:D8:9B:2B:8C"}}},"request":{"raw":"GET /static/pc/img/share-copy-ok1.png HTTP/1.1\r\nHost: iw63v.crqeraf.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://iw63v.crqeraf.xyz/archives/65129/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 23 Dec 2025 14:29:55 GMT\r\ncontent-type: image/png\r\ncontent-length: 114943\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\nlast-modified: Sat, 13 Sep 2025 03:47:28 GMT\r\netag: \"68c4e950-1c0ff\"\r\nexpires: Sun, 28 Dec 2025 18:19:08 GMT\r\ncache-control: public, max-age=604800, immutable\r\naccept-ranges: bytes\r\nage: 159047\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6Wem3wNR%2BQi2EIETyju6Ql67Y9qjjj%2FzSp7oHI3jxmm2AeIUk2D%2B4kz3r0%2FaJ0MXPjZYNC%2BjjN2ovdIIU%2BXxr4KWboeFCw1rJXhr2m6LzA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b288dd0ab6056b4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":114943,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 750 x 176, 8-bit/color RGBA, non-interlaced","md5":"e12bf413a93557e1f37d62c66d730cd0","sha1":"5e96c96d2e2bed8f3a4c9eca63cbba5e46601d9d","sha256":"fab314b67537d38dfb7a54c8c09c6664098b59470e22707ba68d763a26f7cedd","sha512":"cbe80052ee8cb15edc25c040348d1535b16c8224989def4431d86e243c03e3c1001fc8794dcf38ab0474d6ef3a9268156333c7a2dbe6702c9e1888d94c632059","ssdeep":"3072:B2ddbq4IlffEoE7bGGns6Ig8EB3JR4n9a6FW:AddW4C817bGGnsWBQnnW","tlshash":"79b31237a2641665c2e3136b29c3352d0f793f2258bef2b59ac15aa14a785fcc2c40b9","first_seen":"2025-06-20T06:06:23.046069Z","last_seen":"2026-04-03T18:43:45.427196Z","times_seen":7060,"resource_available":false,"data":null}},"time_used":40,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-23","alert":"Sinkholed","trigger":"iw63v.crqeraf.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pic.wdsrie.cn/upload_01/upload/20251120/2025112016321614757.gif","fqdn":"pic.wdsrie.cn","domain":"wdsrie.cn","tld":"cn"},"ip":{"addr":"43.152.140.79","port":443,"asn":139341,"as":"ACE","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://iw63v.crqeraf.xyz/archives/65129/","date":"2025-12-23T14:29:57.239Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.wdsrie.cn","organization":""},"issuer":{"commonName":"ZeroSSL ECC Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Sat, 20 Dec 2025 00:00:00 GMT","end":"Fri, 20 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E9:73:86:E2:44:76:13:6D:6B:AE:EE:E0:BA:B0:C0:68:B0:97:37:B8","sha256":"B9:DF:B5:64:69:80:D3:48:0B:F1:C2:39:96:52:89:9A:DE:23:24:F8:50:8B:E3:B3:38:A6:99:51:B3:9A:55:5E"}}},"request":{"raw":"GET /upload_01/upload/20251120/2025112016321614757.gif HTTP/1.1\r\nHost: pic.wdsrie.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://iw63v.crqeraf.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Thu, 20 Nov 2025 08:32:23 GMT\r\nEtag: \"59fb015b3020282c85bf3581a41c8b87\"\r\nContent-Type: binary/octet-stream\r\nDate: Thu, 20 Nov 2025 08:32:31 GMT\r\nx-amz-server-side-encryption: AES256\r\nServer: nginx\r\nX-Cache: Hit from cloudfront\r\nX-Amz-Cf-Pop: ARN53-P2\r\nAge: 40\r\nContent-Length: 90336\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 122227115113685680\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\nAccess-Control-Allow-Origin: *\r\nCache-Control: max-age=864000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":90336,"size_decoded":0,"mime_type":"binary/octet-stream","magic":"data","md5":"59fb015b3020282c85bf3581a41c8b87","sha1":"b87bc39ad3422455960a3c1fb1417a9f2cddc05f","sha256":"ed37473f74532fee2deccd7eb0d4bc8d2c79759ebe5358dd768a14774ebfbe0d","sha512":"fce4841d1c8ccda31c53fa35867d16f3665fa8e0db0a1914d14468f2d234fcba2e3ca0c7a74ee2ff016792a4fb1bcaf3da0b545a64aa51ead477b6652a101e61","ssdeep":"1536:c9P7Agz1ZT2x0uUFKhdq+3jA5k8jHNOT1zzwCo4RYpJGy0b+ps55syeEqntFDQYh:c1ClZ3jA5djH0lwR4mp/s55ctwGEKd","tlshash":"41931258b464993cba95f2633ce33be10a5781c4a0a9d4fe0df5710746f4dc892a02f6","first_seen":"2025-11-21T00:42:42.130028Z","last_seen":"2026-02-10T15:27:36.514734Z","times_seen":3960,"resource_available":false,"data":null}},"time_used":936,"timings":{"blocked":923,"dns":0,"connect":0,"send":0,"wait":10,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"iw63v.crqeraf.xyz/static/web/assets/index.js?v=20251130","fqdn":"iw63v.crqeraf.xyz","domain":"crqeraf.xyz","tld":"xyz"},"ip":{"addr":"154.207.127.39","port":443,"asn":0,"as":"","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://iw63v.crqeraf.xyz/archives/65129/","date":"2025-12-23T14:29:55.959Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"crqeraf.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 12 Dec 2025 08:17:25 GMT","end":"Thu, 12 Mar 2026 09:15:12 GMT"},"fingerprint":{"sha1":"9A:B6:D6:FC:9F:B5:E4:7C:4E:60:81:74:C5:1D:1F:16:43:65:9B:C0","sha256":"6B:D5:92:C2:2E:E8:B1:3D:EE:9E:2C:51:0B:D3:32:29:71:17:1E:3D:93:07:59:A9:C9:59:7C:A8:D8:9B:2B:8C"}}},"request":{"raw":"GET /static/web/assets/index.js?v=20251130 HTTP/1.1\r\nHost: iw63v.crqeraf.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://iw63v.crqeraf.xyz/archives/65129/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 23 Dec 2025 14:29:55 GMT\r\ncontent-type: application/javascript\r\npriority: u=2,i=?0\r\nserver: cloudflare\r\nlast-modified: Tue, 23 Dec 2025 06:52:29 GMT\r\nvary: Accept-Encoding\r\netag: W/\"694a3c2d-1382\"\r\nexpires: Tue, 30 Dec 2025 07:16:35 GMT\r\ncache-control: public, max-age=604800, immutable\r\ncontent-encoding: gzip\r\nage: 25999\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NYLlsHrNaXSE7h2QSoNXgp1nLb2KSKo6tXe6C4uRtDm%2FxAri4R%2BSF1KqzYWjFV41jfBlRnlCbad57TM%2F2HHAVc%2Fntp9I4M2A8QZqsJyRBg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b288dd04afe56b4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4994,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with CRLF line terminators","md5":"16f356501a0ae311ce5315e14c36e4f4","sha1":"edf0cfc5450141e85f4ebeba9f93c2f704b8d6d7","sha256":"341c81ac8b5cf8483f5755c29af8873235f3bdcdde8d0246cf22f182838d2119","sha512":"0b56ac8e90a39bb8ed9f9d1df1356d7fe0b591fa00278efd097774d13adce9569e27ec9a1ec4dfa0fbc03d1141e4a7aa2be1046f9e6090450cc30d0936fb70f5","ssdeep":"96:+AFI/M25FrH9nWwnym0uGCLScjLqEi9m+mvemi:+su951Iwnym0/CLwm+mWmi","tlshash":"a7a1324c1674203141b7a3becf67a648eb353117a20259687d9ecb846fb153983a3fcd","first_seen":"2025-12-23T08:10:49.312025Z","last_seen":"2026-01-17T05:31:57.849703Z","times_seen":530,"resource_available":true,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-23","alert":"Sinkholed","trigger":"iw63v.crqeraf.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"iw63v.crqeraf.xyz/static/pc/img/float.png","fqdn":"iw63v.crqeraf.xyz","domain":"crqeraf.xyz","tld":"xyz"},"ip":{"addr":"154.207.127.39","port":443,"asn":0,"as":"","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://iw63v.crqeraf.xyz/archives/65129/","date":"2025-12-23T14:29:56.124Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"crqeraf.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 12 Dec 2025 08:17:25 GMT","end":"Thu, 12 Mar 2026 09:15:12 GMT"},"fingerprint":{"sha1":"9A:B6:D6:FC:9F:B5:E4:7C:4E:60:81:74:C5:1D:1F:16:43:65:9B:C0","sha256":"6B:D5:92:C2:2E:E8:B1:3D:EE:9E:2C:51:0B:D3:32:29:71:17:1E:3D:93:07:59:A9:C9:59:7C:A8:D8:9B:2B:8C"}}},"request":{"raw":"GET /static/pc/img/float.png HTTP/1.1\r\nHost: iw63v.crqeraf.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://iw63v.crqeraf.xyz/archives/65129/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 23 Dec 2025 14:29:55 GMT\r\ncontent-type: image/png\r\ncontent-length: 2142\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\nlast-modified: Sat, 13 Sep 2025 03:47:40 GMT\r\netag: \"68c4e95c-85e\"\r\nexpires: Fri, 26 Dec 2025 11:48:55 GMT\r\ncache-control: public, max-age=604800, immutable\r\naccept-ranges: bytes\r\nage: 355260\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Sp536Nb2wftQIoLg9iNDH470FFV0L%2FcY%2FRQngtKVS3yH3qmKN9pa1u1aGWKIuFoPNn8L9KbcMQg8LSC00pxkESvaM0NA5kga4ySBo24spw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b288dd0ab7456b4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2142,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 115 x 115, 8-bit/color RGB, non-interlaced","md5":"d78c0b6e00bf4e77290c981fd5864a11","sha1":"e9166d23689d34d56cfe6ab67bf72376ae4ae74e","sha256":"27aa6da98fc8267a6673d90cb58598b01da3b69879a2e1b0e2afc73d3e37131f","sha512":"25f2f235c025b645a21b1ad2535fa8bea7b6210149e707e4fca2629a771c10b16fbb4726819f68d5daf9d6247c5f4d5720696af20f4fced0a744cf3dba42c94c","ssdeep":"","tlshash":"8f41b541a0c5b68b84c91175e740e2939011847f9ee5f7e79cd713f34e554871a4cab4","first_seen":"2025-09-05T06:21:25.23646Z","last_seen":"2026-04-03T18:29:47.587637Z","times_seen":4438,"resource_available":false,"data":null}},"time_used":38,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":38,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-23","alert":"Sinkholed","trigger":"iw63v.crqeraf.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pic.wdsrie.cn/upload/upload/20230217/2023021719402159527.png","fqdn":"pic.wdsrie.cn","domain":"wdsrie.cn","tld":"cn"},"ip":{"addr":"43.152.140.79","port":443,"asn":139341,"as":"ACE","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://iw63v.crqeraf.xyz/archives/65129/","date":"2025-12-23T14:29:56.780Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.wdsrie.cn","organization":""},"issuer":{"commonName":"ZeroSSL ECC Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Sat, 20 Dec 2025 00:00:00 GMT","end":"Fri, 20 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E9:73:86:E2:44:76:13:6D:6B:AE:EE:E0:BA:B0:C0:68:B0:97:37:B8","sha256":"B9:DF:B5:64:69:80:D3:48:0B:F1:C2:39:96:52:89:9A:DE:23:24:F8:50:8B:E3:B3:38:A6:99:51:B3:9A:55:5E"}}},"request":{"raw":"GET /upload/upload/20230217/2023021719402159527.png HTTP/1.1\r\nHost: pic.wdsrie.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://iw63v.crqeraf.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Thu, 28 Dec 2023 12:24:12 GMT\r\nEtag: \"a3a341e91553049d39c3c1de0e419185\"\r\nContent-Type: binary/octet-stream\r\nDate: Sat, 26 Jul 2025 11:18:58 GMT\r\nx-amz-server-side-encryption: AES256\r\nServer: nginx\r\nX-Cache: Hit from cloudfront\r\nX-Amz-Cf-Pop: ARN53-P2\r\nAge: 295\r\nVary: Origin\r\nContent-Length: 352\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 17344763686774755963\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\nAccess-Control-Allow-Origin: *\r\nCache-Control: max-age=864000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":352,"size_decoded":0,"mime_type":"binary/octet-stream","magic":"data","md5":"a3a341e91553049d39c3c1de0e419185","sha1":"3e444ec88f6cce6f2439c3a0d9c8f47ab99cb110","sha256":"aee8a07bc08692f509ef0a8cc9763b974aff637df18bde1e1ae296fc902b2b5f","sha512":"e24afae2c4f2f41b046620e11386b0a68d07b44686c3881b980c7a191e10ea79b1ada205570c7699a01adba3b8db7c4dbf70edfb7f6dcebbba294c04bda5865e","ssdeep":"","tlshash":"e1e0c095eaf91ba2600ea03ed408c5114b5535864669d53d8000d9e80b2e5a4e3cdd7f","first_seen":"2023-09-24T18:31:27Z","last_seen":"2026-04-03T18:43:45.383104Z","times_seen":7529,"resource_available":false,"data":null}},"time_used":450,"timings":{"blocked":190,"dns":2,"connect":23,"send":0,"wait":24,"receive":2,"ssl":206},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pic.wdsrie.cn/upload_01/xiao/20251215/2025121521471256924.png","fqdn":"pic.wdsrie.cn","domain":"wdsrie.cn","tld":"cn"},"ip":{"addr":"43.152.140.79","port":443,"asn":139341,"as":"ACE","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://iw63v.crqeraf.xyz/archives/65129/","date":"2025-12-23T14:29:57.216Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.wdsrie.cn","organization":""},"issuer":{"commonName":"ZeroSSL ECC Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Sat, 20 Dec 2025 00:00:00 GMT","end":"Fri, 20 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E9:73:86:E2:44:76:13:6D:6B:AE:EE:E0:BA:B0:C0:68:B0:97:37:B8","sha256":"B9:DF:B5:64:69:80:D3:48:0B:F1:C2:39:96:52:89:9A:DE:23:24:F8:50:8B:E3:B3:38:A6:99:51:B3:9A:55:5E"}}},"request":{"raw":"GET /upload_01/xiao/20251215/2025121521471256924.png HTTP/1.1\r\nHost: pic.wdsrie.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://iw63v.crqeraf.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Mon, 15 Dec 2025 13:47:16 GMT\r\nEtag: \"d1d4775a549d609303a21b4d4b0c5614\"\r\nContent-Type: binary/octet-stream\r\nDate: Tue, 16 Dec 2025 17:10:11 GMT\r\nx-amz-server-side-encryption: AES256\r\nServer: nginx\r\nX-Cache: Miss from cloudfront\r\nX-Amz-Cf-Pop: ARN53-P2\r\nContent-Length: 243328\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 14090258913760821558\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\nAccess-Control-Allow-Origin: *\r\nCache-Control: max-age=864000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":243328,"size_decoded":0,"mime_type":"binary/octet-stream","magic":"data","md5":"d1d4775a549d609303a21b4d4b0c5614","sha1":"6a2e0cd077b557fc9c68f21848b9d145691bedb1","sha256":"1ccef19e1bf2c93f449b8c122d710a0669c4bb75a5a566a538318a7d6fd0d81a","sha512":"12c1b5286da7d9d943c252ea89a16e192af5e5823ddba2b4fa18b98230f75259920669f83ba1d1eb480f96c670a03adafba6fb2708b040683bcda4b98162d7ed","ssdeep":"3072:QA6QGh5hYHiexoF007NntAOcBjIlcriF9F2HzGoZf2GWe9v0lf54IiKMph8dW5uW:Q9h5hnJWSZtARBjINcF2e9HzH8dFI","tlshash":"1f3422022bc095dd612ac8ff3bbb5107cc469de75726eab142a3cf69751c9c6b409a3c","first_seen":"2025-12-23T14:30:42.370878Z","last_seen":"2025-12-23T14:30:42.370878Z","times_seen":1,"resource_available":false,"data":null}},"time_used":936,"timings":{"blocked":917,"dns":0,"connect":0,"send":0,"wait":9,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pic.wdsrie.cn/upload_01/upload/20251210/2025121016133297853.gif","fqdn":"pic.wdsrie.cn","domain":"wdsrie.cn","tld":"cn"},"ip":{"addr":"43.152.140.79","port":443,"asn":139341,"as":"ACE","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://iw63v.crqeraf.xyz/archives/65129/","date":"2025-12-23T14:29:57.698Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.wdsrie.cn","organization":""},"issuer":{"commonName":"ZeroSSL ECC Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Sat, 20 Dec 2025 00:00:00 GMT","end":"Fri, 20 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E9:73:86:E2:44:76:13:6D:6B:AE:EE:E0:BA:B0:C0:68:B0:97:37:B8","sha256":"B9:DF:B5:64:69:80:D3:48:0B:F1:C2:39:96:52:89:9A:DE:23:24:F8:50:8B:E3:B3:38:A6:99:51:B3:9A:55:5E"}}},"request":{"raw":"GET /upload_01/upload/20251210/2025121016133297853.gif HTTP/1.1\r\nHost: pic.wdsrie.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://iw63v.crqeraf.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Wed, 10 Dec 2025 08:17:23 GMT\r\nEtag: \"74cf67e05d04d4002999942e8f7c4d6b\"\r\nContent-Type: binary/octet-stream\r\nDate: Wed, 10 Dec 2025 08:19:00 GMT\r\nx-amz-server-side-encryption: AES256\r\nServer: nginx\r\nX-Cache: Hit from cloudfront\r\nX-Amz-Cf-Pop: ARN53-P2\r\nAge: 379\r\nContent-Length: 167792\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 9454444337870508424\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\nAccess-Control-Allow-Origin: *\r\nCache-Control: max-age=864000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":167792,"size_decoded":0,"mime_type":"binary/octet-stream","magic":"data","md5":"74cf67e05d04d4002999942e8f7c4d6b","sha1":"3cfcd619415fa6329c499c22630101d39b116628","sha256":"3c1005d333671deaa2f91da120151afa72a5e64ee314e36ed58cf6f94f62bad6","sha512":"cd910598d53a8552f2de230b21f5289ca55f7f0eb5dc168300fb418a062188eba82eb8c5ed34e43c85ba374338a5017527a9aa8d928880fbd6378c1e8f0e5e59","ssdeep":"3072:6lOBMk4C3xT7SvA2j4Db2NQFicM4VlvdYkdpk/8oklKeelQjGKgxLlTTV:ko1ruvjcGQfMMFF7k/89llXj4hV","tlshash":"f0f31378312381e3ad9fb38e365ead58ce4d8760498d59b05051d8f62fc1f7a7ea52c0","first_seen":"2025-09-10T01:13:31.24906Z","last_seen":"2026-01-19T03:45:18.406894Z","times_seen":1385,"resource_available":false,"data":null}},"time_used":866,"timings":{"blocked":838,"dns":0,"connect":0,"send":0,"wait":25,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pic.wdsrie.cn/upload_01/upload/20251213/2025121315052236701.gif","fqdn":"pic.wdsrie.cn","domain":"wdsrie.cn","tld":"cn"},"ip":{"addr":"43.152.140.79","port":443,"asn":139341,"as":"ACE","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://iw63v.crqeraf.xyz/archives/65129/","date":"2025-12-23T14:29:57.760Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.wdsrie.cn","organization":""},"issuer":{"commonName":"ZeroSSL ECC Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Sat, 20 Dec 2025 00:00:00 GMT","end":"Fri, 20 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E9:73:86:E2:44:76:13:6D:6B:AE:EE:E0:BA:B0:C0:68:B0:97:37:B8","sha256":"B9:DF:B5:64:69:80:D3:48:0B:F1:C2:39:96:52:89:9A:DE:23:24:F8:50:8B:E3:B3:38:A6:99:51:B3:9A:55:5E"}}},"request":{"raw":"GET /upload_01/upload/20251213/2025121315052236701.gif HTTP/1.1\r\nHost: pic.wdsrie.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://iw63v.crqeraf.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Sat, 13 Dec 2025 07:42:08 GMT\r\nEtag: \"60b11f0ec28a547ec02f951826990076\"\r\nContent-Type: binary/octet-stream\r\nDate: Sat, 13 Dec 2025 07:42:20 GMT\r\nx-amz-server-side-encryption: AES256\r\nServer: nginx\r\nX-Cache: Hit from cloudfront\r\nX-Amz-Cf-Pop: ARN53-P2\r\nAge: 126\r\nContent-Length: 397344\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 8452640738968644826\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\nAccess-Control-Allow-Origin: *\r\nCache-Control: max-age=864000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":397344,"size_decoded":0,"mime_type":"binary/octet-stream","magic":"data","md5":"60b11f0ec28a547ec02f951826990076","sha1":"3bf1bd41a62717a20148fe852fb8845276ac8025","sha256":"740d418014cbb7d8f839a7978ca8df1056234240a8cbf57e1e42da026627889d","sha512":"eba1b8885e59efbd1647032171b29f68f972b6fc98e1ed9ab982b6732a36e3313b8f512e549512dfb75e1cbf630ec94c8ce6b32d54e765d1cfa8c04955eaf709","ssdeep":"6144:4JdXqwSKCobTgNJAJx6PKk/fVFEr/M7S2dMYO4Fz5mMRFjI3Dr2YwKf+0pbE2JaY:cXBSKRTg8TkXIutoWz4Dr2Ilphfn02","tlshash":"ae842387899ba29c73f67fc205f9e62eb5b120732146f877596646c4c68f34eed03412","first_seen":"2025-12-16T02:09:18.354695Z","last_seen":"2026-01-15T17:27:52.469381Z","times_seen":475,"resource_available":false,"data":null}},"time_used":887,"timings":{"blocked":847,"dns":0,"connect":0,"send":0,"wait":22,"receive":18,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pic.wdsrie.cn/upload_01/upload/20251212/2025121212090412840.gif","fqdn":"pic.wdsrie.cn","domain":"wdsrie.cn","tld":"cn"},"ip":{"addr":"43.152.140.79","port":443,"asn":139341,"as":"ACE","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://iw63v.crqeraf.xyz/archives/65129/","date":"2025-12-23T14:29:57.762Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.wdsrie.cn","organization":""},"issuer":{"commonName":"ZeroSSL ECC Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Sat, 20 Dec 2025 00:00:00 GMT","end":"Fri, 20 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E9:73:86:E2:44:76:13:6D:6B:AE:EE:E0:BA:B0:C0:68:B0:97:37:B8","sha256":"B9:DF:B5:64:69:80:D3:48:0B:F1:C2:39:96:52:89:9A:DE:23:24:F8:50:8B:E3:B3:38:A6:99:51:B3:9A:55:5E"}}},"request":{"raw":"GET /upload_01/upload/20251212/2025121212090412840.gif HTTP/1.1\r\nHost: pic.wdsrie.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://iw63v.crqeraf.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Fri, 12 Dec 2025 04:09:11 GMT\r\nEtag: \"f47530ed01ff648467f42f79c39e6f47\"\r\nContent-Type: binary/octet-stream\r\nDate: Fri, 12 Dec 2025 04:16:09 GMT\r\nx-amz-server-side-encryption: AES256\r\nServer: nginx\r\nX-Cache: Hit from cloudfront\r\nX-Amz-Cf-Pop: ARN53-P2\r\nAge: 596\r\nContent-Length: 109568\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 2402031764553324295\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\nAccess-Control-Allow-Origin: *\r\nCache-Control: max-age=864000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":109568,"size_decoded":0,"mime_type":"binary/octet-stream","magic":"data","md5":"f47530ed01ff648467f42f79c39e6f47","sha1":"a8f45cc69ca0775b98ca9acabd8bed03e9025bf4","sha256":"1fc049d1b78e66808322535067be9528505e283cab6e61e880a4db675dd07a05","sha512":"9aabdf8cec01d4dcd9980e6f278d940fc29661545dd1ae40a993d8100f94fa02b8e8bc1a370a672884968f988fe4eb85520320881d865a052b7d325ce5a3fdb7","ssdeep":"3072:U/vTuTfxsfex8rF7eRlcB6L38JxwtjKyy:U/vEZee8M578bKKr","tlshash":"2bb3123edc55a23259f5f34a81e2e784665f3fe42ad7423dca12b132c80b5c196e3293","first_seen":"2025-12-12T04:56:20.155485Z","last_seen":"2026-03-11T16:08:05.58719Z","times_seen":4600,"resource_available":false,"data":null}},"time_used":876,"timings":{"blocked":860,"dns":0,"connect":0,"send":0,"wait":13,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"iw63v.crqeraf.xyz/comments/1/65129/1.json","fqdn":"iw63v.crqeraf.xyz","domain":"crqeraf.xyz","tld":"xyz"},"ip":{"addr":"154.207.127.39","port":443,"asn":0,"as":"","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://iw63v.crqeraf.xyz/archives/65129/","date":"2025-12-23T14:29:56.610Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"crqeraf.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 12 Dec 2025 08:17:25 GMT","end":"Thu, 12 Mar 2026 09:15:12 GMT"},"fingerprint":{"sha1":"9A:B6:D6:FC:9F:B5:E4:7C:4E:60:81:74:C5:1D:1F:16:43:65:9B:C0","sha256":"6B:D5:92:C2:2E:E8:B1:3D:EE:9E:2C:51:0B:D3:32:29:71:17:1E:3D:93:07:59:A9:C9:59:7C:A8:D8:9B:2B:8C"}}},"request":{"raw":"GET /comments/1/65129/1.json HTTP/1.1\r\nHost: iw63v.crqeraf.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/javascript, */*; q=0.01\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://iw63v.crqeraf.xyz/archives/65129/\r\nX-Requested-With: XMLHttpRequest\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 23 Dec 2025 14:29:56 GMT\r\ncontent-type: text/html; charset=utf-8\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\np3p: CP=\"CAO PSA OUR\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, PUT,DELETE,OPTIONS,PATCH\r\naccess-control-allow-headers: content-type,token\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=c8Qfz7ZwRicnBSP57xowRFJNxJKQPanEyzDhARgVbGe%2BMh6hmnRXbCbra7jP8V8OlS1zZd6AxSoJPrfmAX%2FLs%2FZOUhAaAaLRDTRaKvpitg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9b288dd4cf5456b4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5658,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"JSON text data","md5":"5932ff7be39a5810ef6578c9722f1c03","sha1":"83e906142abb8d67a408a3b25d8c364c8d2b7d63","sha256":"cfb1deb01b98bcf82aafd145c43a7136231c6a38e30c048a3503efb32e636fbd","sha512":"9e7089626ca378d5ed2dcf0cbd8aebbf6b1c2a4ff46416549e753ccad5e69b328be92ef9c5fbe6e036c9e7a3953cb607703af5947a08b364aa1e05ce5557e6eb","ssdeep":"96:eLf384zmNsniVSGsnlPbQJYGzlpUEd1mNsniVSGsnlPbQJYGz8NhqL/Abgnz7Vvk:ejM4zm0iOJNmpUEHm0iOJNLNMk0iNz","tlshash":"d4c143b9dafd1cb0bfe905d76c07755b9c9c79063e19aea5e7f8cc1c9250a602b09808","first_seen":"2025-12-23T14:30:42.378205Z","last_seen":"2025-12-23T14:30:42.378205Z","times_seen":1,"resource_available":false,"data":null}},"time_used":211,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":211,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-23","alert":"Sinkholed","trigger":"iw63v.crqeraf.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pic.wdsrie.cn/upload_01/upload/20240628/2024062816013994586.png","fqdn":"pic.wdsrie.cn","domain":"wdsrie.cn","tld":"cn"},"ip":{"addr":"43.152.140.79","port":443,"asn":139341,"as":"ACE","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://iw63v.crqeraf.xyz/archives/65129/","date":"2025-12-23T14:29:56.816Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.wdsrie.cn","organization":""},"issuer":{"commonName":"ZeroSSL ECC Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Sat, 20 Dec 2025 00:00:00 GMT","end":"Fri, 20 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E9:73:86:E2:44:76:13:6D:6B:AE:EE:E0:BA:B0:C0:68:B0:97:37:B8","sha256":"B9:DF:B5:64:69:80:D3:48:0B:F1:C2:39:96:52:89:9A:DE:23:24:F8:50:8B:E3:B3:38:A6:99:51:B3:9A:55:5E"}}},"request":{"raw":"GET /upload_01/upload/20240628/2024062816013994586.png HTTP/1.1\r\nHost: pic.wdsrie.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://iw63v.crqeraf.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Fri, 28 Jun 2024 08:01:45 GMT\r\nEtag: \"afb54a1331a3774a12f551776ea4cae7\"\r\nContent-Type: binary/octet-stream\r\nDate: Sat, 26 Jul 2025 11:18:58 GMT\r\nx-amz-server-side-encryption: AES256\r\nServer: nginx\r\nX-Cache: Hit from cloudfront\r\nX-Amz-Cf-Pop: ARN53-P2\r\nAge: 295\r\nVary: Origin\r\nContent-Length: 880\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 7914486769522521926\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\nAccess-Control-Allow-Origin: *\r\nCache-Control: max-age=864000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":880,"size_decoded":0,"mime_type":"binary/octet-stream","magic":"data","md5":"afb54a1331a3774a12f551776ea4cae7","sha1":"5c0356d908fb4045e7009c6859b2185b5b59f1ac","sha256":"a37a6772736233afd585d4706ead3bb8e17eee8fb49695de489b8bbf366f52ff","sha512":"b8e57a24fcc591f823de34049f0a5b8d38e642822ad1d0f0ac06591c62f96b88b351d86528b256cd416a2b36236e3a05e325872b8c933f1f7279e83535fa9f61","ssdeep":"","tlshash":"8111405806bea08aaa030ef2f7a1925514c4206a6f8667ffd88a92a325895134d8755e","first_seen":"2024-06-29T19:14:32Z","last_seen":"2026-04-03T18:43:45.431449Z","times_seen":7519,"resource_available":false,"data":null}},"time_used":203,"timings":{"blocked":181,"dns":0,"connect":0,"send":0,"wait":21,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pic.wdsrie.cn/upload_01/xiao/20251221/2025122114592537583.jpeg","fqdn":"pic.wdsrie.cn","domain":"wdsrie.cn","tld":"cn"},"ip":{"addr":"43.152.140.79","port":443,"asn":139341,"as":"ACE","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://iw63v.crqeraf.xyz/archives/65129/","date":"2025-12-23T14:29:57.779Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.wdsrie.cn","organization":""},"issuer":{"commonName":"ZeroSSL ECC Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Sat, 20 Dec 2025 00:00:00 GMT","end":"Fri, 20 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E9:73:86:E2:44:76:13:6D:6B:AE:EE:E0:BA:B0:C0:68:B0:97:37:B8","sha256":"B9:DF:B5:64:69:80:D3:48:0B:F1:C2:39:96:52:89:9A:DE:23:24:F8:50:8B:E3:B3:38:A6:99:51:B3:9A:55:5E"}}},"request":{"raw":"GET /upload_01/xiao/20251221/2025122114592537583.jpeg HTTP/1.1\r\nHost: pic.wdsrie.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://iw63v.crqeraf.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Mon, 22 Dec 2025 00:30:09 GMT\r\nEtag: \"fc30464c132045b6b0affa4cf02a80cb\"\r\nContent-Type: binary/octet-stream\r\nServer: nginx\r\nDate: Mon, 22 Dec 2025 00:36:47 GMT\r\nx-amz-server-side-encryption: AES256\r\nX-Cache: Hit from cloudfront\r\nX-Amz-Cf-Pop: ARN53-P2\r\nAge: 738\r\nContent-Length: 62320\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 11359249392525316537\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\nAccess-Control-Allow-Origin: *\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":62320,"size_decoded":0,"mime_type":"binary/octet-stream","magic":"data","md5":"fc30464c132045b6b0affa4cf02a80cb","sha1":"4577ec5dfde22c062b57e5a21ff2940beda9033e","sha256":"ace2d815e822c33f65e687c7dd0dbd6209da959d21954e344643b61c3daf2dde","sha512":"27feb26ac2ddce7107777edd4a48f426d286aa6e8354a5873e9e3291212da24e8e27eaa50a166e323917ee47acbaf19a4ea75c0cd17a329fb31b1cfd72038708","ssdeep":"1536:PDBlIK6Nbl24FC5tbpHYGxzIyq0A7/MQqHuHDrwukhbaZHqlR:NEH2Rf4GZq37kBOHHVWbvn","tlshash":"395302d20f7ef82a63c1407eae460321337590e5ae496e717f64b469dab231956cc317","first_seen":"2025-12-23T11:33:35.963469Z","last_seen":"2025-12-27T19:33:31.43439Z","times_seen":3,"resource_available":false,"data":null}},"time_used":919,"timings":{"blocked":903,"dns":0,"connect":0,"send":0,"wait":14,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pic.wdsrie.cn/upload_01/xiao/20250408/2025040817063850489.jpg","fqdn":"pic.wdsrie.cn","domain":"wdsrie.cn","tld":"cn"},"ip":{"addr":"43.152.140.79","port":443,"asn":139341,"as":"ACE","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://iw63v.crqeraf.xyz/archives/65129/","date":"2025-12-23T14:29:57.897Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.wdsrie.cn","organization":""},"issuer":{"commonName":"ZeroSSL ECC Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Sat, 20 Dec 2025 00:00:00 GMT","end":"Fri, 20 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E9:73:86:E2:44:76:13:6D:6B:AE:EE:E0:BA:B0:C0:68:B0:97:37:B8","sha256":"B9:DF:B5:64:69:80:D3:48:0B:F1:C2:39:96:52:89:9A:DE:23:24:F8:50:8B:E3:B3:38:A6:99:51:B3:9A:55:5E"}}},"request":{"raw":"GET /upload_01/xiao/20250408/2025040817063850489.jpg HTTP/1.1\r\nHost: pic.wdsrie.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://iw63v.crqeraf.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Tue, 08 Apr 2025 09:23:54 GMT\r\nEtag: \"839a809521e029439a5de3f022b66401\"\r\nContent-Type: binary/octet-stream\r\nDate: Wed, 19 Nov 2025 04:33:01 GMT\r\nx-amz-server-side-encryption: AES256\r\nServer: nginx\r\nX-Cache: Hit from cloudfront\r\nX-Amz-Cf-Pop: ARN53-P2\r\nAge: 42369\r\nVary: Origin\r\nContent-Length: 47456\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 9638701728753351121\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Refresh Hit\r\nAccess-Control-Allow-Origin: *\r\nCache-Control: max-age=864000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":47456,"size_decoded":0,"mime_type":"binary/octet-stream","magic":"data","md5":"839a809521e029439a5de3f022b66401","sha1":"939e53cd9798f28198ac76e888bb636d27db4a65","sha256":"9c6e9dce928fbc8a5603407724371b82223578d88c0d57e299eecff06f186882","sha512":"763aafd484984bc1cf801f13bba126d2dfbc6e13dab79fa3e48dc895190d2bdb952cdf86028e53b4c28b8afb9fbef85b20702b33f8004fcc581cfd997f040f83","ssdeep":"768:WyJFImg/+QZwIgW6uy8EXCLiklv/eyS+yEM96YiOndtWD8+28nIZHXUkurb1ArYV:WycVPaV8IUblv/w3ESNiqs8WIlXUkuPB","tlshash":"3323f18e54ba1dac5096732747beb4ee97318531183f6c0266f32517d8fb584caf218c","first_seen":"2025-12-23T14:30:42.380439Z","last_seen":"2025-12-23T14:30:42.380439Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1390,"timings":{"blocked":803,"dns":0,"connect":0,"send":0,"wait":586,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"iw63v.crqeraf.xyz/static/pc/icons/icon_512x512.qscd.png","fqdn":"iw63v.crqeraf.xyz","domain":"crqeraf.xyz","tld":"xyz"},"ip":{"addr":"154.207.127.39","port":443,"asn":0,"as":"","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://iw63v.crqeraf.xyz/archives/65129/","date":"2025-12-23T14:29:59.098Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"crqeraf.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 12 Dec 2025 08:17:25 GMT","end":"Thu, 12 Mar 2026 09:15:12 GMT"},"fingerprint":{"sha1":"9A:B6:D6:FC:9F:B5:E4:7C:4E:60:81:74:C5:1D:1F:16:43:65:9B:C0","sha256":"6B:D5:92:C2:2E:E8:B1:3D:EE:9E:2C:51:0B:D3:32:29:71:17:1E:3D:93:07:59:A9:C9:59:7C:A8:D8:9B:2B:8C"}}},"request":{"raw":"GET /static/pc/icons/icon_512x512.qscd.png HTTP/1.1\r\nHost: iw63v.crqeraf.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://iw63v.crqeraf.xyz/archives/65129/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _ga_SY99S66RFE=GS2.1.s1766500197$o1$g0$t1766500197$j60$l0$h0; _ga=GA1.1.1028203053.1766500197; _ga_D19N9LPLRP=GS2.1.s1766500197$o1$g0$t1766500197$j60$l0$h0\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 23 Dec 2025 14:29:59 GMT\r\ncontent-type: image/png\r\ncontent-length: 12268\r\npriority: u=6,i=?0\r\nserver: cloudflare\r\nlast-modified: Sat, 13 Sep 2025 03:47:28 GMT\r\netag: \"68c4e950-2fec\"\r\nexpires: Tue, 30 Dec 2025 05:22:48 GMT\r\ncache-control: public, max-age=604800, immutable\r\naccept-ranges: bytes\r\nage: 32830\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9UH5gUlbM%2BLAVhcV0ilqAKSHAfQIHiaEgCNJw0%2FwPtt0D26nrKgq3ifT8yiTivkGqoKMriX1%2B5kRpHso%2Bfp1tm3j514ReH%2FiU4B0byOBKg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b288de45c5d56b4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12268,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced","md5":"75cbd923a71fc4c9f4faf54b858c78e6","sha1":"116f43c108494d4055d723e14a71132669b6a4a6","sha256":"1b956754b6ecb21b4a74ede7b94e8412559b144622ff358b2f38166cc4bdbd16","sha512":"e3b7674211ee6fdf2583afffd15c562864ad5d7ae996778565f97e21c2cbce6e71d1f9df29e94c47e6fa30910d4eeeef8222eb90812ce1aefcdcc0c33ca9174c","ssdeep":"192:mDZL6LIXM4HBX5rKvqJSTZ1C7+bDGLr+IjN8DUFeCvf13TDcOgxn8FIR7aU:ZLIc4HW+Ms+GLSsNUUFe0d3TDAZZpaU","tlshash":"b4425a039b055cabc768577621d399a224f341b037faf1139d22c1aa7c313683e64bba","first_seen":"2024-09-06T04:34:10Z","last_seen":"2026-04-03T18:43:45.435466Z","times_seen":7558,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-23","alert":"Sinkholed","trigger":"iw63v.crqeraf.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pic.wdsrie.cn/upload_01/upload/20251212/2025121216000678652.gif","fqdn":"pic.wdsrie.cn","domain":"wdsrie.cn","tld":"cn"},"ip":{"addr":"43.152.140.79","port":443,"asn":139341,"as":"ACE","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://iw63v.crqeraf.xyz/archives/65129/","date":"2025-12-23T14:29:57.901Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.wdsrie.cn","organization":""},"issuer":{"commonName":"ZeroSSL ECC Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Sat, 20 Dec 2025 00:00:00 GMT","end":"Fri, 20 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E9:73:86:E2:44:76:13:6D:6B:AE:EE:E0:BA:B0:C0:68:B0:97:37:B8","sha256":"B9:DF:B5:64:69:80:D3:48:0B:F1:C2:39:96:52:89:9A:DE:23:24:F8:50:8B:E3:B3:38:A6:99:51:B3:9A:55:5E"}}},"request":{"raw":"GET /upload_01/upload/20251212/2025121216000678652.gif HTTP/1.1\r\nHost: pic.wdsrie.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://iw63v.crqeraf.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Fri, 12 Dec 2025 08:00:12 GMT\r\nEtag: \"32c4ec218cf3375cc5165d0bdeb6d375\"\r\nContent-Type: binary/octet-stream\r\nDate: Fri, 12 Dec 2025 08:00:29 GMT\r\nx-amz-server-side-encryption: AES256\r\nServer: nginx\r\nX-Cache: Hit from cloudfront\r\nX-Amz-Cf-Pop: ARN53-P2\r\nAge: 52\r\nContent-Length: 42528\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 11501054638552334635\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\nAccess-Control-Allow-Origin: *\r\nCache-Control: max-age=864000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":42528,"size_decoded":0,"mime_type":"binary/octet-stream","magic":"data","md5":"32c4ec218cf3375cc5165d0bdeb6d375","sha1":"ac6036110453626c8fc298b637113fa3d6fae00c","sha256":"bd5c7ee92e4aed702fa54d484f59f1dfa35632d8ce3ccfb1757e793bc87e1591","sha512":"d12a96cc8293690020b37d12b092dec7d461a4c5965e12535b06186b9bfddf12b64c8264b697b47e1124fbe22c99bc9c551319f20b1ed287fb94fe48c018bd9d","ssdeep":"768:FIIe0YPR2zvosn9tsFrMBqnoXdpWC7f1R+AB4DKJ8bm5BQAeJ/K7I4VRZ:FIL0YJ2MsSOrnWEf1Rd4uSy2/K7TVRZ","tlshash":"0213f1e4899acf3d29c5456cd88d19e9d74710f7768ebfb84a3f30d0ea6814a4ec4079","first_seen":"2025-04-08T01:44:22.450551Z","last_seen":"2026-02-08T01:35:18.334166Z","times_seen":2164,"resource_available":false,"data":null}},"time_used":835,"timings":{"blocked":818,"dns":0,"connect":0,"send":0,"wait":16,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hls.aycaku.cn/videos5/403afd70c1d30e3a3715e9f87c3b069d/403afd70c1d30e3a3715e9f87c3b069d.m3u8?auth_key=1766500195-694aa76358518-0-c901302f0701a0f94b19393cd3128ec3\u0026v=2","fqdn":"hls.aycaku.cn","domain":"aycaku.cn","tld":"cn"},"ip":{"addr":"103.198.200.7","port":443,"asn":138915,"as":"Kaopu Cloud HK Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://iw63v.crqeraf.xyz/archives/65129/","date":"2025-12-23T14:30:02.666Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.aycaku.cn","organization":""},"issuer":{"commonName":"ZeroSSL ECC Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Sat, 20 Dec 2025 00:00:00 GMT","end":"Fri, 20 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"DA:1B:F7:8D:70:B0:62:2E:14:20:4B:CE:7F:0C:EC:8E:8C:10:43:08","sha256":"E0:74:00:A3:9D:45:65:B6:C7:96:11:BD:A9:7E:F2:77:17:54:B1:8B:E0:A6:01:A9:7C:2E:F6:66:D7:8D:D7:19"}}},"request":{"raw":"GET /videos5/403afd70c1d30e3a3715e9f87c3b069d/403afd70c1d30e3a3715e9f87c3b069d.m3u8?auth_key=1766500195-694aa76358518-0-c901302f0701a0f94b19393cd3128ec3\u0026v=2 HTTP/1.1\r\nHost: hls.aycaku.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://iw63v.crqeraf.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Type: text/plain; charset=utf-8\r\nContent-Length: 53205\r\nConnection: keep-alive\r\nServer: Default-server-KS-CLOUD-XG-FOREIGN-12-03\r\nDate: Tue, 23 Dec 2025 14:30:02 GMT\r\nExpires: Tue, 23 Dec 2025 14:35:02 GMT\r\nAccept-Ranges: bytes\r\nAccess-Control-Allow-Origin: *\r\nx-link-via: xg21:443;xg12:80;\r\nX-Cache-Status: MISS from KS-CLOUD-XG-FOREIGN-12-03, MISS from KS-CLOUD-XG-FOREIGN-21-09\r\nX-Cdn-Request-ID: c74040ddbc9901e599f29e2161ee442b\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":53205,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"M3U playlist, ASCII text","md5":"d705e044916ad47cdf307aa88f32f684","sha1":"fc20ab5d1a0b4bc634e3a4cbb3bbcf05fabcedf9","sha256":"1b4a9c3b853496de2f0b4a861e832275e3c4374428b743c42860a0e9a50cf13e","sha512":"118d91afa73d50398c3fc305cef6d0908b41b42e1a5385c980802586cc34521bd4e42dc5ebc9db1cfcb8877b6d93ef1dd884601f9cd6d47eafbca76bb07ea7cc","ssdeep":"192:wmBdonIGyo3QLLH6G9s6TtX1ZFNYnI37CFSmSWeMsjQx9wJ0JMHqI2LluZH:w0rjUQLLHl1ZFF3cSmSWeMsjT0WKIWIx","tlshash":"d23303af211a518be01c6a93894768ecc53e05367d5f8accdd0a24b96fb3efd1d4e049","first_seen":"2025-12-23T14:30:42.383243Z","last_seen":"2025-12-23T14:30:42.383243Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1660,"timings":{"blocked":569,"dns":1,"connect":259,"send":0,"wait":412,"receive":109,"ssl":305},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"iw63v.crqeraf.xyz/static/pc/img/placeholder.d8718ab.png?v=3","fqdn":"iw63v.crqeraf.xyz","domain":"crqeraf.xyz","tld":"xyz"},"ip":{"addr":"154.207.127.39","port":443,"asn":0,"as":"","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://iw63v.crqeraf.xyz/archives/65129/","date":"2025-12-23T14:29:56.056Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"crqeraf.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 12 Dec 2025 08:17:25 GMT","end":"Thu, 12 Mar 2026 09:15:12 GMT"},"fingerprint":{"sha1":"9A:B6:D6:FC:9F:B5:E4:7C:4E:60:81:74:C5:1D:1F:16:43:65:9B:C0","sha256":"6B:D5:92:C2:2E:E8:B1:3D:EE:9E:2C:51:0B:D3:32:29:71:17:1E:3D:93:07:59:A9:C9:59:7C:A8:D8:9B:2B:8C"}}},"request":{"raw":"GET /static/pc/img/placeholder.d8718ab.png?v=3 HTTP/1.1\r\nHost: iw63v.crqeraf.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://iw63v.crqeraf.xyz/archives/65129/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 23 Dec 2025 14:29:55 GMT\r\ncontent-type: image/png\r\ncontent-length: 2442\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\nlast-modified: Sat, 13 Sep 2025 03:47:27 GMT\r\netag: \"68c4e94f-98a\"\r\nexpires: Mon, 29 Dec 2025 07:49:08 GMT\r\ncache-control: public, max-age=604800, immutable\r\naccept-ranges: bytes\r\nage: 110447\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BnHIQ01WzgwHZDPCdy%2FwJAeKi2PX%2F0NiihqefUyl7eT%2B1e6K3gpHsGYFo%2B6j0MBxzSnNUk%2FpC1ZhP69AqbiOkHykMo0u34IWQzNSUBl%2FAw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b288dd0ab6156b4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2442,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 232 x 60, 8-bit/color RGB, non-interlaced","md5":"d6bdef117ac83ff50cd9f81df925888f","sha1":"e40cc0c2bdbaef0b75cc3eacfbf0b8f3f9dad13f","sha256":"1bb5ef96bf5f7ac32fd7a39e8d4c87fd055b7543187ef9684900260fec273820","sha512":"02549fe7937cd57e033619c1acc0c09a05ea01842c2cc8a536570711cfed5959575ad8ed8087c8fe797a21812f24de36c3e56f5459ed84a3f6538c7c65c5792e","ssdeep":"","tlshash":"e851d76b2b211f67e3153e3c1d0487e189b9ae2c7d1b974715c16380c1211e768f4884","first_seen":"2025-09-19T02:33:53.253Z","last_seen":"2026-04-03T18:43:45.416509Z","times_seen":6978,"resource_available":false,"data":null}},"time_used":41,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":40,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-23","alert":"Sinkholed","trigger":"iw63v.crqeraf.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pic.wdsrie.cn/upload_01/upload/20250828/2025082822510067817.jpeg","fqdn":"pic.wdsrie.cn","domain":"wdsrie.cn","tld":"cn"},"ip":{"addr":"43.152.140.79","port":443,"asn":139341,"as":"ACE","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://iw63v.crqeraf.xyz/archives/65129/","date":"2025-12-23T14:29:57.285Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.wdsrie.cn","organization":""},"issuer":{"commonName":"ZeroSSL ECC Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Sat, 20 Dec 2025 00:00:00 GMT","end":"Fri, 20 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E9:73:86:E2:44:76:13:6D:6B:AE:EE:E0:BA:B0:C0:68:B0:97:37:B8","sha256":"B9:DF:B5:64:69:80:D3:48:0B:F1:C2:39:96:52:89:9A:DE:23:24:F8:50:8B:E3:B3:38:A6:99:51:B3:9A:55:5E"}}},"request":{"raw":"GET /upload_01/upload/20250828/2025082822510067817.jpeg HTTP/1.1\r\nHost: pic.wdsrie.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://iw63v.crqeraf.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Thu, 28 Aug 2025 14:58:44 GMT\r\nEtag: \"e6bdd4c581dad10918ccf9f9fb5e2134\"\r\nContent-Type: binary/octet-stream\r\nDate: Thu, 09 Oct 2025 13:10:13 GMT\r\nx-amz-server-side-encryption: AES256\r\nServer: nginx\r\nX-Cache: Hit from cloudfront\r\nX-Amz-Cf-Pop: ARN53-P2\r\nAge: 48041\r\nContent-Length: 6016\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 12793699047590497841\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\nAccess-Control-Allow-Origin: *\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6016,"size_decoded":0,"mime_type":"binary/octet-stream","magic":"data","md5":"e6bdd4c581dad10918ccf9f9fb5e2134","sha1":"98eee003f0fb3e6ea93a62df3c2d2f09ec9ec546","sha256":"546d343fce9be95367436c9336363f4f0018651c2b279431d50d10b86de6d5fb","sha512":"97fa74a975b6d470b93deece0a6cba463d49223a1dfa68d69f1099720c737f61bfae4d36bbee45079091a17b2d90de75a6b89ee2bc63de61164f78e9fd08ef88","ssdeep":"96:tRaUyXQd2HVfY2uWfpdXPNtzz5aiy5ZxVDHSle5Oo+ZQodD3oW3UxprxhHu7In+:DaUmA2JZyHxVDHSleoopoiW3UxNHP+","tlshash":"b9c19e07605935351c7af0605f3764809fd88a2abc096d8dade56fc08266f10f3de6f0","first_seen":"2025-08-29T10:40:28.959841Z","last_seen":"2026-03-24T16:47:36.937318Z","times_seen":6458,"resource_available":false,"data":null}},"time_used":984,"timings":{"blocked":919,"dns":0,"connect":0,"send":0,"wait":63,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pic.wdsrie.cn/upload_01/upload/20250828/2025082822521889282.jpeg","fqdn":"pic.wdsrie.cn","domain":"wdsrie.cn","tld":"cn"},"ip":{"addr":"43.152.140.79","port":443,"asn":139341,"as":"ACE","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://iw63v.crqeraf.xyz/archives/65129/","date":"2025-12-23T14:29:57.315Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.wdsrie.cn","organization":""},"issuer":{"commonName":"ZeroSSL ECC Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Sat, 20 Dec 2025 00:00:00 GMT","end":"Fri, 20 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E9:73:86:E2:44:76:13:6D:6B:AE:EE:E0:BA:B0:C0:68:B0:97:37:B8","sha256":"B9:DF:B5:64:69:80:D3:48:0B:F1:C2:39:96:52:89:9A:DE:23:24:F8:50:8B:E3:B3:38:A6:99:51:B3:9A:55:5E"}}},"request":{"raw":"GET /upload_01/upload/20250828/2025082822521889282.jpeg HTTP/1.1\r\nHost: pic.wdsrie.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://iw63v.crqeraf.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Thu, 28 Aug 2025 14:58:45 GMT\r\nEtag: \"48e73a6b0f3f6fd941196c16771837ec\"\r\nContent-Type: binary/octet-stream\r\nDate: Thu, 28 Aug 2025 14:58:45 GMT\r\nx-amz-server-side-encryption: AES256\r\nServer: nginx\r\nX-Cache: Hit from cloudfront\r\nX-Amz-Cf-Pop: ARN53-P2\r\nAge: 62\r\nContent-Length: 12800\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 18302375993477184448\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\nAccess-Control-Allow-Origin: *\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":12800,"size_decoded":0,"mime_type":"binary/octet-stream","magic":"data","md5":"48e73a6b0f3f6fd941196c16771837ec","sha1":"88958da03745ffe9ba7220a295b44aca1fd62972","sha256":"197b572461a9eca6b8eb9a70cc3226cb1a8e0b963093bac64a51294cad00a92f","sha512":"2aed1d8cd8eceb9dc90b6a4945d9535dd173c6a01b23548f2ea756eb3afcce1d0714b6b5e5c399a1842603c1252cca1e1b81f6f46da3224a9daa6ee3797bfddc","ssdeep":"384:+GJwsylENdmPSXqKznRTZ9GuIMcBOMCG9nszh:+GOsylmdsS6iRTZQuoEXG9Kh","tlshash":"e742d14a364d1865e90ec8550ff620ebdff5d97dd428e4e4b80e0058527539425e1bff","first_seen":"2025-08-29T10:40:28.962372Z","last_seen":"2026-03-26T13:33:56.040699Z","times_seen":4051,"resource_available":false,"data":null}},"time_used":1128,"timings":{"blocked":1105,"dns":0,"connect":0,"send":0,"wait":22,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pic.wdsrie.cn/upload_01/upload/20251214/2025121411220015122.gif","fqdn":"pic.wdsrie.cn","domain":"wdsrie.cn","tld":"cn"},"ip":{"addr":"43.152.140.79","port":443,"asn":139341,"as":"ACE","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://iw63v.crqeraf.xyz/archives/65129/","date":"2025-12-23T14:29:57.723Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.wdsrie.cn","organization":""},"issuer":{"commonName":"ZeroSSL ECC Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Sat, 20 Dec 2025 00:00:00 GMT","end":"Fri, 20 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E9:73:86:E2:44:76:13:6D:6B:AE:EE:E0:BA:B0:C0:68:B0:97:37:B8","sha256":"B9:DF:B5:64:69:80:D3:48:0B:F1:C2:39:96:52:89:9A:DE:23:24:F8:50:8B:E3:B3:38:A6:99:51:B3:9A:55:5E"}}},"request":{"raw":"GET /upload_01/upload/20251214/2025121411220015122.gif HTTP/1.1\r\nHost: pic.wdsrie.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://iw63v.crqeraf.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Sun, 14 Dec 2025 03:22:10 GMT\r\nEtag: \"545cccfb080700c7e64305e088f4690e\"\r\nContent-Type: binary/octet-stream\r\nDate: Sun, 14 Dec 2025 03:22:12 GMT\r\nx-amz-server-side-encryption: AES256\r\nServer: nginx\r\nX-Cache: Miss from cloudfront\r\nX-Amz-Cf-Pop: ARN53-P2\r\nContent-Length: 310576\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 10372125353895359038\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\nAccess-Control-Allow-Origin: *\r\nCache-Control: max-age=864000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":310576,"size_decoded":0,"mime_type":"binary/octet-stream","magic":"data","md5":"545cccfb080700c7e64305e088f4690e","sha1":"79e3ca8c97b1c3ab3780840499fb50c34c9df321","sha256":"e3783b7447c6c1b13cb6c98aaa9ad64e6f215a96e4ffdce84b6ffcbf3dcc5c01","sha512":"5502faca908022161751eb2125c3f436ca8660ebc1c7c2457ba6159a196fa0c620be93fdc0dfd95f3756bfae90c5bf94720bbfe9b82199e684f6bb932df64d44","ssdeep":"6144:R/3ECYBRVkZB2i7rr6Aw6sqRHeoR/SXeUOEIAQNslhi1eXE:R/UCYBR4TbnH1GDGLN/1Z","tlshash":"ce64233dc7692f3663bdcda3aca2ad825240845543044574f25f40acfbaaf71d24b9fa","first_seen":"2025-12-16T02:09:18.570075Z","last_seen":"2026-01-09T10:42:14.092903Z","times_seen":218,"resource_available":false,"data":null}},"time_used":869,"timings":{"blocked":851,"dns":0,"connect":0,"send":0,"wait":9,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pic.wdsrie.cn/upload/upload/20231020/2023102011214223684.png","fqdn":"pic.wdsrie.cn","domain":"wdsrie.cn","tld":"cn"},"ip":{"addr":"43.152.140.79","port":443,"asn":139341,"as":"ACE","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://iw63v.crqeraf.xyz/archives/65129/","date":"2025-12-23T14:29:56.994Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.wdsrie.cn","organization":""},"issuer":{"commonName":"ZeroSSL ECC Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Sat, 20 Dec 2025 00:00:00 GMT","end":"Fri, 20 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E9:73:86:E2:44:76:13:6D:6B:AE:EE:E0:BA:B0:C0:68:B0:97:37:B8","sha256":"B9:DF:B5:64:69:80:D3:48:0B:F1:C2:39:96:52:89:9A:DE:23:24:F8:50:8B:E3:B3:38:A6:99:51:B3:9A:55:5E"}}},"request":{"raw":"GET /upload/upload/20231020/2023102011214223684.png HTTP/1.1\r\nHost: pic.wdsrie.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://iw63v.crqeraf.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Thu, 28 Dec 2023 12:24:12 GMT\r\nEtag: \"a07707527c8150c7506af85470cf8f61\"\r\nContent-Type: binary/octet-stream\r\nDate: Sat, 26 Jul 2025 11:18:58 GMT\r\nx-amz-server-side-encryption: AES256\r\nServer: nginx\r\nX-Cache: Hit from cloudfront\r\nX-Amz-Cf-Pop: ARN53-P2\r\nAge: 295\r\nVary: Origin\r\nContent-Length: 992\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 4462330647430256012\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\nAccess-Control-Allow-Origin: *\r\nCache-Control: max-age=864000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":992,"size_decoded":0,"mime_type":"binary/octet-stream","magic":"data","md5":"a07707527c8150c7506af85470cf8f61","sha1":"ca6b2f7f01ac2571497e45181a2b267f9f62b5e5","sha256":"7ca55b53993106dd8d352e5d9f1887a0aeba437b6bd31d77c3e0b2dde1c55a1d","sha512":"292b1532470f509cd9d2d883ca03bfb076cffb42ea888a843b04789e02ca5cba5d1eaa06af847ae32908b5ce50496c0f2c992e6ad533cad441b5ca1e9a3d577c","ssdeep":"","tlshash":"3711a575f3e24b12858a3a0765809c9645c06bd5c5431f29f452a25e5729fe128c9f0f","first_seen":"2023-11-14T11:24:50Z","last_seen":"2026-04-03T18:43:45.383582Z","times_seen":7527,"resource_available":false,"data":null}},"time_used":111,"timings":{"blocked":103,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pic.wdsrie.cn/upload_01/upload/20250828/2025082822500890996.jpeg","fqdn":"pic.wdsrie.cn","domain":"wdsrie.cn","tld":"cn"},"ip":{"addr":"43.152.140.79","port":443,"asn":139341,"as":"ACE","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://iw63v.crqeraf.xyz/archives/65129/","date":"2025-12-23T14:29:57.309Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.wdsrie.cn","organization":""},"issuer":{"commonName":"ZeroSSL ECC Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Sat, 20 Dec 2025 00:00:00 GMT","end":"Fri, 20 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E9:73:86:E2:44:76:13:6D:6B:AE:EE:E0:BA:B0:C0:68:B0:97:37:B8","sha256":"B9:DF:B5:64:69:80:D3:48:0B:F1:C2:39:96:52:89:9A:DE:23:24:F8:50:8B:E3:B3:38:A6:99:51:B3:9A:55:5E"}}},"request":{"raw":"GET /upload_01/upload/20250828/2025082822500890996.jpeg HTTP/1.1\r\nHost: pic.wdsrie.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://iw63v.crqeraf.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Thu, 28 Aug 2025 14:58:45 GMT\r\nEtag: \"96ca410be34fde7d8095d1ffd9f02ba1\"\r\nContent-Type: binary/octet-stream\r\nDate: Thu, 09 Oct 2025 23:53:56 GMT\r\nx-amz-server-side-encryption: AES256\r\nServer: nginx\r\nX-Cache: Hit from cloudfront\r\nX-Amz-Cf-Pop: ARN53-P2\r\nAge: 9418\r\nContent-Length: 10320\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 6826963559310442348\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\nAccess-Control-Allow-Origin: *\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":10320,"size_decoded":0,"mime_type":"binary/octet-stream","magic":"data","md5":"96ca410be34fde7d8095d1ffd9f02ba1","sha1":"b7608fd96922c5f692323cc47df650c1705237ca","sha256":"04d0044a64da3d76dda9a259282de56f3c40325bc3d939ba38f886ea65cedadb","sha512":"722ae3c6d59d9b816ccfb45030bfa7120e165b2f965ac32870e5491904ccb434fb959fc0187a59da3e4ec65ba12289de325462c36086d14aacc77905275989ce","ssdeep":"192:nm/KDge00ClVbFo2EYoNP77XVnzboxe2+BYFVq8YPJTx0G2LzN1GMS9CEQx:bsepEFo2EtN3dzGe2dq8YPR2LzDGD9Cn","tlshash":"4722b025eb104610b24c4f5a496bf07ddedf4509fcbd4a1cd391dfc213890ade6455d9","first_seen":"2025-04-14T20:37:59.14379Z","last_seen":"2026-02-14T18:18:04.780585Z","times_seen":4054,"resource_available":false,"data":null}},"time_used":1093,"timings":{"blocked":1070,"dns":0,"connect":0,"send":0,"wait":22,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.addtoany.com/menu/modules/core.oafg07ee.js","fqdn":"static.addtoany.com","domain":"addtoany.com","tld":"com"},"ip":{"addr":"172.66.171.172","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://iw63v.crqeraf.xyz/archives/65129/","date":"2025-12-23T14:29:56.684Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"static.addtoany.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Dec 2025 13:28:50 GMT","end":"Sun, 22 Mar 2026 14:28:48 GMT"},"fingerprint":{"sha1":"83:E4:54:72:9E:E9:BE:F0:31:A0:E0:3B:5B:38:1D:25:57:6A:CE:67","sha256":"C2:A2:4F:7E:8C:0F:A8:AA:86:24:03:7D:6B:67:31:2E:38:54:D6:C4:27:59:FE:B4:3D:28:7C:D5:DC:F6:F1:1E"}}},"request":{"raw":"GET /menu/modules/core.oafg07ee.js HTTP/1.1\r\nHost: static.addtoany.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://iw63v.crqeraf.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncf-cache-status: REVALIDATED\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: application/javascript\r\npriority: u=3,i=?0\r\naccess-control-allow-origin: *\r\ncache-control: max-age=315360000, immutable\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kbrMNaifHPpKIhcDsIQjUC4msGOPSh6eKfX22oFHDZzjLMgAWbNfMqjcco2czB%2Beox91wyz4R8nyZm5sdLFECq2B%2BsFQSGwIUPs9Utu6zA%3D%3D\"}]}\r\netag: W/\"c24c44a1988676fe88781355cb3740b1\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ndate: Tue, 23 Dec 2025 14:29:56 GMT\r\ncf-ray: 9b288dd5394c569f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":72512,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"7a0efe46283cac93dd3c057bc30548a5","sha1":"e488c97789dd77545c8bcfff0efbaea93f9adbd0","sha256":"292d24e79b1e264ced629c35d3b59a7a83093f972cdd0eac61e7b32189964772","sha512":"a04fd7ce8bc19db42cefa9bcfd3cdcc1b2766f2b89f33a6abb10e67d0853a29cd5715a30aa92de70bdc8b00c2a5cbdb519be310adf8f6bcdc51d1dd1f37cda72","ssdeep":"1536:e8fJLQgdDGsto0AnVnCN2kw3vnNvCAvJd84OZQrKxRNa6upg1fE3i4BQ:VfKg6PvCulOmrKxiNpg1eQ","tlshash":"16635c9f37066937aa1b30e8a8efa508a037275e9e080954f5a5d4b511fdecd3067f2c","first_seen":"2025-10-23T06:03:39.901486Z","last_seen":"2026-04-02T08:50:54.034167Z","times_seen":16586,"resource_available":true,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pic.wdsrie.cn/upload_01/upload/20250307/2025030714590095603.png","fqdn":"pic.wdsrie.cn","domain":"wdsrie.cn","tld":"cn"},"ip":{"addr":"43.152.140.79","port":443,"asn":139341,"as":"ACE","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://iw63v.crqeraf.xyz/archives/65129/","date":"2025-12-23T14:29:56.908Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.wdsrie.cn","organization":""},"issuer":{"commonName":"ZeroSSL ECC Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Sat, 20 Dec 2025 00:00:00 GMT","end":"Fri, 20 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E9:73:86:E2:44:76:13:6D:6B:AE:EE:E0:BA:B0:C0:68:B0:97:37:B8","sha256":"B9:DF:B5:64:69:80:D3:48:0B:F1:C2:39:96:52:89:9A:DE:23:24:F8:50:8B:E3:B3:38:A6:99:51:B3:9A:55:5E"}}},"request":{"raw":"GET /upload_01/upload/20250307/2025030714590095603.png HTTP/1.1\r\nHost: pic.wdsrie.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://iw63v.crqeraf.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Fri, 07 Mar 2025 06:59:10 GMT\r\nEtag: \"689bd59a665620102b298b1ae7481383\"\r\nContent-Type: binary/octet-stream\r\nDate: Sat, 26 Jul 2025 04:47:52 GMT\r\nx-amz-server-side-encryption: AES256\r\nServer: nginx\r\nX-Cache: Hit from cloudfront\r\nX-Amz-Cf-Pop: ARN53-P2\r\nAge: 23761\r\nVary: Origin\r\nContent-Length: 1984\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 8716586523025740211\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\nAccess-Control-Allow-Origin: *\r\nCache-Control: max-age=864000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1984,"size_decoded":0,"mime_type":"binary/octet-stream","magic":"data","md5":"689bd59a665620102b298b1ae7481383","sha1":"b8ff7f332b54e7391a00f42bcf2408fa30d5d895","sha256":"3d633071759958b8d09e87c4fa326215c7f0482d8b4c714d46394c34f0c8d092","sha512":"47b188b6295bfb0e387edd917ecb6f18f233ba64ec6e86a25dc1bdc421267bcfd0a0e1f2e3fa3f691469efbdc6343ffb612539c024dd38ed7c1c04b023b21425","ssdeep":"","tlshash":"d2412881cb8340c434884a89c7caf3713680f43449ab8929c2648bdf28f57af6a73332","first_seen":"2025-03-15T04:05:38.13959Z","last_seen":"2026-04-03T18:43:45.446859Z","times_seen":7490,"resource_available":false,"data":null}},"time_used":160,"timings":{"blocked":152,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pic.wdsrie.cn/upload_01/upload/20250408/2025040815473637586.jpg","fqdn":"pic.wdsrie.cn","domain":"wdsrie.cn","tld":"cn"},"ip":{"addr":"43.152.140.79","port":443,"asn":139341,"as":"ACE","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://iw63v.crqeraf.xyz/archives/65129/","date":"2025-12-23T14:29:57.147Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.wdsrie.cn","organization":""},"issuer":{"commonName":"ZeroSSL ECC Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Sat, 20 Dec 2025 00:00:00 GMT","end":"Fri, 20 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E9:73:86:E2:44:76:13:6D:6B:AE:EE:E0:BA:B0:C0:68:B0:97:37:B8","sha256":"B9:DF:B5:64:69:80:D3:48:0B:F1:C2:39:96:52:89:9A:DE:23:24:F8:50:8B:E3:B3:38:A6:99:51:B3:9A:55:5E"}}},"request":{"raw":"GET /upload_01/upload/20250408/2025040815473637586.jpg HTTP/1.1\r\nHost: pic.wdsrie.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://iw63v.crqeraf.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Tue, 08 Apr 2025 09:23:51 GMT\r\nEtag: \"da34db3821416da5f6386d3c8af13ede\"\r\nContent-Type: binary/octet-stream\r\nDate: Thu, 10 Jul 2025 05:26:03 GMT\r\nx-amz-server-side-encryption: AES256\r\nServer: nginx\r\nX-Cache: Miss from cloudfront\r\nX-Amz-Cf-Pop: ARN53-P2\r\nContent-Length: 243456\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 14978763569662564126\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Refresh Hit\r\nAccess-Control-Allow-Origin: *\r\nCache-Control: max-age=864000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":243456,"size_decoded":0,"mime_type":"binary/octet-stream","magic":"data","md5":"da34db3821416da5f6386d3c8af13ede","sha1":"5b23ae32bdc61fb2b1d08a5e3ea3c9c946ab6f7e","sha256":"638f38ed84852ade4859d93e6ebda19934ddfb856131cef2bd99224bb919e5be","sha512":"39889c9637381e8564d54f18c34c35a1a4d25101a7a5ee039b6709db45fefeda9c26b04722fa4c045f12694eadbbd67cedc22efd54d67413236ba53b0e7647bd","ssdeep":"3072:JqriMGIVU7HQO7lLkntOO85yA73sXTJNwf4jXHSURvKhyJ/BoIpVdKev:sriNIVMz5yKclifyCURydIPd/v","tlshash":"6534237ee51c66a361ff0a9247c9bae89b45087b6d2ddb8b3338d435e9688c76cc4050","first_seen":"2025-12-23T14:30:42.389632Z","last_seen":"2025-12-23T14:30:42.389632Z","times_seen":1,"resource_available":false,"data":null}},"time_used":588,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":540,"receive":48,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pic.wdsrie.cn/upload_01/upload/20251221/2025122115002237226.gif","fqdn":"pic.wdsrie.cn","domain":"wdsrie.cn","tld":"cn"},"ip":{"addr":"43.152.140.79","port":443,"asn":139341,"as":"ACE","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://iw63v.crqeraf.xyz/archives/65129/","date":"2025-12-23T14:29:57.754Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.wdsrie.cn","organization":""},"issuer":{"commonName":"ZeroSSL ECC Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Sat, 20 Dec 2025 00:00:00 GMT","end":"Fri, 20 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E9:73:86:E2:44:76:13:6D:6B:AE:EE:E0:BA:B0:C0:68:B0:97:37:B8","sha256":"B9:DF:B5:64:69:80:D3:48:0B:F1:C2:39:96:52:89:9A:DE:23:24:F8:50:8B:E3:B3:38:A6:99:51:B3:9A:55:5E"}}},"request":{"raw":"GET /upload_01/upload/20251221/2025122115002237226.gif HTTP/1.1\r\nHost: pic.wdsrie.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://iw63v.crqeraf.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Sun, 21 Dec 2025 07:00:29 GMT\r\nEtag: \"3393fe10a3392cafc7e68c82f5f89ac9\"\r\nContent-Type: binary/octet-stream\r\nDate: Sun, 21 Dec 2025 07:02:42 GMT\r\nx-amz-server-side-encryption: AES256\r\nServer: nginx\r\nX-Cache: Hit from cloudfront\r\nX-Amz-Cf-Pop: ARN53-P2\r\nAge: 70\r\nContent-Length: 103600\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 11980097301857042322\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\nAccess-Control-Allow-Origin: *\r\nCache-Control: max-age=864000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":103600,"size_decoded":0,"mime_type":"binary/octet-stream","magic":"data","md5":"3393fe10a3392cafc7e68c82f5f89ac9","sha1":"2d5da5ed7998e66b18221f716f41f7768a3c16fa","sha256":"af66689ecce4caa84e1a823402deb6d9bd8846845057b44da9d620014f1831c7","sha512":"6380e435621c50a736c8f9ca5e59cbbb42bae5a3fe3a7c6ec60eba4cc8b8122c7021c5c377bae38bc9c1dfb8da9d58d162bec9375f910698f7ca10eeee91961a","ssdeep":"3072:PI9g4UWfdoJ0I29GlZiEoKgpp+xWmzLg+p7stO6:PI97D1t9Mip+Vz8+p7stl","tlshash":"57a3126ffe18f5c4a7078f1586cf93532dcb5ee9e71a0ba84313460724ac5ab8888dd1","first_seen":"2025-12-21T09:59:58.325423Z","last_seen":"2026-01-15T17:27:52.547877Z","times_seen":467,"resource_available":false,"data":null}},"time_used":867,"timings":{"blocked":852,"dns":0,"connect":0,"send":0,"wait":13,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pic.wdsrie.cn/upload_01/upload/20250312/2025031218250999484.png","fqdn":"pic.wdsrie.cn","domain":"wdsrie.cn","tld":"cn"},"ip":{"addr":"43.152.140.79","port":443,"asn":139341,"as":"ACE","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://iw63v.crqeraf.xyz/archives/65129/","date":"2025-12-23T14:29:57.770Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.wdsrie.cn","organization":""},"issuer":{"commonName":"ZeroSSL ECC Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Sat, 20 Dec 2025 00:00:00 GMT","end":"Fri, 20 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E9:73:86:E2:44:76:13:6D:6B:AE:EE:E0:BA:B0:C0:68:B0:97:37:B8","sha256":"B9:DF:B5:64:69:80:D3:48:0B:F1:C2:39:96:52:89:9A:DE:23:24:F8:50:8B:E3:B3:38:A6:99:51:B3:9A:55:5E"}}},"request":{"raw":"GET /upload_01/upload/20250312/2025031218250999484.png HTTP/1.1\r\nHost: pic.wdsrie.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://iw63v.crqeraf.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Wed, 12 Mar 2025 10:25:15 GMT\r\nEtag: \"d3234085f68a8ed36b3acd13e17c18b1\"\r\nContent-Type: binary/octet-stream\r\nDate: Thu, 09 Oct 2025 21:24:12 GMT\r\nx-amz-server-side-encryption: AES256\r\nServer: nginx\r\nX-Cache: Hit from cloudfront\r\nX-Amz-Cf-Pop: ARN53-P2\r\nAge: 18392\r\nContent-Length: 1632\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 12088569223717563596\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\nAccess-Control-Allow-Origin: *\r\nCache-Control: max-age=864000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1632,"size_decoded":0,"mime_type":"binary/octet-stream","magic":"data","md5":"d3234085f68a8ed36b3acd13e17c18b1","sha1":"80feace81549769a98a66ca46f8b681641476631","sha256":"3bad0e5a83b047bc3d7cd97b33d3a9e37a4d454dfc4044e8c4d28609ae0f49bc","sha512":"641d89944b1a04b41f69bc22d72406edf03e6f1e2b2bbd012d86a78b205464f76fd39197976324ad9390618690fe133e14a69cbf077979fe9e3ccea07cf002be","ssdeep":"","tlshash":"73315c134f8d873302daf4d01dd70a869260ea9c33ae755608c9f1c72cdde72d0b8888","first_seen":"2025-03-06T15:56:26.299773Z","last_seen":"2026-04-03T18:43:45.377774Z","times_seen":7483,"resource_available":false,"data":null}},"time_used":930,"timings":{"blocked":905,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"iw63v.crqeraf.xyz/static/ldy/20230615/assets/js/index.js?v=20251130","fqdn":"iw63v.crqeraf.xyz","domain":"crqeraf.xyz","tld":"xyz"},"ip":{"addr":"154.207.127.39","port":443,"asn":0,"as":"","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://iw63v.crqeraf.xyz/archives/65129/","date":"2025-12-23T14:29:55.973Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"crqeraf.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 12 Dec 2025 08:17:25 GMT","end":"Thu, 12 Mar 2026 09:15:12 GMT"},"fingerprint":{"sha1":"9A:B6:D6:FC:9F:B5:E4:7C:4E:60:81:74:C5:1D:1F:16:43:65:9B:C0","sha256":"6B:D5:92:C2:2E:E8:B1:3D:EE:9E:2C:51:0B:D3:32:29:71:17:1E:3D:93:07:59:A9:C9:59:7C:A8:D8:9B:2B:8C"}}},"request":{"raw":"GET /static/ldy/20230615/assets/js/index.js?v=20251130 HTTP/1.1\r\nHost: iw63v.crqeraf.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://iw63v.crqeraf.xyz/archives/65129/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 23 Dec 2025 14:29:55 GMT\r\ncontent-type: application/javascript\r\npriority: u=2,i=?0\r\nserver: cloudflare\r\nlast-modified: Sat, 13 Sep 2025 03:47:27 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68c4e94f-1f9b\"\r\nexpires: Tue, 30 Dec 2025 07:16:36 GMT\r\ncache-control: public, max-age=604800, immutable\r\ncontent-encoding: gzip\r\nage: 25999\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=X84wRVjo3JBrRjWGzaNVkBAbUT%2B8gTeez9BRbpYZ%2BmEPOUuX0uiTdmlCHf0%2BCt7%2FK43Ai1XlaNBbCPAmUlQP0TaAbJS20awEe3RkqjpxsQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b288dd04b0156b4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8091,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with LF, NEL line terminators","md5":"74509f02c6bd0f6620cd0070f3dd3c28","sha1":"8452ad9e7b351d6b0a0f712c27cf4e5d08bfe24d","sha256":"f959d37178018cbb8bbc0f67a0f0b8ccc3cc5e847d2bb9eccd88034fc81038a6","sha512":"491857470695ed366ad5c9c6e11dfcfcbff32eeec2580ea6bd512599c0f7dce66e0593d08b72005272bba5385bda0dcc43f182c9278742c082cad65269785b30","ssdeep":"192:O71HiFixi6iZiliVOiniwiviFiehisizxO9ii+WiSuoaaitisvLwrRKc:giFixi6iZiliwiniwiviFiEisi09iFWf","tlshash":"4ff1e1db779208b04b4fa17a567f53583530905b1804d6693d2ccbd0cf24ab666bbfe8","first_seen":"2025-04-14T15:24:33.168171Z","last_seen":"2026-01-23T13:06:38.337441Z","times_seen":660,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-23","alert":"Sinkholed","trigger":"iw63v.crqeraf.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pic.wdsrie.cn/upload/upload/20231020/2023102015055616036.png","fqdn":"pic.wdsrie.cn","domain":"wdsrie.cn","tld":"cn"},"ip":{"addr":"43.152.140.79","port":443,"asn":139341,"as":"ACE","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://iw63v.crqeraf.xyz/archives/65129/","date":"2025-12-23T14:29:56.862Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.wdsrie.cn","organization":""},"issuer":{"commonName":"ZeroSSL ECC Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Sat, 20 Dec 2025 00:00:00 GMT","end":"Fri, 20 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E9:73:86:E2:44:76:13:6D:6B:AE:EE:E0:BA:B0:C0:68:B0:97:37:B8","sha256":"B9:DF:B5:64:69:80:D3:48:0B:F1:C2:39:96:52:89:9A:DE:23:24:F8:50:8B:E3:B3:38:A6:99:51:B3:9A:55:5E"}}},"request":{"raw":"GET /upload/upload/20231020/2023102015055616036.png HTTP/1.1\r\nHost: pic.wdsrie.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://iw63v.crqeraf.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Thu, 28 Dec 2023 12:24:12 GMT\r\nEtag: \"7280c172964f5b84343601fd4fe6ee88\"\r\nContent-Type: binary/octet-stream\r\nDate: Fri, 25 Jul 2025 20:13:21 GMT\r\nx-amz-server-side-encryption: AES256\r\nServer: nginx\r\nX-Cache: Hit from cloudfront\r\nX-Amz-Cf-Pop: ARN53-P2\r\nAge: 54706\r\nContent-Length: 688\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 14953714368575085055\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\nAccess-Control-Allow-Origin: *\r\nCache-Control: max-age=864000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":688,"size_decoded":0,"mime_type":"binary/octet-stream","magic":"data","md5":"7280c172964f5b84343601fd4fe6ee88","sha1":"f1c746dec387a07c1eb0df0c1f83e6ae06cb76e0","sha256":"9db253158989e622092695d841c75307dff6890823771e987932d1b5da20a752","sha512":"7ec134effebf6d7503bd51834a5cb25bae7fbb214f9e4740a222f175895d41cbfa3379f3e64c384698ab9f91f2201e8444c318588991685717eaf4c0fe5cf30b","ssdeep":"","tlshash":"e40144813d350b6ea37e15360939829ba401f48492ba65b1e3b4e3921d4e59090e52f4","first_seen":"2023-11-14T11:24:50Z","last_seen":"2026-04-03T18:43:45.402829Z","times_seen":7795,"resource_available":false,"data":null}},"time_used":188,"timings":{"blocked":178,"dns":0,"connect":0,"send":0,"wait":9,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pic.wdsrie.cn/upload_01/upload/20251222/2025122215215718378.png","fqdn":"pic.wdsrie.cn","domain":"wdsrie.cn","tld":"cn"},"ip":{"addr":"43.152.140.79","port":443,"asn":139341,"as":"ACE","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://iw63v.crqeraf.xyz/archives/65129/","date":"2025-12-23T14:29:57.232Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.wdsrie.cn","organization":""},"issuer":{"commonName":"ZeroSSL ECC Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Sat, 20 Dec 2025 00:00:00 GMT","end":"Fri, 20 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E9:73:86:E2:44:76:13:6D:6B:AE:EE:E0:BA:B0:C0:68:B0:97:37:B8","sha256":"B9:DF:B5:64:69:80:D3:48:0B:F1:C2:39:96:52:89:9A:DE:23:24:F8:50:8B:E3:B3:38:A6:99:51:B3:9A:55:5E"}}},"request":{"raw":"GET /upload_01/upload/20251222/2025122215215718378.png HTTP/1.1\r\nHost: pic.wdsrie.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://iw63v.crqeraf.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Mon, 22 Dec 2025 07:27:12 GMT\r\nEtag: \"ec9eb4704769ef50b055e1d6de19555a\"\r\nContent-Type: binary/octet-stream\r\nDate: Mon, 22 Dec 2025 07:27:13 GMT\r\nx-amz-server-side-encryption: AES256\r\nServer: nginx\r\nX-Cache: Hit from cloudfront\r\nX-Amz-Cf-Pop: ARN53-P2\r\nAge: 1324\r\nContent-Length: 299584\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 1520143869127050738\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\nAccess-Control-Allow-Origin: *\r\nCache-Control: max-age=864000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":299584,"size_decoded":0,"mime_type":"binary/octet-stream","magic":"data","md5":"ec9eb4704769ef50b055e1d6de19555a","sha1":"ce9bf71680f6d7fcd4285d95c0d303bc55361b8a","sha256":"dc5be655c9b09adc749cf3790e6c67fddaf858098ee531e22cdb47342f98c6f3","sha512":"3f6cf52b4c2069ce823a8c67b163a30c4f7afb3afd531a1d546d4e1fe1505f839c0b2851940d56a077d18cb47df9faaced054a33a38d512376fb7de1fdc58e62","ssdeep":"6144:LBwhtL5gMQ8sxz+vlS9aAx4gpVDGgGfU0ZlDF0GiUa07RwBWnN:ehp5gMQXzgAQWHpVy/f/ZlDRXa0lwcnN","tlshash":"bf54225395eaa712e4f10325e445ffd2353bd7a9a38132ca333afd094ac70d896642b7","first_seen":"2025-12-23T14:30:42.393755Z","last_seen":"2025-12-23T14:30:42.393755Z","times_seen":1,"resource_available":false,"data":null}},"time_used":925,"timings":{"blocked":902,"dns":0,"connect":0,"send":0,"wait":17,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pic.wdsrie.cn/upload_01/upload/20250828/2025082822562363627.png","fqdn":"pic.wdsrie.cn","domain":"wdsrie.cn","tld":"cn"},"ip":{"addr":"43.152.140.79","port":443,"asn":139341,"as":"ACE","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://iw63v.crqeraf.xyz/archives/65129/","date":"2025-12-23T14:29:57.615Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.wdsrie.cn","organization":""},"issuer":{"commonName":"ZeroSSL ECC Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Sat, 20 Dec 2025 00:00:00 GMT","end":"Fri, 20 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E9:73:86:E2:44:76:13:6D:6B:AE:EE:E0:BA:B0:C0:68:B0:97:37:B8","sha256":"B9:DF:B5:64:69:80:D3:48:0B:F1:C2:39:96:52:89:9A:DE:23:24:F8:50:8B:E3:B3:38:A6:99:51:B3:9A:55:5E"}}},"request":{"raw":"GET /upload_01/upload/20250828/2025082822562363627.png HTTP/1.1\r\nHost: pic.wdsrie.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://iw63v.crqeraf.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Thu, 28 Aug 2025 14:58:44 GMT\r\nEtag: \"de71250b4c97ff872c75bd8a983f475f\"\r\nContent-Type: binary/octet-stream\r\nDate: Fri, 10 Oct 2025 01:25:53 GMT\r\nx-amz-server-side-encryption: AES256\r\nServer: nginx\r\nX-Cache: Hit from cloudfront\r\nX-Amz-Cf-Pop: ARN53-P2\r\nAge: 3988\r\nContent-Length: 6144\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 9301205083116002233\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\nAccess-Control-Allow-Origin: *\r\nCache-Control: max-age=864000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6144,"size_decoded":0,"mime_type":"binary/octet-stream","magic":"data","md5":"de71250b4c97ff872c75bd8a983f475f","sha1":"0a60d2d4ffb16ff5c1fc395db1bafde213371c47","sha256":"50775fa36354fd2105d03127cb44a85c7cde335cf8ce23fdb8df9ddb26852d30","sha512":"0f6956cdff655091628b27f21a54e3fc280930e44219058668539d8921ee503bbbda93795c4f8d2fabbd46991cdd221d0877a01104ce94e7a06595a64402dac2","ssdeep":"96:Zc6z7QBBWpRnC5hWmehp22VRWkQrr4/lAy15WrQDTyy5cdTMbq7vn6IXPFMDbhs2:ZchrWplC5V8p24RjEs/Sy10MP/cdwbQa","tlshash":"99c16dd0aa289e7dff9090f57b37d15ac9dd0d82d1e059cac3d779a68448c00694ab88","first_seen":"2025-08-29T10:40:29.008707Z","last_seen":"2026-01-19T03:45:18.463293Z","times_seen":3224,"resource_available":false,"data":null}},"time_used":921,"timings":{"blocked":896,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.addtoany.com/menu/svg/icons/sms.js","fqdn":"static.addtoany.com","domain":"addtoany.com","tld":"com"},"ip":{"addr":"172.66.171.172","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://iw63v.crqeraf.xyz/archives/65129/","date":"2025-12-23T14:29:58.021Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"static.addtoany.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Dec 2025 13:28:50 GMT","end":"Sun, 22 Mar 2026 14:28:48 GMT"},"fingerprint":{"sha1":"83:E4:54:72:9E:E9:BE:F0:31:A0:E0:3B:5B:38:1D:25:57:6A:CE:67","sha256":"C2:A2:4F:7E:8C:0F:A8:AA:86:24:03:7D:6B:67:31:2E:38:54:D6:C4:27:59:FE:B4:3D:28:7C:D5:DC:F6:F1:1E"}}},"request":{"raw":"GET /menu/svg/icons/sms.js HTTP/1.1\r\nHost: static.addtoany.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://iw63v.crqeraf.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncf-cache-status: REVALIDATED\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: application/javascript\r\npriority: u=3,i=?0\r\naccess-control-allow-origin: *\r\ncache-control: max-age=7776000, stale-while-revalidate=30, public\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0UX%2F0tVLBxJsVCWtLPj7e56RNmX8UPLmVjtI1st6wYESZ5eHkWQ9NtNS8zVb%2FXgFvQs%2B0MGb3iHAhk8oUAJ4P%2BTmBhtZJqR0%2BsSXohYDXdsB\"}]}\r\netag: W/\"f047697927053d4c7c623fcad21d4716\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ndate: Tue, 23 Dec 2025 14:29:57 GMT\r\ncf-ray: 9b288ddd3a16569f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1303,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (1303), with no line terminators","md5":"3d619161b4679be7fbcdbc6e7219510e","sha1":"cefe1ce56517fa0f2701ad7686e9a9167890f5fb","sha256":"8aa5087a5c31564c259063d074756190d836a064365e67c0e8306b8e30267f9b","sha512":"fbf14b751905bb549e902677fe24079a31a6b2df456ece7b258ee7bf581e62ad1d40f42df72ecb884063d175770c0b82817e088736a61ff2792086bbc2bd65ba","ssdeep":"","tlshash":"bc21e1b3171455dc54abaa5fce30ac04a26de8edaa7a00c1851fdaa950cf94af503d52","first_seen":"2024-05-13T15:11:57Z","last_seen":"2026-04-03T18:43:45.439948Z","times_seen":7978,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.addtoany.com/menu/sm.25.html#type=core\u0026event=load","fqdn":"static.addtoany.com","domain":"addtoany.com","tld":"com"},"ip":{"addr":"172.66.171.172","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://iw63v.crqeraf.xyz/archives/65129/","date":"2025-12-23T14:29:56.675Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"static.addtoany.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Dec 2025 13:28:50 GMT","end":"Sun, 22 Mar 2026 14:28:48 GMT"},"fingerprint":{"sha1":"83:E4:54:72:9E:E9:BE:F0:31:A0:E0:3B:5B:38:1D:25:57:6A:CE:67","sha256":"C2:A2:4F:7E:8C:0F:A8:AA:86:24:03:7D:6B:67:31:2E:38:54:D6:C4:27:59:FE:B4:3D:28:7C:D5:DC:F6:F1:1E"}}},"request":{"raw":"GET /menu/sm.25.html HTTP/1.1\r\nHost: static.addtoany.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: text/html; charset=utf-8\r\npriority: u=4,i=?0\r\naccess-control-allow-origin: *\r\ncache-control: max-age=315360000, immutable\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=L4gpMFbDoUPrU9rCoUW8nMIPiW7CspANoeeaYuoMgbn5SEoo5gyVvZ7zyiM9E1%2BS3F3TIz%2F1NJe51%2B8E3oiQwA4S8B6luemGODVWTybniA%3D%3D\"}]}\r\netag: W/\"551efc5187c9f500b4e394155ba03720\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ndate: Tue, 23 Dec 2025 14:29:56 GMT\r\nage: 7462\r\ncf-ray: 9b288dd5294b569f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":716,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (624)","md5":"41b7ed0cbe240173eea85148fcba633e","sha1":"39acd5fe099974486a1c9ba11ba0fe7be6bc97ca","sha256":"274d4116239b63097bb7c16e56e27cbb5a77be20392fb8e2317c0a0235185cad","sha512":"1ee1d21b138a9f55f823b93d809b3bc58453ddfc3b3ee4d00a1010bbd4ec296546277c6777819cfb744c393ba93fe7578b60ccf0259fd17901f4542714d6c06f","ssdeep":"","tlshash":"c701448bf415382d9673172434e93d89d87e93609c402730b28f62e746c47e75b07b95","first_seen":"2024-01-05T10:14:09Z","last_seen":"2026-04-03T18:40:12.973197Z","times_seen":35923,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pic.wdsrie.cn/upload_01/upload/20250828/2025082822503517245.png","fqdn":"pic.wdsrie.cn","domain":"wdsrie.cn","tld":"cn"},"ip":{"addr":"43.152.140.79","port":443,"asn":139341,"as":"ACE","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://iw63v.crqeraf.xyz/archives/65129/","date":"2025-12-23T14:29:57.284Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.wdsrie.cn","organization":""},"issuer":{"commonName":"ZeroSSL ECC Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Sat, 20 Dec 2025 00:00:00 GMT","end":"Fri, 20 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E9:73:86:E2:44:76:13:6D:6B:AE:EE:E0:BA:B0:C0:68:B0:97:37:B8","sha256":"B9:DF:B5:64:69:80:D3:48:0B:F1:C2:39:96:52:89:9A:DE:23:24:F8:50:8B:E3:B3:38:A6:99:51:B3:9A:55:5E"}}},"request":{"raw":"GET /upload_01/upload/20250828/2025082822503517245.png HTTP/1.1\r\nHost: pic.wdsrie.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://iw63v.crqeraf.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Thu, 28 Aug 2025 14:58:47 GMT\r\nEtag: \"f317b7dc768b337e37ba17c84dd584c0\"\r\nContent-Type: binary/octet-stream\r\nDate: Thu, 28 Aug 2025 14:58:52 GMT\r\nx-amz-server-side-encryption: AES256\r\nServer: nginx\r\nX-Cache: Hit from cloudfront\r\nX-Amz-Cf-Pop: ARN53-P2\r\nAge: 56\r\nContent-Length: 834768\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 14906130952747120445\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\nAccess-Control-Allow-Origin: *\r\nCache-Control: max-age=864000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":834768,"size_decoded":0,"mime_type":"binary/octet-stream","magic":"data","md5":"f317b7dc768b337e37ba17c84dd584c0","sha1":"42fcf383e26fe8b86a0a62205792dd463917de00","sha256":"030864c5a375426872a945e5ae4e21a1800ddb6c1f1b9b57b7aaf74e7f1cbc9d","sha512":"74031dbbd1fa64a3433e7564b34c35b897ca616feddabecb35c3c9009be1373bcba28a5d6b0d222ab5f5b149d271477d19eb9933c316a7f3055a0edd82a5acae","ssdeep":"24576:z3hVs+8kr5Xq2ZT5VKZP+BHWel6IUu7YhIaaM:zxFrltV0mBxlAu7YhIaaM","tlshash":"2e0533d4653b1b4eaf0cda043be714b8218f2caf869a85491be52474044cb5f9adcff9","first_seen":"2025-08-29T10:40:28.943723Z","last_seen":"2026-01-12T02:23:07.904672Z","times_seen":2160,"resource_available":false,"data":null}},"time_used":1028,"timings":{"blocked":914,"dns":0,"connect":0,"send":0,"wait":71,"receive":43,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"heiliao.com/index/statistics_detail?id=65129\u0026plate_id=0","fqdn":"heiliao.com","domain":"heiliao.com","tld":"com"},"ip":{"addr":"3.167.2.63","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://iw63v.crqeraf.xyz/archives/65129/","date":"2025-12-23T14:29:56.670Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"heiliao.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Mon, 22 Dec 2025 00:00:00 GMT","end":"Wed, 20 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"E6:37:12:41:7E:C0:A0:A9:95:A8:F1:A3:E7:44:FA:C1:D9:E2:91:AA","sha256":"09:0E:DA:FA:2E:EF:EA:F0:0C:E4:93:6F:E9:5B:88:27:B0:6A:BA:5F:EC:33:8A:BD:1A:5E:15:83:F1:2A:56:7F"}}},"request":{"raw":"GET /index/statistics_detail?id=65129\u0026plate_id=0 HTTP/1.1\r\nHost: heiliao.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/html; charset=utf-8\r\ndate: Tue, 23 Dec 2025 14:29:56 GMT\r\naccess-control-allow-headers: content-type,token\r\nset-cookie: hl_oauth:v3=f2207652df1ff6a58a4a49a413f4e4b5; expires=Wed, 23-Dec-2026 14:29:56 GMT; Max-Age=31536000; path=/; domain=heiliao.com\r\nserver: nginx/1.22.1\r\np3p: CP=\"CAO PSA OUR\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, PUT,DELETE,OPTIONS,PATCH\r\nvary: Accept-Encoding\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 c66a2f390287242c7df16dd5190aa68e.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P2\r\nx-amz-cf-id: 2HHfe62wMhXZ6Oa63X9fsw8tZwi0geUSiBj4ryvldYqU-vax-GOeRg==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-03T18:31:03.533086Z","times_seen":13299059,"resource_available":true,"data":null}},"time_used":360,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":360,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pic.wdsrie.cn/upload/upload/20231208/2023120823295983993.png","fqdn":"pic.wdsrie.cn","domain":"wdsrie.cn","tld":"cn"},"ip":{"addr":"43.152.140.79","port":443,"asn":139341,"as":"ACE","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://iw63v.crqeraf.xyz/archives/65129/","date":"2025-12-23T14:29:56.928Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.wdsrie.cn","organization":""},"issuer":{"commonName":"ZeroSSL ECC Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Sat, 20 Dec 2025 00:00:00 GMT","end":"Fri, 20 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E9:73:86:E2:44:76:13:6D:6B:AE:EE:E0:BA:B0:C0:68:B0:97:37:B8","sha256":"B9:DF:B5:64:69:80:D3:48:0B:F1:C2:39:96:52:89:9A:DE:23:24:F8:50:8B:E3:B3:38:A6:99:51:B3:9A:55:5E"}}},"request":{"raw":"GET /upload/upload/20231208/2023120823295983993.png HTTP/1.1\r\nHost: pic.wdsrie.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://iw63v.crqeraf.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Thu, 28 Dec 2023 12:24:12 GMT\r\nEtag: \"f81598e4b33d8dbaeeae0f429d0552cb\"\r\nContent-Type: binary/octet-stream\r\nDate: Sat, 26 Jul 2025 05:48:42 GMT\r\nx-amz-server-side-encryption: AES256\r\nServer: nginx\r\nX-Cache: Hit from cloudfront\r\nX-Amz-Cf-Pop: ARN53-P2\r\nAge: 20185\r\nContent-Length: 1232\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 9805593172990162191\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\nAccess-Control-Allow-Origin: *\r\nCache-Control: max-age=864000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1232,"size_decoded":0,"mime_type":"binary/octet-stream","magic":"data","md5":"f81598e4b33d8dbaeeae0f429d0552cb","sha1":"f95d1757261bec4e8a0401b3c5fb2d83015413fd","sha256":"1dc594e1ecb5d251dc58f35f91798c4a6fa36d35074d3b851789f75a8c64a27c","sha512":"513a17d952f6f8678694dd539eb3e1820a75521a7acf4560979eabd86362d8d523bbf57010a364b6a1af2e99293c32f2e71cf31a60942c148b756454d81e164e","ssdeep":"","tlshash":"2d210af31b135d6d14443238af4ba7e4d1800d786056eab826ceb29c6aa854bf1757d0","first_seen":"2024-04-20T21:23:38Z","last_seen":"2026-04-03T18:43:45.447746Z","times_seen":7526,"resource_available":false,"data":null}},"time_used":158,"timings":{"blocked":149,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pic.wdsrie.cn/upload_01/upload/20250828/2025082822515080094.png","fqdn":"pic.wdsrie.cn","domain":"wdsrie.cn","tld":"cn"},"ip":{"addr":"43.152.140.79","port":443,"asn":139341,"as":"ACE","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://iw63v.crqeraf.xyz/archives/65129/","date":"2025-12-23T14:29:57.311Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.wdsrie.cn","organization":""},"issuer":{"commonName":"ZeroSSL ECC Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Sat, 20 Dec 2025 00:00:00 GMT","end":"Fri, 20 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E9:73:86:E2:44:76:13:6D:6B:AE:EE:E0:BA:B0:C0:68:B0:97:37:B8","sha256":"B9:DF:B5:64:69:80:D3:48:0B:F1:C2:39:96:52:89:9A:DE:23:24:F8:50:8B:E3:B3:38:A6:99:51:B3:9A:55:5E"}}},"request":{"raw":"GET /upload_01/upload/20250828/2025082822515080094.png HTTP/1.1\r\nHost: pic.wdsrie.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://iw63v.crqeraf.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Thu, 28 Aug 2025 14:58:44 GMT\r\nEtag: \"fc7af4e703116b1b5c583b4864934bf3\"\r\nContent-Type: binary/octet-stream\r\nDate: Sun, 09 Nov 2025 05:58:08 GMT\r\nx-amz-server-side-encryption: AES256\r\nServer: nginx\r\nX-Cache: Hit from cloudfront\r\nX-Amz-Cf-Pop: ARN53-P2\r\nAge: 68018\r\nContent-Length: 4112\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 4384643987879386392\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\nAccess-Control-Allow-Origin: *\r\nCache-Control: max-age=864000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4112,"size_decoded":0,"mime_type":"binary/octet-stream","magic":"data","md5":"fc7af4e703116b1b5c583b4864934bf3","sha1":"823cfd91e0fb10528804483f314cad88d7488495","sha256":"7f218c06e739299948f6ab732880bb5d7869ebba440d025a4181976373f88f47","sha512":"430a19900856e73f32b4555e85b042e421f3e888a59b379eb9cb39f3d634a7633691221d15150178a2063b61f69146f1d0dbfaf04d64c6a8072750c68cbc8778","ssdeep":"48:puZWmUUTIh93rQYahh9PjZOBXmkyIUWadrms1sGKIhUuyZEMQzRzknQCWnXyJI6e:ObAGZjZUZyPpxIIE8zRNCcQYDQaozZ1+","tlshash":"1d819f2daa07dd87d507ca5b02c67ef23707229f0e364887e5591b90acef3c021a4e50","first_seen":"2024-07-11T19:59:15Z","last_seen":"2026-04-03T18:18:51.589954Z","times_seen":4442,"resource_available":false,"data":null}},"time_used":1090,"timings":{"blocked":1081,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pic.wdsrie.cn/upload_01/upload/20251213/2025121316282521929.gif","fqdn":"pic.wdsrie.cn","domain":"wdsrie.cn","tld":"cn"},"ip":{"addr":"43.152.140.79","port":443,"asn":139341,"as":"ACE","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://iw63v.crqeraf.xyz/archives/65129/","date":"2025-12-23T14:29:57.722Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.wdsrie.cn","organization":""},"issuer":{"commonName":"ZeroSSL ECC Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Sat, 20 Dec 2025 00:00:00 GMT","end":"Fri, 20 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E9:73:86:E2:44:76:13:6D:6B:AE:EE:E0:BA:B0:C0:68:B0:97:37:B8","sha256":"B9:DF:B5:64:69:80:D3:48:0B:F1:C2:39:96:52:89:9A:DE:23:24:F8:50:8B:E3:B3:38:A6:99:51:B3:9A:55:5E"}}},"request":{"raw":"GET /upload_01/upload/20251213/2025121316282521929.gif HTTP/1.1\r\nHost: pic.wdsrie.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://iw63v.crqeraf.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Sat, 13 Dec 2025 08:28:31 GMT\r\nEtag: \"95c0f34b463a1a6bad4dbfa6e3fef31f\"\r\nContent-Type: binary/octet-stream\r\nDate: Sat, 13 Dec 2025 08:28:39 GMT\r\nx-amz-server-side-encryption: AES256\r\nServer: nginx\r\nX-Cache: Hit from cloudfront\r\nX-Amz-Cf-Pop: ARN53-P2\r\nAge: 279\r\nContent-Length: 230064\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 3821422413927418195\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\nAccess-Control-Allow-Origin: *\r\nCache-Control: max-age=864000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":230064,"size_decoded":0,"mime_type":"binary/octet-stream","magic":"data","md5":"95c0f34b463a1a6bad4dbfa6e3fef31f","sha1":"5cde3f1b838be750eef95f482d4adc988cceb4c9","sha256":"e5fce689a6a73ec8f95e6f8c2b6e1ca948b7c824e7917e6f303c314761b7945f","sha512":"426eb628990014de2d16d10b28fa7e7f2bb0ad58f683b12645c8efbe75e25e35b5e07596f0e28e963809f19814ea0637d43d532603a26c439121b14be8bb5e8d","ssdeep":"3072:YqY+izAbIXSDEWAGCLJ6TgOjLfeWTNhLqogXgvxMb3hLSXdM8TRDVFpO/xZEB35:YqY+IoIX63JNXsgvxq3WRTRRFwxZEBJ","tlshash":"10242339b97348a53caae2c71213f3138e1368d97decab55b57a0415dd5a0fca0bf884","first_seen":"2025-12-16T02:09:18.534221Z","last_seen":"2025-12-28T12:55:50.126652Z","times_seen":193,"resource_available":false,"data":null}},"time_used":884,"timings":{"blocked":843,"dns":0,"connect":0,"send":0,"wait":35,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"iw63v.crqeraf.xyz/static/common/imageZoom.js?v=20251130","fqdn":"iw63v.crqeraf.xyz","domain":"crqeraf.xyz","tld":"xyz"},"ip":{"addr":"154.207.127.39","port":443,"asn":0,"as":"","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://iw63v.crqeraf.xyz/archives/65129/","date":"2025-12-23T14:29:56.089Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"crqeraf.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 12 Dec 2025 08:17:25 GMT","end":"Thu, 12 Mar 2026 09:15:12 GMT"},"fingerprint":{"sha1":"9A:B6:D6:FC:9F:B5:E4:7C:4E:60:81:74:C5:1D:1F:16:43:65:9B:C0","sha256":"6B:D5:92:C2:2E:E8:B1:3D:EE:9E:2C:51:0B:D3:32:29:71:17:1E:3D:93:07:59:A9:C9:59:7C:A8:D8:9B:2B:8C"}}},"request":{"raw":"GET /static/common/imageZoom.js?v=20251130 HTTP/1.1\r\nHost: iw63v.crqeraf.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://iw63v.crqeraf.xyz/archives/65129/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 23 Dec 2025 14:29:55 GMT\r\ncontent-type: application/javascript\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\nlast-modified: Thu, 20 Nov 2025 11:34:18 GMT\r\nvary: Accept-Encoding\r\netag: W/\"691efcba-d64\"\r\nexpires: Tue, 30 Dec 2025 07:16:37 GMT\r\ncache-control: public, max-age=604800, immutable\r\ncontent-encoding: gzip\r\nage: 25998\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jBDAk%2BuI7Ay43N2a7ciWeXwsD49iphQt1eTi8anikVxexiOcGVcncpQqJEC1ScTe4p5DVFATxHLxshj17dHffBoxsy6tmro%2BVSnmivrNDg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b288dd0ab6c56b4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3428,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"7bdd0f1534db1206721c7c37b4038161","sha1":"647e0f7ff0548d594a27aa622bcd21c12f7203bd","sha256":"f1de47de2ba08a9d8c059a664dbb17a9500b3efef3d37b18adf0b970b4dad128","sha512":"f459aa8ffe84f70751a7429c05024eb0bca42d8723b80d3d48028494353fbdab2e4e0565999f7850a71ad93b99f1722a9bb8d3d7b3bcb054143dda2e11ff8337","ssdeep":"","tlshash":"386100452ab211249333542f0bafe21579944113e605de093bcdcb6edfe1a7481ba6f7","first_seen":"2025-06-27T04:20:30.534386Z","last_seen":"2026-03-30T00:23:21.699299Z","times_seen":7024,"resource_available":true,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-23","alert":"Sinkholed","trigger":"iw63v.crqeraf.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pic.wdsrie.cn/upload_01/upload/20251218/2025121817425477978.gif","fqdn":"pic.wdsrie.cn","domain":"wdsrie.cn","tld":"cn"},"ip":{"addr":"43.152.140.79","port":443,"asn":139341,"as":"ACE","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://iw63v.crqeraf.xyz/archives/65129/","date":"2025-12-23T14:29:57.314Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.wdsrie.cn","organization":""},"issuer":{"commonName":"ZeroSSL ECC Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Sat, 20 Dec 2025 00:00:00 GMT","end":"Fri, 20 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E9:73:86:E2:44:76:13:6D:6B:AE:EE:E0:BA:B0:C0:68:B0:97:37:B8","sha256":"B9:DF:B5:64:69:80:D3:48:0B:F1:C2:39:96:52:89:9A:DE:23:24:F8:50:8B:E3:B3:38:A6:99:51:B3:9A:55:5E"}}},"request":{"raw":"GET /upload_01/upload/20251218/2025121817425477978.gif HTTP/1.1\r\nHost: pic.wdsrie.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://iw63v.crqeraf.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Thu, 18 Dec 2025 09:43:01 GMT\r\nEtag: \"4f5d31730ed01f631b5f045f20a8e510\"\r\nContent-Type: binary/octet-stream\r\nDate: Thu, 18 Dec 2025 09:43:20 GMT\r\nx-amz-server-side-encryption: AES256\r\nServer: nginx\r\nX-Cache: Hit from cloudfront\r\nX-Amz-Cf-Pop: ARN53-P2\r\nAge: 62\r\nContent-Length: 291136\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 14109438230527403888\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\nAccess-Control-Allow-Origin: *\r\nCache-Control: max-age=864000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":291136,"size_decoded":0,"mime_type":"binary/octet-stream","magic":"data","md5":"4f5d31730ed01f631b5f045f20a8e510","sha1":"15cab191026b33a072826a15ab317c73ae924597","sha256":"be3db74e2bf27bbb22673f558768bd16f2071b6c1f449a19a55fec61aa80a6b3","sha512":"a4f7e6225267866146e8d495639fc6869172be97457a1e5c014f0842551942a6cfb9b654d13db2da8607ed9c7b614f1ff8d796197777d2a364e7ad1b55b8e8a1","ssdeep":"6144:atpvIGlUaMmUvwmROHq+RCn1zRltgatDQgUTrFIvEJpKh:SZ9lUVm6iYXjjWFIoMh","tlshash":"e45423d047712bb983bcdaf26756354e31af9b2de13285f5a5626b13e284404c37beb0","first_seen":"2025-11-27T04:42:35.569726Z","last_seen":"2026-04-02T21:58:28.506396Z","times_seen":1029,"resource_available":false,"data":null}},"time_used":1106,"timings":{"blocked":1088,"dns":0,"connect":0,"send":0,"wait":8,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pic.wdsrie.cn/upload/upload/20231020/2023102017471337877.png","fqdn":"pic.wdsrie.cn","domain":"wdsrie.cn","tld":"cn"},"ip":{"addr":"43.152.140.79","port":443,"asn":139341,"as":"ACE","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://iw63v.crqeraf.xyz/archives/65129/","date":"2025-12-23T14:29:56.933Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.wdsrie.cn","organization":""},"issuer":{"commonName":"ZeroSSL ECC Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Sat, 20 Dec 2025 00:00:00 GMT","end":"Fri, 20 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E9:73:86:E2:44:76:13:6D:6B:AE:EE:E0:BA:B0:C0:68:B0:97:37:B8","sha256":"B9:DF:B5:64:69:80:D3:48:0B:F1:C2:39:96:52:89:9A:DE:23:24:F8:50:8B:E3:B3:38:A6:99:51:B3:9A:55:5E"}}},"request":{"raw":"GET /upload/upload/20231020/2023102017471337877.png HTTP/1.1\r\nHost: pic.wdsrie.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://iw63v.crqeraf.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Thu, 28 Dec 2023 12:24:12 GMT\r\nEtag: \"39056cfda62f847ea7891ed43d5dcbb5\"\r\nContent-Type: binary/octet-stream\r\nDate: Sat, 26 Jul 2025 05:36:16 GMT\r\nx-amz-server-side-encryption: AES256\r\nServer: nginx\r\nX-Cache: Hit from cloudfront\r\nX-Amz-Cf-Pop: ARN53-P2\r\nAge: 20857\r\nVary: Origin\r\nContent-Length: 784\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 2555394971480794545\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\nAccess-Control-Allow-Origin: *\r\nCache-Control: max-age=864000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":784,"size_decoded":0,"mime_type":"binary/octet-stream","magic":"data","md5":"39056cfda62f847ea7891ed43d5dcbb5","sha1":"bdc25fa86d1ddb6cef19c31a30d7a0f2432e4a12","sha256":"b3ea7aaab185ef53eba01c4aafbbfe4a23c151bdf6bcdf9d4c455d29d19d7b55","sha512":"b126f027bcaf37ab2c7f431e7ab40b9f0c776fdf3b92f9df47dbd51ea605062df293964e5d102f8f6b8e5aee29c276da843c25f796e88c9e616976375040bf73","ssdeep":"","tlshash":"73017552cc9765cbc45b18f31d004fa95c13eded476d55a96e8591502e03638c72cbfa","first_seen":"2023-11-14T11:24:50Z","last_seen":"2026-04-03T18:43:45.447274Z","times_seen":7527,"resource_available":false,"data":null}},"time_used":163,"timings":{"blocked":153,"dns":0,"connect":0,"send":0,"wait":9,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pic.wdsrie.cn/upload_01/upload/20241223/2024122316151495361.png","fqdn":"pic.wdsrie.cn","domain":"wdsrie.cn","tld":"cn"},"ip":{"addr":"43.152.140.79","port":443,"asn":139341,"as":"ACE","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://iw63v.crqeraf.xyz/archives/65129/","date":"2025-12-23T14:29:56.936Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.wdsrie.cn","organization":""},"issuer":{"commonName":"ZeroSSL ECC Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Sat, 20 Dec 2025 00:00:00 GMT","end":"Fri, 20 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E9:73:86:E2:44:76:13:6D:6B:AE:EE:E0:BA:B0:C0:68:B0:97:37:B8","sha256":"B9:DF:B5:64:69:80:D3:48:0B:F1:C2:39:96:52:89:9A:DE:23:24:F8:50:8B:E3:B3:38:A6:99:51:B3:9A:55:5E"}}},"request":{"raw":"GET /upload_01/upload/20241223/2024122316151495361.png HTTP/1.1\r\nHost: pic.wdsrie.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://iw63v.crqeraf.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Mon, 23 Dec 2024 08:15:19 GMT\r\nEtag: \"bc0ea3d9e679455bea8cd695b2884d1b\"\r\nContent-Type: binary/octet-stream\r\nDate: Sat, 26 Jul 2025 01:30:21 GMT\r\nx-amz-server-side-encryption: AES256\r\nServer: nginx\r\nX-Cache: Hit from cloudfront\r\nX-Amz-Cf-Pop: ARN53-P2\r\nAge: 35685\r\nContent-Length: 2448\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 1179353151316229809\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\nAccess-Control-Allow-Origin: *\r\nCache-Control: max-age=864000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2448,"size_decoded":0,"mime_type":"binary/octet-stream","magic":"data","md5":"bc0ea3d9e679455bea8cd695b2884d1b","sha1":"145f3644df56fa237eb6927af26b4884147c1765","sha256":"cc47fd52c4b5c68a24b328fcb3b9fdb0fbfffa3a75dc05584d19ab9c9ac9ed0c","sha512":"c34a0bdbe548570b1838870ccaf90b358d6c5c4f7b614d2005e5c0bd549f21f982c20f690a5b3678e62881caa340992401e312b080865ef72c80a4126b248d00","ssdeep":"","tlshash":"fa512bc54aa0fdafb16637039b50d1bb62a4aa962d282f16a6fc46175ac09d80111cb7","first_seen":"2024-12-28T10:58:27.377163Z","last_seen":"2026-04-03T18:43:45.450621Z","times_seen":7499,"resource_available":false,"data":null}},"time_used":160,"timings":{"blocked":151,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pic.wdsrie.cn/upload_01/upload/20251127/2025112716172182142.png","fqdn":"pic.wdsrie.cn","domain":"wdsrie.cn","tld":"cn"},"ip":{"addr":"43.152.140.79","port":443,"asn":139341,"as":"ACE","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://iw63v.crqeraf.xyz/archives/65129/","date":"2025-12-23T14:29:57.291Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.wdsrie.cn","organization":""},"issuer":{"commonName":"ZeroSSL ECC Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Sat, 20 Dec 2025 00:00:00 GMT","end":"Fri, 20 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E9:73:86:E2:44:76:13:6D:6B:AE:EE:E0:BA:B0:C0:68:B0:97:37:B8","sha256":"B9:DF:B5:64:69:80:D3:48:0B:F1:C2:39:96:52:89:9A:DE:23:24:F8:50:8B:E3:B3:38:A6:99:51:B3:9A:55:5E"}}},"request":{"raw":"GET /upload_01/upload/20251127/2025112716172182142.png HTTP/1.1\r\nHost: pic.wdsrie.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://iw63v.crqeraf.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Thu, 27 Nov 2025 08:19:42 GMT\r\nEtag: \"821621547a552ce78b976248a2834976\"\r\nContent-Type: binary/octet-stream\r\nDate: Thu, 27 Nov 2025 08:19:51 GMT\r\nx-amz-server-side-encryption: AES256\r\nServer: nginx\r\nX-Cache: Hit from cloudfront\r\nX-Amz-Cf-Pop: ARN53-P2\r\nAge: 72905\r\nContent-Length: 14016\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 15117119845547733691\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\nAccess-Control-Allow-Origin: *\r\nCache-Control: max-age=864000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":14016,"size_decoded":0,"mime_type":"binary/octet-stream","magic":"data","md5":"821621547a552ce78b976248a2834976","sha1":"ab8ab881ffa135ac47617a230239d00d06800add","sha256":"dc531e36a178f21cd15fa6f22213fe9c66e9d1c25c93c23e5bea72a71305d74e","sha512":"dce7cfe2bbf348ca9200a2cd4f6a2848096a6e23a1eca3d7572fc2620090682708deda4e398e1642b54ba24546847e74458797299c04bd7c343fa0a957367ee6","ssdeep":"384:hwRWavu+xHnQCAjT9ou/9yCjFHc8BblufuQGwJ1Q:CRWkxHdGTJFFEfFG0Q","tlshash":"ab52d12ac9607e06d7f6ccee44562b413671783ae8331bbf877515878d3313ac92b291","first_seen":"2025-06-17T09:03:02.062881Z","last_seen":"2026-04-03T18:18:51.51391Z","times_seen":4320,"resource_available":false,"data":null}},"time_used":1089,"timings":{"blocked":1068,"dns":0,"connect":0,"send":0,"wait":20,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pic.wdsrie.cn/upload_01/upload/20250327/2025032716290624638.jpeg","fqdn":"pic.wdsrie.cn","domain":"wdsrie.cn","tld":"cn"},"ip":{"addr":"43.152.140.79","port":443,"asn":139341,"as":"ACE","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://iw63v.crqeraf.xyz/archives/65129/","date":"2025-12-23T14:29:57.352Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.wdsrie.cn","organization":""},"issuer":{"commonName":"ZeroSSL ECC Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Sat, 20 Dec 2025 00:00:00 GMT","end":"Fri, 20 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E9:73:86:E2:44:76:13:6D:6B:AE:EE:E0:BA:B0:C0:68:B0:97:37:B8","sha256":"B9:DF:B5:64:69:80:D3:48:0B:F1:C2:39:96:52:89:9A:DE:23:24:F8:50:8B:E3:B3:38:A6:99:51:B3:9A:55:5E"}}},"request":{"raw":"GET /upload_01/upload/20250327/2025032716290624638.jpeg HTTP/1.1\r\nHost: pic.wdsrie.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://iw63v.crqeraf.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Thu, 27 Mar 2025 08:56:32 GMT\r\nEtag: \"15fee5aa7a8c39039c03e8130d005837\"\r\nContent-Type: binary/octet-stream\r\nDate: Tue, 16 Sep 2025 08:47:33 GMT\r\nx-amz-server-side-encryption: AES256\r\nServer: nginx\r\nX-Cache: Hit from cloudfront\r\nX-Amz-Cf-Pop: ARN53-P2\r\nAge: 34\r\nContent-Length: 23584\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 4379663763503867497\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\nAccess-Control-Allow-Origin: *\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":23584,"size_decoded":0,"mime_type":"binary/octet-stream","magic":"data","md5":"15fee5aa7a8c39039c03e8130d005837","sha1":"6b1b4984402143e4847e365280ad0bb8e3f432c7","sha256":"8971b1ee3b81186a21259e1a55e82ae59637d9cf01ce4c9370700de8da2ae92b","sha512":"9cbfffc7a05891198de20b19267191e5b5e33001ab62b7e6af4f5c48bc989cff553175ee6ebea79f9927ee1f1cf362ebe8665189ae24bb0729077921870ddd33","ssdeep":"384:jujpOEgALEaDpOK6wofNHpgjhDHbL7cMqCp+Fxdn5LRQscPOt3hG6a6oqIp4HtEc:jujpHgu9ZQJgl/vqLxx5mscPOt3fa6oS","tlshash":"bab2f13e91ec119d5dfee3968aa438012f78051f45854db68f333da03b9f9021765d90","first_seen":"2024-12-27T07:31:17.173875Z","last_seen":"2026-04-03T12:20:14.959478Z","times_seen":3309,"resource_available":false,"data":null}},"time_used":1122,"timings":{"blocked":1113,"dns":0,"connect":0,"send":0,"wait":8,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pic.wdsrie.cn/upload_01/upload/20250828/2025082822540237608.jpeg","fqdn":"pic.wdsrie.cn","domain":"wdsrie.cn","tld":"cn"},"ip":{"addr":"43.152.140.79","port":443,"asn":139341,"as":"ACE","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://iw63v.crqeraf.xyz/archives/65129/","date":"2025-12-23T14:29:57.353Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.wdsrie.cn","organization":""},"issuer":{"commonName":"ZeroSSL ECC Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Sat, 20 Dec 2025 00:00:00 GMT","end":"Fri, 20 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E9:73:86:E2:44:76:13:6D:6B:AE:EE:E0:BA:B0:C0:68:B0:97:37:B8","sha256":"B9:DF:B5:64:69:80:D3:48:0B:F1:C2:39:96:52:89:9A:DE:23:24:F8:50:8B:E3:B3:38:A6:99:51:B3:9A:55:5E"}}},"request":{"raw":"GET /upload_01/upload/20250828/2025082822540237608.jpeg HTTP/1.1\r\nHost: pic.wdsrie.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://iw63v.crqeraf.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Thu, 28 Aug 2025 14:58:44 GMT\r\nEtag: \"5913024d6bf5187555b4a1cc0d7c579c\"\r\nContent-Type: binary/octet-stream\r\nDate: Thu, 28 Aug 2025 14:58:45 GMT\r\nx-amz-server-side-encryption: AES256\r\nServer: nginx\r\nX-Cache: Hit from cloudfront\r\nX-Amz-Cf-Pop: ARN53-P2\r\nAge: 63\r\nContent-Length: 13600\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 8775591477535298379\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\nAccess-Control-Allow-Origin: *\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":13600,"size_decoded":0,"mime_type":"binary/octet-stream","magic":"data","md5":"5913024d6bf5187555b4a1cc0d7c579c","sha1":"d0d63d09a344666371d492bac91ff01da6bc06c6","sha256":"45a1a8b222cb28861e26292fb363b7d71513edfef541a557ccbfc1f8e82361a8","sha512":"1c80833dcd6ce91eaece5b113dcf148659c35b0619ba8babadd7183f13b4f5ad7009f5b772d7d62f6be90bb336ea414addd8b55f4c160cb3e6ba832db49c1cd4","ssdeep":"384:+hGzQI/GYZCoo82bKav7W70JnUeJjb7L2J6CL:+hFI/GqCoo821jWoljb7CgCL","tlshash":"f452c0318ec3895b7bc0fc368af992ad89085bcb414606ee1543d7f38e3de5a3508549","first_seen":"2025-04-14T20:37:59.177448Z","last_seen":"2026-01-19T03:45:18.481363Z","times_seen":3206,"resource_available":false,"data":null}},"time_used":1136,"timings":{"blocked":1113,"dns":0,"connect":0,"send":0,"wait":22,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"iw63v.crqeraf.xyz/static/pc/img/search.5166afa.png","fqdn":"iw63v.crqeraf.xyz","domain":"crqeraf.xyz","tld":"xyz"},"ip":{"addr":"154.207.127.39","port":443,"asn":0,"as":"","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://iw63v.crqeraf.xyz/archives/65129/","date":"2025-12-23T14:29:56.021Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"crqeraf.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 12 Dec 2025 08:17:25 GMT","end":"Thu, 12 Mar 2026 09:15:12 GMT"},"fingerprint":{"sha1":"9A:B6:D6:FC:9F:B5:E4:7C:4E:60:81:74:C5:1D:1F:16:43:65:9B:C0","sha256":"6B:D5:92:C2:2E:E8:B1:3D:EE:9E:2C:51:0B:D3:32:29:71:17:1E:3D:93:07:59:A9:C9:59:7C:A8:D8:9B:2B:8C"}}},"request":{"raw":"GET /static/pc/img/search.5166afa.png HTTP/1.1\r\nHost: iw63v.crqeraf.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://iw63v.crqeraf.xyz/archives/65129/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 23 Dec 2025 14:29:55 GMT\r\ncontent-type: image/png\r\ncontent-length: 1515\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\nlast-modified: Sat, 13 Sep 2025 03:47:40 GMT\r\netag: \"68c4e95c-5eb\"\r\nexpires: Sun, 28 Dec 2025 18:17:46 GMT\r\ncache-control: public, max-age=604800, immutable\r\naccept-ranges: bytes\r\nage: 159129\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rlIfrpR06zAVcSbra8ifAojSlCpPefCokydQb3WWMJuKADE17YWaDmtJdAz4v1hgBcHCzrLIe1KOsk3wu8bM4xzBT0Bi6GGaixohCi0nlQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b288dd06b2456b4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1515,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 60 x 60, 8-bit/color RGBA, non-interlaced","md5":"2e9704528c6f3446ff79682939b3ca8a","sha1":"07d2402941bd8c5628d29fb433541b63c3131e6b","sha256":"a0a0d6d33961cc78bb5960ffc0c86a207b92ca847144484d7dfbd08456cab42b","sha512":"397abe4db6cbfd6f2cedfc980b7a233a7c71934526709e63bd977bfa85f8df099a4c869b136109df80a3bb84f7105ac0e9865e2d91156cfd13fdb5a8f4512525","ssdeep":"","tlshash":"1d31c7a323ae6d22e5f4adb84d7c71006f65c21c58c37b465b88a3f29e470648b546c7","first_seen":"2023-09-24T18:31:27Z","last_seen":"2026-04-03T18:43:45.437546Z","times_seen":7867,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-23","alert":"Sinkholed","trigger":"iw63v.crqeraf.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"iw63v.crqeraf.xyz/static/pc/img/email-ok.png","fqdn":"iw63v.crqeraf.xyz","domain":"crqeraf.xyz","tld":"xyz"},"ip":{"addr":"154.207.127.39","port":443,"asn":0,"as":"","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://iw63v.crqeraf.xyz/archives/65129/","date":"2025-12-23T14:29:56.041Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"crqeraf.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 12 Dec 2025 08:17:25 GMT","end":"Thu, 12 Mar 2026 09:15:12 GMT"},"fingerprint":{"sha1":"9A:B6:D6:FC:9F:B5:E4:7C:4E:60:81:74:C5:1D:1F:16:43:65:9B:C0","sha256":"6B:D5:92:C2:2E:E8:B1:3D:EE:9E:2C:51:0B:D3:32:29:71:17:1E:3D:93:07:59:A9:C9:59:7C:A8:D8:9B:2B:8C"}}},"request":{"raw":"GET /static/pc/img/email-ok.png HTTP/1.1\r\nHost: iw63v.crqeraf.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://iw63v.crqeraf.xyz/archives/65129/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 23 Dec 2025 14:29:55 GMT\r\ncontent-type: image/png\r\ncontent-length: 4393\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\nlast-modified: Sat, 13 Sep 2025 03:47:28 GMT\r\netag: \"68c4e950-1129\"\r\nexpires: Mon, 29 Dec 2025 07:49:08 GMT\r\ncache-control: public, max-age=604800, immutable\r\naccept-ranges: bytes\r\nage: 110447\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mkf3Wezn41DBmE4bIkfL8eHx2IgW5tvuThm6LvStOtdu6GlMXnpEaY5qZhumehcz4es1opAD0NRDW0Ge%2FhVcqlnQUSVe8VtSKABa7PnU0w%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b288dd06b2956b4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4393,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 119 x 122, 8-bit colormap, non-interlaced","md5":"9ebcecc7415b1bbb07b5a464d0292a41","sha1":"eca92a025e53dd781eb341757cc00a231b9fa266","sha256":"73fd3733ef9a1aa276f60bcb41f3ddacf05f7d00fe4845eda9ef9747be41da0b","sha512":"657d5bf1189a9ae816b7fbcad13768b324ad57d0fc6469aa5edbd793110362a13039ea48cce7cf0326521db7e361387c58bda1853763e2f4f8911adb8363bab9","ssdeep":"96:+Z9S+CqWxW4ApmZ4XHjVzMnc5CI1YvxreiU66ceTFc:YDRp3XHjVzO2rYvjU7cOG","tlshash":"be914b9cbf4da8f86cf3ab7bc037bacc04954d86f9da50c086e6e05daa1b2459350949","first_seen":"2024-07-31T14:19:05Z","last_seen":"2026-04-03T18:43:45.457605Z","times_seen":7849,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-23","alert":"Sinkholed","trigger":"iw63v.crqeraf.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pic.wdsrie.cn/upload_01/upload/20250408/2025040815475169321.jpg","fqdn":"pic.wdsrie.cn","domain":"wdsrie.cn","tld":"cn"},"ip":{"addr":"43.152.140.79","port":443,"asn":139341,"as":"ACE","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://iw63v.crqeraf.xyz/archives/65129/","date":"2025-12-23T14:29:57.210Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.wdsrie.cn","organization":""},"issuer":{"commonName":"ZeroSSL ECC Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Sat, 20 Dec 2025 00:00:00 GMT","end":"Fri, 20 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E9:73:86:E2:44:76:13:6D:6B:AE:EE:E0:BA:B0:C0:68:B0:97:37:B8","sha256":"B9:DF:B5:64:69:80:D3:48:0B:F1:C2:39:96:52:89:9A:DE:23:24:F8:50:8B:E3:B3:38:A6:99:51:B3:9A:55:5E"}}},"request":{"raw":"GET /upload_01/upload/20250408/2025040815475169321.jpg HTTP/1.1\r\nHost: pic.wdsrie.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://iw63v.crqeraf.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Type: binary/octet-stream\r\nDate: Tue, 23 Dec 2025 14:29:59 GMT\r\nETag: \"b3504fe98ab6d1364d503a5ca7d03aec\"\r\nx-amz-server-side-encryption: AES256\r\nServer: nginx\r\nX-Cache: Miss from cloudfront\r\nVia: 1.1 e6b6fb416c0f8841679973bf6325a4a4.cloudfront.net (CloudFront)\r\nX-Amz-Cf-Pop: ARN53-P2\r\nLast-Modified: Tue, 08 Apr 2025 09:23:52 GMT\r\nContent-Length: 245984\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 1359619157909447690\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Miss\r\nAccess-Control-Allow-Origin: *\r\nCache-Control: max-age=864000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":245984,"size_decoded":0,"mime_type":"binary/octet-stream","magic":"data","md5":"b3504fe98ab6d1364d503a5ca7d03aec","sha1":"dc889f09c62073b7253c050129c01c49b88dc9be","sha256":"c8bfd1c6f58d78e169e940799f2c8c301532042fa5e5dd2315dc1c570b0c96e6","sha512":"80279df2d2f317129f93beb20dca865d642b490179caa9cd60cc3bfaf3c808226fcc28f3b35480d14231aca0560e3c7913c1014b05cb44701b678b20d10cdd4a","ssdeep":"6144:KQh9YCJorAV0djMuebTVJ711Ji4Ibp3+0cD:L9YCor9dgj114uX","tlshash":"ff34236379994b270351ae9780b2810734b0b3476cd6955ffa01fd79cb83db981b2e8b","first_seen":"2025-12-23T14:30:42.408818Z","last_seen":"2025-12-23T14:30:42.408818Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1556,"timings":{"blocked":529,"dns":0,"connect":0,"send":0,"wait":610,"receive":417,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pic.wdsrie.cn/upload_01/upload/20251223/2025122320471174279.gif","fqdn":"pic.wdsrie.cn","domain":"wdsrie.cn","tld":"cn"},"ip":{"addr":"43.152.140.79","port":443,"asn":139341,"as":"ACE","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://iw63v.crqeraf.xyz/archives/65129/","date":"2025-12-23T14:29:57.916Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.wdsrie.cn","organization":""},"issuer":{"commonName":"ZeroSSL ECC Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Sat, 20 Dec 2025 00:00:00 GMT","end":"Fri, 20 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E9:73:86:E2:44:76:13:6D:6B:AE:EE:E0:BA:B0:C0:68:B0:97:37:B8","sha256":"B9:DF:B5:64:69:80:D3:48:0B:F1:C2:39:96:52:89:9A:DE:23:24:F8:50:8B:E3:B3:38:A6:99:51:B3:9A:55:5E"}}},"request":{"raw":"GET /upload_01/upload/20251223/2025122320471174279.gif HTTP/1.1\r\nHost: pic.wdsrie.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://iw63v.crqeraf.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Tue, 23 Dec 2025 12:47:18 GMT\r\nEtag: \"283a7258f252e0de1adfcbe68b731449\"\r\nContent-Type: binary/octet-stream\r\nDate: Tue, 23 Dec 2025 12:47:26 GMT\r\nx-amz-server-side-encryption: AES256\r\nServer: nginx\r\nX-Cache: Hit from cloudfront\r\nX-Amz-Cf-Pop: ARN53-P2\r\nAge: 211\r\nContent-Length: 104976\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 308695296461959507\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\nAccess-Control-Allow-Origin: *\r\nCache-Control: max-age=864000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":104976,"size_decoded":0,"mime_type":"binary/octet-stream","magic":"data","md5":"283a7258f252e0de1adfcbe68b731449","sha1":"d66034093ea1bc029b52bed60aa9c2961548d30d","sha256":"56b4f373a033eea1d47713193b4d93b595fec777714ffa6f6307e16447e47eea","sha512":"ebb9e2c423c3b8ae35257a8c006e4f770a10cacf5e8600106643d052be5397ccd00cb714d251cea41a364eac3c10cb793b7fdbf6d5e993500724a873ad74940d","ssdeep":"1536:Fc32C/EtZtpiDHEngsCWZYfEYBcaSRWvWkkkyLLFy6kGt68K0GDNV0DwDqbJmq:FcTx8gsCWZYfhXOkkPLQlBl0amwD4","tlshash":"d7a312cc9350f7c59e8c08e0860f6866f3296a15dbfb25f2554e50d0399e4be967f02e","first_seen":"2025-12-23T12:51:39.191374Z","last_seen":"2025-12-28T05:31:57.387305Z","times_seen":139,"resource_available":false,"data":null}},"time_used":854,"timings":{"blocked":836,"dns":0,"connect":0,"send":0,"wait":15,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pic.wdsrie.cn/upload_01/xiao/20251218/2025121810454719259.jpeg","fqdn":"pic.wdsrie.cn","domain":"wdsrie.cn","tld":"cn"},"ip":{"addr":"43.152.140.79","port":443,"asn":139341,"as":"ACE","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://iw63v.crqeraf.xyz/archives/65129/","date":"2025-12-23T14:29:57.784Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.wdsrie.cn","organization":""},"issuer":{"commonName":"ZeroSSL ECC Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Sat, 20 Dec 2025 00:00:00 GMT","end":"Fri, 20 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E9:73:86:E2:44:76:13:6D:6B:AE:EE:E0:BA:B0:C0:68:B0:97:37:B8","sha256":"B9:DF:B5:64:69:80:D3:48:0B:F1:C2:39:96:52:89:9A:DE:23:24:F8:50:8B:E3:B3:38:A6:99:51:B3:9A:55:5E"}}},"request":{"raw":"GET /upload_01/xiao/20251218/2025121810454719259.jpeg HTTP/1.1\r\nHost: pic.wdsrie.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://iw63v.crqeraf.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Thu, 18 Dec 2025 02:45:50 GMT\r\nEtag: \"094953ac56f5e2d53cdf6dbd887aeecc\"\r\nContent-Type: binary/octet-stream\r\nDate: Thu, 18 Dec 2025 22:10:50 GMT\r\nx-amz-server-side-encryption: AES256\r\nServer: nginx\r\nX-Cache: Hit from cloudfront\r\nX-Amz-Cf-Pop: ARN53-P2\r\nAge: 159\r\nContent-Length: 62704\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 8348862006529412602\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\nAccess-Control-Allow-Origin: *\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":62704,"size_decoded":0,"mime_type":"binary/octet-stream","magic":"data","md5":"094953ac56f5e2d53cdf6dbd887aeecc","sha1":"8f9c1aed6bf60a8236e9f4590eb0d556b0fb9fb4","sha256":"5e7ef0c46e0cb9b2a265a5f1d4f23259d2dfaea2377614c0e9e4632018c73fbb","sha512":"3fb9843830c39d4d93b1c2b8607e6f984eeae3d190785072b40061bb760965cdea4864cfe056b7a28bfe488e348032b2f3cc5707af727dcf075facc54405669d","ssdeep":"1536:qSisdA8rlQL+DpSUHrUu7gPX82x8Vn1+SfDx8KPF+14:qFsdAYbaC/fDBPFa4","tlshash":"f953021eadffbb1a01e532f04af1c8e46e400fa16b9ae7b56848dc7c7799c1027950d5","first_seen":"2025-12-23T14:30:42.410592Z","last_seen":"2025-12-23T14:30:42.410592Z","times_seen":1,"resource_available":false,"data":null}},"time_used":952,"timings":{"blocked":915,"dns":0,"connect":0,"send":0,"wait":33,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pic.wdsrie.cn/upload_01/upload/20251214/2025121411152825805.gif","fqdn":"pic.wdsrie.cn","domain":"wdsrie.cn","tld":"cn"},"ip":{"addr":"43.152.140.79","port":443,"asn":139341,"as":"ACE","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://iw63v.crqeraf.xyz/archives/65129/","date":"2025-12-23T14:29:57.914Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.wdsrie.cn","organization":""},"issuer":{"commonName":"ZeroSSL ECC Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Sat, 20 Dec 2025 00:00:00 GMT","end":"Fri, 20 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E9:73:86:E2:44:76:13:6D:6B:AE:EE:E0:BA:B0:C0:68:B0:97:37:B8","sha256":"B9:DF:B5:64:69:80:D3:48:0B:F1:C2:39:96:52:89:9A:DE:23:24:F8:50:8B:E3:B3:38:A6:99:51:B3:9A:55:5E"}}},"request":{"raw":"GET /upload_01/upload/20251214/2025121411152825805.gif HTTP/1.1\r\nHost: pic.wdsrie.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://iw63v.crqeraf.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Sun, 14 Dec 2025 03:15:37 GMT\r\nEtag: \"097859368286be1e789af28e60ffc5af\"\r\nContent-Type: binary/octet-stream\r\nDate: Sun, 14 Dec 2025 03:17:28 GMT\r\nx-amz-server-side-encryption: AES256\r\nServer: nginx\r\nX-Cache: Hit from cloudfront\r\nX-Amz-Cf-Pop: ARN53-P2\r\nAge: 87\r\nContent-Length: 98752\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 17000274542875151255\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\nAccess-Control-Allow-Origin: *\r\nCache-Control: max-age=864000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":98752,"size_decoded":0,"mime_type":"binary/octet-stream","magic":"data","md5":"097859368286be1e789af28e60ffc5af","sha1":"ce97ef777103d476c40d959cb36df857bd2cb999","sha256":"ab5579352fd0e241815ac8a409ebf98a8f5da2c6a7f8cedfe9125f0acf9264db","sha512":"e076e36afcb0f8083e97db370f7144bcf36eed3362efd6dffd63015f092bbfb89917306c6b489edf274e4ffcb227c79fc0839570be65bebee8327d736b4a5778","ssdeep":"3072:mDIKY48r62uYCXQpLOGbC+Wy2y1Da1TjMDwI:mivO2uop3CD8tQK5","tlshash":"8ca30239b2448b80e7debb3d8489b416f1f03d7c6b648db49638285235778cdd2626bd","first_seen":"2025-12-16T02:09:18.356238Z","last_seen":"2026-01-12T02:23:07.970863Z","times_seen":245,"resource_available":false,"data":null}},"time_used":837,"timings":{"blocked":824,"dns":0,"connect":0,"send":0,"wait":9,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"iw63v.crqeraf.xyz/static/pc/img/placeholder.d8718ab-4.png","fqdn":"iw63v.crqeraf.xyz","domain":"crqeraf.xyz","tld":"xyz"},"ip":{"addr":"154.207.127.39","port":443,"asn":0,"as":"","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://iw63v.crqeraf.xyz/archives/65129/","date":"2025-12-23T14:29:56.051Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"crqeraf.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 12 Dec 2025 08:17:25 GMT","end":"Thu, 12 Mar 2026 09:15:12 GMT"},"fingerprint":{"sha1":"9A:B6:D6:FC:9F:B5:E4:7C:4E:60:81:74:C5:1D:1F:16:43:65:9B:C0","sha256":"6B:D5:92:C2:2E:E8:B1:3D:EE:9E:2C:51:0B:D3:32:29:71:17:1E:3D:93:07:59:A9:C9:59:7C:A8:D8:9B:2B:8C"}}},"request":{"raw":"GET /static/pc/img/placeholder.d8718ab-4.png HTTP/1.1\r\nHost: iw63v.crqeraf.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://iw63v.crqeraf.xyz/archives/65129/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 23 Dec 2025 14:29:55 GMT\r\ncontent-type: image/png\r\ncontent-length: 5745\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\nlast-modified: Sat, 13 Sep 2025 03:47:28 GMT\r\netag: \"68c4e950-1671\"\r\nexpires: Sun, 28 Dec 2025 18:19:08 GMT\r\ncache-control: public, max-age=604800, immutable\r\naccept-ranges: bytes\r\nage: 159047\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0RTuGwhxAlrw%2FqMrdSnTBO1Xkqx4LisNIJ2VMvuPNukmUHELiYjqgjfHjhKk9NYBrpMDj6wVsmp0NWVfG%2BT0ulCaaiDeG%2Fz68YAfl1qQuw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b288dd0ab5d56b4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5745,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 464 x 120, 8-bit/color RGB, non-interlaced","md5":"0b6f76e1624f40e8430a17e735382761","sha1":"b2a0a5e9f53bd2c7838540bead0c597ce69aefa5","sha256":"3773556bd2433ededcfe2cc7fca5e72ea41f5c0436a41f8225f16851d6f18e9f","sha512":"e942712c340c9248eb697d23ebc84b80d86b7b3678f5843ce372cce66c281237b418744c19574eef9f3d03a4742f5ddef6562d0f5f34dd9bd1fa70f23e94f05b","ssdeep":"96:jwczgmy9zhbRrYYwK8C3UbHoY7I5gYiJ5X5RB+wp3h0Bpv9NeKe5CfIdk+ViFulD:94hxYYwK8CkMgRzHB+kxMt9zECAdkJup","tlshash":"52c139a6066889718afd3936310c8d1945b3b108d626fc15959121fdbf451f94d323fe","first_seen":"2025-09-06T13:11:55.061705Z","last_seen":"2026-04-03T18:43:45.409526Z","times_seen":7270,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-23","alert":"Sinkholed","trigger":"iw63v.crqeraf.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pic.wdsrie.cn/upload/upload/20240510/2024051000190046143.png","fqdn":"pic.wdsrie.cn","domain":"wdsrie.cn","tld":"cn"},"ip":{"addr":"43.152.140.79","port":443,"asn":139341,"as":"ACE","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://iw63v.crqeraf.xyz/archives/65129/","date":"2025-12-23T14:29:56.921Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.wdsrie.cn","organization":""},"issuer":{"commonName":"ZeroSSL ECC Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Sat, 20 Dec 2025 00:00:00 GMT","end":"Fri, 20 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E9:73:86:E2:44:76:13:6D:6B:AE:EE:E0:BA:B0:C0:68:B0:97:37:B8","sha256":"B9:DF:B5:64:69:80:D3:48:0B:F1:C2:39:96:52:89:9A:DE:23:24:F8:50:8B:E3:B3:38:A6:99:51:B3:9A:55:5E"}}},"request":{"raw":"GET /upload/upload/20240510/2024051000190046143.png HTTP/1.1\r\nHost: pic.wdsrie.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://iw63v.crqeraf.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Thu, 09 May 2024 16:19:14 GMT\r\nEtag: \"da1a82e93dc004a2487c00021d01f744\"\r\nContent-Type: binary/octet-stream\r\nDate: Fri, 25 Jul 2025 19:16:40 GMT\r\nx-amz-server-side-encryption: AES256\r\nServer: nginx\r\nX-Cache: Hit from cloudfront\r\nX-Amz-Cf-Pop: ARN53-P2\r\nAge: 58107\r\nContent-Length: 2080\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 3106815580074385811\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\nAccess-Control-Allow-Origin: *\r\nCache-Control: max-age=864000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2080,"size_decoded":0,"mime_type":"binary/octet-stream","magic":"data","md5":"da1a82e93dc004a2487c00021d01f744","sha1":"c9f94f819b2ff4082a15b28887936c069a1c8e37","sha256":"71a8b27bff804ce23d5d2b54b5c2114d83f65357120c4195272ee67062e2691d","sha512":"d32ad73764b5651183a5d85bf3c937fefbf84ab34274d70a41a04d7ece06c286c068d20cc65f97a1711c8ddeb1cd84b1d7fd72a53d59b772d490313653337cc7","ssdeep":"","tlshash":"3341fa6ce16145983549997efd45d651856cf002037c3c312f08cd7baf8981cda4c75a","first_seen":"2024-05-10T06:44:59Z","last_seen":"2026-04-03T18:43:45.446335Z","times_seen":7525,"resource_available":false,"data":null}},"time_used":156,"timings":{"blocked":148,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pic.wdsrie.cn/upload_01/upload/20251216/2025121612372112741.gif","fqdn":"pic.wdsrie.cn","domain":"wdsrie.cn","tld":"cn"},"ip":{"addr":"43.152.140.79","port":443,"asn":139341,"as":"ACE","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://iw63v.crqeraf.xyz/archives/65129/","date":"2025-12-23T14:29:57.288Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.wdsrie.cn","organization":""},"issuer":{"commonName":"ZeroSSL ECC Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Sat, 20 Dec 2025 00:00:00 GMT","end":"Fri, 20 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E9:73:86:E2:44:76:13:6D:6B:AE:EE:E0:BA:B0:C0:68:B0:97:37:B8","sha256":"B9:DF:B5:64:69:80:D3:48:0B:F1:C2:39:96:52:89:9A:DE:23:24:F8:50:8B:E3:B3:38:A6:99:51:B3:9A:55:5E"}}},"request":{"raw":"GET /upload_01/upload/20251216/2025121612372112741.gif HTTP/1.1\r\nHost: pic.wdsrie.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://iw63v.crqeraf.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Tue, 16 Dec 2025 04:37:29 GMT\r\nEtag: \"722b17762ab73efc84ed4175cebee50c\"\r\nContent-Type: binary/octet-stream\r\nDate: Tue, 16 Dec 2025 04:37:51 GMT\r\nx-amz-server-side-encryption: AES256\r\nServer: nginx\r\nX-Cache: Hit from cloudfront\r\nX-Amz-Cf-Pop: ARN53-P2\r\nAge: 1137\r\nContent-Length: 395600\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 16205084551936284460\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\nAccess-Control-Allow-Origin: *\r\nCache-Control: max-age=864000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":395600,"size_decoded":0,"mime_type":"binary/octet-stream","magic":"data","md5":"722b17762ab73efc84ed4175cebee50c","sha1":"c93591efacb7532d5e5c5e76fad9133cb24d7125","sha256":"942f586011bd71eb28d11aa22e9ba6838de1e740ce7c75099d4e8722330e8923","sha512":"c0bebf3ab40e0fe5f263c5ba95aed42f637c1149b2110af175405f1f589d694432ecd722ba72f967c941561352acd2909fd2a9bf50324d6ca3b57d43bbca731b","ssdeep":"12288:qN99lvzANXaqa+JAal2uf9qZ0TAU6yaAK8ykxt28KdEdR4Aj:m97voXaqHSuf9qiTAU6z6yiauv9j","tlshash":"c18423d1b2649875ad3b1abc6f878e7b3d29a153d3d3999339083c606001cf26562fbd","first_seen":"2025-12-12T04:56:20.161339Z","last_seen":"2026-04-03T18:18:51.484534Z","times_seen":2848,"resource_available":false,"data":null}},"time_used":1071,"timings":{"blocked":999,"dns":0,"connect":0,"send":0,"wait":63,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pic.wdsrie.cn/upload_01/upload/20250828/2025082822501886601.png","fqdn":"pic.wdsrie.cn","domain":"wdsrie.cn","tld":"cn"},"ip":{"addr":"43.152.140.79","port":443,"asn":139341,"as":"ACE","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://iw63v.crqeraf.xyz/archives/65129/","date":"2025-12-23T14:29:57.310Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.wdsrie.cn","organization":""},"issuer":{"commonName":"ZeroSSL ECC Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Sat, 20 Dec 2025 00:00:00 GMT","end":"Fri, 20 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E9:73:86:E2:44:76:13:6D:6B:AE:EE:E0:BA:B0:C0:68:B0:97:37:B8","sha256":"B9:DF:B5:64:69:80:D3:48:0B:F1:C2:39:96:52:89:9A:DE:23:24:F8:50:8B:E3:B3:38:A6:99:51:B3:9A:55:5E"}}},"request":{"raw":"GET /upload_01/upload/20250828/2025082822501886601.png HTTP/1.1\r\nHost: pic.wdsrie.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://iw63v.crqeraf.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Thu, 28 Aug 2025 14:58:45 GMT\r\nEtag: \"e93b09d8ad05e53c2b18ffe63d18abf3\"\r\nContent-Type: binary/octet-stream\r\nDate: Thu, 28 Aug 2025 14:58:45 GMT\r\nx-amz-server-side-encryption: AES256\r\nServer: nginx\r\nX-Cache: Hit from cloudfront\r\nX-Amz-Cf-Pop: ARN53-P2\r\nAge: 63\r\nContent-Length: 39056\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 14835324148420811031\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\nAccess-Control-Allow-Origin: *\r\nCache-Control: max-age=864000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":39056,"size_decoded":0,"mime_type":"binary/octet-stream","magic":"data","md5":"e93b09d8ad05e53c2b18ffe63d18abf3","sha1":"d14ba87a9fbb45c52d39079ff79d18eae08dc42c","sha256":"d87d1a19896a3ebbb144260c5e5b9431a8b2bdf2792d451608278d614266d830","sha512":"bde3cd001ed211f53aee267b7daefdc14eae2bb969452604043e6fe303e534735dd13cbdaaa61c1effc04198f1f6837c27f8b9b8e46e0dedd9dc06fe5c63e901","ssdeep":"768:Wrr23z/PzQqF6KezPboRm4dimPQYJGnjj6/jEIpU+XZfznjM5l:W+3zjQO6PPsRVksQY6uYIp3fXe","tlshash":"e9030280e6fb8649dbd1f09a057b87541a21adf32a7b01dbda20557f9443331c61af8d","first_seen":"2025-01-19T21:19:10.748037Z","last_seen":"2026-02-10T15:27:36.521124Z","times_seen":4469,"resource_available":false,"data":null}},"time_used":1081,"timings":{"blocked":1071,"dns":0,"connect":0,"send":0,"wait":8,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pic.wdsrie.cn/upload_01/upload/20251213/2025121317420875931.gif","fqdn":"pic.wdsrie.cn","domain":"wdsrie.cn","tld":"cn"},"ip":{"addr":"43.152.140.79","port":443,"asn":139341,"as":"ACE","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://iw63v.crqeraf.xyz/archives/65129/","date":"2025-12-23T14:29:57.310Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.wdsrie.cn","organization":""},"issuer":{"commonName":"ZeroSSL ECC Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Sat, 20 Dec 2025 00:00:00 GMT","end":"Fri, 20 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E9:73:86:E2:44:76:13:6D:6B:AE:EE:E0:BA:B0:C0:68:B0:97:37:B8","sha256":"B9:DF:B5:64:69:80:D3:48:0B:F1:C2:39:96:52:89:9A:DE:23:24:F8:50:8B:E3:B3:38:A6:99:51:B3:9A:55:5E"}}},"request":{"raw":"GET /upload_01/upload/20251213/2025121317420875931.gif HTTP/1.1\r\nHost: pic.wdsrie.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://iw63v.crqeraf.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Sat, 13 Dec 2025 09:42:19 GMT\r\nEtag: \"5396705deaa3cc79fe5aa23aa02bb1ed\"\r\nContent-Type: binary/octet-stream\r\nDate: Sat, 13 Dec 2025 09:42:25 GMT\r\nx-amz-server-side-encryption: AES256\r\nServer: nginx\r\nX-Cache: Hit from cloudfront\r\nX-Amz-Cf-Pop: ARN53-P2\r\nAge: 371\r\nContent-Length: 63584\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 10840040425611989534\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\nAccess-Control-Allow-Origin: *\r\nCache-Control: max-age=864000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":63584,"size_decoded":0,"mime_type":"binary/octet-stream","magic":"PGP Secret Sub-key -","md5":"5396705deaa3cc79fe5aa23aa02bb1ed","sha1":"188e762f32ad48a0eb65c52d0557597eeab28412","sha256":"62647f0152526c7b6bb065367807e3086f8ab3a3c44925d0e89a6f66fe619910","sha512":"eb2a6957b378e8cc3ccff3466a95c7c94f4e17599f498421386cd280ff17f1d4c56b9c819dad8a5fd2fab9b9dc95bb7d15e76964a9868c24cf69bfe3fe990891","ssdeep":"1536:iXRzO3LzWyuEUXW4UJU0/1QFL4I+hIL0MhcLbqjXedfiG:UzO3LzXuBXwUeOFtL0ZBiG","tlshash":"ee530268398677734c3fb0658efb8398bf57220156c88184674df6f83762c94d91c796","first_seen":"2025-12-16T02:09:18.38478Z","last_seen":"2026-03-01T14:07:32.980197Z","times_seen":4567,"resource_available":false,"data":null}},"time_used":1085,"timings":{"blocked":1071,"dns":0,"connect":0,"send":0,"wait":9,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pic.wdsrie.cn/upload_01/upload/20250524/2025052417021799364.png","fqdn":"pic.wdsrie.cn","domain":"wdsrie.cn","tld":"cn"},"ip":{"addr":"43.152.140.79","port":443,"asn":139341,"as":"ACE","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://iw63v.crqeraf.xyz/archives/65129/","date":"2025-12-23T14:29:57.765Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.wdsrie.cn","organization":""},"issuer":{"commonName":"ZeroSSL ECC Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Sat, 20 Dec 2025 00:00:00 GMT","end":"Fri, 20 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E9:73:86:E2:44:76:13:6D:6B:AE:EE:E0:BA:B0:C0:68:B0:97:37:B8","sha256":"B9:DF:B5:64:69:80:D3:48:0B:F1:C2:39:96:52:89:9A:DE:23:24:F8:50:8B:E3:B3:38:A6:99:51:B3:9A:55:5E"}}},"request":{"raw":"GET /upload_01/upload/20250524/2025052417021799364.png HTTP/1.1\r\nHost: pic.wdsrie.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://iw63v.crqeraf.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Sat, 24 May 2025 09:02:24 GMT\r\nEtag: \"224ebd44c09640efc16f3978356010af\"\r\nContent-Type: binary/octet-stream\r\nDate: Sat, 26 Jul 2025 11:00:00 GMT\r\nx-amz-server-side-encryption: AES256\r\nServer: nginx\r\nX-Cache: Hit from cloudfront\r\nX-Amz-Cf-Pop: ARN53-P2\r\nAge: 1506\r\nContent-Length: 480\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 18014975786620597766\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\nAccess-Control-Allow-Origin: *\r\nCache-Control: max-age=864000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":480,"size_decoded":0,"mime_type":"binary/octet-stream","magic":"data","md5":"224ebd44c09640efc16f3978356010af","sha1":"be142ac3d082ad12878857ad2d8ede0ce3a7d52c","sha256":"32c80322f73ed6e320c5e056742e24b3a703a26a10f39f4ba5cc414f50ae0a80","sha512":"72ddd2ff128722ba826bef78d79e5466ed8bf582784762181860da6a7edc31010599bccbc50a69a09c9e14142cc02ca6c62b3d089741405da898ab65488b95c5","ssdeep":"","tlshash":"ccf00e0528b508520c8c99c81db9631b0a65046cf7ac4c2972ca63e0ec184dba20f83e","first_seen":"2025-06-02T05:32:32.567116Z","last_seen":"2026-04-03T18:43:45.429312Z","times_seen":7468,"resource_available":false,"data":null}},"time_used":896,"timings":{"blocked":888,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"region1.analytics.google.com/g/collect?v=2\u0026tid=G-D19N9LPLRP\u0026gtm=45je5ca1v9105002050za200zb9218846652zd9218846652\u0026_p=1766500196361\u0026_gaz=1\u0026gcd=13l3l3l2l1l1\u0026npa=1\u0026dma_cps=syphamo\u0026dma=1\u0026cid=1028203053.1766500197\u0026ul=en-us\u0026sr=1280x1024\u0026frm=0\u0026pscdl=noapi\u0026_s=1\u0026tag_exp=103116026~103200004~104527906~104528500~104684208~104684211~105391252~115583767~115616986~115938466~115938468~116184927~116184929~116251938~116251940\u0026sid=1766500197\u0026sct=1\u0026seg=0\u0026dl=https%3A%2F%2Fiw63v.crqeraf.xyz%2Farchives%2F65129%2F\u0026dt=%E9%BB%91%E6%96%99%E7%BD%91-%E6%8E%A8%E7%89%B9%E9%AB%98%E9%A2%9C%E5%80%BC%E7%BD%91%E7%BA%A2%E5%A5%B3%E7%A5%9E%20%E7%8B%90%E7%8B%B8%E5%B0%8F%E5%A6%96%20%E6%9E%81%E5%93%81%E8%9C%9C%E6%A1%83%E8%87%80%E7%BE%8E%E4%B9%B3%E5%A4%A7%E9%95%BF%E8%85%BF%E8%BF%B7%E6%AD%BB%E4%BA%BA%EF%BC%81%E7%B2%89%E5%AB%A9%E8%9C%9C%E7%A9%B4%E9%85%8D%E9%80%86%E5%A4%A9%E7%88%86%E4%B9%B3%E6%92%B8%E7%AE%A1%E5%BF%85%E5%A4%87\u0026en=page_view\u0026_fv=1\u0026_ss=1\u0026_ee=1\u0026tfd=2845","fqdn":"region1.analytics.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"216.239.34.36","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://iw63v.crqeraf.xyz/archives/65129/","date":"2025-12-23T14:29:59.092Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:49:27 GMT","end":"Wed, 25 Feb 2026 15:49:26 GMT"},"fingerprint":{"sha1":"2C:B9:1B:62:2A:F9:04:B9:16:E2:30:B0:A8:B2:85:0C:68:BC:79:25","sha256":"AE:CB:A0:2C:92:1E:CB:D2:CB:6C:0D:37:5E:A2:4E:27:AE:4E:CA:0C:EC:53:D5:50:E6:C1:3D:EB:17:C1:F2:C9"}}},"request":{"raw":"POST /g/collect?v=2\u0026tid=G-D19N9LPLRP\u0026gtm=45je5ca1v9105002050za200zb9218846652zd9218846652\u0026_p=1766500196361\u0026_gaz=1\u0026gcd=13l3l3l2l1l1\u0026npa=1\u0026dma_cps=syphamo\u0026dma=1\u0026cid=1028203053.1766500197\u0026ul=en-us\u0026sr=1280x1024\u0026frm=0\u0026pscdl=noapi\u0026_s=1\u0026tag_exp=103116026~103200004~104527906~104528500~104684208~104684211~105391252~115583767~115616986~115938466~115938468~116184927~116184929~116251938~116251940\u0026sid=1766500197\u0026sct=1\u0026seg=0\u0026dl=https%3A%2F%2Fiw63v.crqeraf.xyz%2Farchives%2F65129%2F\u0026dt=%E9%BB%91%E6%96%99%E7%BD%91-%E6%8E%A8%E7%89%B9%E9%AB%98%E9%A2%9C%E5%80%BC%E7%BD%91%E7%BA%A2%E5%A5%B3%E7%A5%9E%20%E7%8B%90%E7%8B%B8%E5%B0%8F%E5%A6%96%20%E6%9E%81%E5%93%81%E8%9C%9C%E6%A1%83%E8%87%80%E7%BE%8E%E4%B9%B3%E5%A4%A7%E9%95%BF%E8%85%BF%E8%BF%B7%E6%AD%BB%E4%BA%BA%EF%BC%81%E7%B2%89%E5%AB%A9%E8%9C%9C%E7%A9%B4%E9%85%8D%E9%80%86%E5%A4%A9%E7%88%86%E4%B9%B3%E6%92%B8%E7%AE%A1%E5%BF%85%E5%A4%87\u0026en=page_view\u0026_fv=1\u0026_ss=1\u0026_ee=1\u0026tfd=2845 HTTP/1.1\r\nHost: region1.analytics.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: null\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 204 No Content\r\naccess-control-allow-origin: null\r\ndate: Tue, 23 Dec 2025 14:29:59 GMT\r\npragma: no-cache\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\ncache-control: no-cache, no-store, must-revalidate\r\naccess-control-allow-credentials: true\r\ncontent-type: text/plain\r\ncross-origin-resource-policy: cross-origin\r\ncontent-security-policy-report-only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascnsrsggc:170:0\r\ncross-origin-opener-policy-report-only: same-origin; report-to=ascnsrsggc:170:0\r\nreport-to: {\"group\":\"ascnsrsggc:170:0\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/scaffolding/ascnsrsggc:170:0\"}],}\r\nserver: Golfe2\r\ncontent-length: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-03T18:31:03.533086Z","times_seen":13299059,"resource_available":true,"data":null}},"time_used":101,"timings":{"blocked":41,"dns":0,"connect":8,"send":0,"wait":20,"receive":0,"ssl":28},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"iw63v.crqeraf.xyz/static/js/gtag.js","fqdn":"iw63v.crqeraf.xyz","domain":"crqeraf.xyz","tld":"xyz"},"ip":{"addr":"154.207.127.39","port":443,"asn":0,"as":"","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://iw63v.crqeraf.xyz/archives/65129/","date":"2025-12-23T14:29:56.013Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"crqeraf.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 12 Dec 2025 08:17:25 GMT","end":"Thu, 12 Mar 2026 09:15:12 GMT"},"fingerprint":{"sha1":"9A:B6:D6:FC:9F:B5:E4:7C:4E:60:81:74:C5:1D:1F:16:43:65:9B:C0","sha256":"6B:D5:92:C2:2E:E8:B1:3D:EE:9E:2C:51:0B:D3:32:29:71:17:1E:3D:93:07:59:A9:C9:59:7C:A8:D8:9B:2B:8C"}}},"request":{"raw":"GET /static/js/gtag.js HTTP/1.1\r\nHost: iw63v.crqeraf.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://iw63v.crqeraf.xyz/archives/65129/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 23 Dec 2025 14:29:55 GMT\r\ncontent-type: application/javascript\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\nlast-modified: Sat, 13 Sep 2025 03:47:40 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68c4e95c-5d241\"\r\nexpires: Sun, 28 Dec 2025 18:17:44 GMT\r\ncache-control: public, max-age=604800, immutable\r\ncontent-encoding: gzip\r\nage: 159131\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=U3OoJifZUAVNEgxGdwK8D8TkVOM672F6vVuJv0Te8o%2B6vZUhz30ST3geuIZXdfjcsITDduE7x7npeXp3%2FjF5mfBwbB4jsvpB4oBFvWIMLg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b288dd06b1e56b4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":381505,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (6129)","md5":"ce85fe97bed0ee4889798428fea0d1cb","sha1":"18fdff0c17c66d867d511e1a2d69449079e45ff3","sha256":"cd6e77ca28298573a4f7c273a888523358403576c02622d758d7feb733f42fb8","sha512":"fb88f8b8ce3424446ee7f6898da08ad6ade507c0e6e41c2c15bbba59105376acbfb69a15682be36c27afe80832680702489916b620fa8901c22b3c03a7a9378c","ssdeep":"6144:pkDe7WbEb+AOdnsGvscMDYesTQT8PVMxPMfznmsCt:uDeSba+PsGJyUbn38","tlshash":"a4841ade73c674265396b478903f018ba5bb28a2b44cc895f1c9cce42d74a9a4277f7c","first_seen":"2025-05-08T23:43:44.872699Z","last_seen":"2026-04-03T18:42:08.312335Z","times_seen":9000,"resource_available":true,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-23","alert":"Sinkholed","trigger":"iw63v.crqeraf.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pic.wdsrie.cn/upload_01/upload/20250617/2025061712251320362.png","fqdn":"pic.wdsrie.cn","domain":"wdsrie.cn","tld":"cn"},"ip":{"addr":"43.152.140.79","port":443,"asn":139341,"as":"ACE","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://iw63v.crqeraf.xyz/archives/65129/","date":"2025-12-23T14:29:56.747Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.wdsrie.cn","organization":""},"issuer":{"commonName":"ZeroSSL ECC Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Sat, 20 Dec 2025 00:00:00 GMT","end":"Fri, 20 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E9:73:86:E2:44:76:13:6D:6B:AE:EE:E0:BA:B0:C0:68:B0:97:37:B8","sha256":"B9:DF:B5:64:69:80:D3:48:0B:F1:C2:39:96:52:89:9A:DE:23:24:F8:50:8B:E3:B3:38:A6:99:51:B3:9A:55:5E"}}},"request":{"raw":"GET /upload_01/upload/20250617/2025061712251320362.png HTTP/1.1\r\nHost: pic.wdsrie.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://iw63v.crqeraf.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Tue, 17 Jun 2025 04:25:42 GMT\r\nEtag: \"0a8cd00fe3b6e27caf33a53be83aa63c\"\r\nContent-Type: binary/octet-stream\r\nDate: Sat, 26 Jul 2025 11:18:58 GMT\r\nx-amz-server-side-encryption: AES256\r\nServer: nginx\r\nX-Cache: Hit from cloudfront\r\nX-Amz-Cf-Pop: ARN53-P2\r\nAge: 296\r\nVary: Origin\r\nContent-Length: 2800\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 3568844128953636837\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\nAccess-Control-Allow-Origin: *\r\nCache-Control: max-age=864000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2800,"size_decoded":0,"mime_type":"binary/octet-stream","magic":"data","md5":"0a8cd00fe3b6e27caf33a53be83aa63c","sha1":"5ce0e1aa87ce5fb8d4813e637b88172b1258b6de","sha256":"412423a6537a0e86bacf1f2a1ebeb3b62a086f68854112f07513cd9f1999c7b2","sha512":"89356c3f62078eff95cd88410cc7fb2847240178d4ad3e45be3671eb8099c8307d8916f2fb1a9b58b30e852116169447a4afab0012e996a391a22d8521159208","ssdeep":"","tlshash":"df513d2b6c42bed127581725f715f34d3ff0d020661fe318ead48bc286197dde266a40","first_seen":"2025-06-17T09:03:02.065041Z","last_seen":"2026-04-03T18:43:45.407634Z","times_seen":7475,"resource_available":false,"data":null}},"time_used":802,"timings":{"blocked":381,"dns":1,"connect":21,"send":0,"wait":21,"receive":1,"ssl":372},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pic.wdsrie.cn/upload_01/xiao/20251219/2025121922425391478.png","fqdn":"pic.wdsrie.cn","domain":"wdsrie.cn","tld":"cn"},"ip":{"addr":"43.152.140.79","port":443,"asn":139341,"as":"ACE","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://iw63v.crqeraf.xyz/archives/65129/","date":"2025-12-23T14:29:57.214Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.wdsrie.cn","organization":""},"issuer":{"commonName":"ZeroSSL ECC Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Sat, 20 Dec 2025 00:00:00 GMT","end":"Fri, 20 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E9:73:86:E2:44:76:13:6D:6B:AE:EE:E0:BA:B0:C0:68:B0:97:37:B8","sha256":"B9:DF:B5:64:69:80:D3:48:0B:F1:C2:39:96:52:89:9A:DE:23:24:F8:50:8B:E3:B3:38:A6:99:51:B3:9A:55:5E"}}},"request":{"raw":"GET /upload_01/xiao/20251219/2025121922425391478.png HTTP/1.1\r\nHost: pic.wdsrie.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://iw63v.crqeraf.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Fri, 19 Dec 2025 14:43:03 GMT\r\nEtag: \"0ae19de6944c04428ad54b9cba3e5754\"\r\nContent-Type: binary/octet-stream\r\nDate: Fri, 19 Dec 2025 15:03:22 GMT\r\nx-amz-server-side-encryption: AES256\r\nServer: nginx\r\nX-Cache: Hit from cloudfront\r\nX-Amz-Cf-Pop: ARN53-P2\r\nAge: 1505\r\nContent-Length: 270304\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 537109537693916857\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\nAccess-Control-Allow-Origin: *\r\nCache-Control: max-age=864000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":270304,"size_decoded":0,"mime_type":"binary/octet-stream","magic":"data","md5":"0ae19de6944c04428ad54b9cba3e5754","sha1":"0a603bfa71448e3ca46f618921ab14aab347f0d4","sha256":"05f2aa490e676284b608a4c20ebc27f16f08f53d4e14bd0674e4ad4d472fe327","sha512":"57d66f25a8138c13abdb83004a233cee1d4e387ae2ca88fc431853224ddb3254e24e4bc0b1d19d977caaab1dd91bddb48ed1f8c2556dd0b6e1ae8323bd46c7e9","ssdeep":"6144:4zkZECOr3Hkzgnu09tpI89ffD9zedW4HMa/171YDS+rUtnNZdibE:8CGHA09tJpzec4HMaV1YDS+Qldio","tlshash":"f14423842d5cad84a87c63b95a9de7f03a77bd4f187da0c8c843b7c3926419d8b7096c","first_seen":"2025-12-23T10:21:49.01586Z","last_seen":"2025-12-27T02:42:04.633261Z","times_seen":3,"resource_available":false,"data":null}},"time_used":918,"timings":{"blocked":897,"dns":0,"connect":0,"send":0,"wait":12,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pic.wdsrie.cn/upload_01/upload/20240704/2024070418490332229.png","fqdn":"pic.wdsrie.cn","domain":"wdsrie.cn","tld":"cn"},"ip":{"addr":"43.152.140.79","port":443,"asn":139341,"as":"ACE","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://iw63v.crqeraf.xyz/archives/65129/","date":"2025-12-23T14:29:57.525Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.wdsrie.cn","organization":""},"issuer":{"commonName":"ZeroSSL ECC Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Sat, 20 Dec 2025 00:00:00 GMT","end":"Fri, 20 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E9:73:86:E2:44:76:13:6D:6B:AE:EE:E0:BA:B0:C0:68:B0:97:37:B8","sha256":"B9:DF:B5:64:69:80:D3:48:0B:F1:C2:39:96:52:89:9A:DE:23:24:F8:50:8B:E3:B3:38:A6:99:51:B3:9A:55:5E"}}},"request":{"raw":"GET /upload_01/upload/20240704/2024070418490332229.png HTTP/1.1\r\nHost: pic.wdsrie.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://iw63v.crqeraf.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Thu, 04 Jul 2024 10:52:14 GMT\r\nEtag: \"1e19008514d55383d43c25bce9812b46\"\r\nContent-Type: binary/octet-stream\r\nDate: Fri, 10 Oct 2025 01:25:53 GMT\r\nx-amz-server-side-encryption: AES256\r\nServer: nginx\r\nX-Cache: Hit from cloudfront\r\nX-Amz-Cf-Pop: ARN53-P2\r\nAge: 3903\r\nContent-Length: 6384\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 1770783465978061017\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\nAccess-Control-Allow-Origin: *\r\nCache-Control: max-age=864000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6384,"size_decoded":0,"mime_type":"binary/octet-stream","magic":"data","md5":"1e19008514d55383d43c25bce9812b46","sha1":"3cb66cf9195514020a8de6059be8fc7fe9e4229b","sha256":"99e6f4c9167d6c5a2a4c415c109380266f1a0a696ab9e951c4869578b39ac273","sha512":"555b918501b7fa7ebbd0de98c5e9457cfd62c6cd6024fc8772331a26e49fdacfe2a0daeb0ba377a57b16ffc696ea85cf48d40e46c98a64f04464b2a405e4f4f2","ssdeep":"192:/msUWJB3toJIJOo+H2QlMjCvEjujBhK/s7t:rpr9oqAo+WQlMjRajBIkt","tlshash":"5ed1cfa634521a7352762e27fb27335621d0aa2f1ad5c407353d34caf4e087e10f6d35","first_seen":"2024-07-18T20:59:41Z","last_seen":"2026-02-10T15:27:36.537837Z","times_seen":4164,"resource_available":false,"data":null}},"time_used":986,"timings":{"blocked":976,"dns":0,"connect":0,"send":0,"wait":9,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pic.wdsrie.cn/upload/upload/20231215/2023121512361042280.png","fqdn":"pic.wdsrie.cn","domain":"wdsrie.cn","tld":"cn"},"ip":{"addr":"43.152.140.79","port":443,"asn":139341,"as":"ACE","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://iw63v.crqeraf.xyz/archives/65129/","date":"2025-12-23T14:29:57.766Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.wdsrie.cn","organization":""},"issuer":{"commonName":"ZeroSSL ECC Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Sat, 20 Dec 2025 00:00:00 GMT","end":"Fri, 20 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E9:73:86:E2:44:76:13:6D:6B:AE:EE:E0:BA:B0:C0:68:B0:97:37:B8","sha256":"B9:DF:B5:64:69:80:D3:48:0B:F1:C2:39:96:52:89:9A:DE:23:24:F8:50:8B:E3:B3:38:A6:99:51:B3:9A:55:5E"}}},"request":{"raw":"GET /upload/upload/20231215/2023121512361042280.png HTTP/1.1\r\nHost: pic.wdsrie.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://iw63v.crqeraf.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Thu, 28 Dec 2023 12:24:12 GMT\r\nEtag: \"7b5c80b27e9fa8e5214f61d6162ea7b8\"\r\nContent-Type: binary/octet-stream\r\nDate: Sat, 26 Jul 2025 10:59:39 GMT\r\nx-amz-server-side-encryption: AES256\r\nServer: nginx\r\nX-Cache: Hit from cloudfront\r\nX-Amz-Cf-Pop: ARN53-P2\r\nAge: 1454\r\nVary: Origin\r\nContent-Length: 688\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 16690551087337053051\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\nAccess-Control-Allow-Origin: *\r\nCache-Control: max-age=864000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":688,"size_decoded":0,"mime_type":"binary/octet-stream","magic":"data","md5":"7b5c80b27e9fa8e5214f61d6162ea7b8","sha1":"664bdae8c5abbbaa5826d1213839674b592accf5","sha256":"bd213e1a9f41fb33c0a421a929d4110039ba6cf37bdd20b5c30bea5a6f7d7e0e","sha512":"afe758e8a9b8ece771f0cce33341887b52eb1d6a3935489a9baf629795410d1784aa7842bcf33e00e327c8cee2048d1d7186459f4654880b82734168965453c5","ssdeep":"","tlshash":"96014438c58c4ea24c056830ba625f07619a5e956a7184377ad2884cec3c56a898e646","first_seen":"2024-04-20T21:23:39Z","last_seen":"2026-04-03T18:43:45.438479Z","times_seen":7784,"resource_available":false,"data":null}},"time_used":907,"timings":{"blocked":895,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"iw63v.crqeraf.xyz/static/pc/js/tjtag.1.0.0.js","fqdn":"iw63v.crqeraf.xyz","domain":"crqeraf.xyz","tld":"xyz"},"ip":{"addr":"154.207.127.39","port":443,"asn":0,"as":"","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://iw63v.crqeraf.xyz/archives/65129/","date":"2025-12-23T14:29:56.121Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"crqeraf.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 12 Dec 2025 08:17:25 GMT","end":"Thu, 12 Mar 2026 09:15:12 GMT"},"fingerprint":{"sha1":"9A:B6:D6:FC:9F:B5:E4:7C:4E:60:81:74:C5:1D:1F:16:43:65:9B:C0","sha256":"6B:D5:92:C2:2E:E8:B1:3D:EE:9E:2C:51:0B:D3:32:29:71:17:1E:3D:93:07:59:A9:C9:59:7C:A8:D8:9B:2B:8C"}}},"request":{"raw":"GET /static/pc/js/tjtag.1.0.0.js HTTP/1.1\r\nHost: iw63v.crqeraf.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://iw63v.crqeraf.xyz/archives/65129/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 23 Dec 2025 14:29:55 GMT\r\ncontent-type: application/javascript\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\nlast-modified: Wed, 17 Dec 2025 05:23:21 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69423e49-eabd\"\r\nexpires: Mon, 29 Dec 2025 22:04:11 GMT\r\ncache-control: public, max-age=604800, immutable\r\ncontent-encoding: gzip\r\nage: 59144\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=urylUGHo%2FWuae0THEt%2F%2BW2DAn6WnA4nKmbdZN4ai%2B%2FH0zeMqlRQ8u5bK%2FumtfrJOIy0bnscwdMjJek3%2FcB8np54%2B%2Fsvi6SkhLBJLjowYWg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b288dd0ab7256b4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":60093,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (60047), with no line terminators","md5":"7f201cf0a95ccf9a7f24e5060d5586dc","sha1":"4c658c6517399855f5aa34d3bf8abacd04f26a9b","sha256":"fca8e92f6c10174eb14ac3df1723dc2b543d812e345f48b8c8617b45a7ece81f","sha512":"767dfb492cb39d6820ebe80154d22992f6f13fac2aa879510d4b3cc8ad320d0377122e8bacc899dc6d0ac421be619ae0b55cdd5765f322038b3a247b7862cc8c","ssdeep":"768:YN2i27QPT3K48N415SVHjv1ziclmTvActHDIJDDFzDBBq8aWI/0qX0qIS+zQDFoa:Y8d4k4HWbUxntjgHLy0ERRm/pB2jJ","tlshash":"3543e7cf23d6b0aa49ab23b3761b31f5c6346c8c704c8658f108fd6af9e869ce155764","first_seen":"2025-12-11T23:03:23.605496Z","last_seen":"2026-04-03T18:40:13.060136Z","times_seen":16437,"resource_available":true,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-23","alert":"Sinkholed","trigger":"iw63v.crqeraf.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"iw63v.crqeraf.xyz/static/pc/img/icon-backTop@3x.png","fqdn":"iw63v.crqeraf.xyz","domain":"crqeraf.xyz","tld":"xyz"},"ip":{"addr":"154.207.127.39","port":443,"asn":0,"as":"","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://iw63v.crqeraf.xyz/archives/65129/","date":"2025-12-23T14:29:56.122Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"crqeraf.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 12 Dec 2025 08:17:25 GMT","end":"Thu, 12 Mar 2026 09:15:12 GMT"},"fingerprint":{"sha1":"9A:B6:D6:FC:9F:B5:E4:7C:4E:60:81:74:C5:1D:1F:16:43:65:9B:C0","sha256":"6B:D5:92:C2:2E:E8:B1:3D:EE:9E:2C:51:0B:D3:32:29:71:17:1E:3D:93:07:59:A9:C9:59:7C:A8:D8:9B:2B:8C"}}},"request":{"raw":"GET /static/pc/img/icon-backTop@3x.png HTTP/1.1\r\nHost: iw63v.crqeraf.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://iw63v.crqeraf.xyz/archives/65129/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 23 Dec 2025 14:29:55 GMT\r\ncontent-type: image/png\r\ncontent-length: 1673\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\nlast-modified: Sat, 13 Sep 2025 03:47:28 GMT\r\netag: \"68c4e950-689\"\r\nexpires: Mon, 29 Dec 2025 07:49:08 GMT\r\ncache-control: public, max-age=604800, immutable\r\naccept-ranges: bytes\r\nage: 110447\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=md7vbRP8OamnNzLUBZte0HY9MSRolTckge%2FMS3Qpoav%2BAtskKmSmt%2BqxeAnRjGfPLLwcddlERnhYjyUnyAud3TXjMROGgjtfyTZhLbkiAg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b288dd0ab7356b4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1673,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 126 x 126, 8-bit colormap, non-interlaced","md5":"8cf11ae947eb3f4bcf169df441fe99d1","sha1":"e45abec602eb57747a849b42842e12577cf24d13","sha256":"376651606ace821614e8204d9ae137cd51d2ac0801d16baa878c40d129dd4d13","sha512":"bfbba1f2b4da9a8629492e29f56a0d7b1e35a60006b163b23205c4a24ce1f9b11c9ecb1a7df73dc21e40821c278a4d8b044dd7dd303a6c5a4c9daa76ebb20c11","ssdeep":"","tlshash":"9c315cb32f0fe5714037ca254073c8b67cf49ea515ad5b41569efe2208b98b01f0e382","first_seen":"2025-08-17T21:05:59.410949Z","last_seen":"2026-04-03T18:29:47.537356Z","times_seen":4490,"resource_available":false,"data":null}},"time_used":39,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":39,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-23","alert":"Sinkholed","trigger":"iw63v.crqeraf.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pic.wdsrie.cn/upload_01/upload/20251202/2025120216140787096.gif","fqdn":"pic.wdsrie.cn","domain":"wdsrie.cn","tld":"cn"},"ip":{"addr":"43.152.140.79","port":443,"asn":139341,"as":"ACE","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://iw63v.crqeraf.xyz/archives/65129/","date":"2025-12-23T14:29:57.255Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.wdsrie.cn","organization":""},"issuer":{"commonName":"ZeroSSL ECC Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Sat, 20 Dec 2025 00:00:00 GMT","end":"Fri, 20 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E9:73:86:E2:44:76:13:6D:6B:AE:EE:E0:BA:B0:C0:68:B0:97:37:B8","sha256":"B9:DF:B5:64:69:80:D3:48:0B:F1:C2:39:96:52:89:9A:DE:23:24:F8:50:8B:E3:B3:38:A6:99:51:B3:9A:55:5E"}}},"request":{"raw":"GET /upload_01/upload/20251202/2025120216140787096.gif HTTP/1.1\r\nHost: pic.wdsrie.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://iw63v.crqeraf.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Tue, 02 Dec 2025 08:14:15 GMT\r\nEtag: \"5420903a03f0d2c9422fbaa3e116b543\"\r\nContent-Type: binary/octet-stream\r\nDate: Tue, 02 Dec 2025 08:14:19 GMT\r\nx-amz-server-side-encryption: AES256\r\nServer: nginx\r\nX-Cache: Hit from cloudfront\r\nX-Amz-Cf-Pop: ARN53-P2\r\nAge: 25\r\nContent-Length: 245184\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 8218510682136250548\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\nAccess-Control-Allow-Origin: *\r\nCache-Control: max-age=864000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":245184,"size_decoded":0,"mime_type":"binary/octet-stream","magic":"DOS executable (COM), maybe with interrupt 22h, start instruction 0x8c09ccc9 d64b959f","md5":"5420903a03f0d2c9422fbaa3e116b543","sha1":"69985c44c13c480b8dfb328a5c60ed6042a88ce7","sha256":"478936821b3943a9540a7bb59545a5b327eba307dec716b3652b0edf0e2608a6","sha512":"9d5b0ebfff888697563bff344ec37bae236ff18636f7d35425a46f63b524e2b17d615a1e9f29f82a3ddd52dc74838750ccc4d6a4afa07305d8b04f8c8d426155","ssdeep":"6144:/548oDn6yjaSvMku2JaBJtMZJkniFK5ae92LS3MaWzcDnbbb:/5FMnnaSUcQJeQ+zeAaWzAz","tlshash":"e134222d7bfc7fa73760b498c30481d97069ba2e5077e8c2162487d4a93cb5f9a5e143","first_seen":"2025-12-02T08:41:52.043849Z","last_seen":"2026-03-30T00:23:21.713695Z","times_seen":6047,"resource_available":false,"data":null}},"time_used":942,"timings":{"blocked":908,"dns":0,"connect":0,"send":0,"wait":25,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pic.wdsrie.cn/upload_01/upload/20251219/2025121910255472215.gif","fqdn":"pic.wdsrie.cn","domain":"wdsrie.cn","tld":"cn"},"ip":{"addr":"43.152.140.79","port":443,"asn":139341,"as":"ACE","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://iw63v.crqeraf.xyz/archives/65129/","date":"2025-12-23T14:29:57.721Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.wdsrie.cn","organization":""},"issuer":{"commonName":"ZeroSSL ECC Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Sat, 20 Dec 2025 00:00:00 GMT","end":"Fri, 20 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E9:73:86:E2:44:76:13:6D:6B:AE:EE:E0:BA:B0:C0:68:B0:97:37:B8","sha256":"B9:DF:B5:64:69:80:D3:48:0B:F1:C2:39:96:52:89:9A:DE:23:24:F8:50:8B:E3:B3:38:A6:99:51:B3:9A:55:5E"}}},"request":{"raw":"GET /upload_01/upload/20251219/2025121910255472215.gif HTTP/1.1\r\nHost: pic.wdsrie.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://iw63v.crqeraf.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Fri, 19 Dec 2025 02:26:02 GMT\r\nEtag: \"d4d712d93c520f69e8ba893f86ed89e6\"\r\nContent-Type: binary/octet-stream\r\nDate: Fri, 19 Dec 2025 02:26:12 GMT\r\nx-amz-server-side-encryption: AES256\r\nServer: nginx\r\nX-Cache: Hit from cloudfront\r\nX-Amz-Cf-Pop: ARN53-P2\r\nAge: 21\r\nContent-Length: 128496\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 295355483196760571\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\nAccess-Control-Allow-Origin: *\r\nCache-Control: max-age=864000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":128496,"size_decoded":0,"mime_type":"binary/octet-stream","magic":"data","md5":"d4d712d93c520f69e8ba893f86ed89e6","sha1":"ad9f038f9b0ce48f928e5addf3ffac1d0e6c484d","sha256":"b9ab7be29228ced9106cf86b174c0fdeadc742bd824f0f2cd992d74877b2bebe","sha512":"39b031ea33846938df9f5cedd191a65369149d1d975743be96db354ea77d6ace42d1954dbd00b2b2ada1c345fbacc2ad2ea456600c7aaf56338cf1a7c36d97c6","ssdeep":"3072:85w+rRz9pQEQrh0Fx9AuIi0O9Hs93/P24KrbUdx63G843z:85wIzz2rh0FHABaM938mxSJ4D","tlshash":"77c312f0e6bbdc6ee35868a2632165e58b390243933e43c03df1223605f5e8e946651f","first_seen":"2025-12-20T16:49:01.202311Z","last_seen":"2026-01-15T02:42:58.321171Z","times_seen":240,"resource_available":false,"data":null}},"time_used":857,"timings":{"blocked":840,"dns":0,"connect":0,"send":0,"wait":13,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pic.wdsrie.cn/upload_01/upload/20250524/2025052417015551987.png","fqdn":"pic.wdsrie.cn","domain":"wdsrie.cn","tld":"cn"},"ip":{"addr":"43.152.140.79","port":443,"asn":139341,"as":"ACE","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://iw63v.crqeraf.xyz/archives/65129/","date":"2025-12-23T14:29:57.769Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.wdsrie.cn","organization":""},"issuer":{"commonName":"ZeroSSL ECC Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Sat, 20 Dec 2025 00:00:00 GMT","end":"Fri, 20 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E9:73:86:E2:44:76:13:6D:6B:AE:EE:E0:BA:B0:C0:68:B0:97:37:B8","sha256":"B9:DF:B5:64:69:80:D3:48:0B:F1:C2:39:96:52:89:9A:DE:23:24:F8:50:8B:E3:B3:38:A6:99:51:B3:9A:55:5E"}}},"request":{"raw":"GET /upload_01/upload/20250524/2025052417015551987.png HTTP/1.1\r\nHost: pic.wdsrie.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://iw63v.crqeraf.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Sat, 24 May 2025 09:02:00 GMT\r\nEtag: \"53019472faa0ad84f29cc46bd9331737\"\r\nContent-Type: binary/octet-stream\r\nDate: Fri, 10 Oct 2025 01:25:38 GMT\r\nx-amz-server-side-encryption: AES256\r\nServer: nginx\r\nX-Cache: Hit from cloudfront\r\nX-Amz-Cf-Pop: ARN53-P2\r\nAge: 3906\r\nContent-Length: 768\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 15391768018819220655\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\nAccess-Control-Allow-Origin: *\r\nCache-Control: max-age=864000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":768,"size_decoded":0,"mime_type":"binary/octet-stream","magic":"data","md5":"53019472faa0ad84f29cc46bd9331737","sha1":"c1b8e737f5af2594bba72c79f21f6e182551c219","sha256":"ba0862815bd84409f61431c3a7b90d28b2b4fe50e19623c12380383a1aab4248","sha512":"ed86bd1d3f45e934c840652b705bafcc1e19d81ea5e716185871cf457704e5a9b416c01661368673f6f55c095be30ee449cc2b4b96d689afc62d9ab67afbb231","ssdeep":"","tlshash":"0401b53cc350d4ea6d5006b4788afbe8084d50a8b5d730bd958d3e667840c8e002bcfd","first_seen":"2025-06-02T05:32:32.593962Z","last_seen":"2026-04-03T18:43:45.452107Z","times_seen":7468,"resource_available":false,"data":null}},"time_used":913,"timings":{"blocked":905,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.addtoany.com/menu/svg/icons/telegram.js","fqdn":"static.addtoany.com","domain":"addtoany.com","tld":"com"},"ip":{"addr":"172.66.171.172","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://iw63v.crqeraf.xyz/archives/65129/","date":"2025-12-23T14:29:58.014Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"static.addtoany.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Dec 2025 13:28:50 GMT","end":"Sun, 22 Mar 2026 14:28:48 GMT"},"fingerprint":{"sha1":"83:E4:54:72:9E:E9:BE:F0:31:A0:E0:3B:5B:38:1D:25:57:6A:CE:67","sha256":"C2:A2:4F:7E:8C:0F:A8:AA:86:24:03:7D:6B:67:31:2E:38:54:D6:C4:27:59:FE:B4:3D:28:7C:D5:DC:F6:F1:1E"}}},"request":{"raw":"GET /menu/svg/icons/telegram.js HTTP/1.1\r\nHost: static.addtoany.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://iw63v.crqeraf.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncf-cache-status: REVALIDATED\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: application/javascript\r\npriority: u=3,i=?0\r\naccess-control-allow-origin: *\r\ncache-control: max-age=7776000, stale-while-revalidate=30, public\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GDr21ZpqgCaT6aZQ653ZljcYcx%2BVodr8c8rtcW2y7o8oi%2Bedbv457Rj08Pvh2TSqqVlvVxaYvy278ed%2F1Fxg5zL5KNKaEA1%2F4MrcPJlNLnwD\"}]}\r\netag: W/\"fb47b4f6548b6499923a1beed7472419\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ndate: Tue, 23 Dec 2025 14:29:57 GMT\r\ncf-ray: 9b288ddd2a0c569f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":360,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (360), with no line terminators","md5":"48f25c508c92c3601cf047609318001f","sha1":"59117e825084c63a0dda48edec82c14a60e16f23","sha256":"6415561e892cf9d614e7179f71353af4ceadfd641d71c42fe54c9420eb0d0138","sha512":"32ca9e672cb26c5cc9370d32a2739ad99a933a700250e310955b68ca4a974964f22095179d1a56f8f57c160ee6ab4d3ff659b4bba5838879472289b06bf53a42","ssdeep":"","tlshash":"66e02077611084814c2a54bbda1e614f5434f069529d65d3436ac4f754d726f5c12d8b","first_seen":"2023-03-08T15:33:09Z","last_seen":"2026-04-03T18:43:45.443436Z","times_seen":9788,"resource_available":true,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"iw63v.crqeraf.xyz/static/common/axios.min.js?v=20251130","fqdn":"iw63v.crqeraf.xyz","domain":"crqeraf.xyz","tld":"xyz"},"ip":{"addr":"154.207.127.39","port":443,"asn":0,"as":"","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://iw63v.crqeraf.xyz/archives/65129/","date":"2025-12-23T14:29:56.072Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"crqeraf.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 12 Dec 2025 08:17:25 GMT","end":"Thu, 12 Mar 2026 09:15:12 GMT"},"fingerprint":{"sha1":"9A:B6:D6:FC:9F:B5:E4:7C:4E:60:81:74:C5:1D:1F:16:43:65:9B:C0","sha256":"6B:D5:92:C2:2E:E8:B1:3D:EE:9E:2C:51:0B:D3:32:29:71:17:1E:3D:93:07:59:A9:C9:59:7C:A8:D8:9B:2B:8C"}}},"request":{"raw":"GET /static/common/axios.min.js?v=20251130 HTTP/1.1\r\nHost: iw63v.crqeraf.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://iw63v.crqeraf.xyz/archives/65129/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 23 Dec 2025 14:29:55 GMT\r\ncontent-type: application/javascript\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\nlast-modified: Thu, 20 Nov 2025 11:34:19 GMT\r\nvary: Accept-Encoding\r\netag: W/\"691efcbb-cc17\"\r\nexpires: Tue, 30 Dec 2025 07:16:36 GMT\r\ncache-control: public, max-age=604800, immutable\r\ncontent-encoding: gzip\r\nage: 25999\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zrZowqzPSPt15MDhFXVBbxc03X3TygaXij8bu2rB1NoIPRw%2FEToAMNupAaOJDE5EGCSjGRYrI8pdhmjB7UXkCghfse%2B7eR4Yn0nF4NVYrQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b288dd0ab6756b4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":52247,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (52208)","md5":"99714d221df650b50da3b7bf97e2987d","sha1":"493b74178a63429fff2aab081b3a1ca73d362085","sha256":"8ad11c4cb079bba93156727270f510292eedcc0716c6f21725074a59ec8b9b96","sha512":"2520851e12838a54d14577bd6a4fc5276f1d729389c7341a09ddd783c33217a5c58ce0e1cbf60c08cf075b44c50dc90d1d651ec16fa47ef8629f8de12ad27103","ssdeep":"768:Wjp+L+sl7x97+om+oCICTUOD3cQ3F1C+SqImCjL/hQBf/MEVgnyzB/c2OiwBaGcj:Up+b0GUOLMPLJQf/CEB6iwOj","tlshash":"2c33b6cd76d6f06243a77174802f610bf23aad16a44d8460f224ece6bcb854e9337f69","first_seen":"2024-05-21T19:06:10Z","last_seen":"2026-04-03T18:40:13.042033Z","times_seen":22830,"resource_available":true,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-23","alert":"Sinkholed","trigger":"iw63v.crqeraf.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"iw63v.crqeraf.xyz/static/common/index.js?v=20251130","fqdn":"iw63v.crqeraf.xyz","domain":"crqeraf.xyz","tld":"xyz"},"ip":{"addr":"154.207.127.39","port":443,"asn":0,"as":"","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://iw63v.crqeraf.xyz/archives/65129/","date":"2025-12-23T14:29:56.093Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"crqeraf.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 12 Dec 2025 08:17:25 GMT","end":"Thu, 12 Mar 2026 09:15:12 GMT"},"fingerprint":{"sha1":"9A:B6:D6:FC:9F:B5:E4:7C:4E:60:81:74:C5:1D:1F:16:43:65:9B:C0","sha256":"6B:D5:92:C2:2E:E8:B1:3D:EE:9E:2C:51:0B:D3:32:29:71:17:1E:3D:93:07:59:A9:C9:59:7C:A8:D8:9B:2B:8C"}}},"request":{"raw":"GET /static/common/index.js?v=20251130 HTTP/1.1\r\nHost: iw63v.crqeraf.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://iw63v.crqeraf.xyz/archives/65129/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 23 Dec 2025 14:29:55 GMT\r\ncontent-type: application/javascript\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\nlast-modified: Tue, 23 Dec 2025 06:52:16 GMT\r\nvary: Accept-Encoding\r\netag: W/\"694a3c20-a7db\"\r\nexpires: Tue, 30 Dec 2025 07:16:37 GMT\r\ncache-control: public, max-age=604800, immutable\r\ncontent-encoding: gzip\r\nage: 25998\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bQNQCucCIxM%2Fp9s8xbc3xtO97njEpcRrMXK6d21IRXYeu5iVDlj%2BOtjgZrxA3ld98cCza3QxuuvBlFa8ZSZ%2FvRlEkiXnISTjgrGMeCCNeQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b288dd0ab6d56b4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":42971,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"da98b1b70e0ce2fcc65c822bd008222a","sha1":"203d1603c2711002064c4bff366f48c6c979ec91","sha256":"4e6bc78b9a089488d9d84190babc74c5897d7ad0e4eece952fd50232fa767141","sha512":"5448b6ed4589725e083de6cb3043a644d7538af4af466e8c3eb691ff4347c3324828d212890fac7c4b69698e16145d6fe72bf315538684c27af76bf54094095b","ssdeep":"768:ehR8BKHp6FyfpLRyrspbY1s9hAjpZvrHtoV:eQALwB1s9hAr4","tlshash":"b313c60a2aff70508567706f6bafa0157734a0177249de087f4d97984fc192983e3bea","first_seen":"2025-12-23T08:10:49.369613Z","last_seen":"2026-03-27T21:53:02.804605Z","times_seen":4873,"resource_available":true,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-23","alert":"Sinkholed","trigger":"iw63v.crqeraf.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"iw63v.crqeraf.xyz/static/pc/css/01b2378.css?v=20251130","fqdn":"iw63v.crqeraf.xyz","domain":"crqeraf.xyz","tld":"xyz"},"ip":{"addr":"154.207.127.39","port":443,"asn":0,"as":"","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://iw63v.crqeraf.xyz/archives/65129/","date":"2025-12-23T14:29:55.894Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"crqeraf.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 12 Dec 2025 08:17:25 GMT","end":"Thu, 12 Mar 2026 09:15:12 GMT"},"fingerprint":{"sha1":"9A:B6:D6:FC:9F:B5:E4:7C:4E:60:81:74:C5:1D:1F:16:43:65:9B:C0","sha256":"6B:D5:92:C2:2E:E8:B1:3D:EE:9E:2C:51:0B:D3:32:29:71:17:1E:3D:93:07:59:A9:C9:59:7C:A8:D8:9B:2B:8C"}}},"request":{"raw":"GET /static/pc/css/01b2378.css?v=20251130 HTTP/1.1\r\nHost: iw63v.crqeraf.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://iw63v.crqeraf.xyz/archives/65129/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 23 Dec 2025 14:29:55 GMT\r\ncontent-type: text/css\r\npriority: u=2,i=?0\r\nserver: cloudflare\r\nlast-modified: Sat, 13 Sep 2025 03:47:28 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68c4e950-457f\"\r\nexpires: Tue, 30 Dec 2025 07:16:52 GMT\r\ncache-control: public, max-age=604800, immutable\r\ncontent-encoding: gzip\r\nage: 25983\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6jegVuKkXwueOQ2ZSOwGs0vl8cUol64g0C%2BG2NZFcX1xbP54%2B1lAPY1rbylO5QnAb3XY9bNgX8Q4n7EqKYzwU9BpDPSuRn55r7oR57nUcQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b288dcfdaac56b4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":17791,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (2241)","md5":"4cc6295c16beffdfd9306938ab2b028e","sha1":"625f7c8b418b150315ca38fe2513031ca89b42f5","sha256":"81fc95138bc4ab14105178a3228ca02d2197adfb31efab7979ef1bef6233d801","sha512":"a94bb177da28d7aa36c791abb5797b719dff583d2b2e462b4161a82756289d759132f95bd087eafaef9f301d806bb5cf457dbc73caaf14a6d89be7c010542462","ssdeep":"192:tmUJbiKneuYGoCxcUWGQZa5jgFRuPViIrp13Pq/4okNivwjE4+QYkP4UguO9PqzD:4UbeKOhGXBotg1O4n6FcFhsfY+0orod","tlshash":"228212a453721c53661a4e660b764774eaa444c30a47cc3973c0ad88efb64fc336fae9","first_seen":"2025-09-19T02:33:53.620719Z","last_seen":"2026-04-03T18:43:45.378724Z","times_seen":6888,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-23","alert":"Sinkholed","trigger":"iw63v.crqeraf.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pic.wdsrie.cn/upload_01/upload/20251213/2025121315415940832.gif","fqdn":"pic.wdsrie.cn","domain":"wdsrie.cn","tld":"cn"},"ip":{"addr":"43.152.140.79","port":443,"asn":139341,"as":"ACE","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://iw63v.crqeraf.xyz/archives/65129/","date":"2025-12-23T14:29:57.699Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.wdsrie.cn","organization":""},"issuer":{"commonName":"ZeroSSL ECC Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Sat, 20 Dec 2025 00:00:00 GMT","end":"Fri, 20 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E9:73:86:E2:44:76:13:6D:6B:AE:EE:E0:BA:B0:C0:68:B0:97:37:B8","sha256":"B9:DF:B5:64:69:80:D3:48:0B:F1:C2:39:96:52:89:9A:DE:23:24:F8:50:8B:E3:B3:38:A6:99:51:B3:9A:55:5E"}}},"request":{"raw":"GET /upload_01/upload/20251213/2025121315415940832.gif HTTP/1.1\r\nHost: pic.wdsrie.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://iw63v.crqeraf.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Sat, 13 Dec 2025 07:42:08 GMT\r\nEtag: \"83ff59bf4f4d8dafa9a8a4ca428c610b\"\r\nContent-Type: binary/octet-stream\r\nDate: Sat, 13 Dec 2025 07:42:20 GMT\r\nx-amz-server-side-encryption: AES256\r\nServer: nginx\r\nX-Cache: Hit from cloudfront\r\nX-Amz-Cf-Pop: ARN53-P2\r\nAge: 126\r\nContent-Length: 181376\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 616681825772208864\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\nAccess-Control-Allow-Origin: *\r\nCache-Control: max-age=864000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":181376,"size_decoded":0,"mime_type":"binary/octet-stream","magic":"data","md5":"83ff59bf4f4d8dafa9a8a4ca428c610b","sha1":"6e422f024214bd904ffe8c2758525483c32c077b","sha256":"c760c4378d91fd66dd86f6b5a731653a96524e96df52672320bc844656d90c96","sha512":"cbc2590ed2688d92a5e204329fb45e80e34be85959743616050b3cc01518ec3d365a4ce824c135582bdc676b5233c3195839310f4975b0cbc8ba1fbe6c1889a7","ssdeep":"3072:SGs7UAQOWOpi/14FgZEzFbUe52snlVFgFD/7E+W0tRPfiLnMC62owy8exNu9qCtf:5s7UQdaYgQFbUe5TFgN4L0tBaLnMwrDx","tlshash":"9c042339e9d161744cbc6a87fa7a81a883b5671e755f4033e3d1b3ee589788c4fa0d80","first_seen":"2025-12-16T02:09:18.520814Z","last_seen":"2026-01-09T10:42:14.103775Z","times_seen":156,"resource_available":false,"data":null}},"time_used":857,"timings":{"blocked":844,"dns":0,"connect":0,"send":0,"wait":8,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pic.wdsrie.cn/upload_01/xiao/20251215/2025121517072344165.jpeg","fqdn":"pic.wdsrie.cn","domain":"wdsrie.cn","tld":"cn"},"ip":{"addr":"43.152.140.79","port":443,"asn":139341,"as":"ACE","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://iw63v.crqeraf.xyz/archives/65129/","date":"2025-12-23T14:29:57.215Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.wdsrie.cn","organization":""},"issuer":{"commonName":"ZeroSSL ECC Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Sat, 20 Dec 2025 00:00:00 GMT","end":"Fri, 20 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E9:73:86:E2:44:76:13:6D:6B:AE:EE:E0:BA:B0:C0:68:B0:97:37:B8","sha256":"B9:DF:B5:64:69:80:D3:48:0B:F1:C2:39:96:52:89:9A:DE:23:24:F8:50:8B:E3:B3:38:A6:99:51:B3:9A:55:5E"}}},"request":{"raw":"GET /upload_01/xiao/20251215/2025121517072344165.jpeg HTTP/1.1\r\nHost: pic.wdsrie.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://iw63v.crqeraf.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Mon, 15 Dec 2025 09:07:26 GMT\r\nEtag: \"8e979cedca79dfa0f4f45c25a8406d71\"\r\nContent-Type: binary/octet-stream\r\nDate: Mon, 15 Dec 2025 17:57:56 GMT\r\nx-amz-server-side-encryption: AES256\r\nServer: nginx\r\nX-Cache: Hit from cloudfront\r\nX-Amz-Cf-Pop: ARN53-P2\r\nAge: 25\r\nContent-Length: 55792\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 10507213386938753070\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\nAccess-Control-Allow-Origin: *\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":55792,"size_decoded":0,"mime_type":"binary/octet-stream","magic":"data","md5":"8e979cedca79dfa0f4f45c25a8406d71","sha1":"bc6b6c4278fe714b32ad8c6fc750360a7b93b62d","sha256":"4485535ee63054c436aa82f71ac2c83ee1533cd0c7e6f83aa92b2b858008ae41","sha512":"af96013f27dd81fafae4f12d9b50c544a2d42ce8d96bf43167be9eb1b6ff05efae33ec216da7eec063948b14d9eb1da35132ac0126ea6c59f7255cbd06cbba85","ssdeep":"1536:PfIitC7djB4XNFGr03uBle1+1iWy7OL1ce:3sYNFT3elmT7+3","tlshash":"d3430206cab28ca474652fb053b15c9d4a3b83eda48bc01c09b17e99f6f71801597f77","first_seen":"2025-12-21T20:57:48.987678Z","last_seen":"2025-12-23T14:30:42.442932Z","times_seen":4,"resource_available":false,"data":null}},"time_used":920,"timings":{"blocked":899,"dns":0,"connect":0,"send":0,"wait":19,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"iw63v.crqeraf.xyz/static/pc/js/jquery.min.js?v=20251130","fqdn":"iw63v.crqeraf.xyz","domain":"crqeraf.xyz","tld":"xyz"},"ip":{"addr":"154.207.127.39","port":443,"asn":0,"as":"","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://iw63v.crqeraf.xyz/archives/65129/","date":"2025-12-23T14:29:55.958Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"crqeraf.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 12 Dec 2025 08:17:25 GMT","end":"Thu, 12 Mar 2026 09:15:12 GMT"},"fingerprint":{"sha1":"9A:B6:D6:FC:9F:B5:E4:7C:4E:60:81:74:C5:1D:1F:16:43:65:9B:C0","sha256":"6B:D5:92:C2:2E:E8:B1:3D:EE:9E:2C:51:0B:D3:32:29:71:17:1E:3D:93:07:59:A9:C9:59:7C:A8:D8:9B:2B:8C"}}},"request":{"raw":"GET /static/pc/js/jquery.min.js?v=20251130 HTTP/1.1\r\nHost: iw63v.crqeraf.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://iw63v.crqeraf.xyz/archives/65129/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 23 Dec 2025 14:29:55 GMT\r\ncontent-type: application/javascript\r\npriority: u=2,i=?0\r\nserver: cloudflare\r\nlast-modified: Thu, 11 Sep 2025 07:40:53 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68c27d05-14979\"\r\nexpires: Tue, 30 Dec 2025 07:16:35 GMT\r\ncache-control: public, max-age=604800, immutable\r\ncontent-encoding: gzip\r\nage: 25999\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nkus4nxgdYdDhTqwZ1NTwlnvD2XvhJUXtTTNZHmHBqVEr0IvK5pBY1GHTRdiszYqt80qfo1x350acakQjeic5Ir1KlRUyyGC6O7l2ARfSA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b288dd03afb56b4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":84345,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (32025)","md5":"f9c7afd05729f10f55b689f36bb20172","sha1":"43dc554608df885a59ddeece1598c6ace434d747","sha256":"f16ab224bb962910558715c82f58c10c3ed20f153ddfaa199029f141b5b0255c","sha512":"3dcae1ff6e98c64e3586be3eb14dd486c51f7d4e9fa1b8f9a628be4fbb6a9ab562f31f9b50e16d2e0c72b942bdbe84eee8e0ef87fa730db1428b199a59d88232","ssdeep":"1536:/P10iSi65U/dXXeyhzeBuG+HYE0mdkuJO1z6Oy4sh3J1A72BjmN7TwpDKba98HrJ:++414Jiz6fh6lTqya98HrJ","tlshash":"ca83d6d9b2c67062977734b851bf510bb17a98dab40c8c60f0a4d8e47eb4a8d517bf2c","first_seen":"2023-03-07T01:06:48Z","last_seen":"2026-04-03T18:39:37.142995Z","times_seen":22055,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-23","alert":"Sinkholed","trigger":"iw63v.crqeraf.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"iw63v.crqeraf.xyz/static/pc/layer/layer.js?v=20251130","fqdn":"iw63v.crqeraf.xyz","domain":"crqeraf.xyz","tld":"xyz"},"ip":{"addr":"154.207.127.39","port":443,"asn":0,"as":"","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://iw63v.crqeraf.xyz/archives/65129/","date":"2025-12-23T14:29:56.000Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"crqeraf.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 12 Dec 2025 08:17:25 GMT","end":"Thu, 12 Mar 2026 09:15:12 GMT"},"fingerprint":{"sha1":"9A:B6:D6:FC:9F:B5:E4:7C:4E:60:81:74:C5:1D:1F:16:43:65:9B:C0","sha256":"6B:D5:92:C2:2E:E8:B1:3D:EE:9E:2C:51:0B:D3:32:29:71:17:1E:3D:93:07:59:A9:C9:59:7C:A8:D8:9B:2B:8C"}}},"request":{"raw":"GET /static/pc/layer/layer.js?v=20251130 HTTP/1.1\r\nHost: iw63v.crqeraf.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://iw63v.crqeraf.xyz/archives/65129/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 23 Dec 2025 14:29:55 GMT\r\ncontent-type: application/javascript\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\nlast-modified: Sat, 13 Sep 2025 03:47:39 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68c4e95b-58d2\"\r\nexpires: Tue, 30 Dec 2025 07:16:36 GMT\r\ncache-control: public, max-age=604800, immutable\r\ncontent-encoding: gzip\r\nage: 25999\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dLsvJRsIzcNqKYrjgbHyRQsQkSb88%2Bo0jBApl1JC%2FgN%2BGXowVUqTKmwu3xkldGcO%2BQKWQdXzvNt9ddMYLS2qiCv6rea%2BZskXI7inm%2BicvQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b288dd06b1956b4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":22738,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (22666)","md5":"c07601c9dc7a051f684ada8b5a588c1e","sha1":"10b905cb285468743b548c66ec0a54f7204ed392","sha256":"96f235f5991ceb8e21a80d7090eced3d3792b451b52e3614713a07e23d1d563c","sha512":"d14baec3781b4ad8aa2b284184d7d02be413ca75df4ec69f3274f1acaa1dc71dc51f552a5e0d8dc74ae0f4326031512a11bd53bf90a6fd869493f78ba7810ea7","ssdeep":"384:B13Cih5R93iKTtXSt/KrGriu46K+Lxz6PTElH0jlhpPtwo:B1Siz3i0QtvTKiFSb2o","tlshash":"72a2c76a755034976323906ad10f7a0b31b21d24d7078128f22bb4be1dbcd99a2b7f5f","first_seen":"2023-04-07T18:53:04Z","last_seen":"2026-04-03T18:43:45.376792Z","times_seen":9420,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-23","alert":"Sinkholed","trigger":"iw63v.crqeraf.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"iw63v.crqeraf.xyz/static/pc/layer/theme/default/layer.css?v=3.5.1","fqdn":"iw63v.crqeraf.xyz","domain":"crqeraf.xyz","tld":"xyz"},"ip":{"addr":"154.207.127.39","port":443,"asn":0,"as":"","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://iw63v.crqeraf.xyz/archives/65129/","date":"2025-12-23T14:29:56.468Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"crqeraf.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 12 Dec 2025 08:17:25 GMT","end":"Thu, 12 Mar 2026 09:15:12 GMT"},"fingerprint":{"sha1":"9A:B6:D6:FC:9F:B5:E4:7C:4E:60:81:74:C5:1D:1F:16:43:65:9B:C0","sha256":"6B:D5:92:C2:2E:E8:B1:3D:EE:9E:2C:51:0B:D3:32:29:71:17:1E:3D:93:07:59:A9:C9:59:7C:A8:D8:9B:2B:8C"}}},"request":{"raw":"GET /static/pc/layer/theme/default/layer.css?v=3.5.1 HTTP/1.1\r\nHost: iw63v.crqeraf.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://iw63v.crqeraf.xyz/archives/65129/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 23 Dec 2025 14:29:56 GMT\r\ncontent-type: text/css\r\npriority: u=2,i=?0\r\nserver: cloudflare\r\nlast-modified: Sat, 13 Sep 2025 03:47:28 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68c4e950-37bf\"\r\nexpires: Mon, 29 Dec 2025 07:49:08 GMT\r\ncache-control: public, max-age=604800, immutable\r\ncontent-encoding: gzip\r\nage: 110448\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=i24TsKTuscEm7WPU8oJgFVf7U8knKlAa65HP7WTdM0L8xPejDVj3ybqI7PAjovh6DWmRbUV9YMemwuo35NUl40ykToF5XaDsukRrU9N7hw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b288dd3ce3456b4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14271,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (14271), with no line terminators","md5":"c234eb06d5f32055092294e78957f17d","sha1":"f15ee0bcb9694f32f5e1d524f2653aa0dd043402","sha256":"5cdf3edb27b0c9f8e48918c486e9ae65a9e5beab806b64c4a7bc5bac53c0f540","sha512":"3f06b51116d7f8026d81c7eb6a3c4d871462d09fe0a5b8cc8b7feaf20cbc88b0b6a545f0ec7cbc17566a9ff609405f58fad6eddfb3a8b3f6d530ede8fa3fad5c","ssdeep":"96:mp+Ntha8qNEp+wRY1vUPXi0nMLPD2OtLzAyPHL/LztJDzyv2OQ7KGx1j9d2/nWUU:1ELr2Otzrzzt42OQ7KGx1j8WUq4S3cU","tlshash":"f75242e144911299b0278721d6dc7eba32f88d43e5630caef2573c1f874c6dba2b6647","first_seen":"2023-03-10T11:40:20Z","last_seen":"2026-04-03T18:32:42.997631Z","times_seen":38646,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-23","alert":"Sinkholed","trigger":"iw63v.crqeraf.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pic.wdsrie.cn/upload_01/upload/20241226/2024122614481067687.png","fqdn":"pic.wdsrie.cn","domain":"wdsrie.cn","tld":"cn"},"ip":{"addr":"43.152.140.79","port":443,"asn":139341,"as":"ACE","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://iw63v.crqeraf.xyz/archives/65129/","date":"2025-12-23T14:29:57.006Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.wdsrie.cn","organization":""},"issuer":{"commonName":"ZeroSSL ECC Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Sat, 20 Dec 2025 00:00:00 GMT","end":"Fri, 20 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E9:73:86:E2:44:76:13:6D:6B:AE:EE:E0:BA:B0:C0:68:B0:97:37:B8","sha256":"B9:DF:B5:64:69:80:D3:48:0B:F1:C2:39:96:52:89:9A:DE:23:24:F8:50:8B:E3:B3:38:A6:99:51:B3:9A:55:5E"}}},"request":{"raw":"GET /upload_01/upload/20241226/2024122614481067687.png HTTP/1.1\r\nHost: pic.wdsrie.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://iw63v.crqeraf.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Thu, 26 Dec 2024 06:48:17 GMT\r\nEtag: \"a62cffe39b99f55ae82b9550174311a8\"\r\nContent-Type: binary/octet-stream\r\nDate: Fri, 10 Oct 2025 01:25:37 GMT\r\nx-amz-server-side-encryption: AES256\r\nServer: nginx\r\nX-Cache: Hit from cloudfront\r\nX-Amz-Cf-Pop: ARN53-P2\r\nAge: 3902\r\nContent-Length: 1408\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 11185018373099854326\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\nAccess-Control-Allow-Origin: *\r\nCache-Control: max-age=864000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1408,"size_decoded":0,"mime_type":"binary/octet-stream","magic":"data","md5":"a62cffe39b99f55ae82b9550174311a8","sha1":"e62bdd11f6c97db9c517d81f3c2f1799e769a37e","sha256":"69bbc4bc0881392daa7e335973f14107738b4669ba94942c46148e5dabe95ea1","sha512":"4c7ed6443095ff017031e109d0a0294fe1f07776722f7885af4e9834f3e2f66f7a545ffc2dbf79cd03e6e39c946a0d59c706e68ee292186845f945c096ef28ef","ssdeep":"","tlshash":"0b21c48964aecedfbc5e1a18c668cbe83021e193973c1409d04e9261c804edc5203efb","first_seen":"2024-12-28T10:58:27.382229Z","last_seen":"2026-03-31T15:58:09.871274Z","times_seen":7260,"resource_available":false,"data":null}},"time_used":117,"timings":{"blocked":109,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pic.wdsrie.cn/upload_01/upload/20251222/2025122215215718378.png","fqdn":"pic.wdsrie.cn","domain":"wdsrie.cn","tld":"cn"},"ip":{"addr":"43.152.140.79","port":443,"asn":139341,"as":"ACE","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://iw63v.crqeraf.xyz/archives/65129/","date":"2025-12-23T14:29:57.803Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.wdsrie.cn","organization":""},"issuer":{"commonName":"ZeroSSL ECC Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Sat, 20 Dec 2025 00:00:00 GMT","end":"Fri, 20 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E9:73:86:E2:44:76:13:6D:6B:AE:EE:E0:BA:B0:C0:68:B0:97:37:B8","sha256":"B9:DF:B5:64:69:80:D3:48:0B:F1:C2:39:96:52:89:9A:DE:23:24:F8:50:8B:E3:B3:38:A6:99:51:B3:9A:55:5E"}}},"request":{"raw":"GET /upload_01/upload/20251222/2025122215215718378.png HTTP/1.1\r\nHost: pic.wdsrie.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://iw63v.crqeraf.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Mon, 22 Dec 2025 07:27:12 GMT\r\nEtag: \"ec9eb4704769ef50b055e1d6de19555a\"\r\nContent-Type: binary/octet-stream\r\nDate: Mon, 22 Dec 2025 07:27:13 GMT\r\nx-amz-server-side-encryption: AES256\r\nServer: nginx\r\nX-Cache: Hit from cloudfront\r\nX-Amz-Cf-Pop: ARN53-P2\r\nAge: 1324\r\nContent-Length: 299584\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 16707256953960438375\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\nAccess-Control-Allow-Origin: *\r\nCache-Control: max-age=864000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":299584,"size_decoded":0,"mime_type":"binary/octet-stream","magic":"data","md5":"ec9eb4704769ef50b055e1d6de19555a","sha1":"ce9bf71680f6d7fcd4285d95c0d303bc55361b8a","sha256":"dc5be655c9b09adc749cf3790e6c67fddaf858098ee531e22cdb47342f98c6f3","sha512":"3f6cf52b4c2069ce823a8c67b163a30c4f7afb3afd531a1d546d4e1fe1505f839c0b2851940d56a077d18cb47df9faaced054a33a38d512376fb7de1fdc58e62","ssdeep":"6144:LBwhtL5gMQ8sxz+vlS9aAx4gpVDGgGfU0ZlDF0GiUa07RwBWnN:ehp5gMQXzgAQWHpVy/f/ZlDRXa0lwcnN","tlshash":"bf54225395eaa712e4f10325e445ffd2353bd7a9a38132ca333afd094ac70d896642b7","first_seen":"2025-12-23T14:30:42.393755Z","last_seen":"2025-12-23T14:30:42.393755Z","times_seen":1,"resource_available":false,"data":null}},"time_used":916,"timings":{"blocked":896,"dns":0,"connect":0,"send":0,"wait":8,"receive":12,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.addtoany.com/menu/svg/icons/x.js","fqdn":"static.addtoany.com","domain":"addtoany.com","tld":"com"},"ip":{"addr":"172.66.171.172","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://iw63v.crqeraf.xyz/archives/65129/","date":"2025-12-23T14:29:58.016Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"static.addtoany.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Dec 2025 13:28:50 GMT","end":"Sun, 22 Mar 2026 14:28:48 GMT"},"fingerprint":{"sha1":"83:E4:54:72:9E:E9:BE:F0:31:A0:E0:3B:5B:38:1D:25:57:6A:CE:67","sha256":"C2:A2:4F:7E:8C:0F:A8:AA:86:24:03:7D:6B:67:31:2E:38:54:D6:C4:27:59:FE:B4:3D:28:7C:D5:DC:F6:F1:1E"}}},"request":{"raw":"GET /menu/svg/icons/x.js HTTP/1.1\r\nHost: static.addtoany.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://iw63v.crqeraf.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncf-cache-status: REVALIDATED\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: application/javascript\r\npriority: u=3,i=?0\r\naccess-control-allow-origin: *\r\ncache-control: max-age=864000, stale-while-revalidate=30, public\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=373iUvVgFo8u9sb34rZvOxEMga%2BIbu02uXRWMo%2FIAc8MBGD8QOiV9KYP4m3WgYZdMEYKLj%2B5E9GiitSc6qtQXM9rb8lePbxNJwB31mDa4w%3D%3D\"}]}\r\netag: W/\"7cdbf2d5d94ad6e7bf6e7cc1418dd608\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ndate: Tue, 23 Dec 2025 14:29:57 GMT\r\ncf-ray: 9b288ddd3a0e569f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":297,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with no line terminators","md5":"885be296b72c01b844a2addc97be03db","sha1":"0696c38c7746aa5c930b4a679282a156fc69784f","sha256":"122ed4db2019348aef89a605e3eb79c6004f5727f16144dc46b61f31ee131764","sha512":"d498e95238c70940c277188c7aba66f260e721daeb220386a80424d5bd4641854019f6c797fb920ed8ebb9ce0b14d2e9b04689671cb2d492edbaa88e18d6256e","ssdeep":"","tlshash":"6ee0c28125115a418d230367db2f104f7332707a715c14d662ad99fde4d506e885bb13","first_seen":"2023-09-17T09:47:27Z","last_seen":"2026-04-03T18:42:08.296587Z","times_seen":11288,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.addtoany.com/menu/svg/icons/douban.js","fqdn":"static.addtoany.com","domain":"addtoany.com","tld":"com"},"ip":{"addr":"172.66.171.172","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://iw63v.crqeraf.xyz/archives/65129/","date":"2025-12-23T14:29:58.018Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"static.addtoany.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Dec 2025 13:28:50 GMT","end":"Sun, 22 Mar 2026 14:28:48 GMT"},"fingerprint":{"sha1":"83:E4:54:72:9E:E9:BE:F0:31:A0:E0:3B:5B:38:1D:25:57:6A:CE:67","sha256":"C2:A2:4F:7E:8C:0F:A8:AA:86:24:03:7D:6B:67:31:2E:38:54:D6:C4:27:59:FE:B4:3D:28:7C:D5:DC:F6:F1:1E"}}},"request":{"raw":"GET /menu/svg/icons/douban.js HTTP/1.1\r\nHost: static.addtoany.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://iw63v.crqeraf.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncf-cache-status: REVALIDATED\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: application/javascript\r\npriority: u=3,i=?0\r\naccess-control-allow-origin: *\r\ncache-control: max-age=7776000, stale-while-revalidate=30, public\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vaBPVLmB2%2FsP%2Fm%2FLmSG5xSY3wpTIfW%2BzODASDRH6Fi1FGsLUvIVWMwSnEO9etM2eqLiaMfMDMevlfrpvLjbrq03G1UT68%2FO9Zvo2C0n7ew%3D%3D\"}]}\r\netag: W/\"c8397225183a9e7dcf36de7d5dc37d8e\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ndate: Tue, 23 Dec 2025 14:29:57 GMT\r\ncf-ray: 9b288ddd3a10569f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":313,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (313), with no line terminators","md5":"58b9ee38409760d31f206b8b9c253591","sha1":"8ade058793e2da9258c077a1bcfe8fd0f6091a6d","sha256":"1706d83eb48b3c68a21f90e902db4d8de26298bb95c44c21c498fa2b9ee60dd2","sha512":"1a3557ed08952610327a74e52ffb09839b957b6177f8df21373ed290dc60429b604ce910dcb7335cb03def3cdfb95794c229ea297ca82ed76837cef837236b72","ssdeep":"","tlshash":"12e07d56b13419418d3309bad32e140f5276346c02a9a0e19168c0b3747b07e4406703","first_seen":"2024-08-19T19:49:02.269203Z","last_seen":"2026-04-03T18:43:45.434948Z","times_seen":7527,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"iw63v.crqeraf.xyz/static/pc/editor/swiper-bundle.min.css?v=20251130","fqdn":"iw63v.crqeraf.xyz","domain":"crqeraf.xyz","tld":"xyz"},"ip":{"addr":"154.207.127.39","port":443,"asn":0,"as":"","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://iw63v.crqeraf.xyz/archives/65129/","date":"2025-12-23T14:29:55.948Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"crqeraf.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 12 Dec 2025 08:17:25 GMT","end":"Thu, 12 Mar 2026 09:15:12 GMT"},"fingerprint":{"sha1":"9A:B6:D6:FC:9F:B5:E4:7C:4E:60:81:74:C5:1D:1F:16:43:65:9B:C0","sha256":"6B:D5:92:C2:2E:E8:B1:3D:EE:9E:2C:51:0B:D3:32:29:71:17:1E:3D:93:07:59:A9:C9:59:7C:A8:D8:9B:2B:8C"}}},"request":{"raw":"GET /static/pc/editor/swiper-bundle.min.css?v=20251130 HTTP/1.1\r\nHost: iw63v.crqeraf.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://iw63v.crqeraf.xyz/archives/65129/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 23 Dec 2025 14:29:55 GMT\r\ncontent-type: text/css\r\npriority: u=2,i=?0\r\nserver: cloudflare\r\nlast-modified: Sat, 13 Sep 2025 03:47:28 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68c4e950-406d\"\r\nexpires: Tue, 30 Dec 2025 07:16:52 GMT\r\ncache-control: public, max-age=604800, immutable\r\ncontent-encoding: gzip\r\nage: 25983\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CdsnQDFaBJn8N3YvKj1la7dWVB0wF1Rik5lbJ3w4u8tzEACnxv6N9EH%2BVYeV%2FW%2FfLdgAxkuXR7fgg1REq8l70CFvpOv9zwYfI2jvRqMWLg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b288dd03af456b4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16493,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (16237)","md5":"d49431d901f45ca0bfe60b4eba2c9fa4","sha1":"fe19b6a20e6106504d0d8172728e2957cada945b","sha256":"5208b26424d9820ce069f39c0f6c0f321d6aa03d3407f1a22eef54129f99380a","sha512":"4e21e34d6caa47b8e9d070ec6eea7296d618e8ee6a9129f9b8bca9a8b4a0351b5cdad100843d838617defb4baedda3f17b92cdfaab8a97203e8f4ed246dcf153","ssdeep":"192:z/mUJbiKneTT4bHZ+SKqnxup/a2AMQfHff71eesedOJ9A5Pz+c3At2/6:zeUbeTMbHZ+knh2AVfHfA4XYz","tlshash":"3e7223681340282753274f374b71cbb9ddb444d24b93896e91c0ee88d7b6cb9236f6e9","first_seen":"2023-04-05T23:24:00Z","last_seen":"2026-04-03T18:43:45.462485Z","times_seen":7416,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-23","alert":"Sinkholed","trigger":"iw63v.crqeraf.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"iw63v.crqeraf.xyz/static/pc/img/close.7ce54f3.png","fqdn":"iw63v.crqeraf.xyz","domain":"crqeraf.xyz","tld":"xyz"},"ip":{"addr":"154.207.127.39","port":443,"asn":0,"as":"","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://iw63v.crqeraf.xyz/archives/65129/","date":"2025-12-23T14:29:56.044Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"crqeraf.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 12 Dec 2025 08:17:25 GMT","end":"Thu, 12 Mar 2026 09:15:12 GMT"},"fingerprint":{"sha1":"9A:B6:D6:FC:9F:B5:E4:7C:4E:60:81:74:C5:1D:1F:16:43:65:9B:C0","sha256":"6B:D5:92:C2:2E:E8:B1:3D:EE:9E:2C:51:0B:D3:32:29:71:17:1E:3D:93:07:59:A9:C9:59:7C:A8:D8:9B:2B:8C"}}},"request":{"raw":"GET /static/pc/img/close.7ce54f3.png HTTP/1.1\r\nHost: iw63v.crqeraf.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://iw63v.crqeraf.xyz/archives/65129/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 23 Dec 2025 14:29:55 GMT\r\ncontent-type: image/png\r\ncontent-length: 1009\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\nlast-modified: Sat, 13 Sep 2025 03:47:40 GMT\r\netag: \"68c4e95c-3f1\"\r\nexpires: Fri, 26 Dec 2025 11:48:55 GMT\r\ncache-control: public, max-age=604800, immutable\r\naccept-ranges: bytes\r\nage: 355260\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DwvABRAQExRaorurYBR03JITbMKGv1edc2XBDFDriAvIIbtVOCsB60i0f0LdwxE1YEbsnb4U8sHTqxAtJUVNmaLH0mp9gJtQkCAvb7rnqQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b288dd07b2c56b4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1009,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 90 x 90, 8-bit/color RGBA, non-interlaced","md5":"adb24ec37dce9271aaede7fdcbd5d0c4","sha1":"80b29272400d4caad72236175e5480c94cc6c81e","sha256":"25c804ca0483abdcffe4b1594e42d52957dad60f9082590000d6f6578342c9db","sha512":"3ffb94c8dc12a59194fecd817f92a48898525d00f5adafd46e9955fa6f79eaee1456fc13c7fcbfc3335c3ecbb9238c279ec41acd17ccf37553e3d54b0725bbef","ssdeep":"","tlshash":"1911a5d683972c82cc05e3771d07439a185f6072071e4a0adbcce139aa9e64587b1116","first_seen":"2023-09-24T18:31:27Z","last_seen":"2026-04-03T18:43:45.442423Z","times_seen":7879,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-23","alert":"Sinkholed","trigger":"iw63v.crqeraf.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"iw63v.crqeraf.xyz/static/common/vue.prod.js?v=20251130","fqdn":"iw63v.crqeraf.xyz","domain":"crqeraf.xyz","tld":"xyz"},"ip":{"addr":"154.207.127.39","port":443,"asn":0,"as":"","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://iw63v.crqeraf.xyz/archives/65129/","date":"2025-12-23T14:29:56.063Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"crqeraf.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 12 Dec 2025 08:17:25 GMT","end":"Thu, 12 Mar 2026 09:15:12 GMT"},"fingerprint":{"sha1":"9A:B6:D6:FC:9F:B5:E4:7C:4E:60:81:74:C5:1D:1F:16:43:65:9B:C0","sha256":"6B:D5:92:C2:2E:E8:B1:3D:EE:9E:2C:51:0B:D3:32:29:71:17:1E:3D:93:07:59:A9:C9:59:7C:A8:D8:9B:2B:8C"}}},"request":{"raw":"GET /static/common/vue.prod.js?v=20251130 HTTP/1.1\r\nHost: iw63v.crqeraf.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://iw63v.crqeraf.xyz/archives/65129/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 23 Dec 2025 14:29:55 GMT\r\ncontent-type: application/javascript\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\nlast-modified: Thu, 20 Nov 2025 11:34:17 GMT\r\nvary: Accept-Encoding\r\netag: W/\"691efcb9-2f925\"\r\nexpires: Tue, 30 Dec 2025 07:16:36 GMT\r\ncache-control: public, max-age=604800, immutable\r\ncontent-encoding: gzip\r\nage: 25999\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TGnC3TZzypDcaQEg%2BgXi18aJ0urWChevS%2FRE2uMCD2PB91KRAszvXA1GmxBMgN6nQmIVNFYLa3%2BZkL1acF3lWkpr98CQ8diUDoLhBYFT0g%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b288dd0ab6556b4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":194853,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (28532)","md5":"9b14a30d9be6b89ccb5d9426baa70059","sha1":"e55a9116be9d0907b48698418b9e348d36bd3624","sha256":"97374c2e6815b02920dc02d8cca04507973d9a4d82aa5dafa20d04c2227ac9d2","sha512":"90840f4551f1ceeb2e764fed6a632d0eb39006fcbec40166664f0e7f0241347d8679fddf6e41658f939d0b00e893f1bf4ae97429f320c6dc60af0d87c4ef9dfc","ssdeep":"3072:c0RkBL/7KE2X44lDzvWUgT5Asswj2z+e7/72oIKc01DcUrIH:c0KuE2X44lDjWXT3j7e2KctH","tlshash":"2c1428b93181703217ea14e250bb0016f33a1525780984e8b5bde8df2d7695a61fffbe","first_seen":"2025-06-27T04:20:30.543622Z","last_seen":"2026-04-03T18:40:13.071869Z","times_seen":21898,"resource_available":true,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-23","alert":"Sinkholed","trigger":"iw63v.crqeraf.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"heiliao.com/index/statistics_common","fqdn":"heiliao.com","domain":"heiliao.com","tld":"com"},"ip":{"addr":"3.167.2.63","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://iw63v.crqeraf.xyz/archives/65129/","date":"2025-12-23T14:29:56.608Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"heiliao.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Mon, 22 Dec 2025 00:00:00 GMT","end":"Wed, 20 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"E6:37:12:41:7E:C0:A0:A9:95:A8:F1:A3:E7:44:FA:C1:D9:E2:91:AA","sha256":"09:0E:DA:FA:2E:EF:EA:F0:0C:E4:93:6F:E9:5B:88:27:B0:6A:BA:5F:EC:33:8A:BD:1A:5E:15:83:F1:2A:56:7F"}}},"request":{"raw":"GET /index/statistics_common HTTP/1.1\r\nHost: heiliao.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/html; charset=utf-8\r\ndate: Tue, 23 Dec 2025 14:29:56 GMT\r\naccess-control-allow-methods: GET, POST, PUT,DELETE,OPTIONS,PATCH\r\naccess-control-allow-headers: content-type,token\r\nserver: nginx/1.22.1\r\np3p: CP=\"CAO PSA OUR\"\r\naccess-control-allow-origin: *\r\nvary: Accept-Encoding\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 c66a2f390287242c7df16dd5190aa68e.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P2\r\nx-amz-cf-id: yZQ0b51WZFDM9gT_FYBQUyFQJTSPP5PBpqXLkbx6wPDPhY-SxgMcDg==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-03T18:31:03.533086Z","times_seen":13299059,"resource_available":true,"data":null}},"time_used":286,"timings":{"blocked":40,"dns":0,"connect":1,"send":0,"wait":201,"receive":0,"ssl":41},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"iw63v.crqeraf.xyz/static/common/index.css?v=20251130","fqdn":"iw63v.crqeraf.xyz","domain":"crqeraf.xyz","tld":"xyz"},"ip":{"addr":"154.207.127.39","port":443,"asn":0,"as":"","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://iw63v.crqeraf.xyz/archives/65129/","date":"2025-12-23T14:29:55.999Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"crqeraf.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 12 Dec 2025 08:17:25 GMT","end":"Thu, 12 Mar 2026 09:15:12 GMT"},"fingerprint":{"sha1":"9A:B6:D6:FC:9F:B5:E4:7C:4E:60:81:74:C5:1D:1F:16:43:65:9B:C0","sha256":"6B:D5:92:C2:2E:E8:B1:3D:EE:9E:2C:51:0B:D3:32:29:71:17:1E:3D:93:07:59:A9:C9:59:7C:A8:D8:9B:2B:8C"}}},"request":{"raw":"GET /static/common/index.css?v=20251130 HTTP/1.1\r\nHost: iw63v.crqeraf.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://iw63v.crqeraf.xyz/archives/65129/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 23 Dec 2025 14:29:55 GMT\r\ncontent-type: text/css\r\npriority: u=2,i=?0\r\nserver: cloudflare\r\nlast-modified: Tue, 23 Dec 2025 06:52:40 GMT\r\nvary: Accept-Encoding\r\netag: W/\"694a3c38-2dac\"\r\nexpires: Tue, 30 Dec 2025 07:16:52 GMT\r\ncache-control: public, max-age=604800, immutable\r\ncontent-encoding: gzip\r\nage: 25983\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jfYIORba3P98lRcCIKv3E%2BiQos%2FPsk6XD9rwnjCCGNgJm%2BfTqjlCMOnSgxPKpu29DoyKVGd0KNZ%2Bu%2FPNIOKflzOdZ3RPNyyVU4BUSVoROA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b288dd05b1056b4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11692,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text","md5":"cc972ed16b79d300b4da54c99dfcf62e","sha1":"7439da8b7b51a74074aad05f88bacb73e51b1c21","sha256":"ff3d5c5e2d0fbbdf92188d42cc1f2d38344d1294b32ef15a2f54915fa9dd010d","sha512":"7912e516a038c67b39f5823e5f0c6e0cf3b5dde1b4f00f24625b7dc242bc793f24c4acb390e21d63323554ef4c584e91969401bde68477e0a2aee31b27804293","ssdeep":"192:PlrIBeSrMzSbuA+Zmm+Uqn0/RWGiH/oz9LVorygQCeA//7gxOtn4M:4xbuvhq0/RWGZz9LVorygQCeA/sktD","tlshash":"5f3254642a552c49821f88981fa99bd8d75d60129f4fcd6ef6c27c6cdf8e29020b73cd","first_seen":"2025-12-23T08:10:49.299724Z","last_seen":"2026-01-15T18:30:09.341562Z","times_seen":457,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-23","alert":"Sinkholed","trigger":"iw63v.crqeraf.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"iw63v.crqeraf.xyz/static/pc/img/logo.svg","fqdn":"iw63v.crqeraf.xyz","domain":"crqeraf.xyz","tld":"xyz"},"ip":{"addr":"154.207.127.39","port":443,"asn":0,"as":"","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://iw63v.crqeraf.xyz/archives/65129/","date":"2025-12-23T14:29:56.020Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"crqeraf.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 12 Dec 2025 08:17:25 GMT","end":"Thu, 12 Mar 2026 09:15:12 GMT"},"fingerprint":{"sha1":"9A:B6:D6:FC:9F:B5:E4:7C:4E:60:81:74:C5:1D:1F:16:43:65:9B:C0","sha256":"6B:D5:92:C2:2E:E8:B1:3D:EE:9E:2C:51:0B:D3:32:29:71:17:1E:3D:93:07:59:A9:C9:59:7C:A8:D8:9B:2B:8C"}}},"request":{"raw":"GET /static/pc/img/logo.svg HTTP/1.1\r\nHost: iw63v.crqeraf.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://iw63v.crqeraf.xyz/archives/65129/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 23 Dec 2025 14:29:55 GMT\r\ncontent-type: image/svg+xml\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\nlast-modified: Sat, 13 Sep 2025 03:47:40 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Sun, 28 Dec 2025 18:17:46 GMT\r\ncache-control: public, max-age=604800, immutable\r\nage: 159129\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7pxUahfISmgD%2Fi%2Fbe%2BilgnhY7n%2Fq7Wd5Lt1Xc1qODKrD%2F5hdA0d%2BWEGFZdKJAsohYqiUJ7GgG04jTMkH9uMSjIiYalfF3nbRtFWk5%2BlSsA%3D%3D\"}]}\r\netag: W/\"68c4e95c-ab4\"\r\ncontent-encoding: br\r\ncf-ray: 9b288dd06b2156b4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2740,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"9f7bf016b788c4d29b66e28e59da239e","sha1":"9e0e7ea6688a8b5dfb50518e68f0c0610b66e78a","sha256":"ae086927b4dccf1dc7eaec1289c474a8a61fd5dc786666251d84d21aef79af8d","sha512":"8ad0613f18eb2899282c66ab85f6635b3d65f5290979b5c2ea8db911fcf01c18bc499053bbe07a6691c14618fcd33ac5aa819a03cd86d7f4861b50872b062576","ssdeep":"","tlshash":"875182e56770d7ece2e7485def26389d2b1f74b5a1270ac0c66f592a90c78d8f006c14","first_seen":"2024-04-20T21:23:38Z","last_seen":"2026-04-03T18:43:45.364704Z","times_seen":7524,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-23","alert":"Sinkholed","trigger":"iw63v.crqeraf.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pic.wdsrie.cn/upload_01/upload/20250524/2025052415243859787.png","fqdn":"pic.wdsrie.cn","domain":"wdsrie.cn","tld":"cn"},"ip":{"addr":"43.152.140.79","port":443,"asn":139341,"as":"ACE","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://iw63v.crqeraf.xyz/archives/65129/","date":"2025-12-23T14:29:57.003Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.wdsrie.cn","organization":""},"issuer":{"commonName":"ZeroSSL ECC Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Sat, 20 Dec 2025 00:00:00 GMT","end":"Fri, 20 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E9:73:86:E2:44:76:13:6D:6B:AE:EE:E0:BA:B0:C0:68:B0:97:37:B8","sha256":"B9:DF:B5:64:69:80:D3:48:0B:F1:C2:39:96:52:89:9A:DE:23:24:F8:50:8B:E3:B3:38:A6:99:51:B3:9A:55:5E"}}},"request":{"raw":"GET /upload_01/upload/20250524/2025052415243859787.png HTTP/1.1\r\nHost: pic.wdsrie.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://iw63v.crqeraf.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Sat, 24 May 2025 07:24:43 GMT\r\nEtag: \"d3234085f68a8ed36b3acd13e17c18b1\"\r\nContent-Type: binary/octet-stream\r\nDate: Sat, 26 Jul 2025 11:18:57 GMT\r\nx-amz-server-side-encryption: AES256\r\nServer: nginx\r\nX-Cache: Hit from cloudfront\r\nX-Amz-Cf-Pop: ARN53-P2\r\nAge: 296\r\nVary: Origin\r\nContent-Length: 1632\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 8217838779912821250\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\nAccess-Control-Allow-Origin: *\r\nCache-Control: max-age=864000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1632,"size_decoded":0,"mime_type":"binary/octet-stream","magic":"data","md5":"d3234085f68a8ed36b3acd13e17c18b1","sha1":"80feace81549769a98a66ca46f8b681641476631","sha256":"3bad0e5a83b047bc3d7cd97b33d3a9e37a4d454dfc4044e8c4d28609ae0f49bc","sha512":"641d89944b1a04b41f69bc22d72406edf03e6f1e2b2bbd012d86a78b205464f76fd39197976324ad9390618690fe133e14a69cbf077979fe9e3ccea07cf002be","ssdeep":"","tlshash":"73315c134f8d873302daf4d01dd70a869260ea9c33ae755608c9f1c72cdde72d0b8888","first_seen":"2025-03-06T15:56:26.299773Z","last_seen":"2026-04-03T18:43:45.377774Z","times_seen":7483,"resource_available":false,"data":null}},"time_used":133,"timings":{"blocked":111,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pic.wdsrie.cn/upload_01/upload/20250628/2025062819083012084.png","fqdn":"pic.wdsrie.cn","domain":"wdsrie.cn","tld":"cn"},"ip":{"addr":"43.152.140.79","port":443,"asn":139341,"as":"ACE","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://iw63v.crqeraf.xyz/archives/65129/","date":"2025-12-23T14:29:57.381Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.wdsrie.cn","organization":""},"issuer":{"commonName":"ZeroSSL ECC Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Sat, 20 Dec 2025 00:00:00 GMT","end":"Fri, 20 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E9:73:86:E2:44:76:13:6D:6B:AE:EE:E0:BA:B0:C0:68:B0:97:37:B8","sha256":"B9:DF:B5:64:69:80:D3:48:0B:F1:C2:39:96:52:89:9A:DE:23:24:F8:50:8B:E3:B3:38:A6:99:51:B3:9A:55:5E"}}},"request":{"raw":"GET /upload_01/upload/20250628/2025062819083012084.png HTTP/1.1\r\nHost: pic.wdsrie.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://iw63v.crqeraf.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Sat, 28 Jun 2025 11:11:19 GMT\r\nEtag: \"76bd412f475bb6ee62437b3b4b5e7c99\"\r\nContent-Type: binary/octet-stream\r\nDate: Sat, 26 Jul 2025 01:30:18 GMT\r\nx-amz-server-side-encryption: AES256\r\nServer: nginx\r\nX-Cache: Hit from cloudfront\r\nX-Amz-Cf-Pop: ARN53-P2\r\nAge: 35614\r\nContent-Length: 282592\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 13491113502821753975\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\nAccess-Control-Allow-Origin: *\r\nCache-Control: max-age=864000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":282592,"size_decoded":0,"mime_type":"binary/octet-stream","magic":"data","md5":"76bd412f475bb6ee62437b3b4b5e7c99","sha1":"e4926c167008cfac05af1b3504e5dc758a653916","sha256":"59b50d3f746c522ba6197cf8e0704dafe818d88d07020fea3c17af02426ef0e0","sha512":"65d1b8d1b082eff74aeeb1b44ec7806c467e6e38b1a2856cd8976583c20da8721200f7ce7d6b1578c1f99288a46c8c3c8b48034e4a81fbbde9898b47ec9d0639","ssdeep":"6144:CPd1p0YXJoqS+r1tlIoDuWH4a7RIqPaKN89nGfq32q:yTnXJor+5tnu+4gSlKS1qq5","tlshash":"cd5423d8396230058950737e8973484e635559f8db9a3df3de063f762bba3bca0910b6","first_seen":"2025-06-28T16:45:13.172045Z","last_seen":"2026-04-01T20:05:14.261048Z","times_seen":3650,"resource_available":false,"data":null}},"time_used":1119,"timings":{"blocked":1102,"dns":0,"connect":0,"send":0,"wait":8,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pic.wdsrie.cn/upload_01/upload/20251212/2025121216000678652.gif","fqdn":"pic.wdsrie.cn","domain":"wdsrie.cn","tld":"cn"},"ip":{"addr":"43.152.140.79","port":443,"asn":139341,"as":"ACE","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://iw63v.crqeraf.xyz/archives/65129/","date":"2025-12-23T14:29:58.010Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.wdsrie.cn","organization":""},"issuer":{"commonName":"ZeroSSL ECC Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Sat, 20 Dec 2025 00:00:00 GMT","end":"Fri, 20 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E9:73:86:E2:44:76:13:6D:6B:AE:EE:E0:BA:B0:C0:68:B0:97:37:B8","sha256":"B9:DF:B5:64:69:80:D3:48:0B:F1:C2:39:96:52:89:9A:DE:23:24:F8:50:8B:E3:B3:38:A6:99:51:B3:9A:55:5E"}}},"request":{"raw":"GET /upload_01/upload/20251212/2025121216000678652.gif HTTP/1.1\r\nHost: pic.wdsrie.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://iw63v.crqeraf.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Fri, 12 Dec 2025 08:00:12 GMT\r\nEtag: \"32c4ec218cf3375cc5165d0bdeb6d375\"\r\nContent-Type: binary/octet-stream\r\nDate: Fri, 12 Dec 2025 08:00:29 GMT\r\nx-amz-server-side-encryption: AES256\r\nServer: nginx\r\nX-Cache: Hit from cloudfront\r\nX-Amz-Cf-Pop: ARN53-P2\r\nAge: 52\r\nContent-Length: 42528\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 11211051694068888267\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\nAccess-Control-Allow-Origin: *\r\nCache-Control: max-age=864000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":42528,"size_decoded":0,"mime_type":"binary/octet-stream","magic":"data","md5":"32c4ec218cf3375cc5165d0bdeb6d375","sha1":"ac6036110453626c8fc298b637113fa3d6fae00c","sha256":"bd5c7ee92e4aed702fa54d484f59f1dfa35632d8ce3ccfb1757e793bc87e1591","sha512":"d12a96cc8293690020b37d12b092dec7d461a4c5965e12535b06186b9bfddf12b64c8264b697b47e1124fbe22c99bc9c551319f20b1ed287fb94fe48c018bd9d","ssdeep":"768:FIIe0YPR2zvosn9tsFrMBqnoXdpWC7f1R+AB4DKJ8bm5BQAeJ/K7I4VRZ:FIL0YJ2MsSOrnWEf1Rd4uSy2/K7TVRZ","tlshash":"0213f1e4899acf3d29c5456cd88d19e9d74710f7768ebfb84a3f30d0ea6814a4ec4079","first_seen":"2025-04-08T01:44:22.450551Z","last_seen":"2026-02-08T01:35:18.334166Z","times_seen":2164,"resource_available":false,"data":null}},"time_used":817,"timings":{"blocked":760,"dns":0,"connect":0,"send":0,"wait":55,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"iw63v.crqeraf.xyz/static/pc/css/6178dfe.css?v=20251130","fqdn":"iw63v.crqeraf.xyz","domain":"crqeraf.xyz","tld":"xyz"},"ip":{"addr":"154.207.127.39","port":443,"asn":0,"as":"","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://iw63v.crqeraf.xyz/archives/65129/","date":"2025-12-23T14:29:55.941Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"crqeraf.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 12 Dec 2025 08:17:25 GMT","end":"Thu, 12 Mar 2026 09:15:12 GMT"},"fingerprint":{"sha1":"9A:B6:D6:FC:9F:B5:E4:7C:4E:60:81:74:C5:1D:1F:16:43:65:9B:C0","sha256":"6B:D5:92:C2:2E:E8:B1:3D:EE:9E:2C:51:0B:D3:32:29:71:17:1E:3D:93:07:59:A9:C9:59:7C:A8:D8:9B:2B:8C"}}},"request":{"raw":"GET /static/pc/css/6178dfe.css?v=20251130 HTTP/1.1\r\nHost: iw63v.crqeraf.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://iw63v.crqeraf.xyz/archives/65129/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 23 Dec 2025 14:29:55 GMT\r\ncontent-type: text/css\r\npriority: u=2,i=?0\r\nserver: cloudflare\r\nlast-modified: Sat, 13 Sep 2025 03:47:39 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Tue, 30 Dec 2025 07:16:52 GMT\r\ncache-control: public, max-age=604800, immutable\r\nage: 25983\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1flyzII%2Fl%2FgMqsaDSa1c%2FZvRxPSCIOF9d5HVNqjJDFVwUhmh5IPGrnLne2mV5Xl4hhJuByHunpBXsPh%2FQH48lqTTYz1FK4U6m0Tp2FV4pw%3D%3D\"}]}\r\netag: W/\"68c4e95b-44\"\r\ncontent-encoding: br\r\ncf-ray: 9b288dd02aec56b4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":68,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"800fb4708fee1d83edfa98cf4237bdf3","sha1":"0e7071cd1adce31190c24756f512353c214aa1dc","sha256":"5ec59174b8631f5bb17ac99efab163bbbfee614bf21d42830761959b3a05bdfb","sha512":"c919d63810fe1d9bb90a87b41927209d677c2cbee3685401584dfb7739cd157e5290db9d1a0208d22e714f293938f3ea6dfa59f5987f10ef54247a34ecd6c227","ssdeep":"","tlshash":"52a00233b298d4ae9f3281b204523e7f6e2d599597010c249527bf74763e1873d21068","first_seen":"2023-10-15T11:56:16Z","last_seen":"2026-04-03T18:46:54.521986Z","times_seen":7037,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-23","alert":"Sinkholed","trigger":"iw63v.crqeraf.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"iw63v.crqeraf.xyz/static/pc/css/211a777.css?v=20251130","fqdn":"iw63v.crqeraf.xyz","domain":"crqeraf.xyz","tld":"xyz"},"ip":{"addr":"154.207.127.39","port":443,"asn":0,"as":"","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://iw63v.crqeraf.xyz/archives/65129/","date":"2025-12-23T14:29:55.943Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"crqeraf.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 12 Dec 2025 08:17:25 GMT","end":"Thu, 12 Mar 2026 09:15:12 GMT"},"fingerprint":{"sha1":"9A:B6:D6:FC:9F:B5:E4:7C:4E:60:81:74:C5:1D:1F:16:43:65:9B:C0","sha256":"6B:D5:92:C2:2E:E8:B1:3D:EE:9E:2C:51:0B:D3:32:29:71:17:1E:3D:93:07:59:A9:C9:59:7C:A8:D8:9B:2B:8C"}}},"request":{"raw":"GET /static/pc/css/211a777.css?v=20251130 HTTP/1.1\r\nHost: iw63v.crqeraf.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://iw63v.crqeraf.xyz/archives/65129/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 23 Dec 2025 14:29:55 GMT\r\ncontent-type: text/css\r\npriority: u=2,i=?0\r\nserver: cloudflare\r\nlast-modified: Wed, 29 Oct 2025 15:01:04 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69022c30-27bc\"\r\nexpires: Tue, 30 Dec 2025 07:16:52 GMT\r\ncache-control: public, max-age=604800, immutable\r\ncontent-encoding: gzip\r\nage: 25983\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WTijSjGdPa2LCWzLdUkJSwTRspDXiNtKbZqpzQ8eXNaT7oSiisMEVyMS8QOLepNIwxcsVNEKtphaDM%2FkHgYoR27JBf6b%2FRKfYKA0SRJxCA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b288dd02aee56b4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10172,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text","md5":"09d5129b95e03a568fb6af407896ccf5","sha1":"64c0e35f09f7d85c430faf30abc27c7c1a44c4d2","sha256":"53ec70496d76ac60cb8ba29717565c10c0e87f8ce54009708fe89439ef19fd01","sha512":"bf1710bdd22e8f9c6fd2332cccb476ae296b3e4ca61766df8feadff00f935c99e4dbedcbdd9738d9dd838badf5085ab3d5d596619c77d1bf0af11714975da93d","ssdeep":"192:Vac00L3+NRcZ+qCZSFAKgxKe4k5sbKU0CrSZMq7uZBYKHOOBhf4xzp6:007+tSFIlK0sSZMMUp","tlshash":"0a2265592d6b1845646bd4582baa07c45358a243ce0ecc6d7bcf77888f8f295b4e37cc","first_seen":"2025-10-30T05:46:44.018478Z","last_seen":"2026-04-03T19:15:10.082538Z","times_seen":7136,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-23","alert":"Sinkholed","trigger":"iw63v.crqeraf.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"iw63v.crqeraf.xyz/static/pc/js/DPlayer.min.js?v=20221103","fqdn":"iw63v.crqeraf.xyz","domain":"crqeraf.xyz","tld":"xyz"},"ip":{"addr":"154.207.127.39","port":443,"asn":0,"as":"","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://iw63v.crqeraf.xyz/archives/65129/","date":"2025-12-23T14:29:55.953Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"crqeraf.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 12 Dec 2025 08:17:25 GMT","end":"Thu, 12 Mar 2026 09:15:12 GMT"},"fingerprint":{"sha1":"9A:B6:D6:FC:9F:B5:E4:7C:4E:60:81:74:C5:1D:1F:16:43:65:9B:C0","sha256":"6B:D5:92:C2:2E:E8:B1:3D:EE:9E:2C:51:0B:D3:32:29:71:17:1E:3D:93:07:59:A9:C9:59:7C:A8:D8:9B:2B:8C"}}},"request":{"raw":"GET /static/pc/js/DPlayer.min.js?v=20221103 HTTP/1.1\r\nHost: iw63v.crqeraf.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://iw63v.crqeraf.xyz/archives/65129/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 23 Dec 2025 14:29:55 GMT\r\ncontent-type: application/javascript\r\npriority: u=2,i=?0\r\nserver: cloudflare\r\nlast-modified: Mon, 03 Nov 2025 04:29:27 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69082fa7-4a650\"\r\nexpires: Mon, 29 Dec 2025 07:49:06 GMT\r\ncache-control: public, max-age=604800, immutable\r\ncontent-encoding: gzip\r\nage: 110449\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wnUuRlxCzRVvJ2vPtooA4Y%2BhpROXcw11BNORDFRrpI6AzuUrVzLMkbxsQTRs3n73BD7Ar4Ttknw9YvaY8C1FzKFpfrzx4uq%2BIY1nAj7gUg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b288dd03af956b4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":304720,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"4046f013cf323ea4de2e2518386c3d5a","sha1":"cc1bb7b97ba97a03c92593de7524a22ea87c78b0","sha256":"5c9811be07c774e5465097e43c4945941c501333fe482a90f5286cfb3c88e280","sha512":"b50531b05b763c25361b5fa23e258acf12f1c470bdcf0fd60d1a22451f1f954f55761446344067075cf4bc794177c83dbb9eec21565c2ffcde52bff93acbbae6","ssdeep":"1536:PFri4r9aKySaa3rzg7hSwaKySaa3ref7j3MEwOMEa8vTDadMcBjOsCSwixK1LzV+:HNDyMgjKbixKVhjLIR2INivkJ","tlshash":"4a54b20b364131340262afe8c6db534a36347310e9729729f65ef9de8f9d84c6427b7a","first_seen":"2025-11-01T05:08:56.775869Z","last_seen":"2026-04-03T18:40:13.057748Z","times_seen":22657,"resource_available":true,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-23","alert":"Sinkholed","trigger":"iw63v.crqeraf.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pic.wdsrie.cn/upload_01/upload/20250524/2025052415245074504.png","fqdn":"pic.wdsrie.cn","domain":"wdsrie.cn","tld":"cn"},"ip":{"addr":"43.152.140.79","port":443,"asn":139341,"as":"ACE","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://iw63v.crqeraf.xyz/archives/65129/","date":"2025-12-23T14:29:56.999Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.wdsrie.cn","organization":""},"issuer":{"commonName":"ZeroSSL ECC Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Sat, 20 Dec 2025 00:00:00 GMT","end":"Fri, 20 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E9:73:86:E2:44:76:13:6D:6B:AE:EE:E0:BA:B0:C0:68:B0:97:37:B8","sha256":"B9:DF:B5:64:69:80:D3:48:0B:F1:C2:39:96:52:89:9A:DE:23:24:F8:50:8B:E3:B3:38:A6:99:51:B3:9A:55:5E"}}},"request":{"raw":"GET /upload_01/upload/20250524/2025052415245074504.png HTTP/1.1\r\nHost: pic.wdsrie.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://iw63v.crqeraf.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Sat, 24 May 2025 07:24:55 GMT\r\nEtag: \"79bbba30284f6e18808bc0f7557d5fad\"\r\nContent-Type: binary/octet-stream\r\nDate: Sat, 26 Jul 2025 01:30:22 GMT\r\nx-amz-server-side-encryption: AES256\r\nServer: nginx\r\nX-Cache: Hit from cloudfront\r\nX-Amz-Cf-Pop: ARN53-P2\r\nAge: 35684\r\nContent-Length: 704\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 10808555970840320425\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\nAccess-Control-Allow-Origin: *\r\nCache-Control: max-age=864000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":704,"size_decoded":0,"mime_type":"binary/octet-stream","magic":"data","md5":"79bbba30284f6e18808bc0f7557d5fad","sha1":"721adf3dfbbc08523ff39c84663a9296a5dc7397","sha256":"2a6c9c44fe0570f3aa48afbfa708627aec60da0729c65e39f9b510d7964d4c85","sha512":"8aa136d07f4e8b4deba19f20eabcc93df993556e8c24685c4815e90f7e13b18ca15f547b8c8a3c42e3f98d7ec9ad244eb0e002adcc0989c29c2aaf42dce9582d","ssdeep":"","tlshash":"be01940201493142212ee80f29ae106e23643c6381eadaa43a1c46a2bc3621c21d0a66","first_seen":"2025-05-22T04:20:49.716499Z","last_seen":"2026-04-03T18:43:45.366441Z","times_seen":7737,"resource_available":false,"data":null}},"time_used":115,"timings":{"blocked":106,"dns":0,"connect":0,"send":0,"wait":8,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"iw63v.crqeraf.xyz/static/pc/img/avatar.png","fqdn":"iw63v.crqeraf.xyz","domain":"crqeraf.xyz","tld":"xyz"},"ip":{"addr":"154.207.127.39","port":443,"asn":0,"as":"","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://iw63v.crqeraf.xyz/archives/65129/","date":"2025-12-23T14:29:58.045Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"crqeraf.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 12 Dec 2025 08:17:25 GMT","end":"Thu, 12 Mar 2026 09:15:12 GMT"},"fingerprint":{"sha1":"9A:B6:D6:FC:9F:B5:E4:7C:4E:60:81:74:C5:1D:1F:16:43:65:9B:C0","sha256":"6B:D5:92:C2:2E:E8:B1:3D:EE:9E:2C:51:0B:D3:32:29:71:17:1E:3D:93:07:59:A9:C9:59:7C:A8:D8:9B:2B:8C"}}},"request":{"raw":"GET /static/pc/img/avatar.png HTTP/1.1\r\nHost: iw63v.crqeraf.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://iw63v.crqeraf.xyz/archives/65129/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _ga_SY99S66RFE=GS2.1.s1766500197$o1$g0$t1766500197$j60$l0$h0; _ga=GA1.1.1028203053.1766500197; _ga_D19N9LPLRP=GS2.1.s1766500197$o1$g0$t1766500197$j60$l0$h0\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 23 Dec 2025 14:29:57 GMT\r\ncontent-type: image/png\r\ncontent-length: 3292\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\nlast-modified: Sat, 13 Sep 2025 03:47:28 GMT\r\netag: \"68c4e950-cdc\"\r\nexpires: Fri, 26 Dec 2025 11:49:35 GMT\r\ncache-control: public, max-age=604800, immutable\r\naccept-ranges: bytes\r\nage: 355222\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZVsMa%2BiY%2F84L4CZSn%2FmaCU%2BQbJgF1wDgg8dB5anqmlmgAogSVWm6spbTyjcjCjuYws%2FnRVAKVE7TOFQJO38vihPsL%2BdTrwTy%2B%2BG0UZKBqg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b288ddd5e7356b4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3292,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced","md5":"749a3f433953f529017d77c180f96ba7","sha1":"4613affa871d63b3c35c4424f4c2434354cd6728","sha256":"6cc0a49a047893a7b0498add48c16b2d809c761bda91d539d1d35b05792722d3","sha512":"46348c7a21dd33659905494e0e3d8d5f2805f7467b045233c4a86d7cb8883a73b5dc88f1495d55b9307dcf85a571952860548db4879c3471d8d33e7760b7385e","ssdeep":"","tlshash":"de613c81079e29394409623190535b54d2754cbe17f3540b2bf3843f5e2f2d8b79ba96","first_seen":"2024-07-18T20:59:43Z","last_seen":"2026-04-03T18:51:08.050478Z","times_seen":6617,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-23","alert":"Sinkholed","trigger":"iw63v.crqeraf.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"iw63v.crqeraf.xyz/danmaku/v3/65129/1.json","fqdn":"iw63v.crqeraf.xyz","domain":"crqeraf.xyz","tld":"xyz"},"ip":{"addr":"154.207.127.39","port":443,"asn":0,"as":"","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://iw63v.crqeraf.xyz/archives/65129/","date":"2025-12-23T14:30:02.630Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"crqeraf.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 12 Dec 2025 08:17:25 GMT","end":"Thu, 12 Mar 2026 09:15:12 GMT"},"fingerprint":{"sha1":"9A:B6:D6:FC:9F:B5:E4:7C:4E:60:81:74:C5:1D:1F:16:43:65:9B:C0","sha256":"6B:D5:92:C2:2E:E8:B1:3D:EE:9E:2C:51:0B:D3:32:29:71:17:1E:3D:93:07:59:A9:C9:59:7C:A8:D8:9B:2B:8C"}}},"request":{"raw":"GET /danmaku/v3/65129/1.json HTTP/1.1\r\nHost: iw63v.crqeraf.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://iw63v.crqeraf.xyz/archives/65129/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _ga_SY99S66RFE=GS2.1.s1766500197$o1$g0$t1766500197$j60$l0$h0; _ga=GA1.1.1028203053.1766500197; _ga_D19N9LPLRP=GS2.1.s1766500197$o1$g0$t1766500197$j60$l0$h0\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 23 Dec 2025 14:30:02 GMT\r\ncontent-type: text/html; charset=utf-8\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\np3p: CP=\"CAO PSA OUR\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, PUT,DELETE,OPTIONS,PATCH\r\naccess-control-allow-headers: content-type,token\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lqzN%2Fay7sKqFWghVBzWwOfFqgB%2BGDpE88ZMs1d8QVCJay0KTL%2BQViuWluIpkBvsVamWFohaJW%2BwP6PPAWlPQX%2ByHO0%2FWWXOeyIlHejIT5g%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9b288dfa6f0856b4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":203,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"JSON text data","md5":"cc1675c1e64861ea5f1ab4b4ec5e6de7","sha1":"2b46044fd1634196e81b40ab0ad03e6515edd6d0","sha256":"9b38838184bb54d48f86145f22b9bd3cdb65414b92882b409972754b7459d0ed","sha512":"5104a606f7a0860fbfa49e6a6705e8c098669ac5429b1b103476680f3c94bd181dfc6fd55a022051e27f9ea60f16ab34542777ed419b218de559d5f7f748086f","ssdeep":"","tlshash":"e4d0223863980c0ae06700ced42e78cc02187e83c3fa12e9e8aa0e07032a188114932b","first_seen":"2025-12-23T14:30:42.466151Z","last_seen":"2025-12-23T14:30:42.466151Z","times_seen":1,"resource_available":false,"data":null}},"time_used":227,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":225,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-23","alert":"Sinkholed","trigger":"iw63v.crqeraf.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"iw63v.crqeraf.xyz/static/pc/css/4c2122d.css?v=20251130","fqdn":"iw63v.crqeraf.xyz","domain":"crqeraf.xyz","tld":"xyz"},"ip":{"addr":"154.207.127.39","port":443,"asn":0,"as":"","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://iw63v.crqeraf.xyz/archives/65129/","date":"2025-12-23T14:29:55.884Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"crqeraf.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 12 Dec 2025 08:17:25 GMT","end":"Thu, 12 Mar 2026 09:15:12 GMT"},"fingerprint":{"sha1":"9A:B6:D6:FC:9F:B5:E4:7C:4E:60:81:74:C5:1D:1F:16:43:65:9B:C0","sha256":"6B:D5:92:C2:2E:E8:B1:3D:EE:9E:2C:51:0B:D3:32:29:71:17:1E:3D:93:07:59:A9:C9:59:7C:A8:D8:9B:2B:8C"}}},"request":{"raw":"GET /static/pc/css/4c2122d.css?v=20251130 HTTP/1.1\r\nHost: iw63v.crqeraf.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://iw63v.crqeraf.xyz/archives/65129/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 23 Dec 2025 14:29:55 GMT\r\ncontent-type: text/css\r\npriority: u=2,i=?0\r\nserver: cloudflare\r\nlast-modified: Thu, 20 Nov 2025 11:34:18 GMT\r\nvary: Accept-Encoding\r\netag: W/\"691efcba-510f\"\r\nexpires: Tue, 30 Dec 2025 07:16:51 GMT\r\ncache-control: public, max-age=604800, immutable\r\ncontent-encoding: gzip\r\nage: 25983\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=35QCVocIHU7syx2MyUC8bLKmODGBNvnu6QLO92vcz9M5DkC8au9enH4FrjOq%2Fl%2FhVQzPE8F1jk3e8069T5qLnxeNUba0MYk1wc22tz60ag%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b288dcfda9d56b4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":20751,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (334)","md5":"02f2af792f7b793b88ecd93ea4efacbd","sha1":"3a6a1421219d1ad3c920cd55e4cef724feb10fff","sha256":"edf748d27261d81f5f8333751920356388ca8ef3e54ef29a9c3d116efed16a69","sha512":"47197770fa23ed59e012e5df15e801b1f55dbfc4dd010b350ef24d1a4fa2ade2ead1cb3170327ef4b105209b47bb321f26f3e15896ac1983c86b0da9c7232209","ssdeep":"192:dQRGd2vt4MillLHNLglFx3Z1YFvJsXG2B5+Ena8g0zng047iwcPaeF5pBVlnNBxi:dh0l95J+k+jeF74FpgpUFtytE8bUdgqP","tlshash":"4f92336579bb2e05b4abc0682bbe17c4331861474e1bcd2d7f9635848f8b544b1a6fcc","first_seen":"2025-11-21T00:42:42.052018Z","last_seen":"2026-04-03T18:41:28.504819Z","times_seen":7013,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-23","alert":"Sinkholed","trigger":"iw63v.crqeraf.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"static.addtoany.com/menu/page.js","fqdn":"static.addtoany.com","domain":"addtoany.com","tld":"com"},"ip":{"addr":"172.66.171.172","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://iw63v.crqeraf.xyz/archives/65129/","date":"2025-12-23T14:29:56.053Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"static.addtoany.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Dec 2025 13:28:50 GMT","end":"Sun, 22 Mar 2026 14:28:48 GMT"},"fingerprint":{"sha1":"83:E4:54:72:9E:E9:BE:F0:31:A0:E0:3B:5B:38:1D:25:57:6A:CE:67","sha256":"C2:A2:4F:7E:8C:0F:A8:AA:86:24:03:7D:6B:67:31:2E:38:54:D6:C4:27:59:FE:B4:3D:28:7C:D5:DC:F6:F1:1E"}}},"request":{"raw":"GET /menu/page.js HTTP/1.1\r\nHost: static.addtoany.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 23 Dec 2025 14:29:55 GMT\r\ncontent-type: application/javascript\r\naccess-control-allow-origin: *\r\ncache-control: max-age=86400, stale-while-revalidate=30, public\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qqmq3aQNkUFwmOXW2%2FU9%2FNEX3XxaqmChiVlTa%2B9%2BoTR1yGVXYldvvu24IQatc7yiX973dV4O%2BlIMaULz6oBoOwezqIaRafgKdsLKO1P43pcR\"}]}\r\netag: W/\"dd9c934d8cf51a92e622ab2f377d1ee1\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nage: 6118\r\ncf-cache-status: HIT\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: 9b288dd0ef46b4ee-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3179,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (3179), with no line terminators","md5":"e9a3b98e2acbdadac054fdc26332edf6","sha1":"e79c2933e456e2bc1031ad2bb59c006a8b602090","sha256":"fcb4248858836c831fd9ab8fa4c5a8fe0b8cd038c804fa6cc44a5e9004e163b6","sha512":"d6c64f6804ad98d601ea30808b63008698e9c199892da2b587e61fabb4a35de8badff61b02534234d8ca1ad09945849433a19dca3cdb5215d672ebfc1782c564","ssdeep":"","tlshash":"4861b74f774ea8734a5736bac19fb60f2223731e5c6588048914e4d449bcec6501fa7e","first_seen":"2025-10-23T06:03:39.971585Z","last_seen":"2026-04-02T08:50:54.045828Z","times_seen":16683,"resource_available":true,"data":null}},"time_used":55,"timings":{"blocked":-1,"dns":7,"connect":1,"send":0,"wait":5,"receive":0,"ssl":39},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"iw63v.crqeraf.xyz/static/pc/img/fx.png","fqdn":"iw63v.crqeraf.xyz","domain":"crqeraf.xyz","tld":"xyz"},"ip":{"addr":"154.207.127.39","port":443,"asn":0,"as":"","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://iw63v.crqeraf.xyz/archives/65129/","date":"2025-12-23T14:29:56.505Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"crqeraf.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 12 Dec 2025 08:17:25 GMT","end":"Thu, 12 Mar 2026 09:15:12 GMT"},"fingerprint":{"sha1":"9A:B6:D6:FC:9F:B5:E4:7C:4E:60:81:74:C5:1D:1F:16:43:65:9B:C0","sha256":"6B:D5:92:C2:2E:E8:B1:3D:EE:9E:2C:51:0B:D3:32:29:71:17:1E:3D:93:07:59:A9:C9:59:7C:A8:D8:9B:2B:8C"}}},"request":{"raw":"GET /static/pc/img/fx.png HTTP/1.1\r\nHost: iw63v.crqeraf.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://iw63v.crqeraf.xyz/archives/65129/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 23 Dec 2025 14:29:56 GMT\r\ncontent-type: image/png\r\ncontent-length: 593\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\nlast-modified: Sat, 13 Sep 2025 03:47:28 GMT\r\netag: \"68c4e950-251\"\r\nexpires: Mon, 29 Dec 2025 07:49:08 GMT\r\ncache-control: public, max-age=604800, immutable\r\naccept-ranges: bytes\r\nage: 110448\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mzWZC%2Fm0hsTOFQptG12oKhamEUjPRMxbppBF13jVQoMok7Gcy3EZMxIGr6XhrXe2S8Ve0P6Nfeyulxx5SDL7rZX1xIQih9cFAUywEUqKNA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b288dd42e9e56b4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":593,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced","md5":"02afba2472a16281cfa9c68d59f45b0a","sha1":"1333e80cc96203b1bd6477e6bbcab106bc7b2dcb","sha256":"bfbd740938033d9e7d5db43003254d5f58f42d00108ef3e203655d0c6db5d8db","sha512":"25b72868d63f39bd31534a03c2ab8642fa8bda44a07b8c8baadfc06eb660b48e13465d3914f55aa55644abaf85a2df35d4cbaa0b9e22706b5289e23ac1dacacf","ssdeep":"","tlshash":"03f047dfd50c4d87db98763ec73da575974a5f510710b4c1876083541fd01a1146bab2","first_seen":"2023-10-15T11:56:15Z","last_seen":"2026-04-03T18:43:45.445817Z","times_seen":7255,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-23","alert":"Sinkholed","trigger":"iw63v.crqeraf.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mts.delipu.cc/videos5/403afd70c1d30e3a3715e9f87c3b069d/403afd70c1d30e3a3715e9f87c3b069d1.ts?auth_key=1766500203-46-0-72d886f20049a6ca12b2803b14656bf2","fqdn":"mts.delipu.cc","domain":"delipu.cc","tld":"cc"},"ip":{"addr":"101.33.21.239","port":443,"asn":139341,"as":"ACE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://iw63v.crqeraf.xyz/archives/65129/","date":"2025-12-23T14:30:05.320Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.delipu.cc","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 23 Dec 2025 04:27:53 GMT","end":"Mon, 23 Mar 2026 04:27:52 GMT"},"fingerprint":{"sha1":"B7:E4:49:5C:56:14:FE:A1:A7:00:9F:AE:7C:7B:20:42:52:92:C6:D2","sha256":"93:53:B7:A0:BD:28:6C:69:53:D7:7C:E7:23:F0:6C:EB:FA:F9:EC:90:B4:4E:76:8F:F9:8F:9B:FE:8A:BD:F2:32"}}},"request":{"raw":"GET /videos5/403afd70c1d30e3a3715e9f87c3b069d/403afd70c1d30e3a3715e9f87c3b069d1.ts?auth_key=1766500203-46-0-72d886f20049a6ca12b2803b14656bf2 HTTP/1.1\r\nHost: mts.delipu.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://iw63v.crqeraf.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Tue, 08 Apr 2025 09:06:47 GMT\r\nEtag: \"a41ef2e428651c818bb4639f1b7f98b6\"\r\nContent-Type: binary/octet-stream\r\nDate: Tue, 23 Dec 2025 09:27:20 GMT\r\nx-amz-server-side-encryption: AES256\r\nServer: nginx\r\nX-Cache: Miss from cloudfront\r\nX-Amz-Cf-Pop: LAX53-P4\r\nContent-Length: 1208096\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 12990147580295879974\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\nAccess-Control-Allow-Origin: *\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1208096,"size_decoded":0,"mime_type":"binary/octet-stream","magic":"data","md5":"40de110d34036432226fc6e44f1f9d1f","sha1":"77063b82bebef3e163a902c81ce95b3c1e80b217","sha256":"1ba22a3340d57ba8b827e8a22f40373cbb87b120c4f8c710bafc423a55523ca9","sha512":"61e50045e3d6b3abfe257ed9f03a6393888402893154b5b2e6d412eead0fcb96d28e755c968b852d1f000c1841b2ab9ca0a264ff1e6e403f4368dfe57d452a3b","ssdeep":"24576:vAQByVFQL5qawT9MQsdagCVBqsF89kr6y5+vx4uoJRrD9gtCH6w9li:vAQIq5qhT9MPCOs55k4ug3Rr9li","tlshash":"792533950733005676a0ba1de2239becef3577ada0b4fdd2736424a7362f75851a231c","first_seen":"2025-11-19T02:59:39.769263Z","last_seen":"2025-12-23T14:30:42.47185Z","times_seen":2,"resource_available":false,"data":null}},"time_used":354,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":172,"receive":182,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pic.wdsrie.cn/upload_01/upload/20250828/2025082822515814521.jpeg","fqdn":"pic.wdsrie.cn","domain":"wdsrie.cn","tld":"cn"},"ip":{"addr":"43.152.140.79","port":443,"asn":139341,"as":"ACE","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://iw63v.crqeraf.xyz/archives/65129/","date":"2025-12-23T14:29:57.316Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.wdsrie.cn","organization":""},"issuer":{"commonName":"ZeroSSL ECC Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Sat, 20 Dec 2025 00:00:00 GMT","end":"Fri, 20 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E9:73:86:E2:44:76:13:6D:6B:AE:EE:E0:BA:B0:C0:68:B0:97:37:B8","sha256":"B9:DF:B5:64:69:80:D3:48:0B:F1:C2:39:96:52:89:9A:DE:23:24:F8:50:8B:E3:B3:38:A6:99:51:B3:9A:55:5E"}}},"request":{"raw":"GET /upload_01/upload/20250828/2025082822515814521.jpeg HTTP/1.1\r\nHost: pic.wdsrie.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://iw63v.crqeraf.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Thu, 28 Aug 2025 14:58:45 GMT\r\nEtag: \"843d83682c0a62a293149cfeb894e367\"\r\nContent-Type: binary/octet-stream\r\nDate: Fri, 10 Oct 2025 01:25:52 GMT\r\nx-amz-server-side-encryption: AES256\r\nServer: nginx\r\nX-Cache: Hit from cloudfront\r\nX-Amz-Cf-Pop: ARN53-P2\r\nAge: 3903\r\nContent-Length: 28992\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 6608446898798542681\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\nAccess-Control-Allow-Origin: *\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":28992,"size_decoded":0,"mime_type":"binary/octet-stream","magic":"data","md5":"843d83682c0a62a293149cfeb894e367","sha1":"a1c678f9d78e8cbf58c922b35b3c85ac0325b209","sha256":"9fba071f0eaa4ee703bc6291c9850285118b5ad32fd922201024a013cfae8943","sha512":"8d5f32d492a48f00f0f5b6e9e91c3486a7dffcbdeb5128b641fd480908854f3c264af2f073d3d543537321492041e9e62f7b4faa1bcc542557c2cb258d25147d","ssdeep":"768:GC7MlqUaDKSOfVgePuTiTQTvwFp4dXE4ClZZkOS3eq:tA4UZJfV9uTiTQbE4ddMgZ","tlshash":"eed2f139a038aa4ab9a8bb13424e561740eeb970b442db747d0fcc45017ab777773e5c","first_seen":"2025-08-29T10:40:28.950421Z","last_seen":"2026-03-31T15:58:10.161949Z","times_seen":3959,"resource_available":false,"data":null}},"time_used":1149,"timings":{"blocked":1126,"dns":0,"connect":0,"send":0,"wait":21,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mts.delipu.cc/videos5/403afd70c1d30e3a3715e9f87c3b069d/crypt.key?auth_key=1766500203-46-0-5652ac4bb5051b8d57100af9dc2f1ada","fqdn":"mts.delipu.cc","domain":"delipu.cc","tld":"cc"},"ip":{"addr":"101.33.21.239","port":443,"asn":139341,"as":"ACE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://iw63v.crqeraf.xyz/archives/65129/","date":"2025-12-23T14:30:03.773Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.delipu.cc","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 23 Dec 2025 04:27:53 GMT","end":"Mon, 23 Mar 2026 04:27:52 GMT"},"fingerprint":{"sha1":"B7:E4:49:5C:56:14:FE:A1:A7:00:9F:AE:7C:7B:20:42:52:92:C6:D2","sha256":"93:53:B7:A0:BD:28:6C:69:53:D7:7C:E7:23:F0:6C:EB:FA:F9:EC:90:B4:4E:76:8F:F9:8F:9B:FE:8A:BD:F2:32"}}},"request":{"raw":"GET /videos5/403afd70c1d30e3a3715e9f87c3b069d/crypt.key?auth_key=1766500203-46-0-5652ac4bb5051b8d57100af9dc2f1ada HTTP/1.1\r\nHost: mts.delipu.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://iw63v.crqeraf.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Tue, 08 Apr 2025 09:06:51 GMT\r\nEtag: \"cc0d0d395b4752a86d07c33b68a9a79a\"\r\nContent-Type: binary/octet-stream\r\nDate: Tue, 23 Dec 2025 09:27:18 GMT\r\nx-amz-server-side-encryption: AES256\r\nServer: nginx\r\nX-Cache: Miss from cloudfront\r\nX-Amz-Cf-Pop: LAX53-P4\r\nContent-Length: 16\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 4524310701095421781\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\nAccess-Control-Allow-Origin: *\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":16,"size_decoded":0,"mime_type":"binary/octet-stream","magic":"data","md5":"cc0d0d395b4752a86d07c33b68a9a79a","sha1":"f4b300066cd62824737fb82ec5a49ba39e612a5d","sha256":"d5ffe8d653a102ff2c541916663b5c5cecb2edac650c5f80b53d45e5b570b9d7","sha512":"0b19ec263a53cbeaebdaeb71e51fe88a96e880ac1217d645f3c06c052395eb81223f92b737923a85ef6dcd2dcf6b6a8a2a4084b31b293773c500a2c3cceca008","ssdeep":"","tlshash":"ba6000003000030f0000c00c030c0003000c030f000f30000cfcccc03c000003c003c0","first_seen":"2025-11-19T02:59:39.683589Z","last_seen":"2025-12-23T14:30:42.474554Z","times_seen":2,"resource_available":false,"data":null}},"time_used":780,"timings":{"blocked":312,"dns":1,"connect":149,"send":0,"wait":155,"receive":1,"ssl":159},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pic.wdsrie.cn/upload_01/upload/20250828/2025082822532358711.jpeg","fqdn":"pic.wdsrie.cn","domain":"wdsrie.cn","tld":"cn"},"ip":{"addr":"43.152.140.79","port":443,"asn":139341,"as":"ACE","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://iw63v.crqeraf.xyz/archives/65129/","date":"2025-12-23T14:29:57.337Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.wdsrie.cn","organization":""},"issuer":{"commonName":"ZeroSSL ECC Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Sat, 20 Dec 2025 00:00:00 GMT","end":"Fri, 20 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E9:73:86:E2:44:76:13:6D:6B:AE:EE:E0:BA:B0:C0:68:B0:97:37:B8","sha256":"B9:DF:B5:64:69:80:D3:48:0B:F1:C2:39:96:52:89:9A:DE:23:24:F8:50:8B:E3:B3:38:A6:99:51:B3:9A:55:5E"}}},"request":{"raw":"GET /upload_01/upload/20250828/2025082822532358711.jpeg HTTP/1.1\r\nHost: pic.wdsrie.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://iw63v.crqeraf.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Thu, 28 Aug 2025 14:58:46 GMT\r\nEtag: \"a54e0fa6cd00b165432a1f66ac9f84d0\"\r\nContent-Type: binary/octet-stream\r\nDate: Thu, 28 Aug 2025 14:58:46 GMT\r\nx-amz-server-side-encryption: AES256\r\nServer: nginx\r\nX-Cache: Hit from cloudfront\r\nX-Amz-Cf-Pop: ARN53-P2\r\nAge: 62\r\nContent-Length: 12000\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 1221572665217714690\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\nAccess-Control-Allow-Origin: *\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":12000,"size_decoded":0,"mime_type":"binary/octet-stream","magic":"data","md5":"a54e0fa6cd00b165432a1f66ac9f84d0","sha1":"3960dca472d31b5b36e85d3cad407ae8e82b18a8","sha256":"9def24bcd95889ee2b9cc7d9f6de5a0912b55ac6ec72b0ebfc8b20119bb86cd0","sha512":"abd6ef25e073ec90a290f51a4af83bfcba549bb0d026c1ac9eb9c962391a6956906edb12d06fcf3717ae1ffc94fe4039778c1c9c5a207d68797ad1af4f88c422","ssdeep":"192:tYk2iTjZ0SQYByLpqiw3At8ylMVtlrBpha764Nxu+OCB7zPV+M7QkZmNuNwaR1zZ:tYkbjTBkvw3nylklFFiu/IPVr7QkZmwt","tlshash":"1c42cf8256b1033ea4ffcbaa2ab503581df4d5d855e37681a42ccc768b34ca64c6c4ae","first_seen":"2025-08-29T10:40:29.100179Z","last_seen":"2026-01-19T03:45:18.385559Z","times_seen":3204,"resource_available":false,"data":null}},"time_used":1133,"timings":{"blocked":1124,"dns":0,"connect":0,"send":0,"wait":8,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pic.wdsrie.cn/upload_01/xiao/20251219/2025121922425391478.png","fqdn":"pic.wdsrie.cn","domain":"wdsrie.cn","tld":"cn"},"ip":{"addr":"43.152.140.79","port":443,"asn":139341,"as":"ACE","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://iw63v.crqeraf.xyz/archives/65129/","date":"2025-12-23T14:29:57.782Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.wdsrie.cn","organization":""},"issuer":{"commonName":"ZeroSSL ECC Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Sat, 20 Dec 2025 00:00:00 GMT","end":"Fri, 20 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E9:73:86:E2:44:76:13:6D:6B:AE:EE:E0:BA:B0:C0:68:B0:97:37:B8","sha256":"B9:DF:B5:64:69:80:D3:48:0B:F1:C2:39:96:52:89:9A:DE:23:24:F8:50:8B:E3:B3:38:A6:99:51:B3:9A:55:5E"}}},"request":{"raw":"GET /upload_01/xiao/20251219/2025121922425391478.png HTTP/1.1\r\nHost: pic.wdsrie.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://iw63v.crqeraf.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Fri, 19 Dec 2025 14:43:03 GMT\r\nEtag: \"0ae19de6944c04428ad54b9cba3e5754\"\r\nContent-Type: binary/octet-stream\r\nDate: Fri, 19 Dec 2025 15:03:22 GMT\r\nx-amz-server-side-encryption: AES256\r\nServer: nginx\r\nX-Cache: Hit from cloudfront\r\nX-Amz-Cf-Pop: ARN53-P2\r\nAge: 1505\r\nContent-Length: 270304\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 9964827275710475484\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\nAccess-Control-Allow-Origin: *\r\nCache-Control: max-age=864000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":270304,"size_decoded":0,"mime_type":"binary/octet-stream","magic":"data","md5":"0ae19de6944c04428ad54b9cba3e5754","sha1":"0a603bfa71448e3ca46f618921ab14aab347f0d4","sha256":"05f2aa490e676284b608a4c20ebc27f16f08f53d4e14bd0674e4ad4d472fe327","sha512":"57d66f25a8138c13abdb83004a233cee1d4e387ae2ca88fc431853224ddb3254e24e4bc0b1d19d977caaab1dd91bddb48ed1f8c2556dd0b6e1ae8323bd46c7e9","ssdeep":"6144:4zkZECOr3Hkzgnu09tpI89ffD9zedW4HMa/171YDS+rUtnNZdibE:8CGHA09tJpzec4HMaV1YDS+Qldio","tlshash":"f14423842d5cad84a87c63b95a9de7f03a77bd4f187da0c8c843b7c3926419d8b7096c","first_seen":"2025-12-23T10:21:49.01586Z","last_seen":"2025-12-27T02:42:04.633261Z","times_seen":3,"resource_available":false,"data":null}},"time_used":949,"timings":{"blocked":917,"dns":0,"connect":0,"send":0,"wait":10,"receive":22,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"iw63v.crqeraf.xyz/static/web/style/swiper-bundle.min.css?v=20251130","fqdn":"iw63v.crqeraf.xyz","domain":"crqeraf.xyz","tld":"xyz"},"ip":{"addr":"154.207.127.39","port":443,"asn":0,"as":"","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://iw63v.crqeraf.xyz/archives/65129/","date":"2025-12-23T14:29:55.950Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"crqeraf.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 12 Dec 2025 08:17:25 GMT","end":"Thu, 12 Mar 2026 09:15:12 GMT"},"fingerprint":{"sha1":"9A:B6:D6:FC:9F:B5:E4:7C:4E:60:81:74:C5:1D:1F:16:43:65:9B:C0","sha256":"6B:D5:92:C2:2E:E8:B1:3D:EE:9E:2C:51:0B:D3:32:29:71:17:1E:3D:93:07:59:A9:C9:59:7C:A8:D8:9B:2B:8C"}}},"request":{"raw":"GET /static/web/style/swiper-bundle.min.css?v=20251130 HTTP/1.1\r\nHost: iw63v.crqeraf.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://iw63v.crqeraf.xyz/archives/65129/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 23 Dec 2025 14:29:55 GMT\r\ncontent-type: text/css\r\npriority: u=2,i=?0\r\nserver: cloudflare\r\nlast-modified: Sat, 13 Sep 2025 03:47:40 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68c4e95c-3e36\"\r\nexpires: Tue, 30 Dec 2025 07:16:52 GMT\r\ncache-control: public, max-age=604800, immutable\r\ncontent-encoding: gzip\r\nage: 25983\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2B6m19sFRsUYCDjKtJjuxYv7wYyLPtnk2koKEH%2Fnyq8XqILMm%2BAX88a26qnEvGPub3rWtliJk8BLdscKL%2BvQq5fuE6eQqtuHcKLWi7scwQA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b288dd03af656b4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15926,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (15672)","md5":"c6e496739a75eeaa046ebc3e4dde4f15","sha1":"ad5ada588c5d760d9867d52158befd28ebfc6b7c","sha256":"6bf8c1a5bb073a51e3e127ad0660c56e81220a22b0096a3bfd591d1add47597b","sha512":"334537ab482dcc182931ffbe86a1ef68b5b214fb9b5ed115ce4fce3b650413b46dbe8ef00cb87c0a5ae9588a1481f19e6c7c50acf35799d7d83e5ac421953446","ssdeep":"192:obvmUJbiKneTT4bHZ+SKbP3p/a/AMQfHff21eesedOJ9A5Pz+c3At2/6:oKUbeTMbHZ+VA/AVfHfd4XYz","tlshash":"0562136813402c2753274f364b71cbb9ddb444924b93896e92c0ee84d7b68bd236f6e9","first_seen":"2023-04-18T17:43:02Z","last_seen":"2026-04-03T18:43:45.432433Z","times_seen":7627,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-23","alert":"Sinkholed","trigger":"iw63v.crqeraf.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"iw63v.crqeraf.xyz/static/common/imagejx.js?v=20251130","fqdn":"iw63v.crqeraf.xyz","domain":"crqeraf.xyz","tld":"xyz"},"ip":{"addr":"154.207.127.39","port":443,"asn":0,"as":"","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://iw63v.crqeraf.xyz/archives/65129/","date":"2025-12-23T14:29:56.083Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"crqeraf.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 12 Dec 2025 08:17:25 GMT","end":"Thu, 12 Mar 2026 09:15:12 GMT"},"fingerprint":{"sha1":"9A:B6:D6:FC:9F:B5:E4:7C:4E:60:81:74:C5:1D:1F:16:43:65:9B:C0","sha256":"6B:D5:92:C2:2E:E8:B1:3D:EE:9E:2C:51:0B:D3:32:29:71:17:1E:3D:93:07:59:A9:C9:59:7C:A8:D8:9B:2B:8C"}}},"request":{"raw":"GET /static/common/imagejx.js?v=20251130 HTTP/1.1\r\nHost: iw63v.crqeraf.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://iw63v.crqeraf.xyz/archives/65129/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 23 Dec 2025 14:29:55 GMT\r\ncontent-type: application/javascript\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\nlast-modified: Thu, 20 Nov 2025 11:34:21 GMT\r\nvary: Accept-Encoding\r\netag: W/\"691efcbd-10e19\"\r\nexpires: Tue, 30 Dec 2025 07:16:36 GMT\r\ncache-control: public, max-age=604800, immutable\r\ncontent-encoding: gzip\r\nage: 25998\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yrxJmECankYiSa5230pWvKvr0pXyhDTh6TTcBuwSxt1KpAKjuxPXMk1oH5uTxLtjaMKYR1qt8ChML3nabnnfkXqP2JUrf0aRlAXDjf5WEw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b288dd0ab6a56b4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":69145,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (58484)","md5":"36389ce5049ed388d8a4562973d80bb1","sha1":"980c432c0bae9ade2a5eed09bc3eea642222676d","sha256":"b8718ef8d850a14a3f4d249118ec2d3d8ccdb8d8371c0038c69918a238c84460","sha512":"179fe170c67b1bd560fbd3a99dbc9a37cf439e3aff6967a1b85bcfc000c377a210ee59537d5977f205f0c111f6b3c9e2928b5c72dfc3aea40ffccb3421f835c1","ssdeep":"768:MlZkVzjNoCWcBnKAt3drKg/OnpIYwAwrBLdhOax+47U144q19uFcipbJSu35/5Yn:AkVzjNNft3EMOJslHORxthiAM","tlshash":"2b6393c025a62152c3d3b061367fb203e06ef492c6cadc5a7244dfdd9e5cb5a9126f78","first_seen":"2024-12-27T20:31:25.937056Z","last_seen":"2026-04-03T18:41:28.474201Z","times_seen":7485,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-23","alert":"Sinkholed","trigger":"iw63v.crqeraf.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pic.wdsrie.cn/upload_01/upload/20250828/2025082822495776545.png","fqdn":"pic.wdsrie.cn","domain":"wdsrie.cn","tld":"cn"},"ip":{"addr":"43.152.140.79","port":443,"asn":139341,"as":"ACE","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://iw63v.crqeraf.xyz/archives/65129/","date":"2025-12-23T14:29:57.308Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.wdsrie.cn","organization":""},"issuer":{"commonName":"ZeroSSL ECC Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Sat, 20 Dec 2025 00:00:00 GMT","end":"Fri, 20 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E9:73:86:E2:44:76:13:6D:6B:AE:EE:E0:BA:B0:C0:68:B0:97:37:B8","sha256":"B9:DF:B5:64:69:80:D3:48:0B:F1:C2:39:96:52:89:9A:DE:23:24:F8:50:8B:E3:B3:38:A6:99:51:B3:9A:55:5E"}}},"request":{"raw":"GET /upload_01/upload/20250828/2025082822495776545.png HTTP/1.1\r\nHost: pic.wdsrie.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://iw63v.crqeraf.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Thu, 28 Aug 2025 14:58:44 GMT\r\nEtag: \"882e475326adcc861b67af82bb9470e3\"\r\nContent-Type: binary/octet-stream\r\nDate: Thu, 28 Aug 2025 14:58:44 GMT\r\nx-amz-server-side-encryption: AES256\r\nServer: nginx\r\nX-Cache: Hit from cloudfront\r\nX-Amz-Cf-Pop: ARN53-P2\r\nAge: 64\r\nContent-Length: 22448\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 9215062314975446738\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\nAccess-Control-Allow-Origin: *\r\nCache-Control: max-age=864000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":22448,"size_decoded":0,"mime_type":"binary/octet-stream","magic":"data","md5":"882e475326adcc861b67af82bb9470e3","sha1":"61c1194d1600a0ffee0b4d16ac01048759e08b8a","sha256":"57e3ff5816bc93418bb2126b78fcae6079bf3770bbbb7b3603225c9c680766c6","sha512":"b94b213e7196fdadc919a7a4f7f57be78c0a96af4fbd7edc29e8c382dd15e57e0379cedb6c51ae2e05816ee93f987b7995d844c45e48aa36692fa823b6388dfe","ssdeep":"384:Z2a/Nz4hXFn0FOPqnlqlYtRiiS5DpyGTs5wbPWISgI7JxyyhKKZUTXZQ3XVVGE:ZhV8H/ylViFVTAwDIdDaN0VL","tlshash":"60a2f1c634fb47d05a135b9809ea657e0507f3580896ba3e743c96064e4ebf163e88f7","first_seen":"2025-08-29T10:40:28.9727Z","last_seen":"2026-02-04T07:06:51.463919Z","times_seen":4028,"resource_available":false,"data":null}},"time_used":1073,"timings":{"blocked":1052,"dns":0,"connect":0,"send":0,"wait":20,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.addtoany.com/menu/svg/icons/wechat.js","fqdn":"static.addtoany.com","domain":"addtoany.com","tld":"com"},"ip":{"addr":"172.66.171.172","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://iw63v.crqeraf.xyz/archives/65129/","date":"2025-12-23T14:29:58.014Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"static.addtoany.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Dec 2025 13:28:50 GMT","end":"Sun, 22 Mar 2026 14:28:48 GMT"},"fingerprint":{"sha1":"83:E4:54:72:9E:E9:BE:F0:31:A0:E0:3B:5B:38:1D:25:57:6A:CE:67","sha256":"C2:A2:4F:7E:8C:0F:A8:AA:86:24:03:7D:6B:67:31:2E:38:54:D6:C4:27:59:FE:B4:3D:28:7C:D5:DC:F6:F1:1E"}}},"request":{"raw":"GET /menu/svg/icons/wechat.js HTTP/1.1\r\nHost: static.addtoany.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://iw63v.crqeraf.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncf-cache-status: REVALIDATED\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: application/javascript\r\npriority: u=3,i=?0\r\naccess-control-allow-origin: *\r\ncache-control: max-age=7776000, stale-while-revalidate=30, public\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6CyV4l0lpjQ18dlUIZIkxcIcmxEoBcRDUbigUbFZMkV%2BeZlbnza3Ajb5FdMN8ZMMM5Hhxb5ekjXl0S8350aJF4cy7zXnOm4oqYYjZuMenw%3D%3D\"}]}\r\netag: W/\"9c881a24f86ad7f3784640135b65b7a0\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ndate: Tue, 23 Dec 2025 14:29:57 GMT\r\ncf-ray: 9b288ddd2a0d569f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1193,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (1193), with no line terminators","md5":"b0e286d45d3573a78afc388522472eac","sha1":"0981eaedebb795e282ce807724037b8088adf405","sha256":"315a36857f81419cc32e1f7bf3caf201f1c28fb86e534d4084cea148cd3f4269","sha512":"d0072e5438a94100e68c3d556a5a213c047187bec9230d9fda9a14a49e6b0ce9725f9843f0662a314d18f4ea42cf79637a3440ed261e01e49023c6f03b6d117d","ssdeep":"","tlshash":"b02102c12a10678ca8c2a8aedf1e7048272960f97a7942a52d5ec364508b40de543825","first_seen":"2024-04-27T04:58:36Z","last_seen":"2026-04-03T18:42:08.313144Z","times_seen":8160,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-D19N9LPLRP","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.251.38.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://iw63v.crqeraf.xyz/archives/65129/","date":"2025-12-23T14:29:56.115Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:49:27 GMT","end":"Wed, 25 Feb 2026 15:49:26 GMT"},"fingerprint":{"sha1":"2C:B9:1B:62:2A:F9:04:B9:16:E2:30:B0:A8:B2:85:0C:68:BC:79:25","sha256":"AE:CB:A0:2C:92:1E:CB:D2:CB:6C:0D:37:5E:A2:4E:27:AE:4E:CA:0C:EC:53:D5:50:E6:C1:3D:EB:17:C1:F2:C9"}}},"request":{"raw":"GET /gtag/js?id=G-D19N9LPLRP HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Tue, 23 Dec 2025 14:29:56 GMT\r\nexpires: Tue, 23 Dec 2025 14:29:56 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 143774\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":435767,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (6031)","md5":"e939b0b14f77e637186221baf989f811","sha1":"b7a3b25760f1780fa6b774b1452ff7ebad2684a6","sha256":"3c6fdca7f995add335a0491c18989459a04931cf36831d183950ab61d17ca393","sha512":"dec0f62643ec709338f96e286b08aca3cae4cb1ad4d826d8281c67d8a299ac632ce9a10dadbbd1c8af211f0b54ca47dd7ba86ab068b471506ad96048310fa8fa","ssdeep":"6144:wzIe7ma2bulKY/1u99xHDmHYmyBFzvnsyRO6jJWoNPad4FpC1pY:TC8bu7/1mbrnsy39WbMpL","tlshash":"bd9419ce73c674269396e078503f118ba57b29e2b45dc896f189cce01e74a9a4237f7c","first_seen":"2025-12-23T08:10:49.402355Z","last_seen":"2025-12-24T06:49:32.049298Z","times_seen":42,"resource_available":true,"data":null}},"time_used":710,"timings":{"blocked":240,"dns":6,"connect":17,"send":0,"wait":28,"receive":25,"ssl":391},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pic.wdsrie.cn/upload_01/upload/20251202/2025120216142268634.gif","fqdn":"pic.wdsrie.cn","domain":"wdsrie.cn","tld":"cn"},"ip":{"addr":"43.152.140.79","port":443,"asn":139341,"as":"ACE","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://iw63v.crqeraf.xyz/archives/65129/","date":"2025-12-23T14:29:57.277Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.wdsrie.cn","organization":""},"issuer":{"commonName":"ZeroSSL ECC Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Sat, 20 Dec 2025 00:00:00 GMT","end":"Fri, 20 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E9:73:86:E2:44:76:13:6D:6B:AE:EE:E0:BA:B0:C0:68:B0:97:37:B8","sha256":"B9:DF:B5:64:69:80:D3:48:0B:F1:C2:39:96:52:89:9A:DE:23:24:F8:50:8B:E3:B3:38:A6:99:51:B3:9A:55:5E"}}},"request":{"raw":"GET /upload_01/upload/20251202/2025120216142268634.gif HTTP/1.1\r\nHost: pic.wdsrie.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://iw63v.crqeraf.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Tue, 02 Dec 2025 08:14:29 GMT\r\nEtag: \"05f1205d26220e2132075903949ce4b4\"\r\nContent-Type: binary/octet-stream\r\nDate: Tue, 02 Dec 2025 08:14:29 GMT\r\nx-amz-server-side-encryption: AES256\r\nServer: nginx\r\nX-Cache: Hit from cloudfront\r\nX-Amz-Cf-Pop: ARN53-P2\r\nAge: 14\r\nContent-Length: 232752\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 12986828871650962560\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\nAccess-Control-Allow-Origin: *\r\nCache-Control: max-age=864000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":232752,"size_decoded":0,"mime_type":"binary/octet-stream","magic":"data","md5":"05f1205d26220e2132075903949ce4b4","sha1":"83505275a1587c533c0a26855b42cf51a790a601","sha256":"36b042c9379f2791635bb43f12a7cc2180c9223b70c53c93cf3a49e8636dfda1","sha512":"13574e2cce20f25e48e1d57abdc5fa76b2b9619ceb0dcc20059ff025fd63c3024a12e6af19a7747898c0b6255de3f434c01d9a2e39095471d4a7817832b1f7e1","ssdeep":"3072:/0S5WR9pgyAWdMKxnuRTvGVZj/vQrfW7VgNl95XKu6hMY0mvtimsuLV0tNeotQYq:/084JuuBgb95/YjdoNeoSYU/N7","tlshash":"3b34238efca3db8abfe49f38ba1ee554c0446611dcb41dcd1570de98a6721f0cba8191","first_seen":"2025-12-02T08:41:52.044939Z","last_seen":"2026-04-03T18:42:08.424428Z","times_seen":5245,"resource_available":false,"data":null}},"time_used":905,"timings":{"blocked":888,"dns":0,"connect":0,"send":0,"wait":11,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pic.wdsrie.cn/upload_01/upload/20250828/2025082822520489347.jpeg","fqdn":"pic.wdsrie.cn","domain":"wdsrie.cn","tld":"cn"},"ip":{"addr":"43.152.140.79","port":443,"asn":139341,"as":"ACE","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://iw63v.crqeraf.xyz/archives/65129/","date":"2025-12-23T14:29:57.312Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.wdsrie.cn","organization":""},"issuer":{"commonName":"ZeroSSL ECC Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Sat, 20 Dec 2025 00:00:00 GMT","end":"Fri, 20 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E9:73:86:E2:44:76:13:6D:6B:AE:EE:E0:BA:B0:C0:68:B0:97:37:B8","sha256":"B9:DF:B5:64:69:80:D3:48:0B:F1:C2:39:96:52:89:9A:DE:23:24:F8:50:8B:E3:B3:38:A6:99:51:B3:9A:55:5E"}}},"request":{"raw":"GET /upload_01/upload/20250828/2025082822520489347.jpeg HTTP/1.1\r\nHost: pic.wdsrie.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://iw63v.crqeraf.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Thu, 28 Aug 2025 14:58:44 GMT\r\nEtag: \"1cb0db29c3bd135bfb121bfc2f352a60\"\r\nContent-Type: binary/octet-stream\r\nDate: Thu, 28 Aug 2025 14:58:44 GMT\r\nx-amz-server-side-encryption: AES256\r\nServer: nginx\r\nX-Cache: Hit from cloudfront\r\nX-Amz-Cf-Pop: ARN53-P2\r\nAge: 40\r\nContent-Length: 12224\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 5723132768444439389\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\nAccess-Control-Allow-Origin: *\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":12224,"size_decoded":0,"mime_type":"binary/octet-stream","magic":"data","md5":"1cb0db29c3bd135bfb121bfc2f352a60","sha1":"e0a824b61cc16a76e6298f6d8fe0db65807cc56c","sha256":"2494c5120664027e2e45c3cf5f7b69f68fbb9be3f9c752730bde161882da04fd","sha512":"1ce9d227a15259dbb925451eae45f3201059a12204289221e061e0e050becac7ec31c624919148dbe106d3d57706879b1a3caac786f29231489736bb069bfffe","ssdeep":"192:nFfcsE9BqP8Wm59xtg3haomPejYcn6entsukcF9ihOoj1T4o2E9GTUXvzj:F9iBwIyoomG3n6equN9kOojt4oNGTEv/","tlshash":"d042bfe71eb37d49676250cfbdb528670216c22e40da69acb40d22b713c5cd67793858","first_seen":"2025-04-14T20:37:59.172636Z","last_seen":"2026-02-28T11:30:56.490231Z","times_seen":4889,"resource_available":false,"data":null}},"time_used":1092,"timings":{"blocked":1083,"dns":0,"connect":0,"send":0,"wait":8,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"iw63v.crqeraf.xyz/archives/65129","fqdn":"iw63v.crqeraf.xyz","domain":"crqeraf.xyz","tld":"xyz"},"ip":{"addr":"154.207.127.39","port":443,"asn":0,"as":"","country":"Hong Kong","country_code":"HK"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-12-23T14:29:54.507Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"crqeraf.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 12 Dec 2025 08:17:25 GMT","end":"Thu, 12 Mar 2026 09:15:12 GMT"},"fingerprint":{"sha1":"9A:B6:D6:FC:9F:B5:E4:7C:4E:60:81:74:C5:1D:1F:16:43:65:9B:C0","sha256":"6B:D5:92:C2:2E:E8:B1:3D:EE:9E:2C:51:0B:D3:32:29:71:17:1E:3D:93:07:59:A9:C9:59:7C:A8:D8:9B:2B:8C"}}},"request":{"raw":"GET /archives/65129 HTTP/1.1\r\nHost: iw63v.crqeraf.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 Moved Permanently\r\ndate: Tue, 23 Dec 2025 14:29:54 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nlocation: /archives/65129/\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dcx3RzQF5ivz3f%2B5g%2FB6PuU9avXYvBdcnXPxhPBdYbTdiocpQn7OYsNnib56ACvQT74YG95gvC68oA%2BLOGIVzRj5g6yc19HPdmI5xBtrAQ%3D%3D\"}]}\r\ncf-ray: 9b288dc81fd8b51e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":270094,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-03T18:31:03.533086Z","times_seen":13299059,"resource_available":true,"data":null}},"time_used":517,"timings":{"blocked":65,"dns":42,"connect":1,"send":0,"wait":387,"receive":0,"ssl":18},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-23","alert":"Sinkholed","trigger":"iw63v.crqeraf.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"iw63v.crqeraf.xyz/static/pc/img/twwitterr.51d1491.png","fqdn":"iw63v.crqeraf.xyz","domain":"crqeraf.xyz","tld":"xyz"},"ip":{"addr":"154.207.127.39","port":443,"asn":0,"as":"","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://iw63v.crqeraf.xyz/archives/65129/","date":"2025-12-23T14:29:56.105Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"crqeraf.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 12 Dec 2025 08:17:25 GMT","end":"Thu, 12 Mar 2026 09:15:12 GMT"},"fingerprint":{"sha1":"9A:B6:D6:FC:9F:B5:E4:7C:4E:60:81:74:C5:1D:1F:16:43:65:9B:C0","sha256":"6B:D5:92:C2:2E:E8:B1:3D:EE:9E:2C:51:0B:D3:32:29:71:17:1E:3D:93:07:59:A9:C9:59:7C:A8:D8:9B:2B:8C"}}},"request":{"raw":"GET /static/pc/img/twwitterr.51d1491.png HTTP/1.1\r\nHost: iw63v.crqeraf.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://iw63v.crqeraf.xyz/archives/65129/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 23 Dec 2025 14:29:55 GMT\r\ncontent-type: image/png\r\ncontent-length: 1724\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\nlast-modified: Sat, 13 Sep 2025 03:47:28 GMT\r\netag: \"68c4e950-6bc\"\r\nexpires: Mon, 29 Dec 2025 07:49:08 GMT\r\ncache-control: public, max-age=604800, immutable\r\naccept-ranges: bytes\r\nage: 110447\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WA7OZiaC3oHUFlhxiVbuhCGXVHFeWD20qvclWm1QroMcuNlNQvB6wlb2VxOEO4%2BeHdSLAVNQxFF8L5hBJKSaOxuWk7u0bbQosCBMW42jug%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b288dd0ab6f56b4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1724,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 50 x 48, 8-bit/color RGBA, non-interlaced","md5":"6f89c0a11b46e1c45f7c9e7d48574000","sha1":"f52ca5e5af41d9f926390b4b2181321adf30c5c0","sha256":"c4227d218c3f4c4a67a592747781fd1ab41bc6e73de424393e243d86ad1c909b","sha512":"8f1601ac3b52ebadf335f6565318084c693c38961a4c10d774eaa9759c6edd966e79d8dca0de31d0ef6ff7d5d8009bc3294066c4fa347282278e027c9683b714","ssdeep":"","tlshash":"6731f84b6f4ca139ea6847f7482285d8ba34d3823277060bdfa1d1a09ddda39489132f","first_seen":"2023-09-24T18:31:27Z","last_seen":"2026-04-03T18:43:45.407206Z","times_seen":7865,"resource_available":false,"data":null}},"time_used":39,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":39,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-23","alert":"Sinkholed","trigger":"iw63v.crqeraf.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pic.wdsrie.cn/upload_01/upload/20250408/2025040815473220357.jpg","fqdn":"pic.wdsrie.cn","domain":"wdsrie.cn","tld":"cn"},"ip":{"addr":"43.152.140.79","port":443,"asn":139341,"as":"ACE","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://iw63v.crqeraf.xyz/archives/65129/","date":"2025-12-23T14:29:57.146Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.wdsrie.cn","organization":""},"issuer":{"commonName":"ZeroSSL ECC Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Sat, 20 Dec 2025 00:00:00 GMT","end":"Fri, 20 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E9:73:86:E2:44:76:13:6D:6B:AE:EE:E0:BA:B0:C0:68:B0:97:37:B8","sha256":"B9:DF:B5:64:69:80:D3:48:0B:F1:C2:39:96:52:89:9A:DE:23:24:F8:50:8B:E3:B3:38:A6:99:51:B3:9A:55:5E"}}},"request":{"raw":"GET /upload_01/upload/20250408/2025040815473220357.jpg HTTP/1.1\r\nHost: pic.wdsrie.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://iw63v.crqeraf.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Type: binary/octet-stream\r\nDate: Tue, 23 Dec 2025 14:29:58 GMT\r\nETag: \"ac0aeed948efdc01bd7cf6d4c44860e3\"\r\nx-amz-server-side-encryption: AES256\r\nServer: nginx\r\nX-Cache: Miss from cloudfront\r\nVia: 1.1 d5ffe4a44770755efd4aa2fc68579118.cloudfront.net (CloudFront)\r\nX-Amz-Cf-Pop: ARN53-P2\r\nLast-Modified: Tue, 08 Apr 2025 09:23:51 GMT\r\nContent-Length: 251536\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 8744352240917362436\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Miss\r\nAccess-Control-Allow-Origin: *\r\nCache-Control: max-age=864000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":251536,"size_decoded":0,"mime_type":"binary/octet-stream","magic":"data","md5":"ac0aeed948efdc01bd7cf6d4c44860e3","sha1":"8816c5117adda06eca52922bb4116d1758b5048d","sha256":"104138648e94130e88351a18baabe1fedfb589a5cfed09a5e10f472396abe0ef","sha512":"5bdc1431253d169a8342aee29bc0837295a3b24a4815f13cec28715dc358d5d3ecc6d92a0eb95a4edfce1b481370c4adcc1775d8e1d484a305184dedcd1afe75","ssdeep":"6144:Ba7sZi2nDjNHJJZkOe+sky/70WYl0tFwlMr:Ba7SiStKOxsky/7YMwer","tlshash":"443423e0f2f11ba852dc03c23dcd5fe4f14f4565742d127a362ec786aa5a8a8059b787","first_seen":"2025-12-23T14:30:42.480657Z","last_seen":"2025-12-23T14:30:42.480657Z","times_seen":1,"resource_available":false,"data":null}},"time_used":986,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":525,"receive":461,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pic.wdsrie.cn/upload_01/upload/20250710/2025071018485580815.png","fqdn":"pic.wdsrie.cn","domain":"wdsrie.cn","tld":"cn"},"ip":{"addr":"43.152.140.79","port":443,"asn":139341,"as":"ACE","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://iw63v.crqeraf.xyz/archives/65129/","date":"2025-12-23T14:29:57.674Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.wdsrie.cn","organization":""},"issuer":{"commonName":"ZeroSSL ECC Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Sat, 20 Dec 2025 00:00:00 GMT","end":"Fri, 20 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E9:73:86:E2:44:76:13:6D:6B:AE:EE:E0:BA:B0:C0:68:B0:97:37:B8","sha256":"B9:DF:B5:64:69:80:D3:48:0B:F1:C2:39:96:52:89:9A:DE:23:24:F8:50:8B:E3:B3:38:A6:99:51:B3:9A:55:5E"}}},"request":{"raw":"GET /upload_01/upload/20250710/2025071018485580815.png HTTP/1.1\r\nHost: pic.wdsrie.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://iw63v.crqeraf.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Thu, 10 Jul 2025 10:50:40 GMT\r\nEtag: \"6d69244ed7945111f65a2ec4735b8a46\"\r\nContent-Type: binary/octet-stream\r\nDate: Fri, 10 Oct 2025 02:32:22 GMT\r\nx-amz-server-side-encryption: AES256\r\nServer: nginx\r\nX-Cache: Miss from cloudfront\r\nX-Amz-Cf-Pop: ARN53-P2\r\nContent-Length: 55456\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 4782886826379450676\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\nAccess-Control-Allow-Origin: *\r\nCache-Control: max-age=864000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":55456,"size_decoded":0,"mime_type":"binary/octet-stream","magic":"data","md5":"6d69244ed7945111f65a2ec4735b8a46","sha1":"3f7ab0a736738b55b1b5a54c2d379e887af55d92","sha256":"f657a1df34a24e654aef63cb914b7f7d886b9321c8c46f199b101d35a1f12dfb","sha512":"b0d2a2bfc4df122e30040c99791ed313c07bc0b554ba28d16e34f7b252ab5dbc126f157ebbfaf9ebc209e2e8de2fc8bf9ba987a241e8b43e0cd60df605df2821","ssdeep":"768:R0B0PkRimsqOjlzwia0mR+YZWvNNHUfXyG/MSHq2fDBzrpy9P4ZFbfMDV/duslHy:hTzqWTalZuHqiKlto4ZBYlMslHhIvuk","tlshash":"d44302e1b4d72bfeb73ddbc9a6a15db17469001fe63f204463634127db6acb984a2c01","first_seen":"2025-06-29T07:01:10.860952Z","last_seen":"2026-03-26T23:06:24.323416Z","times_seen":3286,"resource_available":false,"data":null}},"time_used":862,"timings":{"blocked":846,"dns":0,"connect":0,"send":0,"wait":14,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pic.wdsrie.cn/upload_01/upload/20240627/2024062717561953040.png","fqdn":"pic.wdsrie.cn","domain":"wdsrie.cn","tld":"cn"},"ip":{"addr":"43.152.140.79","port":443,"asn":139341,"as":"ACE","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://iw63v.crqeraf.xyz/archives/65129/","date":"2025-12-23T14:29:56.831Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.wdsrie.cn","organization":""},"issuer":{"commonName":"ZeroSSL ECC Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Sat, 20 Dec 2025 00:00:00 GMT","end":"Fri, 20 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E9:73:86:E2:44:76:13:6D:6B:AE:EE:E0:BA:B0:C0:68:B0:97:37:B8","sha256":"B9:DF:B5:64:69:80:D3:48:0B:F1:C2:39:96:52:89:9A:DE:23:24:F8:50:8B:E3:B3:38:A6:99:51:B3:9A:55:5E"}}},"request":{"raw":"GET /upload_01/upload/20240627/2024062717561953040.png HTTP/1.1\r\nHost: pic.wdsrie.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://iw63v.crqeraf.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Thu, 27 Jun 2024 09:56:29 GMT\r\nEtag: \"692c7172e8185c07637daa974d4ebcad\"\r\nContent-Type: binary/octet-stream\r\nDate: Sat, 26 Jul 2025 11:18:57 GMT\r\nx-amz-server-side-encryption: AES256\r\nServer: nginx\r\nX-Cache: Hit from cloudfront\r\nX-Amz-Cf-Pop: ARN53-P2\r\nAge: 370\r\nContent-Length: 560\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 6119332599693365863\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\nAccess-Control-Allow-Origin: *\r\nCache-Control: max-age=864000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":560,"size_decoded":0,"mime_type":"binary/octet-stream","magic":"data","md5":"692c7172e8185c07637daa974d4ebcad","sha1":"48e022aa037ae91ecb30e38f438a83179c458c9b","sha256":"ac0ba0a2557a1a80d3ac57661f46b28f97ad68ce8b90989767eda2fe854d5726","sha512":"64c14e2c1330a718dc7300e71f6c83db45594fceeef7be1b7f02f92a590aafa2a300e65821447be00ac3b6d0682759684f79eae256209f86656c6151ec818930","ssdeep":"","tlshash":"aaf041f51085ea9ce4d906082daa243429e20745b8abc8a850e872b210484b548085ff","first_seen":"2024-06-29T19:14:32Z","last_seen":"2026-04-03T18:43:45.417555Z","times_seen":7519,"resource_available":false,"data":null}},"time_used":209,"timings":{"blocked":188,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pic.wdsrie.cn/upload/upload/20231206/2023120617393853466.png","fqdn":"pic.wdsrie.cn","domain":"wdsrie.cn","tld":"cn"},"ip":{"addr":"43.152.140.79","port":443,"asn":139341,"as":"ACE","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://iw63v.crqeraf.xyz/archives/65129/","date":"2025-12-23T14:29:56.898Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.wdsrie.cn","organization":""},"issuer":{"commonName":"ZeroSSL ECC Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Sat, 20 Dec 2025 00:00:00 GMT","end":"Fri, 20 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E9:73:86:E2:44:76:13:6D:6B:AE:EE:E0:BA:B0:C0:68:B0:97:37:B8","sha256":"B9:DF:B5:64:69:80:D3:48:0B:F1:C2:39:96:52:89:9A:DE:23:24:F8:50:8B:E3:B3:38:A6:99:51:B3:9A:55:5E"}}},"request":{"raw":"GET /upload/upload/20231206/2023120617393853466.png HTTP/1.1\r\nHost: pic.wdsrie.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://iw63v.crqeraf.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Thu, 28 Dec 2023 12:24:12 GMT\r\nEtag: \"4fdf028859e360a303138e175a2d727e\"\r\nContent-Type: binary/octet-stream\r\nDate: Sat, 26 Jul 2025 01:30:20 GMT\r\nx-amz-server-side-encryption: AES256\r\nServer: nginx\r\nX-Cache: Hit from cloudfront\r\nX-Amz-Cf-Pop: ARN53-P2\r\nAge: 35687\r\nContent-Length: 1056\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 6522203749088226453\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\nAccess-Control-Allow-Origin: *\r\nCache-Control: max-age=864000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1056,"size_decoded":0,"mime_type":"binary/octet-stream","magic":"data","md5":"4fdf028859e360a303138e175a2d727e","sha1":"19ca45e07f37e98f7f54f41e51780ce642829a05","sha256":"389990e8eac564177df77d03d350ed890a39a0c8d241923229219048955ae628","sha512":"7ec40176afb921ee1a2aa6e2c128c31d34e59f6cb000692e3aa740b0437c8244a0a68394270e3c42de2e9df32f75e96aa385ea682f182eb02699b5fff0847a26","ssdeep":"","tlshash":"d31182e2201520af430887881f17089f61a9c17fd155ca0fac3ee996e98af91391eb48","first_seen":"2024-04-20T21:23:38Z","last_seen":"2026-04-03T18:43:45.404802Z","times_seen":7526,"resource_available":false,"data":null}},"time_used":161,"timings":{"blocked":152,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pic.wdsrie.cn/upload_01/xiao/20251218/2025121810454719259.jpeg","fqdn":"pic.wdsrie.cn","domain":"wdsrie.cn","tld":"cn"},"ip":{"addr":"43.152.140.79","port":443,"asn":139341,"as":"ACE","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://iw63v.crqeraf.xyz/archives/65129/","date":"2025-12-23T14:29:57.234Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.wdsrie.cn","organization":""},"issuer":{"commonName":"ZeroSSL ECC Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Sat, 20 Dec 2025 00:00:00 GMT","end":"Fri, 20 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E9:73:86:E2:44:76:13:6D:6B:AE:EE:E0:BA:B0:C0:68:B0:97:37:B8","sha256":"B9:DF:B5:64:69:80:D3:48:0B:F1:C2:39:96:52:89:9A:DE:23:24:F8:50:8B:E3:B3:38:A6:99:51:B3:9A:55:5E"}}},"request":{"raw":"GET /upload_01/xiao/20251218/2025121810454719259.jpeg HTTP/1.1\r\nHost: pic.wdsrie.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://iw63v.crqeraf.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Thu, 18 Dec 2025 02:45:50 GMT\r\nEtag: \"094953ac56f5e2d53cdf6dbd887aeecc\"\r\nContent-Type: binary/octet-stream\r\nDate: Thu, 18 Dec 2025 22:10:50 GMT\r\nx-amz-server-side-encryption: AES256\r\nServer: nginx\r\nX-Cache: Hit from cloudfront\r\nX-Amz-Cf-Pop: ARN53-P2\r\nAge: 159\r\nContent-Length: 62704\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 154340571856452408\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\nAccess-Control-Allow-Origin: *\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":62704,"size_decoded":0,"mime_type":"binary/octet-stream","magic":"data","md5":"094953ac56f5e2d53cdf6dbd887aeecc","sha1":"8f9c1aed6bf60a8236e9f4590eb0d556b0fb9fb4","sha256":"5e7ef0c46e0cb9b2a265a5f1d4f23259d2dfaea2377614c0e9e4632018c73fbb","sha512":"3fb9843830c39d4d93b1c2b8607e6f984eeae3d190785072b40061bb760965cdea4864cfe056b7a28bfe488e348032b2f3cc5707af727dcf075facc54405669d","ssdeep":"1536:qSisdA8rlQL+DpSUHrUu7gPX82x8Vn1+SfDx8KPF+14:qFsdAYbaC/fDBPFa4","tlshash":"f953021eadffbb1a01e532f04af1c8e46e400fa16b9ae7b56848dc7c7799c1027950d5","first_seen":"2025-12-23T14:30:42.410592Z","last_seen":"2025-12-23T14:30:42.410592Z","times_seen":1,"resource_available":false,"data":null}},"time_used":931,"timings":{"blocked":917,"dns":0,"connect":0,"send":0,"wait":12,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pic.wdsrie.cn/upload_01/upload/20251213/2025121315415363691.gif","fqdn":"pic.wdsrie.cn","domain":"wdsrie.cn","tld":"cn"},"ip":{"addr":"43.152.140.79","port":443,"asn":139341,"as":"ACE","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://iw63v.crqeraf.xyz/archives/65129/","date":"2025-12-23T14:29:57.903Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.wdsrie.cn","organization":""},"issuer":{"commonName":"ZeroSSL ECC Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Sat, 20 Dec 2025 00:00:00 GMT","end":"Fri, 20 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E9:73:86:E2:44:76:13:6D:6B:AE:EE:E0:BA:B0:C0:68:B0:97:37:B8","sha256":"B9:DF:B5:64:69:80:D3:48:0B:F1:C2:39:96:52:89:9A:DE:23:24:F8:50:8B:E3:B3:38:A6:99:51:B3:9A:55:5E"}}},"request":{"raw":"GET /upload_01/upload/20251213/2025121315415363691.gif HTTP/1.1\r\nHost: pic.wdsrie.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://iw63v.crqeraf.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Sat, 13 Dec 2025 07:41:58 GMT\r\nEtag: \"5396705deaa3cc79fe5aa23aa02bb1ed\"\r\nContent-Type: binary/octet-stream\r\nDate: Sat, 13 Dec 2025 07:42:21 GMT\r\nx-amz-server-side-encryption: AES256\r\nServer: nginx\r\nX-Cache: Hit from cloudfront\r\nX-Amz-Cf-Pop: ARN53-P2\r\nAge: 15\r\nContent-Length: 63584\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 11085502372029427470\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\nAccess-Control-Allow-Origin: *\r\nCache-Control: max-age=864000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":63584,"size_decoded":0,"mime_type":"binary/octet-stream","magic":"PGP Secret Sub-key -","md5":"5396705deaa3cc79fe5aa23aa02bb1ed","sha1":"188e762f32ad48a0eb65c52d0557597eeab28412","sha256":"62647f0152526c7b6bb065367807e3086f8ab3a3c44925d0e89a6f66fe619910","sha512":"eb2a6957b378e8cc3ccff3466a95c7c94f4e17599f498421386cd280ff17f1d4c56b9c819dad8a5fd2fab9b9dc95bb7d15e76964a9868c24cf69bfe3fe990891","ssdeep":"1536:iXRzO3LzWyuEUXW4UJU0/1QFL4I+hIL0MhcLbqjXedfiG:UzO3LzXuBXwUeOFtL0ZBiG","tlshash":"ee530268398677734c3fb0658efb8398bf57220156c88184674df6f83762c94d91c796","first_seen":"2025-12-16T02:09:18.38478Z","last_seen":"2026-03-01T14:07:32.980197Z","times_seen":4567,"resource_available":false,"data":null}},"time_used":843,"timings":{"blocked":829,"dns":0,"connect":0,"send":0,"wait":12,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"iw63v.crqeraf.xyz/static/pc/js/base.js?v=20251130","fqdn":"iw63v.crqeraf.xyz","domain":"crqeraf.xyz","tld":"xyz"},"ip":{"addr":"154.207.127.39","port":443,"asn":0,"as":"","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://iw63v.crqeraf.xyz/archives/65129/","date":"2025-12-23T14:29:56.007Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"crqeraf.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 12 Dec 2025 08:17:25 GMT","end":"Thu, 12 Mar 2026 09:15:12 GMT"},"fingerprint":{"sha1":"9A:B6:D6:FC:9F:B5:E4:7C:4E:60:81:74:C5:1D:1F:16:43:65:9B:C0","sha256":"6B:D5:92:C2:2E:E8:B1:3D:EE:9E:2C:51:0B:D3:32:29:71:17:1E:3D:93:07:59:A9:C9:59:7C:A8:D8:9B:2B:8C"}}},"request":{"raw":"GET /static/pc/js/base.js?v=20251130 HTTP/1.1\r\nHost: iw63v.crqeraf.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://iw63v.crqeraf.xyz/archives/65129/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 23 Dec 2025 14:29:55 GMT\r\ncontent-type: application/javascript\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\nlast-modified: Thu, 20 Nov 2025 11:34:34 GMT\r\nvary: Accept-Encoding\r\netag: W/\"691efcca-a5b1\"\r\nexpires: Tue, 30 Dec 2025 07:16:36 GMT\r\ncache-control: public, max-age=604800, immutable\r\ncontent-encoding: gzip\r\nage: 25999\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=T%2FN5A%2FP0AbRZpvwD4aZq57y4XJQTGiX8eCzUltZB6M9QjyHGn9u6RejScTrI1hTQ1cYkJevzPMGzaJJRtnJPgcEB724ZQ%2FHnZ7P5lhMYOg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b288dd06b1d56b4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":42417,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (683)","md5":"e2fc69b4181729e6c2898b1b97e4e502","sha1":"71ad6fe4864b253320cd7b1660f08cd97b3ed4aa","sha256":"f815df7dec429ef04a8984e87f11f483ad121e947b136f59e2b7167063ecb223","sha512":"fa9e4b2e7a5d1151a664f5efe69cbed0a4cacd0d4268601f15de0e918c74a2c0a399f2eba0e935ef987b44a36e02f16fa7804092b2461237f9835e44a7a5bdeb","ssdeep":"384:LYHZfmQikJBmSoPMbkBNBtlpZhMtMJ4bakWz7MrO7A6EHB7v3z8MxF2Xq3:IPCMbQY6nseA6EuMcs","tlshash":"f513850965f124630727b0769eafa4083174a047460dde00be4cabd8af99d7ed2f6bdc","first_seen":"2025-11-21T00:42:42.122537Z","last_seen":"2025-12-23T20:30:18.557607Z","times_seen":2043,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-23","alert":"Sinkholed","trigger":"iw63v.crqeraf.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pic.wdsrie.cn/upload/upload/20240510/2024051000160899233.png","fqdn":"pic.wdsrie.cn","domain":"wdsrie.cn","tld":"cn"},"ip":{"addr":"43.152.140.79","port":443,"asn":139341,"as":"ACE","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://iw63v.crqeraf.xyz/archives/65129/","date":"2025-12-23T14:29:56.757Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.wdsrie.cn","organization":""},"issuer":{"commonName":"ZeroSSL ECC Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Sat, 20 Dec 2025 00:00:00 GMT","end":"Fri, 20 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E9:73:86:E2:44:76:13:6D:6B:AE:EE:E0:BA:B0:C0:68:B0:97:37:B8","sha256":"B9:DF:B5:64:69:80:D3:48:0B:F1:C2:39:96:52:89:9A:DE:23:24:F8:50:8B:E3:B3:38:A6:99:51:B3:9A:55:5E"}}},"request":{"raw":"GET /upload/upload/20240510/2024051000160899233.png HTTP/1.1\r\nHost: pic.wdsrie.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://iw63v.crqeraf.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Thu, 09 May 2024 16:16:14 GMT\r\nEtag: \"da1a82e93dc004a2487c00021d01f744\"\r\nContent-Type: binary/octet-stream\r\nDate: Fri, 25 Jul 2025 18:11:24 GMT\r\nx-amz-server-side-encryption: AES256\r\nServer: nginx\r\nX-Cache: Hit from cloudfront\r\nX-Amz-Cf-Pop: ARN53-P2\r\nAge: 61950\r\nVary: Origin\r\nContent-Length: 2080\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 13235340642837693801\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\nAccess-Control-Allow-Origin: *\r\nCache-Control: max-age=864000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2080,"size_decoded":0,"mime_type":"binary/octet-stream","magic":"data","md5":"da1a82e93dc004a2487c00021d01f744","sha1":"c9f94f819b2ff4082a15b28887936c069a1c8e37","sha256":"71a8b27bff804ce23d5d2b54b5c2114d83f65357120c4195272ee67062e2691d","sha512":"d32ad73764b5651183a5d85bf3c937fefbf84ab34274d70a41a04d7ece06c286c068d20cc65f97a1711c8ddeb1cd84b1d7fd72a53d59b772d490313653337cc7","ssdeep":"","tlshash":"3341fa6ce16145983549997efd45d651856cf002037c3c312f08cd7baf8981cda4c75a","first_seen":"2024-05-10T06:44:59Z","last_seen":"2026-04-03T18:43:45.446335Z","times_seen":7525,"resource_available":false,"data":null}},"time_used":726,"timings":{"blocked":337,"dns":0,"connect":21,"send":0,"wait":22,"receive":0,"ssl":343},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pic.wdsrie.cn/upload/upload/20231020/2023102011222137732.png","fqdn":"pic.wdsrie.cn","domain":"wdsrie.cn","tld":"cn"},"ip":{"addr":"43.152.140.79","port":443,"asn":139341,"as":"ACE","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://iw63v.crqeraf.xyz/archives/65129/","date":"2025-12-23T14:29:56.797Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.wdsrie.cn","organization":""},"issuer":{"commonName":"ZeroSSL ECC Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Sat, 20 Dec 2025 00:00:00 GMT","end":"Fri, 20 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E9:73:86:E2:44:76:13:6D:6B:AE:EE:E0:BA:B0:C0:68:B0:97:37:B8","sha256":"B9:DF:B5:64:69:80:D3:48:0B:F1:C2:39:96:52:89:9A:DE:23:24:F8:50:8B:E3:B3:38:A6:99:51:B3:9A:55:5E"}}},"request":{"raw":"GET /upload/upload/20231020/2023102011222137732.png HTTP/1.1\r\nHost: pic.wdsrie.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://iw63v.crqeraf.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Thu, 28 Dec 2023 12:24:12 GMT\r\nEtag: \"5b15d64f25a7d875169b9caf2df8909d\"\r\nContent-Type: binary/octet-stream\r\nDate: Sat, 26 Jul 2025 05:47:25 GMT\r\nx-amz-server-side-encryption: AES256\r\nServer: nginx\r\nX-Cache: Hit from cloudfront\r\nX-Amz-Cf-Pop: ARN53-P2\r\nAge: 20262\r\nContent-Length: 1040\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 18175722607339131242\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\nAccess-Control-Allow-Origin: *\r\nCache-Control: max-age=864000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1040,"size_decoded":0,"mime_type":"binary/octet-stream","magic":"data","md5":"5b15d64f25a7d875169b9caf2df8909d","sha1":"9c80bf7b1d225c0f23f01040d5f48f61e75c63ee","sha256":"9dea384005d7024e09a7d7620ddee988c8250111a79b3cd51dcc77c69834e0b3","sha512":"0b016d8a1a718f6dc938edce58a052e13169673b41733cadec77405a2252c06150b70f2ab81a7e02cb66894ea4c5e15ba8bb503d598571e830d64acf29c3a28e","ssdeep":"","tlshash":"65117520a35aa26f911529d8a20669ed5ba252c4d4e347b9ea132306b822f0b25a1175","first_seen":"2023-11-14T11:24:50Z","last_seen":"2026-04-03T18:43:45.402337Z","times_seen":7527,"resource_available":false,"data":null}},"time_used":186,"timings":{"blocked":176,"dns":0,"connect":0,"send":0,"wait":9,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pic.wdsrie.cn/upload/upload/20240529/2024052917490741435.png","fqdn":"pic.wdsrie.cn","domain":"wdsrie.cn","tld":"cn"},"ip":{"addr":"43.152.140.79","port":443,"asn":139341,"as":"ACE","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://iw63v.crqeraf.xyz/archives/65129/","date":"2025-12-23T14:29:56.807Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.wdsrie.cn","organization":""},"issuer":{"commonName":"ZeroSSL ECC Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Sat, 20 Dec 2025 00:00:00 GMT","end":"Fri, 20 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E9:73:86:E2:44:76:13:6D:6B:AE:EE:E0:BA:B0:C0:68:B0:97:37:B8","sha256":"B9:DF:B5:64:69:80:D3:48:0B:F1:C2:39:96:52:89:9A:DE:23:24:F8:50:8B:E3:B3:38:A6:99:51:B3:9A:55:5E"}}},"request":{"raw":"GET /upload/upload/20240529/2024052917490741435.png HTTP/1.1\r\nHost: pic.wdsrie.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://iw63v.crqeraf.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Wed, 29 May 2024 09:49:16 GMT\r\nEtag: \"f66bc3943b1ddf92787835e6f0dd214b\"\r\nContent-Type: binary/octet-stream\r\nDate: Sat, 26 Jul 2025 05:48:41 GMT\r\nx-amz-server-side-encryption: AES256\r\nServer: nginx\r\nX-Cache: Hit from cloudfront\r\nX-Amz-Cf-Pop: ARN53-P2\r\nAge: 20186\r\nContent-Length: 1088\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 12029586313522369449\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\nAccess-Control-Allow-Origin: *\r\nCache-Control: max-age=864000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1088,"size_decoded":0,"mime_type":"binary/octet-stream","magic":"data","md5":"f66bc3943b1ddf92787835e6f0dd214b","sha1":"97ac2012d8d8d7f52ef793aecf8462db31da584f","sha256":"cb12f9ea72a7507a3337c30f6e8186a24991e41618f2bfd49d03fa7b03454110","sha512":"585d6c08fba4de933e982c23e49fce993829ebcfa7690128e20e0c18bd797461a7792eb6e007a22217e617be3261d067e15d02c78845f236e966918de481ac5f","ssdeep":"","tlshash":"2c11f65881ae4beb9f03db101832f60287300b004b0fd84cabe48e1f3e30a493aca518","first_seen":"2024-04-20T21:23:38Z","last_seen":"2026-04-03T18:43:45.388002Z","times_seen":7526,"resource_available":false,"data":null}},"time_used":186,"timings":{"blocked":177,"dns":0,"connect":0,"send":0,"wait":8,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pic.wdsrie.cn/upload/upload/20240510/2024051000175192989.png","fqdn":"pic.wdsrie.cn","domain":"wdsrie.cn","tld":"cn"},"ip":{"addr":"43.152.140.79","port":443,"asn":139341,"as":"ACE","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://iw63v.crqeraf.xyz/archives/65129/","date":"2025-12-23T14:29:56.826Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.wdsrie.cn","organization":""},"issuer":{"commonName":"ZeroSSL ECC Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Sat, 20 Dec 2025 00:00:00 GMT","end":"Fri, 20 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E9:73:86:E2:44:76:13:6D:6B:AE:EE:E0:BA:B0:C0:68:B0:97:37:B8","sha256":"B9:DF:B5:64:69:80:D3:48:0B:F1:C2:39:96:52:89:9A:DE:23:24:F8:50:8B:E3:B3:38:A6:99:51:B3:9A:55:5E"}}},"request":{"raw":"GET /upload/upload/20240510/2024051000175192989.png HTTP/1.1\r\nHost: pic.wdsrie.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://iw63v.crqeraf.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Thu, 09 May 2024 16:17:56 GMT\r\nEtag: \"351841a28c41d32befc77463bfb396ea\"\r\nContent-Type: binary/octet-stream\r\nDate: Sat, 26 Jul 2025 10:59:38 GMT\r\nx-amz-server-side-encryption: AES256\r\nServer: nginx\r\nX-Cache: Hit from cloudfront\r\nX-Amz-Cf-Pop: ARN53-P2\r\nAge: 1529\r\nContent-Length: 4064\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 9376019770044976697\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\nAccess-Control-Allow-Origin: *\r\nCache-Control: max-age=864000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4064,"size_decoded":0,"mime_type":"binary/octet-stream","magic":"data","md5":"351841a28c41d32befc77463bfb396ea","sha1":"0c5ef7d96c16aa212947227ab6b9bcdba07ad6c7","sha256":"c43d8a223a2d16b39abee9310c136bc0bd32464d7b6b79bfb4fe3a10cbdab9a3","sha512":"6924992e50b757de32846d2fa2696e720e0545cf8f8766d4aa22eacdbfcd0fb5ef1ee17b63dabfcff436f410c0ace7cadcc7e0dc1862f4b73cc6db1d43b4d90a","ssdeep":"","tlshash":"da815c57376184cd8abbd021b730234f350cb26e57e831578cc9c396da502ee8c569fa","first_seen":"2024-05-10T06:44:59Z","last_seen":"2026-04-03T18:43:45.399697Z","times_seen":7793,"resource_available":false,"data":null}},"time_used":195,"timings":{"blocked":186,"dns":0,"connect":0,"send":0,"wait":8,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pic.wdsrie.cn/upload_01/upload/20251211/2025121111472570088.gif","fqdn":"pic.wdsrie.cn","domain":"wdsrie.cn","tld":"cn"},"ip":{"addr":"43.152.140.79","port":443,"asn":139341,"as":"ACE","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://iw63v.crqeraf.xyz/archives/65129/","date":"2025-12-23T14:29:57.283Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.wdsrie.cn","organization":""},"issuer":{"commonName":"ZeroSSL ECC Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Sat, 20 Dec 2025 00:00:00 GMT","end":"Fri, 20 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E9:73:86:E2:44:76:13:6D:6B:AE:EE:E0:BA:B0:C0:68:B0:97:37:B8","sha256":"B9:DF:B5:64:69:80:D3:48:0B:F1:C2:39:96:52:89:9A:DE:23:24:F8:50:8B:E3:B3:38:A6:99:51:B3:9A:55:5E"}}},"request":{"raw":"GET /upload_01/upload/20251211/2025121111472570088.gif HTTP/1.1\r\nHost: pic.wdsrie.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://iw63v.crqeraf.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Thu, 11 Dec 2025 03:47:36 GMT\r\nEtag: \"b21aad4eb8fe1f9e4738b04167fe9f46\"\r\nContent-Type: binary/octet-stream\r\nDate: Thu, 11 Dec 2025 03:48:40 GMT\r\nx-amz-server-side-encryption: AES256\r\nServer: nginx\r\nX-Cache: Hit from cloudfront\r\nX-Amz-Cf-Pop: ARN53-P2\r\nAge: 495\r\nContent-Length: 1263024\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 1490838542024006791\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\nAccess-Control-Allow-Origin: *\r\nCache-Control: max-age=864000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1263024,"size_decoded":0,"mime_type":"binary/octet-stream","magic":"data","md5":"65644caa9e83e2a88ece9002b11d6c11","sha1":"dea382026179355164faf0dab00d59c6f2a3af08","sha256":"33c039dfba68ddf4f2ec8dbfb299eee64b9ab1984d8609d7634e9b22dfcfd85f","sha512":"c705b58d350a1ae86b127fbaacd239045b0812653e791dddde39d72e46126e9ae214d0b5f229cc65ea06d1e99b051995ecb26ea7715a9cffc843af234936a411","ssdeep":"24576:MXCIjNz9CkZXsF+rCrxrHdaO0M6DJKqrB78xcwcOFUQupDfp3+L:MhJZZ8mCB9BCDJKB2Dx3+L","tlshash":"37253337735af44fa5d0de725cc848d1ec285ede188c36506b62e2deca44761a04faeb","first_seen":"2025-12-11T12:22:55.530247Z","last_seen":"2026-03-14T23:57:24.333651Z","times_seen":2173,"resource_available":false,"data":null}},"time_used":982,"timings":{"blocked":901,"dns":0,"connect":0,"send":0,"wait":16,"receive":65,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pic.wdsrie.cn/upload_01/upload/20250618/2025061814582651239.png","fqdn":"pic.wdsrie.cn","domain":"wdsrie.cn","tld":"cn"},"ip":{"addr":"43.152.140.79","port":443,"asn":139341,"as":"ACE","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://iw63v.crqeraf.xyz/archives/65129/","date":"2025-12-23T14:29:56.738Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.wdsrie.cn","organization":""},"issuer":{"commonName":"ZeroSSL ECC Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Sat, 20 Dec 2025 00:00:00 GMT","end":"Fri, 20 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E9:73:86:E2:44:76:13:6D:6B:AE:EE:E0:BA:B0:C0:68:B0:97:37:B8","sha256":"B9:DF:B5:64:69:80:D3:48:0B:F1:C2:39:96:52:89:9A:DE:23:24:F8:50:8B:E3:B3:38:A6:99:51:B3:9A:55:5E"}}},"request":{"raw":"GET /upload_01/upload/20250618/2025061814582651239.png HTTP/1.1\r\nHost: pic.wdsrie.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://iw63v.crqeraf.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Wed, 18 Jun 2025 06:58:57 GMT\r\nEtag: \"0a8cd00fe3b6e27caf33a53be83aa63c\"\r\nContent-Type: binary/octet-stream\r\nDate: Sat, 26 Jul 2025 11:18:59 GMT\r\nx-amz-server-side-encryption: AES256\r\nServer: nginx\r\nX-Cache: Hit from cloudfront\r\nX-Amz-Cf-Pop: ARN53-P2\r\nAge: 294\r\nVary: Origin\r\nContent-Length: 2800\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 5606565624952798328\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\nAccess-Control-Allow-Origin: *\r\nCache-Control: max-age=864000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2800,"size_decoded":0,"mime_type":"binary/octet-stream","magic":"data","md5":"0a8cd00fe3b6e27caf33a53be83aa63c","sha1":"5ce0e1aa87ce5fb8d4813e637b88172b1258b6de","sha256":"412423a6537a0e86bacf1f2a1ebeb3b62a086f68854112f07513cd9f1999c7b2","sha512":"89356c3f62078eff95cd88410cc7fb2847240178d4ad3e45be3671eb8099c8307d8916f2fb1a9b58b30e852116169447a4afab0012e996a391a22d8521159208","ssdeep":"","tlshash":"df513d2b6c42bed127581725f715f34d3ff0d020661fe318ead48bc286197dde266a40","first_seen":"2025-06-17T09:03:02.065041Z","last_seen":"2026-04-03T18:43:45.407634Z","times_seen":7475,"resource_available":false,"data":null}},"time_used":443,"timings":{"blocked":206,"dns":1,"connect":7,"send":0,"wait":16,"receive":2,"ssl":208},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pic.wdsrie.cn/upload/upload/20240529/2024052917505382207.png","fqdn":"pic.wdsrie.cn","domain":"wdsrie.cn","tld":"cn"},"ip":{"addr":"43.152.140.79","port":443,"asn":139341,"as":"ACE","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://iw63v.crqeraf.xyz/archives/65129/","date":"2025-12-23T14:29:56.811Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.wdsrie.cn","organization":""},"issuer":{"commonName":"ZeroSSL ECC Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Sat, 20 Dec 2025 00:00:00 GMT","end":"Fri, 20 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E9:73:86:E2:44:76:13:6D:6B:AE:EE:E0:BA:B0:C0:68:B0:97:37:B8","sha256":"B9:DF:B5:64:69:80:D3:48:0B:F1:C2:39:96:52:89:9A:DE:23:24:F8:50:8B:E3:B3:38:A6:99:51:B3:9A:55:5E"}}},"request":{"raw":"GET /upload/upload/20240529/2024052917505382207.png HTTP/1.1\r\nHost: pic.wdsrie.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://iw63v.crqeraf.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Wed, 29 May 2024 09:51:03 GMT\r\nEtag: \"211b3b28fcbe7c6d03f5af03da6a97f6\"\r\nContent-Type: binary/octet-stream\r\nDate: Sat, 26 Jul 2025 07:51:45 GMT\r\nx-amz-server-side-encryption: AES256\r\nServer: nginx\r\nX-Cache: Hit from cloudfront\r\nX-Amz-Cf-Pop: ARN53-P2\r\nAge: 12802\r\nContent-Length: 864\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 17014289245734420286\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\nAccess-Control-Allow-Origin: *\r\nCache-Control: max-age=864000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":864,"size_decoded":0,"mime_type":"binary/octet-stream","magic":"data","md5":"211b3b28fcbe7c6d03f5af03da6a97f6","sha1":"c345bed6cc932286f260d02618b885e659e90be1","sha256":"a76ae0649f23cd12795b6128f84d34ea4a469de3fd9e652af39d62dd8231587d","sha512":"a7383aea4a3e497da95bdddb3cdcdbdb880005d49e14902d7ed751a905f2e508f63bcfae850d7193faa3c6c2064dd03290b42a4c29cdb256d4fe0fc2a34c263e","ssdeep":"","tlshash":"aa11963c50b61ef9607930bc120c37420ef8850d4f1be095a942c4936b8344bd484c6e","first_seen":"2024-06-16T22:53:03Z","last_seen":"2026-04-03T18:43:45.433435Z","times_seen":7520,"resource_available":false,"data":null}},"time_used":191,"timings":{"blocked":182,"dns":0,"connect":0,"send":0,"wait":8,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pic.wdsrie.cn/upload_01/upload/20240627/2024062717543185391.png","fqdn":"pic.wdsrie.cn","domain":"wdsrie.cn","tld":"cn"},"ip":{"addr":"43.152.140.79","port":443,"asn":139341,"as":"ACE","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://iw63v.crqeraf.xyz/archives/65129/","date":"2025-12-23T14:29:56.923Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.wdsrie.cn","organization":""},"issuer":{"commonName":"ZeroSSL ECC Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Sat, 20 Dec 2025 00:00:00 GMT","end":"Fri, 20 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E9:73:86:E2:44:76:13:6D:6B:AE:EE:E0:BA:B0:C0:68:B0:97:37:B8","sha256":"B9:DF:B5:64:69:80:D3:48:0B:F1:C2:39:96:52:89:9A:DE:23:24:F8:50:8B:E3:B3:38:A6:99:51:B3:9A:55:5E"}}},"request":{"raw":"GET /upload_01/upload/20240627/2024062717543185391.png HTTP/1.1\r\nHost: pic.wdsrie.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://iw63v.crqeraf.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Thu, 27 Jun 2024 09:54:41 GMT\r\nEtag: \"015a482f71b87915148099dfe7d56afe\"\r\nContent-Type: binary/octet-stream\r\nDate: Thu, 09 Oct 2025 18:33:40 GMT\r\nx-amz-server-side-encryption: AES256\r\nServer: nginx\r\nX-Cache: Hit from cloudfront\r\nX-Amz-Cf-Pop: ARN53-P2\r\nAge: 28618\r\nContent-Length: 752\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 14670757385166203354\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\nAccess-Control-Allow-Origin: *\r\nCache-Control: max-age=864000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":752,"size_decoded":0,"mime_type":"binary/octet-stream","magic":"data","md5":"015a482f71b87915148099dfe7d56afe","sha1":"501379ce28b8a9c8f8dfbff711b1c2ae7d22d1a2","sha256":"b6c1ec7084de566a618baab554969f0eb43c78bf498ff582e4745fc29afc61ed","sha512":"50751966ab98abb7e007d70020248f734b8ad73d3b1936f55d1bf1a9030cd695ec6977f91a393c4a6b25553d6aa0a02df9907332a85b85c7497a19009ea7b4f1","ssdeep":"","tlshash":"a801751697b6108988058a8e4d864205acef4022d3171a9fd81eb212fb5de2c770811b","first_seen":"2024-06-29T19:14:32Z","last_seen":"2026-04-03T18:43:45.379655Z","times_seen":7519,"resource_available":false,"data":null}},"time_used":170,"timings":{"blocked":148,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pic.wdsrie.cn/upload_01/upload/20251203/2025120322143695483.gif","fqdn":"pic.wdsrie.cn","domain":"wdsrie.cn","tld":"cn"},"ip":{"addr":"43.152.140.79","port":443,"asn":139341,"as":"ACE","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://iw63v.crqeraf.xyz/archives/65129/","date":"2025-12-23T14:29:57.287Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.wdsrie.cn","organization":""},"issuer":{"commonName":"ZeroSSL ECC Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Sat, 20 Dec 2025 00:00:00 GMT","end":"Fri, 20 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E9:73:86:E2:44:76:13:6D:6B:AE:EE:E0:BA:B0:C0:68:B0:97:37:B8","sha256":"B9:DF:B5:64:69:80:D3:48:0B:F1:C2:39:96:52:89:9A:DE:23:24:F8:50:8B:E3:B3:38:A6:99:51:B3:9A:55:5E"}}},"request":{"raw":"GET /upload_01/upload/20251203/2025120322143695483.gif HTTP/1.1\r\nHost: pic.wdsrie.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://iw63v.crqeraf.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Wed, 03 Dec 2025 14:14:56 GMT\r\nEtag: \"4c31cb78f1ce00d36089da3feaa6e4fd\"\r\nContent-Type: binary/octet-stream\r\nDate: Wed, 03 Dec 2025 14:14:59 GMT\r\nx-amz-server-side-encryption: AES256\r\nServer: nginx\r\nX-Cache: Hit from cloudfront\r\nX-Amz-Cf-Pop: ARN53-P2\r\nAge: 31\r\nContent-Length: 979168\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 274815893774334665\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\nAccess-Control-Allow-Origin: *\r\nCache-Control: max-age=864000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":979168,"size_decoded":0,"mime_type":"binary/octet-stream","magic":"data","md5":"4c31cb78f1ce00d36089da3feaa6e4fd","sha1":"469e311a0725d19dca2eca8311992f0b4488f7fd","sha256":"bfb6abb0ca1c603754c93bedc160c23488f5c6d4de76d0395ce3091d57c4d3a4","sha512":"31ef9508595c21cd9704e5a614b92249170e37f114e324ae0f045ee9752be501f9ecf303cec1d0918468edf02636eef0c228e4986d3b9574e66512adbec2379a","ssdeep":"24576:7vBIyaukkAj5E8YlJgBWibkXacHOjEcNzKN2xiCoAfmGQ:7vbDANNICYioaEOC2xi+mGQ","tlshash":"3e25337408c767fc1b7ce78f18d2c6f6649d5c699a925e4d02a39812eb13273e34ee90","first_seen":"2025-12-03T14:23:54.326786Z","last_seen":"2026-03-30T00:23:21.683729Z","times_seen":4332,"resource_available":false,"data":null}},"time_used":1062,"timings":{"blocked":993,"dns":0,"connect":0,"send":0,"wait":32,"receive":37,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pic.wdsrie.cn/upload_01/upload/20250828/2025082822514028272.png","fqdn":"pic.wdsrie.cn","domain":"wdsrie.cn","tld":"cn"},"ip":{"addr":"43.152.140.79","port":443,"asn":139341,"as":"ACE","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://iw63v.crqeraf.xyz/archives/65129/","date":"2025-12-23T14:29:57.317Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.wdsrie.cn","organization":""},"issuer":{"commonName":"ZeroSSL ECC Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Sat, 20 Dec 2025 00:00:00 GMT","end":"Fri, 20 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E9:73:86:E2:44:76:13:6D:6B:AE:EE:E0:BA:B0:C0:68:B0:97:37:B8","sha256":"B9:DF:B5:64:69:80:D3:48:0B:F1:C2:39:96:52:89:9A:DE:23:24:F8:50:8B:E3:B3:38:A6:99:51:B3:9A:55:5E"}}},"request":{"raw":"GET /upload_01/upload/20250828/2025082822514028272.png HTTP/1.1\r\nHost: pic.wdsrie.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://iw63v.crqeraf.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Thu, 28 Aug 2025 14:58:46 GMT\r\nEtag: \"0a90064796b09b426036829fa613a063\"\r\nContent-Type: binary/octet-stream\r\nDate: Thu, 09 Oct 2025 13:17:47 GMT\r\nx-amz-server-side-encryption: AES256\r\nServer: nginx\r\nX-Cache: Hit from cloudfront\r\nX-Amz-Cf-Pop: ARN53-P2\r\nAge: 47588\r\nContent-Length: 3152\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 1871782151272853304\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\nAccess-Control-Allow-Origin: *\r\nCache-Control: max-age=864000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3152,"size_decoded":0,"mime_type":"binary/octet-stream","magic":"data","md5":"0a90064796b09b426036829fa613a063","sha1":"1d32d78b64140f1371529834835fdb024894a326","sha256":"6ee87245ed103fb84264333573ea9bd10f3e6e0179abda540b70da4384083a9a","sha512":"a400663e77a5ba25c46297f38364a6bfc488d8204d28a686cb352dc24e49f35552e7c9a92e451d54f96280bef193eb97f9526e2e61a575ee40484bffeddceeba","ssdeep":"","tlshash":"76516de7d33b2a6a1c5c4584fdd46c843a13199e11debce14bd02fdf489b103d2969b1","first_seen":"2025-08-29T10:40:28.9217Z","last_seen":"2026-02-10T15:27:36.494387Z","times_seen":3926,"resource_available":false,"data":null}},"time_used":1138,"timings":{"blocked":1130,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pic.wdsrie.cn/upload_01/upload/20250828/2025082822535348075.jpeg","fqdn":"pic.wdsrie.cn","domain":"wdsrie.cn","tld":"cn"},"ip":{"addr":"43.152.140.79","port":443,"asn":139341,"as":"ACE","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://iw63v.crqeraf.xyz/archives/65129/","date":"2025-12-23T14:29:57.553Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.wdsrie.cn","organization":""},"issuer":{"commonName":"ZeroSSL ECC Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Sat, 20 Dec 2025 00:00:00 GMT","end":"Fri, 20 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E9:73:86:E2:44:76:13:6D:6B:AE:EE:E0:BA:B0:C0:68:B0:97:37:B8","sha256":"B9:DF:B5:64:69:80:D3:48:0B:F1:C2:39:96:52:89:9A:DE:23:24:F8:50:8B:E3:B3:38:A6:99:51:B3:9A:55:5E"}}},"request":{"raw":"GET /upload_01/upload/20250828/2025082822535348075.jpeg HTTP/1.1\r\nHost: pic.wdsrie.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://iw63v.crqeraf.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Thu, 28 Aug 2025 14:58:44 GMT\r\nEtag: \"e91d7406e41df53c440f0aaf8512dc56\"\r\nContent-Type: binary/octet-stream\r\nDate: Thu, 28 Aug 2025 14:58:45 GMT\r\nx-amz-server-side-encryption: AES256\r\nServer: nginx\r\nX-Cache: Hit from cloudfront\r\nX-Amz-Cf-Pop: ARN53-P2\r\nAge: 63\r\nContent-Length: 9104\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 3437338422654348260\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\nAccess-Control-Allow-Origin: *\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":9104,"size_decoded":0,"mime_type":"binary/octet-stream","magic":"data","md5":"e91d7406e41df53c440f0aaf8512dc56","sha1":"21f678f5c02dd82fcb0f6c1c31dff6f422e7f1b3","sha256":"708545d56a0b95e0abcb82b73fa5bce275fdd35592dccfb93016187cc3cff3e2","sha512":"2cd4c5ac517d7fea0448eadf5724de542df11c3eefb7c11252d96e9fed9bcd47f3f126e6aafa9739f687f2a824d181496609de05a521021d51b48526ba25ea39","ssdeep":"192:aUY2EQ1g2hWmYmrV5lu0PyBP6WOT+QvbF885e/lRdX/wcv:aUomYe5lU6WOiQvbFzABPf","tlshash":"8612bf6ef38a71cc550ca22e47f1bc41f8016645316077da8a578c9ff884b2067dce8b","first_seen":"2025-08-29T10:40:29.090879Z","last_seen":"2026-01-19T03:45:18.471569Z","times_seen":3205,"resource_available":false,"data":null}},"time_used":966,"timings":{"blocked":957,"dns":0,"connect":0,"send":0,"wait":8,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pic.wdsrie.cn/upload_01/upload/20251213/2025121318524399705.gif","fqdn":"pic.wdsrie.cn","domain":"wdsrie.cn","tld":"cn"},"ip":{"addr":"43.152.140.79","port":443,"asn":139341,"as":"ACE","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://iw63v.crqeraf.xyz/archives/65129/","date":"2025-12-23T14:29:57.912Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.wdsrie.cn","organization":""},"issuer":{"commonName":"ZeroSSL ECC Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Sat, 20 Dec 2025 00:00:00 GMT","end":"Fri, 20 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E9:73:86:E2:44:76:13:6D:6B:AE:EE:E0:BA:B0:C0:68:B0:97:37:B8","sha256":"B9:DF:B5:64:69:80:D3:48:0B:F1:C2:39:96:52:89:9A:DE:23:24:F8:50:8B:E3:B3:38:A6:99:51:B3:9A:55:5E"}}},"request":{"raw":"GET /upload_01/upload/20251213/2025121318524399705.gif HTTP/1.1\r\nHost: pic.wdsrie.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://iw63v.crqeraf.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Sat, 13 Dec 2025 10:52:58 GMT\r\nEtag: \"cd4a26cf351c32b4faf590fa32571040\"\r\nContent-Type: binary/octet-stream\r\nDate: Sat, 13 Dec 2025 10:52:58 GMT\r\nx-amz-server-side-encryption: AES256\r\nServer: nginx\r\nX-Cache: Hit from cloudfront\r\nX-Amz-Cf-Pop: ARN53-P2\r\nAge: 154\r\nContent-Length: 485040\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 14058483896534428372\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\nAccess-Control-Allow-Origin: *\r\nCache-Control: max-age=864000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":485040,"size_decoded":0,"mime_type":"binary/octet-stream","magic":"data","md5":"cd4a26cf351c32b4faf590fa32571040","sha1":"6c822fe36f3ce3474d92c75d4c0cf65eff29dc25","sha256":"0d49a4a1974cd235593cd7f9e2dbf4701b52b8feda1d137438edc2a0c4d2569a","sha512":"34f44f3e63288533d113ac25635148d6eafe93408916ae9655c6e07b7763474c4f34b7c451180bdef70fb691f0fea48ddfabfcfb4fde892ea07430253cb3be16","ssdeep":"12288:RwukiLzvOqXuQszo1fGTWTNj/QdddSrg5Fp:Wqrl1sU1uTQxCx5z","tlshash":"bfa42316544a5200551a184a7bccebdd1c90f7c3f2bab80ed8d97cbe610b6bfc7a9634","first_seen":"2025-08-18T14:04:27.203727Z","last_seen":"2026-01-04T05:55:55.103414Z","times_seen":229,"resource_available":false,"data":null}},"time_used":876,"timings":{"blocked":825,"dns":0,"connect":0,"send":0,"wait":22,"receive":29,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.addtoany.com/menu/svg/icons/a2a.js","fqdn":"static.addtoany.com","domain":"addtoany.com","tld":"com"},"ip":{"addr":"172.66.171.172","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://iw63v.crqeraf.xyz/archives/65129/","date":"2025-12-23T14:29:58.011Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"static.addtoany.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Dec 2025 13:28:50 GMT","end":"Sun, 22 Mar 2026 14:28:48 GMT"},"fingerprint":{"sha1":"83:E4:54:72:9E:E9:BE:F0:31:A0:E0:3B:5B:38:1D:25:57:6A:CE:67","sha256":"C2:A2:4F:7E:8C:0F:A8:AA:86:24:03:7D:6B:67:31:2E:38:54:D6:C4:27:59:FE:B4:3D:28:7C:D5:DC:F6:F1:1E"}}},"request":{"raw":"GET /menu/svg/icons/a2a.js HTTP/1.1\r\nHost: static.addtoany.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://iw63v.crqeraf.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncf-cache-status: REVALIDATED\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: application/javascript\r\npriority: u=3,i=?0\r\naccess-control-allow-origin: *\r\ncache-control: max-age=7776000, stale-while-revalidate=30, public\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Tyy46nDjCtSsrJELDKzLybvhQE7e3yysFm6s7z1teiz9IBQaaJPAKROVg6YrU4JizK8muvuwjSUwSDMEfPmlVrBoycRM7zfbn%2BJXllPJLw%3D%3D\"}]}\r\netag: W/\"0aca4ea1e5f8f250126a8e0c597dd969\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ndate: Tue, 23 Dec 2025 14:29:57 GMT\r\ncf-ray: 9b288ddd2a0a569f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":182,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with no line terminators","md5":"baf0595a19bdc7f7497b74731d2166c4","sha1":"fd5714384c52fc0338083574434d12328313896c","sha256":"3dab93242ee573bbcfc22c9d15acd47794e500ed44e6bd48a35400b39d65aa43","sha512":"da0e15a709b3d043e8cd9e4f97cf70d8c1addc2a7d90b6bb11d71cd72aba9133e5b9388528691cf6a354a6aaa346045f64d82b947883057471e1f1a2fdbd1901","ssdeep":"","tlshash":"74c01291501575418c1342fb475e500b167120bd015c14ca36a881f9595613f8c42fc3","first_seen":"2023-03-08T14:25:33Z","last_seen":"2026-04-03T18:42:08.443451Z","times_seen":13468,"resource_available":true,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pic.wdsrie.cn/upload_01/upload/20251204/2025120416571018633.gif","fqdn":"pic.wdsrie.cn","domain":"wdsrie.cn","tld":"cn"},"ip":{"addr":"43.152.140.79","port":443,"asn":139341,"as":"ACE","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://iw63v.crqeraf.xyz/archives/65129/","date":"2025-12-23T14:29:57.761Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.wdsrie.cn","organization":""},"issuer":{"commonName":"ZeroSSL ECC Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Sat, 20 Dec 2025 00:00:00 GMT","end":"Fri, 20 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E9:73:86:E2:44:76:13:6D:6B:AE:EE:E0:BA:B0:C0:68:B0:97:37:B8","sha256":"B9:DF:B5:64:69:80:D3:48:0B:F1:C2:39:96:52:89:9A:DE:23:24:F8:50:8B:E3:B3:38:A6:99:51:B3:9A:55:5E"}}},"request":{"raw":"GET /upload_01/upload/20251204/2025120416571018633.gif HTTP/1.1\r\nHost: pic.wdsrie.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://iw63v.crqeraf.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Thu, 04 Dec 2025 08:57:18 GMT\r\nEtag: \"1379ef9a75f958d6219a15385348cf9f\"\r\nContent-Type: binary/octet-stream\r\nDate: Thu, 04 Dec 2025 09:04:15 GMT\r\nx-amz-server-side-encryption: AES256\r\nServer: nginx\r\nX-Cache: Miss from cloudfront\r\nX-Amz-Cf-Pop: ARN53-P2\r\nContent-Length: 268320\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 7608700178389461973\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\nAccess-Control-Allow-Origin: *\r\nCache-Control: max-age=864000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":268320,"size_decoded":0,"mime_type":"binary/octet-stream","magic":"data","md5":"1379ef9a75f958d6219a15385348cf9f","sha1":"590d2d09003957d752dd1c5f4b82a05ef8cd3d14","sha256":"0ee9a4fa7f90262060f6c01723d672234d026790783b3da1cd23bcd334d07be4","sha512":"9017a8283f6c7b5a5f3df6bea1854a81b128ab6d48cbb025c2564d3f4997e8eae6c718c55e4ad17034058197239d85d07ae06bce446f36bb85248e932c96f382","ssdeep":"6144:u7a3kBi+dsnllR/nM2Pgm3BlsOEM9s9aLUrB31tzpw0Y:ZUwnlHfM2ImxlsOf9s9Lrdpwp","tlshash":"a844232001a4d735b0b997d417a22a50517dcde38e5ee3e3a7bb05abb203ff09943d5a","first_seen":"2025-12-04T09:16:30.201387Z","last_seen":"2026-04-03T18:18:51.489417Z","times_seen":5638,"resource_available":false,"data":null}},"time_used":890,"timings":{"blocked":858,"dns":0,"connect":0,"send":0,"wait":9,"receive":23,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pic.wdsrie.cn/upload/upload/20240112/2024011215480474801.png","fqdn":"pic.wdsrie.cn","domain":"wdsrie.cn","tld":"cn"},"ip":{"addr":"43.152.140.79","port":443,"asn":139341,"as":"ACE","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://iw63v.crqeraf.xyz/archives/65129/","date":"2025-12-23T14:29:56.882Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.wdsrie.cn","organization":""},"issuer":{"commonName":"ZeroSSL ECC Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Sat, 20 Dec 2025 00:00:00 GMT","end":"Fri, 20 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E9:73:86:E2:44:76:13:6D:6B:AE:EE:E0:BA:B0:C0:68:B0:97:37:B8","sha256":"B9:DF:B5:64:69:80:D3:48:0B:F1:C2:39:96:52:89:9A:DE:23:24:F8:50:8B:E3:B3:38:A6:99:51:B3:9A:55:5E"}}},"request":{"raw":"GET /upload/upload/20240112/2024011215480474801.png HTTP/1.1\r\nHost: pic.wdsrie.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://iw63v.crqeraf.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Fri, 12 Jan 2024 07:48:16 GMT\r\nEtag: \"75dbc208e43e531be717c6d04b33a04c\"\r\nContent-Type: binary/octet-stream\r\nDate: Sat, 26 Jul 2025 05:48:42 GMT\r\nx-amz-server-side-encryption: AES256\r\nServer: nginx\r\nX-Cache: Hit from cloudfront\r\nX-Amz-Cf-Pop: ARN53-P2\r\nAge: 20111\r\nVary: Origin\r\nContent-Length: 1168\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 17949764121013980975\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\nAccess-Control-Allow-Origin: *\r\nCache-Control: max-age=864000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1168,"size_decoded":0,"mime_type":"binary/octet-stream","magic":"data","md5":"75dbc208e43e531be717c6d04b33a04c","sha1":"7747676669308abf2dd23269f3e712419c73cb81","sha256":"1973c2b4643dc0748d37d41b5037e185d7e7edc8953d97a521214f0ec7cf3a0b","sha512":"3f8d8cdbdec3443997fedc27a62b82614e407f0e8af78ad013f1300ffa35ec94251094d02a6a67e064fc27801c946b1d34b9caaf740954b1b87978b997667425","ssdeep":"","tlshash":"b2210a24b15ddd0bd209969a3b958a6361c5a4b20b148e2f2eb61f823d7958c2052b4d","first_seen":"2024-04-20T21:23:38Z","last_seen":"2026-04-03T18:43:45.441457Z","times_seen":7794,"resource_available":false,"data":null}},"time_used":183,"timings":{"blocked":160,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pic.wdsrie.cn/upload_01/upload/20250828/2025082822563528203.png","fqdn":"pic.wdsrie.cn","domain":"wdsrie.cn","tld":"cn"},"ip":{"addr":"43.152.140.79","port":443,"asn":139341,"as":"ACE","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://iw63v.crqeraf.xyz/archives/65129/","date":"2025-12-23T14:29:57.672Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.wdsrie.cn","organization":""},"issuer":{"commonName":"ZeroSSL ECC Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Sat, 20 Dec 2025 00:00:00 GMT","end":"Fri, 20 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E9:73:86:E2:44:76:13:6D:6B:AE:EE:E0:BA:B0:C0:68:B0:97:37:B8","sha256":"B9:DF:B5:64:69:80:D3:48:0B:F1:C2:39:96:52:89:9A:DE:23:24:F8:50:8B:E3:B3:38:A6:99:51:B3:9A:55:5E"}}},"request":{"raw":"GET /upload_01/upload/20250828/2025082822563528203.png HTTP/1.1\r\nHost: pic.wdsrie.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://iw63v.crqeraf.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Thu, 28 Aug 2025 14:58:46 GMT\r\nEtag: \"7c51c290ab457f15f0df04aed3cbc6fe\"\r\nContent-Type: binary/octet-stream\r\nDate: Thu, 28 Aug 2025 14:58:46 GMT\r\nx-amz-server-side-encryption: AES256\r\nServer: nginx\r\nX-Cache: Hit from cloudfront\r\nX-Amz-Cf-Pop: ARN53-P2\r\nAge: 63\r\nContent-Length: 302576\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 15393216674316902503\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\nAccess-Control-Allow-Origin: *\r\nCache-Control: max-age=864000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":302576,"size_decoded":0,"mime_type":"binary/octet-stream","magic":"data","md5":"7c51c290ab457f15f0df04aed3cbc6fe","sha1":"bff3d8b692e9bd5400efbe9a57d5cb3a801cf397","sha256":"532e212a25af919ea19fdf12261b845d29b3e8e77c42c45301ad8d85323c33e2","sha512":"2f1b3bea006127fdae8e52d0214dc3215f9d39b331f18f218354b617bbee6ad7557988ff55bd42c96a4c59f723c11992d8d8a8deedb3d529acd54a301d4c0691","ssdeep":"6144:IvRp2aLRyUDW+ClXlxMsz1rybDL26vxD+Xpe7dWaXPHKRexJrxL1JOqQB:I9Rb6+C3xMsz18X26vxD+ElPH/rxL1e","tlshash":"47542334ad8320e2287709970027876da59507927e98d8eceea5c6cf6b7357fc14e378","first_seen":"2025-08-29T10:40:28.999814Z","last_seen":"2026-04-03T18:29:47.558739Z","times_seen":6483,"resource_available":false,"data":null}},"time_used":860,"timings":{"blocked":842,"dns":0,"connect":0,"send":0,"wait":9,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pic.wdsrie.cn/upload_01/upload/20251211/2025121115093181542.gif","fqdn":"pic.wdsrie.cn","domain":"wdsrie.cn","tld":"cn"},"ip":{"addr":"43.152.140.79","port":443,"asn":139341,"as":"ACE","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://iw63v.crqeraf.xyz/archives/65129/","date":"2025-12-23T14:29:57.747Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.wdsrie.cn","organization":""},"issuer":{"commonName":"ZeroSSL ECC Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Sat, 20 Dec 2025 00:00:00 GMT","end":"Fri, 20 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E9:73:86:E2:44:76:13:6D:6B:AE:EE:E0:BA:B0:C0:68:B0:97:37:B8","sha256":"B9:DF:B5:64:69:80:D3:48:0B:F1:C2:39:96:52:89:9A:DE:23:24:F8:50:8B:E3:B3:38:A6:99:51:B3:9A:55:5E"}}},"request":{"raw":"GET /upload_01/upload/20251211/2025121115093181542.gif HTTP/1.1\r\nHost: pic.wdsrie.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://iw63v.crqeraf.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Thu, 11 Dec 2025 07:09:43 GMT\r\nEtag: \"53df420248a040ac2e5fe733bfdd0fc9\"\r\nContent-Type: binary/octet-stream\r\nDate: Thu, 11 Dec 2025 07:09:54 GMT\r\nx-amz-server-side-encryption: AES256\r\nServer: nginx\r\nX-Cache: Hit from cloudfront\r\nX-Amz-Cf-Pop: ARN53-P2\r\nAge: 334\r\nContent-Length: 258944\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 8255324003283216506\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\nAccess-Control-Allow-Origin: *\r\nCache-Control: max-age=864000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":258944,"size_decoded":0,"mime_type":"binary/octet-stream","magic":"data","md5":"53df420248a040ac2e5fe733bfdd0fc9","sha1":"61ea674b49360e10c6e52ae87f9cf074256c213d","sha256":"b4aa73dc78126e02b5d0234e9fd101e14f4caafef15762ccecf616e0a52fe97e","sha512":"9dc7e4c7a9cfa94986092f20e609b2f69ac2de304d96f7bb73c53556c880ffd285ebaa5323f1608a4c1b66d7122bac273ab208f9f15b94fd0acf8581f9222b69","ssdeep":"6144:+XhJDvhsAPUNlmTDbM4A9sXxV6lCsoKtLyEx52LGviDgpQZn9zpT:+XhJDJsAT1isfHsBtLyExmGKDg0lx","tlshash":"7944227ace169b21eb16590ffd91ca45a4aaf8117c275ff49c2078dd3b335863182a22","first_seen":"2025-12-11T12:22:55.527843Z","last_seen":"2026-02-03T00:55:20.254544Z","times_seen":2133,"resource_available":false,"data":null}},"time_used":853,"timings":{"blocked":831,"dns":0,"connect":0,"send":0,"wait":15,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pic.wdsrie.cn/upload_01/upload/20250317/2025031711410298732.png","fqdn":"pic.wdsrie.cn","domain":"wdsrie.cn","tld":"cn"},"ip":{"addr":"43.152.140.79","port":443,"asn":139341,"as":"ACE","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://iw63v.crqeraf.xyz/archives/65129/","date":"2025-12-23T14:29:57.772Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.wdsrie.cn","organization":""},"issuer":{"commonName":"ZeroSSL ECC Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Sat, 20 Dec 2025 00:00:00 GMT","end":"Fri, 20 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E9:73:86:E2:44:76:13:6D:6B:AE:EE:E0:BA:B0:C0:68:B0:97:37:B8","sha256":"B9:DF:B5:64:69:80:D3:48:0B:F1:C2:39:96:52:89:9A:DE:23:24:F8:50:8B:E3:B3:38:A6:99:51:B3:9A:55:5E"}}},"request":{"raw":"GET /upload_01/upload/20250317/2025031711410298732.png HTTP/1.1\r\nHost: pic.wdsrie.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://iw63v.crqeraf.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Mon, 17 Mar 2025 03:42:06 GMT\r\nEtag: \"5c7fa7a987c8fc5e4e10cfe0468df262\"\r\nContent-Type: binary/octet-stream\r\nDate: Sat, 26 Jul 2025 11:19:17 GMT\r\nx-amz-server-side-encryption: AES256\r\nServer: nginx\r\nX-Cache: Hit from cloudfront\r\nX-Amz-Cf-Pop: ARN53-P2\r\nAge: 350\r\nContent-Length: 2352\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 4564814246733649847\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\nAccess-Control-Allow-Origin: *\r\nCache-Control: max-age=864000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2352,"size_decoded":0,"mime_type":"binary/octet-stream","magic":"data","md5":"5c7fa7a987c8fc5e4e10cfe0468df262","sha1":"dc33ed306966aa35da6d50bdc5b1a2786cf75f38","sha256":"a0b6e205dee0a4572d8854a4bb675e3a082b653e8c5b53186e43cc21dd10a6de","sha512":"9825db26833525bce8507c508ef40697b93e91e4ad588d7cb643f52404083c28f088955eafe12140b0e2acbe7f407097aa7322c45623a03d016332517fc16d6b","ssdeep":"","tlshash":"d0413a6607af4520f7eb8baa7d497583445c8458ac13c06907d4d4e68a66f87386f13c","first_seen":"2025-04-01T23:24:40.503072Z","last_seen":"2026-03-31T15:58:10.185644Z","times_seen":7248,"resource_available":false,"data":null}},"time_used":920,"timings":{"blocked":910,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"iw63v.crqeraf.xyz/static/web/js/swiper-bundle.min.js?v=20251130","fqdn":"iw63v.crqeraf.xyz","domain":"crqeraf.xyz","tld":"xyz"},"ip":{"addr":"154.207.127.39","port":443,"asn":0,"as":"","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://iw63v.crqeraf.xyz/archives/65129/","date":"2025-12-23T14:29:55.951Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"crqeraf.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 12 Dec 2025 08:17:25 GMT","end":"Thu, 12 Mar 2026 09:15:12 GMT"},"fingerprint":{"sha1":"9A:B6:D6:FC:9F:B5:E4:7C:4E:60:81:74:C5:1D:1F:16:43:65:9B:C0","sha256":"6B:D5:92:C2:2E:E8:B1:3D:EE:9E:2C:51:0B:D3:32:29:71:17:1E:3D:93:07:59:A9:C9:59:7C:A8:D8:9B:2B:8C"}}},"request":{"raw":"GET /static/web/js/swiper-bundle.min.js?v=20251130 HTTP/1.1\r\nHost: iw63v.crqeraf.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://iw63v.crqeraf.xyz/archives/65129/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 23 Dec 2025 14:29:55 GMT\r\ncontent-type: application/javascript\r\npriority: u=2,i=?0\r\nserver: cloudflare\r\nlast-modified: Sat, 13 Sep 2025 03:47:28 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68c4e950-224b9\"\r\nexpires: Tue, 30 Dec 2025 07:16:35 GMT\r\ncache-control: public, max-age=604800, immutable\r\ncontent-encoding: gzip\r\nage: 25999\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uyyWmQMvZdTuZRYXqGsZ42egt6ONHVQLKNIxNC%2BG10OYN78rjSibCV%2FJPbS5yiLvd8%2BSNR7%2FLoLDrGnTfW%2FGK5MCvEmeXs04JY3y2LnuKw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b288dd03af756b4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":140473,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65282)","md5":"bf0bdee342a150be9f608675c633ea8e","sha1":"ad1249dddb72ec8cb484a21fe5493350c89d4bbb","sha256":"ea2e18082a39582abd6916f37366b1139f4eb44fcfb28f63ac30028c15914f54","sha512":"8a62f319fc028e8e87910012f6853c88d229d3190c08410eb58c684ecac106a0099a9804a9fd6528d0f12f6697b2b3dbf12b1ebca84c19f057ad1f4400cc7be6","ssdeep":"3072:QJVnjuHkOVtuD6poy9v8cnWDkwV4y+6GEcTYEfBxK/MxD:QJVniHkOVtuD6pl9v8cnWDpV4y+6GTcC","tlshash":"bfd3f8997320b1a552e3268b92a9c611e3b51400b409c4e871bd4c9b6d7e99c13ffffe","first_seen":"2023-03-11T22:22:43Z","last_seen":"2026-04-03T18:43:45.455252Z","times_seen":7504,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-23","alert":"Sinkholed","trigger":"iw63v.crqeraf.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pic.wdsrie.cn/upload/upload/20231020/2023102016440265613.png","fqdn":"pic.wdsrie.cn","domain":"wdsrie.cn","tld":"cn"},"ip":{"addr":"43.152.140.79","port":443,"asn":139341,"as":"ACE","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://iw63v.crqeraf.xyz/archives/65129/","date":"2025-12-23T14:29:56.931Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.wdsrie.cn","organization":""},"issuer":{"commonName":"ZeroSSL ECC Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Sat, 20 Dec 2025 00:00:00 GMT","end":"Fri, 20 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E9:73:86:E2:44:76:13:6D:6B:AE:EE:E0:BA:B0:C0:68:B0:97:37:B8","sha256":"B9:DF:B5:64:69:80:D3:48:0B:F1:C2:39:96:52:89:9A:DE:23:24:F8:50:8B:E3:B3:38:A6:99:51:B3:9A:55:5E"}}},"request":{"raw":"GET /upload/upload/20231020/2023102016440265613.png HTTP/1.1\r\nHost: pic.wdsrie.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://iw63v.crqeraf.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Thu, 28 Dec 2023 12:24:12 GMT\r\nEtag: \"137d00c2e761b68c96bb2926cc42942c\"\r\nContent-Type: binary/octet-stream\r\nDate: Sat, 26 Jul 2025 01:30:21 GMT\r\nx-amz-server-side-encryption: AES256\r\nServer: nginx\r\nX-Cache: Hit from cloudfront\r\nX-Amz-Cf-Pop: ARN53-P2\r\nAge: 35526\r\nContent-Length: 832\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 3114658664140423517\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\nAccess-Control-Allow-Origin: *\r\nCache-Control: max-age=864000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":832,"size_decoded":0,"mime_type":"binary/octet-stream","magic":"data","md5":"137d00c2e761b68c96bb2926cc42942c","sha1":"8ba008b26c2fdc17a771043b3f87db15cd71994f","sha256":"e63cd7ec812b243dcafb8b5f6fe0489eefafe6ead6556ca8a8877d85a428aff3","sha512":"8a991b2ed48d476161620444e942738b35c946e8df5169001bc87c7fd02a79df4192d3ffdcab91c79afa72f039482fdec904fa863c8b9f77e6d1163cc7bf3f31","ssdeep":"","tlshash":"d00186024e8319898c5fabab1d4dda854da77eead19c1010f642b803978712eb96937d","first_seen":"2023-11-14T11:24:50Z","last_seen":"2026-04-03T18:43:45.442921Z","times_seen":7527,"resource_available":false,"data":null}},"time_used":155,"timings":{"blocked":146,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.addtoany.com/menu/svg/icons/facebook.js","fqdn":"static.addtoany.com","domain":"addtoany.com","tld":"com"},"ip":{"addr":"172.66.171.172","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://iw63v.crqeraf.xyz/archives/65129/","date":"2025-12-23T14:29:58.013Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"static.addtoany.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Dec 2025 13:28:50 GMT","end":"Sun, 22 Mar 2026 14:28:48 GMT"},"fingerprint":{"sha1":"83:E4:54:72:9E:E9:BE:F0:31:A0:E0:3B:5B:38:1D:25:57:6A:CE:67","sha256":"C2:A2:4F:7E:8C:0F:A8:AA:86:24:03:7D:6B:67:31:2E:38:54:D6:C4:27:59:FE:B4:3D:28:7C:D5:DC:F6:F1:1E"}}},"request":{"raw":"GET /menu/svg/icons/facebook.js HTTP/1.1\r\nHost: static.addtoany.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://iw63v.crqeraf.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncf-cache-status: REVALIDATED\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: application/javascript\r\npriority: u=3,i=?0\r\naccess-control-allow-origin: *\r\ncache-control: max-age=7776000, stale-while-revalidate=30, public\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uZLIrANKggK0kCUsmLNa3Gfw2YIDjTX%2FLcsBwPojp92ofRNVrSiec0wIKvQWpNcUV%2BickuFcuRAP7UnYRojucCM8bzL4AGJVifWqm9%2F8NVIm\"}]}\r\netag: W/\"68925fa8e347041c6006837e73c518bc\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ndate: Tue, 23 Dec 2025 14:29:57 GMT\r\ncf-ray: 9b288ddd2a0b569f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":429,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (429), with no line terminators","md5":"014bcc757e484e12e3aea6c9d768fd4b","sha1":"4c17157d0012f8002e4e6cf77c5f4a9747792cf4","sha256":"4b475960843a5619b907af1f0a89e3136bd5e6a4a700ec78cb417f302647cf49","sha512":"b00fab0ce2e56b56c18e0dc54ac3329d77fc18096e63bc2aef34342770f40dac91c10f7a8a9db1dcc5ce42fbafe637fcb1fdd51994ef937aa00923375476d467","ssdeep":"","tlshash":"dae0ab951236d9864d51093ec71fa48fb3b0b67fa1d8298006bc80b289d20fd3e0ba03","first_seen":"2024-04-12T16:11:44Z","last_seen":"2026-04-03T18:42:08.415222Z","times_seen":15747,"resource_available":true,"data":null}},"time_used":78,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":66,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"iw63v.crqeraf.xyz/static/pc/img/icon-slider-close.png","fqdn":"iw63v.crqeraf.xyz","domain":"crqeraf.xyz","tld":"xyz"},"ip":{"addr":"154.207.127.39","port":443,"asn":0,"as":"","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://iw63v.crqeraf.xyz/archives/65129/","date":"2025-12-23T14:29:56.127Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"crqeraf.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 12 Dec 2025 08:17:25 GMT","end":"Thu, 12 Mar 2026 09:15:12 GMT"},"fingerprint":{"sha1":"9A:B6:D6:FC:9F:B5:E4:7C:4E:60:81:74:C5:1D:1F:16:43:65:9B:C0","sha256":"6B:D5:92:C2:2E:E8:B1:3D:EE:9E:2C:51:0B:D3:32:29:71:17:1E:3D:93:07:59:A9:C9:59:7C:A8:D8:9B:2B:8C"}}},"request":{"raw":"GET /static/pc/img/icon-slider-close.png HTTP/1.1\r\nHost: iw63v.crqeraf.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://iw63v.crqeraf.xyz/archives/65129/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 23 Dec 2025 14:29:55 GMT\r\ncontent-type: image/png\r\ncontent-length: 670\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\nlast-modified: Sat, 13 Sep 2025 03:47:28 GMT\r\netag: \"68c4e950-29e\"\r\nexpires: Mon, 29 Dec 2025 07:49:08 GMT\r\ncache-control: public, max-age=604800, immutable\r\naccept-ranges: bytes\r\nage: 110447\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EApoFfVVNsRjaLMqJu5bKQa%2BThQbO3YIlj%2B4z8pF7GEom0z5x431rDCJKfSqlmOBFyUC%2FkCpQOGh6Yx2N0bIP7RxsMfXI7U0pX9CzGUiWg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b288dd0ab7556b4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":670,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 90 x 90, 8-bit colormap, non-interlaced","md5":"41212a21e9e701d94f805b99bc71ae64","sha1":"ffca88ca47af657594de58301721ce9d39e32936","sha256":"d036948220b3814376ae5a1be010de678850b62424eb1d6a77947c5ce211d71a","sha512":"c93d1438e09861adcc834a606984b463544620ce1bf7b609f2eae69e7bd34c2554385e56bf354c9ab4a0ad2574e128d34a437d8cfa22bc6bb5040ed435cc06a9","ssdeep":"","tlshash":"b9018322f30e580cebec81f14d6605d0f176e1143455628ee981842356c294641d1804","first_seen":"2025-08-20T08:52:45.242419Z","last_seen":"2026-04-03T18:29:47.520672Z","times_seen":4474,"resource_available":false,"data":null}},"time_used":38,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":38,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-23","alert":"Sinkholed","trigger":"iw63v.crqeraf.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-SY99S66RFE\u0026l=dataLayer\u0026cx=c\u0026gtm=45je54p1v9218846652za204\u0026tag_exp=102887800~103051953~103077950~103106314~103106316~103116026~103200004","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.251.38.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://iw63v.crqeraf.xyz/archives/65129/","date":"2025-12-23T14:29:56.497Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:49:27 GMT","end":"Wed, 25 Feb 2026 15:49:26 GMT"},"fingerprint":{"sha1":"2C:B9:1B:62:2A:F9:04:B9:16:E2:30:B0:A8:B2:85:0C:68:BC:79:25","sha256":"AE:CB:A0:2C:92:1E:CB:D2:CB:6C:0D:37:5E:A2:4E:27:AE:4E:CA:0C:EC:53:D5:50:E6:C1:3D:EB:17:C1:F2:C9"}}},"request":{"raw":"GET /gtag/js?id=G-SY99S66RFE\u0026l=dataLayer\u0026cx=c\u0026gtm=45je54p1v9218846652za204\u0026tag_exp=102887800~103051953~103077950~103106314~103106316~103116026~103200004 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Tue, 23 Dec 2025 14:29:56 GMT\r\nexpires: Tue, 23 Dec 2025 14:29:56 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 143340\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":433258,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (6031)","md5":"88a5300a6bdcef12b0053145af8bce47","sha1":"07e1adde074a4aac73ddcf2558c682ba32100c43","sha256":"e4fed851a49aa8a621a93d15dc64d98c736a12a65012cb1a633abe7098a4bb9c","sha512":"e61b18e4e889002a16fa6c3a674da0f5cd3086a954bf0b95533c117abf859f869e932c331218e775114995ea6f60d76585b37105e0d4cac577db8d467b68af73","ssdeep":"6144:4vIe7ma2bulKY/1u99xHDmHYmyBFzvnsyRO6jJWoNPad4FpC1xY:NC8bu7/1mbrnsy39WbMpb","tlshash":"62941ace73d674269396e078503f118ba57b29e2b45cc896f189cce02d74a9a4237f7c","first_seen":"2025-12-23T08:10:49.319644Z","last_seen":"2025-12-24T07:46:54.953479Z","times_seen":35,"resource_available":true,"data":null}},"time_used":51,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":14,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pic.wdsrie.cn/upload/upload/20240529/2024052917433386651.png","fqdn":"pic.wdsrie.cn","domain":"wdsrie.cn","tld":"cn"},"ip":{"addr":"43.152.140.79","port":443,"asn":139341,"as":"ACE","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://iw63v.crqeraf.xyz/archives/65129/","date":"2025-12-23T14:29:56.749Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.wdsrie.cn","organization":""},"issuer":{"commonName":"ZeroSSL ECC Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Sat, 20 Dec 2025 00:00:00 GMT","end":"Fri, 20 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E9:73:86:E2:44:76:13:6D:6B:AE:EE:E0:BA:B0:C0:68:B0:97:37:B8","sha256":"B9:DF:B5:64:69:80:D3:48:0B:F1:C2:39:96:52:89:9A:DE:23:24:F8:50:8B:E3:B3:38:A6:99:51:B3:9A:55:5E"}}},"request":{"raw":"GET /upload/upload/20240529/2024052917433386651.png HTTP/1.1\r\nHost: pic.wdsrie.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://iw63v.crqeraf.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Wed, 29 May 2024 09:43:48 GMT\r\nEtag: \"0ae95fe87841d9aa24b34baf5fe63047\"\r\nContent-Type: binary/octet-stream\r\nDate: Fri, 10 Oct 2025 00:48:13 GMT\r\nx-amz-server-side-encryption: AES256\r\nServer: nginx\r\nX-Cache: Hit from cloudfront\r\nX-Amz-Cf-Pop: ARN53-P2\r\nAge: 6143\r\nContent-Length: 2784\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 18047953190993400605\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\nAccess-Control-Allow-Origin: *\r\nCache-Control: max-age=864000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2784,"size_decoded":0,"mime_type":"binary/octet-stream","magic":"data","md5":"0ae95fe87841d9aa24b34baf5fe63047","sha1":"434c38eb28e372174b513b2f55b4396ad558d73a","sha256":"752393349289dbabad2ccf35567eec143967b03d799334ec2a65932cec8875ae","sha512":"c1fb64c5cc7a7740b0b168f062e8c5a2ee8c2d273aa6157cc7d3bd5e70d7551e9c00ec901d51c2dde76e28e572e600a407b989d21231a59ad2da5c512b216a2f","ssdeep":"","tlshash":"ea513d2b6842be8127481725f705f30d3ff0d010661fd314ead48bc286197d9e266a40","first_seen":"2023-11-14T11:24:50Z","last_seen":"2026-04-03T18:43:45.367936Z","times_seen":7795,"resource_available":false,"data":null}},"time_used":608,"timings":{"blocked":277,"dns":1,"connect":20,"send":0,"wait":22,"receive":1,"ssl":283},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"iw63v.crqeraf.xyz/static/common/image.0821.js?v=20251130","fqdn":"iw63v.crqeraf.xyz","domain":"crqeraf.xyz","tld":"xyz"},"ip":{"addr":"154.207.127.39","port":443,"asn":0,"as":"","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://iw63v.crqeraf.xyz/archives/65129/","date":"2025-12-23T14:29:56.078Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"crqeraf.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 12 Dec 2025 08:17:25 GMT","end":"Thu, 12 Mar 2026 09:15:12 GMT"},"fingerprint":{"sha1":"9A:B6:D6:FC:9F:B5:E4:7C:4E:60:81:74:C5:1D:1F:16:43:65:9B:C0","sha256":"6B:D5:92:C2:2E:E8:B1:3D:EE:9E:2C:51:0B:D3:32:29:71:17:1E:3D:93:07:59:A9:C9:59:7C:A8:D8:9B:2B:8C"}}},"request":{"raw":"GET /static/common/image.0821.js?v=20251130 HTTP/1.1\r\nHost: iw63v.crqeraf.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://iw63v.crqeraf.xyz/archives/65129/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 23 Dec 2025 14:29:55 GMT\r\ncontent-type: application/javascript\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\nlast-modified: Thu, 20 Nov 2025 11:34:35 GMT\r\nvary: Accept-Encoding\r\netag: W/\"691efccb-44cef\"\r\nexpires: Tue, 30 Dec 2025 07:16:36 GMT\r\ncache-control: public, max-age=604800, immutable\r\ncontent-encoding: gzip\r\nage: 25999\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Katv5389gfMWdaQpt%2BqknJTw%2FWd11%2Brun6g1OuoMzT049j%2BxebMdu6tGC42kGbtUYJA%2FCVyO%2FiVdgyCXNXWOZCgOA6bkMPaV9xyJ%2FVG6tw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b288dd0ab6856b4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":281839,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (3225)","md5":"1a63af57115591ecbc72b6d13cdb0798","sha1":"848a9b64f901a274d3168980bad7bf686d59fb31","sha256":"91ece2e8e252afdc022a55919c197e9dfaf26634fe8dd2a3e9efd88ad97c465a","sha512":"f0324941230b4b59920ae5a57adb66ffa109b5d2d9a1aee9823bc72f30766dfe30a9a7fbc00372c271f7ebfb871ffb0ee2865d481d0f12ec2260600800585627","ssdeep":"3072:avPEc86vFuSdDxBnHpaFfoONpIhgkuvFOy9jxhnHpa9/IuNpoBAEPtAu:avPELqpQk+p4EPV","tlshash":"1454104a9fe31194f513b43c6b3f7805a1e6b0275ad9dc0e791ca9e0cf294288579bec","first_seen":"2025-09-25T05:47:52.46339Z","last_seen":"2026-04-03T18:41:28.576721Z","times_seen":7798,"resource_available":true,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-23","alert":"Sinkholed","trigger":"iw63v.crqeraf.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pic.wdsrie.cn/upload/upload/20231020/2023102011215359947.png","fqdn":"pic.wdsrie.cn","domain":"wdsrie.cn","tld":"cn"},"ip":{"addr":"43.152.140.79","port":443,"asn":139341,"as":"ACE","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://iw63v.crqeraf.xyz/archives/65129/","date":"2025-12-23T14:29:56.840Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.wdsrie.cn","organization":""},"issuer":{"commonName":"ZeroSSL ECC Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Sat, 20 Dec 2025 00:00:00 GMT","end":"Fri, 20 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E9:73:86:E2:44:76:13:6D:6B:AE:EE:E0:BA:B0:C0:68:B0:97:37:B8","sha256":"B9:DF:B5:64:69:80:D3:48:0B:F1:C2:39:96:52:89:9A:DE:23:24:F8:50:8B:E3:B3:38:A6:99:51:B3:9A:55:5E"}}},"request":{"raw":"GET /upload/upload/20231020/2023102011215359947.png HTTP/1.1\r\nHost: pic.wdsrie.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://iw63v.crqeraf.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Thu, 28 Dec 2023 12:24:12 GMT\r\nEtag: \"8282ecdc128a3537eca75915e947d4e3\"\r\nContent-Type: binary/octet-stream\r\nDate: Fri, 25 Jul 2025 12:36:35 GMT\r\nx-amz-server-side-encryption: AES256\r\nServer: nginx\r\nX-Cache: Hit from cloudfront\r\nX-Amz-Cf-Pop: ARN53-P2\r\nAge: 82038\r\nVary: Origin\r\nContent-Length: 960\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 12724107185511948948\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\nAccess-Control-Allow-Origin: *\r\nCache-Control: max-age=864000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":960,"size_decoded":0,"mime_type":"binary/octet-stream","magic":"data","md5":"8282ecdc128a3537eca75915e947d4e3","sha1":"cd0a55c7123fe016ded41ad18e4f50cf59ea76d7","sha256":"a251ef162b4f54df93fd2ef52192354d4989e850aef684354984c6e6ee1de7c1","sha512":"b18a5fb241f02e77a3b62c6bc766e4dd11c6a3cc74961de317da4ae6080960ede64f0b05c44d24824d8acd30c37221728bcd89db8ee099491c79998beb94c8bf","ssdeep":"","tlshash":"4711c89be9e5e1c8100af04ce56f4273c620bfde868ae42c36c611079741613aef8c3a","first_seen":"2023-11-14T11:24:50Z","last_seen":"2026-04-03T18:43:45.422127Z","times_seen":7795,"resource_available":false,"data":null}},"time_used":191,"timings":{"blocked":182,"dns":0,"connect":0,"send":0,"wait":8,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pic.wdsrie.cn/upload_01/upload/20251215/2025121510150110466.gif","fqdn":"pic.wdsrie.cn","domain":"wdsrie.cn","tld":"cn"},"ip":{"addr":"43.152.140.79","port":443,"asn":139341,"as":"ACE","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://iw63v.crqeraf.xyz/archives/65129/","date":"2025-12-23T14:29:57.721Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.wdsrie.cn","organization":""},"issuer":{"commonName":"ZeroSSL ECC Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Sat, 20 Dec 2025 00:00:00 GMT","end":"Fri, 20 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E9:73:86:E2:44:76:13:6D:6B:AE:EE:E0:BA:B0:C0:68:B0:97:37:B8","sha256":"B9:DF:B5:64:69:80:D3:48:0B:F1:C2:39:96:52:89:9A:DE:23:24:F8:50:8B:E3:B3:38:A6:99:51:B3:9A:55:5E"}}},"request":{"raw":"GET /upload_01/upload/20251215/2025121510150110466.gif HTTP/1.1\r\nHost: pic.wdsrie.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://iw63v.crqeraf.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Mon, 15 Dec 2025 02:15:18 GMT\r\nEtag: \"3429717f3bcc00ad960badce2606cbea\"\r\nContent-Type: binary/octet-stream\r\nDate: Mon, 15 Dec 2025 02:19:43 GMT\r\nx-amz-server-side-encryption: AES256\r\nServer: nginx\r\nX-Cache: Hit from cloudfront\r\nX-Amz-Cf-Pop: ARN53-P2\r\nAge: 182\r\nContent-Length: 255520\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 5575169220611074759\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\nAccess-Control-Allow-Origin: *\r\nCache-Control: max-age=864000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":255520,"size_decoded":0,"mime_type":"binary/octet-stream","magic":"data","md5":"3429717f3bcc00ad960badce2606cbea","sha1":"61237bd3e0b114cb1820cd7328c75271ee33dbcf","sha256":"a1d97a8a0a7a4961127d97401a4c8b3d9f528b1acd3db74efd2305ce3566c45a","sha512":"c588974c41dce4a1c09873c5b16f96354781e89d0f5f60bb6e6e26aeee121207dde04a63e7ebf393412e3e3635f2e6722b402f3cec3acc151af60b1eec6a7c7e","ssdeep":"6144:M5G5I+roEt08m6MwUmtmFXReNRICde78NL/huXF:x5mzmtuXRW2CKCtuV","tlshash":"8f44230e9343f2dd66a5be075de911ea34acb92e8881527fca11f4e731cdd80907936b","first_seen":"2025-12-16T02:09:18.463998Z","last_seen":"2026-01-04T05:55:55.150236Z","times_seen":211,"resource_available":false,"data":null}},"time_used":853,"timings":{"blocked":837,"dns":0,"connect":0,"send":0,"wait":8,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pic.wdsrie.cn/upload_01/upload/20251212/2025121212330697429.gif","fqdn":"pic.wdsrie.cn","domain":"wdsrie.cn","tld":"cn"},"ip":{"addr":"43.152.140.79","port":443,"asn":139341,"as":"ACE","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://iw63v.crqeraf.xyz/archives/65129/","date":"2025-12-23T14:29:57.915Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.wdsrie.cn","organization":""},"issuer":{"commonName":"ZeroSSL ECC Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Sat, 20 Dec 2025 00:00:00 GMT","end":"Fri, 20 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E9:73:86:E2:44:76:13:6D:6B:AE:EE:E0:BA:B0:C0:68:B0:97:37:B8","sha256":"B9:DF:B5:64:69:80:D3:48:0B:F1:C2:39:96:52:89:9A:DE:23:24:F8:50:8B:E3:B3:38:A6:99:51:B3:9A:55:5E"}}},"request":{"raw":"GET /upload_01/upload/20251212/2025121212330697429.gif HTTP/1.1\r\nHost: pic.wdsrie.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://iw63v.crqeraf.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Fri, 12 Dec 2025 04:33:16 GMT\r\nEtag: \"dc2ebe2d04698956b4171972a6dbf237\"\r\nContent-Type: binary/octet-stream\r\nDate: Fri, 12 Dec 2025 04:33:17 GMT\r\nx-amz-server-side-encryption: AES256\r\nServer: nginx\r\nX-Cache: Hit from cloudfront\r\nX-Amz-Cf-Pop: ARN53-P2\r\nAge: 76\r\nContent-Length: 942192\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 15791092476362065363\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\nAccess-Control-Allow-Origin: *\r\nCache-Control: max-age=864000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":942192,"size_decoded":0,"mime_type":"binary/octet-stream","magic":"data","md5":"dc2ebe2d04698956b4171972a6dbf237","sha1":"e451cdd244104ccb89c748899bf9c0db325477d6","sha256":"14e0d1f2b757f88279eab36b84e5f330be7a69294518620b6ba57d565c9ccff3","sha512":"701fa119b1101cc4bc15b5b72f5438101f5915fb2cbcb1ee3db7393236abac3ee88873cba539d7c2760de99443756bdb3fbc9098c524048141b35a455d84160c","ssdeep":"24576:bCuryZDy6OPupjFGY7u9geFjYSBein1sD:bC5ZG6OIcY6SQY9i1+","tlshash":"cd153374c8ed6183c6675e18820e8ec24db4a3b68b3f82665add5114dbae43d249f13f","first_seen":"2025-12-12T04:56:20.082554Z","last_seen":"2026-03-09T09:38:42.799692Z","times_seen":2192,"resource_available":false,"data":null}},"time_used":907,"timings":{"blocked":832,"dns":0,"connect":0,"send":0,"wait":24,"receive":51,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pic.wdsrie.cn/upload_01/upload/20250408/2025040815471699405.jpg","fqdn":"pic.wdsrie.cn","domain":"wdsrie.cn","tld":"cn"},"ip":{"addr":"43.152.140.79","port":443,"asn":139341,"as":"ACE","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://iw63v.crqeraf.xyz/archives/65129/","date":"2025-12-23T14:29:57.121Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.wdsrie.cn","organization":""},"issuer":{"commonName":"ZeroSSL ECC Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Sat, 20 Dec 2025 00:00:00 GMT","end":"Fri, 20 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E9:73:86:E2:44:76:13:6D:6B:AE:EE:E0:BA:B0:C0:68:B0:97:37:B8","sha256":"B9:DF:B5:64:69:80:D3:48:0B:F1:C2:39:96:52:89:9A:DE:23:24:F8:50:8B:E3:B3:38:A6:99:51:B3:9A:55:5E"}}},"request":{"raw":"GET /upload_01/upload/20250408/2025040815471699405.jpg HTTP/1.1\r\nHost: pic.wdsrie.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://iw63v.crqeraf.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Tue, 08 Apr 2025 09:23:48 GMT\r\nEtag: \"ada898735811f9f8c0a8a42bc528ea36\"\r\nContent-Type: binary/octet-stream\r\nDate: Thu, 10 Jul 2025 05:26:03 GMT\r\nx-amz-server-side-encryption: AES256\r\nServer: nginx\r\nX-Cache: Miss from cloudfront\r\nX-Amz-Cf-Pop: ARN53-P2\r\nContent-Length: 259344\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 17035203804719913125\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Refresh Hit\r\nAccess-Control-Allow-Origin: *\r\nCache-Control: max-age=864000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":259344,"size_decoded":0,"mime_type":"binary/octet-stream","magic":"data","md5":"ada898735811f9f8c0a8a42bc528ea36","sha1":"86edf3d9659475299191858026bdce89eb7b6373","sha256":"97bb70df583a451bd8a9e752ab8ab714006ed23e5e60b623aef94b91deb065c0","sha512":"3d23ad405ac22ad5cc0bdee0b58ae12a9eb2fa8081eee08735188e7b618b01e527b2587a15dd6eff2458afa9072a5ebb52d7760df2fc307c349ff80aa62cf5cb","ssdeep":"6144:XJPn8p9+/nVq8YDjtc0Qw74/lynczwTxEIKpMu:5P82/nV0D5joO6","tlshash":"c04423c0787b8ed7c29ad1a4c6e0ff6f1a652666715e1a7f311328a390db798067049c","first_seen":"2025-12-23T14:30:42.502353Z","last_seen":"2025-12-23T14:30:42.502353Z","times_seen":1,"resource_available":false,"data":null}},"time_used":623,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":575,"receive":48,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"iw63v.crqeraf.xyz/static/pc/js/clipboard.min.js?v=20251130","fqdn":"iw63v.crqeraf.xyz","domain":"crqeraf.xyz","tld":"xyz"},"ip":{"addr":"154.207.127.39","port":443,"asn":0,"as":"","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://iw63v.crqeraf.xyz/archives/65129/","date":"2025-12-23T14:29:56.002Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"crqeraf.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 12 Dec 2025 08:17:25 GMT","end":"Thu, 12 Mar 2026 09:15:12 GMT"},"fingerprint":{"sha1":"9A:B6:D6:FC:9F:B5:E4:7C:4E:60:81:74:C5:1D:1F:16:43:65:9B:C0","sha256":"6B:D5:92:C2:2E:E8:B1:3D:EE:9E:2C:51:0B:D3:32:29:71:17:1E:3D:93:07:59:A9:C9:59:7C:A8:D8:9B:2B:8C"}}},"request":{"raw":"GET /static/pc/js/clipboard.min.js?v=20251130 HTTP/1.1\r\nHost: iw63v.crqeraf.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://iw63v.crqeraf.xyz/archives/65129/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 23 Dec 2025 14:29:55 GMT\r\ncontent-type: application/javascript\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\nlast-modified: Sat, 13 Sep 2025 03:47:28 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68c4e950-2878\"\r\nexpires: Tue, 30 Dec 2025 07:16:36 GMT\r\ncache-control: public, max-age=604800, immutable\r\ncontent-encoding: gzip\r\nage: 25999\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2B5mPASug4yjaQaAeCsGiAADQYmp9mPYvF4coWaHzD8HORjSowda90yuf01aUDlGHjfsZFf1HiQTrqdlymcsCrla4Xwc71TjX1tuCDKtSag%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b288dd06b1a56b4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10360,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (10360), with no line terminators","md5":"c7a5357b06defb36e5a28ab45b3f4b5e","sha1":"2e10ce22702dc65eda755e341e598915b38a8721","sha256":"f031e21b0d4febd2ca938f31623c547f4f383cbdcafa01f3d457e22bac00c527","sha512":"045f3fead84155a25f1f36821ad08d45a7c214674b9a05fd7b836817be9246d2f18488dd9767971f286024ae17f0442c66c486dd3c886d602e29ffc2e16b4a84","ssdeep":"192:/LR/hkAisAHf4Lys153p17zoWsBqwuLJLHg4LyTByIMOTorA:/LR/vhp3MWsBq9LJFgByVrA","tlshash":"e222a759b280b1b156e770ad512f424bf372906960aac0d4b639d8f2bdb8ecd1467f38","first_seen":"2023-03-12T15:08:04Z","last_seen":"2026-04-03T18:43:45.448697Z","times_seen":7997,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-23","alert":"Sinkholed","trigger":"iw63v.crqeraf.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"iw63v.crqeraf.xyz/static/common/vant.min.js?v=20251130","fqdn":"iw63v.crqeraf.xyz","domain":"crqeraf.xyz","tld":"xyz"},"ip":{"addr":"154.207.127.39","port":443,"asn":0,"as":"","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://iw63v.crqeraf.xyz/archives/65129/","date":"2025-12-23T14:29:56.066Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"crqeraf.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 12 Dec 2025 08:17:25 GMT","end":"Thu, 12 Mar 2026 09:15:12 GMT"},"fingerprint":{"sha1":"9A:B6:D6:FC:9F:B5:E4:7C:4E:60:81:74:C5:1D:1F:16:43:65:9B:C0","sha256":"6B:D5:92:C2:2E:E8:B1:3D:EE:9E:2C:51:0B:D3:32:29:71:17:1E:3D:93:07:59:A9:C9:59:7C:A8:D8:9B:2B:8C"}}},"request":{"raw":"GET /static/common/vant.min.js?v=20251130 HTTP/1.1\r\nHost: iw63v.crqeraf.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://iw63v.crqeraf.xyz/archives/65129/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 23 Dec 2025 14:29:55 GMT\r\ncontent-type: application/javascript\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\nlast-modified: Thu, 20 Nov 2025 11:34:17 GMT\r\nvary: Accept-Encoding\r\netag: W/\"691efcb9-3b3ee\"\r\nexpires: Tue, 30 Dec 2025 07:16:36 GMT\r\ncache-control: public, max-age=604800, immutable\r\ncontent-encoding: gzip\r\nage: 25999\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MKN5cCvaF0oQ33gHIUsifIg3bGYcHBppmej42AbFgz7r64KsgMI7I5svcr6XvDHGZeZdVIMgHyixGnJSEGowUoBeiGYjiCfzs0yLbg90FA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b288dd0ab6656b4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":242670,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (36859)","md5":"48c71ec4ea36fdd75033bbb278a861f3","sha1":"b47d16bde5c94e468ef249bd2126b846a39afe73","sha256":"0b18e273bc785dd0e5cc43218ee879bce10461fdf3b1274a1f2c8962aaecb49a","sha512":"bd3e587cf0fa0c2d777e1918b2067a2a2cce648996ea7e490098d609b20bacec6c2fb6dbe682ac1e212eafe2c1e33364a8cde40439ab6d24638b9b23b69489a1","ssdeep":"6144:XEB3BhYNbHp+fvbtgMAgMgQ8dOq11tUxLEm+Om0RbU:XEBIHpevogQ8dOw1sEam0R4","tlshash":"d23439a0f685f42547b790e6507a0610e1290b48f009d1e0f57ded8e2aede94b6bef7c","first_seen":"2024-08-02T14:48:31Z","last_seen":"2026-04-03T18:40:13.077525Z","times_seen":21906,"resource_available":true,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-23","alert":"Sinkholed","trigger":"iw63v.crqeraf.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-D19N9LPLRP\u0026l=dataLayer\u0026cx=c\u0026gtm=45je54p1v9218846652za204\u0026tag_exp=102887800~103051953~103077950~103106314~103106316~103116026~103200004","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.251.38.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://iw63v.crqeraf.xyz/archives/65129/","date":"2025-12-23T14:29:56.606Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:49:27 GMT","end":"Wed, 25 Feb 2026 15:49:26 GMT"},"fingerprint":{"sha1":"2C:B9:1B:62:2A:F9:04:B9:16:E2:30:B0:A8:B2:85:0C:68:BC:79:25","sha256":"AE:CB:A0:2C:92:1E:CB:D2:CB:6C:0D:37:5E:A2:4E:27:AE:4E:CA:0C:EC:53:D5:50:E6:C1:3D:EB:17:C1:F2:C9"}}},"request":{"raw":"GET /gtag/js?id=G-D19N9LPLRP\u0026l=dataLayer\u0026cx=c\u0026gtm=45je54p1v9218846652za204\u0026tag_exp=102887800~103051953~103077950~103106314~103106316~103116026~103200004 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Tue, 23 Dec 2025 14:29:56 GMT\r\nexpires: Tue, 23 Dec 2025 14:29:56 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 143784\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":435778,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (6031)","md5":"4a17f8195c88cb97ec112f03d776ac78","sha1":"508492c3711a95fdd31cac22bebf99f983ddd60f","sha256":"3bf0c03df893267585b2bfcd04b2273a361107ac02278d0a5268490371a54aef","sha512":"c690806e9f89ef7c046073a476c8e70e47c05913d0b31083af34522520e27f93e737df4a3bac3f4aa84a473270d8d97483708656241358ebe4d7c5fcd6c4871f","ssdeep":"6144:wSIe7ma2bulKY/1u99xHDmHYmyBFzvnsyRO6jJWoNPad4FpC1pY:yC8bu7/1mbrnsy39WbMpL","tlshash":"de9419ce73c674269396e078503f118ba57b29e2b45dc896f189cce01e74a9a4237f7c","first_seen":"2025-12-23T08:10:49.395703Z","last_seen":"2025-12-24T07:46:55.143234Z","times_seen":34,"resource_available":true,"data":null}},"time_used":84,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":49,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pic.wdsrie.cn/upload_01/upload/20250618/2025061814453576171.png","fqdn":"pic.wdsrie.cn","domain":"wdsrie.cn","tld":"cn"},"ip":{"addr":"43.152.140.79","port":443,"asn":139341,"as":"ACE","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://iw63v.crqeraf.xyz/archives/65129/","date":"2025-12-23T14:29:56.892Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.wdsrie.cn","organization":""},"issuer":{"commonName":"ZeroSSL ECC Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Sat, 20 Dec 2025 00:00:00 GMT","end":"Fri, 20 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E9:73:86:E2:44:76:13:6D:6B:AE:EE:E0:BA:B0:C0:68:B0:97:37:B8","sha256":"B9:DF:B5:64:69:80:D3:48:0B:F1:C2:39:96:52:89:9A:DE:23:24:F8:50:8B:E3:B3:38:A6:99:51:B3:9A:55:5E"}}},"request":{"raw":"GET /upload_01/upload/20250618/2025061814453576171.png HTTP/1.1\r\nHost: pic.wdsrie.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://iw63v.crqeraf.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Wed, 18 Jun 2025 06:45:40 GMT\r\nEtag: \"bd2ef9349b6564ca2f530deb3c42a865\"\r\nContent-Type: binary/octet-stream\r\nDate: Fri, 10 Oct 2025 01:25:36 GMT\r\nx-amz-server-side-encryption: AES256\r\nServer: nginx\r\nX-Cache: Hit from cloudfront\r\nX-Amz-Cf-Pop: ARN53-P2\r\nAge: 3901\r\nContent-Length: 704\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 13952996423492823687\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\nAccess-Control-Allow-Origin: *\r\nCache-Control: max-age=864000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":704,"size_decoded":0,"mime_type":"binary/octet-stream","magic":"data","md5":"bd2ef9349b6564ca2f530deb3c42a865","sha1":"b7c800a00e85d3e167e81e25f96a1533e4e30f4e","sha256":"899c7f8218397577f4182308a670da292bb83e72db8255fe626f4758777ca791","sha512":"7d215d30443002d0f459606af1df82da1641bc1ba80f8d9a1c385e56bc2ad6d8ab52f5ecc7146b3ce447125ecb488174cc7dc9fa8cff1a62d665e054030acba1","ssdeep":"","tlshash":"e50144813d350b6ea37e15360e39829ba801f58492ba65b1e3b4e3d21d5e59090f52f4","first_seen":"2025-06-18T21:56:52.23424Z","last_seen":"2026-04-03T18:43:45.435979Z","times_seen":7474,"resource_available":false,"data":null}},"time_used":178,"timings":{"blocked":157,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pic.wdsrie.cn/upload_01/upload/20250710/2025071018242721043.png","fqdn":"pic.wdsrie.cn","domain":"wdsrie.cn","tld":"cn"},"ip":{"addr":"43.152.140.79","port":443,"asn":139341,"as":"ACE","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://iw63v.crqeraf.xyz/archives/65129/","date":"2025-12-23T14:29:57.313Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.wdsrie.cn","organization":""},"issuer":{"commonName":"ZeroSSL ECC Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Sat, 20 Dec 2025 00:00:00 GMT","end":"Fri, 20 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E9:73:86:E2:44:76:13:6D:6B:AE:EE:E0:BA:B0:C0:68:B0:97:37:B8","sha256":"B9:DF:B5:64:69:80:D3:48:0B:F1:C2:39:96:52:89:9A:DE:23:24:F8:50:8B:E3:B3:38:A6:99:51:B3:9A:55:5E"}}},"request":{"raw":"GET /upload_01/upload/20250710/2025071018242721043.png HTTP/1.1\r\nHost: pic.wdsrie.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://iw63v.crqeraf.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Thu, 10 Jul 2025 10:50:44 GMT\r\nEtag: \"2f7492b2c919cd9167cdab6947e44411\"\r\nContent-Type: binary/octet-stream\r\nDate: Sat, 26 Jul 2025 05:36:16 GMT\r\nx-amz-server-side-encryption: AES256\r\nServer: nginx\r\nX-Cache: Hit from cloudfront\r\nX-Amz-Cf-Pop: ARN53-P2\r\nAge: 20978\r\nContent-Length: 596384\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 14436565345036141487\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\nAccess-Control-Allow-Origin: *\r\nCache-Control: max-age=864000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":596384,"size_decoded":0,"mime_type":"binary/octet-stream","magic":"data","md5":"2f7492b2c919cd9167cdab6947e44411","sha1":"0065dcb65b6f21ee49c1c47103727dfc769aa0ee","sha256":"25e8cc1d114348e83b9252883d409ae4db302a149425ca8251a036d55ebe0d22","sha512":"274a5d29a9db8ba08e0cedb1e2b549ac33e4e6fea465909efc8921421c2f76cb3120c0889913e2a133a3e3589abbb8b6f52e5673829ee6882539d657b3d0ce7a","ssdeep":"12288:1OlnrlETFgK7vuKk301jxN5ZgJoPi7JUzc8G5jFP:1EhETGQvudkpeWzc8ChP","tlshash":"dec4236cc8a820f357a15b8a1c50ed979d3ce71b78b07c857b53282660fb98f0b85f42","first_seen":"2024-07-11T19:59:14Z","last_seen":"2026-02-28T07:59:58.152636Z","times_seen":5705,"resource_available":false,"data":null}},"time_used":1128,"timings":{"blocked":1088,"dns":0,"connect":0,"send":0,"wait":21,"receive":19,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"iw63v.crqeraf.xyz/static/pc/css/111065a.css?v=20251130","fqdn":"iw63v.crqeraf.xyz","domain":"crqeraf.xyz","tld":"xyz"},"ip":{"addr":"154.207.127.39","port":443,"asn":0,"as":"","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://iw63v.crqeraf.xyz/archives/65129/","date":"2025-12-23T14:29:55.880Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"crqeraf.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 12 Dec 2025 08:17:25 GMT","end":"Thu, 12 Mar 2026 09:15:12 GMT"},"fingerprint":{"sha1":"9A:B6:D6:FC:9F:B5:E4:7C:4E:60:81:74:C5:1D:1F:16:43:65:9B:C0","sha256":"6B:D5:92:C2:2E:E8:B1:3D:EE:9E:2C:51:0B:D3:32:29:71:17:1E:3D:93:07:59:A9:C9:59:7C:A8:D8:9B:2B:8C"}}},"request":{"raw":"GET /static/pc/css/111065a.css?v=20251130 HTTP/1.1\r\nHost: iw63v.crqeraf.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://iw63v.crqeraf.xyz/archives/65129/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 23 Dec 2025 14:29:55 GMT\r\ncontent-type: text/css\r\npriority: u=2,i=?0\r\nserver: cloudflare\r\nlast-modified: Sat, 13 Sep 2025 03:47:40 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68c4e95c-9cea\"\r\nexpires: Tue, 30 Dec 2025 07:16:51 GMT\r\ncache-control: public, max-age=604800, immutable\r\ncontent-encoding: gzip\r\nage: 25983\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PfpiZhTmr6zpjLca5jPriZSibggd8yXprC%2FXIdp76GavV9POG4PR6wX79voR3jH8O3waLGnA%2BK0V7R%2BfniB0QJXZiT%2FRMfvMQ0dg4PRpBA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b288dcfda9956b4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":40170,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (672)","md5":"3d0e1f6add90f2cb70c513a68fed368c","sha1":"1655c4ef114449342313393daa8e20a3e928e2cb","sha256":"60377f6845040767cb3df0dec86a875b506b5182f4e4cd930fae8ca352dc3530","sha512":"945117a7bfe0e70e8a8a935eee02615d8708f91a78a265ffde02b9e2c25345aa895f6685ddce6e004f41926f71038ae34393d93a8a163faac1c2961daad3cbf5","ssdeep":"768:SHFoF7FZFTFJFHFuFq/F3cOK59191V9+SrFhjFVFIlfBFkF2Hf:SHStj1PVgyuOK59191V9+QbjX+lBaQHf","tlshash":"24033d6538a33548521792d4cbda6318b230a343d90bcfaffa6a358d8f4d6980467f97","first_seen":"2025-09-17T02:00:08.497656Z","last_seen":"2026-04-03T18:43:45.430379Z","times_seen":7270,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-23","alert":"Sinkholed","trigger":"iw63v.crqeraf.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"iw63v.crqeraf.xyz/static/pc/img/arrow-down-1.png","fqdn":"iw63v.crqeraf.xyz","domain":"crqeraf.xyz","tld":"xyz"},"ip":{"addr":"154.207.127.39","port":443,"asn":0,"as":"","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://iw63v.crqeraf.xyz/archives/65129/","date":"2025-12-23T14:29:56.045Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"crqeraf.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 12 Dec 2025 08:17:25 GMT","end":"Thu, 12 Mar 2026 09:15:12 GMT"},"fingerprint":{"sha1":"9A:B6:D6:FC:9F:B5:E4:7C:4E:60:81:74:C5:1D:1F:16:43:65:9B:C0","sha256":"6B:D5:92:C2:2E:E8:B1:3D:EE:9E:2C:51:0B:D3:32:29:71:17:1E:3D:93:07:59:A9:C9:59:7C:A8:D8:9B:2B:8C"}}},"request":{"raw":"GET /static/pc/img/arrow-down-1.png HTTP/1.1\r\nHost: iw63v.crqeraf.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://iw63v.crqeraf.xyz/archives/65129/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 23 Dec 2025 14:29:55 GMT\r\ncontent-type: image/png\r\ncontent-length: 245\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\nlast-modified: Sat, 13 Sep 2025 03:47:28 GMT\r\netag: \"68c4e950-f5\"\r\nexpires: Mon, 29 Dec 2025 07:49:08 GMT\r\ncache-control: public, max-age=604800, immutable\r\naccept-ranges: bytes\r\nage: 110447\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FYnH2rOeqbyHYQlEIE6s9%2BsZFyVe56qD1idhCr7jGYU9uLuhLXqllEbrFf2sW2lOO17EJSjzyEwPsib7puBEzyT08mFlZ24XLLXLHS%2FQ6g%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b288dd07b2e56b4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":245,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 60 x 60, 4-bit colormap, non-interlaced","md5":"8cfe1a66672bd022919a19d1c4a3c962","sha1":"ed9cdd6a3712b9545535fd12b1997c15e40bf8d1","sha256":"961bb4e26e485516b75d1f5b51d099b4dacddaae59e3e32588f0d3233d4faa2d","sha512":"d8296b1e13b90211cb0b58810f6ab8813123b8df7167898a3c3988114159c52cb44a575d2996dddb444fbf33d40285c095983ea6e7bf6e7801892d03bad6357c","ssdeep":"","tlshash":"e8d023f297c9ec4f4f1a407fd1e1519678742c1b7174c5077952f40a6d74199d4c0317","first_seen":"2024-06-29T19:14:32Z","last_seen":"2026-04-03T18:43:45.430929Z","times_seen":7564,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-23","alert":"Sinkholed","trigger":"iw63v.crqeraf.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"static.addtoany.com/menu/svg/icons/sina_weibo.js","fqdn":"static.addtoany.com","domain":"addtoany.com","tld":"com"},"ip":{"addr":"172.66.171.172","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://iw63v.crqeraf.xyz/archives/65129/","date":"2025-12-23T14:29:58.020Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"static.addtoany.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Dec 2025 13:28:50 GMT","end":"Sun, 22 Mar 2026 14:28:48 GMT"},"fingerprint":{"sha1":"83:E4:54:72:9E:E9:BE:F0:31:A0:E0:3B:5B:38:1D:25:57:6A:CE:67","sha256":"C2:A2:4F:7E:8C:0F:A8:AA:86:24:03:7D:6B:67:31:2E:38:54:D6:C4:27:59:FE:B4:3D:28:7C:D5:DC:F6:F1:1E"}}},"request":{"raw":"GET /menu/svg/icons/sina_weibo.js HTTP/1.1\r\nHost: static.addtoany.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://iw63v.crqeraf.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncf-cache-status: REVALIDATED\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: application/javascript\r\npriority: u=3,i=?0\r\naccess-control-allow-origin: *\r\ncache-control: max-age=7776000, stale-while-revalidate=30, public\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=U2GlXNhd0WPVWeNx%2BISf8CCvLW78Usisi%2FoA6vlc1gw2ZZnroR6lWHk%2FqzAaWmpe6YANH5GZjkCXVkv6m2HlGh5Hw7WGF%2FFSIMd%2BkN2ozi%2BD\"}]}\r\netag: W/\"f0cbbecd633f7407e6d0cdab044e8cd4\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ndate: Tue, 23 Dec 2025 14:29:57 GMT\r\ncf-ray: 9b288ddd3a14569f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1380,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (1380), with no line terminators","md5":"d04028d2133db89a77370d4187c75d17","sha1":"6cb4e55459e9ae15b908aa5c6d89d9cc2647f3d2","sha256":"98b8300b847aa93435040de98b9e9c8624c0cf250231682b42506efbe4606623","sha512":"28ec46b0d94db80a620c09d0fcbc5e3ab311ad9f709bd6de8e97ad0191a346102eb493f18b1d60e90de24499bc05195e7676d914337b2eb410930c6e8954b936","ssdeep":"","tlshash":"8f212fd17254a6cc3897ddeedf119022672e74bd3a1a0690079feb79f8ab08cf202c55","first_seen":"2024-06-16T13:40:34Z","last_seen":"2026-04-03T18:43:45.406215Z","times_seen":7862,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"iw63v.crqeraf.xyz/static/ai/css/index.css?v=20251130","fqdn":"iw63v.crqeraf.xyz","domain":"crqeraf.xyz","tld":"xyz"},"ip":{"addr":"154.207.127.39","port":443,"asn":0,"as":"","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://iw63v.crqeraf.xyz/archives/65129/","date":"2025-12-23T14:29:55.998Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"crqeraf.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 12 Dec 2025 08:17:25 GMT","end":"Thu, 12 Mar 2026 09:15:12 GMT"},"fingerprint":{"sha1":"9A:B6:D6:FC:9F:B5:E4:7C:4E:60:81:74:C5:1D:1F:16:43:65:9B:C0","sha256":"6B:D5:92:C2:2E:E8:B1:3D:EE:9E:2C:51:0B:D3:32:29:71:17:1E:3D:93:07:59:A9:C9:59:7C:A8:D8:9B:2B:8C"}}},"request":{"raw":"GET /static/ai/css/index.css?v=20251130 HTTP/1.1\r\nHost: iw63v.crqeraf.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://iw63v.crqeraf.xyz/archives/65129/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 23 Dec 2025 14:29:55 GMT\r\ncontent-type: text/css\r\npriority: u=2,i=?0\r\nserver: cloudflare\r\nlast-modified: Tue, 23 Dec 2025 06:52:16 GMT\r\nvary: Accept-Encoding\r\netag: W/\"694a3c20-9d6c\"\r\nexpires: Tue, 30 Dec 2025 07:16:52 GMT\r\ncache-control: public, max-age=604800, immutable\r\ncontent-encoding: gzip\r\nage: 25983\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HX%2BelL%2FtPfIrWbxNeVN2esYdCebfYaJH7nyS3DcEGOnyYBYAjuPP8UCwRTQhGMiuG2xtBtZrppNsxoBZ%2B2%2B5sJzIOI6ZosIsPKvP37A12g%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b288dd05b0956b4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":40300,"size_decoded":0,"mime_type":"text/css","magic":"assembler source, Unicode text, UTF-8 text","md5":"7b7d79bb8db04c212b907d2ea99ec593","sha1":"4f9551838d607df7f54b21cccdc7d84618087603","sha256":"e1c2028e99466c1accb05ee3de080903dd9fcf2e54ba3a2def5901dd4b73fcec","sha512":"882fc08efa14a6f267a5d29ee18cdec59e8d07dd8d9239cf0d664b4720b403270665d0938871e3e0acb4cf981e0cdd2eea4ffb47496954dd7f784ada27475e8a","ssdeep":"192:2saAyrxX7ld1KlcIPKn2Nu+e6eWeqrQxRUwSuwgmNhDIi0wxwrwawNwnw+wGwwwk:sB6PJBnJMd0ZfgNnge74rF41YB+bbf","tlshash":"0b03e1190663094079e688b82b7d37c6128de017dd0ae56e7fcb7684cfce265b9b178c","first_seen":"2025-12-23T08:10:49.397589Z","last_seen":"2026-04-03T18:18:51.553169Z","times_seen":5034,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-23","alert":"Sinkholed","trigger":"iw63v.crqeraf.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pic.wdsrie.cn/upload_01/upload/20240627/2024062717571596067.png","fqdn":"pic.wdsrie.cn","domain":"wdsrie.cn","tld":"cn"},"ip":{"addr":"43.152.140.79","port":443,"asn":139341,"as":"ACE","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://iw63v.crqeraf.xyz/archives/65129/","date":"2025-12-23T14:29:56.774Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.wdsrie.cn","organization":""},"issuer":{"commonName":"ZeroSSL ECC Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Sat, 20 Dec 2025 00:00:00 GMT","end":"Fri, 20 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E9:73:86:E2:44:76:13:6D:6B:AE:EE:E0:BA:B0:C0:68:B0:97:37:B8","sha256":"B9:DF:B5:64:69:80:D3:48:0B:F1:C2:39:96:52:89:9A:DE:23:24:F8:50:8B:E3:B3:38:A6:99:51:B3:9A:55:5E"}}},"request":{"raw":"GET /upload_01/upload/20240627/2024062717571596067.png HTTP/1.1\r\nHost: pic.wdsrie.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://iw63v.crqeraf.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Thu, 27 Jun 2024 09:57:20 GMT\r\nEtag: \"b980e8fa204feca12c185adae44d45c6\"\r\nContent-Type: binary/octet-stream\r\nDate: Fri, 10 Oct 2025 01:25:34 GMT\r\nx-amz-server-side-encryption: AES256\r\nServer: nginx\r\nX-Cache: Hit from cloudfront\r\nX-Amz-Cf-Pop: ARN53-P2\r\nAge: 3901\r\nContent-Length: 720\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 522824378983322376\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\nAccess-Control-Allow-Origin: *\r\nCache-Control: max-age=864000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":720,"size_decoded":0,"mime_type":"binary/octet-stream","magic":"data","md5":"b980e8fa204feca12c185adae44d45c6","sha1":"b7f1a32adf4fca6ad6332cb2504bca76c2136b6e","sha256":"34d707164a756f45626972b84e441d4e3f55b97e9e7d635e9416abc306736862","sha512":"705d979e3e30a3615826166f8c4328990b8b57a3f2f26f6ed7000fb52fc614c7cafe2d29d309376881a6dfbf02ea557272b002c3a181400d9961de6d819bce5f","ssdeep":"","tlshash":"d00165881db884ca90d012f2ba09f12259711169744e80bba94efb776c25e04458a17f","first_seen":"2024-06-29T19:14:34Z","last_seen":"2026-04-03T18:43:45.427724Z","times_seen":7519,"resource_available":false,"data":null}},"time_used":586,"timings":{"blocked":274,"dns":4,"connect":7,"send":0,"wait":11,"receive":0,"ssl":286},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pic.wdsrie.cn/upload/upload/20231020/2023102011220578585.png","fqdn":"pic.wdsrie.cn","domain":"wdsrie.cn","tld":"cn"},"ip":{"addr":"43.152.140.79","port":443,"asn":139341,"as":"ACE","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://iw63v.crqeraf.xyz/archives/65129/","date":"2025-12-23T14:29:56.843Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.wdsrie.cn","organization":""},"issuer":{"commonName":"ZeroSSL ECC Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Sat, 20 Dec 2025 00:00:00 GMT","end":"Fri, 20 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E9:73:86:E2:44:76:13:6D:6B:AE:EE:E0:BA:B0:C0:68:B0:97:37:B8","sha256":"B9:DF:B5:64:69:80:D3:48:0B:F1:C2:39:96:52:89:9A:DE:23:24:F8:50:8B:E3:B3:38:A6:99:51:B3:9A:55:5E"}}},"request":{"raw":"GET /upload/upload/20231020/2023102011220578585.png HTTP/1.1\r\nHost: pic.wdsrie.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://iw63v.crqeraf.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Thu, 28 Dec 2023 12:24:12 GMT\r\nEtag: \"71b9e36dc6bbe33a6874f8ee5f1b5d11\"\r\nContent-Type: binary/octet-stream\r\nDate: Fri, 10 Oct 2025 01:01:33 GMT\r\nx-amz-server-side-encryption: AES256\r\nServer: nginx\r\nX-Cache: Hit from cloudfront\r\nX-Amz-Cf-Pop: ARN53-P2\r\nAge: 5343\r\nContent-Length: 720\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 7920842608792727283\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\nAccess-Control-Allow-Origin: *\r\nCache-Control: max-age=864000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":720,"size_decoded":0,"mime_type":"binary/octet-stream","magic":"data","md5":"71b9e36dc6bbe33a6874f8ee5f1b5d11","sha1":"b407385ba76530dabc9600a3adcd730d42c90124","sha256":"bf5d1f143638e96e0a896ff03995a1ab5447e178d678679bcd95c48168a56a23","sha512":"bdb43bc210f07b2634d76c23892aca281510bc43206aae9d94f4ccd9ab49a764eb46183c6d77705f8a0fb082433bc6a519a84eb7b405d12153b2c533716acd20","ssdeep":"","tlshash":"ed0115c55711a532f208268cd0f9fc61019546d59176b42fffd05125bd16f3184659d3","first_seen":"2023-11-14T11:24:50Z","last_seen":"2026-04-03T18:43:45.44918Z","times_seen":7795,"resource_available":false,"data":null}},"time_used":197,"timings":{"blocked":188,"dns":0,"connect":0,"send":0,"wait":8,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pic.wdsrie.cn/upload_01/upload/20251212/2025121216002062405.gif","fqdn":"pic.wdsrie.cn","domain":"wdsrie.cn","tld":"cn"},"ip":{"addr":"43.152.140.79","port":443,"asn":139341,"as":"ACE","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://iw63v.crqeraf.xyz/archives/65129/","date":"2025-12-23T14:29:57.696Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.wdsrie.cn","organization":""},"issuer":{"commonName":"ZeroSSL ECC Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Sat, 20 Dec 2025 00:00:00 GMT","end":"Fri, 20 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E9:73:86:E2:44:76:13:6D:6B:AE:EE:E0:BA:B0:C0:68:B0:97:37:B8","sha256":"B9:DF:B5:64:69:80:D3:48:0B:F1:C2:39:96:52:89:9A:DE:23:24:F8:50:8B:E3:B3:38:A6:99:51:B3:9A:55:5E"}}},"request":{"raw":"GET /upload_01/upload/20251212/2025121216002062405.gif HTTP/1.1\r\nHost: pic.wdsrie.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://iw63v.crqeraf.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Fri, 12 Dec 2025 08:00:28 GMT\r\nEtag: \"19a4340c2f1c0d5f858afe42b3633fc3\"\r\nContent-Type: binary/octet-stream\r\nDate: Fri, 12 Dec 2025 08:00:30 GMT\r\nx-amz-server-side-encryption: AES256\r\nServer: nginx\r\nX-Cache: Hit from cloudfront\r\nX-Amz-Cf-Pop: ARN53-P2\r\nAge: 47\r\nContent-Length: 88416\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 4726237533241624694\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\nAccess-Control-Allow-Origin: *\r\nCache-Control: max-age=864000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":88416,"size_decoded":0,"mime_type":"binary/octet-stream","magic":"data","md5":"19a4340c2f1c0d5f858afe42b3633fc3","sha1":"f71a3e918d8aa62dc2e28164882ffe4cf66e88f4","sha256":"9902d765281c9d115277c5dd7e8368d957d70df2f707e134ee84754bf1a35e71","sha512":"003a151c0ea3fc431575ea4cddfb7d8c9db4a180691f2650cfb389d834d8ea34deaaa7d735ed4f4ff3cf2d089b339150c31bf5112ffacff2847ebdb574082901","ssdeep":"1536:fWoSij8UcGnsMeqazM0cGuV6czc8Edjf8Y07NXoY0qXhZrRiI9zzBOPmRfsQt:f75PczMDD0cIAc89BNoBqhi+t0I","tlshash":"76830281294ebffff11d400198d727d6922e4e7bda75e82d1e8d03865abbc42c0da2c5","first_seen":"2025-04-01T23:24:40.535689Z","last_seen":"2026-02-10T15:27:36.445996Z","times_seen":2164,"resource_available":false,"data":null}},"time_used":848,"timings":{"blocked":837,"dns":0,"connect":0,"send":0,"wait":8,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}