{"report_id":"011c493b-d126-45c5-9ef0-8427a2f34400","version":6,"status":"done","tags":[],"date":"2026-01-04T14:57:27Z","url":{"schema":"http","addr":"ivtfxip.com","fqdn":"ivtfxip.com","domain":"ivtfxip.com","tld":"com"},"ip":{"addr":"172.67.214.109","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"ivtfxip.com/pc/#/home","fqdn":"ivtfxip.com","domain":"ivtfxip.com","tld":"com"},"title":"IVTFX","dom":{"size":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"ivtfxip.com","fqdn":"ivtfxip.com","domain":"ivtfxip.com","tld":"com"},"ip":{"addr":"172.67.214.109","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-02-08T14:57:27Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":3}},"detection":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"ivtfxip.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"api.ivtfxip.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"f-module-pc10.ivtfxip.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null},"summary":[{"fqdn":"ivtfxip.com","ip":{"addr":"104.21.78.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-12-25","domain_rank":0,"first_seen":"2026-01-04T14:57:37.927558Z","last_seen":"2026-01-04T14:57:40.759261Z","alert_count":56,"request_count":56,"received_data":10983403,"sent_data":25141,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"api.ivtfxip.com","ip":{"addr":"104.21.78.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":45,"request_count":45,"received_data":615607,"sent_data":30558,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"f-module-pc10.ivtfxip.com","ip":{"addr":"104.21.78.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":58,"request_count":58,"received_data":10379046,"sent_data":30308,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"f-module-pc10.ivtfxip.com/f-module-pc10-4/?moduleName=f-module-pc10-4","fqdn":"f-module-pc10.ivtfxip.com","domain":"ivtfxip.com","tld":"com"},"ip":{"addr":"104.21.78.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"899531bebc2ec12dcced69c27b4d5c79","sha1":"62f715a5c1b047e15316ba85079d6a9a49e32281","sha256":"cee3e9055d35f234b68a763d03a2def74cf892bc0fb24d8a1cd26809bf614593","sha512":"ea0d506417648906b6afad1e55f93ce4530354eed8b43cf649354828156c7fac28e7634c9c2283326bfcd43467fcf0c604704ca9496e87c829928562b556240b","ssdeep":"","tlshash":"4541986ca2fb20165097b1aebf8f75403962b08f1d0abd087f4c46d01f8862e78f0b64","size":2319,"data":"","first_seen":"2026-01-04T14:57:54.985542Z","last_seen":"2026-01-04T14:57:54.985542Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"f-module-pc10.ivtfxip.com/f-module-pc10-6/assets/js/vue-i18n.js","fqdn":"f-module-pc10.ivtfxip.com","domain":"ivtfxip.com","tld":"com"},"ip":{"addr":"104.21.78.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"de3dcd16bbced832586e79816170a34d","sha1":"fe6df311601c6c133eef5189d66408022d7b39d1","sha256":"0519be799e6c779f84b167be27a7fda41add0d748e7a89f72cba3e8dcb1abd0d","sha512":"a84c28308be595e34184e6c990025cfdb213132344ff9b523b877bbd66d754e756979dda74d4c2775ad3c0405824fe8e029a14b9e4d96c6590db531e72d05a79","ssdeep":"1536:VzcGwVRclFaeA02I5K8CMKK2IPbKf4hT3Adai3K3D3QdaS3Kg:DwV5ZK2IPbKf4q","tlshash":"46331e49adf32052591372fe4faf6045b5388027214dce09b89ea3a45f55f2c93fabd8","size":51091,"data":"","first_seen":"2025-05-06T14:56:29.60368Z","last_seen":"2026-05-10T22:50:28.04562Z","times_seen":38,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"f-module-pc10.ivtfxip.com/f-module-pc10-5/?moduleName=f-module-pc10-5","fqdn":"f-module-pc10.ivtfxip.com","domain":"ivtfxip.com","tld":"com"},"ip":{"addr":"104.21.78.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"6b896f5ac6b4ef540ce3a3e456c2dbb5","sha1":"f92aa5bcb9c161c200656d3026927ff575038dea","sha256":"edcc2d8a510310e9327b91aa20d89aaeab4f48296aade655e41706695c3ecb1b","sha512":"18ed897a00387efa00b43f13d5ae3b97b34674ed025dd1a34a468b28a0d8c07c53a0e7469c5fd906ba2aa6d8b72a5a825bfdb66b7669be8f481b7849171d73f1","ssdeep":"","tlshash":"a1c08c8900e8e0a28d827002242a46e9e02905e580009440e2eccce129ca470432c03c","size":149,"data":"","first_seen":"2025-05-06T14:56:29.714364Z","last_seen":"2026-05-10T22:50:28.155564Z","times_seen":13,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ivtfxip.com/pc/static/js/npm.crypto-js~db9e4f62.4f9c6a0e.js","fqdn":"ivtfxip.com","domain":"ivtfxip.com","tld":"com"},"ip":{"addr":"104.21.78.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"b5ae1d673dae57619e61f9c099a8dc87","sha1":"bfe972ac6630b28e517d3989e91f5d9c9e25ed2b","sha256":"c60c496a02ca3718a7f1aa41aaf6d92ed137f8ae0673dc27a5a15624601aed10","sha512":"de80156aa534a06968212914bf34e4602ec33f0aeb6bd6f46e240e227f3bad0f007faf25c41fd49aa2376a326a6eaabfcea2a615017488d09184f59f4c6f127a","ssdeep":"1536:cu8DQ+ALd6xj8P37PtNPU9ArHMLcQHFzj:cuyHjym3","tlshash":"df535cc062d8645553f62980183f744b716736361b099bd8f261f9feecbcada803ac79","size":66012,"data":"","first_seen":"2025-05-06T14:56:29.599131Z","last_seen":"2026-05-20T20:17:42.814237Z","times_seen":39,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"f-module-pc10.ivtfxip.com/f-module-pc10-2/?moduleName=f-module-pc10-2","fqdn":"f-module-pc10.ivtfxip.com","domain":"ivtfxip.com","tld":"com"},"ip":{"addr":"104.21.78.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"79e2c4ba6f4a4069b566537b27d9d3c0","sha1":"16226f6eec8089d56da8593f4423f70f974e7564","sha256":"af711b495350eef34e5f835aa295a0de1f5c7781c3f4c65db458b41a359ad694","sha512":"32ed34bc10065eafb7ce28bccf76d85525d24477ed16f6f8e7fdfa11233911b36d2e4844d3b18cf80635a22ecc28d2437335b791b2e76e1d5df2be59685cf835","ssdeep":"","tlshash":"92c08cae60e8d1618d837021542a46a5f00a05e488d09441e0accca1249783043280bc","size":152,"data":"","first_seen":"2025-05-06T14:56:29.713166Z","last_seen":"2026-05-10T22:50:28.150677Z","times_seen":15,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"f-module-pc10.ivtfxip.com/f-module-pc10-2/assets/js/element-ui.js","fqdn":"f-module-pc10.ivtfxip.com","domain":"ivtfxip.com","tld":"com"},"ip":{"addr":"104.21.78.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"871ab253bcff550f462f866dbdef7465","sha1":"616b57088730b5322c12649d31d620afd3abc8e6","sha256":"89d3c55e8fa03f177b1cc3824aede7c94b2ce4143f6a30f54ebb96e20eb42bc2","sha512":"45d91bcef6b33e603fef096e9e21efeaa30cab43423d8b5a98911f98da8d9b2e9a7654a9f479444a9bbd8dc4ca4968d5e7a64abee42fa88023c676d75856131d","ssdeep":"6144:BSqtkdlBC7d1xSBiwzlPQa/R6rvnGehHjcFFFw9/8CslIvi/x1:Wm7d1xSBnzlPQa/ofxhHwHFt/x1","tlshash":"e9e4098d72c1b53147a36071103f250bb33b2a9ca809809cb679d5ea6dbda0d526ff7d","size":664912,"data":"","first_seen":"2023-09-27T20:28:23Z","last_seen":"2026-06-08T02:28:42.770668Z","times_seen":2934,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"f-module-pc10.ivtfxip.com/f-module-pc10-2/assets/js/i18n.js","fqdn":"f-module-pc10.ivtfxip.com","domain":"ivtfxip.com","tld":"com"},"ip":{"addr":"104.21.78.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"1f727c5cf670b1991c66aa26d4999ccc","sha1":"8f9175234e6557eee32a252ce28ec3205f01b77b","sha256":"08ad9ed3c5a5b3ca806438af86dd8a6d09d0a2f4fa2b83bc78967b3923496bb0","sha512":"be6cc7aeb093bfe97e147c1b0d26d8e94b7a16970b06f618864de52c9ca8654856d50b3b42ad8bb618d1e6dd9c5c4129ceefe8362c2ce85d3a41ab40b95db032","ssdeep":"","tlshash":"8c011a4a88fb25261013783725de501ca17593df28653cb67d9e01415f8d24c06a8fb1","size":746,"data":"","first_seen":"2025-05-06T14:56:29.665657Z","last_seen":"2026-05-10T22:50:28.070857Z","times_seen":13,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"f-module-pc10.ivtfxip.com/f-module-pc10-2/?moduleName=f-module-pc10-2","fqdn":"f-module-pc10.ivtfxip.com","domain":"ivtfxip.com","tld":"com"},"ip":{"addr":"104.21.78.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"bb8bca670e7b9ba70bd2122ecc85f7b7","sha1":"dc21fd9b08022c2fd872f09fd6e8b3d963ba82da","sha256":"25bd3431966a5bb503f95db291e713f9cae72cacfc4c314663160477207efdbd","sha512":"65c81e47dd5af0990567c307668a353cbd476d3255c8d729bab40f4849a045e7d22ab8679f29e4146412cd0a5e02bcdef2e22c87d06fc99d482d2206d1544488","ssdeep":"","tlshash":"0a81a79c66ba10265087b16d7fdf76413862a04f5d0abd09bf9c41e41fc862d79f0bb8","size":3861,"data":"","first_seen":"2026-01-04T14:57:54.98798Z","last_seen":"2026-01-04T14:57:54.98798Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"f-module-pc10.ivtfxip.com/f-module-pc10-6/assets/js/i18n.js","fqdn":"f-module-pc10.ivtfxip.com","domain":"ivtfxip.com","tld":"com"},"ip":{"addr":"104.21.78.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"57dd5c12f1ec5caea5cf521b439ef4c8","sha1":"0278bf311ca764cea161ad31eba2c5e10bd466e8","sha256":"845af8f65d775c531965f2afb82ca8f0fb8f6bee44147e14c81b77d65347e0b0","sha512":"5b36b8291a1c57b0996dd4b9b233d4a37125f9e5c97fb005607cba090021e8125f3dc99f9368e66947cdc2544822f5c93833bbbf3a7c9d20782f7d5901186b02","ssdeep":"192:38lgDxZkzhk/zVhqxrj/PvxP853PGZTOsF2K:38liTkzhk/zVhK/3poGZTOsn","tlshash":"c322937666b1181641079112a88d368a7b1925df6e1cbcf0be4d905a2fec93dc3f4bf4","size":10584,"data":"","first_seen":"2026-01-04T14:57:54.971694Z","last_seen":"2026-01-04T14:57:54.971694Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"f-module-pc10.ivtfxip.com/f-module-pc10-3/assets/js/i18n.js","fqdn":"f-module-pc10.ivtfxip.com","domain":"ivtfxip.com","tld":"com"},"ip":{"addr":"104.21.78.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"cdc8bb5162214a4563fd844c409327d2","sha1":"2946776d9a785cb18b8fe28b677616a3c9e2cf8b","sha256":"a41906d7e15e5a290ac3c2f8ffa9e6dc719c65db9a080a33e246c058da17d561","sha512":"0e6298615a475636ff5cf670bec9695026e04bcc8fd04987cb6505248867294af7c8a9b9b0e9a7052cd4130ea3006331662b524dc43a272906139c8bc25870b1","ssdeep":"192:o4j7JV33jKKWegowQiObbhkYu4tG6/Ynt33XifflVeJTT2K:d3OpCbbHmJiav","tlshash":"17d12c3a49b4047a984b651bb8cd710aa12987af3fd83ce1bd8e04440fdd62dd1f0bb1","size":6473,"data":"","first_seen":"2026-01-04T14:57:54.903838Z","last_seen":"2026-01-04T14:57:54.903838Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"f-module-pc10.ivtfxip.com/f-module-pc10-6/?moduleName=f-module-pc10-6","fqdn":"f-module-pc10.ivtfxip.com","domain":"ivtfxip.com","tld":"com"},"ip":{"addr":"104.21.78.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"959e3b4bf1d7fe74424474165ab561c1","sha1":"4a878f088df115a6ef7054c0c039344ff9d9ba0c","sha256":"3ba04e00face4134134752f206521f56a1c7d7d1049a613a01012d0fe305a8a2","sha512":"55d9713705f8e8b3351bd1b74a81253d3593e373296fa9efb84e8d7883d276de418269fc3e6433f2463b8d31969906cdfe07f9a94d50d07d0e80e6e6fdf8e3e6","ssdeep":"","tlshash":"5c01754114bff9bacd07610222bcb6b4c84508ebc46434d5fdb48d21a4dc9f08b8e63e","size":786,"data":"","first_seen":"2025-05-06T14:56:29.717933Z","last_seen":"2026-05-10T22:50:28.151574Z","times_seen":11,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"f-module-pc10.ivtfxip.com/f-module-pc10-3/?moduleName=f-module-pc10-3","fqdn":"f-module-pc10.ivtfxip.com","domain":"ivtfxip.com","tld":"com"},"ip":{"addr":"104.21.78.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"4bcc43805535bf28290db5acf4ce007b","sha1":"53fc6f1470956775ee25760b0fb688e66610d0fd","sha256":"e43e47745daf21272512ab3431a0a115111123de76233a76242f035d4ecb6b96","sha512":"d49fba03db99bdcce10af3b2311a2837aa5da7c4c5a73c20ed649fa41a40d8f02cdd6f34e35b899f1065711d1e8cf14aa4994ee079ea5956cd04e2cb4dc3a6f9","ssdeep":"","tlshash":"4441686da6fb20165097b1aebf8f75413962b08f1d0abd087f4d46d01f8862e79f0b64","size":2319,"data":"","first_seen":"2026-01-04T14:57:54.990732Z","last_seen":"2026-01-04T14:57:54.990732Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ivtfxip.com/pc/static/js/npm.echarts~9187ef67.37e78c7f.js","fqdn":"ivtfxip.com","domain":"ivtfxip.com","tld":"com"},"ip":{"addr":"104.21.78.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"1a787ace583807774829a55d6dbba03b","sha1":"ddde0757489ee8eb46d680cce900899d53c12a64","sha256":"912958be6d81ec72b3448be95edc2069748528547b88ee92834e28d1b5d11413","sha512":"e49beb60b64110b05d9568e31c4b62674c8c26b072b035cda05e30ebc9bb9b39e8f7ddec9390c1891c935b423cb1fdfb53a54f7a900153aaa939492c67a99b39","ssdeep":"3072:xH51e1uvwmJ4kg4vBF7MsSNiHtpUP6VLo5J:hwmJi4ZF7MlYVLo5J","tlshash":"a9d3a49cb1c9f05a93a332f940af140fd33a199a7c0ed910a651e0c57c7956da33bf6a","size":136795,"data":"","first_seen":"2025-04-19T14:49:36.170606Z","last_seen":"2026-05-20T20:17:42.880866Z","times_seen":46,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ivtfxip.com/pc/static/js/npm.babel-runtime~7da828cd.1a49da5c.js","fqdn":"ivtfxip.com","domain":"ivtfxip.com","tld":"com"},"ip":{"addr":"104.21.78.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"0b4e97d8530adfa918ac2457c21af609","sha1":"da70092d40f75676527c49b52d808dcaff808f83","sha256":"020f7801ab5b45a59e95bc9d5f1b52b20deb7c1983a44124298a3c78a514a70b","sha512":"c31354a943d96016a0db5ba9f54122ecdab989825405a436f52c3f69ee275a9199eb635140ec18496974bccc97bf1d7c2c2999ace1736753665568a06befc851","ssdeep":"384:GhGcyqHkhUVaVnIaHfof3gyGGKqiv96WDVpo6S:+5mwXPKRVnsz","tlshash":"ab72718eb1d2b05416b3712c022fb40af3b70958b85b99d0e36dc1e5ad7684f50b7e6e","size":17151,"data":"","first_seen":"2025-05-06T14:56:29.650145Z","last_seen":"2026-05-20T20:17:42.870557Z","times_seen":54,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ivtfxip.com/pc/static/js/npm.deficonnect~15eb8913.97ac2e3c.js","fqdn":"ivtfxip.com","domain":"ivtfxip.com","tld":"com"},"ip":{"addr":"104.21.78.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"c06e3292c75d72c9a84f2413a6f1d2d1","sha1":"87ed14895abab15ff2cfce6d9b65527fc777c88b","sha256":"cad661c8ee7d2fc3fc2135e26850deb8f413c95712f6bc1a85c8ab6ea4bc55f0","sha512":"028679c6069d76c6119c2fed36d66b90606b9723d84d3e6880babcb44c67c421a179a4e2898885c99c5b77d19f5aec592c61f9cb5cbf455fd7773e3a81000a5b","ssdeep":"1536:Bkli80B2mAkxkJ+BHka1kcjDZrB98ldklfi6+Wl1k6PMXDQ9:BklDb4kE3/9bAklb+WTxEXDY","tlshash":"11c3d7c9f6d2f0a10397a175513f510bf23b2da8782e90d4e366d5e06cb8989813bf6d","size":127795,"data":"","first_seen":"2025-04-19T14:49:36.324774Z","last_seen":"2026-05-20T20:17:42.873498Z","times_seen":52,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"f-module-pc10.ivtfxip.com/f-module-pc10-5/?moduleName=f-module-pc10-5","fqdn":"f-module-pc10.ivtfxip.com","domain":"ivtfxip.com","tld":"com"},"ip":{"addr":"104.21.78.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"21ad6a5e027895d7fef5bee4de0a6c02","sha1":"1997f8ca0f217c1001a42318dc5976a0d5a56469","sha256":"6e97ed48cf9a0f9bf4e5199bc5546e24c1067a10e7a582b886143be40f479bb5","sha512":"07595b4d84994a7775a6c79f573984ee4a2eac2ce44e387bf8d0d6a56b17d82782b21c486cbe50760fbb39d9d59ee7b08e0ac221cc51a1d123a048ba7444a8e7","ssdeep":"","tlshash":"c890028520e9656146e32164613b5a46615904f11484884095589c56286b03097694bc","size":54,"data":"","first_seen":"2023-04-11T22:34:44Z","last_seen":"2026-06-13T12:30:53.436251Z","times_seen":4347,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"f-module-pc10.ivtfxip.com/f-module-pc10-4/?moduleName=f-module-pc10-4","fqdn":"f-module-pc10.ivtfxip.com","domain":"ivtfxip.com","tld":"com"},"ip":{"addr":"104.21.78.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"21ad6a5e027895d7fef5bee4de0a6c02","sha1":"1997f8ca0f217c1001a42318dc5976a0d5a56469","sha256":"6e97ed48cf9a0f9bf4e5199bc5546e24c1067a10e7a582b886143be40f479bb5","sha512":"07595b4d84994a7775a6c79f573984ee4a2eac2ce44e387bf8d0d6a56b17d82782b21c486cbe50760fbb39d9d59ee7b08e0ac221cc51a1d123a048ba7444a8e7","ssdeep":"","tlshash":"c890028520e9656146e32164613b5a46615904f11484884095589c56286b03097694bc","size":54,"data":"","first_seen":"2023-04-11T22:34:44Z","last_seen":"2026-06-13T12:30:53.436251Z","times_seen":4347,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"f-module-pc10.ivtfxip.com/f-module-pc10-6/?moduleName=f-module-pc10-6","fqdn":"f-module-pc10.ivtfxip.com","domain":"ivtfxip.com","tld":"com"},"ip":{"addr":"104.21.78.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"fe30eca59aa4db0300f137f37251d286","sha1":"8123317e7a4ee60ceab232aa514ddafef1619218","sha256":"602e0052248265386006fe791fde6df79c4e014e644df958c93f6cd8fd92e9b4","sha512":"7e56dd02d05bd28ae74c115ddea1b5abddb506754633f94c271cffc1d9e230792e7b2851ffadae913ce12c1c3fbbc0866f2c9a8e6d98f1348582afbd80dbf772","ssdeep":"","tlshash":"9551685db6fa10165097b1aebf9f75413961b08f1d0abd087f4c46d01f8862e79f0764","size":2579,"data":"","first_seen":"2026-01-04T14:57:54.992578Z","last_seen":"2026-01-04T14:57:54.992578Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ivtfxip.com/pc/static/js/npm.core-js~987e6011.c1aa8c4c.js","fqdn":"ivtfxip.com","domain":"ivtfxip.com","tld":"com"},"ip":{"addr":"104.21.78.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"b637d5aaae71f41208ab93f2e842bd60","sha1":"a71ff2d0571918ae5a419951b6de5939d8d9c5cf","sha256":"17f572281fa7b03aeada1fd14382bf970b4ff712a118d0a0c8e8dab3eebf1567","sha512":"d389bfc7833710e813a3d2c477c89375251102435d4029d1fbb4f557b6fc8ab7ba4446de482fc2acd9d9c937ebc67a268972f1efcab2eaf2760ec25720dfc2fe","ssdeep":"768:+ZxQAR0ueStt9wU0e22lcvJwGBWIkhTt8jK:wx/n9p0rJvJkTf","tlshash":"d923528cf1d2b4d80ed274ec411fa40be1b75a68746e84d1ffe6d4c4ac7699fa132a18","size":48640,"data":"","first_seen":"2026-01-04T14:57:54.944513Z","last_seen":"2026-04-13T23:57:13.944787Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"f-module-pc10.ivtfxip.com/f-module-pc10-3/assets/js/vue@2.7.16.js","fqdn":"f-module-pc10.ivtfxip.com","domain":"ivtfxip.com","tld":"com"},"ip":{"addr":"104.21.78.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"8da91780fa9815752579efedb7b6ee03","sha1":"4525cbd167c96324016eaa2584703e2024e85c90","sha256":"3c1d4b0c549e8de9d4a9bafb12ab70b6a1ac747d07293b98c5b25b6632999afd","sha512":"5b1f278866cf3420fcee64ae174b01472b705b6fb6645afb1f054317c92b09bdde82cb42738a107e283efdc7e0d8e1ddf3629c525398c6548302a747a8ae530b","ssdeep":"1536:/xUpXlU1At+HWTcPKoVMurh6AiRuA7O8vGwYjT9cisc/tz0bl1:eXCIgrHL8vGwYN5tz0bL","tlshash":"53b3e8dcb296b47113eb20b1417f150bf33a6915a80ac590f223e4d67db8c8e916be7d","size":107679,"data":"","first_seen":"2023-12-27T12:14:10Z","last_seen":"2026-06-13T08:21:09.6147Z","times_seen":2044,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"f-module-pc10.ivtfxip.com/f-module-pc10-4/assets/js/i18n.js","fqdn":"f-module-pc10.ivtfxip.com","domain":"ivtfxip.com","tld":"com"},"ip":{"addr":"104.21.78.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"1e7630fcc10eb9dd24a41c2c98611463","sha1":"cb1680c99f05bc7fb7cc006d7ce7664886c1cd15","sha256":"04674c25c416a582ece339bb3fcb27b3a184a811f2419ddba8c6da603cdda3ab","sha512":"8acaab0b29cfdf7a95965d1d6009a1482adfe5cf69f00a78e86ea0682129c5a95f1c1a5bd3a47a67e72040dc88e8a313b9230c05740a7be94b6f237477261095","ssdeep":"192:Ug77gFEJgjRhoW5Rh556O3tmrezWtahJCZX/FlT2K:UaAJhoW5Rh0x","tlshash":"1df1cb37446419b5190a27d7688e7409a16992af7e2c3df3be7d50003f9fa2cb4b47b2","size":7904,"data":"","first_seen":"2026-01-04T14:57:54.940521Z","last_seen":"2026-01-04T14:57:54.940521Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"f-module-pc10.ivtfxip.com/f-module-pc10-3/?moduleName=f-module-pc10-3","fqdn":"f-module-pc10.ivtfxip.com","domain":"ivtfxip.com","tld":"com"},"ip":{"addr":"104.21.78.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"44a19f1eca2056ba584336309a39381b","sha1":"778a5d937021e723290a48c4cd94c23584af13da","sha256":"010518542a91bb8138730b1e8f05b17efcc99338e55f956f602b73e8acda6750","sha512":"03aff852ebfea9f36a90d3381f3db0a336ac0f1c2543b5d91b9b8c482718c6e3a2d1a14bb37f034b73243e519647ebfcaf5f9a6cf83b8fec9a6e26cc7c7d580d","ssdeep":"","tlshash":"4901565600bdf5b2cc06b402116d6ab1d45a0aebc468a5d5f9b8ccb169dcab04b5f13e","size":814,"data":"","first_seen":"2025-05-06T14:56:29.719895Z","last_seen":"2026-05-10T22:50:28.150197Z","times_seen":12,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ivtfxip.com/pc/static/js/npm.echarts~c259bd06.0aa952ac.js","fqdn":"ivtfxip.com","domain":"ivtfxip.com","tld":"com"},"ip":{"addr":"104.21.78.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"4557a713739a29c8d096d0a1dd1c4c77","sha1":"d38b31a1b08defb1fcbfdd1a2677ece2a3e15b7a","sha256":"46fb92618c2e2bc52ff800f457344b8b0666c1167fd39021d195862e651eddca","sha512":"a62604a59c2e592ccb6c2f5a72a61b687eb3a2826a5e73ec482126a0319647a9c4cff8b074c574b4daf65b3da50c271e1a4905667b7a92cd573a8cdf22f15460","ssdeep":"384:xYbJ2lH1K9UGJ+xVOxxD48lrQiPo3ewdB7pF21ASiIZ50V3MlcgqQ2/yr:xYV2lH1KrJ+xoHD9kiPo3emFFIeHga6r","tlshash":"7bf22aa87588f0a5ca5323a698df100b83316a423d0fdd10adadd5c5b4bd45b736ff2a","size":34745,"data":"","first_seen":"2025-04-19T14:49:36.318833Z","last_seen":"2026-05-20T20:17:42.871116Z","times_seen":64,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ivtfxip.com/pc/static/js/npm.echarts~2119ef82.fa75221f.js","fqdn":"ivtfxip.com","domain":"ivtfxip.com","tld":"com"},"ip":{"addr":"104.21.78.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"c230e516390ca2b75fc9857bde2e2aef","sha1":"23ee568fd61235120353720b2ab8d87ed8eced0e","sha256":"798a9e200eaa8ff8b1b436874918dc6072895d270e6d15d11ae61a2e71b9567f","sha512":"0ea6f29cc826dc6e0b434f81a2435c89ce07bb3654b95d79756d36fd484e43ff1888ee90f2098cc23cc9c6a88de6fe283b795c9a83305d9fc1a66b4498491062","ssdeep":"3072:G0fv/x6+g3OhFfqbTUHKFbcHZb2hrlJazcExdnY:NfBM+hFyl9cHZb2FCdnY","tlshash":"8344f8ac7644f01142a332a5446f540f9236681db50fd938be5ad8daa8fd48b333bf79","size":257654,"data":"","first_seen":"2025-04-19T14:49:36.346912Z","last_seen":"2026-05-20T20:17:42.858048Z","times_seen":47,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"f-module-pc10.ivtfxip.com/f-module-pc10-2/assets/js/vue-i18n.js","fqdn":"f-module-pc10.ivtfxip.com","domain":"ivtfxip.com","tld":"com"},"ip":{"addr":"104.21.78.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"de3dcd16bbced832586e79816170a34d","sha1":"fe6df311601c6c133eef5189d66408022d7b39d1","sha256":"0519be799e6c779f84b167be27a7fda41add0d748e7a89f72cba3e8dcb1abd0d","sha512":"a84c28308be595e34184e6c990025cfdb213132344ff9b523b877bbd66d754e756979dda74d4c2775ad3c0405824fe8e029a14b9e4d96c6590db531e72d05a79","ssdeep":"1536:VzcGwVRclFaeA02I5K8CMKK2IPbKf4hT3Adai3K3D3QdaS3Kg:DwV5ZK2IPbKf4q","tlshash":"46331e49adf32052591372fe4faf6045b5388027214dce09b89ea3a45f55f2c93fabd8","size":51091,"data":"","first_seen":"2025-05-06T14:56:29.60368Z","last_seen":"2026-05-10T22:50:28.04562Z","times_seen":38,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"f-module-pc10.ivtfxip.com/f-module-pc10-3/assets/js/element-ui.js","fqdn":"f-module-pc10.ivtfxip.com","domain":"ivtfxip.com","tld":"com"},"ip":{"addr":"104.21.78.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"871ab253bcff550f462f866dbdef7465","sha1":"616b57088730b5322c12649d31d620afd3abc8e6","sha256":"89d3c55e8fa03f177b1cc3824aede7c94b2ce4143f6a30f54ebb96e20eb42bc2","sha512":"45d91bcef6b33e603fef096e9e21efeaa30cab43423d8b5a98911f98da8d9b2e9a7654a9f479444a9bbd8dc4ca4968d5e7a64abee42fa88023c676d75856131d","ssdeep":"6144:BSqtkdlBC7d1xSBiwzlPQa/R6rvnGehHjcFFFw9/8CslIvi/x1:Wm7d1xSBnzlPQa/ofxhHwHFt/x1","tlshash":"e9e4098d72c1b53147a36071103f250bb33b2a9ca809809cb679d5ea6dbda0d526ff7d","size":664912,"data":"","first_seen":"2023-09-27T20:28:23Z","last_seen":"2026-06-08T02:28:42.770668Z","times_seen":2934,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ivtfxip.com/pc/static/js/about~d44a7288.cd4becb3.js","fqdn":"ivtfxip.com","domain":"ivtfxip.com","tld":"com"},"ip":{"addr":"104.21.78.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d7d8e818fe7bac13946eed1b0dfbaf39","sha1":"4b1a6f342d89bab99f55aa7f4974337347bc9c9c","sha256":"1ba47f2ef4a0687862eb820669e58419c9fb6dbba098193b41d46be93d816a34","sha512":"1bb741990a7b720d8c4e5aed85670ff2fe7347e1263b59dfe79ad2e6c00809b98852026eb72c30bb37d9d8f971005e2264f9cae0a3ca09f183f5da493f203277","ssdeep":"6144:rv5L/M7KvFY6mNt4hS/M7PKpsyrtBFtKKR/M7kLPlLNxgZCD/MxZX:l7sA","tlshash":"a7948410b597a27edebe5012701a1930f1762fe4d005905bb73c8d95aac8da8b72e7fc","size":442327,"data":"","first_seen":"2026-01-04T14:57:54.983797Z","last_seen":"2026-04-13T23:57:13.843194Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"f-module-pc10.ivtfxip.com/f-module-pc10-1/assets/js/vue-i18n.js","fqdn":"f-module-pc10.ivtfxip.com","domain":"ivtfxip.com","tld":"com"},"ip":{"addr":"104.21.78.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"de3dcd16bbced832586e79816170a34d","sha1":"fe6df311601c6c133eef5189d66408022d7b39d1","sha256":"0519be799e6c779f84b167be27a7fda41add0d748e7a89f72cba3e8dcb1abd0d","sha512":"a84c28308be595e34184e6c990025cfdb213132344ff9b523b877bbd66d754e756979dda74d4c2775ad3c0405824fe8e029a14b9e4d96c6590db531e72d05a79","ssdeep":"1536:VzcGwVRclFaeA02I5K8CMKK2IPbKf4hT3Adai3K3D3QdaS3Kg:DwV5ZK2IPbKf4q","tlshash":"46331e49adf32052591372fe4faf6045b5388027214dce09b89ea3a45f55f2c93fabd8","size":51091,"data":"","first_seen":"2025-05-06T14:56:29.60368Z","last_seen":"2026-05-10T22:50:28.04562Z","times_seen":38,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"f-module-pc10.ivtfxip.com/f-module-pc10-5/assets/js/element-ui.js","fqdn":"f-module-pc10.ivtfxip.com","domain":"ivtfxip.com","tld":"com"},"ip":{"addr":"104.21.78.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"871ab253bcff550f462f866dbdef7465","sha1":"616b57088730b5322c12649d31d620afd3abc8e6","sha256":"89d3c55e8fa03f177b1cc3824aede7c94b2ce4143f6a30f54ebb96e20eb42bc2","sha512":"45d91bcef6b33e603fef096e9e21efeaa30cab43423d8b5a98911f98da8d9b2e9a7654a9f479444a9bbd8dc4ca4968d5e7a64abee42fa88023c676d75856131d","ssdeep":"6144:BSqtkdlBC7d1xSBiwzlPQa/R6rvnGehHjcFFFw9/8CslIvi/x1:Wm7d1xSBnzlPQa/ofxhHwHFt/x1","tlshash":"e9e4098d72c1b53147a36071103f250bb33b2a9ca809809cb679d5ea6dbda0d526ff7d","size":664912,"data":"","first_seen":"2023-09-27T20:28:23Z","last_seen":"2026-06-08T02:28:42.770668Z","times_seen":2934,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"f-module-pc10.ivtfxip.com/f-module-pc10-4/assets/js/element-ui.js","fqdn":"f-module-pc10.ivtfxip.com","domain":"ivtfxip.com","tld":"com"},"ip":{"addr":"104.21.78.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"871ab253bcff550f462f866dbdef7465","sha1":"616b57088730b5322c12649d31d620afd3abc8e6","sha256":"89d3c55e8fa03f177b1cc3824aede7c94b2ce4143f6a30f54ebb96e20eb42bc2","sha512":"45d91bcef6b33e603fef096e9e21efeaa30cab43423d8b5a98911f98da8d9b2e9a7654a9f479444a9bbd8dc4ca4968d5e7a64abee42fa88023c676d75856131d","ssdeep":"6144:BSqtkdlBC7d1xSBiwzlPQa/R6rvnGehHjcFFFw9/8CslIvi/x1:Wm7d1xSBnzlPQa/ofxhHwHFt/x1","tlshash":"e9e4098d72c1b53147a36071103f250bb33b2a9ca809809cb679d5ea6dbda0d526ff7d","size":664912,"data":"","first_seen":"2023-09-27T20:28:23Z","last_seen":"2026-06-08T02:28:42.770668Z","times_seen":2934,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"f-module-pc10.ivtfxip.com/f-module-pc10-1/?moduleName=f-module-pc10-1","fqdn":"f-module-pc10.ivtfxip.com","domain":"ivtfxip.com","tld":"com"},"ip":{"addr":"104.21.78.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"fb7739c8cf929e503e93c30944d73583","sha1":"e3b1f4e04c5395bb0a3f14fcde82cf1580bb3793","sha256":"db87579dcaca5375ce5b76c53eea5cb418072af9213d6510cc3298b67fc2d2b3","sha512":"ee0f3a3e6e255353d8d38ca1673b7a4373d5541675493b248ff4cdd46dfc4cdc61e40332dcce792e3f6aa2caff78869d7c8bed86314f1480506bfbb41f4bc65e","ssdeep":"","tlshash":"4311b28a04bef9b6cc076403126cba74c84609fbe4a464d4fab4cc66a4dc9f09b5e13d","size":1036,"data":"","first_seen":"2026-01-04T14:57:54.995077Z","last_seen":"2026-01-04T14:57:54.995077Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"f-module-pc10.ivtfxip.com/f-module-pc10-1/assets/js/i18n.js","fqdn":"f-module-pc10.ivtfxip.com","domain":"ivtfxip.com","tld":"com"},"ip":{"addr":"104.21.78.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"a532247a8087d7941ffda8016555150b","sha1":"3616bbdb367345b903a417b43e4501e41a1d4e7d","sha256":"f00564a39c70afd86599e61115de3c978423b55fccaaab4e5a07abad678b62d9","sha512":"5e58071a25651b719a614db6293e12c97c826439aecd04631541b9db5b413570f454c2e859b70cfd7ddcb8f9479a833453714c16c36375ce6860a6253e5a5cd0","ssdeep":"384:9EjR5whw5s0D0tGhunpw0hofqk4/6DyMgmTEYaZXoDapf:ed5sQ6Ghupw0ho84XgmTGXoDapf","tlshash":"52621f77542018b288495689accd3208616e51af2fa9b4e6bd7c49143f9f37ee1f0736","size":14658,"data":"","first_seen":"2026-01-04T14:57:54.914513Z","last_seen":"2026-01-04T14:57:54.914513Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"f-module-pc10.ivtfxip.com/f-module-pc10-1/?moduleName=f-module-pc10-1","fqdn":"f-module-pc10.ivtfxip.com","domain":"ivtfxip.com","tld":"com"},"ip":{"addr":"104.21.78.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"e7e34e26d2eb6bda83629d9b505f9a8b","sha1":"d02280d44eab46b59005c2aba7b5cbc16251a98d","sha256":"b0c5c287dd5d53af823ab16294666451786769b03493da27fd3e9f5075894195","sha512":"a97e2e7cb951591722b20903d7d93d1ff0851408265243fe69c2b7da8b92750b2c34a2fec632a0a6958c14002b58ef92937b10663db2d4a60c88dc8ce32dd595","ssdeep":"","tlshash":"1f51485db2bb1429405771adbfcb65013865b08f1e0abc087f4d45d19f8863eb9f0b68","size":2976,"data":"","first_seen":"2026-01-04T14:57:54.996157Z","last_seen":"2026-01-04T14:57:54.996157Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"f-module-pc10.ivtfxip.com/f-module-pc10-5/assets/js/i18n.js","fqdn":"f-module-pc10.ivtfxip.com","domain":"ivtfxip.com","tld":"com"},"ip":{"addr":"104.21.78.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9e3544d92d760e013559d41c9418ba6e","sha1":"a2be7af08f7a8dfc92bcae17422601fd45dabcf2","sha256":"9870defd0419604a17d8bd9d47728eed49099570bb1dfafd9e5ace650eb62204","sha512":"3a24a67bfdcf3a50201a3e10fac706edfe42459d084d40f0bd121d6b15160c8f8bf65e7fe39a13beb94e620c48dca109445e32698e778c8a80b075397e3ead43","ssdeep":"192:DQGVP3eWqQWLeuvWybzp5ihTyOcKNaOdYcJNc5j0hs3OYnKu612K:DQG5hqQW/WybzPihTyOUOYCc5j0hKOCM","tlshash":"0942723686b1142a1506211ea9ce3a8ae22d099f6fd5b8e1fe9c04151fed03dd3f87f1","size":12251,"data":"","first_seen":"2026-01-04T14:57:54.909471Z","last_seen":"2026-01-04T14:57:54.909471Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ivtfxip.com/pc/static/js/runtime.3f4d25d9.js","fqdn":"ivtfxip.com","domain":"ivtfxip.com","tld":"com"},"ip":{"addr":"104.21.78.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"395ab67021f50f38f19cff0be3bc97e0","sha1":"f199aaebdb130808cd538372af99d225878f9f0c","sha256":"e819c63de415d00a4c56cee8920e3bbf03a1b2372ff3bc1b2d1c6ab975cdafba","sha512":"0e39f57029aea7617464086a1a5d731ee2edeb85598c26c37cdfe29a57f3a56dc5f202721ada25d2c2135fa5fc6537133493464ecd5c36d5ae0cf4006e2c80c1","ssdeep":"96:E3uM7AcNnzXXl0K2IMePGQDWik1/tIAcNnzXytBK6t9VtoS419X6O:W7ASz1r2IXPGQyik1+ASzyG6bwD6O","tlshash":"399184c63ed8f57913525c50087bd495f0696ea288bb5dd0af0fc97cb83cac1064af4a","size":4475,"data":"","first_seen":"2026-01-04T14:57:54.900339Z","last_seen":"2026-04-13T23:57:13.981847Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"f-module-pc10.ivtfxip.com/f-module-pc10-3/assets/js/vue-i18n.js","fqdn":"f-module-pc10.ivtfxip.com","domain":"ivtfxip.com","tld":"com"},"ip":{"addr":"104.21.78.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"de3dcd16bbced832586e79816170a34d","sha1":"fe6df311601c6c133eef5189d66408022d7b39d1","sha256":"0519be799e6c779f84b167be27a7fda41add0d748e7a89f72cba3e8dcb1abd0d","sha512":"a84c28308be595e34184e6c990025cfdb213132344ff9b523b877bbd66d754e756979dda74d4c2775ad3c0405824fe8e029a14b9e4d96c6590db531e72d05a79","ssdeep":"1536:VzcGwVRclFaeA02I5K8CMKK2IPbKf4hT3Adai3K3D3QdaS3Kg:DwV5ZK2IPbKf4q","tlshash":"46331e49adf32052591372fe4faf6045b5388027214dce09b89ea3a45f55f2c93fabd8","size":51091,"data":"","first_seen":"2025-05-06T14:56:29.60368Z","last_seen":"2026-05-10T22:50:28.04562Z","times_seen":38,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"f-module-pc10.ivtfxip.com/f-module-pc10-2/?moduleName=f-module-pc10-2","fqdn":"f-module-pc10.ivtfxip.com","domain":"ivtfxip.com","tld":"com"},"ip":{"addr":"104.21.78.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"b8584c831c15b0b3fec54d42487fa0e8","sha1":"ab87c55dbcd9b39df102f6ecf56f129ddd9cd4b9","sha256":"9a0556ca28908f2b28ec7b3c904b5755f897957076579edd9911ffce5ad9be01","sha512":"e2adcf7c9c9279e5a5456e3bd98f0b70794899345df0824264664871a39ed4e327ab1d42f32bf249132da45c0114357d6c1056468081bfd7a7bdcf3ae2dd1fe9","ssdeep":"","tlshash":"8f018e5511bee4b2cc4bf301016eaab1d51e09f7c06464d8f4b94c6425eddb08b0e13e","size":828,"data":"","first_seen":"2025-05-06T14:56:29.716918Z","last_seen":"2026-05-10T22:50:28.156426Z","times_seen":12,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"f-module-pc10.ivtfxip.com/f-module-pc10-6/?moduleName=f-module-pc10-6","fqdn":"f-module-pc10.ivtfxip.com","domain":"ivtfxip.com","tld":"com"},"ip":{"addr":"104.21.78.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"21ad6a5e027895d7fef5bee4de0a6c02","sha1":"1997f8ca0f217c1001a42318dc5976a0d5a56469","sha256":"6e97ed48cf9a0f9bf4e5199bc5546e24c1067a10e7a582b886143be40f479bb5","sha512":"07595b4d84994a7775a6c79f573984ee4a2eac2ce44e387bf8d0d6a56b17d82782b21c486cbe50760fbb39d9d59ee7b08e0ac221cc51a1d123a048ba7444a8e7","ssdeep":"","tlshash":"c890028520e9656146e32164613b5a46615904f11484884095589c56286b03097694bc","size":54,"data":"","first_seen":"2023-04-11T22:34:44Z","last_seen":"2026-06-13T12:30:53.436251Z","times_seen":4347,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"f-module-pc10.ivtfxip.com/f-module-pc10-5/?moduleName=f-module-pc10-5","fqdn":"f-module-pc10.ivtfxip.com","domain":"ivtfxip.com","tld":"com"},"ip":{"addr":"104.21.78.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"929f8be75c279984604ff176a14c355a","sha1":"da6cf8d427282e56fa699e56e893c1a3009ca963","sha256":"0f57255cc31bd950a34e48293c7dde5b11b05d0c4e2070e2c95dd648ef7f776b","sha512":"9dea5be681c40b937f42f6fe10365fa9075109e19958cb88125dc5942a38c36b9f070ab1d9ed563a51f8514309813a4eb4a9e8e6c66e4e092d858e9632b359b9","ssdeep":"","tlshash":"5701864600bef5b6cd07700222ac6571d44909ebc4647495fdb88d61a9dc5f0878e23e","size":666,"data":"","first_seen":"2026-01-04T14:57:54.998476Z","last_seen":"2026-01-04T14:57:54.998476Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"f-module-pc10.ivtfxip.com/f-module-pc10-5/?moduleName=f-module-pc10-5","fqdn":"f-module-pc10.ivtfxip.com","domain":"ivtfxip.com","tld":"com"},"ip":{"addr":"104.21.78.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"4e03e62de1df41fc9d6c2890ab40bcee","sha1":"f36ffbe0420f9cc520f72a16f946e238c638e4f9","sha256":"53925abc37e386644c2ad25dbf830739e3d282ded6d26ea55e840bc68a4c31ec","sha512":"4cd3ec04dfecdbe6a6105e0f99b4e712b2c3175e4172341d8c33d28d325402bf03f742f6e7817470562236c938329168962ca937f19b01fe51a26b0f879ce46b","ssdeep":"","tlshash":"7d51495db6ba1015509771adbf9f75413961b08f1d0abc087f4c46d01fc862e79f0764","size":2670,"data":"","first_seen":"2026-01-04T14:57:54.999545Z","last_seen":"2026-01-04T14:57:54.999545Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"f-module-pc10.ivtfxip.com/f-module-pc10-6/assets/js/vue@2.7.16.js","fqdn":"f-module-pc10.ivtfxip.com","domain":"ivtfxip.com","tld":"com"},"ip":{"addr":"104.21.78.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"8da91780fa9815752579efedb7b6ee03","sha1":"4525cbd167c96324016eaa2584703e2024e85c90","sha256":"3c1d4b0c549e8de9d4a9bafb12ab70b6a1ac747d07293b98c5b25b6632999afd","sha512":"5b1f278866cf3420fcee64ae174b01472b705b6fb6645afb1f054317c92b09bdde82cb42738a107e283efdc7e0d8e1ddf3629c525398c6548302a747a8ae530b","ssdeep":"1536:/xUpXlU1At+HWTcPKoVMurh6AiRuA7O8vGwYjT9cisc/tz0bl1:eXCIgrHL8vGwYN5tz0bL","tlshash":"53b3e8dcb296b47113eb20b1417f150bf33a6915a80ac590f223e4d67db8c8e916be7d","size":107679,"data":"","first_seen":"2023-12-27T12:14:10Z","last_seen":"2026-06-13T08:21:09.6147Z","times_seen":2044,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"f-module-pc10.ivtfxip.com/f-module-pc10-5/assets/js/vue@2.7.16.js","fqdn":"f-module-pc10.ivtfxip.com","domain":"ivtfxip.com","tld":"com"},"ip":{"addr":"104.21.78.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"8da91780fa9815752579efedb7b6ee03","sha1":"4525cbd167c96324016eaa2584703e2024e85c90","sha256":"3c1d4b0c549e8de9d4a9bafb12ab70b6a1ac747d07293b98c5b25b6632999afd","sha512":"5b1f278866cf3420fcee64ae174b01472b705b6fb6645afb1f054317c92b09bdde82cb42738a107e283efdc7e0d8e1ddf3629c525398c6548302a747a8ae530b","ssdeep":"1536:/xUpXlU1At+HWTcPKoVMurh6AiRuA7O8vGwYjT9cisc/tz0bl1:eXCIgrHL8vGwYN5tz0bL","tlshash":"53b3e8dcb296b47113eb20b1417f150bf33a6915a80ac590f223e4d67db8c8e916be7d","size":107679,"data":"","first_seen":"2023-12-27T12:14:10Z","last_seen":"2026-06-13T08:21:09.6147Z","times_seen":2044,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"f-module-pc10.ivtfxip.com/f-module-pc10-1/assets/js/vue@2.7.16.js","fqdn":"f-module-pc10.ivtfxip.com","domain":"ivtfxip.com","tld":"com"},"ip":{"addr":"104.21.78.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"8da91780fa9815752579efedb7b6ee03","sha1":"4525cbd167c96324016eaa2584703e2024e85c90","sha256":"3c1d4b0c549e8de9d4a9bafb12ab70b6a1ac747d07293b98c5b25b6632999afd","sha512":"5b1f278866cf3420fcee64ae174b01472b705b6fb6645afb1f054317c92b09bdde82cb42738a107e283efdc7e0d8e1ddf3629c525398c6548302a747a8ae530b","ssdeep":"1536:/xUpXlU1At+HWTcPKoVMurh6AiRuA7O8vGwYjT9cisc/tz0bl1:eXCIgrHL8vGwYN5tz0bL","tlshash":"53b3e8dcb296b47113eb20b1417f150bf33a6915a80ac590f223e4d67db8c8e916be7d","size":107679,"data":"","first_seen":"2023-12-27T12:14:10Z","last_seen":"2026-06-13T08:21:09.6147Z","times_seen":2044,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"f-module-pc10.ivtfxip.com/f-module-pc10-6/assets/js/element-ui.js","fqdn":"f-module-pc10.ivtfxip.com","domain":"ivtfxip.com","tld":"com"},"ip":{"addr":"104.21.78.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"871ab253bcff550f462f866dbdef7465","sha1":"616b57088730b5322c12649d31d620afd3abc8e6","sha256":"89d3c55e8fa03f177b1cc3824aede7c94b2ce4143f6a30f54ebb96e20eb42bc2","sha512":"45d91bcef6b33e603fef096e9e21efeaa30cab43423d8b5a98911f98da8d9b2e9a7654a9f479444a9bbd8dc4ca4968d5e7a64abee42fa88023c676d75856131d","ssdeep":"6144:BSqtkdlBC7d1xSBiwzlPQa/R6rvnGehHjcFFFw9/8CslIvi/x1:Wm7d1xSBnzlPQa/ofxhHwHFt/x1","tlshash":"e9e4098d72c1b53147a36071103f250bb33b2a9ca809809cb679d5ea6dbda0d526ff7d","size":664912,"data":"","first_seen":"2023-09-27T20:28:23Z","last_seen":"2026-06-08T02:28:42.770668Z","times_seen":2934,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"f-module-pc10.ivtfxip.com/f-module-pc10-2/?moduleName=f-module-pc10-2","fqdn":"f-module-pc10.ivtfxip.com","domain":"ivtfxip.com","tld":"com"},"ip":{"addr":"104.21.78.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"21ad6a5e027895d7fef5bee4de0a6c02","sha1":"1997f8ca0f217c1001a42318dc5976a0d5a56469","sha256":"6e97ed48cf9a0f9bf4e5199bc5546e24c1067a10e7a582b886143be40f479bb5","sha512":"07595b4d84994a7775a6c79f573984ee4a2eac2ce44e387bf8d0d6a56b17d82782b21c486cbe50760fbb39d9d59ee7b08e0ac221cc51a1d123a048ba7444a8e7","ssdeep":"","tlshash":"c890028520e9656146e32164613b5a46615904f11484884095589c56286b03097694bc","size":54,"data":"","first_seen":"2023-04-11T22:34:44Z","last_seen":"2026-06-13T12:30:53.436251Z","times_seen":4347,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ivtfxip.com/pc/","fqdn":"ivtfxip.com","domain":"ivtfxip.com","tld":"com"},"ip":{"addr":"104.21.78.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"5a5af419addbaf040dec15a4b7232ae1","sha1":"1a8cf295a9afec72b737b32e9b44ff266525aa82","sha256":"ce5a78360e01a11155b405f05feaf674fc65a961d2a49bd0bcb155bbe3e027bb","sha512":"e32abd9d1a29837a40fe9668926b50b8dc31167682140c41dcc3094592c155f26bf9a42d6d35abf7d8bce5354b85e1452c0bb156a6e3e2c25bc61c72519394d4","ssdeep":"","tlshash":"26218cbe032311980ea1b1169f0db5503271814f1940d54b3c9dca22ff6550e29f2ebd","size":1271,"data":"","first_seen":"2026-01-04T14:57:55.000661Z","last_seen":"2026-04-10T23:45:47.565612Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ivtfxip.com/pc/static/js/npm.echarts~41ff223c.92c70dac.js","fqdn":"ivtfxip.com","domain":"ivtfxip.com","tld":"com"},"ip":{"addr":"104.21.78.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"5c72ecf07d0d58416b164722d1b6c3f4","sha1":"b4a07ee445c6c9eaecd47b41fe0294edd66a99d5","sha256":"be423765f481ab4d2b12202fef46f91b5e5f87c773583ef12e7a8f7b67c5bfde","sha512":"1f472dcdd134186af3b11bea42ef213ed427eb1f0199c4d3935160cef4ca3f46b9e5d33cdfc0a3a5408537251680989401c6d5c73be0e021bd9c64273396e1c6","ssdeep":"3072:fquJcwC1aFIzUM+G2sEksaAY38XrQQhQlXrHZDZ5PFcYf+0WO:fqgJCGIDj2sn380Qh+rtZ59cq+0R","tlshash":"d4443aa97244b06243e332f851af180f9336144ce94ad528ba55d5e96cbe45f333bf3a","size":274660,"data":"","first_seen":"2025-04-19T14:49:36.263686Z","last_seen":"2026-05-20T20:17:42.854633Z","times_seen":47,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ivtfxip.com/pc/static/js/app~748942c6.3d1e9460.js","fqdn":"ivtfxip.com","domain":"ivtfxip.com","tld":"com"},"ip":{"addr":"104.21.78.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"f4ce37cd2f2278b35e4286fdaa21aa05","sha1":"684048c2343d38239128a81e16aee169f00011a6","sha256":"d1c93fcc572dd6cf58cf9eb0a8953d83ba3b53f7e2abd2d5e4a0de1e06826a1b","sha512":"5b28bc1b818c30b8015b64fa83dd2e11a026fcfb05d49d43b7a0d2b9a1114b9151c5f88c3fda3fd62631fcf8e2d121ab16b57e3d4eaf05d10cbb9be83228f518","ssdeep":"768:g43PwXWT9edG9TKKZlslzYbewieaBeBieBZeB6eBFeB/eBWe20eBCeBpeaoeBsu+:LPKcfnmzPi0s6","tlshash":"57e2f8cd3ad4b05957e332f5505f680bb2b7d528580e8890f7a1e4f2acb591e4723f2a","size":33075,"data":"","first_seen":"2026-01-04T14:57:54.887425Z","last_seen":"2026-04-13T23:57:13.856918Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ivtfxip.com/pc/static/js/about~753d5752.745139f3.js","fqdn":"ivtfxip.com","domain":"ivtfxip.com","tld":"com"},"ip":{"addr":"104.21.78.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"5a27983c7a7e5978b5a29af7eef5f881","sha1":"60724b7e9e677ff322e230156a58e9fb490d140d","sha256":"47c344f8325d30f830e39659003febb6bf4aec951a40b1f84fad9b3990d0edf9","sha512":"3d48cadf9aec8eb231989a3e294cd28cd9bd7a5111461d103b583e2da07389dad410de8510b19af0fc96addb96435084a34a9e8ed2c0b5381982861a33c05dcb","ssdeep":"768:EnDsx1vg+qhAvkPj56i2Ve2f0VgeWBlEo8ajW6K:P1YLZAf0Vux8ae","tlshash":"90430065a097c0baed3e9092535d2a34e1253fe0d421d45afbb88de186c9cb4633d7bc","size":60515,"data":"","first_seen":"2026-01-04T14:57:54.926459Z","last_seen":"2026-04-13T23:57:13.888514Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ivtfxip.com/pc/static/js/about~defe45ab.782a6af2.js","fqdn":"ivtfxip.com","domain":"ivtfxip.com","tld":"com"},"ip":{"addr":"104.21.78.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"aba593460689fb49d99d1d385e0c7f8d","sha1":"05c9848e7867d55003e8c03ce7f9f53629d9227a","sha256":"ccafeed815244ca88e12770bfd58dd3d638e51ba2324068dc500ff7b54e77c53","sha512":"e027391ffe13310afed28afce916d7b106a793e49d1967db01068c831c0a9db9366b084e9e93a6481fe837183be4d8da40c6fe5a1a2677035d6d242a182960bb","ssdeep":"1536:Mlx7OCOd/3sOCQdGZyrtcIll9L67zlsybd9+YVAY6F/74q325+HVAZDihxDO4BlO:MVyrtcIll9oDiYm4XxZFnCTu3B2F+","tlshash":"1524a355a19ba1bede7e4161205e1a34f0753fe4d015c04bf7788c989ac9ca83b0ebbc","size":217134,"data":"","first_seen":"2025-10-07T13:51:05.907863Z","last_seen":"2026-05-01T07:36:16.012018Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"f-module-pc10.ivtfxip.com/f-module-pc10-5/assets/js/vue-i18n.js","fqdn":"f-module-pc10.ivtfxip.com","domain":"ivtfxip.com","tld":"com"},"ip":{"addr":"104.21.78.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"de3dcd16bbced832586e79816170a34d","sha1":"fe6df311601c6c133eef5189d66408022d7b39d1","sha256":"0519be799e6c779f84b167be27a7fda41add0d748e7a89f72cba3e8dcb1abd0d","sha512":"a84c28308be595e34184e6c990025cfdb213132344ff9b523b877bbd66d754e756979dda74d4c2775ad3c0405824fe8e029a14b9e4d96c6590db531e72d05a79","ssdeep":"1536:VzcGwVRclFaeA02I5K8CMKK2IPbKf4hT3Adai3K3D3QdaS3Kg:DwV5ZK2IPbKf4q","tlshash":"46331e49adf32052591372fe4faf6045b5388027214dce09b89ea3a45f55f2c93fabd8","size":51091,"data":"","first_seen":"2025-05-06T14:56:29.60368Z","last_seen":"2026-05-10T22:50:28.04562Z","times_seen":38,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ivtfxip.com/pc/static/js/npm.qrcode~029d41c7.6d0e51ea.js","fqdn":"ivtfxip.com","domain":"ivtfxip.com","tld":"com"},"ip":{"addr":"104.21.78.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"f6ab144353cef6131607ba238a58bfaf","sha1":"c90946ff9638b4bce5c487ee79684d899f257f94","sha256":"8ca6c33dbc41f3adbb67fc6e4b678419fb565f8bb768e5825481df436c0d9bb3","sha512":"6d6c6f8800098a3bdb77ff51939e082576d68ee7295ed561b6da5a698f8c1d1645813a4780dcd2134e4cb125b9063555536e78eae2620a6eac71b2f44f20cc62","ssdeep":"384:uTTIBAZS9X8OhLpALVqaem1QINHqBRF42J6dKFyUm89F86NFIZTSGCH2y5pbKEnZ:uTTIBuVqap1WrJ6dK1m89+6NpGCH2yvt","tlshash":"e6a2d699b39071ab53d725d6002f1405e1fea864341a45f8fa18d8d3bd78eaa90b7f3c","size":23347,"data":"","first_seen":"2025-05-06T14:56:29.669662Z","last_seen":"2026-05-20T20:17:42.878329Z","times_seen":38,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ivtfxip.com/pc/static/js/npm.zrender~cd89f23c.9f26840a.js","fqdn":"ivtfxip.com","domain":"ivtfxip.com","tld":"com"},"ip":{"addr":"104.21.78.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"7989b3e5759b93c712056d5f76e2d43e","sha1":"4461531238819c59fc30e1435ade99bc049a7d25","sha256":"5ce6145c3a11904243b10a3da84d08df4bc7a0d715e911749262053a6294f7a7","sha512":"18e4405477effa6eaff3dc4e79bfbcdb30c182945819ab6eb7fe93225bca0b528cdfb4654d0790265f303c09a8275e4c87b10f036041e47ce1a14d34859987e6","ssdeep":"3072:eJq8dyZzg7JerD5rTnQg7APl08+RcABn9V9s:44Zzg7crDJQgcPl+R9M","tlshash":"3934f8e8b681b064434362e5803f150ff23b255db50e89acf625e4da6cbc44d627bf7a","size":230399,"data":"","first_seen":"2025-05-16T20:21:57.639301Z","last_seen":"2026-05-20T20:17:42.872033Z","times_seen":39,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"f-module-pc10.ivtfxip.com/f-module-pc10-4/assets/js/vue@2.7.16.js","fqdn":"f-module-pc10.ivtfxip.com","domain":"ivtfxip.com","tld":"com"},"ip":{"addr":"104.21.78.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"8da91780fa9815752579efedb7b6ee03","sha1":"4525cbd167c96324016eaa2584703e2024e85c90","sha256":"3c1d4b0c549e8de9d4a9bafb12ab70b6a1ac747d07293b98c5b25b6632999afd","sha512":"5b1f278866cf3420fcee64ae174b01472b705b6fb6645afb1f054317c92b09bdde82cb42738a107e283efdc7e0d8e1ddf3629c525398c6548302a747a8ae530b","ssdeep":"1536:/xUpXlU1At+HWTcPKoVMurh6AiRuA7O8vGwYjT9cisc/tz0bl1:eXCIgrHL8vGwYN5tz0bL","tlshash":"53b3e8dcb296b47113eb20b1417f150bf33a6915a80ac590f223e4d67db8c8e916be7d","size":107679,"data":"","first_seen":"2023-12-27T12:14:10Z","last_seen":"2026-06-13T08:21:09.6147Z","times_seen":2044,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"f-module-pc10.ivtfxip.com/f-module-pc10-1/?moduleName=f-module-pc10-1","fqdn":"f-module-pc10.ivtfxip.com","domain":"ivtfxip.com","tld":"com"},"ip":{"addr":"104.21.78.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"21ad6a5e027895d7fef5bee4de0a6c02","sha1":"1997f8ca0f217c1001a42318dc5976a0d5a56469","sha256":"6e97ed48cf9a0f9bf4e5199bc5546e24c1067a10e7a582b886143be40f479bb5","sha512":"07595b4d84994a7775a6c79f573984ee4a2eac2ce44e387bf8d0d6a56b17d82782b21c486cbe50760fbb39d9d59ee7b08e0ac221cc51a1d123a048ba7444a8e7","ssdeep":"","tlshash":"c890028520e9656146e32164613b5a46615904f11484884095589c56286b03097694bc","size":54,"data":"","first_seen":"2023-04-11T22:34:44Z","last_seen":"2026-06-13T12:30:53.436251Z","times_seen":4347,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"f-module-pc10.ivtfxip.com/f-module-pc10-4/?moduleName=f-module-pc10-4","fqdn":"f-module-pc10.ivtfxip.com","domain":"ivtfxip.com","tld":"com"},"ip":{"addr":"104.21.78.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"a750e4767129c4432165e79011c46069","sha1":"d5e9a900f4f893e4f0461eb88a9f6da28d94c64d","sha256":"9baeee83c156e7d18e583066f86ff9fb89955b60f9e26362223ebdb1b92476b9","sha512":"857230c53dbd9ff95e7834a265760498bd8258bed94d7006d698edac715f42668582b3ff2e7ced42c8cd32dd81ab94f44654d8fffa8c22c84964b54301d785a1","ssdeep":"","tlshash":"1e319f4604bef976cc07b402226d75b0d88505ebd46ca5a9fa7d8c61b7dc6b04b4e23e","size":1518,"data":"","first_seen":"2025-05-06T14:56:29.721997Z","last_seen":"2026-05-10T22:50:28.15468Z","times_seen":12,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ivtfxip.com/pc/static/js/npm.echarts~4939e289.8c50a0e4.js","fqdn":"ivtfxip.com","domain":"ivtfxip.com","tld":"com"},"ip":{"addr":"104.21.78.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"b6cc7ec8fb15c152bdd42d698d0715ee","sha1":"04006694ff40c3d9ba14fc9425eaa7a1b5d35d75","sha256":"a71a8fa7f6de6f377118d122dcb72fa45e14c0958a311dfab28e59ca65e81d55","sha512":"5b73a3df4dd3fc6779c7d5dc25d1997084243a9b06e4b1cb66684d03efec2ea2a9f21be6a338abc2fa13b8e471b9c38e177179c322039f0707e8db1a1c3a27ee","ssdeep":"1536:I/sMp67O+woDhKVM9LioOlpE+7aXGQT5N438jxGf9+V2:tMpcO+wm9L8lhAjcVf","tlshash":"ac04a498f695f065439731a0467f050fe33a685db80a85acfa90c4da6cbc44a363bf79","size":187942,"data":"","first_seen":"2025-04-19T14:49:36.176387Z","last_seen":"2026-05-20T20:17:42.8165Z","times_seen":47,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ivtfxip.com/pc/static/js/npm.echarts~2aec3c5f.70f1e423.js","fqdn":"ivtfxip.com","domain":"ivtfxip.com","tld":"com"},"ip":{"addr":"104.21.78.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"11427ee2ddc371dd01f6be8bd2181122","sha1":"18b7e8c273be7cc60307937402e3f0048d7d552c","sha256":"576a7edc0b4ea3d209f82efd39e892ee53cc072806a5987428a7f10b04080645","sha512":"ca4b01425818596ee0b6f460680c580e146559d69955fa57e914e45b72910727360e555563139b245c16314c5c290161f6e4666b3e1461f9e650a6e0f5ce83ec","ssdeep":"384:/mRF5hEvBPeBdIoRK/TMBlLD14K3Pn/DW3y3:eRDhLiMBlLDB3Psy3","tlshash":"999272dcb6c6f09a069b36f4056f1827e3366c8abd0de9009781c0d6786855db327f6e","size":20580,"data":"","first_seen":"2025-04-19T14:49:36.304969Z","last_seen":"2026-05-20T20:17:42.877874Z","times_seen":64,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ivtfxip.com/pc/static/js/about~aabdebcb.2e63be9e.js","fqdn":"ivtfxip.com","domain":"ivtfxip.com","tld":"com"},"ip":{"addr":"104.21.78.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"c8b4d79f6cba6c856bfde1d28f442d8d","sha1":"045075b5a6213b7651cb6c797f19dbd7f3a52a7b","sha256":"d81ea43feaf0d2d52cbdb8af2d138cde91e4118db7b31c4ff1e41750d92dd276","sha512":"72986d525cd26d89a35612092d5f663df3bcddc00b3ef2de736e4d6102a367cac81153b8260c447218cdb07fbc08ca02a6378c6fac13e43f095538ca5d38316c","ssdeep":"1536:ig5ZM/I5KiWDKwFaPa8kbZdJ6OPrcpZfWARBo+DotEo/Jw/+2xaDByAczipOHerY:7L/lSj9p6zGZGAczipOHUO","tlshash":"7af3b50fa28791bdce7e80a1601d5534a1362fe89412c059f7788ce59ac4db8676fbfc","size":171399,"data":"","first_seen":"2026-01-04T14:57:54.941814Z","last_seen":"2026-04-13T23:57:13.844348Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"f-module-pc10.ivtfxip.com/f-module-pc10-4/assets/js/vue-i18n.js","fqdn":"f-module-pc10.ivtfxip.com","domain":"ivtfxip.com","tld":"com"},"ip":{"addr":"104.21.78.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"de3dcd16bbced832586e79816170a34d","sha1":"fe6df311601c6c133eef5189d66408022d7b39d1","sha256":"0519be799e6c779f84b167be27a7fda41add0d748e7a89f72cba3e8dcb1abd0d","sha512":"a84c28308be595e34184e6c990025cfdb213132344ff9b523b877bbd66d754e756979dda74d4c2775ad3c0405824fe8e029a14b9e4d96c6590db531e72d05a79","ssdeep":"1536:VzcGwVRclFaeA02I5K8CMKK2IPbKf4hT3Adai3K3D3QdaS3Kg:DwV5ZK2IPbKf4q","tlshash":"46331e49adf32052591372fe4faf6045b5388027214dce09b89ea3a45f55f2c93fabd8","size":51091,"data":"","first_seen":"2025-05-06T14:56:29.60368Z","last_seen":"2026-05-10T22:50:28.04562Z","times_seen":38,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"f-module-pc10.ivtfxip.com/f-module-pc10-1/assets/js/element-ui.js","fqdn":"f-module-pc10.ivtfxip.com","domain":"ivtfxip.com","tld":"com"},"ip":{"addr":"104.21.78.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"871ab253bcff550f462f866dbdef7465","sha1":"616b57088730b5322c12649d31d620afd3abc8e6","sha256":"89d3c55e8fa03f177b1cc3824aede7c94b2ce4143f6a30f54ebb96e20eb42bc2","sha512":"45d91bcef6b33e603fef096e9e21efeaa30cab43423d8b5a98911f98da8d9b2e9a7654a9f479444a9bbd8dc4ca4968d5e7a64abee42fa88023c676d75856131d","ssdeep":"6144:BSqtkdlBC7d1xSBiwzlPQa/R6rvnGehHjcFFFw9/8CslIvi/x1:Wm7d1xSBnzlPQa/ofxhHwHFt/x1","tlshash":"e9e4098d72c1b53147a36071103f250bb33b2a9ca809809cb679d5ea6dbda0d526ff7d","size":664912,"data":"","first_seen":"2023-09-27T20:28:23Z","last_seen":"2026-06-08T02:28:42.770668Z","times_seen":2934,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ivtfxip.com/pc/static/js/about~f71cff67.8c18c2f3.js","fqdn":"ivtfxip.com","domain":"ivtfxip.com","tld":"com"},"ip":{"addr":"104.21.78.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"64fc74d0559b959915fcc42eeb8e69ea","sha1":"7790fd6bf29416c6f53c05564c1dd95cf835aabe","sha256":"a54cf7febe9bc550b2e58eeab15e87abbcb41da3306fb5457fbac50b92d8f7f2","sha512":"1386052d2a3a3a8ccddbe47471a41648754cb4c02d2a3b97474bc2396d1aaef3bc88e6142a8ca4919ee4f1f381f2fd96e3628a947e54d91dadba0f3230bd9b0a","ssdeep":"384:SfameoGI2DQEKRkZ68ASNi1roJlKnz91kkNjIPNzGsrTwc1yyLF9r:nmeoGI9EKRkZ68ASNiKlKz91kQIPNGsd","tlshash":"ffb2841d629b1538dabe50f1609b9a24912afb84e002841fb67c4dd1f0e1f58338fb7d","size":23574,"data":"","first_seen":"2025-07-17T05:14:10.793431Z","last_seen":"2026-05-20T20:17:42.820478Z","times_seen":31,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ivtfxip.com/pc/static/js/about~748942c6.467a5c52.js","fqdn":"ivtfxip.com","domain":"ivtfxip.com","tld":"com"},"ip":{"addr":"104.21.78.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"78402fb403da7d0bb359f7b5c317b400","sha1":"293fb2f0abe898d7c8a5cc85e4a0e163e425d136","sha256":"3e53223942197f39e4502bce8a23b26fcff93b7f8bb09789335c40dedee1471c","sha512":"ff0150f3a80f6b6916d208ddb7744c67a80f5fa709febe5cc23a98400163ec534d8b52acbb4b2bfb06927c79424d35cf1a7a8949dc6deb9234816557839f634f","ssdeep":"3072:V3dq49TZ4juqmXYfTQnihMxKhHDHhjHXlmn+XP:ddqMt4ju5XYfUnihMxKhjHhbXpf","tlshash":"0b34e698f395b02186976135003f250bb2366454a5cbc68cf13adae96e7c88d36b3f3d","size":245496,"data":"","first_seen":"2025-06-28T18:37:46.383524Z","last_seen":"2026-05-20T20:17:42.838659Z","times_seen":33,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"f-module-pc10.ivtfxip.com/f-module-pc10-2/assets/js/vue@2.7.16.js","fqdn":"f-module-pc10.ivtfxip.com","domain":"ivtfxip.com","tld":"com"},"ip":{"addr":"104.21.78.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"8da91780fa9815752579efedb7b6ee03","sha1":"4525cbd167c96324016eaa2584703e2024e85c90","sha256":"3c1d4b0c549e8de9d4a9bafb12ab70b6a1ac747d07293b98c5b25b6632999afd","sha512":"5b1f278866cf3420fcee64ae174b01472b705b6fb6645afb1f054317c92b09bdde82cb42738a107e283efdc7e0d8e1ddf3629c525398c6548302a747a8ae530b","ssdeep":"1536:/xUpXlU1At+HWTcPKoVMurh6AiRuA7O8vGwYjT9cisc/tz0bl1:eXCIgrHL8vGwYN5tz0bL","tlshash":"53b3e8dcb296b47113eb20b1417f150bf33a6915a80ac590f223e4d67db8c8e916be7d","size":107679,"data":"","first_seen":"2023-12-27T12:14:10Z","last_seen":"2026-06-13T08:21:09.6147Z","times_seen":2044,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"f-module-pc10.ivtfxip.com/f-module-pc10-3/?moduleName=f-module-pc10-3","fqdn":"f-module-pc10.ivtfxip.com","domain":"ivtfxip.com","tld":"com"},"ip":{"addr":"104.21.78.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"21ad6a5e027895d7fef5bee4de0a6c02","sha1":"1997f8ca0f217c1001a42318dc5976a0d5a56469","sha256":"6e97ed48cf9a0f9bf4e5199bc5546e24c1067a10e7a582b886143be40f479bb5","sha512":"07595b4d84994a7775a6c79f573984ee4a2eac2ce44e387bf8d0d6a56b17d82782b21c486cbe50760fbb39d9d59ee7b08e0ac221cc51a1d123a048ba7444a8e7","ssdeep":"","tlshash":"c890028520e9656146e32164613b5a46615904f11484884095589c56286b03097694bc","size":54,"data":"","first_seen":"2023-04-11T22:34:44Z","last_seen":"2026-06-13T12:30:53.436251Z","times_seen":4347,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"f-module-pc10.ivtfxip.com/f-module-pc10-1/?moduleName=f-module-pc10-1","fqdn":"f-module-pc10.ivtfxip.com","domain":"ivtfxip.com","tld":"com"},"ip":{"addr":"104.21.78.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"20d04d28ff2a5df73fa195522765ca3d","sha1":"c423ac08ebf22ee49558d5edbff929144b74b9be","sha256":"302098452093cf73d43e99c2360623f7a8fff86caf6e330343ec7ba3f4fc37f1","sha512":"cdf8d8b66e00b2ad280fb0e64697b3d1ed4d261fea5c4392a4bd1058b3909c995c20bda0b34ed21ae45b615b8951c6b988d5a8b8fbaaa53ea16c0f4d965e2a6a","ssdeep":"","tlshash":"6fc0224310adf8738c623020202936d1f21c83aac088c290b06ccc2024e92b8632a43c","size":193,"data":"","first_seen":"2026-01-04T14:57:55.002387Z","last_seen":"2026-01-04T14:57:55.002387Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"ivtfxip.com/pc/static/js/app~f71cff67.25641a36.js","fqdn":"ivtfxip.com","domain":"ivtfxip.com","tld":"com"},"ip":{"addr":"104.21.78.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ivtfxip.com/pc/","date":"2026-01-04T14:57:00.575Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ivtfxip.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 25 Dec 2025 22:47:06 GMT","end":"Wed, 25 Mar 2026 23:47:02 GMT"},"fingerprint":{"sha1":"A2:E6:E0:E1:3D:71:15:E7:6A:95:1C:EC:53:3E:E4:AC:2E:D2:14:88","sha256":"EA:63:A1:B5:51:F9:8A:2E:D6:72:A0:97:14:88:41:61:B9:B7:97:70:CB:73:D8:93:0E:BF:F1:D0:C9:0A:B5:89"}}},"request":{"raw":"GET /pc/static/js/app~f71cff67.25641a36.js HTTP/1.1\r\nHost: ivtfxip.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ivtfxip.com/pc/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 04 Jan 2026 14:57:00 GMT\r\npriority: u=3,i=?0\r\ncontent-type: application/javascript\r\ncf-cache-status: MISS\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=m7dSSgYOqBMhw3tJVqCgCdpbqNJvf6D8dZZ3or3pKQ1zct%2Bzcq5M2hjzX7ZrUaEDlp1nGzhUMB4pMrNpqCpsj%2Bh48TUlo%2BuKdVAE\"}]}\r\netag: W/\"a86b30b72b220a2495e9c7ad57c35fb7\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9b8b95fa6fdd35a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":88972,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65508), with no line terminators","md5":"c61544b074457243df5075e57db5243f","sha1":"a3d393330d5ad808d17d5fff854edf3464fb43e5","sha256":"9ae0b2e38ae2c41acc7037a1b1cf6ae5ad14a55ee6157e564edfe944d0db6253","sha512":"d3720af3570f14689297d2d0fe60a935ae4fd411540b72d2b559909eac3f883949aa88135c4cb7e1dae33835464ad69b3ab11517fb72e3baf554d9783a9835fa","ssdeep":"1536:QN1tRDOCGykSpKoCTNGtk26Xu6rfh0OHtIqIhQsffQrf:+OXydpKoCRvIQvb","tlshash":"7f93d80f238e867c4faa4260600d65b4b1b22dc5a185c55cf3f8ac95a9d9c6dd33dfac","first_seen":"2026-01-04T14:57:54.854189Z","last_seen":"2026-04-13T23:57:13.830931Z","times_seen":3,"resource_available":false,"data":null}},"time_used":109,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":108,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"ivtfxip.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.ivtfxip.com/api/app/basis/article/byType","fqdn":"api.ivtfxip.com","domain":"ivtfxip.com","tld":"com"},"ip":{"addr":"104.21.78.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ivtfxip.com/pc/","date":"2026-01-04T14:57:03.299Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.ivtfxip.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 25 Dec 2025 22:40:43 GMT","end":"Wed, 25 Mar 2026 23:40:41 GMT"},"fingerprint":{"sha1":"D1:71:A2:C4:12:9D:CD:50:E5:B5:2D:A0:DB:0A:A0:3E:34:E8:FC:96","sha256":"F4:93:8B:FD:69:F9:AF:4F:CA:47:BC:51:06:9A:1E:76:FD:94:50:77:F6:22:8E:6E:51:5C:40:DA:2A:C7:4B:B6"}}},"request":{"raw":"POST /api/app/basis/article/byType HTTP/1.1\r\nHost: api.ivtfxip.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ivtfxip.com/\r\nContent-Type: application/json;charset=UTF-8\r\naws-check: true\r\nX-Requested-With: XMLHttpRequest\r\napp_language: English\r\napp_version: P2.9.3\r\napp_client_timezone: +8\r\nrequest_domain: https://ivtfxip.com/pc/#/\r\napp_analog: false\r\napp_model: f\r\napp_auth_by_token: \r\ntheme-mode: 2\r\nContent-Length: 11\r\nOrigin: https://ivtfxip.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":11,"data":"{\"type\":65}"}},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 04 Jan 2026 14:57:03 GMT\r\ncontent-type: application/json\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MavxatyeCbFSvH%2F0HhC%2FnQbATpNmD2ssdnlaQdzQxJvlqfaX8fOMV3rEmq%2Fj4SgOELIaQngHR5U0MlJ7sZEe555z10Oe9MUypd4xXy0%3D\"}]}\r\nvary: accept-encoding\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: https://ivtfxip.com\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 86400\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncf-ray: 9b8b960b69ca56c3-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":59,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"9c2f820634d4f7804bff9473e1075d96","sha1":"797e965053c4474e3d577561ccc5cfc7db3e85e3","sha256":"7929171477295ed05b0ddd10eace22051c46cecffdc3a9780c1d763302984108","sha512":"b6950b8a0f3fd45982168ca8ea9644960eb1b7a447f042a6257bdef2b265bfa0688eb7ec8581f614756a778264a02aa3ed327de7a9b465f48ef809c706320a5e","ssdeep":"","tlshash":"60a002c018ec00b14f808384101f192148bda4d519290100576cd82652f40713614726","first_seen":"2025-04-07T10:36:29.519274Z","last_seen":"2026-06-10T03:07:08.799026Z","times_seen":1173,"resource_available":false,"data":null}},"time_used":443,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":443,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"api.ivtfxip.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"f-module-pc10.ivtfxip.com/f-module-pc10-3/assets/js/element-ui.css","fqdn":"f-module-pc10.ivtfxip.com","domain":"ivtfxip.com","tld":"com"},"ip":{"addr":"104.21.78.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://f-module-pc10.ivtfxip.com/f-module-pc10-3/?moduleName=f-module-pc10-3","date":"2026-01-04T14:57:04.501Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"f-module-pc10.ivtfxip.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 25 Dec 2025 22:43:25 GMT","end":"Wed, 25 Mar 2026 23:43:19 GMT"},"fingerprint":{"sha1":"BD:75:C7:0C:CF:4C:8B:C6:F0:02:2E:9D:B3:1B:50:54:C3:72:BE:D9","sha256":"19:4F:8E:B1:B5:41:99:3C:AC:F4:8B:36:B6:A9:44:7E:9A:11:1B:8C:E9:7F:5B:40:32:92:FF:44:8F:66:46:C3"}}},"request":{"raw":"GET /f-module-pc10-3/assets/js/element-ui.css HTTP/1.1\r\nHost: f-module-pc10.ivtfxip.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://f-module-pc10.ivtfxip.com/f-module-pc10-3/?moduleName=f-module-pc10-3\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 04 Jan 2026 14:57:04 GMT\r\npriority: u=2,i=?0\r\ncontent-type: text/css; charset=utf-8\r\ncf-cache-status: MISS\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lyyaItO4sVNck6RLmFU7F50%2FoXYaAJXYqPTKBBzZbCbN6Brm8rL1E%2BZkLZDSj2UOqyEP0ZhhrX53R5o9ZRvNUF6cBc3BKqKQq6wguvYe0lJoMipzej0WTD8%3D\"}]}\r\netag: W/\"632d3d97e401fbba7d150528ffec271f\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9b8b9612f9d80731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":240033,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"07ced7e527d781115b5a9f3f3f559884","sha1":"371b1a3e8d3453a2451e76320d9d7c0e301331b8","sha256":"dc86d4797565d05e88d63598128328e2ed6f02f7f6d950a36a1c4ca9eb9c8057","sha512":"a19dda2047af06da26cb446e5a9184fbb87ef5db209368305f4636d5bf28bd29442d05b556540359dc41198218092ce706bf1a7b765e18b3c481c2edd068e10e","ssdeep":"1536:c28Y7SrW3YeWXA1u9w4HCe/l4TEg5fqMEeje378OaiZkW1YO8eQM+yFffwbIcfGc:lvHjahfAG1U2VGDt","tlshash":"b234a7219b03216b612bde6cb6c0ba895f18c323d4725bbbfe95740dc7d34891267a4f","first_seen":"2023-08-28T11:31:40Z","last_seen":"2026-06-13T01:56:53.17937Z","times_seen":1444,"resource_available":false,"data":null}},"time_used":49,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":39,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"f-module-pc10.ivtfxip.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"f-module-pc10.ivtfxip.com/f-module-pc10-3/assets/images/3.png","fqdn":"f-module-pc10.ivtfxip.com","domain":"ivtfxip.com","tld":"com"},"ip":{"addr":"104.21.78.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://f-module-pc10.ivtfxip.com/f-module-pc10-3/?moduleName=f-module-pc10-3","date":"2026-01-04T14:57:04.535Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"f-module-pc10.ivtfxip.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 25 Dec 2025 22:43:25 GMT","end":"Wed, 25 Mar 2026 23:43:19 GMT"},"fingerprint":{"sha1":"BD:75:C7:0C:CF:4C:8B:C6:F0:02:2E:9D:B3:1B:50:54:C3:72:BE:D9","sha256":"19:4F:8E:B1:B5:41:99:3C:AC:F4:8B:36:B6:A9:44:7E:9A:11:1B:8C:E9:7F:5B:40:32:92:FF:44:8F:66:46:C3"}}},"request":{"raw":"GET /f-module-pc10-3/assets/images/3.png HTTP/1.1\r\nHost: f-module-pc10.ivtfxip.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://f-module-pc10.ivtfxip.com/f-module-pc10-3/?moduleName=f-module-pc10-3\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 244180\r\npriority: u=4,i=?0\r\ncontent-type: image/png\r\ncf-cache-status: MISS\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"3da8ced5161557422303d239969f0a75\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LX5EibOj5FgtY9A7t%2BnjN%2FH2y8bUMVY%2BwSx6ES%2B7TpXYmZcQ31rgvdljO%2BW8oqY9wKqVBj%2FxRefKbMISWb19vXfGvZ%2B6G3K1Kaq1NlXXtRf7mZYVrF6SeK8%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\naccept-ranges: bytes\r\ndate: Sun, 04 Jan 2026 14:57:04 GMT\r\ncf-ray: 9b8b961319df0731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":244180,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 470 x 320, 8-bit/color RGBA, non-interlaced","md5":"0477dc693eb0e39e8bc1ee45ba612f35","sha1":"b82aec1c7e3712900b94e2202e621fb958514a21","sha256":"2b9f0c614bfcb9c4e22164f2b3f3638b9a40d188fee49cea3709f7fcd077718f","sha512":"cd9d7b05097d8572fd9bc2db36c9420703904197c1d7a52436a00b74c8ca02c19e8353accb6439c4001b3c9016d111bd006824b5cfc716802b4f53fca3af3274","ssdeep":"6144:kxUDO4UnVm6AIBFVSd1+wzUOsJ7s+MbBNGhAPN+2:2UDE59pSd9YOsJ7s+2NJN+2","tlshash":"5934236532975fbafbb3a115acf5c9618780b124689fd8de172c522ab43732c06cf11b","first_seen":"2026-01-04T14:57:54.863439Z","last_seen":"2026-01-04T14:57:54.863439Z","times_seen":1,"resource_available":false,"data":null}},"time_used":257,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":243,"receive":14,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"f-module-pc10.ivtfxip.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"f-module-pc10.ivtfxip.com/f-module-pc10-5/assets/style/style.min.css","fqdn":"f-module-pc10.ivtfxip.com","domain":"ivtfxip.com","tld":"com"},"ip":{"addr":"104.21.78.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://f-module-pc10.ivtfxip.com/f-module-pc10-5/?moduleName=f-module-pc10-5","date":"2026-01-04T14:57:04.599Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"f-module-pc10.ivtfxip.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 25 Dec 2025 22:43:25 GMT","end":"Wed, 25 Mar 2026 23:43:19 GMT"},"fingerprint":{"sha1":"BD:75:C7:0C:CF:4C:8B:C6:F0:02:2E:9D:B3:1B:50:54:C3:72:BE:D9","sha256":"19:4F:8E:B1:B5:41:99:3C:AC:F4:8B:36:B6:A9:44:7E:9A:11:1B:8C:E9:7F:5B:40:32:92:FF:44:8F:66:46:C3"}}},"request":{"raw":"GET /f-module-pc10-5/assets/style/style.min.css HTTP/1.1\r\nHost: f-module-pc10.ivtfxip.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://f-module-pc10.ivtfxip.com/f-module-pc10-5/?moduleName=f-module-pc10-5\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 04 Jan 2026 14:57:04 GMT\r\npriority: u=2,i=?0\r\ncontent-type: text/css; charset=utf-8\r\ncf-cache-status: MISS\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YQ04mQZUhRyBS3AA2e3k5QYzURFV4IUgGUo4u%2FTN1U7BcQi3wM1t7PP3Lf3iI0o4PfgMelHHYl1n2ecTa8WGuV%2BnBOfgBPSGmIgfNTegVcl6UOMZzFvk\"}]}\r\netag: W/\"a5f112da5dda7c51be58620137498088\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9b8b961369f40731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2140,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (2139)","md5":"35d42bd81d9aed456bbb358c5c432715","sha1":"9c4704e0a759cc4afa878c193e0b643138f9134b","sha256":"4d8e86d10101fe54ea0d3f6110fc36138b7ee89743ef921eddb710c9cc60bb0b","sha512":"daf567a03345a5faac2e3b7861b79999859bd79a81c1ac3540ca3f6de05cbb223fed09f98512c5245883b8771fe73ec8dc8dc6d9051a82b7b906a31d213378c6","ssdeep":"","tlshash":"a941d0212ab11d2c53efd41a3dd0b64a7d8ac192c392b5dc5d761a5fc9c23e309d230e","first_seen":"2025-05-06T14:56:29.621632Z","last_seen":"2026-05-10T22:50:28.129897Z","times_seen":12,"resource_available":false,"data":null}},"time_used":76,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":76,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"f-module-pc10.ivtfxip.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.ivtfxip.com/api/app/basis/news","fqdn":"api.ivtfxip.com","domain":"ivtfxip.com","tld":"com"},"ip":{"addr":"104.21.78.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://f-module-pc10.ivtfxip.com/f-module-pc10-2/?moduleName=f-module-pc10-2","date":"2026-01-04T14:57:05.977Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.ivtfxip.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 25 Dec 2025 22:40:43 GMT","end":"Wed, 25 Mar 2026 23:40:41 GMT"},"fingerprint":{"sha1":"D1:71:A2:C4:12:9D:CD:50:E5:B5:2D:A0:DB:0A:A0:3E:34:E8:FC:96","sha256":"F4:93:8B:FD:69:F9:AF:4F:CA:47:BC:51:06:9A:1E:76:FD:94:50:77:F6:22:8E:6E:51:5C:40:DA:2A:C7:4B:B6"}}},"request":{"raw":"GET /api/app/basis/news HTTP/1.1\r\nHost: api.ivtfxip.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://f-module-pc10.ivtfxip.com/\r\nContent-Type: application/json\r\napp_language: English\r\nOrigin: https://f-module-pc10.ivtfxip.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 04 Jan 2026 14:57:06 GMT\r\ncontent-type: application/json\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IXS6cqbaSoEyh%2Frnpo9uKO81K8NESZzkM%2BU0WZeXc%2ByLVYvsqk5LddxpPs1sIncT3he1u5YDcJ5oCHEWy7jRYuWPBvTozUA%2Bsk%2BHzho%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: https://f-module-pc10.ivtfxip.com\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 86400\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\nserver: cloudflare\r\ncf-ray: 9b8b961c5a7f56c3-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":30642,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"65d9e4fbd4b794e100377a0ede413c65","sha1":"3f8f3298de4cd4aa52290a613e630dc6b4090b0f","sha256":"7c133e03a00491dfba83ea08fa369d246326bd3ed258d7b3a88c925d1e84cf1f","sha512":"d7900e1f7e47d87282ac3a2226f4867131ef6540ba493aebba7e98726ba16cb159dda0d794fb353fdaa8636a935fba8d2d9935bb010391fc719d779f7ff5b509","ssdeep":"384:81nWpeNX0LpsMiHQncuUgJPq1z8oVtVlKPSEzmlyUICcm9iNQ+zNjrx7:qnW98T36SmmlyUICcCiNQuN/x7","tlshash":"65d2d7c6d37822f54964228974ae7fdbab5db02b7321ce74106c8e5953d2c7a813f18b","first_seen":"2026-01-04T14:57:54.867715Z","last_seen":"2026-01-04T14:57:54.867715Z","times_seen":1,"resource_available":false,"data":null}},"time_used":447,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":231,"receive":215,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"api.ivtfxip.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ivtfxip.com/pc/static/js/npm.crypto-js~db9e4f62.4f9c6a0e.js","fqdn":"ivtfxip.com","domain":"ivtfxip.com","tld":"com"},"ip":{"addr":"104.21.78.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ivtfxip.com/pc/","date":"2026-01-04T14:57:02.104Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ivtfxip.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 25 Dec 2025 22:47:06 GMT","end":"Wed, 25 Mar 2026 23:47:02 GMT"},"fingerprint":{"sha1":"A2:E6:E0:E1:3D:71:15:E7:6A:95:1C:EC:53:3E:E4:AC:2E:D2:14:88","sha256":"EA:63:A1:B5:51:F9:8A:2E:D6:72:A0:97:14:88:41:61:B9:B7:97:70:CB:73:D8:93:0E:BF:F1:D0:C9:0A:B5:89"}}},"request":{"raw":"GET /pc/static/js/npm.crypto-js~db9e4f62.4f9c6a0e.js HTTP/1.1\r\nHost: ivtfxip.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ivtfxip.com/pc/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 04 Jan 2026 14:57:02 GMT\r\npriority: u=3,i=?0\r\ncontent-type: application/javascript\r\ncf-cache-status: MISS\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GFxu3Cev3TyY9YbIwbEo8IIN8CHjEznwnu0qI8B%2BiUtK89LFZixkjAdUgNjYOtNogOApJp0%2FDBreFtqtpzatxUEIPVQnNHexSJt%2B\"}]}\r\netag: W/\"3c0cf8f166f36773748c09a6726bbd2f\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9b8b960429df35a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":66013,"size_decoded":0,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text, with very long lines (37505)","md5":"b5ae1d673dae57619e61f9c099a8dc87","sha1":"bfe972ac6630b28e517d3989e91f5d9c9e25ed2b","sha256":"c60c496a02ca3718a7f1aa41aaf6d92ed137f8ae0673dc27a5a15624601aed10","sha512":"de80156aa534a06968212914bf34e4602ec33f0aeb6bd6f46e240e227f3bad0f007faf25c41fd49aa2376a326a6eaabfcea2a615017488d09184f59f4c6f127a","ssdeep":"1536:cu8DQ+ALd6xj8P37PtNPU9ArHMLcQHFzj:cuyHjym3","tlshash":"df535cc062d8645553f62980183f744b716736361b099bd8f261f9feecbcada803ac79","first_seen":"2025-05-06T14:56:29.599131Z","last_seen":"2026-05-20T20:17:42.814237Z","times_seen":39,"resource_available":true,"data":null}},"time_used":65,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":64,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"ivtfxip.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ivtfxip.com/pc/static/js/npm.qrcode~029d41c7.6d0e51ea.js","fqdn":"ivtfxip.com","domain":"ivtfxip.com","tld":"com"},"ip":{"addr":"104.21.78.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ivtfxip.com/pc/","date":"2026-01-04T14:57:02.109Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ivtfxip.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 25 Dec 2025 22:47:06 GMT","end":"Wed, 25 Mar 2026 23:47:02 GMT"},"fingerprint":{"sha1":"A2:E6:E0:E1:3D:71:15:E7:6A:95:1C:EC:53:3E:E4:AC:2E:D2:14:88","sha256":"EA:63:A1:B5:51:F9:8A:2E:D6:72:A0:97:14:88:41:61:B9:B7:97:70:CB:73:D8:93:0E:BF:F1:D0:C9:0A:B5:89"}}},"request":{"raw":"GET /pc/static/js/npm.qrcode~029d41c7.6d0e51ea.js HTTP/1.1\r\nHost: ivtfxip.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ivtfxip.com/pc/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 04 Jan 2026 14:57:02 GMT\r\npriority: u=3,i=?0\r\ncontent-type: application/javascript\r\ncf-cache-status: MISS\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ciIUKpnt2wlFF9M2VMJzL4fKxR7dQUnwsbN3FqSD5Ka2cTLSQkXpYr2zXLNU2GRL8eLcVeqAVko0Kqj%2BTT2UhFZmwm5Td1OZnw%3D%3D\"}]}\r\netag: W/\"92a12a780c582db93330b5e6a0012ad8\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9b8b960429e035a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":23347,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (23347), with no line terminators","md5":"f6ab144353cef6131607ba238a58bfaf","sha1":"c90946ff9638b4bce5c487ee79684d899f257f94","sha256":"8ca6c33dbc41f3adbb67fc6e4b678419fb565f8bb768e5825481df436c0d9bb3","sha512":"6d6c6f8800098a3bdb77ff51939e082576d68ee7295ed561b6da5a698f8c1d1645813a4780dcd2134e4cb125b9063555536e78eae2620a6eac71b2f44f20cc62","ssdeep":"384:uTTIBAZS9X8OhLpALVqaem1QINHqBRF42J6dKFyUm89F86NFIZTSGCH2y5pbKEnZ:uTTIBuVqap1WrJ6dK1m89+6NpGCH2yvt","tlshash":"e6a2d699b39071ab53d725d6002f1405e1fea864341a45f8fa18d8d3bd78eaa90b7f3c","first_seen":"2025-05-06T14:56:29.669662Z","last_seen":"2026-05-20T20:17:42.878329Z","times_seen":38,"resource_available":true,"data":null}},"time_used":78,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":77,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"ivtfxip.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ivtfxip.com/pc/static/js/npm.echarts~41ff223c.92c70dac.js","fqdn":"ivtfxip.com","domain":"ivtfxip.com","tld":"com"},"ip":{"addr":"104.21.78.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ivtfxip.com/pc/","date":"2026-01-04T14:57:00.579Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ivtfxip.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 25 Dec 2025 22:47:06 GMT","end":"Wed, 25 Mar 2026 23:47:02 GMT"},"fingerprint":{"sha1":"A2:E6:E0:E1:3D:71:15:E7:6A:95:1C:EC:53:3E:E4:AC:2E:D2:14:88","sha256":"EA:63:A1:B5:51:F9:8A:2E:D6:72:A0:97:14:88:41:61:B9:B7:97:70:CB:73:D8:93:0E:BF:F1:D0:C9:0A:B5:89"}}},"request":{"raw":"GET /pc/static/js/npm.echarts~41ff223c.92c70dac.js HTTP/1.1\r\nHost: ivtfxip.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ivtfxip.com/pc/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 04 Jan 2026 14:57:00 GMT\r\npriority: u=3,i=?0\r\ncontent-type: application/javascript\r\ncf-cache-status: MISS\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NO0JmGQYxpqDs1pawXzr%2BbzLLqb%2BnG43kexUUtyXLtahdJRdr5t18VjMFB3gvmroT3%2BVo4PfzxXESp2s3NnOk8N%2FUc0JqaexWeaX\"}]}\r\netag: W/\"76a7cc360dd58228de51c5aaf29f892c\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9b8b95fa6fe235a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":274660,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"5c72ecf07d0d58416b164722d1b6c3f4","sha1":"b4a07ee445c6c9eaecd47b41fe0294edd66a99d5","sha256":"be423765f481ab4d2b12202fef46f91b5e5f87c773583ef12e7a8f7b67c5bfde","sha512":"1f472dcdd134186af3b11bea42ef213ed427eb1f0199c4d3935160cef4ca3f46b9e5d33cdfc0a3a5408537251680989401c6d5c73be0e021bd9c64273396e1c6","ssdeep":"3072:fquJcwC1aFIzUM+G2sEksaAY38XrQQhQlXrHZDZ5PFcYf+0WO:fqgJCGIDj2sn380Qh+rtZ59cq+0R","tlshash":"d4443aa97244b06243e332f851af180f9336144ce94ad528ba55d5e96cbe45f333bf3a","first_seen":"2025-04-19T14:49:36.263686Z","last_seen":"2026-05-20T20:17:42.854633Z","times_seen":47,"resource_available":true,"data":null}},"time_used":178,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":175,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"ivtfxip.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.ivtfxip.com/api/app/language/dict","fqdn":"api.ivtfxip.com","domain":"ivtfxip.com","tld":"com"},"ip":{"addr":"104.21.78.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ivtfxip.com/pc/","date":"2026-01-04T14:57:01.985Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.ivtfxip.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 25 Dec 2025 22:40:43 GMT","end":"Wed, 25 Mar 2026 23:40:41 GMT"},"fingerprint":{"sha1":"D1:71:A2:C4:12:9D:CD:50:E5:B5:2D:A0:DB:0A:A0:3E:34:E8:FC:96","sha256":"F4:93:8B:FD:69:F9:AF:4F:CA:47:BC:51:06:9A:1E:76:FD:94:50:77:F6:22:8E:6E:51:5C:40:DA:2A:C7:4B:B6"}}},"request":{"raw":"OPTIONS /api/app/language/dict HTTP/1.1\r\nHost: api.ivtfxip.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: app_analog,app_auth_by_token,app_client_timezone,app_language,app_model,app_version,aws-check,content-type,request_domain,theme-mode,x-requested-with\r\nReferer: https://ivtfxip.com/\r\nOrigin: https://ivtfxip.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 04 Jan 2026 14:57:02 GMT\r\ncontent-length: 0\r\nserver: cloudflare\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yiqCOg%2BrHWDrxnSFsDQpW1LjQGyHc1ciGywzzArE9W7eZImtGwMhTZ7GKdidjS9%2BCL%2BpPGRKbW12SqdPLNfnI344Hfp5Nl%2FQ1XZKO3WgkQ%3D%3D\"}]}\r\naccess-control-allow-origin: https://ivtfxip.com\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: app_analog,app_auth_by_token,app_client_timezone,app_language,app_model,app_version,aws-check,content-type,request_domain,theme-mode,x-requested-with\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 86400\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nallow: GET, HEAD, POST, PUT, DELETE, TRACE, OPTIONS, PATCH\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b8b96039bd2b1b8-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-13T16:33:36.180633Z","times_seen":16390792,"resource_available":true,"data":null}},"time_used":470,"timings":{"blocked":27,"dns":0,"connect":0,"send":0,"wait":441,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"api.ivtfxip.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.ivtfxip.com/api/app/customConfig","fqdn":"api.ivtfxip.com","domain":"ivtfxip.com","tld":"com"},"ip":{"addr":"104.21.78.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ivtfxip.com/pc/","date":"2026-01-04T14:57:02.874Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.ivtfxip.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 25 Dec 2025 22:40:43 GMT","end":"Wed, 25 Mar 2026 23:40:41 GMT"},"fingerprint":{"sha1":"D1:71:A2:C4:12:9D:CD:50:E5:B5:2D:A0:DB:0A:A0:3E:34:E8:FC:96","sha256":"F4:93:8B:FD:69:F9:AF:4F:CA:47:BC:51:06:9A:1E:76:FD:94:50:77:F6:22:8E:6E:51:5C:40:DA:2A:C7:4B:B6"}}},"request":{"raw":"OPTIONS /api/app/customConfig HTTP/1.1\r\nHost: api.ivtfxip.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: app_analog,app_auth_by_token,app_client_timezone,app_language,app_model,app_version,aws-check,request_domain,theme-mode,x-requested-with\r\nReferer: https://ivtfxip.com/\r\nOrigin: https://ivtfxip.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 04 Jan 2026 14:57:03 GMT\r\ncontent-length: 0\r\nserver: cloudflare\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9OVRDdXQw%2BMUPb4Nyo2m3ZyoaQVgvqYRYCd%2F0Pggak%2B%2BZE%2FX6MThH1dVWep9GlWkaCMNImi8Shpvj8UxpuMgvXzwqc%2FnvO%2FkNeeuNIk2iQ%3D%3D\"}]}\r\naccess-control-allow-origin: https://ivtfxip.com\r\naccess-control-allow-methods: GET\r\naccess-control-allow-headers: app_analog,app_auth_by_token,app_client_timezone,app_language,app_model,app_version,aws-check,request_domain,theme-mode,x-requested-with\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 86400\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nallow: GET, HEAD, POST, PUT, DELETE, TRACE, OPTIONS, PATCH\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b8b9608fa12b1b8-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-13T16:33:36.180633Z","times_seen":16390792,"resource_available":true,"data":null}},"time_used":200,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":199,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"api.ivtfxip.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"f-module-pc10.ivtfxip.com/f-module-pc10-4/assets/images/1.png","fqdn":"f-module-pc10.ivtfxip.com","domain":"ivtfxip.com","tld":"com"},"ip":{"addr":"104.21.78.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://f-module-pc10.ivtfxip.com/f-module-pc10-4/?moduleName=f-module-pc10-4","date":"2026-01-04T14:57:04.418Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"f-module-pc10.ivtfxip.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 25 Dec 2025 22:43:25 GMT","end":"Wed, 25 Mar 2026 23:43:19 GMT"},"fingerprint":{"sha1":"BD:75:C7:0C:CF:4C:8B:C6:F0:02:2E:9D:B3:1B:50:54:C3:72:BE:D9","sha256":"19:4F:8E:B1:B5:41:99:3C:AC:F4:8B:36:B6:A9:44:7E:9A:11:1B:8C:E9:7F:5B:40:32:92:FF:44:8F:66:46:C3"}}},"request":{"raw":"GET /f-module-pc10-4/assets/images/1.png HTTP/1.1\r\nHost: f-module-pc10.ivtfxip.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://f-module-pc10.ivtfxip.com/f-module-pc10-4/?moduleName=f-module-pc10-4\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 25975\r\npriority: u=4,i=?0\r\ncontent-type: image/png\r\ncf-cache-status: MISS\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"73925fedc4904989165c6afe58834b74\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sk%2FpGD85x89gPs0SLG1SEiOijSLaGi6QHCn0AuH96FExAvR5QYZrsCS2QxNlnr6oof9Rj3gVeNDSjafthZ6VlM6DyVqXgHb3g%2B1Z%2BSvGCf2dmvlVLOs7vMY%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\naccept-ranges: bytes\r\ndate: Sun, 04 Jan 2026 14:57:04 GMT\r\ncf-ray: 9b8b961289ba0731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":25975,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 124 x 166, 8-bit/color RGBA, non-interlaced","md5":"91b3c9389772af439750d16e2a28f75e","sha1":"3d320a3552213ee157525211c570493c803e4053","sha256":"32a8b9ab071901041b0b0103209679ed2c9c056901f18e81a24ca306c688677d","sha512":"6b42d75c575b006620424530f6c491e3aeb4fd473b290deb6de2296ff3ec5b6a283e311a91ec4d7e0a48dceb4089c5f690f6061c6c206f3f69630c6b6fb54e20","ssdeep":"384:5mh81w7yPT6kALiDh0tcOB5bXb/9OU0HRDG2rAzCx9s3tkYMy3FykIRjNPGWAoZd:kmPb69+adB9L/I7Um9stk+3kzjoWAcc+","tlshash":"40c2f1b470bc870b0cd210ebb1577ce8d644008d58eabb7c9b91e2a13d33742469adba","first_seen":"2026-01-04T14:57:54.883075Z","last_seen":"2026-01-04T14:57:54.883075Z","times_seen":1,"resource_available":false,"data":null}},"time_used":57,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":52,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"f-module-pc10.ivtfxip.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"f-module-pc10.ivtfxip.com/f-module-pc10-3/assets/images/2.png","fqdn":"f-module-pc10.ivtfxip.com","domain":"ivtfxip.com","tld":"com"},"ip":{"addr":"104.21.78.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://f-module-pc10.ivtfxip.com/f-module-pc10-3/?moduleName=f-module-pc10-3","date":"2026-01-04T14:57:04.530Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"f-module-pc10.ivtfxip.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 25 Dec 2025 22:43:25 GMT","end":"Wed, 25 Mar 2026 23:43:19 GMT"},"fingerprint":{"sha1":"BD:75:C7:0C:CF:4C:8B:C6:F0:02:2E:9D:B3:1B:50:54:C3:72:BE:D9","sha256":"19:4F:8E:B1:B5:41:99:3C:AC:F4:8B:36:B6:A9:44:7E:9A:11:1B:8C:E9:7F:5B:40:32:92:FF:44:8F:66:46:C3"}}},"request":{"raw":"GET /f-module-pc10-3/assets/images/2.png HTTP/1.1\r\nHost: f-module-pc10.ivtfxip.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://f-module-pc10.ivtfxip.com/f-module-pc10-3/?moduleName=f-module-pc10-3\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 159997\r\npriority: u=4,i=?0\r\ncontent-type: image/png\r\ncf-cache-status: MISS\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"2004feef01073e3669c449bacf539e82\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ybPRKkvRpH4eOyoVIlu4%2FZpff7Z0jGLIZdvAgXxKnojgO35bVxStDIfAi1jBh87E7RRPQ0mfb2A75JVGcjAxLLjOlnAxoB3SYMAhHDWh9MAEUflXCtFc\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\naccept-ranges: bytes\r\ndate: Sun, 04 Jan 2026 14:57:04 GMT\r\ncf-ray: 9b8b961309de0731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":159997,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 470 x 320, 8-bit/color RGBA, non-interlaced","md5":"9a3102640bf19bd4d67a516da1deaa24","sha1":"7f7b300c99e216b514158cb6e02f575afb094af7","sha256":"7cc4f5296d7d80564d46963cb144104e9691a13b835a8d34ee18969599183e0c","sha512":"616e567dfecd67496d5adaa02baf7a3b9f3b0132fdafcf8d66be28474e95228e7555c12eb9431e1ae01a444e945b69fcdfc5e9ec52592d144f5fa968788fb11f","ssdeep":"3072:X2iXEh5C+MYY9LBh5K6cX7T4+Gvh0B59urpMHOFkW1LTbpMdWMjr:GiUh5C+MFBhg6AT4+KhgSOnW13dMdbjr","tlshash":"d0f312b4e72c474966a8f31423436e595812b69cfc2e10923e43b74b4d9fc6313edb9a","first_seen":"2026-01-04T14:57:54.884694Z","last_seen":"2026-01-04T14:57:54.884694Z","times_seen":1,"resource_available":false,"data":null}},"time_used":101,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":74,"receive":27,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"f-module-pc10.ivtfxip.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"f-module-pc10.ivtfxip.com/f-module-pc10-2/assets/style/style.min.css","fqdn":"f-module-pc10.ivtfxip.com","domain":"ivtfxip.com","tld":"com"},"ip":{"addr":"104.21.78.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://f-module-pc10.ivtfxip.com/f-module-pc10-2/?moduleName=f-module-pc10-2","date":"2026-01-04T14:57:04.557Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"f-module-pc10.ivtfxip.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 25 Dec 2025 22:43:25 GMT","end":"Wed, 25 Mar 2026 23:43:19 GMT"},"fingerprint":{"sha1":"BD:75:C7:0C:CF:4C:8B:C6:F0:02:2E:9D:B3:1B:50:54:C3:72:BE:D9","sha256":"19:4F:8E:B1:B5:41:99:3C:AC:F4:8B:36:B6:A9:44:7E:9A:11:1B:8C:E9:7F:5B:40:32:92:FF:44:8F:66:46:C3"}}},"request":{"raw":"GET /f-module-pc10-2/assets/style/style.min.css HTTP/1.1\r\nHost: f-module-pc10.ivtfxip.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://f-module-pc10.ivtfxip.com/f-module-pc10-2/?moduleName=f-module-pc10-2\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 04 Jan 2026 14:57:04 GMT\r\npriority: u=2,i=?0\r\ncontent-type: text/css; charset=utf-8\r\ncf-cache-status: MISS\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=b0FbQhnIkBM0k5ciRSOcg9ktpWA9B1CkQDZFK0j73YjQNTW%2F3FmeZ6WR%2B4xctVAxgoRME%2BmUbEKAahAnrHZAfaX8u1KiPIYVYkMRYW73aoEnspMOM8rVeec%3D\"}]}\r\netag: W/\"d6fa1550df5c0b96ad0ff2516ec0324c\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9b8b961339e50731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1824,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (1823)","md5":"97791998f045afccb6b96caed9a288aa","sha1":"87d5f3dc8c81364a4b6b32d83d105e263690cf88","sha256":"4a8406169d67724d6abf1c1f923fbdba2e2be590605a65558300006594f5aadf","sha512":"addb8235aa9432b0adcbfd210148aea5a79c9ded14675f943ac60b3f9bade2cc05d4aa4655aa4eba8b9abe4597ad5ddd93ffdebd02a9be40b9aeff44c97d3c2d","ssdeep":"","tlshash":"ae31843599b21a1d50abe91f3dc1d9cd368fd5d2c6620688f957372c86c7177062228b","first_seen":"2025-05-06T14:56:29.607728Z","last_seen":"2026-05-10T22:50:28.144389Z","times_seen":13,"resource_available":false,"data":null}},"time_used":72,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":72,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"f-module-pc10.ivtfxip.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ivtfxip.com/pc/static/js/app~748942c6.3d1e9460.js","fqdn":"ivtfxip.com","domain":"ivtfxip.com","tld":"com"},"ip":{"addr":"104.21.78.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ivtfxip.com/pc/","date":"2026-01-04T14:57:00.563Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ivtfxip.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 25 Dec 2025 22:47:06 GMT","end":"Wed, 25 Mar 2026 23:47:02 GMT"},"fingerprint":{"sha1":"A2:E6:E0:E1:3D:71:15:E7:6A:95:1C:EC:53:3E:E4:AC:2E:D2:14:88","sha256":"EA:63:A1:B5:51:F9:8A:2E:D6:72:A0:97:14:88:41:61:B9:B7:97:70:CB:73:D8:93:0E:BF:F1:D0:C9:0A:B5:89"}}},"request":{"raw":"GET /pc/static/js/app~748942c6.3d1e9460.js HTTP/1.1\r\nHost: ivtfxip.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ivtfxip.com/pc/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 04 Jan 2026 14:57:00 GMT\r\npriority: u=3,i=?0\r\ncontent-type: application/javascript\r\ncf-cache-status: MISS\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FwIkG7%2FjER11viae7SHgyjZaXEKDicvglRbyIs6vWfOHhdwhgOYjn5L0zkeHocPPW0awzcR2sSqBzPeftIIF2UB37l36vO0zdQ%3D%3D\"}]}\r\netag: W/\"74524792d9989f31be0ad32255bad04b\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9b8b95fa5fd435a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":33075,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (33075), with no line terminators","md5":"f4ce37cd2f2278b35e4286fdaa21aa05","sha1":"684048c2343d38239128a81e16aee169f00011a6","sha256":"d1c93fcc572dd6cf58cf9eb0a8953d83ba3b53f7e2abd2d5e4a0de1e06826a1b","sha512":"5b28bc1b818c30b8015b64fa83dd2e11a026fcfb05d49d43b7a0d2b9a1114b9151c5f88c3fda3fd62631fcf8e2d121ab16b57e3d4eaf05d10cbb9be83228f518","ssdeep":"768:g43PwXWT9edG9TKKZlslzYbewieaBeBieBZeB6eBFeB/eBWe20eBCeBpeaoeBsu+:LPKcfnmzPi0s6","tlshash":"57e2f8cd3ad4b05957e332f5505f680bb2b7d528580e8890f7a1e4f2acb591e4723f2a","first_seen":"2026-01-04T14:57:54.887425Z","last_seen":"2026-04-13T23:57:13.856918Z","times_seen":3,"resource_available":true,"data":null}},"time_used":67,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":67,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"ivtfxip.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ivtfxip.com/pc/static/js/app~78453b6a.b096296c.js","fqdn":"ivtfxip.com","domain":"ivtfxip.com","tld":"com"},"ip":{"addr":"104.21.78.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ivtfxip.com/pc/","date":"2026-01-04T14:57:00.563Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ivtfxip.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 25 Dec 2025 22:47:06 GMT","end":"Wed, 25 Mar 2026 23:47:02 GMT"},"fingerprint":{"sha1":"A2:E6:E0:E1:3D:71:15:E7:6A:95:1C:EC:53:3E:E4:AC:2E:D2:14:88","sha256":"EA:63:A1:B5:51:F9:8A:2E:D6:72:A0:97:14:88:41:61:B9:B7:97:70:CB:73:D8:93:0E:BF:F1:D0:C9:0A:B5:89"}}},"request":{"raw":"GET /pc/static/js/app~78453b6a.b096296c.js HTTP/1.1\r\nHost: ivtfxip.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ivtfxip.com/pc/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 04 Jan 2026 14:57:00 GMT\r\npriority: u=3,i=?0\r\ncontent-type: application/javascript\r\ncf-cache-status: MISS\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=P%2ByAU7wQXFrj50x%2BfXWzBft2Ji56WZEXGypKX4Uc0C%2Fpr7sM7nrrZnPxcPfQzZo1dTEpIb7veKQ7eYeQcu%2BNbaRtgx4T%2BKCU56tY\"}]}\r\netag: W/\"b2d556ce121ec20bfa0aa1d680f18256\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9b8b95fa6fd535a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":336473,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65227), with no line terminators","md5":"931c2c21fee3751a2954776d2aa729b8","sha1":"277fd98ee4eaf73dcb792f7f2324bae4d8ff0373","sha256":"3e497de91a81191ab266292bbb2995fe5fe63ed9e461a3de910f1e97c1f3b1e0","sha512":"1cd58b7520ecd35ba64a0609bcc831f192f6dd7d734892764cdb057c16a6524f6248488d8355ac20e31060dc6204b26e38e9b3667fb2fa4ec59f3cf885cb1634","ssdeep":"3072:eLZTI5OLIe9XAKTCNsH9lOrAWYxOn52Ff896Xdvjr0g6Zq/aXO2L0jACdvJQVWdq:8TI5YI8z8jzwFTqg6Zp0jAC9mVWTwJj","tlshash":"30643b338dc8311d1b6703a562cab945f75d92a9eb85652f8a88cf3812c7fd093cdb64","first_seen":"2025-10-07T13:51:05.964612Z","last_seen":"2026-05-01T07:36:15.866143Z","times_seen":7,"resource_available":false,"data":null}},"time_used":78,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":72,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"ivtfxip.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ivtfxip.com/pc/static/js/app~9ad0f35b.279e88bf.js","fqdn":"ivtfxip.com","domain":"ivtfxip.com","tld":"com"},"ip":{"addr":"104.21.78.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ivtfxip.com/pc/","date":"2026-01-04T14:57:00.564Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ivtfxip.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 25 Dec 2025 22:47:06 GMT","end":"Wed, 25 Mar 2026 23:47:02 GMT"},"fingerprint":{"sha1":"A2:E6:E0:E1:3D:71:15:E7:6A:95:1C:EC:53:3E:E4:AC:2E:D2:14:88","sha256":"EA:63:A1:B5:51:F9:8A:2E:D6:72:A0:97:14:88:41:61:B9:B7:97:70:CB:73:D8:93:0E:BF:F1:D0:C9:0A:B5:89"}}},"request":{"raw":"GET /pc/static/js/app~9ad0f35b.279e88bf.js HTTP/1.1\r\nHost: ivtfxip.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ivtfxip.com/pc/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 04 Jan 2026 14:57:00 GMT\r\npriority: u=3,i=?0\r\ncontent-type: application/javascript\r\ncf-cache-status: MISS\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EqxRvUKlwb85fihEfFGdSB%2FtrAgi%2BTGNpLqZq29FvQL%2Fwoq2yMASVn2d%2F2U9wKXS97Px9gCp2PzMW5ZkrYwAd96xvwxS2tYj2M7p\"}]}\r\netag: W/\"cfa725045bb7873d2f8aa7ff3b3bdc6f\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9b8b95fa6fd635a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":93516,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (63460), with no line terminators","md5":"ec7c354e6204ce5efbb365de935bd54f","sha1":"2cc85418f02e142b43ad852ea40be4b8a98f2741","sha256":"bf8b6a04ee02c39fb49a24d31ced0f5037714a7352a5310a748c27a29e74c727","sha512":"9906f404964f023497fef74d5c3b8264e166e72f62ed1428ddc6b6907831040fdd791649b306789762f4f339ad38d8d231b096142f468e65e4bb4973d4c33463","ssdeep":"1536:CtVN9y2g9BJugd2Cd6vxFOt0HrsNoyTblEAGmAzo5g5ZDW/1V:DKZFNrsNnTdGmAzT/av","tlshash":"ad93288b3a82bc5247f7a5a4601f740ab2361d3a648490d87df8d4dd5ef8d48823bfb5","first_seen":"2025-05-06T14:56:29.689477Z","last_seen":"2026-05-20T20:17:42.875329Z","times_seen":37,"resource_available":true,"data":null}},"time_used":141,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":140,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"ivtfxip.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.ivtfxip.com/api/app/user/phone/country","fqdn":"api.ivtfxip.com","domain":"ivtfxip.com","tld":"com"},"ip":{"addr":"104.21.78.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ivtfxip.com/pc/","date":"2026-01-04T14:57:02.440Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.ivtfxip.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 25 Dec 2025 22:40:43 GMT","end":"Wed, 25 Mar 2026 23:40:41 GMT"},"fingerprint":{"sha1":"D1:71:A2:C4:12:9D:CD:50:E5:B5:2D:A0:DB:0A:A0:3E:34:E8:FC:96","sha256":"F4:93:8B:FD:69:F9:AF:4F:CA:47:BC:51:06:9A:1E:76:FD:94:50:77:F6:22:8E:6E:51:5C:40:DA:2A:C7:4B:B6"}}},"request":{"raw":"POST /api/app/user/phone/country HTTP/1.1\r\nHost: api.ivtfxip.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ivtfxip.com/\r\nContent-Type: application/json;charset=UTF-8\r\naws-check: true\r\nX-Requested-With: XMLHttpRequest\r\napp_language: English\r\napp_version: P2.9.3\r\napp_client_timezone: +8\r\nrequest_domain: https://ivtfxip.com/pc/#/\r\napp_analog: false\r\napp_model: f\r\napp_auth_by_token: \r\ntheme-mode: 2\r\nOrigin: https://ivtfxip.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 04 Jan 2026 14:57:02 GMT\r\ncontent-type: application/json\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9pCrRFwxxIpDlcH0JLzM2%2FcHTuhjjjQG6G0e5fuhcb%2BvE7r%2BeqsALNYtkACCKs4TXQBMQfTD5lk4SDntaGf1WWbsMvH5d35tu0fE3ay6WQ%3D%3D\"}]}\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: https://ivtfxip.com\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 86400\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 9b8b96060a0cb1b8-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13898,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"6c6b8a5cff52490a74edabe34928a3e4","sha1":"418b7066c5f103d7677a47cca3fedcd850e0307d","sha256":"c43daaf2f108bbceaceecb1f16bdfdf877dbcad15645ef40db3589f488cfd411","sha512":"6de3885d859023344250e70f2b8624532336ddd135f2bb91ad2af2314124864be5666873e8acc9abb058b617d30eb0b253cad30fb4c448ad611b8721855cb6c6","ssdeep":"96:X4knmjp8A7IMY5FFTf+hAlaBkhTXOwZ6bKcA0q1dbefudGHji+D1NS98qqGwRj:xmWA7SFFqIZrdbefSbeM98qqGs","tlshash":"a552cf28a1b89dcfeb2dae55184bf0610bfe09db37915c271dc6ab6497840f8331427e","first_seen":"2024-12-01T05:51:21.265594Z","last_seen":"2026-05-10T22:50:28.044474Z","times_seen":186,"resource_available":false,"data":null}},"time_used":199,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":199,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"api.ivtfxip.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ivtfxip.com/pc/static/css/about~f71cff67.ed9d5f92.css","fqdn":"ivtfxip.com","domain":"ivtfxip.com","tld":"com"},"ip":{"addr":"104.21.78.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://ivtfxip.com/pc/","date":"2026-01-04T14:57:03.065Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ivtfxip.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 25 Dec 2025 22:47:06 GMT","end":"Wed, 25 Mar 2026 23:47:02 GMT"},"fingerprint":{"sha1":"A2:E6:E0:E1:3D:71:15:E7:6A:95:1C:EC:53:3E:E4:AC:2E:D2:14:88","sha256":"EA:63:A1:B5:51:F9:8A:2E:D6:72:A0:97:14:88:41:61:B9:B7:97:70:CB:73:D8:93:0E:BF:F1:D0:C9:0A:B5:89"}}},"request":{"raw":"GET /pc/static/css/about~f71cff67.ed9d5f92.css HTTP/1.1\r\nHost: ivtfxip.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ivtfxip.com/pc/\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 04 Jan 2026 14:57:03 GMT\r\npriority: u=4,i=?0\r\ncontent-type: text/css; charset=utf-8\r\ncf-cache-status: REVALIDATED\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AuUQ5dreJ8zCXCF0wlkMGn%2BSDRXO2uXyaTyXO5SPZkkxi9C9nbabc4RfRi7gVethO6qmAQgSKPJ9MU%2BpYvgDdzFY3HFhcVMe5n2A\"}]}\r\netag: W/\"b9b37c6e8c2a2c2c6cd099333f5af79d\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9b8b960a1af835a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8858,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (8858), with no line terminators","md5":"db9dfbfc970fcbd71707938af934242a","sha1":"326ea5e690d0edcf6602f869b221ffb192543ef7","sha256":"46d5edac3ebcc2e31657400975af2a3358f51a86cc1bb8ba66b8a634832761d9","sha512":"a5a0e8665c7699326df16d12d3a81df03e4f83a3ab1bca6cdfcca5f1bfa283534af9a547b0c65e396d4f049a5e79afa48039410f27bfe08367178488f607fdc6","ssdeep":"96:SZNZLZ5xTfW5BQvBFMPUXUZBZLZ5yTiPU8WZUZ6ZS70yWmBxwBwMeFQZ0YhsMhZg:Sb1R9Un1jWKM8sT/hWMu","tlshash":"3402c019b9cd6005d37fc6f01eeb9ef49069266bb5c1d2a895572021c8c3266383fee6","first_seen":"2025-07-17T05:14:10.791486Z","last_seen":"2026-05-20T20:17:42.837329Z","times_seen":31,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"ivtfxip.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.ivtfxip.com/api/app/customConfig","fqdn":"api.ivtfxip.com","domain":"ivtfxip.com","tld":"com"},"ip":{"addr":"104.21.78.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ivtfxip.com/pc/","date":"2026-01-04T14:57:03.289Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.ivtfxip.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 25 Dec 2025 22:40:43 GMT","end":"Wed, 25 Mar 2026 23:40:41 GMT"},"fingerprint":{"sha1":"D1:71:A2:C4:12:9D:CD:50:E5:B5:2D:A0:DB:0A:A0:3E:34:E8:FC:96","sha256":"F4:93:8B:FD:69:F9:AF:4F:CA:47:BC:51:06:9A:1E:76:FD:94:50:77:F6:22:8E:6E:51:5C:40:DA:2A:C7:4B:B6"}}},"request":{"raw":"GET /api/app/customConfig HTTP/1.1\r\nHost: api.ivtfxip.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ivtfxip.com/\r\naws-check: true\r\nX-Requested-With: XMLHttpRequest\r\napp_language: English\r\napp_version: P2.9.3\r\napp_client_timezone: +8\r\nrequest_domain: https://ivtfxip.com/pc/#/\r\napp_analog: false\r\napp_model: f\r\napp_auth_by_token: \r\ntheme-mode: 2\r\nOrigin: https://ivtfxip.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 04 Jan 2026 14:57:03 GMT\r\ncontent-type: application/json\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hSIDN7drLYJo90gYGql4O7tGM1mZhflf2p3%2FEKhpKJXFgpVWHLrZfdwR8%2FdcJwnDlTM%2B2dSQTGWRxilo0jZZkrPQ5bx8Li1ppnsCNyc%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: https://ivtfxip.com\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 86400\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\nvary: accept-encoding\r\nserver: cloudflare\r\ncf-ray: 9b8b960b49c756c3-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1584,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"60f74bd488d0c81fdb0b33ecdb4dd253","sha1":"bf9df72fed2f2aedcb2a7815d97ae7d2c57508ba","sha256":"b07f3206c8fe2aefb527234bbd31a4e61f35652f1c5bb7ea28792823964b5f8b","sha512":"a7db3bcebbaa6f6d448abe1c8bd12fe67c6fcecd2c7346e99cd4f6953bde75d0df1a2ee13256a21b3fe410e1fbf79ea44358e3c8e4dc7a2354188b71e83cb02c","ssdeep":"","tlshash":"3331ef3d595142bc46aa321dd41f6b689bbc5371321c7028e5da0f8571ebcd8eb7860f","first_seen":"2026-01-04T14:57:54.895458Z","last_seen":"2026-01-04T14:57:54.895458Z","times_seen":1,"resource_available":false,"data":null}},"time_used":448,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":448,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"api.ivtfxip.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"f-module-pc10.ivtfxip.com/f-module-pc10-1/assets/images/1.webp","fqdn":"f-module-pc10.ivtfxip.com","domain":"ivtfxip.com","tld":"com"},"ip":{"addr":"104.21.78.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://f-module-pc10.ivtfxip.com/f-module-pc10-1/?moduleName=f-module-pc10-1","date":"2026-01-04T14:57:04.459Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"f-module-pc10.ivtfxip.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 25 Dec 2025 22:43:25 GMT","end":"Wed, 25 Mar 2026 23:43:19 GMT"},"fingerprint":{"sha1":"BD:75:C7:0C:CF:4C:8B:C6:F0:02:2E:9D:B3:1B:50:54:C3:72:BE:D9","sha256":"19:4F:8E:B1:B5:41:99:3C:AC:F4:8B:36:B6:A9:44:7E:9A:11:1B:8C:E9:7F:5B:40:32:92:FF:44:8F:66:46:C3"}}},"request":{"raw":"GET /f-module-pc10-1/assets/images/1.webp HTTP/1.1\r\nHost: f-module-pc10.ivtfxip.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://f-module-pc10.ivtfxip.com/f-module-pc10-1/?moduleName=f-module-pc10-1\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 1259750\r\npriority: u=4,i=?0\r\ncontent-type: image/webp\r\ncf-cache-status: MISS\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"480cf301de9b5f9dd207e485de614d9d\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5htK1AYIXUod1L8%2Fd6as9SFSVK3OGw2G52p1bVulRvIwg2cr14Ucpy%2BlGBbRkhsL%2BQzFAl6BODJofy2E%2FP%2FTzNRUouuw45sEqp6nyblnQ5MKkaOMzuou\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\naccept-ranges: bytes\r\ndate: Sun, 04 Jan 2026 14:57:04 GMT\r\ncf-ray: 9b8b9612b9c70731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1259750,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"03e18ce093103a347ea9a4685171cbf9","sha1":"6a81c3fcd4f477c405e7c77d2819bd03db74c05c","sha256":"92ec4c38beea1f4409a4bc4bacfd4b311c7b590f6fe40ace7114a94e0886f530","sha512":"38d14a60536ef5fd15c56e92f0d0f3b6a139ba8ddcc1b07eef4fd011670c80f3c3527fb46dcb1b0be4337508188cfb329c9ff3b8f53cf37cc9acff994d2a5f1d","ssdeep":"24576:PyrYVruonb3bXyYkpZFuvqJwlx3lXvYpy4UTtEn:Pyr4rbnb7ytZ2rx3l/Ypy4UGn","tlshash":"ea2523eb89cd3129fd25463a17cb089e883a239d102179d52b170fdfa76431faa5934f","first_seen":"2026-01-04T14:57:54.896783Z","last_seen":"2026-01-04T14:57:54.896783Z","times_seen":1,"resource_available":false,"data":null}},"time_used":246,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":137,"receive":109,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"f-module-pc10.ivtfxip.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"f-module-pc10.ivtfxip.com/f-module-pc10-4/assets/js/vue@2.7.16.js","fqdn":"f-module-pc10.ivtfxip.com","domain":"ivtfxip.com","tld":"com"},"ip":{"addr":"104.21.78.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://f-module-pc10.ivtfxip.com/f-module-pc10-4/?moduleName=f-module-pc10-4","date":"2026-01-04T14:57:04.397Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"f-module-pc10.ivtfxip.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 25 Dec 2025 22:43:25 GMT","end":"Wed, 25 Mar 2026 23:43:19 GMT"},"fingerprint":{"sha1":"BD:75:C7:0C:CF:4C:8B:C6:F0:02:2E:9D:B3:1B:50:54:C3:72:BE:D9","sha256":"19:4F:8E:B1:B5:41:99:3C:AC:F4:8B:36:B6:A9:44:7E:9A:11:1B:8C:E9:7F:5B:40:32:92:FF:44:8F:66:46:C3"}}},"request":{"raw":"GET /f-module-pc10-4/assets/js/vue@2.7.16.js HTTP/1.1\r\nHost: f-module-pc10.ivtfxip.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://f-module-pc10.ivtfxip.com/f-module-pc10-4/?moduleName=f-module-pc10-4\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 04 Jan 2026 14:57:04 GMT\r\npriority: u=2,i=?0\r\ncontent-type: application/javascript\r\ncf-cache-status: MISS\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ClFA%2FyrUm7FGgGgGMxB%2Fq1NoKurG7j5cIFDl3X5ha8AseEWTu2oQIIsLT6eXAA1w6Luf%2FWvzy4CVjdtwycCLSWYQWE6oQtd%2FXuhpcuKRkgENr659Wj9H\"}]}\r\netag: W/\"d32a2d073a37b5945a7495822ee7c821\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9b8b961279b10731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":107679,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65362)","md5":"8da91780fa9815752579efedb7b6ee03","sha1":"4525cbd167c96324016eaa2584703e2024e85c90","sha256":"3c1d4b0c549e8de9d4a9bafb12ab70b6a1ac747d07293b98c5b25b6632999afd","sha512":"5b1f278866cf3420fcee64ae174b01472b705b6fb6645afb1f054317c92b09bdde82cb42738a107e283efdc7e0d8e1ddf3629c525398c6548302a747a8ae530b","ssdeep":"1536:/xUpXlU1At+HWTcPKoVMurh6AiRuA7O8vGwYjT9cisc/tz0bl1:eXCIgrHL8vGwYN5tz0bL","tlshash":"53b3e8dcb296b47113eb20b1417f150bf33a6915a80ac590f223e4d67db8c8e916be7d","first_seen":"2023-12-27T12:14:10Z","last_seen":"2026-06-13T08:21:09.6147Z","times_seen":2044,"resource_available":true,"data":null}},"time_used":132,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":127,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"f-module-pc10.ivtfxip.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ivtfxip.com/pc/static/css/app~db300d2f.59002cc3.css","fqdn":"ivtfxip.com","domain":"ivtfxip.com","tld":"com"},"ip":{"addr":"104.21.78.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ivtfxip.com/pc/","date":"2026-01-04T14:57:00.551Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ivtfxip.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 25 Dec 2025 22:47:06 GMT","end":"Wed, 25 Mar 2026 23:47:02 GMT"},"fingerprint":{"sha1":"A2:E6:E0:E1:3D:71:15:E7:6A:95:1C:EC:53:3E:E4:AC:2E:D2:14:88","sha256":"EA:63:A1:B5:51:F9:8A:2E:D6:72:A0:97:14:88:41:61:B9:B7:97:70:CB:73:D8:93:0E:BF:F1:D0:C9:0A:B5:89"}}},"request":{"raw":"GET /pc/static/css/app~db300d2f.59002cc3.css HTTP/1.1\r\nHost: ivtfxip.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ivtfxip.com/pc/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 04 Jan 2026 14:57:00 GMT\r\npriority: u=2,i=?0\r\ncontent-type: text/css; charset=utf-8\r\ncf-cache-status: MISS\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vzD2B5IH1wn7P1G2I2naUDemb3kmjUZBUzvlBnv9dY1ow0Y3B2FGPmfVPGBgr%2FubO4yR8SlCC6HPH38%2FCDaCbkX0RSGqtbEocvr7\"}]}\r\netag: W/\"b3b52322e0edbe79858a4b381bb8e6a9\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9b8b95fa5fcc35a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":244970,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"c2265cabe22608a6386ede9713cb6d4b","sha1":"05f5a882be8d67b92be07069b2685084162038eb","sha256":"27618c6f37558d87822d80ff07d3017fbd04f9fef27f6fc74d01b7f7d9b2ff23","sha512":"4af78438279bc9b68303e525e9418d8ff905c70d06b5e0038a90d9889a8cbab75e75f5f58ce8a587da5ca795c89047e0870cc067f22877f3d752126e9823a81a","ssdeep":"1536:c28Y7SrW3YeWXA1u9w4HCe/l4EmIk9cMEjNMvU8OLisPFkYu8eKVHefy3aaX0LI1:l4PNlefy3bX0bK21PIzqZZlwSw","tlshash":"0434b61a8f17215b522bdb6976d0bac80f28c326d5224b6efd53380ccbd76891167e4f","first_seen":"2025-05-06T14:56:29.628211Z","last_seen":"2026-05-20T20:17:42.822992Z","times_seen":60,"resource_available":false,"data":null}},"time_used":158,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":156,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"ivtfxip.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ivtfxip.com/pc/static/js/runtime.3f4d25d9.js","fqdn":"ivtfxip.com","domain":"ivtfxip.com","tld":"com"},"ip":{"addr":"104.21.78.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ivtfxip.com/pc/","date":"2026-01-04T14:57:00.584Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ivtfxip.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 25 Dec 2025 22:47:06 GMT","end":"Wed, 25 Mar 2026 23:47:02 GMT"},"fingerprint":{"sha1":"A2:E6:E0:E1:3D:71:15:E7:6A:95:1C:EC:53:3E:E4:AC:2E:D2:14:88","sha256":"EA:63:A1:B5:51:F9:8A:2E:D6:72:A0:97:14:88:41:61:B9:B7:97:70:CB:73:D8:93:0E:BF:F1:D0:C9:0A:B5:89"}}},"request":{"raw":"GET /pc/static/js/runtime.3f4d25d9.js HTTP/1.1\r\nHost: ivtfxip.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ivtfxip.com/pc/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 04 Jan 2026 14:57:00 GMT\r\npriority: u=3,i=?0\r\ncontent-type: application/javascript\r\ncf-cache-status: MISS\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cZCB84qVfS4RjYIWmwksqIwJxHvurAn2N3Gc9glJwoSbsL56FmoNovHA9TDFsSg3vTvknYibHuSs7G151HOyXA25sEVvU%2BJKwoEy\"}]}\r\netag: W/\"3f8ca9a0ccc4f2512f71c4192737e049\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9b8b95fa7fea35a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4475,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (4475), with no line terminators","md5":"395ab67021f50f38f19cff0be3bc97e0","sha1":"f199aaebdb130808cd538372af99d225878f9f0c","sha256":"e819c63de415d00a4c56cee8920e3bbf03a1b2372ff3bc1b2d1c6ab975cdafba","sha512":"0e39f57029aea7617464086a1a5d731ee2edeb85598c26c37cdfe29a57f3a56dc5f202721ada25d2c2135fa5fc6537133493464ecd5c36d5ae0cf4006e2c80c1","ssdeep":"96:E3uM7AcNnzXXl0K2IMePGQDWik1/tIAcNnzXytBK6t9VtoS419X6O:W7ASz1r2IXPGQyik1+ASzyG6bwD6O","tlshash":"399184c63ed8f57913525c50087bd495f0696ea288bb5dd0af0fc97cb83cac1064af4a","first_seen":"2026-01-04T14:57:54.900339Z","last_seen":"2026-04-13T23:57:13.981847Z","times_seen":2,"resource_available":true,"data":null}},"time_used":52,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":52,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"ivtfxip.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.ivtfxip.com/api/app/customConfig","fqdn":"api.ivtfxip.com","domain":"ivtfxip.com","tld":"com"},"ip":{"addr":"104.21.78.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ivtfxip.com/pc/","date":"2026-01-04T14:57:01.979Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.ivtfxip.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 25 Dec 2025 22:40:43 GMT","end":"Wed, 25 Mar 2026 23:40:41 GMT"},"fingerprint":{"sha1":"D1:71:A2:C4:12:9D:CD:50:E5:B5:2D:A0:DB:0A:A0:3E:34:E8:FC:96","sha256":"F4:93:8B:FD:69:F9:AF:4F:CA:47:BC:51:06:9A:1E:76:FD:94:50:77:F6:22:8E:6E:51:5C:40:DA:2A:C7:4B:B6"}}},"request":{"raw":"OPTIONS /api/app/customConfig HTTP/1.1\r\nHost: api.ivtfxip.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: app_analog,app_auth_by_token,app_client_timezone,app_language,app_model,app_version,aws-check,request_domain,theme-mode,x-requested-with\r\nReferer: https://ivtfxip.com/\r\nOrigin: https://ivtfxip.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 04 Jan 2026 14:57:02 GMT\r\ncontent-length: 0\r\nserver: cloudflare\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6aLg0%2Bven%2FPgUQSEh2Sf0jC36IZzQKpl3w3wTN9i8uLg7ewMZm3NuogHTx4YAnabzyv%2F0K5r7CiafqXREzQEmrndak5ZTl9UKFbB2pmnwA%3D%3D\"}]}\r\naccess-control-allow-origin: https://ivtfxip.com\r\naccess-control-allow-methods: GET\r\naccess-control-allow-headers: app_analog,app_auth_by_token,app_client_timezone,app_language,app_model,app_version,aws-check,request_domain,theme-mode,x-requested-with\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 86400\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nallow: GET, HEAD, POST, PUT, DELETE, TRACE, OPTIONS, PATCH\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b8b96038bc8b1b8-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-13T16:33:36.180633Z","times_seen":16390792,"resource_available":true,"data":null}},"time_used":494,"timings":{"blocked":30,"dns":0,"connect":0,"send":0,"wait":463,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"api.ivtfxip.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.ivtfxip.com/api/app/basis/article/byType","fqdn":"api.ivtfxip.com","domain":"ivtfxip.com","tld":"com"},"ip":{"addr":"104.21.78.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ivtfxip.com/pc/","date":"2026-01-04T14:57:02.877Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.ivtfxip.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 25 Dec 2025 22:40:43 GMT","end":"Wed, 25 Mar 2026 23:40:41 GMT"},"fingerprint":{"sha1":"D1:71:A2:C4:12:9D:CD:50:E5:B5:2D:A0:DB:0A:A0:3E:34:E8:FC:96","sha256":"F4:93:8B:FD:69:F9:AF:4F:CA:47:BC:51:06:9A:1E:76:FD:94:50:77:F6:22:8E:6E:51:5C:40:DA:2A:C7:4B:B6"}}},"request":{"raw":"OPTIONS /api/app/basis/article/byType HTTP/1.1\r\nHost: api.ivtfxip.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: app_analog,app_auth_by_token,app_client_timezone,app_language,app_model,app_version,aws-check,content-type,request_domain,theme-mode,x-requested-with\r\nReferer: https://ivtfxip.com/\r\nOrigin: https://ivtfxip.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 04 Jan 2026 14:57:03 GMT\r\ncontent-length: 0\r\nserver: cloudflare\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7yWfxa8hsspM6qYDEt%2BSR2H2D9AZO%2FvyLxrwR1QEmjp1CxQgxcwQ4PgWhsPbViFIehkRsYyodjAF%2B1bK32amB1OHfah1Wek7GBZ0hBQiUw%3D%3D\"}]}\r\naccess-control-allow-origin: https://ivtfxip.com\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: app_analog,app_auth_by_token,app_client_timezone,app_language,app_model,app_version,aws-check,content-type,request_domain,theme-mode,x-requested-with\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 86400\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nallow: GET, HEAD, POST, PUT, DELETE, TRACE, OPTIONS, PATCH\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b8b9608fa16b1b8-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-13T16:33:36.180633Z","times_seen":16390792,"resource_available":true,"data":null}},"time_used":231,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":231,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"api.ivtfxip.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ivtfxip.com/pc/static/css/about~defe45ab.4390022f.css","fqdn":"ivtfxip.com","domain":"ivtfxip.com","tld":"com"},"ip":{"addr":"104.21.78.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://ivtfxip.com/pc/","date":"2026-01-04T14:57:03.060Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ivtfxip.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 25 Dec 2025 22:47:06 GMT","end":"Wed, 25 Mar 2026 23:47:02 GMT"},"fingerprint":{"sha1":"A2:E6:E0:E1:3D:71:15:E7:6A:95:1C:EC:53:3E:E4:AC:2E:D2:14:88","sha256":"EA:63:A1:B5:51:F9:8A:2E:D6:72:A0:97:14:88:41:61:B9:B7:97:70:CB:73:D8:93:0E:BF:F1:D0:C9:0A:B5:89"}}},"request":{"raw":"GET /pc/static/css/about~defe45ab.4390022f.css HTTP/1.1\r\nHost: ivtfxip.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ivtfxip.com/pc/\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 04 Jan 2026 14:57:03 GMT\r\npriority: u=4,i=?0\r\ncontent-type: text/css; charset=utf-8\r\ncf-cache-status: REVALIDATED\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6UZMwonOTjpF1YRGEnAqYLpfQuipVtEg17Iy846oTJ2jo59NywO7DCEk9uKaiYZP%2FmPa5cVECIuxHXXR2%2Bmqzl5PYKjrdIyMorsJ\"}]}\r\netag: W/\"6ca65117ab4489e5faa56d56a2f83cba\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9b8b960a0af735a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":163783,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"d42ddc32a8684ec604be7195bf6451bd","sha1":"dd17452eeb0a0badc26576ea818fe79548fc5617","sha256":"d0f8c6858f82516e4fd133e2318c914c8f2a3dbc54ee147c619076ea6c6db04a","sha512":"a983a7d5ce8384796e6251c5d4f90c3ce4fd628913feb60c39a3b15018f160f8f202efc65c502d107857333bf5007b5c27d7eb0a7ed1f3ca8e0d48d033900bd0","ssdeep":"768:6yLLN7P8dGTalk8h22CdbD+TriUFxXiC/SYdf3fCNbRI1HK3Esj0sxuGStjxAsmO:6yLL+TriUFxXiC/SYdKeVT","tlshash":"45f3621e7a8f740a507fca423950bec88e18b3b7c7458b3ea96b7902ccc72577617a54","first_seen":"2025-10-07T13:51:05.880471Z","last_seen":"2026-05-01T07:36:15.761376Z","times_seen":6,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"ivtfxip.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"f-module-pc10.ivtfxip.com/f-module-pc10-6/assets/js/vue-i18n.js","fqdn":"f-module-pc10.ivtfxip.com","domain":"ivtfxip.com","tld":"com"},"ip":{"addr":"104.21.78.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://f-module-pc10.ivtfxip.com/f-module-pc10-6/?moduleName=f-module-pc10-6","date":"2026-01-04T14:57:04.477Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"f-module-pc10.ivtfxip.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 25 Dec 2025 22:43:25 GMT","end":"Wed, 25 Mar 2026 23:43:19 GMT"},"fingerprint":{"sha1":"BD:75:C7:0C:CF:4C:8B:C6:F0:02:2E:9D:B3:1B:50:54:C3:72:BE:D9","sha256":"19:4F:8E:B1:B5:41:99:3C:AC:F4:8B:36:B6:A9:44:7E:9A:11:1B:8C:E9:7F:5B:40:32:92:FF:44:8F:66:46:C3"}}},"request":{"raw":"GET /f-module-pc10-6/assets/js/vue-i18n.js HTTP/1.1\r\nHost: f-module-pc10.ivtfxip.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://f-module-pc10.ivtfxip.com/f-module-pc10-6/?moduleName=f-module-pc10-6\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 04 Jan 2026 14:57:04 GMT\r\npriority: u=2,i=?0\r\ncontent-type: application/javascript\r\ncf-cache-status: MISS\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DoIgNgAWl8FrQmYpCF0JPbDkXr9O%2Bo8yot3%2BOcEEvmcYthrZc%2BZKWHPnWRApP1pZofjyVrOyGzBQzBKnjdwc%2BqzKmz%2FT2mRv2y9pTcOYUms2RYVICQyG\"}]}\r\netag: W/\"3700d27749ed41faa6359246f6035193\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9b8b9612d9ca0731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":51091,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (486)","md5":"de3dcd16bbced832586e79816170a34d","sha1":"fe6df311601c6c133eef5189d66408022d7b39d1","sha256":"0519be799e6c779f84b167be27a7fda41add0d748e7a89f72cba3e8dcb1abd0d","sha512":"a84c28308be595e34184e6c990025cfdb213132344ff9b523b877bbd66d754e756979dda74d4c2775ad3c0405824fe8e029a14b9e4d96c6590db531e72d05a79","ssdeep":"1536:VzcGwVRclFaeA02I5K8CMKK2IPbKf4hT3Adai3K3D3QdaS3Kg:DwV5ZK2IPbKf4q","tlshash":"46331e49adf32052591372fe4faf6045b5388027214dce09b89ea3a45f55f2c93fabd8","first_seen":"2025-05-06T14:56:29.60368Z","last_seen":"2026-05-10T22:50:28.04562Z","times_seen":38,"resource_available":true,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"f-module-pc10.ivtfxip.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"f-module-pc10.ivtfxip.com/f-module-pc10-3/assets/js/i18n.js","fqdn":"f-module-pc10.ivtfxip.com","domain":"ivtfxip.com","tld":"com"},"ip":{"addr":"104.21.78.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://f-module-pc10.ivtfxip.com/f-module-pc10-3/?moduleName=f-module-pc10-3","date":"2026-01-04T14:57:04.519Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"f-module-pc10.ivtfxip.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 25 Dec 2025 22:43:25 GMT","end":"Wed, 25 Mar 2026 23:43:19 GMT"},"fingerprint":{"sha1":"BD:75:C7:0C:CF:4C:8B:C6:F0:02:2E:9D:B3:1B:50:54:C3:72:BE:D9","sha256":"19:4F:8E:B1:B5:41:99:3C:AC:F4:8B:36:B6:A9:44:7E:9A:11:1B:8C:E9:7F:5B:40:32:92:FF:44:8F:66:46:C3"}}},"request":{"raw":"GET /f-module-pc10-3/assets/js/i18n.js HTTP/1.1\r\nHost: f-module-pc10.ivtfxip.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://f-module-pc10.ivtfxip.com/f-module-pc10-3/?moduleName=f-module-pc10-3\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 04 Jan 2026 14:57:04 GMT\r\npriority: u=2,i=?0\r\ncontent-type: application/javascript\r\ncf-cache-status: MISS\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=F5V3h4J4zfLbIKcpNyOhz%2FkyJ9pqLOLAh9Db%2B2d5qjqqweZ1T40xhr236UUIROzFf4y1%2BJ8x%2BIYBBtP%2FI2eW7vCrqn0g0Q4Ig2hIFjOANSNO7Zg9QFoC%2F5Q%3D\"}]}\r\netag: W/\"35ed314058ed8354cc702a75fb8a7096\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9b8b961309dc0731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6473,"size_decoded":0,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text","md5":"cdc8bb5162214a4563fd844c409327d2","sha1":"2946776d9a785cb18b8fe28b677616a3c9e2cf8b","sha256":"a41906d7e15e5a290ac3c2f8ffa9e6dc719c65db9a080a33e246c058da17d561","sha512":"0e6298615a475636ff5cf670bec9695026e04bcc8fd04987cb6505248867294af7c8a9b9b0e9a7052cd4130ea3006331662b524dc43a272906139c8bc25870b1","ssdeep":"192:o4j7JV33jKKWegowQiObbhkYu4tG6/Ynt33XifflVeJTT2K:d3OpCbbHmJiav","tlshash":"17d12c3a49b4047a984b651bb8cd710aa12987af3fd83ce1bd8e04440fdd62dd1f0bb1","first_seen":"2026-01-04T14:57:54.903838Z","last_seen":"2026-01-04T14:57:54.903838Z","times_seen":1,"resource_available":true,"data":null}},"time_used":47,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":47,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"f-module-pc10.ivtfxip.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ivtfxip.com/pc/static/css/about~aabdebcb.6cc60579.css","fqdn":"ivtfxip.com","domain":"ivtfxip.com","tld":"com"},"ip":{"addr":"104.21.78.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ivtfxip.com/pc/","date":"2026-01-04T14:57:02.133Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ivtfxip.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 25 Dec 2025 22:47:06 GMT","end":"Wed, 25 Mar 2026 23:47:02 GMT"},"fingerprint":{"sha1":"A2:E6:E0:E1:3D:71:15:E7:6A:95:1C:EC:53:3E:E4:AC:2E:D2:14:88","sha256":"EA:63:A1:B5:51:F9:8A:2E:D6:72:A0:97:14:88:41:61:B9:B7:97:70:CB:73:D8:93:0E:BF:F1:D0:C9:0A:B5:89"}}},"request":{"raw":"GET /pc/static/css/about~aabdebcb.6cc60579.css HTTP/1.1\r\nHost: ivtfxip.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ivtfxip.com/pc/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 04 Jan 2026 14:57:02 GMT\r\npriority: u=2,i=?0\r\ncontent-type: text/css; charset=utf-8\r\ncf-cache-status: MISS\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4zS1bscdjJguDnxQDvsgJL7xY01V%2FMlIUYtSIHdxcilUOQFWJZV76Sng3ptXQjtDq9PP1%2BOLF89GIcLKO4qmIb2CLrH8DrHPZw%3D%3D\"}]}\r\netag: W/\"94b446bb54a6b5988f447054bd1d95b5\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9b8b960449f035a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":187816,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"02e751cd1384b49a3b91202dd50f41dc","sha1":"8ed9b4f58a93b82040e507dc6af62f5074876bc4","sha256":"4255c37ba6db18d8106c0e1ecf9a1614bd525e57517bb1b89a99968e2acedbf5","sha512":"d1578c96b40e321235a4a77a414baf30826d49b863f9eebf57aabbfcc8d141603e24c245a67de045274d975a80849efec38672305168bdfc5d9956a2a9fa7455","ssdeep":"1536:Buc/JYZEYCI1qO/ZYJU2Ny7RAh+Z+23HS+ZhVNXB4zOVR:Buc/JYZHCI1qO/ZYvJgZ+23HDZh/Jf","tlshash":"4604a86ff95d240c913bca962590bfd85a287777e201977da4d76e02cc832133b27ad8","first_seen":"2026-01-04T14:57:54.905206Z","last_seen":"2026-04-13T23:57:13.849265Z","times_seen":3,"resource_available":false,"data":null}},"time_used":120,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":119,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"ivtfxip.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"f-module-pc10.ivtfxip.com/f-module-pc10-2/assets/js/element-ui.css","fqdn":"f-module-pc10.ivtfxip.com","domain":"ivtfxip.com","tld":"com"},"ip":{"addr":"104.21.78.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://f-module-pc10.ivtfxip.com/f-module-pc10-2/?moduleName=f-module-pc10-2","date":"2026-01-04T14:57:04.554Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"f-module-pc10.ivtfxip.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 25 Dec 2025 22:43:25 GMT","end":"Wed, 25 Mar 2026 23:43:19 GMT"},"fingerprint":{"sha1":"BD:75:C7:0C:CF:4C:8B:C6:F0:02:2E:9D:B3:1B:50:54:C3:72:BE:D9","sha256":"19:4F:8E:B1:B5:41:99:3C:AC:F4:8B:36:B6:A9:44:7E:9A:11:1B:8C:E9:7F:5B:40:32:92:FF:44:8F:66:46:C3"}}},"request":{"raw":"GET /f-module-pc10-2/assets/js/element-ui.css HTTP/1.1\r\nHost: f-module-pc10.ivtfxip.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://f-module-pc10.ivtfxip.com/f-module-pc10-2/?moduleName=f-module-pc10-2\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 04 Jan 2026 14:57:04 GMT\r\npriority: u=2,i=?0\r\ncontent-type: text/css; charset=utf-8\r\ncf-cache-status: MISS\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4%2BHeiKPPMnq%2BTyip6vW%2B74Q%2BN8nkQRhJQFkDOgz%2FsW%2Bo%2FM%2BnRGCsME1CdMYNROlLVNKIAlg34stMDS8hu4CmwzIx6%2FDN%2BIJ0%2BdytGF0EbiSSZ6iDcE6L\"}]}\r\netag: W/\"632d3d97e401fbba7d150528ffec271f\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9b8b961329e30731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":240033,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"07ced7e527d781115b5a9f3f3f559884","sha1":"371b1a3e8d3453a2451e76320d9d7c0e301331b8","sha256":"dc86d4797565d05e88d63598128328e2ed6f02f7f6d950a36a1c4ca9eb9c8057","sha512":"a19dda2047af06da26cb446e5a9184fbb87ef5db209368305f4636d5bf28bd29442d05b556540359dc41198218092ce706bf1a7b765e18b3c481c2edd068e10e","ssdeep":"1536:c28Y7SrW3YeWXA1u9w4HCe/l4TEg5fqMEeje378OaiZkW1YO8eQM+yFffwbIcfGc:lvHjahfAG1U2VGDt","tlshash":"b234a7219b03216b612bde6cb6c0ba895f18c323d4725bbbfe95740dc7d34891267a4f","first_seen":"2023-08-28T11:31:40Z","last_seen":"2026-06-13T01:56:53.17937Z","times_seen":1444,"resource_available":false,"data":null}},"time_used":41,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":40,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"f-module-pc10.ivtfxip.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"f-module-pc10.ivtfxip.com/f-module-pc10-6/assets/images/2.png","fqdn":"f-module-pc10.ivtfxip.com","domain":"ivtfxip.com","tld":"com"},"ip":{"addr":"104.21.78.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://f-module-pc10.ivtfxip.com/f-module-pc10-6/?moduleName=f-module-pc10-6","date":"2026-01-04T14:57:05.583Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"f-module-pc10.ivtfxip.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 25 Dec 2025 22:43:25 GMT","end":"Wed, 25 Mar 2026 23:43:19 GMT"},"fingerprint":{"sha1":"BD:75:C7:0C:CF:4C:8B:C6:F0:02:2E:9D:B3:1B:50:54:C3:72:BE:D9","sha256":"19:4F:8E:B1:B5:41:99:3C:AC:F4:8B:36:B6:A9:44:7E:9A:11:1B:8C:E9:7F:5B:40:32:92:FF:44:8F:66:46:C3"}}},"request":{"raw":"GET /f-module-pc10-6/assets/images/2.png HTTP/1.1\r\nHost: f-module-pc10.ivtfxip.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://f-module-pc10.ivtfxip.com/f-module-pc10-6/assets/style/style.min.css\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 10661\r\npriority: u=4,i=?0\r\ncontent-type: image/png\r\ncf-cache-status: MISS\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"26000f9c16b632777a36f042ab713e14\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qg70DDQr5xXgFm5nG%2BA%2FJkshbLAuHl7ryby45fNeUeUR9ALyw6jFr%2FZtjQ8dVlguR08C4dewTo3c6RTv96UWdw0MYjddFQgeq85YnVUmST52YuLtOC2M\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\naccept-ranges: bytes\r\ndate: Sun, 04 Jan 2026 14:57:05 GMT\r\ncf-ray: 9b8b9619eaf40731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10661,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 420 x 274, 8-bit/color RGBA, non-interlaced","md5":"fe3beed034a325a35f133d619085865a","sha1":"ee4686cec9e1b56e5dfdad348df6c4dba5818c42","sha256":"6efe8a6ee775e64d5ea04fe113d89ae44d856e557722accf30bb7fd5f555c334","sha512":"068cfd8abeee5b7bd2320fcd3994e0b4e003f4309284a6edd302cc60a49b063f171c8ef927da839ec1b46feaf686160d4a952c0a1f5f80ce3cf79267aea9c21d","ssdeep":"192:ASUZfggMA+8zOgPETa8BMgLDuNMAotM6iuoQI6DF4qYPXBBYJrkfdBfe7lt:nI3+8rKdDLDdFMiICFIPXe7lt","tlshash":"0622d0f407f1dca7eb738d74aaebad8701078f3510308ad20a59758ee85418d8e9c4ce","first_seen":"2025-05-06T14:56:29.644029Z","last_seen":"2026-05-10T22:50:28.08805Z","times_seen":13,"resource_available":false,"data":null}},"time_used":95,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":81,"receive":14,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"f-module-pc10.ivtfxip.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.ivtfxip.com/api/app/config","fqdn":"api.ivtfxip.com","domain":"ivtfxip.com","tld":"com"},"ip":{"addr":"104.21.78.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ivtfxip.com/pc/","date":"2026-01-04T14:57:01.967Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.ivtfxip.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 25 Dec 2025 22:40:43 GMT","end":"Wed, 25 Mar 2026 23:40:41 GMT"},"fingerprint":{"sha1":"D1:71:A2:C4:12:9D:CD:50:E5:B5:2D:A0:DB:0A:A0:3E:34:E8:FC:96","sha256":"F4:93:8B:FD:69:F9:AF:4F:CA:47:BC:51:06:9A:1E:76:FD:94:50:77:F6:22:8E:6E:51:5C:40:DA:2A:C7:4B:B6"}}},"request":{"raw":"OPTIONS /api/app/config HTTP/1.1\r\nHost: api.ivtfxip.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: app_analog,app_auth_by_token,app_client_timezone,app_language,app_model,app_version,aws-check,content-type,request_domain,theme-mode,x-requested-with\r\nReferer: https://ivtfxip.com/\r\nOrigin: https://ivtfxip.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 04 Jan 2026 14:57:02 GMT\r\ncontent-length: 0\r\nserver: cloudflare\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YF%2FbKdds0%2FWOnwHgV93G3Jp564BB5cCopAytosy0ewXMUXaETPGo4F%2FmV%2B5soEjrDhXcmxwJSGhdWtYgBOFVR%2BtSgnbEG%2Bi6vV4OfiC1fA%3D%3D\"}]}\r\naccess-control-allow-origin: https://ivtfxip.com\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: app_analog,app_auth_by_token,app_client_timezone,app_language,app_model,app_version,aws-check,content-type,request_domain,theme-mode,x-requested-with\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 86400\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nallow: GET, HEAD, POST, PUT, DELETE, TRACE, OPTIONS, PATCH\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b8b96039bd6b1b8-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-13T16:33:36.180633Z","times_seen":16390792,"resource_available":true,"data":null}},"time_used":550,"timings":{"blocked":47,"dns":4,"connect":3,"send":0,"wait":442,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"api.ivtfxip.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.ivtfxip.com/api/app/basis/article/byType","fqdn":"api.ivtfxip.com","domain":"ivtfxip.com","tld":"com"},"ip":{"addr":"104.21.78.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ivtfxip.com/pc/","date":"2026-01-04T14:57:02.668Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.ivtfxip.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 25 Dec 2025 22:40:43 GMT","end":"Wed, 25 Mar 2026 23:40:41 GMT"},"fingerprint":{"sha1":"D1:71:A2:C4:12:9D:CD:50:E5:B5:2D:A0:DB:0A:A0:3E:34:E8:FC:96","sha256":"F4:93:8B:FD:69:F9:AF:4F:CA:47:BC:51:06:9A:1E:76:FD:94:50:77:F6:22:8E:6E:51:5C:40:DA:2A:C7:4B:B6"}}},"request":{"raw":"POST /api/app/basis/article/byType HTTP/1.1\r\nHost: api.ivtfxip.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ivtfxip.com/\r\nContent-Type: application/json;charset=UTF-8\r\naws-check: true\r\nX-Requested-With: XMLHttpRequest\r\napp_language: English\r\napp_version: P2.9.3\r\napp_client_timezone: +8\r\nrequest_domain: https://ivtfxip.com/pc/#/\r\napp_analog: false\r\napp_model: f\r\napp_auth_by_token: \r\ntheme-mode: 2\r\nContent-Length: 11\r\nOrigin: https://ivtfxip.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":11,"data":"{\"type\":23}"}},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 04 Jan 2026 14:57:02 GMT\r\ncontent-type: application/json\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MTeRiASgpbfoKynFQtoJ7juUhY0cpzvf8FCEdrzaTjIPcpsxJ9Wfu76r1SpbMHAht%2BKaLi6%2FGQr181m1UoaCNSZhhQYYtIZipiIcrWvMdA%3D%3D\"}]}\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: https://ivtfxip.com\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 86400\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 9b8b96069b7cb1b8-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":59,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"9c2f820634d4f7804bff9473e1075d96","sha1":"797e965053c4474e3d577561ccc5cfc7db3e85e3","sha256":"7929171477295ed05b0ddd10eace22051c46cecffdc3a9780c1d763302984108","sha512":"b6950b8a0f3fd45982168ca8ea9644960eb1b7a447f042a6257bdef2b265bfa0688eb7ec8581f614756a778264a02aa3ed327de7a9b465f48ef809c706320a5e","ssdeep":"","tlshash":"60a002c018ec00b14f808384101f192148bda4d519290100576cd82652f40713614726","first_seen":"2025-04-07T10:36:29.519274Z","last_seen":"2026-06-10T03:07:08.799026Z","times_seen":1173,"resource_available":false,"data":null}},"time_used":207,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":207,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"api.ivtfxip.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"f-module-pc10.ivtfxip.com/f-module-pc10-4/assets/js/vue-i18n.js","fqdn":"f-module-pc10.ivtfxip.com","domain":"ivtfxip.com","tld":"com"},"ip":{"addr":"104.21.78.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://f-module-pc10.ivtfxip.com/f-module-pc10-4/?moduleName=f-module-pc10-4","date":"2026-01-04T14:57:04.401Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"f-module-pc10.ivtfxip.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 25 Dec 2025 22:43:25 GMT","end":"Wed, 25 Mar 2026 23:43:19 GMT"},"fingerprint":{"sha1":"BD:75:C7:0C:CF:4C:8B:C6:F0:02:2E:9D:B3:1B:50:54:C3:72:BE:D9","sha256":"19:4F:8E:B1:B5:41:99:3C:AC:F4:8B:36:B6:A9:44:7E:9A:11:1B:8C:E9:7F:5B:40:32:92:FF:44:8F:66:46:C3"}}},"request":{"raw":"GET /f-module-pc10-4/assets/js/vue-i18n.js HTTP/1.1\r\nHost: f-module-pc10.ivtfxip.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://f-module-pc10.ivtfxip.com/f-module-pc10-4/?moduleName=f-module-pc10-4\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 04 Jan 2026 14:57:04 GMT\r\npriority: u=2,i=?0\r\ncontent-type: application/javascript\r\ncf-cache-status: MISS\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DVwHhLt3of%2BQ9%2FusZVqGS0BKRXt9pheNe8Sco84FixV%2FM7qOFsGJs6%2FYzZxW0LVa%2B9N%2FiM3MyaUdsiwtMJAQ02fOexaUkp9Ui8HhzC%2BJzI3VZl9Ha9CFHHU%3D\"}]}\r\netag: W/\"3700d27749ed41faa6359246f6035193\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9b8b961279b20731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":51091,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (486)","md5":"de3dcd16bbced832586e79816170a34d","sha1":"fe6df311601c6c133eef5189d66408022d7b39d1","sha256":"0519be799e6c779f84b167be27a7fda41add0d748e7a89f72cba3e8dcb1abd0d","sha512":"a84c28308be595e34184e6c990025cfdb213132344ff9b523b877bbd66d754e756979dda74d4c2775ad3c0405824fe8e029a14b9e4d96c6590db531e72d05a79","ssdeep":"1536:VzcGwVRclFaeA02I5K8CMKK2IPbKf4hT3Adai3K3D3QdaS3Kg:DwV5ZK2IPbKf4q","tlshash":"46331e49adf32052591372fe4faf6045b5388027214dce09b89ea3a45f55f2c93fabd8","first_seen":"2025-05-06T14:56:29.60368Z","last_seen":"2026-05-10T22:50:28.04562Z","times_seen":38,"resource_available":true,"data":null}},"time_used":93,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":84,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"f-module-pc10.ivtfxip.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"f-module-pc10.ivtfxip.com/f-module-pc10-2/assets/js/i18n.js","fqdn":"f-module-pc10.ivtfxip.com","domain":"ivtfxip.com","tld":"com"},"ip":{"addr":"104.21.78.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://f-module-pc10.ivtfxip.com/f-module-pc10-2/?moduleName=f-module-pc10-2","date":"2026-01-04T14:57:04.570Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"f-module-pc10.ivtfxip.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 25 Dec 2025 22:43:25 GMT","end":"Wed, 25 Mar 2026 23:43:19 GMT"},"fingerprint":{"sha1":"BD:75:C7:0C:CF:4C:8B:C6:F0:02:2E:9D:B3:1B:50:54:C3:72:BE:D9","sha256":"19:4F:8E:B1:B5:41:99:3C:AC:F4:8B:36:B6:A9:44:7E:9A:11:1B:8C:E9:7F:5B:40:32:92:FF:44:8F:66:46:C3"}}},"request":{"raw":"GET /f-module-pc10-2/assets/js/i18n.js HTTP/1.1\r\nHost: f-module-pc10.ivtfxip.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://f-module-pc10.ivtfxip.com/f-module-pc10-2/?moduleName=f-module-pc10-2\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 04 Jan 2026 14:57:04 GMT\r\npriority: u=2,i=?0\r\ncontent-type: application/javascript\r\ncf-cache-status: MISS\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4EEIpzd9YXO9HefnVyaVnoBGkeJR9JUKfXZlAM%2F3jNxbQUU3i%2BZcGvbccWta84uWW0S0oQTvVXXIkp%2FRLPY7bTMP1s8xYIx757QNRKw90mfMyreHzxiD\"}]}\r\netag: W/\"77c15f670b614f83704b2eb2dfcfd86a\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9b8b961339e60731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":746,"size_decoded":0,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text","md5":"1f727c5cf670b1991c66aa26d4999ccc","sha1":"8f9175234e6557eee32a252ce28ec3205f01b77b","sha256":"08ad9ed3c5a5b3ca806438af86dd8a6d09d0a2f4fa2b83bc78967b3923496bb0","sha512":"be6cc7aeb093bfe97e147c1b0d26d8e94b7a16970b06f618864de52c9ca8654856d50b3b42ad8bb618d1e6dd9c5c4129ceefe8362c2ce85d3a41ab40b95db032","ssdeep":"","tlshash":"8c011a4a88fb25261013783725de501ca17593df28653cb67d9e01415f8d24c06a8fb1","first_seen":"2025-05-06T14:56:29.665657Z","last_seen":"2026-05-10T22:50:28.070857Z","times_seen":13,"resource_available":true,"data":null}},"time_used":88,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":88,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"f-module-pc10.ivtfxip.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"f-module-pc10.ivtfxip.com/f-module-pc10-5/assets/js/i18n.js","fqdn":"f-module-pc10.ivtfxip.com","domain":"ivtfxip.com","tld":"com"},"ip":{"addr":"104.21.78.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://f-module-pc10.ivtfxip.com/f-module-pc10-5/?moduleName=f-module-pc10-5","date":"2026-01-04T14:57:04.601Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"f-module-pc10.ivtfxip.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 25 Dec 2025 22:43:25 GMT","end":"Wed, 25 Mar 2026 23:43:19 GMT"},"fingerprint":{"sha1":"BD:75:C7:0C:CF:4C:8B:C6:F0:02:2E:9D:B3:1B:50:54:C3:72:BE:D9","sha256":"19:4F:8E:B1:B5:41:99:3C:AC:F4:8B:36:B6:A9:44:7E:9A:11:1B:8C:E9:7F:5B:40:32:92:FF:44:8F:66:46:C3"}}},"request":{"raw":"GET /f-module-pc10-5/assets/js/i18n.js HTTP/1.1\r\nHost: f-module-pc10.ivtfxip.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://f-module-pc10.ivtfxip.com/f-module-pc10-5/?moduleName=f-module-pc10-5\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 04 Jan 2026 14:57:04 GMT\r\npriority: u=2,i=?0\r\ncontent-type: application/javascript\r\ncf-cache-status: MISS\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=aRe4efu8nsRCDlu3%2FqheQKti8F5Ouiu%2FT%2BrLPDVrya8%2F9EPmSonnOXujqnrVWbiMe7wD65Uku1I4D%2BPRGc5JOTfQebiU%2Bzvb0uxgZpnX7ryoER897BGFXX4%3D\"}]}\r\netag: W/\"85ac7fb7491303ef7cf7cc6517e00084\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9b8b961369f50731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12583,"size_decoded":0,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text","md5":"9e3544d92d760e013559d41c9418ba6e","sha1":"a2be7af08f7a8dfc92bcae17422601fd45dabcf2","sha256":"9870defd0419604a17d8bd9d47728eed49099570bb1dfafd9e5ace650eb62204","sha512":"3a24a67bfdcf3a50201a3e10fac706edfe42459d084d40f0bd121d6b15160c8f8bf65e7fe39a13beb94e620c48dca109445e32698e778c8a80b075397e3ead43","ssdeep":"192:DQGVP3eWqQWLeuvWybzp5ihTyOcKNaOdYcJNc5j0hs3OYnKu612K:DQG5hqQW/WybzPihTyOUOYCc5j0hKOCM","tlshash":"0942723686b1142a1506211ea9ce3a8ae22d099f6fd5b8e1fe9c04151fed03dd3f87f1","first_seen":"2026-01-04T14:57:54.909471Z","last_seen":"2026-01-04T14:57:54.909471Z","times_seen":1,"resource_available":true,"data":null}},"time_used":65,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":63,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"f-module-pc10.ivtfxip.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.ivtfxip.com/api/app/basis/news","fqdn":"api.ivtfxip.com","domain":"ivtfxip.com","tld":"com"},"ip":{"addr":"104.21.78.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://f-module-pc10.ivtfxip.com/f-module-pc10-2/?moduleName=f-module-pc10-2","date":"2026-01-04T14:57:05.767Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.ivtfxip.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 25 Dec 2025 22:40:43 GMT","end":"Wed, 25 Mar 2026 23:40:41 GMT"},"fingerprint":{"sha1":"D1:71:A2:C4:12:9D:CD:50:E5:B5:2D:A0:DB:0A:A0:3E:34:E8:FC:96","sha256":"F4:93:8B:FD:69:F9:AF:4F:CA:47:BC:51:06:9A:1E:76:FD:94:50:77:F6:22:8E:6E:51:5C:40:DA:2A:C7:4B:B6"}}},"request":{"raw":"OPTIONS /api/app/basis/news HTTP/1.1\r\nHost: api.ivtfxip.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: app_language,content-type\r\nReferer: https://f-module-pc10.ivtfxip.com/\r\nOrigin: https://f-module-pc10.ivtfxip.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 04 Jan 2026 14:57:05 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=iHanuH9JZDSwRpza8LDLy%2BlSzDBFtEVHhHGj%2FlBJYDw7x3TecnoAybHH5vLzOC8wZhEI3n8MxwA%2Bm6NokBEBti6yyhLhNOAUfqXOBhk%3D\"}]}\r\naccess-control-allow-origin: https://f-module-pc10.ivtfxip.com\r\naccess-control-allow-methods: GET\r\naccess-control-allow-headers: app_language,content-type\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 86400\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nallow: GET, HEAD, POST, PUT, DELETE, TRACE, OPTIONS, PATCH\r\ncf-cache-status: DYNAMIC\r\ncontent-length: 0\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncf-ray: 9b8b961b0a7156c3-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-13T16:33:36.180633Z","times_seen":16390792,"resource_available":true,"data":null}},"time_used":213,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":210,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"api.ivtfxip.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"f-module-pc10.ivtfxip.com/f-module-pc10-4/assets/js/element-ui.css","fqdn":"f-module-pc10.ivtfxip.com","domain":"ivtfxip.com","tld":"com"},"ip":{"addr":"104.21.78.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://f-module-pc10.ivtfxip.com/f-module-pc10-4/?moduleName=f-module-pc10-4","date":"2026-01-04T14:57:04.404Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"f-module-pc10.ivtfxip.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 25 Dec 2025 22:43:25 GMT","end":"Wed, 25 Mar 2026 23:43:19 GMT"},"fingerprint":{"sha1":"BD:75:C7:0C:CF:4C:8B:C6:F0:02:2E:9D:B3:1B:50:54:C3:72:BE:D9","sha256":"19:4F:8E:B1:B5:41:99:3C:AC:F4:8B:36:B6:A9:44:7E:9A:11:1B:8C:E9:7F:5B:40:32:92:FF:44:8F:66:46:C3"}}},"request":{"raw":"GET /f-module-pc10-4/assets/js/element-ui.css HTTP/1.1\r\nHost: f-module-pc10.ivtfxip.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://f-module-pc10.ivtfxip.com/f-module-pc10-4/?moduleName=f-module-pc10-4\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 04 Jan 2026 14:57:04 GMT\r\npriority: u=2,i=?0\r\ncontent-type: text/css; charset=utf-8\r\ncf-cache-status: MISS\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lzEiJP58Fx1qz9ssmWp6%2BYxiEa3XG9z3vrDL%2BKCO7iyFe58elIERl6a2eDQJQ2m%2Ba6KqIvHt3vUJ3Vuqc0A0Br%2B0spV5SXyyCvo1k5jrz272YWZFca6L\"}]}\r\netag: W/\"632d3d97e401fbba7d150528ffec271f\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9b8b961279b30731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":240033,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"07ced7e527d781115b5a9f3f3f559884","sha1":"371b1a3e8d3453a2451e76320d9d7c0e301331b8","sha256":"dc86d4797565d05e88d63598128328e2ed6f02f7f6d950a36a1c4ca9eb9c8057","sha512":"a19dda2047af06da26cb446e5a9184fbb87ef5db209368305f4636d5bf28bd29442d05b556540359dc41198218092ce706bf1a7b765e18b3c481c2edd068e10e","ssdeep":"1536:c28Y7SrW3YeWXA1u9w4HCe/l4TEg5fqMEeje378OaiZkW1YO8eQM+yFffwbIcfGc:lvHjahfAG1U2VGDt","tlshash":"b234a7219b03216b612bde6cb6c0ba895f18c323d4725bbbfe95740dc7d34891267a4f","first_seen":"2023-08-28T11:31:40Z","last_seen":"2026-06-13T01:56:53.17937Z","times_seen":1444,"resource_available":false,"data":null}},"time_used":89,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":79,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"f-module-pc10.ivtfxip.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ivtfxip.com/pc/static/js/app~db300d2f.dd1f8ed8.js","fqdn":"ivtfxip.com","domain":"ivtfxip.com","tld":"com"},"ip":{"addr":"104.21.78.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ivtfxip.com/pc/","date":"2026-01-04T14:57:00.574Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ivtfxip.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 25 Dec 2025 22:47:06 GMT","end":"Wed, 25 Mar 2026 23:47:02 GMT"},"fingerprint":{"sha1":"A2:E6:E0:E1:3D:71:15:E7:6A:95:1C:EC:53:3E:E4:AC:2E:D2:14:88","sha256":"EA:63:A1:B5:51:F9:8A:2E:D6:72:A0:97:14:88:41:61:B9:B7:97:70:CB:73:D8:93:0E:BF:F1:D0:C9:0A:B5:89"}}},"request":{"raw":"GET /pc/static/js/app~db300d2f.dd1f8ed8.js HTTP/1.1\r\nHost: ivtfxip.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ivtfxip.com/pc/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 04 Jan 2026 14:57:00 GMT\r\npriority: u=3,i=?0\r\ncontent-type: application/javascript\r\ncf-cache-status: MISS\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cyAjfaxBwKOpc458l9m%2FMSaGBWdcq%2F8N1dMtatiGPC97g4ri3QlBvEPPlG7fVHyOZlc9LHPD7%2BWt0kbQRhfKjLqElnBz3YkIi%2FCD\"}]}\r\netag: W/\"19c863d72e67525b6d07de3b3941f4b2\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9b8b95fa6fdb35a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":139875,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (38910)","md5":"ca846dfc1355e43b150da642e7e6f274","sha1":"e98d09caf676bd0fb75f50d851c94dc06ac333e7","sha256":"91513d6f100da01f98ad14715da6ff92480eeb8957f211523489989a353bf242","sha512":"42dcdae455213f53222b851a79ae9230fa30238a21e59f8108eb335796d48e37fa414294e999113cd6e373543451d1d60d44821c97903aedc65e534f9ea762f9","ssdeep":"1536:ZlZdnIMwSmUxdh+0R8mdiGUze7Ral6Ns0QMhuKzEAX3ghNgO4UxI0l25i:BdINSm4iyAl65QdIEQ3gbgBU60/","tlshash":"b0d3b6c9b6c2f06153a760b5407f010ff23a6d68b44e9484e265e4e97db8a4ea137f3d","first_seen":"2025-05-16T20:21:57.54155Z","last_seen":"2026-05-20T20:17:42.882026Z","times_seen":41,"resource_available":true,"data":null}},"time_used":79,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":77,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"ivtfxip.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ivtfxip.com/pc/static/js/about~f71cff67.8c18c2f3.js","fqdn":"ivtfxip.com","domain":"ivtfxip.com","tld":"com"},"ip":{"addr":"104.21.78.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ivtfxip.com/pc/","date":"2026-01-04T14:57:02.124Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ivtfxip.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 25 Dec 2025 22:47:06 GMT","end":"Wed, 25 Mar 2026 23:47:02 GMT"},"fingerprint":{"sha1":"A2:E6:E0:E1:3D:71:15:E7:6A:95:1C:EC:53:3E:E4:AC:2E:D2:14:88","sha256":"EA:63:A1:B5:51:F9:8A:2E:D6:72:A0:97:14:88:41:61:B9:B7:97:70:CB:73:D8:93:0E:BF:F1:D0:C9:0A:B5:89"}}},"request":{"raw":"GET /pc/static/js/about~f71cff67.8c18c2f3.js HTTP/1.1\r\nHost: ivtfxip.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ivtfxip.com/pc/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 04 Jan 2026 14:57:02 GMT\r\npriority: u=3,i=?0\r\ncontent-type: application/javascript\r\ncf-cache-status: MISS\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oYlqGItBM%2Fg5iYbyO4%2BFFVz2pp4lpiUR3s72y0VWcMQits%2FEyP9cHQVHM1IdpwtSg2yMaCoc823tKu6ZeNdKeT%2BhSyNsc4thF8Zf\"}]}\r\netag: W/\"ef3ac35124b0440c1d734f9a028b899d\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9b8b960439e735a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":23574,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (23568), with no line terminators","md5":"64fc74d0559b959915fcc42eeb8e69ea","sha1":"7790fd6bf29416c6f53c05564c1dd95cf835aabe","sha256":"a54cf7febe9bc550b2e58eeab15e87abbcb41da3306fb5457fbac50b92d8f7f2","sha512":"1386052d2a3a3a8ccddbe47471a41648754cb4c02d2a3b97474bc2396d1aaef3bc88e6142a8ca4919ee4f1f381f2fd96e3628a947e54d91dadba0f3230bd9b0a","ssdeep":"384:SfameoGI2DQEKRkZ68ASNi1roJlKnz91kkNjIPNzGsrTwc1yyLF9r:nmeoGI9EKRkZ68ASNiKlKz91kQIPNGsd","tlshash":"ffb2841d629b1538dabe50f1609b9a24912afb84e002841fb67c4dd1f0e1f58338fb7d","first_seen":"2025-07-17T05:14:10.793431Z","last_seen":"2026-05-20T20:17:42.820478Z","times_seen":31,"resource_available":true,"data":null}},"time_used":64,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":64,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"ivtfxip.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ivtfxip.com/pc/static/js/about~748942c6.467a5c52.js","fqdn":"ivtfxip.com","domain":"ivtfxip.com","tld":"com"},"ip":{"addr":"104.21.78.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://ivtfxip.com/pc/","date":"2026-01-04T14:57:03.069Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ivtfxip.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 25 Dec 2025 22:47:06 GMT","end":"Wed, 25 Mar 2026 23:47:02 GMT"},"fingerprint":{"sha1":"A2:E6:E0:E1:3D:71:15:E7:6A:95:1C:EC:53:3E:E4:AC:2E:D2:14:88","sha256":"EA:63:A1:B5:51:F9:8A:2E:D6:72:A0:97:14:88:41:61:B9:B7:97:70:CB:73:D8:93:0E:BF:F1:D0:C9:0A:B5:89"}}},"request":{"raw":"GET /pc/static/js/about~748942c6.467a5c52.js HTTP/1.1\r\nHost: ivtfxip.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ivtfxip.com/pc/\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 04 Jan 2026 14:57:03 GMT\r\npriority: u=4,i=?0\r\ncontent-type: application/javascript\r\ncf-cache-status: REVALIDATED\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JK8bq%2Bc6nygZ%2BsopMdXrO5f7awylIxN6jw05kq6nwpkUT%2FwEtBn056v7%2BwUrW6PY9gO6pxw7MXR6I3H6WwsrbG2mXzdu%2FgZ%2FwQ%3D%3D\"}]}\r\netag: W/\"eaecae9fef0c7281f6f8ab05f11efb90\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9b8b960a1af935a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":245496,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (63080)","md5":"78402fb403da7d0bb359f7b5c317b400","sha1":"293fb2f0abe898d7c8a5cc85e4a0e163e425d136","sha256":"3e53223942197f39e4502bce8a23b26fcff93b7f8bb09789335c40dedee1471c","sha512":"ff0150f3a80f6b6916d208ddb7744c67a80f5fa709febe5cc23a98400163ec534d8b52acbb4b2bfb06927c79424d35cf1a7a8949dc6deb9234816557839f634f","ssdeep":"3072:V3dq49TZ4juqmXYfTQnihMxKhHDHhjHXlmn+XP:ddqMt4ju5XYfUnihMxKhjHhbXpf","tlshash":"0b34e698f395b02186976135003f250bb2366454a5cbc68cf13adae96e7c88d36b3f3d","first_seen":"2025-06-28T18:37:46.383524Z","last_seen":"2026-05-20T20:17:42.838659Z","times_seen":33,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"ivtfxip.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.ivtfxip.com/api/app/basis/article/byType","fqdn":"api.ivtfxip.com","domain":"ivtfxip.com","tld":"com"},"ip":{"addr":"104.21.78.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ivtfxip.com/pc/","date":"2026-01-04T14:57:03.305Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.ivtfxip.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 25 Dec 2025 22:40:43 GMT","end":"Wed, 25 Mar 2026 23:40:41 GMT"},"fingerprint":{"sha1":"D1:71:A2:C4:12:9D:CD:50:E5:B5:2D:A0:DB:0A:A0:3E:34:E8:FC:96","sha256":"F4:93:8B:FD:69:F9:AF:4F:CA:47:BC:51:06:9A:1E:76:FD:94:50:77:F6:22:8E:6E:51:5C:40:DA:2A:C7:4B:B6"}}},"request":{"raw":"POST /api/app/basis/article/byType HTTP/1.1\r\nHost: api.ivtfxip.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ivtfxip.com/\r\nContent-Type: application/json;charset=UTF-8\r\naws-check: true\r\nX-Requested-With: XMLHttpRequest\r\napp_language: English\r\napp_version: P2.9.3\r\napp_client_timezone: +8\r\nrequest_domain: https://ivtfxip.com/pc/#/\r\napp_analog: false\r\napp_model: f\r\napp_auth_by_token: \r\ntheme-mode: 2\r\nContent-Length: 11\r\nOrigin: https://ivtfxip.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":11,"data":"{\"type\":20}"}},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 04 Jan 2026 14:57:03 GMT\r\ncontent-type: application/json\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=79l6I5IFVFjV3no2CJMksIn2i6QIPX56CFgpCijiubIeIZaymbexjlr5hrkDOIzG3eZjkdzSQxKV57qGUcHim4QcfJ%2FlJFLqpRjVPnI%3D\"}]}\r\nvary: accept-encoding\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: https://ivtfxip.com\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 86400\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncf-ray: 9b8b960b79cd56c3-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":59,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"9c2f820634d4f7804bff9473e1075d96","sha1":"797e965053c4474e3d577561ccc5cfc7db3e85e3","sha256":"7929171477295ed05b0ddd10eace22051c46cecffdc3a9780c1d763302984108","sha512":"b6950b8a0f3fd45982168ca8ea9644960eb1b7a447f042a6257bdef2b265bfa0688eb7ec8581f614756a778264a02aa3ed327de7a9b465f48ef809c706320a5e","ssdeep":"","tlshash":"60a002c018ec00b14f808384101f192148bda4d519290100576cd82652f40713614726","first_seen":"2025-04-07T10:36:29.519274Z","last_seen":"2026-06-10T03:07:08.799026Z","times_seen":1173,"resource_available":false,"data":null}},"time_used":407,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":407,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"api.ivtfxip.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ivtfxip.com/pc/static/js/npm.babel-runtime~7da828cd.1a49da5c.js","fqdn":"ivtfxip.com","domain":"ivtfxip.com","tld":"com"},"ip":{"addr":"104.21.78.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ivtfxip.com/pc/","date":"2026-01-04T14:57:00.576Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ivtfxip.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 25 Dec 2025 22:47:06 GMT","end":"Wed, 25 Mar 2026 23:47:02 GMT"},"fingerprint":{"sha1":"A2:E6:E0:E1:3D:71:15:E7:6A:95:1C:EC:53:3E:E4:AC:2E:D2:14:88","sha256":"EA:63:A1:B5:51:F9:8A:2E:D6:72:A0:97:14:88:41:61:B9:B7:97:70:CB:73:D8:93:0E:BF:F1:D0:C9:0A:B5:89"}}},"request":{"raw":"GET /pc/static/js/npm.babel-runtime~7da828cd.1a49da5c.js HTTP/1.1\r\nHost: ivtfxip.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ivtfxip.com/pc/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 04 Jan 2026 14:57:00 GMT\r\npriority: u=3,i=?0\r\ncontent-type: application/javascript\r\ncf-cache-status: MISS\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9hhkQmC8Jn9IrStbXZS9EMgb5hnZ0Jdu718tjn96aeDZdjzyBIU%2BuyqHxiyB4oszrX84f5kw%2BUqn%2B1HqhBIdljZ%2BCJFzVFG7Jg%3D%3D\"}]}\r\netag: W/\"400f8fb5b6d409b84fe4fe5d9cc082f9\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9b8b95fa6fde35a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":17151,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (17150), with no line terminators","md5":"0b4e97d8530adfa918ac2457c21af609","sha1":"da70092d40f75676527c49b52d808dcaff808f83","sha256":"020f7801ab5b45a59e95bc9d5f1b52b20deb7c1983a44124298a3c78a514a70b","sha512":"c31354a943d96016a0db5ba9f54122ecdab989825405a436f52c3f69ee275a9199eb635140ec18496974bccc97bf1d7c2c2999ace1736753665568a06befc851","ssdeep":"384:GhGcyqHkhUVaVnIaHfof3gyGGKqiv96WDVpo6S:+5mwXPKRVnsz","tlshash":"ab72718eb1d2b05416b3712c022fb40af3b70958b85b99d0e36dc1e5ad7684f50b7e6e","first_seen":"2025-05-06T14:56:29.650145Z","last_seen":"2026-05-20T20:17:42.870557Z","times_seen":54,"resource_available":true,"data":null}},"time_used":75,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":74,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"ivtfxip.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.ivtfxip.com/api/app/user/phone/country","fqdn":"api.ivtfxip.com","domain":"ivtfxip.com","tld":"com"},"ip":{"addr":"104.21.78.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ivtfxip.com/pc/","date":"2026-01-04T14:57:01.965Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.ivtfxip.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 25 Dec 2025 22:40:43 GMT","end":"Wed, 25 Mar 2026 23:40:41 GMT"},"fingerprint":{"sha1":"D1:71:A2:C4:12:9D:CD:50:E5:B5:2D:A0:DB:0A:A0:3E:34:E8:FC:96","sha256":"F4:93:8B:FD:69:F9:AF:4F:CA:47:BC:51:06:9A:1E:76:FD:94:50:77:F6:22:8E:6E:51:5C:40:DA:2A:C7:4B:B6"}}},"request":{"raw":"OPTIONS /api/app/user/phone/country HTTP/1.1\r\nHost: api.ivtfxip.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: app_analog,app_auth_by_token,app_client_timezone,app_language,app_model,app_version,aws-check,content-type,request_domain,theme-mode,x-requested-with\r\nReferer: https://ivtfxip.com/\r\nOrigin: https://ivtfxip.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 04 Jan 2026 14:57:02 GMT\r\ncontent-length: 0\r\nserver: cloudflare\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GM01THW4Y34En4WFJgsCtnmTBLY4kDOWf%2BByBUryCPTB3zR5rRi0Oc%2F2z%2BrGLejEPTMi8BUIc96HKpzv7gjPH0onDyQSE14%2FkFAJGNLNzg%3D%3D\"}]}\r\naccess-control-allow-origin: https://ivtfxip.com\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: app_analog,app_auth_by_token,app_client_timezone,app_language,app_model,app_version,aws-check,content-type,request_domain,theme-mode,x-requested-with\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 86400\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nallow: GET, HEAD, POST, PUT, DELETE, TRACE, OPTIONS, PATCH\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b8b96038bbfb1b8-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-13T16:33:36.180633Z","times_seen":16390792,"resource_available":true,"data":null}},"time_used":495,"timings":{"blocked":43,"dns":2,"connect":3,"send":0,"wait":400,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"api.ivtfxip.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.ivtfxip.com/api/app/basis/article/byType","fqdn":"api.ivtfxip.com","domain":"ivtfxip.com","tld":"com"},"ip":{"addr":"104.21.78.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ivtfxip.com/pc/","date":"2026-01-04T14:57:02.886Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.ivtfxip.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 25 Dec 2025 22:40:43 GMT","end":"Wed, 25 Mar 2026 23:40:41 GMT"},"fingerprint":{"sha1":"D1:71:A2:C4:12:9D:CD:50:E5:B5:2D:A0:DB:0A:A0:3E:34:E8:FC:96","sha256":"F4:93:8B:FD:69:F9:AF:4F:CA:47:BC:51:06:9A:1E:76:FD:94:50:77:F6:22:8E:6E:51:5C:40:DA:2A:C7:4B:B6"}}},"request":{"raw":"OPTIONS /api/app/basis/article/byType HTTP/1.1\r\nHost: api.ivtfxip.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: app_analog,app_auth_by_token,app_client_timezone,app_language,app_model,app_version,aws-check,content-type,request_domain,theme-mode,x-requested-with\r\nReferer: https://ivtfxip.com/\r\nOrigin: https://ivtfxip.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 04 Jan 2026 14:57:03 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=12QWuwtTq2qEga868JpC7JPl3YOhtYgpVlh5RGCgsnydkfXIXCICHbMfT7%2FmzsDQavYKsHuC8nxy0SYPVHHqzzKMYi9MaqwTIHSP804%3D\"}]}\r\naccess-control-allow-origin: https://ivtfxip.com\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: app_analog,app_auth_by_token,app_client_timezone,app_language,app_model,app_version,aws-check,content-type,request_domain,theme-mode,x-requested-with\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 86400\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nallow: GET, HEAD, POST, PUT, DELETE, TRACE, OPTIONS, PATCH\r\ncf-cache-status: DYNAMIC\r\ncontent-length: 0\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncf-ray: 9b8b960909b656c3-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-13T16:33:36.180633Z","times_seen":16390792,"resource_available":true,"data":null}},"time_used":416,"timings":{"blocked":2,"dns":1,"connect":0,"send":0,"wait":413,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"api.ivtfxip.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"f-module-pc10.ivtfxip.com/f-module-pc10-1/assets/js/i18n.js","fqdn":"f-module-pc10.ivtfxip.com","domain":"ivtfxip.com","tld":"com"},"ip":{"addr":"104.21.78.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://f-module-pc10.ivtfxip.com/f-module-pc10-1/?moduleName=f-module-pc10-1","date":"2026-01-04T14:57:04.452Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"f-module-pc10.ivtfxip.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 25 Dec 2025 22:43:25 GMT","end":"Wed, 25 Mar 2026 23:43:19 GMT"},"fingerprint":{"sha1":"BD:75:C7:0C:CF:4C:8B:C6:F0:02:2E:9D:B3:1B:50:54:C3:72:BE:D9","sha256":"19:4F:8E:B1:B5:41:99:3C:AC:F4:8B:36:B6:A9:44:7E:9A:11:1B:8C:E9:7F:5B:40:32:92:FF:44:8F:66:46:C3"}}},"request":{"raw":"GET /f-module-pc10-1/assets/js/i18n.js HTTP/1.1\r\nHost: f-module-pc10.ivtfxip.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://f-module-pc10.ivtfxip.com/f-module-pc10-1/?moduleName=f-module-pc10-1\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 04 Jan 2026 14:57:04 GMT\r\npriority: u=2,i=?0\r\ncontent-type: application/javascript\r\ncf-cache-status: MISS\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GqYzqn5Z6%2FEGsoVkOAl89ybLOVqz%2F3ozZTkmJDNHEgWwPmRic2EFHsfyAFzsRWWk%2FNX%2B%2F6SoRqbmjgn6bhQFVEbMNBtIKu1dX9qYeCLnFDDB7U89iNqF\"}]}\r\netag: W/\"8031eb70ef2bb90fead9183b6fd81afa\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9b8b9612b9c60731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14796,"size_decoded":0,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text","md5":"a532247a8087d7941ffda8016555150b","sha1":"3616bbdb367345b903a417b43e4501e41a1d4e7d","sha256":"f00564a39c70afd86599e61115de3c978423b55fccaaab4e5a07abad678b62d9","sha512":"5e58071a25651b719a614db6293e12c97c826439aecd04631541b9db5b413570f454c2e859b70cfd7ddcb8f9479a833453714c16c36375ce6860a6253e5a5cd0","ssdeep":"384:9EjR5whw5s0D0tGhunpw0hofqk4/6DyMgmTEYaZXoDapf:ed5sQ6Ghupw0ho84XgmTGXoDapf","tlshash":"52621f77542018b288495689accd3208616e51af2fa9b4e6bd7c49143f9f37ee1f0736","first_seen":"2026-01-04T14:57:54.914513Z","last_seen":"2026-01-04T14:57:54.914513Z","times_seen":1,"resource_available":true,"data":null}},"time_used":87,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":87,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"f-module-pc10.ivtfxip.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"f-module-pc10.ivtfxip.com/f-module-pc10-2/assets/js/element-ui.js","fqdn":"f-module-pc10.ivtfxip.com","domain":"ivtfxip.com","tld":"com"},"ip":{"addr":"104.21.78.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://f-module-pc10.ivtfxip.com/f-module-pc10-2/?moduleName=f-module-pc10-2","date":"2026-01-04T14:57:04.556Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"f-module-pc10.ivtfxip.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 25 Dec 2025 22:43:25 GMT","end":"Wed, 25 Mar 2026 23:43:19 GMT"},"fingerprint":{"sha1":"BD:75:C7:0C:CF:4C:8B:C6:F0:02:2E:9D:B3:1B:50:54:C3:72:BE:D9","sha256":"19:4F:8E:B1:B5:41:99:3C:AC:F4:8B:36:B6:A9:44:7E:9A:11:1B:8C:E9:7F:5B:40:32:92:FF:44:8F:66:46:C3"}}},"request":{"raw":"GET /f-module-pc10-2/assets/js/element-ui.js HTTP/1.1\r\nHost: f-module-pc10.ivtfxip.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://f-module-pc10.ivtfxip.com/f-module-pc10-2/?moduleName=f-module-pc10-2\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 04 Jan 2026 14:57:04 GMT\r\npriority: u=2,i=?0\r\ncontent-type: application/javascript\r\ncf-cache-status: MISS\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tHdAYi7wT%2F1y0Bw4u2bj7ANYJc%2FtDIR%2BwroPOK5hVKnlQ8XyL1ED0wXqAYVQFZbVc7RxW2R%2Fo9NzQpckDzmbjGJe0BmoOR171wDWHYW8va%2BWWNOboep3\"}]}\r\netag: W/\"d7dad5eb31c2ff0c23cd1c94667f1e2c\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9b8b961329e40731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":664912,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65336), with no line terminators","md5":"871ab253bcff550f462f866dbdef7465","sha1":"616b57088730b5322c12649d31d620afd3abc8e6","sha256":"89d3c55e8fa03f177b1cc3824aede7c94b2ce4143f6a30f54ebb96e20eb42bc2","sha512":"45d91bcef6b33e603fef096e9e21efeaa30cab43423d8b5a98911f98da8d9b2e9a7654a9f479444a9bbd8dc4ca4968d5e7a64abee42fa88023c676d75856131d","ssdeep":"6144:BSqtkdlBC7d1xSBiwzlPQa/R6rvnGehHjcFFFw9/8CslIvi/x1:Wm7d1xSBnzlPQa/ofxhHwHFt/x1","tlshash":"e9e4098d72c1b53147a36071103f250bb33b2a9ca809809cb679d5ea6dbda0d526ff7d","first_seen":"2023-09-27T20:28:23Z","last_seen":"2026-06-08T02:28:42.770668Z","times_seen":2934,"resource_available":true,"data":null}},"time_used":228,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":187,"receive":41,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"f-module-pc10.ivtfxip.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"f-module-pc10.ivtfxip.com/f-module-pc10-5/assets/js/vue@2.7.16.js","fqdn":"f-module-pc10.ivtfxip.com","domain":"ivtfxip.com","tld":"com"},"ip":{"addr":"104.21.78.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://f-module-pc10.ivtfxip.com/f-module-pc10-5/?moduleName=f-module-pc10-5","date":"2026-01-04T14:57:04.595Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"f-module-pc10.ivtfxip.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 25 Dec 2025 22:43:25 GMT","end":"Wed, 25 Mar 2026 23:43:19 GMT"},"fingerprint":{"sha1":"BD:75:C7:0C:CF:4C:8B:C6:F0:02:2E:9D:B3:1B:50:54:C3:72:BE:D9","sha256":"19:4F:8E:B1:B5:41:99:3C:AC:F4:8B:36:B6:A9:44:7E:9A:11:1B:8C:E9:7F:5B:40:32:92:FF:44:8F:66:46:C3"}}},"request":{"raw":"GET /f-module-pc10-5/assets/js/vue@2.7.16.js HTTP/1.1\r\nHost: f-module-pc10.ivtfxip.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://f-module-pc10.ivtfxip.com/f-module-pc10-5/?moduleName=f-module-pc10-5\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 04 Jan 2026 14:57:04 GMT\r\npriority: u=2,i=?0\r\ncontent-type: application/javascript\r\ncf-cache-status: MISS\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TgclCoCuMh%2BBkr1tQsHf2N8cBYoA2TPcKtxQvsAP5W6m4%2FENijXPSRlYSOKkKEKWM8Inee7kXvajWUm5GSd%2BpgioDK2y%2FvVHGBt7sLXOQm0vpkA2RDZ4%2F1U%3D\"}]}\r\netag: W/\"d32a2d073a37b5945a7495822ee7c821\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9b8b961359ec0731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":107679,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65362)","md5":"8da91780fa9815752579efedb7b6ee03","sha1":"4525cbd167c96324016eaa2584703e2024e85c90","sha256":"3c1d4b0c549e8de9d4a9bafb12ab70b6a1ac747d07293b98c5b25b6632999afd","sha512":"5b1f278866cf3420fcee64ae174b01472b705b6fb6645afb1f054317c92b09bdde82cb42738a107e283efdc7e0d8e1ddf3629c525398c6548302a747a8ae530b","ssdeep":"1536:/xUpXlU1At+HWTcPKoVMurh6AiRuA7O8vGwYjT9cisc/tz0bl1:eXCIgrHL8vGwYN5tz0bL","tlshash":"53b3e8dcb296b47113eb20b1417f150bf33a6915a80ac590f223e4d67db8c8e916be7d","first_seen":"2023-12-27T12:14:10Z","last_seen":"2026-06-13T08:21:09.6147Z","times_seen":2044,"resource_available":true,"data":null}},"time_used":48,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":44,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"f-module-pc10.ivtfxip.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"f-module-pc10.ivtfxip.com/f-module-pc10-4/assets/js/element-ui.js","fqdn":"f-module-pc10.ivtfxip.com","domain":"ivtfxip.com","tld":"com"},"ip":{"addr":"104.21.78.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://f-module-pc10.ivtfxip.com/f-module-pc10-4/?moduleName=f-module-pc10-4","date":"2026-01-04T14:57:04.409Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"f-module-pc10.ivtfxip.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 25 Dec 2025 22:43:25 GMT","end":"Wed, 25 Mar 2026 23:43:19 GMT"},"fingerprint":{"sha1":"BD:75:C7:0C:CF:4C:8B:C6:F0:02:2E:9D:B3:1B:50:54:C3:72:BE:D9","sha256":"19:4F:8E:B1:B5:41:99:3C:AC:F4:8B:36:B6:A9:44:7E:9A:11:1B:8C:E9:7F:5B:40:32:92:FF:44:8F:66:46:C3"}}},"request":{"raw":"GET /f-module-pc10-4/assets/js/element-ui.js HTTP/1.1\r\nHost: f-module-pc10.ivtfxip.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://f-module-pc10.ivtfxip.com/f-module-pc10-4/?moduleName=f-module-pc10-4\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 04 Jan 2026 14:57:04 GMT\r\npriority: u=2,i=?0\r\ncontent-type: application/javascript\r\ncf-cache-status: MISS\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=my0%2BlYSvie3zJyPXvN%2Bg2Oz2eMDl8TQHIKXReriahkrzsHpTPis0n%2F3S6XzCIzMM7yIm%2Bjq8FoaJQHVaKCCrsFyBs1TnBUnB1D2w3OZaI6xH8bc7f2P%2B\"}]}\r\netag: W/\"d7dad5eb31c2ff0c23cd1c94667f1e2c\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9b8b961279b40731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":664912,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65336), with no line terminators","md5":"871ab253bcff550f462f866dbdef7465","sha1":"616b57088730b5322c12649d31d620afd3abc8e6","sha256":"89d3c55e8fa03f177b1cc3824aede7c94b2ce4143f6a30f54ebb96e20eb42bc2","sha512":"45d91bcef6b33e603fef096e9e21efeaa30cab43423d8b5a98911f98da8d9b2e9a7654a9f479444a9bbd8dc4ca4968d5e7a64abee42fa88023c676d75856131d","ssdeep":"6144:BSqtkdlBC7d1xSBiwzlPQa/R6rvnGehHjcFFFw9/8CslIvi/x1:Wm7d1xSBnzlPQa/ofxhHwHFt/x1","tlshash":"e9e4098d72c1b53147a36071103f250bb33b2a9ca809809cb679d5ea6dbda0d526ff7d","first_seen":"2023-09-27T20:28:23Z","last_seen":"2026-06-08T02:28:42.770668Z","times_seen":2934,"resource_available":true,"data":null}},"time_used":336,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":290,"receive":46,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"f-module-pc10.ivtfxip.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"f-module-pc10.ivtfxip.com/f-module-pc10-6/assets/style/style.min.css","fqdn":"f-module-pc10.ivtfxip.com","domain":"ivtfxip.com","tld":"com"},"ip":{"addr":"104.21.78.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://f-module-pc10.ivtfxip.com/f-module-pc10-6/?moduleName=f-module-pc10-6","date":"2026-01-04T14:57:04.491Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"f-module-pc10.ivtfxip.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 25 Dec 2025 22:43:25 GMT","end":"Wed, 25 Mar 2026 23:43:19 GMT"},"fingerprint":{"sha1":"BD:75:C7:0C:CF:4C:8B:C6:F0:02:2E:9D:B3:1B:50:54:C3:72:BE:D9","sha256":"19:4F:8E:B1:B5:41:99:3C:AC:F4:8B:36:B6:A9:44:7E:9A:11:1B:8C:E9:7F:5B:40:32:92:FF:44:8F:66:46:C3"}}},"request":{"raw":"GET /f-module-pc10-6/assets/style/style.min.css HTTP/1.1\r\nHost: f-module-pc10.ivtfxip.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://f-module-pc10.ivtfxip.com/f-module-pc10-6/?moduleName=f-module-pc10-6\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 04 Jan 2026 14:57:04 GMT\r\npriority: u=2,i=?0\r\ncontent-type: text/css; charset=utf-8\r\ncf-cache-status: MISS\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9AvyWX43nJecOOO6luEF4fPLd1A45du9HCDbqvtdbTWzviHcWjGBZ0Kxpk%2FIg0VYNK2WwIgFq7vPL%2FfGEcV%2FPlV4tiOK3jTYHlAVOjqobEOWpr8f1zxd\"}]}\r\netag: W/\"d70d91b27340b1ecaeccdb92a31ba043\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9b8b9612e9d30731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2456,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (2455)","md5":"34f90264b41bd3b00efbd6e117d91578","sha1":"089c4cd28856ca3453f03feec5f52ae0d8255405","sha256":"b21f0a8b815b7fdd348be71f1767242cd6c57464c807ca9aac763d17b8f8b98e","sha512":"b5d9db7e198998ec946c2202352d401be13c16476f99909371f87c0795b6fb783ca8f4be687b5755c0c910dc8e050036046657db02f3c1b679f805df06dc6de7","ssdeep":"","tlshash":"7451022129b35c1d63efc41739e0764969cec093c256aaec5c76396ed5c63e309e234e","first_seen":"2026-01-04T14:57:54.916554Z","last_seen":"2026-01-04T14:57:54.916554Z","times_seen":1,"resource_available":false,"data":null}},"time_used":61,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":61,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"f-module-pc10.ivtfxip.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"f-module-pc10.ivtfxip.com/f-module-pc10-4/assets/images/1.mp4","fqdn":"f-module-pc10.ivtfxip.com","domain":"ivtfxip.com","tld":"com"},"ip":{"addr":"104.21.78.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://f-module-pc10.ivtfxip.com/f-module-pc10-4/?moduleName=f-module-pc10-4","date":"2026-01-04T14:57:05.763Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"f-module-pc10.ivtfxip.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 25 Dec 2025 22:43:25 GMT","end":"Wed, 25 Mar 2026 23:43:19 GMT"},"fingerprint":{"sha1":"BD:75:C7:0C:CF:4C:8B:C6:F0:02:2E:9D:B3:1B:50:54:C3:72:BE:D9","sha256":"19:4F:8E:B1:B5:41:99:3C:AC:F4:8B:36:B6:A9:44:7E:9A:11:1B:8C:E9:7F:5B:40:32:92:FF:44:8F:66:46:C3"}}},"request":{"raw":"GET /f-module-pc10-4/assets/images/1.mp4 HTTP/1.1\r\nHost: f-module-pc10.ivtfxip.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nReferer: https://f-module-pc10.ivtfxip.com/f-module-pc10-4/?moduleName=f-module-pc10-4\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 206 Partial Content\r\ncontent-length: 469628\r\npriority: u=4,i=?0\r\ncontent-type: video/mp4\r\ncf-cache-status: MISS\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"a8a6e13edc1ef5df7bccea8404a6b389\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1is5WesnONw3r3P63LOVBE1t5X5EPv%2Bj%2Fr99XR7R828a2%2B1tnoUmileJlkrzHKINKuJLnnM7e%2FxI3LE%2BUoS6jD9BHLvIaBRXbwvsCBMWVBkrJ5MeGxHZ\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncontent-range: bytes 0-469627/469628\r\ndate: Sun, 04 Jan 2026 14:57:05 GMT\r\ncf-ray: 9b8b961afb320731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":469628,"size_decoded":0,"mime_type":"video/mp4","magic":"ISO Media, MP4 Base Media v1 [ISO 14496-12:2003]","md5":"d6bac202eacf19cf588ea0c73ad3dc91","sha1":"dfb354b3bcde95beb7a3da4a488b4265cbe0aeec","sha256":"ca335bdc720a7a44d92b03a5bcf32de8faa576f0230adb941ba666b9729b350b","sha512":"5e59a53874d9a1ab4a8fad3b1c3ef4f6fb4a2d1a45bc43709d1afe565feea8545ac08ab35fcdc2951c2e844ec2ae3e61c463200a774290ac5ebccce032c2189d","ssdeep":"12288:yZRwaYRJuPjdjTv1GpOjx0bsKDZQ8YHjYaURPlJdNFHkt:yZvLdjRiON8QXC5Mt","tlshash":"03a423541b3548dac08e563f9c7bd36a3342e7814e93451bab80be9df9b26d7ed32012","first_seen":"2025-05-06T14:56:29.649256Z","last_seen":"2026-05-10T22:50:28.07139Z","times_seen":14,"resource_available":false,"data":null}},"time_used":253,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":205,"receive":48,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"f-module-pc10.ivtfxip.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.ivtfxip.com/api/app/basis/article/byType","fqdn":"api.ivtfxip.com","domain":"ivtfxip.com","tld":"com"},"ip":{"addr":"104.21.78.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ivtfxip.com/pc/","date":"2026-01-04T14:57:03.296Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.ivtfxip.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 25 Dec 2025 22:40:43 GMT","end":"Wed, 25 Mar 2026 23:40:41 GMT"},"fingerprint":{"sha1":"D1:71:A2:C4:12:9D:CD:50:E5:B5:2D:A0:DB:0A:A0:3E:34:E8:FC:96","sha256":"F4:93:8B:FD:69:F9:AF:4F:CA:47:BC:51:06:9A:1E:76:FD:94:50:77:F6:22:8E:6E:51:5C:40:DA:2A:C7:4B:B6"}}},"request":{"raw":"POST /api/app/basis/article/byType HTTP/1.1\r\nHost: api.ivtfxip.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ivtfxip.com/\r\nContent-Type: application/json;charset=UTF-8\r\naws-check: true\r\nX-Requested-With: XMLHttpRequest\r\napp_language: English\r\napp_version: P2.9.3\r\napp_client_timezone: +8\r\nrequest_domain: https://ivtfxip.com/pc/#/\r\napp_analog: false\r\napp_model: f\r\napp_auth_by_token: \r\ntheme-mode: 2\r\nContent-Length: 11\r\nOrigin: https://ivtfxip.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":11,"data":"{\"type\":63}"}},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 04 Jan 2026 14:57:03 GMT\r\ncontent-type: application/json\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MeDV94hQcEVnqZ3T9%2F2qW21UeNx3nQ8sZI3Sewr3PNZu3coBAC%2FTnRzWvN40ttblnL3TX5IZiHp5z2EiFUi8xBjWpp3gjf5f3%2Bu%2FWJI%3D\"}]}\r\nvary: accept-encoding\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: https://ivtfxip.com\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 86400\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncf-ray: 9b8b960b69c956c3-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":59,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"9c2f820634d4f7804bff9473e1075d96","sha1":"797e965053c4474e3d577561ccc5cfc7db3e85e3","sha256":"7929171477295ed05b0ddd10eace22051c46cecffdc3a9780c1d763302984108","sha512":"b6950b8a0f3fd45982168ca8ea9644960eb1b7a447f042a6257bdef2b265bfa0688eb7ec8581f614756a778264a02aa3ed327de7a9b465f48ef809c706320a5e","ssdeep":"","tlshash":"60a002c018ec00b14f808384101f192148bda4d519290100576cd82652f40713614726","first_seen":"2025-04-07T10:36:29.519274Z","last_seen":"2026-06-10T03:07:08.799026Z","times_seen":1173,"resource_available":false,"data":null}},"time_used":404,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":404,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"api.ivtfxip.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"f-module-pc10.ivtfxip.com/f-module-pc10-5/?moduleName=f-module-pc10-5","fqdn":"f-module-pc10.ivtfxip.com","domain":"ivtfxip.com","tld":"com"},"ip":{"addr":"104.21.78.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://ivtfxip.com/pc/","date":"2026-01-04T14:57:03.902Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"f-module-pc10.ivtfxip.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 25 Dec 2025 22:43:25 GMT","end":"Wed, 25 Mar 2026 23:43:19 GMT"},"fingerprint":{"sha1":"BD:75:C7:0C:CF:4C:8B:C6:F0:02:2E:9D:B3:1B:50:54:C3:72:BE:D9","sha256":"19:4F:8E:B1:B5:41:99:3C:AC:F4:8B:36:B6:A9:44:7E:9A:11:1B:8C:E9:7F:5B:40:32:92:FF:44:8F:66:46:C3"}}},"request":{"raw":"GET /f-module-pc10-5/?moduleName=f-module-pc10-5 HTTP/1.1\r\nHost: f-module-pc10.ivtfxip.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ivtfxip.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 04 Jan 2026 14:57:04 GMT\r\ncontent-type: text/html; charset=utf-8\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9%2F5MHH4EQjfg2pGeudoyHy1wJz2JfVwovnsydhC%2FszYvf9y7GEFT1MfTy7zrfSH5RdCuS2AySi%2F8JmqLVgNXJk9DRhhz8EWJ50qJciC6eyTjDa5wHGma\"}]}\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\ncontent-encoding: br\r\ncf-ray: 9b8b960fdb025688-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4931,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"d509d8cb4599e99b58dcc8530bc19be4","sha1":"82f5f8125c355a8eedf21ca334349e12b853b433","sha256":"fa70721b5f57708a925044004994d53f94fca13697b5518bc2985c6f1abba5b6","sha512":"ec843572d55e9c72a6e0e2887e92b28bfcf801e2735b0c14c68c670d9f0bc3226700e38751e5d9eab1ee9d4c6912d932bc174758d5b5fdf73763916d77fcd206","ssdeep":"48:x9rou6PaF+yvxuMNotmjuIoJ5QqlBa99od4KYrH6ilhtYVmwfqgI:xSusGvur09oynz6ivkFqgI","tlshash":"98a1f11c65f6002b008361967f9632067ed1a94b9d1fee243ead07e06fc5e9deca3764","first_seen":"2026-01-04T14:57:54.918401Z","last_seen":"2026-01-04T14:57:54.918401Z","times_seen":1,"resource_available":false,"data":null}},"time_used":373,"timings":{"blocked":70,"dns":1,"connect":11,"send":0,"wait":227,"receive":0,"ssl":53},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"f-module-pc10.ivtfxip.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ivtfxip.com/pc/static/js/app~29bcb2fe.8939a57c.js","fqdn":"ivtfxip.com","domain":"ivtfxip.com","tld":"com"},"ip":{"addr":"104.21.78.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ivtfxip.com/pc/","date":"2026-01-04T14:57:00.559Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ivtfxip.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 25 Dec 2025 22:47:06 GMT","end":"Wed, 25 Mar 2026 23:47:02 GMT"},"fingerprint":{"sha1":"A2:E6:E0:E1:3D:71:15:E7:6A:95:1C:EC:53:3E:E4:AC:2E:D2:14:88","sha256":"EA:63:A1:B5:51:F9:8A:2E:D6:72:A0:97:14:88:41:61:B9:B7:97:70:CB:73:D8:93:0E:BF:F1:D0:C9:0A:B5:89"}}},"request":{"raw":"GET /pc/static/js/app~29bcb2fe.8939a57c.js HTTP/1.1\r\nHost: ivtfxip.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ivtfxip.com/pc/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 04 Jan 2026 14:57:00 GMT\r\npriority: u=3,i=?0\r\ncontent-type: application/javascript\r\ncf-cache-status: MISS\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BIiUWz9rLlfRecG2k%2Bfe1pLfN3GTmAOsmZ7hLzxoqPdOKO%2FXVWsOCMOBYgpjXlXvoPwEQTs7yrO%2FW4D5xdJuK6VFiYI60iC%2FCQ%3D%3D\"}]}\r\netag: W/\"af4e0a69dc721cdbad4ed3d6da32ff92\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9b8b95fa5fd035a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":249922,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (38188), with no line terminators","md5":"7dec08004ceee1ba6cb933801ca63941","sha1":"89161708af968cf57dc25908dd77195f70b3c9f6","sha256":"db60f2bf91bd2efbfe9b6e24b06c48acfb5f6dc15da99fc0b9c52f92c67f0638","sha512":"9e3d144afe365729c543297bc4567d47d7522d3c75422702e324921b2fe805d6b1335d2dc19a6afe6d35808e33b10e77d9d0ce54c8cdbedafef2d06eb2076bf2","ssdeep":"6144:Q4qbBxz42xJagCCyGO7vSatJi5GdVrTY1uYo81igRr11:Iz4WJagCbGu9tJMGdVrAuYVZ1","tlshash":"ef4463e34a5a80651ba38edee0c631e8e5766d23db47fc3614b2c11442f7a12d3dea74","first_seen":"2026-01-04T14:57:54.920067Z","last_seen":"2026-01-04T14:57:54.920067Z","times_seen":1,"resource_available":false,"data":null}},"time_used":110,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":108,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"ivtfxip.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.ivtfxip.com/api/app/basis/article/byType","fqdn":"api.ivtfxip.com","domain":"ivtfxip.com","tld":"com"},"ip":{"addr":"104.21.78.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ivtfxip.com/pc/","date":"2026-01-04T14:57:02.880Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.ivtfxip.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 25 Dec 2025 22:40:43 GMT","end":"Wed, 25 Mar 2026 23:40:41 GMT"},"fingerprint":{"sha1":"D1:71:A2:C4:12:9D:CD:50:E5:B5:2D:A0:DB:0A:A0:3E:34:E8:FC:96","sha256":"F4:93:8B:FD:69:F9:AF:4F:CA:47:BC:51:06:9A:1E:76:FD:94:50:77:F6:22:8E:6E:51:5C:40:DA:2A:C7:4B:B6"}}},"request":{"raw":"OPTIONS /api/app/basis/article/byType HTTP/1.1\r\nHost: api.ivtfxip.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: app_analog,app_auth_by_token,app_client_timezone,app_language,app_model,app_version,aws-check,content-type,request_domain,theme-mode,x-requested-with\r\nReferer: https://ivtfxip.com/\r\nOrigin: https://ivtfxip.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 04 Jan 2026 14:57:03 GMT\r\ncontent-length: 0\r\nserver: cloudflare\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RhbfUDjTINOuMSuUK0plpLXIz8hdCD4TDqHZMYLvBV1lXhmbcoeEc%2FjVUMQnH9AB5Gs%2FbgRTkh2d%2FnSCt6iSilbVoEwtYfa5RMKFjehnZA%3D%3D\"}]}\r\naccess-control-allow-origin: https://ivtfxip.com\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: app_analog,app_auth_by_token,app_client_timezone,app_language,app_model,app_version,aws-check,content-type,request_domain,theme-mode,x-requested-with\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 86400\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nallow: GET, HEAD, POST, PUT, DELETE, TRACE, OPTIONS, PATCH\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b8b9608fa27b1b8-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-13T16:33:36.180633Z","times_seen":16390792,"resource_available":true,"data":null}},"time_used":206,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":206,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"api.ivtfxip.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.ivtfxip.com/api/app/basis/article/byType","fqdn":"api.ivtfxip.com","domain":"ivtfxip.com","tld":"com"},"ip":{"addr":"104.21.78.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ivtfxip.com/pc/","date":"2026-01-04T14:57:02.881Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.ivtfxip.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 25 Dec 2025 22:40:43 GMT","end":"Wed, 25 Mar 2026 23:40:41 GMT"},"fingerprint":{"sha1":"D1:71:A2:C4:12:9D:CD:50:E5:B5:2D:A0:DB:0A:A0:3E:34:E8:FC:96","sha256":"F4:93:8B:FD:69:F9:AF:4F:CA:47:BC:51:06:9A:1E:76:FD:94:50:77:F6:22:8E:6E:51:5C:40:DA:2A:C7:4B:B6"}}},"request":{"raw":"OPTIONS /api/app/basis/article/byType HTTP/1.1\r\nHost: api.ivtfxip.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: app_analog,app_auth_by_token,app_client_timezone,app_language,app_model,app_version,aws-check,content-type,request_domain,theme-mode,x-requested-with\r\nReferer: https://ivtfxip.com/\r\nOrigin: https://ivtfxip.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 04 Jan 2026 14:57:03 GMT\r\ncontent-length: 0\r\nserver: cloudflare\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gkGI3JU%2BJdl%2FOHz4Rmt1cDN%2Bge3X1ePHHaSYeqZumdmAFR%2F61meeSLojqkjq1oCj9JdT5efTX8j8QmGW7rLWC1CBrD1X3fd%2BlpE9PQZ0oA%3D%3D\"}]}\r\naccess-control-allow-origin: https://ivtfxip.com\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: app_analog,app_auth_by_token,app_client_timezone,app_language,app_model,app_version,aws-check,content-type,request_domain,theme-mode,x-requested-with\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 86400\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nallow: GET, HEAD, POST, PUT, DELETE, TRACE, OPTIONS, PATCH\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b8b9608fa2db1b8-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-13T16:33:36.180633Z","times_seen":16390792,"resource_available":true,"data":null}},"time_used":221,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":221,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"api.ivtfxip.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ivtfxip.com/pc/static/css/about~aabdebcb.6cc60579.css","fqdn":"ivtfxip.com","domain":"ivtfxip.com","tld":"com"},"ip":{"addr":"104.21.78.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://ivtfxip.com/pc/","date":"2026-01-04T14:57:03.056Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ivtfxip.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 25 Dec 2025 22:47:06 GMT","end":"Wed, 25 Mar 2026 23:47:02 GMT"},"fingerprint":{"sha1":"A2:E6:E0:E1:3D:71:15:E7:6A:95:1C:EC:53:3E:E4:AC:2E:D2:14:88","sha256":"EA:63:A1:B5:51:F9:8A:2E:D6:72:A0:97:14:88:41:61:B9:B7:97:70:CB:73:D8:93:0E:BF:F1:D0:C9:0A:B5:89"}}},"request":{"raw":"GET /pc/static/css/about~aabdebcb.6cc60579.css HTTP/1.1\r\nHost: ivtfxip.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ivtfxip.com/pc/\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 04 Jan 2026 14:57:03 GMT\r\npriority: u=4,i=?0\r\ncontent-type: text/css; charset=utf-8\r\ncf-cache-status: REVALIDATED\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4zS1bscdjJguDnxQDvsgJL7xY01V%2FMlIUYtSIHdxcilUOQFWJZV76Sng3ptXQjtDq9PP1%2BOLF89GIcLKO4qmIb2CLrH8DrHPZw%3D%3D\"}]}\r\netag: W/\"94b446bb54a6b5988f447054bd1d95b5\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9b8b960a0af535a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":187816,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"02e751cd1384b49a3b91202dd50f41dc","sha1":"8ed9b4f58a93b82040e507dc6af62f5074876bc4","sha256":"4255c37ba6db18d8106c0e1ecf9a1614bd525e57517bb1b89a99968e2acedbf5","sha512":"d1578c96b40e321235a4a77a414baf30826d49b863f9eebf57aabbfcc8d141603e24c245a67de045274d975a80849efec38672305168bdfc5d9956a2a9fa7455","ssdeep":"1536:Buc/JYZEYCI1qO/ZYJU2Ny7RAh+Z+23HS+ZhVNXB4zOVR:Buc/JYZHCI1qO/ZYvJgZ+23HDZh/Jf","tlshash":"4604a86ff95d240c913bca962590bfd85a287777e201977da4d76e02cc832133b27ad8","first_seen":"2026-01-04T14:57:54.905206Z","last_seen":"2026-04-13T23:57:13.849265Z","times_seen":3,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"ivtfxip.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"f-module-pc10.ivtfxip.com/f-module-pc10-3/assets/js/element-ui.js","fqdn":"f-module-pc10.ivtfxip.com","domain":"ivtfxip.com","tld":"com"},"ip":{"addr":"104.21.78.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://f-module-pc10.ivtfxip.com/f-module-pc10-3/?moduleName=f-module-pc10-3","date":"2026-01-04T14:57:04.510Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"f-module-pc10.ivtfxip.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 25 Dec 2025 22:43:25 GMT","end":"Wed, 25 Mar 2026 23:43:19 GMT"},"fingerprint":{"sha1":"BD:75:C7:0C:CF:4C:8B:C6:F0:02:2E:9D:B3:1B:50:54:C3:72:BE:D9","sha256":"19:4F:8E:B1:B5:41:99:3C:AC:F4:8B:36:B6:A9:44:7E:9A:11:1B:8C:E9:7F:5B:40:32:92:FF:44:8F:66:46:C3"}}},"request":{"raw":"GET /f-module-pc10-3/assets/js/element-ui.js HTTP/1.1\r\nHost: f-module-pc10.ivtfxip.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://f-module-pc10.ivtfxip.com/f-module-pc10-3/?moduleName=f-module-pc10-3\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 04 Jan 2026 14:57:04 GMT\r\npriority: u=2,i=?0\r\ncontent-type: application/javascript\r\ncf-cache-status: MISS\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EHl8lrvwyjHxNuaTpiZ%2ByWA2CB31eC5wBIFUadh2jZjUeF445ld%2Bf%2Fcpc4G4151OB2IKAHYRxGA585qg60e5coAJCIcslxJMoADzGWXL52XM075SNh8yd%2B4%3D\"}]}\r\netag: W/\"d7dad5eb31c2ff0c23cd1c94667f1e2c\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9b8b961309da0731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":664912,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65336), with no line terminators","md5":"871ab253bcff550f462f866dbdef7465","sha1":"616b57088730b5322c12649d31d620afd3abc8e6","sha256":"89d3c55e8fa03f177b1cc3824aede7c94b2ce4143f6a30f54ebb96e20eb42bc2","sha512":"45d91bcef6b33e603fef096e9e21efeaa30cab43423d8b5a98911f98da8d9b2e9a7654a9f479444a9bbd8dc4ca4968d5e7a64abee42fa88023c676d75856131d","ssdeep":"6144:BSqtkdlBC7d1xSBiwzlPQa/R6rvnGehHjcFFFw9/8CslIvi/x1:Wm7d1xSBnzlPQa/ofxhHwHFt/x1","tlshash":"e9e4098d72c1b53147a36071103f250bb33b2a9ca809809cb679d5ea6dbda0d526ff7d","first_seen":"2023-09-27T20:28:23Z","last_seen":"2026-06-08T02:28:42.770668Z","times_seen":2934,"resource_available":true,"data":null}},"time_used":257,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":213,"receive":44,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"f-module-pc10.ivtfxip.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ivtfxip.com/pc/static/js/app~ab05e1cd.61a49192.js","fqdn":"ivtfxip.com","domain":"ivtfxip.com","tld":"com"},"ip":{"addr":"104.21.78.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ivtfxip.com/pc/","date":"2026-01-04T14:57:00.570Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ivtfxip.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 25 Dec 2025 22:47:06 GMT","end":"Wed, 25 Mar 2026 23:47:02 GMT"},"fingerprint":{"sha1":"A2:E6:E0:E1:3D:71:15:E7:6A:95:1C:EC:53:3E:E4:AC:2E:D2:14:88","sha256":"EA:63:A1:B5:51:F9:8A:2E:D6:72:A0:97:14:88:41:61:B9:B7:97:70:CB:73:D8:93:0E:BF:F1:D0:C9:0A:B5:89"}}},"request":{"raw":"GET /pc/static/js/app~ab05e1cd.61a49192.js HTTP/1.1\r\nHost: ivtfxip.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ivtfxip.com/pc/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 04 Jan 2026 14:57:00 GMT\r\npriority: u=3,i=?0\r\ncontent-type: application/javascript\r\ncf-cache-status: MISS\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6h8PCY%2FZ3HvJxrBN6WDl01i1whIHXs4OpraUzWB4Y5VncjcH1wtyGMB7ZGFW%2BaNawQbAJ4hXhT0axLLiPuGEpJHURx7qVlONrzj5\"}]}\r\netag: W/\"2b2be569b664516831329e0f1e3a020b\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9b8b95fa6fd835a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":691544,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"f7751497ef0638f3ab699e181bdf9e3b","sha1":"a4cbe2248e84d8ce7d0f1de374e0e11fe73ef693","sha256":"17f3c02aca4fc43c9aba6199a561acfa2b82f0735fdf0d72d04d903d0876b50a","sha512":"037f4a8899a7126a0d423a89f5be32bcdcd67c18b559c4e226ce5e55886a72c1564efbd958c3e1bcf8101e506586c06642b6c059b9963ad925961a3dbcafff30","ssdeep":"6144:FsBD93PlRnfagOdhi9fHAevizDZjl/N6r8FJm:KD9oi9fgm+1RtJm","tlshash":"a5e40999b652f5e15793326c002f5007e2b6696594cae410f684cae0e9fb98cd23ff3d","first_seen":"2025-06-28T18:37:46.272079Z","last_seen":"2026-05-20T20:17:42.834071Z","times_seen":47,"resource_available":true,"data":null}},"time_used":284,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":280,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"ivtfxip.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"f-module-pc10.ivtfxip.com/f-module-pc10-1/?moduleName=f-module-pc10-1","fqdn":"f-module-pc10.ivtfxip.com","domain":"ivtfxip.com","tld":"com"},"ip":{"addr":"104.21.78.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://ivtfxip.com/pc/","date":"2026-01-04T14:57:03.896Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"f-module-pc10.ivtfxip.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 25 Dec 2025 22:43:25 GMT","end":"Wed, 25 Mar 2026 23:43:19 GMT"},"fingerprint":{"sha1":"BD:75:C7:0C:CF:4C:8B:C6:F0:02:2E:9D:B3:1B:50:54:C3:72:BE:D9","sha256":"19:4F:8E:B1:B5:41:99:3C:AC:F4:8B:36:B6:A9:44:7E:9A:11:1B:8C:E9:7F:5B:40:32:92:FF:44:8F:66:46:C3"}}},"request":{"raw":"GET /f-module-pc10-1/?moduleName=f-module-pc10-1 HTTP/1.1\r\nHost: f-module-pc10.ivtfxip.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ivtfxip.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 04 Jan 2026 14:57:04 GMT\r\ncontent-type: text/html; charset=utf-8\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kAvxMLWC6NwfPxKTbSXoOCx%2Bz9JJHILLwbjOwqWR%2Fh8vYzlWTs4UTiv7xDp44j8SRH%2FGSfdkJJgeLTom7YFWJMqACwOsLwLTOubUZHSOYBgeY1UtS2fZ\"}]}\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\ncontent-encoding: br\r\ncf-ray: 9b8b960fcafc5688-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6151,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"a6658db157c5874e369e8270a299e76d","sha1":"433a06adc96dcdf502ddd9f1ceca61eebb38a02c","sha256":"3ab2e3fe628fbda8176e7deaf7be2d008adca2d10818dc1c38acf7e2b580063d","sha512":"be1166e51fea38e9ff961b6ec1914031010b79fc6574ded5cbf6eb37e7e92732c5aba47434f96eef51becfdd438bbf5a755fde1d3bc921b970779614671b6f90","ssdeep":"96:xSusGOTN5lXUpMZU9oyyLFIfV6ivkTq4qgC:x4R5lXUpMK9qLFIfV6ivkTq43C","tlshash":"35c1231d61f64426008361897fd6510a3ec1f98b8d1bdf047aac07e15fc9daeeca3b68","first_seen":"2026-01-04T14:57:54.922241Z","last_seen":"2026-01-04T14:57:54.922241Z","times_seen":1,"resource_available":false,"data":null}},"time_used":375,"timings":{"blocked":67,"dns":5,"connect":1,"send":0,"wait":236,"receive":0,"ssl":60},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"f-module-pc10.ivtfxip.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"f-module-pc10.ivtfxip.com/f-module-pc10-2/?moduleName=f-module-pc10-2","fqdn":"f-module-pc10.ivtfxip.com","domain":"ivtfxip.com","tld":"com"},"ip":{"addr":"104.21.78.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://ivtfxip.com/pc/","date":"2026-01-04T14:57:03.897Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"f-module-pc10.ivtfxip.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 25 Dec 2025 22:43:25 GMT","end":"Wed, 25 Mar 2026 23:43:19 GMT"},"fingerprint":{"sha1":"BD:75:C7:0C:CF:4C:8B:C6:F0:02:2E:9D:B3:1B:50:54:C3:72:BE:D9","sha256":"19:4F:8E:B1:B5:41:99:3C:AC:F4:8B:36:B6:A9:44:7E:9A:11:1B:8C:E9:7F:5B:40:32:92:FF:44:8F:66:46:C3"}}},"request":{"raw":"GET /f-module-pc10-2/?moduleName=f-module-pc10-2 HTTP/1.1\r\nHost: f-module-pc10.ivtfxip.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ivtfxip.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 04 Jan 2026 14:57:04 GMT\r\ncontent-type: text/html; charset=utf-8\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=aMcir5LZqd%2FNnmwli3seGXLIWd7wBJwCEjIZK8AWOFq52Lch1YHGDTomwl7eMSXg%2FaEf9BD8UqOzzmLriJyPKwb7cF7y5v%2BRdM1r9YoHpnki8Yce9kAj\"}]}\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\ncontent-encoding: br\r\ncf-ray: 9b8b960fcaff5688-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5740,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"84a6d1dc6fdb4fccc7cb279e846d3077","sha1":"cb6dc95e8d3142fe81bfadef918357068c7aca2c","sha256":"92013822247fd7acbe216a9b3b0f2483b47ede9a50d4b0227b5e1e86bc844f5d","sha512":"627317bc744e4ea065d8e435d1a53ebe253497cf45a83c169dfce6547f13c0aabf3796ec6b4f132077deaef7b2f17f30e4edd89a5f31ddc609e1fd8dd95bcaa4","ssdeep":"48:x9rou6PaF+yvxgU+4f7c3RqYY99od4KYrH6ilhprqURc92KoFWfSqgI:xSusG2KAPu9oyRz6ivoURc8/+SqgI","tlshash":"8cc1334c25f6001b008772597f9f75453a92e54b890aad047ebe46e01fc5e9cacf7b78","first_seen":"2026-01-04T14:57:54.923548Z","last_seen":"2026-01-04T14:57:54.923548Z","times_seen":1,"resource_available":false,"data":null}},"time_used":396,"timings":{"blocked":70,"dns":3,"connect":1,"send":0,"wait":253,"receive":0,"ssl":60},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"f-module-pc10.ivtfxip.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"f-module-pc10.ivtfxip.com/f-module-pc10-3/assets/style/style.min.css","fqdn":"f-module-pc10.ivtfxip.com","domain":"ivtfxip.com","tld":"com"},"ip":{"addr":"104.21.78.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://f-module-pc10.ivtfxip.com/f-module-pc10-3/?moduleName=f-module-pc10-3","date":"2026-01-04T14:57:04.514Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"f-module-pc10.ivtfxip.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 25 Dec 2025 22:43:25 GMT","end":"Wed, 25 Mar 2026 23:43:19 GMT"},"fingerprint":{"sha1":"BD:75:C7:0C:CF:4C:8B:C6:F0:02:2E:9D:B3:1B:50:54:C3:72:BE:D9","sha256":"19:4F:8E:B1:B5:41:99:3C:AC:F4:8B:36:B6:A9:44:7E:9A:11:1B:8C:E9:7F:5B:40:32:92:FF:44:8F:66:46:C3"}}},"request":{"raw":"GET /f-module-pc10-3/assets/style/style.min.css HTTP/1.1\r\nHost: f-module-pc10.ivtfxip.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://f-module-pc10.ivtfxip.com/f-module-pc10-3/?moduleName=f-module-pc10-3\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 04 Jan 2026 14:57:04 GMT\r\npriority: u=2,i=?0\r\ncontent-type: text/css; charset=utf-8\r\ncf-cache-status: MISS\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lh1UIaWw4ITlaCgYUe2UOchSKWb%2FugUkWJmJLJfMvLvhVTY2UuTsC7rcLyaWzQx7gmLitxO1A1uwuji7Nt%2Fn3SZX3RB%2Frph%2F4A7o0N2KltRJc9y540pX\"}]}\r\netag: W/\"31e6244a2490d7106a415e8407582b34\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9b8b961309db0731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":987,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (986)","md5":"20f01ebbe8969f0b5068be3f3d9f4fd5","sha1":"49e2298acf6ffd563952ce0e96410337e1662ac8","sha256":"b7e4c4ef5c71161ddfaffb7b4d3055686d0c186e3b0cf8ae9216a6f3814324e7","sha512":"9890baa34377ffbc67f8bab220106b05b4095edac2a10196c420a3f9f8856748910da508c2d55ae99a39268181855d29ca50bf75befee02113ebc115b0cf1521","ssdeep":"","tlshash":"5f11053256b1141cd79ee8637601698d760cc542c5735ad999537b35d2c35e301a1b4b","first_seen":"2026-01-04T14:57:54.925192Z","last_seen":"2026-01-04T14:57:54.925192Z","times_seen":1,"resource_available":false,"data":null}},"time_used":66,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":66,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"f-module-pc10.ivtfxip.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"f-module-pc10.ivtfxip.com/f-module-pc10-4/assets/images/1.mp4","fqdn":"f-module-pc10.ivtfxip.com","domain":"ivtfxip.com","tld":"com"},"ip":{"addr":"104.21.78.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://f-module-pc10.ivtfxip.com/f-module-pc10-4/?moduleName=f-module-pc10-4","date":"2026-01-04T14:57:05.765Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"f-module-pc10.ivtfxip.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 25 Dec 2025 22:43:25 GMT","end":"Wed, 25 Mar 2026 23:43:19 GMT"},"fingerprint":{"sha1":"BD:75:C7:0C:CF:4C:8B:C6:F0:02:2E:9D:B3:1B:50:54:C3:72:BE:D9","sha256":"19:4F:8E:B1:B5:41:99:3C:AC:F4:8B:36:B6:A9:44:7E:9A:11:1B:8C:E9:7F:5B:40:32:92:FF:44:8F:66:46:C3"}}},"request":{"raw":"GET /f-module-pc10-4/assets/images/1.mp4 HTTP/1.1\r\nHost: f-module-pc10.ivtfxip.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nReferer: https://f-module-pc10.ivtfxip.com/f-module-pc10-4/?moduleName=f-module-pc10-4\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 206 Partial Content\r\ncontent-length: 469628\r\npriority: u=4,i=?0\r\ncontent-type: video/mp4\r\ncf-cache-status: REVALIDATED\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"a8a6e13edc1ef5df7bccea8404a6b389\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1is5WesnONw3r3P63LOVBE1t5X5EPv%2Bj%2Fr99XR7R828a2%2B1tnoUmileJlkrzHKINKuJLnnM7e%2FxI3LE%2BUoS6jD9BHLvIaBRXbwvsCBMWVBkrJ5MeGxHZ\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncontent-range: bytes 0-469627/469628\r\ndate: Sun, 04 Jan 2026 14:57:05 GMT\r\ncf-ray: 9b8b961b0b330731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":469628,"size_decoded":0,"mime_type":"video/mp4","magic":"ISO Media, MP4 Base Media v1 [ISO 14496-12:2003]","md5":"d6bac202eacf19cf588ea0c73ad3dc91","sha1":"dfb354b3bcde95beb7a3da4a488b4265cbe0aeec","sha256":"ca335bdc720a7a44d92b03a5bcf32de8faa576f0230adb941ba666b9729b350b","sha512":"5e59a53874d9a1ab4a8fad3b1c3ef4f6fb4a2d1a45bc43709d1afe565feea8545ac08ab35fcdc2951c2e844ec2ae3e61c463200a774290ac5ebccce032c2189d","ssdeep":"12288:yZRwaYRJuPjdjTv1GpOjx0bsKDZQ8YHjYaURPlJdNFHkt:yZvLdjRiON8QXC5Mt","tlshash":"03a423541b3548dac08e563f9c7bd36a3342e7814e93451bab80be9df9b26d7ed32012","first_seen":"2025-05-06T14:56:29.649256Z","last_seen":"2026-05-10T22:50:28.07139Z","times_seen":14,"resource_available":false,"data":null}},"time_used":283,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":216,"receive":67,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"f-module-pc10.ivtfxip.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.ivtfxip.com/api/app/language/dict","fqdn":"api.ivtfxip.com","domain":"ivtfxip.com","tld":"com"},"ip":{"addr":"104.21.78.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ivtfxip.com/pc/","date":"2026-01-04T14:57:01.982Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.ivtfxip.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 25 Dec 2025 22:40:43 GMT","end":"Wed, 25 Mar 2026 23:40:41 GMT"},"fingerprint":{"sha1":"D1:71:A2:C4:12:9D:CD:50:E5:B5:2D:A0:DB:0A:A0:3E:34:E8:FC:96","sha256":"F4:93:8B:FD:69:F9:AF:4F:CA:47:BC:51:06:9A:1E:76:FD:94:50:77:F6:22:8E:6E:51:5C:40:DA:2A:C7:4B:B6"}}},"request":{"raw":"OPTIONS /api/app/language/dict HTTP/1.1\r\nHost: api.ivtfxip.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: app_analog,app_auth_by_token,app_client_timezone,app_language,app_model,app_version,aws-check,content-type,request_domain,theme-mode,x-requested-with\r\nReferer: https://ivtfxip.com/\r\nOrigin: https://ivtfxip.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 04 Jan 2026 14:57:02 GMT\r\ncontent-length: 0\r\nserver: cloudflare\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BIynt3UyzT7yg%2B8D5cjK4QY6WzphNwTKo7MX6TLurbmP%2FruGuKR1LMAZ7adg5EGFUJq4WMlW0ptOvt%2FH9q7FBjlYqjAI3HznK39yXtPgxA%3D%3D\"}]}\r\naccess-control-allow-origin: https://ivtfxip.com\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: app_analog,app_auth_by_token,app_client_timezone,app_language,app_model,app_version,aws-check,content-type,request_domain,theme-mode,x-requested-with\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 86400\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nallow: GET, HEAD, POST, PUT, DELETE, TRACE, OPTIONS, PATCH\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b8b96039bcbb1b8-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-13T16:33:36.180633Z","times_seen":16390792,"resource_available":true,"data":null}},"time_used":439,"timings":{"blocked":29,"dns":0,"connect":0,"send":0,"wait":410,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"api.ivtfxip.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ivtfxip.com/pc/static/js/about~753d5752.745139f3.js","fqdn":"ivtfxip.com","domain":"ivtfxip.com","tld":"com"},"ip":{"addr":"104.21.78.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ivtfxip.com/pc/","date":"2026-01-04T14:57:02.132Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ivtfxip.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 25 Dec 2025 22:47:06 GMT","end":"Wed, 25 Mar 2026 23:47:02 GMT"},"fingerprint":{"sha1":"A2:E6:E0:E1:3D:71:15:E7:6A:95:1C:EC:53:3E:E4:AC:2E:D2:14:88","sha256":"EA:63:A1:B5:51:F9:8A:2E:D6:72:A0:97:14:88:41:61:B9:B7:97:70:CB:73:D8:93:0E:BF:F1:D0:C9:0A:B5:89"}}},"request":{"raw":"GET /pc/static/js/about~753d5752.745139f3.js HTTP/1.1\r\nHost: ivtfxip.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ivtfxip.com/pc/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 04 Jan 2026 14:57:02 GMT\r\npriority: u=3,i=?0\r\ncontent-type: application/javascript\r\ncf-cache-status: MISS\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VYl8xepypnWoNPKZXtluJvFKhxMp%2FKPDsxNmMhUgbRJbP43EDtMzrJW0bQef2BbPu7IlVKo8hu0fkjA4dn65IlvUZ1cgYInVRw%3D%3D\"}]}\r\netag: W/\"d2afd030b8768c70f57ab717829e40bd\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9b8b960449ee35a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":60515,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (60497), with no line terminators","md5":"5a27983c7a7e5978b5a29af7eef5f881","sha1":"60724b7e9e677ff322e230156a58e9fb490d140d","sha256":"47c344f8325d30f830e39659003febb6bf4aec951a40b1f84fad9b3990d0edf9","sha512":"3d48cadf9aec8eb231989a3e294cd28cd9bd7a5111461d103b583e2da07389dad410de8510b19af0fc96addb96435084a34a9e8ed2c0b5381982861a33c05dcb","ssdeep":"768:EnDsx1vg+qhAvkPj56i2Ve2f0VgeWBlEo8ajW6K:P1YLZAf0Vux8ae","tlshash":"90430065a097c0baed3e9092535d2a34e1253fe0d421d45afbb88de186c9cb4633d7bc","first_seen":"2026-01-04T14:57:54.926459Z","last_seen":"2026-04-13T23:57:13.888514Z","times_seen":3,"resource_available":true,"data":null}},"time_used":83,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":82,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"ivtfxip.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.ivtfxip.com/upload/logo.png","fqdn":"api.ivtfxip.com","domain":"ivtfxip.com","tld":"com"},"ip":{"addr":"104.21.78.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ivtfxip.com/pc/","date":"2026-01-04T14:57:03.983Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.ivtfxip.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 25 Dec 2025 22:40:43 GMT","end":"Wed, 25 Mar 2026 23:40:41 GMT"},"fingerprint":{"sha1":"D1:71:A2:C4:12:9D:CD:50:E5:B5:2D:A0:DB:0A:A0:3E:34:E8:FC:96","sha256":"F4:93:8B:FD:69:F9:AF:4F:CA:47:BC:51:06:9A:1E:76:FD:94:50:77:F6:22:8E:6E:51:5C:40:DA:2A:C7:4B:B6"}}},"request":{"raw":"GET /upload/logo.png HTTP/1.1\r\nHost: api.ivtfxip.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ivtfxip.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 04 Jan 2026 14:57:04 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Zsq%2FGjN926wmG3%2BoFYOqlZV%2FxrxlskRb0tS%2BSDsU1Nvgq4ADCKq1cRMYsIbq3RXsHHOgxTX0eWiK%2BiOEP0%2B7j8LWGd69MPVRqyurP%2Fs%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-length: 225424\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: *\r\naccess-control-allow-origin: *\r\naccess-control-max-age: 86400\r\nserver: cloudflare\r\npriority: u=6,i=?0\r\nlast-modified: Wed, 24 Dec 2025 05:19:00 GMT\r\nvary: Origin, accept-encoding\r\ncf-cache-status: MISS\r\nexpires: Sun, 04 Jan 2026 18:57:04 GMT\r\ncache-control: public, max-age=14400\r\naccept-ranges: bytes\r\ncf-ray: 9b8b960fed7656b7-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":225424,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1024 x 1024, 8-bit/color RGB, non-interlaced","md5":"102aaaec15c83b299b1935ae88ba57c6","sha1":"4f4d431b3e2241db131d1d9eb4e2c3650813d24f","sha256":"fe9daf23e3b6498afec9edf7f7dac7f86fff9674ddc20c3f61ab8e33f13ff8ee","sha512":"fc95ca6f1a93920447cf2cf95112f675cdd880a7ef7bdb56fe4fd5f810bcdb6f20f939efd4ee02836ded9a5ec77396a2d370b4cb82f048602b720181845d399b","ssdeep":"6144:AOSfwceS/3fsWHE/dGXU6ZBaEmXvNe68S:FJS/3lE/FCBmXES","tlshash":"502423f4519847ce773669f10b2452628e886db0fdb996687d7f2a0c0cc198fadeb844","first_seen":"2026-01-04T14:57:54.927925Z","last_seen":"2026-01-04T14:57:54.927925Z","times_seen":1,"resource_available":false,"data":null}},"time_used":113,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":70,"receive":43,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"api.ivtfxip.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"f-module-pc10.ivtfxip.com/f-module-pc10-2/assets/js/vue-i18n.js","fqdn":"f-module-pc10.ivtfxip.com","domain":"ivtfxip.com","tld":"com"},"ip":{"addr":"104.21.78.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://f-module-pc10.ivtfxip.com/f-module-pc10-2/?moduleName=f-module-pc10-2","date":"2026-01-04T14:57:04.553Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"f-module-pc10.ivtfxip.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 25 Dec 2025 22:43:25 GMT","end":"Wed, 25 Mar 2026 23:43:19 GMT"},"fingerprint":{"sha1":"BD:75:C7:0C:CF:4C:8B:C6:F0:02:2E:9D:B3:1B:50:54:C3:72:BE:D9","sha256":"19:4F:8E:B1:B5:41:99:3C:AC:F4:8B:36:B6:A9:44:7E:9A:11:1B:8C:E9:7F:5B:40:32:92:FF:44:8F:66:46:C3"}}},"request":{"raw":"GET /f-module-pc10-2/assets/js/vue-i18n.js HTTP/1.1\r\nHost: f-module-pc10.ivtfxip.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://f-module-pc10.ivtfxip.com/f-module-pc10-2/?moduleName=f-module-pc10-2\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 04 Jan 2026 14:57:04 GMT\r\npriority: u=2,i=?0\r\ncontent-type: application/javascript\r\ncf-cache-status: MISS\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=obCe0DrKqdGRHKw9IJXK0qNPeJ17%2F0fddPMTX6s%2Fd44GZb5eSyJUecfXVV9VmkPlIVaTDIr3pGqjoucy2ThXPzpm%2BYPYhxeijlbeaAWoKuUKlgFmdNA0Oqg%3D\"}]}\r\netag: W/\"3700d27749ed41faa6359246f6035193\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9b8b961329e20731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":51091,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (486)","md5":"de3dcd16bbced832586e79816170a34d","sha1":"fe6df311601c6c133eef5189d66408022d7b39d1","sha256":"0519be799e6c779f84b167be27a7fda41add0d748e7a89f72cba3e8dcb1abd0d","sha512":"a84c28308be595e34184e6c990025cfdb213132344ff9b523b877bbd66d754e756979dda74d4c2775ad3c0405824fe8e029a14b9e4d96c6590db531e72d05a79","ssdeep":"1536:VzcGwVRclFaeA02I5K8CMKK2IPbKf4hT3Adai3K3D3QdaS3Kg:DwV5ZK2IPbKf4q","tlshash":"46331e49adf32052591372fe4faf6045b5388027214dce09b89ea3a45f55f2c93fabd8","first_seen":"2025-05-06T14:56:29.60368Z","last_seen":"2026-05-10T22:50:28.04562Z","times_seen":38,"resource_available":true,"data":null}},"time_used":48,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":48,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"f-module-pc10.ivtfxip.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ivtfxip.com/pc/static/js/app~c7fea3f6.68c30a44.js","fqdn":"ivtfxip.com","domain":"ivtfxip.com","tld":"com"},"ip":{"addr":"104.21.78.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ivtfxip.com/pc/","date":"2026-01-04T14:57:00.573Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ivtfxip.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 25 Dec 2025 22:47:06 GMT","end":"Wed, 25 Mar 2026 23:47:02 GMT"},"fingerprint":{"sha1":"A2:E6:E0:E1:3D:71:15:E7:6A:95:1C:EC:53:3E:E4:AC:2E:D2:14:88","sha256":"EA:63:A1:B5:51:F9:8A:2E:D6:72:A0:97:14:88:41:61:B9:B7:97:70:CB:73:D8:93:0E:BF:F1:D0:C9:0A:B5:89"}}},"request":{"raw":"GET /pc/static/js/app~c7fea3f6.68c30a44.js HTTP/1.1\r\nHost: ivtfxip.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ivtfxip.com/pc/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 04 Jan 2026 14:57:00 GMT\r\npriority: u=3,i=?0\r\ncontent-type: application/javascript\r\ncf-cache-status: MISS\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tPHWhTAV%2BTCN0moJ20fezkeDc2xYznYWM4VakrRo83Py0X0rlAx3qw%2FCS8QICWmU8GBmFLMQEdFFfbOP9i6I4dsl2898ohC31kwt\"}]}\r\netag: W/\"0ad568f7e67edc35c07ea742cf7a7074\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9b8b95fa6fda35a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1361079,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"69aa652e877e57edccb572dff720e353","sha1":"96fba7d72c84d2ba1d5d1872fdd00141e83290d5","sha256":"c7534e298cbf1162938c50f25e5faf29610b059d634406e2f1ac686454cb9c21","sha512":"5a443b5808b38a39fe9511a83bac86f9c3b64a84b812a0ed30376744d949f684c76fcfc1ca98dce868c3635c1e535f41d8bc5e2b9d3652b1f4f31f94a2b76a99","ssdeep":"6144:RawQy1ra+PbkdkprxpJBA5vUCNvmsd9r/kiZb1mUwXYC9yOtkRR:ROy1rWkVnolUamsdNMKb1Noyj","tlshash":"f325e8d47291b065c2a25e95402fd00be33dfd647c8c5169bb17ecf72ca4a89913af3a","first_seen":"2025-08-03T23:48:38.151744Z","last_seen":"2026-05-20T20:17:42.891498Z","times_seen":52,"resource_available":false,"data":null}},"time_used":173,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":162,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"ivtfxip.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ivtfxip.com/pc/static/js/npm.echarts~c259bd06.0aa952ac.js","fqdn":"ivtfxip.com","domain":"ivtfxip.com","tld":"com"},"ip":{"addr":"104.21.78.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ivtfxip.com/pc/","date":"2026-01-04T14:57:00.582Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ivtfxip.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 25 Dec 2025 22:47:06 GMT","end":"Wed, 25 Mar 2026 23:47:02 GMT"},"fingerprint":{"sha1":"A2:E6:E0:E1:3D:71:15:E7:6A:95:1C:EC:53:3E:E4:AC:2E:D2:14:88","sha256":"EA:63:A1:B5:51:F9:8A:2E:D6:72:A0:97:14:88:41:61:B9:B7:97:70:CB:73:D8:93:0E:BF:F1:D0:C9:0A:B5:89"}}},"request":{"raw":"GET /pc/static/js/npm.echarts~c259bd06.0aa952ac.js HTTP/1.1\r\nHost: ivtfxip.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ivtfxip.com/pc/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 04 Jan 2026 14:57:00 GMT\r\npriority: u=3,i=?0\r\ncontent-type: application/javascript\r\ncf-cache-status: MISS\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=P5FXlgvPfltXm7MaIqRSE%2B5K3lWqu2KWk%2FKImTN6MVqEBSE5CUsXhB3Eikh4aQrZDYqyR0hvqNWZgKc3wltqnwp81SfS7ku0LURe\"}]}\r\netag: W/\"a43d6ac0dd9e0ceae28735dfb1309e1a\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9b8b95fa7fe635a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":34745,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (34125), with no line terminators","md5":"4557a713739a29c8d096d0a1dd1c4c77","sha1":"d38b31a1b08defb1fcbfdd1a2677ece2a3e15b7a","sha256":"46fb92618c2e2bc52ff800f457344b8b0666c1167fd39021d195862e651eddca","sha512":"a62604a59c2e592ccb6c2f5a72a61b687eb3a2826a5e73ec482126a0319647a9c4cff8b074c574b4daf65b3da50c271e1a4905667b7a92cd573a8cdf22f15460","ssdeep":"384:xYbJ2lH1K9UGJ+xVOxxD48lrQiPo3ewdB7pF21ASiIZ50V3MlcgqQ2/yr:xYV2lH1KrJ+xoHD9kiPo3emFFIeHga6r","tlshash":"7bf22aa87588f0a5ca5323a698df100b83316a423d0fdd10adadd5c5b4bd45b736ff2a","first_seen":"2025-04-19T14:49:36.318833Z","last_seen":"2026-05-20T20:17:42.871116Z","times_seen":64,"resource_available":true,"data":null}},"time_used":53,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":52,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"ivtfxip.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ivtfxip.com/favicon.ico","fqdn":"ivtfxip.com","domain":"ivtfxip.com","tld":"com"},"ip":{"addr":"104.21.78.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ivtfxip.com/pc/","date":"2026-01-04T14:57:01.455Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ivtfxip.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 25 Dec 2025 22:47:06 GMT","end":"Wed, 25 Mar 2026 23:47:02 GMT"},"fingerprint":{"sha1":"A2:E6:E0:E1:3D:71:15:E7:6A:95:1C:EC:53:3E:E4:AC:2E:D2:14:88","sha256":"EA:63:A1:B5:51:F9:8A:2E:D6:72:A0:97:14:88:41:61:B9:B7:97:70:CB:73:D8:93:0E:BF:F1:D0:C9:0A:B5:89"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: ivtfxip.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ivtfxip.com/pc/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ncontent-encoding: br\r\ncontent-type: text/html; charset=utf-8\r\ndate: Sun, 04 Jan 2026 14:57:01 GMT\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BWPDimxCE9ibTHy4LPF9l%2B0%2BGnotq%2B%2FFETxY5jsE8GcRlssTQac9bOV%2BMUb74WxOYMdjnkrnKyaTlu8InR0ma6JIk7xgv7gfMQ%3D%3D\"}]}\r\ncf-cache-status: MISS\r\npriority: u=6,i=?0\r\ncf-ray: 9b8b960018c535a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5300,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with CRLF line terminators","md5":"136411721564e3b8ca91d79e7c28d9dd","sha1":"6afd5a3ad08b41b5ab0402e5ef2ff241a19a3db6","sha256":"6ba29b8fdc1cc09479f5e001f2a7f4fe3af06be63d21a127c5fb1b7dbd7344c5","sha512":"db88f795dfa11bf0c379495e67fcf1869a0f45ccec8289a85072a4c4a850c6b2a3e3e896e7f67aff38a00f10ff450cb4dd2102c120445e81baaea66aecdcead8","ssdeep":"96:LSusFo7g3zqU0FJ6X8Zd47QOte2w33qMMEp:LKR+FJ6X8Z1Ote2w33qM/","tlshash":"78b1cdce419112091af2bb319e47b508e17b15ab1508d0077e5c9b226fb8a0f85b7efe","first_seen":"2025-10-07T13:51:05.861653Z","last_seen":"2026-05-01T07:36:15.777169Z","times_seen":11,"resource_available":true,"data":null}},"time_used":63,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":62,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"ivtfxip.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.ivtfxip.com/api/app/basis/article/byType","fqdn":"api.ivtfxip.com","domain":"ivtfxip.com","tld":"com"},"ip":{"addr":"104.21.78.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ivtfxip.com/pc/","date":"2026-01-04T14:57:03.293Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.ivtfxip.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 25 Dec 2025 22:40:43 GMT","end":"Wed, 25 Mar 2026 23:40:41 GMT"},"fingerprint":{"sha1":"D1:71:A2:C4:12:9D:CD:50:E5:B5:2D:A0:DB:0A:A0:3E:34:E8:FC:96","sha256":"F4:93:8B:FD:69:F9:AF:4F:CA:47:BC:51:06:9A:1E:76:FD:94:50:77:F6:22:8E:6E:51:5C:40:DA:2A:C7:4B:B6"}}},"request":{"raw":"POST /api/app/basis/article/byType HTTP/1.1\r\nHost: api.ivtfxip.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ivtfxip.com/\r\nContent-Type: application/json;charset=UTF-8\r\naws-check: true\r\nX-Requested-With: XMLHttpRequest\r\napp_language: English\r\napp_version: P2.9.3\r\napp_client_timezone: +8\r\nrequest_domain: https://ivtfxip.com/pc/#/\r\napp_analog: false\r\napp_model: f\r\napp_auth_by_token: \r\ntheme-mode: 2\r\nContent-Length: 11\r\nOrigin: https://ivtfxip.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":11,"data":"{\"type\":54}"}},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 04 Jan 2026 14:57:03 GMT\r\ncontent-type: application/json\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jO%2B%2BDFqn%2F0QG0PsmNkftZbrO2lT4ORVWpW28cBChALWib7xkBm1O80wbAMC5OcbACiWeX4jll6lup0alUqKbos5bi%2FPcs4SCIQ20bFw%3D\"}]}\r\nvary: accept-encoding\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: https://ivtfxip.com\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 86400\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncf-ray: 9b8b960b59c856c3-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":59,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"9c2f820634d4f7804bff9473e1075d96","sha1":"797e965053c4474e3d577561ccc5cfc7db3e85e3","sha256":"7929171477295ed05b0ddd10eace22051c46cecffdc3a9780c1d763302984108","sha512":"b6950b8a0f3fd45982168ca8ea9644960eb1b7a447f042a6257bdef2b265bfa0688eb7ec8581f614756a778264a02aa3ed327de7a9b465f48ef809c706320a5e","ssdeep":"","tlshash":"60a002c018ec00b14f808384101f192148bda4d519290100576cd82652f40713614726","first_seen":"2025-04-07T10:36:29.519274Z","last_seen":"2026-06-10T03:07:08.799026Z","times_seen":1173,"resource_available":false,"data":null}},"time_used":443,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":443,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"api.ivtfxip.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"f-module-pc10.ivtfxip.com/f-module-pc10-4/assets/images/2.png","fqdn":"f-module-pc10.ivtfxip.com","domain":"ivtfxip.com","tld":"com"},"ip":{"addr":"104.21.78.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://f-module-pc10.ivtfxip.com/f-module-pc10-4/?moduleName=f-module-pc10-4","date":"2026-01-04T14:57:04.420Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"f-module-pc10.ivtfxip.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 25 Dec 2025 22:43:25 GMT","end":"Wed, 25 Mar 2026 23:43:19 GMT"},"fingerprint":{"sha1":"BD:75:C7:0C:CF:4C:8B:C6:F0:02:2E:9D:B3:1B:50:54:C3:72:BE:D9","sha256":"19:4F:8E:B1:B5:41:99:3C:AC:F4:8B:36:B6:A9:44:7E:9A:11:1B:8C:E9:7F:5B:40:32:92:FF:44:8F:66:46:C3"}}},"request":{"raw":"GET /f-module-pc10-4/assets/images/2.png HTTP/1.1\r\nHost: f-module-pc10.ivtfxip.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://f-module-pc10.ivtfxip.com/f-module-pc10-4/?moduleName=f-module-pc10-4\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 55229\r\npriority: u=4,i=?0\r\ncontent-type: image/png\r\ncf-cache-status: MISS\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"66b689215697d02837a63b0efbf5e168\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=e9OkT9TPw1IhTMUrjF1u6CNZ%2BdlXFOvl8QLPAKYLaeAk9wOsZAY6K7Oq9khhcIOoYkFoxlsUyYK9ZEzKdkjw%2BcKgAMKeB0MfZqMqvyQ1XAdbkKYrfyCg\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\naccept-ranges: bytes\r\ndate: Sun, 04 Jan 2026 14:57:04 GMT\r\ncf-ray: 9b8b961289bc0731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":55229,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 227 x 236, 8-bit/color RGBA, non-interlaced","md5":"a2e0bc8ad477c03c35584d52a6af7e6b","sha1":"cd95d97f69045d6a487ec1e0a10ba156c787e296","sha256":"33e4d916aae044a20ec94c9cabaeb3eacef1c6e66ab282b137475335e00d7fd6","sha512":"ca97f3f2f0e47b768960a2b90e97975ca20713d568c5388ff6f9c9a086fdceac672af51d37361218ac5dca9e5918d6ada2b6cf1ddcc9735dca11bb6b87d463d9","ssdeep":"768:WSOdu5s9Uv+7XgwWblan1iJHPrfgLVNA7sizJmEIhWqH2zi2rUae8JZpYL5kzLOC:23g+7XghB/yIvIcYyokzLOfNxJvUma","tlshash":"c24302212f4190f8f857083893a36991e1193b3dcb8ac996f6a25dd7049fa5344a2dd7","first_seen":"2026-01-04T14:57:54.932001Z","last_seen":"2026-01-04T14:57:54.932001Z","times_seen":1,"resource_available":false,"data":null}},"time_used":82,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":75,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"f-module-pc10.ivtfxip.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"f-module-pc10.ivtfxip.com/f-module-pc10-5/assets/js/element-ui.css","fqdn":"f-module-pc10.ivtfxip.com","domain":"ivtfxip.com","tld":"com"},"ip":{"addr":"104.21.78.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://f-module-pc10.ivtfxip.com/f-module-pc10-5/?moduleName=f-module-pc10-5","date":"2026-01-04T14:57:04.597Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"f-module-pc10.ivtfxip.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 25 Dec 2025 22:43:25 GMT","end":"Wed, 25 Mar 2026 23:43:19 GMT"},"fingerprint":{"sha1":"BD:75:C7:0C:CF:4C:8B:C6:F0:02:2E:9D:B3:1B:50:54:C3:72:BE:D9","sha256":"19:4F:8E:B1:B5:41:99:3C:AC:F4:8B:36:B6:A9:44:7E:9A:11:1B:8C:E9:7F:5B:40:32:92:FF:44:8F:66:46:C3"}}},"request":{"raw":"GET /f-module-pc10-5/assets/js/element-ui.css HTTP/1.1\r\nHost: f-module-pc10.ivtfxip.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://f-module-pc10.ivtfxip.com/f-module-pc10-5/?moduleName=f-module-pc10-5\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 04 Jan 2026 14:57:04 GMT\r\npriority: u=2,i=?0\r\ncontent-type: text/css; charset=utf-8\r\ncf-cache-status: MISS\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nQ%2FBWyfK1IdS9SWPbxk6XAYl31wKgFTnZMi11Gn%2BEkkEBT2R6nkZ4438AhKjcc6ETXezM5cuma6Gh1P8kv%2FtukcMYzDoDVn5FsyQluZMOlDqePiM1pP4XDQ%3D\"}]}\r\netag: W/\"632d3d97e401fbba7d150528ffec271f\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9b8b961359f20731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":240033,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"07ced7e527d781115b5a9f3f3f559884","sha1":"371b1a3e8d3453a2451e76320d9d7c0e301331b8","sha256":"dc86d4797565d05e88d63598128328e2ed6f02f7f6d950a36a1c4ca9eb9c8057","sha512":"a19dda2047af06da26cb446e5a9184fbb87ef5db209368305f4636d5bf28bd29442d05b556540359dc41198218092ce706bf1a7b765e18b3c481c2edd068e10e","ssdeep":"1536:c28Y7SrW3YeWXA1u9w4HCe/l4TEg5fqMEeje378OaiZkW1YO8eQM+yFffwbIcfGc:lvHjahfAG1U2VGDt","tlshash":"b234a7219b03216b612bde6cb6c0ba895f18c323d4725bbbfe95740dc7d34891267a4f","first_seen":"2023-08-28T11:31:40Z","last_seen":"2026-06-13T01:56:53.17937Z","times_seen":1444,"resource_available":false,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"f-module-pc10.ivtfxip.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ivtfxip.com/pc/static/js/app~b5906859.14873bd6.js","fqdn":"ivtfxip.com","domain":"ivtfxip.com","tld":"com"},"ip":{"addr":"104.21.78.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ivtfxip.com/pc/","date":"2026-01-04T14:57:00.571Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ivtfxip.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 25 Dec 2025 22:47:06 GMT","end":"Wed, 25 Mar 2026 23:47:02 GMT"},"fingerprint":{"sha1":"A2:E6:E0:E1:3D:71:15:E7:6A:95:1C:EC:53:3E:E4:AC:2E:D2:14:88","sha256":"EA:63:A1:B5:51:F9:8A:2E:D6:72:A0:97:14:88:41:61:B9:B7:97:70:CB:73:D8:93:0E:BF:F1:D0:C9:0A:B5:89"}}},"request":{"raw":"GET /pc/static/js/app~b5906859.14873bd6.js HTTP/1.1\r\nHost: ivtfxip.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ivtfxip.com/pc/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 04 Jan 2026 14:57:00 GMT\r\npriority: u=3,i=?0\r\ncontent-type: application/javascript\r\ncf-cache-status: MISS\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TJpLtf1KZr82tphZ%2FVa0YT%2BKKLl9%2BCtPJZA2AzYRFompAsW315VFgkuAoYxMdp35FAp0VzYtKuq%2FWfM7Qo17fcu4%2F1WNiMUCyQ%3D%3D\"}]}\r\netag: W/\"c85ffe34645251cc05bd977791332ff7\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9b8b95fa6fd935a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":53484,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (53484), with no line terminators","md5":"1380713702d114dbb21aabb8719726e2","sha1":"13c6e7ea926f40dc20a40dbbd0746f5e37b0f815","sha256":"59530f020fb6cc9ca4390085201dbb9aec6086916ed46527cbdcdc5402954c38","sha512":"35f9ade8be7dad3d81f9e77f927ccc0dbdcfda0c301ae94ef01542619cf662e1d1810f54ad914600114878794a1ab6dc98e67245c15d0ead2dc218547c134202","ssdeep":"384:d67s87IwgGLEeLY8hPKnPhAoZICbL6ii6OlRy6Qlafnlg6PfQwo5RczpcHxON6Zb:Xug0DYEynpNZIG4/leWpoyQ8+D","tlshash":"3c33b49e33c5f56117a360a4406f254bb33b29ad141ac4e8f370c8eaad7d449522bfbd","first_seen":"2025-05-16T20:21:57.518866Z","last_seen":"2026-05-20T20:17:42.830602Z","times_seen":47,"resource_available":true,"data":null}},"time_used":70,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":70,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"ivtfxip.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ivtfxip.com/pc/static/js/about~defe45ab.782a6af2.js","fqdn":"ivtfxip.com","domain":"ivtfxip.com","tld":"com"},"ip":{"addr":"104.21.78.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ivtfxip.com/pc/","date":"2026-01-04T14:57:02.127Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ivtfxip.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 25 Dec 2025 22:47:06 GMT","end":"Wed, 25 Mar 2026 23:47:02 GMT"},"fingerprint":{"sha1":"A2:E6:E0:E1:3D:71:15:E7:6A:95:1C:EC:53:3E:E4:AC:2E:D2:14:88","sha256":"EA:63:A1:B5:51:F9:8A:2E:D6:72:A0:97:14:88:41:61:B9:B7:97:70:CB:73:D8:93:0E:BF:F1:D0:C9:0A:B5:89"}}},"request":{"raw":"GET /pc/static/js/about~defe45ab.782a6af2.js HTTP/1.1\r\nHost: ivtfxip.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ivtfxip.com/pc/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 04 Jan 2026 14:57:02 GMT\r\npriority: u=3,i=?0\r\ncontent-type: application/javascript\r\ncf-cache-status: MISS\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=T5gLKfHydCwBLv5tNZ07gTuz4DjGsuNE6jOsCGgRziBYjHsYxvMnpurmVYb3bckOif8YU7%2FjoYrp%2Bvv5ZYGIkhj5v5cQDY41GA%3D%3D\"}]}\r\netag: W/\"316288a6fd73f83494cecb74a7ec9856\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9b8b960439e935a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":217134,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65526), with no line terminators","md5":"aba593460689fb49d99d1d385e0c7f8d","sha1":"05c9848e7867d55003e8c03ce7f9f53629d9227a","sha256":"ccafeed815244ca88e12770bfd58dd3d638e51ba2324068dc500ff7b54e77c53","sha512":"e027391ffe13310afed28afce916d7b106a793e49d1967db01068c831c0a9db9366b084e9e93a6481fe837183be4d8da40c6fe5a1a2677035d6d242a182960bb","ssdeep":"1536:Mlx7OCOd/3sOCQdGZyrtcIll9L67zlsybd9+YVAY6F/74q325+HVAZDihxDO4BlO:MVyrtcIll9oDiYm4XxZFnCTu3B2F+","tlshash":"1524a355a19ba1bede7e4161205e1a34f0753fe4d015c04bf7788c989ac9ca83b0ebbc","first_seen":"2025-10-07T13:51:05.907863Z","last_seen":"2026-05-01T07:36:16.012018Z","times_seen":6,"resource_available":true,"data":null}},"time_used":66,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":66,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"ivtfxip.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ivtfxip.com/pc/static/css/about~753d5752.e40272bc.css","fqdn":"ivtfxip.com","domain":"ivtfxip.com","tld":"com"},"ip":{"addr":"104.21.78.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ivtfxip.com/pc/","date":"2026-01-04T14:57:02.131Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ivtfxip.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 25 Dec 2025 22:47:06 GMT","end":"Wed, 25 Mar 2026 23:47:02 GMT"},"fingerprint":{"sha1":"A2:E6:E0:E1:3D:71:15:E7:6A:95:1C:EC:53:3E:E4:AC:2E:D2:14:88","sha256":"EA:63:A1:B5:51:F9:8A:2E:D6:72:A0:97:14:88:41:61:B9:B7:97:70:CB:73:D8:93:0E:BF:F1:D0:C9:0A:B5:89"}}},"request":{"raw":"GET /pc/static/css/about~753d5752.e40272bc.css HTTP/1.1\r\nHost: ivtfxip.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ivtfxip.com/pc/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 04 Jan 2026 14:57:02 GMT\r\npriority: u=2,i=?0\r\ncontent-type: text/css; charset=utf-8\r\ncf-cache-status: MISS\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=B3JOGewt0aBFqLzyP9WaKFVxuIbAm6gFIWO%2B2B9TpdQqMOXiHOqIdUzT4EFyfCXb68il1mCmZYRQ0v4Lj9CVcUWaz9Ov5a9%2BJw%3D%3D\"}]}\r\netag: W/\"96dbaf2c2f01cca6cac861ff5702f615\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9b8b960449ed35a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":80480,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"c93a16039d298bdd10f6d72530f1cdae","sha1":"140a3df4fdbae7c3caebe4652b766b696bf1e6e4","sha256":"33aed8f0c62a383ce17de147b297c99c7a7b082c5355321565e2bbeb7ee894c5","sha512":"4bbb3a9b281a4749c30d21b574ae8480d8b46bcef103caee8dfe715a737f87107697154f78b1d2ef3971b2564724b4a63ff5ac42246411e68d668f55e28e1e16","ssdeep":"1536:kjb3yg/vdv6JgvGaVKSWxpU3YlukfwitwOKVczq5sYCRHOf:VaASWcYLUlv","tlshash":"3b73dd9d3d8c2d3d913fc52934d52e9b8c10e217c712d16e2a77961acec72832ee59ac","first_seen":"2025-07-17T05:14:10.724313Z","last_seen":"2026-05-20T20:17:42.836102Z","times_seen":31,"resource_available":false,"data":null}},"time_used":72,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":72,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"ivtfxip.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"f-module-pc10.ivtfxip.com/f-module-pc10-4/assets/style/style.min.css","fqdn":"f-module-pc10.ivtfxip.com","domain":"ivtfxip.com","tld":"com"},"ip":{"addr":"104.21.78.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://f-module-pc10.ivtfxip.com/f-module-pc10-4/?moduleName=f-module-pc10-4","date":"2026-01-04T14:57:04.413Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"f-module-pc10.ivtfxip.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 25 Dec 2025 22:43:25 GMT","end":"Wed, 25 Mar 2026 23:43:19 GMT"},"fingerprint":{"sha1":"BD:75:C7:0C:CF:4C:8B:C6:F0:02:2E:9D:B3:1B:50:54:C3:72:BE:D9","sha256":"19:4F:8E:B1:B5:41:99:3C:AC:F4:8B:36:B6:A9:44:7E:9A:11:1B:8C:E9:7F:5B:40:32:92:FF:44:8F:66:46:C3"}}},"request":{"raw":"GET /f-module-pc10-4/assets/style/style.min.css HTTP/1.1\r\nHost: f-module-pc10.ivtfxip.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://f-module-pc10.ivtfxip.com/f-module-pc10-4/?moduleName=f-module-pc10-4\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 04 Jan 2026 14:57:04 GMT\r\npriority: u=2,i=?0\r\ncontent-type: text/css; charset=utf-8\r\ncf-cache-status: MISS\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4H8HIWbprESuk8DAU9si8JIasxvjJ%2BZMQ9GR2dtImrJ%2Fe6UKf10ZjpVC%2FuGOb%2Fg4lb%2B2B912gchW0K7MRVsdTZgalLRe2yB9ni9koULKquBetFyls89zO%2B4%3D\"}]}\r\netag: W/\"262bfddb621a62dd064f84b3daebae13\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9b8b961289b50731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1523,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (1522)","md5":"e897efd2150aa34708871b036f4d1d85","sha1":"a53513aa8e45998aefc5df6d653c4568d4b23182","sha256":"f4682b2854024ea6275ec2ea828eb1ab6dc7d11e5c6cfda261e0dea0c618cd0c","sha512":"2a5f4f01820e53e6b37be639e65f6205b71e132f90a82e75a5c1ec021d0b9e65ef59710785cce0dca1c3807c87dee171a23611872ef2d2d6d3d099c0a1dec50c","ssdeep":"","tlshash":"8631c02226716d1da3efe4473d50774a748ac182c25666dc5d621b6ec5c22e309a278e","first_seen":"2026-01-04T14:57:54.936076Z","last_seen":"2026-01-04T14:57:54.936076Z","times_seen":1,"resource_available":false,"data":null}},"time_used":78,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":78,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"f-module-pc10.ivtfxip.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"f-module-pc10.ivtfxip.com/f-module-pc10-5/assets/images/1.jpg","fqdn":"f-module-pc10.ivtfxip.com","domain":"ivtfxip.com","tld":"com"},"ip":{"addr":"104.21.78.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://f-module-pc10.ivtfxip.com/f-module-pc10-5/?moduleName=f-module-pc10-5","date":"2026-01-04T14:57:04.603Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"f-module-pc10.ivtfxip.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 25 Dec 2025 22:43:25 GMT","end":"Wed, 25 Mar 2026 23:43:19 GMT"},"fingerprint":{"sha1":"BD:75:C7:0C:CF:4C:8B:C6:F0:02:2E:9D:B3:1B:50:54:C3:72:BE:D9","sha256":"19:4F:8E:B1:B5:41:99:3C:AC:F4:8B:36:B6:A9:44:7E:9A:11:1B:8C:E9:7F:5B:40:32:92:FF:44:8F:66:46:C3"}}},"request":{"raw":"GET /f-module-pc10-5/assets/images/1.jpg HTTP/1.1\r\nHost: f-module-pc10.ivtfxip.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://f-module-pc10.ivtfxip.com/f-module-pc10-5/?moduleName=f-module-pc10-5\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 91492\r\npriority: u=4,i=?0\r\ncontent-type: image/jpeg\r\ncf-cache-status: MISS\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"ae8298b35660968ac66671161f6fc933\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IyMgXeCl5PWnimNGUQZBKNHJU0jh3aPp8LTLqZtyRz6YcXlYIqk7TgfHpc5z2jursW1F7pV7lbzMYiUO7X0HZbyBNtnI5Q5uMzx6ygVYTIAxKsHEADSKZkw%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\naccept-ranges: bytes\r\ndate: Sun, 04 Jan 2026 14:57:04 GMT\r\ncf-ray: 9b8b961369f70731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":91492,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=12, height=422, bps=0, PhotometricInterpretation=RGB, orientation=upper-left, width=534], progressive, precision 8, 534x422, components 3","md5":"8dd9079a9d510c27312891f7a479f4f1","sha1":"e0084bfa47539787ffcdabb2a70579b0269ff902","sha256":"c9f03586c8d08f2289b6d29702ed22a827d3f2d1f20f423bfb04485c45f6fa79","sha512":"e158bccc6d5224d08c3379f6134017de95a42999d5dc8e97d062deef2cfecaf8871f66e108acf3eaa4fcece5d1adc800557953e7a1002a81ae5fb16409f983f4","ssdeep":"1536:ppnsQpaOsCN+knAD3d5JmH7e++jRC44EAZKWSxmskxRYqWyv4g:ppsQhsCeD3d5ka9C4QdcmskoqWZg","tlshash":"f093028a96a39d01fdd0d2398546e7a863b15fd02a93e3b1784c796a3b317c31d1ca93","first_seen":"2025-05-06T14:56:29.67892Z","last_seen":"2026-06-09T19:00:14.340044Z","times_seen":15,"resource_available":false,"data":null}},"time_used":69,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":61,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"f-module-pc10.ivtfxip.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ivtfxip.com/pc/static/js/app~5a11b65b.ca4f033f.js","fqdn":"ivtfxip.com","domain":"ivtfxip.com","tld":"com"},"ip":{"addr":"104.21.78.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ivtfxip.com/pc/","date":"2026-01-04T14:57:00.561Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ivtfxip.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 25 Dec 2025 22:47:06 GMT","end":"Wed, 25 Mar 2026 23:47:02 GMT"},"fingerprint":{"sha1":"A2:E6:E0:E1:3D:71:15:E7:6A:95:1C:EC:53:3E:E4:AC:2E:D2:14:88","sha256":"EA:63:A1:B5:51:F9:8A:2E:D6:72:A0:97:14:88:41:61:B9:B7:97:70:CB:73:D8:93:0E:BF:F1:D0:C9:0A:B5:89"}}},"request":{"raw":"GET /pc/static/js/app~5a11b65b.ca4f033f.js HTTP/1.1\r\nHost: ivtfxip.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ivtfxip.com/pc/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 04 Jan 2026 14:57:00 GMT\r\npriority: u=3,i=?0\r\ncontent-type: application/javascript\r\ncf-cache-status: MISS\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cXqToHvte3vJyRsZ6JIo4J8RXF1Lc7fWrdEGMstDgqmKWLAlHm4kzV8gFqZRD0CJkoDmgQBI3QKkdVsUD%2BUxMBo3oOEBwY6W%2BFAR\"}]}\r\netag: W/\"faacfd05258a08264bf6218ebd180965\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9b8b95fa5fd235a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":66861,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65409), with no line terminators","md5":"9c6bdf80dbd4384717406db979359c39","sha1":"f9f97a4fbf38a2510cd144ed32fdb30dc68b483f","sha256":"65315a81d8ceec552f7ae604a5be48b83535e9f52317f74381590ca9d7ddfdbc","sha512":"b3fcb8d4bc39643ef7869cc746dddfb54ab88d8d24786f065d6ca52c369d560d94e7a80ec91dc4c571e59a3f830147a002e95ef411befcaeea424dd47720cc3d","ssdeep":"768:ex2ChPM8sISTdmaAa9OFMTjfwINFbmtBSMjNGqaIKsGngWlHTdpthJht3ILIH:oPcAa9eujfwgdmyupaHLTPthJJH","tlshash":"c66362db1d4c6d5b83354de92867d94268069fb2c8fb47e02497c97a31daeb93240b0e","first_seen":"2026-01-04T14:57:54.937982Z","last_seen":"2026-04-13T23:57:13.900704Z","times_seen":3,"resource_available":true,"data":null}},"time_used":106,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":106,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"ivtfxip.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.ivtfxip.com/api/app/language/dict","fqdn":"api.ivtfxip.com","domain":"ivtfxip.com","tld":"com"},"ip":{"addr":"104.21.78.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ivtfxip.com/pc/","date":"2026-01-04T14:57:02.669Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.ivtfxip.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 25 Dec 2025 22:40:43 GMT","end":"Wed, 25 Mar 2026 23:40:41 GMT"},"fingerprint":{"sha1":"D1:71:A2:C4:12:9D:CD:50:E5:B5:2D:A0:DB:0A:A0:3E:34:E8:FC:96","sha256":"F4:93:8B:FD:69:F9:AF:4F:CA:47:BC:51:06:9A:1E:76:FD:94:50:77:F6:22:8E:6E:51:5C:40:DA:2A:C7:4B:B6"}}},"request":{"raw":"POST /api/app/language/dict HTTP/1.1\r\nHost: api.ivtfxip.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ivtfxip.com/\r\nContent-Type: application/json;charset=UTF-8\r\naws-check: true\r\nX-Requested-With: XMLHttpRequest\r\napp_language: English\r\napp_version: P2.9.3\r\napp_client_timezone: +8\r\nrequest_domain: https://ivtfxip.com/pc/#/\r\napp_analog: false\r\napp_model: f\r\napp_auth_by_token: \r\ntheme-mode: 2\r\nContent-Length: 26\r\nOrigin: https://ivtfxip.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":26,"data":"{\"key\":\"rateOfReturnNoun\"}"}},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 04 Jan 2026 14:57:02 GMT\r\ncontent-type: application/json\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RKmNt%2FZCNe%2FPdG26GVL14WXkr6%2BkoeWgA26%2FqI%2FmnloeLI8A1TaoZUi6468q4cC3FIJWBhnA4lzTXKIZ0uW7oWrNND1UUcjis37El1dRXQ%3D%3D\"}]}\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: https://ivtfxip.com\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 86400\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 9b8b9606cc44b1b8-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":59,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"9c2f820634d4f7804bff9473e1075d96","sha1":"797e965053c4474e3d577561ccc5cfc7db3e85e3","sha256":"7929171477295ed05b0ddd10eace22051c46cecffdc3a9780c1d763302984108","sha512":"b6950b8a0f3fd45982168ca8ea9644960eb1b7a447f042a6257bdef2b265bfa0688eb7ec8581f614756a778264a02aa3ed327de7a9b465f48ef809c706320a5e","ssdeep":"","tlshash":"60a002c018ec00b14f808384101f192148bda4d519290100576cd82652f40713614726","first_seen":"2025-04-07T10:36:29.519274Z","last_seen":"2026-06-10T03:07:08.799026Z","times_seen":1173,"resource_available":false,"data":null}},"time_used":222,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":222,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"api.ivtfxip.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.ivtfxip.com/api/app/indexPage/demoList","fqdn":"api.ivtfxip.com","domain":"ivtfxip.com","tld":"com"},"ip":{"addr":"104.21.78.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ivtfxip.com/pc/","date":"2026-01-04T14:57:03.534Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.ivtfxip.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 25 Dec 2025 22:40:43 GMT","end":"Wed, 25 Mar 2026 23:40:41 GMT"},"fingerprint":{"sha1":"D1:71:A2:C4:12:9D:CD:50:E5:B5:2D:A0:DB:0A:A0:3E:34:E8:FC:96","sha256":"F4:93:8B:FD:69:F9:AF:4F:CA:47:BC:51:06:9A:1E:76:FD:94:50:77:F6:22:8E:6E:51:5C:40:DA:2A:C7:4B:B6"}}},"request":{"raw":"GET /api/app/indexPage/demoList HTTP/1.1\r\nHost: api.ivtfxip.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ivtfxip.com/\r\naws-check: true\r\nX-Requested-With: XMLHttpRequest\r\napp_language: English\r\napp_version: P2.9.3\r\napp_client_timezone: +8\r\nrequest_domain: https://ivtfxip.com/pc/#/\r\napp_analog: false\r\napp_model: f\r\napp_auth_by_token: \r\ntheme-mode: 2\r\nOrigin: https://ivtfxip.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 04 Jan 2026 14:57:04 GMT\r\ncontent-type: application/json\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=72%2BMp%2FfTC9cCSdm%2BSASn1bU%2FdSMUMRoqS6wK9%2BL6he%2BMs2L4nyNHWjXapSjSiUR6rIL1RD5JbKPWjdwC7m3oludnV3bAhvWGwI34upw%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: https://ivtfxip.com\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 86400\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\nvary: accept-encoding\r\nserver: cloudflare\r\ncf-ray: 9b8b960d19de56c3-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":53363,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"d3489af71a0c52572a85159f475b1774","sha1":"3321fcefddb547e87f1d474e45e94e1f3ea184bb","sha256":"a1c852d8189337a38c490ba229ed3447d1902e02eda0c4b13b6f6a032626b792","sha512":"32a84d245767c21371a700f15b5149f961d57d03b01d779871e5b9080d183833d5b5a391325a8893c6db82123a2790e85f9bed347d98cab4d1f670be44024ea2","ssdeep":"192:jdeWehse8SkmEvxFosoG0aaWOc+RcXVOLlRLz8O+UR+XTO12yR1lBKOwaRw3pOv2:ZeWegosoGfOz9yh0GG+C90F","tlshash":"2833d55b2fb46a4bc20eb1fff048fd551ee93cf34a465d61988cadf944a2c3229e8415","first_seen":"2026-01-04T14:57:54.939299Z","last_seen":"2026-01-04T14:57:54.939299Z","times_seen":1,"resource_available":false,"data":null}},"time_used":877,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":605,"receive":272,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"api.ivtfxip.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"f-module-pc10.ivtfxip.com/f-module-pc10-4/assets/js/i18n.js","fqdn":"f-module-pc10.ivtfxip.com","domain":"ivtfxip.com","tld":"com"},"ip":{"addr":"104.21.78.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://f-module-pc10.ivtfxip.com/f-module-pc10-4/?moduleName=f-module-pc10-4","date":"2026-01-04T14:57:04.414Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"f-module-pc10.ivtfxip.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 25 Dec 2025 22:43:25 GMT","end":"Wed, 25 Mar 2026 23:43:19 GMT"},"fingerprint":{"sha1":"BD:75:C7:0C:CF:4C:8B:C6:F0:02:2E:9D:B3:1B:50:54:C3:72:BE:D9","sha256":"19:4F:8E:B1:B5:41:99:3C:AC:F4:8B:36:B6:A9:44:7E:9A:11:1B:8C:E9:7F:5B:40:32:92:FF:44:8F:66:46:C3"}}},"request":{"raw":"GET /f-module-pc10-4/assets/js/i18n.js HTTP/1.1\r\nHost: f-module-pc10.ivtfxip.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://f-module-pc10.ivtfxip.com/f-module-pc10-4/?moduleName=f-module-pc10-4\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 04 Jan 2026 14:57:04 GMT\r\npriority: u=2,i=?0\r\ncontent-type: application/javascript\r\ncf-cache-status: MISS\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dm67G%2BzPJu5GoH6fpE4Rn3uM9PuyqF73G6n9uoSztKuqi80SITbEP8A0osF4UXWDgHOBmpghY6LtxlrizhCU183KtSd5yse%2Bqfip2l1UsGw6zrVUm%2Fas\"}]}\r\netag: W/\"0d789f00cbbe033bb6bbaeabaa621409\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9b8b961289b60731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7904,"size_decoded":0,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text","md5":"1e7630fcc10eb9dd24a41c2c98611463","sha1":"cb1680c99f05bc7fb7cc006d7ce7664886c1cd15","sha256":"04674c25c416a582ece339bb3fcb27b3a184a811f2419ddba8c6da603cdda3ab","sha512":"8acaab0b29cfdf7a95965d1d6009a1482adfe5cf69f00a78e86ea0682129c5a95f1c1a5bd3a47a67e72040dc88e8a313b9230c05740a7be94b6f237477261095","ssdeep":"192:Ug77gFEJgjRhoW5Rh556O3tmrezWtahJCZX/FlT2K:UaAJhoW5Rh0x","tlshash":"1df1cb37446419b5190a27d7688e7409a16992af7e2c3df3be7d50003f9fa2cb4b47b2","first_seen":"2026-01-04T14:57:54.940521Z","last_seen":"2026-01-04T14:57:54.940521Z","times_seen":1,"resource_available":true,"data":null}},"time_used":80,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":80,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"f-module-pc10.ivtfxip.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ivtfxip.com/pc/static/js/about~aabdebcb.2e63be9e.js","fqdn":"ivtfxip.com","domain":"ivtfxip.com","tld":"com"},"ip":{"addr":"104.21.78.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ivtfxip.com/pc/","date":"2026-01-04T14:57:02.134Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ivtfxip.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 25 Dec 2025 22:47:06 GMT","end":"Wed, 25 Mar 2026 23:47:02 GMT"},"fingerprint":{"sha1":"A2:E6:E0:E1:3D:71:15:E7:6A:95:1C:EC:53:3E:E4:AC:2E:D2:14:88","sha256":"EA:63:A1:B5:51:F9:8A:2E:D6:72:A0:97:14:88:41:61:B9:B7:97:70:CB:73:D8:93:0E:BF:F1:D0:C9:0A:B5:89"}}},"request":{"raw":"GET /pc/static/js/about~aabdebcb.2e63be9e.js HTTP/1.1\r\nHost: ivtfxip.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ivtfxip.com/pc/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 04 Jan 2026 14:57:02 GMT\r\npriority: u=3,i=?0\r\ncontent-type: application/javascript\r\ncf-cache-status: MISS\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lzjGjllmRLgQPuigO%2FhD3pleqMK4ppo6NCLCvX8woZ5rprthHTB5Kw7wsFL%2BbSrTP%2FVLdgyYL428afilfyKeN2H%2FSi%2BlhP4sn1Xv\"}]}\r\netag: W/\"0fa293f247efbaffb5c8083b70a4615f\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9b8b960449f135a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":171399,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65438), with no line terminators","md5":"c8b4d79f6cba6c856bfde1d28f442d8d","sha1":"045075b5a6213b7651cb6c797f19dbd7f3a52a7b","sha256":"d81ea43feaf0d2d52cbdb8af2d138cde91e4118db7b31c4ff1e41750d92dd276","sha512":"72986d525cd26d89a35612092d5f663df3bcddc00b3ef2de736e4d6102a367cac81153b8260c447218cdb07fbc08ca02a6378c6fac13e43f095538ca5d38316c","ssdeep":"1536:ig5ZM/I5KiWDKwFaPa8kbZdJ6OPrcpZfWARBo+DotEo/Jw/+2xaDByAczipOHerY:7L/lSj9p6zGZGAczipOHUO","tlshash":"7af3b50fa28791bdce7e80a1601d5534a1362fe89412c059f7788ce59ac4db8676fbfc","first_seen":"2026-01-04T14:57:54.941814Z","last_seen":"2026-04-13T23:57:13.844348Z","times_seen":2,"resource_available":true,"data":null}},"time_used":52,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":52,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"ivtfxip.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.ivtfxip.com/api/app/mining/config","fqdn":"api.ivtfxip.com","domain":"ivtfxip.com","tld":"com"},"ip":{"addr":"104.21.78.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ivtfxip.com/pc/","date":"2026-01-04T14:57:02.719Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.ivtfxip.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 25 Dec 2025 22:40:43 GMT","end":"Wed, 25 Mar 2026 23:40:41 GMT"},"fingerprint":{"sha1":"D1:71:A2:C4:12:9D:CD:50:E5:B5:2D:A0:DB:0A:A0:3E:34:E8:FC:96","sha256":"F4:93:8B:FD:69:F9:AF:4F:CA:47:BC:51:06:9A:1E:76:FD:94:50:77:F6:22:8E:6E:51:5C:40:DA:2A:C7:4B:B6"}}},"request":{"raw":"GET /api/app/mining/config HTTP/1.1\r\nHost: api.ivtfxip.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ivtfxip.com/\r\naws-check: true\r\nX-Requested-With: XMLHttpRequest\r\napp_language: English\r\napp_version: P2.9.3\r\napp_client_timezone: +8\r\nrequest_domain: https://ivtfxip.com/pc/#/\r\napp_analog: false\r\napp_model: f\r\napp_auth_by_token: \r\ntheme-mode: 2\r\nOrigin: https://ivtfxip.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 04 Jan 2026 14:57:03 GMT\r\ncontent-type: application/json\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=B1H4EcaLrxNCjHxhM%2FyNr96GHy92O9Jie3rwOg0TJTqGggRwJmnWfZ6WZ4Y3NLpRP43gM1NlENGuPkLvPgMQyYQrEk8jWwRYxQ2ZpFmMfQ%3D%3D\"}]}\r\nserver: cloudflare\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: https://ivtfxip.com\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 86400\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9b8b96078e4ab1b8-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":245,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"8c180f54f963fef6fb94fc606c67af06","sha1":"338a35fb57fc2d32b3ffbf7202cde0c5c2873956","sha256":"f545821dececf6a58f92e561e6dc0a6796f5d4bc6b0c6538563122d9eddb0864","sha512":"cbae6f25f039f57bc0fb9bc99f486f429b7762e010584910bd23b4d036ee58656a73a1f3f7aa35da56c798091209478a63069c175a97d117389c555c3b85b459","ssdeep":"","tlshash":"d3d05eb0099e0174aa802790408e2f259c3c52bb541c4008eb6d58a981f8872eb2450b","first_seen":"2025-10-15T07:45:15.721024Z","last_seen":"2026-01-04T14:57:54.943225Z","times_seen":3,"resource_available":false,"data":null}},"time_used":396,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":396,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"api.ivtfxip.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"f-module-pc10.ivtfxip.com/f-module-pc10-1/assets/js/vue@2.7.16.js","fqdn":"f-module-pc10.ivtfxip.com","domain":"ivtfxip.com","tld":"com"},"ip":{"addr":"104.21.78.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://f-module-pc10.ivtfxip.com/f-module-pc10-1/?moduleName=f-module-pc10-1","date":"2026-01-04T14:57:04.442Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"f-module-pc10.ivtfxip.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 25 Dec 2025 22:43:25 GMT","end":"Wed, 25 Mar 2026 23:43:19 GMT"},"fingerprint":{"sha1":"BD:75:C7:0C:CF:4C:8B:C6:F0:02:2E:9D:B3:1B:50:54:C3:72:BE:D9","sha256":"19:4F:8E:B1:B5:41:99:3C:AC:F4:8B:36:B6:A9:44:7E:9A:11:1B:8C:E9:7F:5B:40:32:92:FF:44:8F:66:46:C3"}}},"request":{"raw":"GET /f-module-pc10-1/assets/js/vue@2.7.16.js HTTP/1.1\r\nHost: f-module-pc10.ivtfxip.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://f-module-pc10.ivtfxip.com/f-module-pc10-1/?moduleName=f-module-pc10-1\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 04 Jan 2026 14:57:04 GMT\r\npriority: u=2,i=?0\r\ncontent-type: application/javascript\r\ncf-cache-status: MISS\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GlXhSK7JNlM7uxNmL1GribJL%2FXMuiTmEJH3i9pHeA7Hd1PzAu6kmyAfZevdGCL9aio6nPwMOnN4kkh%2BJIkmMuMNhB0VQ3Aqim3DgM02YU8oqMwmx5jLJPkw%3D\"}]}\r\netag: W/\"d32a2d073a37b5945a7495822ee7c821\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9b8b9612a9bd0731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":107679,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65362)","md5":"8da91780fa9815752579efedb7b6ee03","sha1":"4525cbd167c96324016eaa2584703e2024e85c90","sha256":"3c1d4b0c549e8de9d4a9bafb12ab70b6a1ac747d07293b98c5b25b6632999afd","sha512":"5b1f278866cf3420fcee64ae174b01472b705b6fb6645afb1f054317c92b09bdde82cb42738a107e283efdc7e0d8e1ddf3629c525398c6548302a747a8ae530b","ssdeep":"1536:/xUpXlU1At+HWTcPKoVMurh6AiRuA7O8vGwYjT9cisc/tz0bl1:eXCIgrHL8vGwYN5tz0bL","tlshash":"53b3e8dcb296b47113eb20b1417f150bf33a6915a80ac590f223e4d67db8c8e916be7d","first_seen":"2023-12-27T12:14:10Z","last_seen":"2026-06-13T08:21:09.6147Z","times_seen":2044,"resource_available":true,"data":null}},"time_used":98,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":95,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"f-module-pc10.ivtfxip.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"f-module-pc10.ivtfxip.com/f-module-pc10-1/assets/js/vue-i18n.js","fqdn":"f-module-pc10.ivtfxip.com","domain":"ivtfxip.com","tld":"com"},"ip":{"addr":"104.21.78.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://f-module-pc10.ivtfxip.com/f-module-pc10-1/?moduleName=f-module-pc10-1","date":"2026-01-04T14:57:04.444Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"f-module-pc10.ivtfxip.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 25 Dec 2025 22:43:25 GMT","end":"Wed, 25 Mar 2026 23:43:19 GMT"},"fingerprint":{"sha1":"BD:75:C7:0C:CF:4C:8B:C6:F0:02:2E:9D:B3:1B:50:54:C3:72:BE:D9","sha256":"19:4F:8E:B1:B5:41:99:3C:AC:F4:8B:36:B6:A9:44:7E:9A:11:1B:8C:E9:7F:5B:40:32:92:FF:44:8F:66:46:C3"}}},"request":{"raw":"GET /f-module-pc10-1/assets/js/vue-i18n.js HTTP/1.1\r\nHost: f-module-pc10.ivtfxip.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://f-module-pc10.ivtfxip.com/f-module-pc10-1/?moduleName=f-module-pc10-1\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 04 Jan 2026 14:57:04 GMT\r\npriority: u=2,i=?0\r\ncontent-type: application/javascript\r\ncf-cache-status: MISS\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lXShLRQFwmmlDMdUJsDOm%2FJFNmOnawnBuBTkc%2B2XyFkI78mPYol%2BMX9fWLzFIhCjZML6qUtDZ4OT1dlb4O8bMRESVgOei6QFs9xqDEKzyLureCiYGfdnU8Q%3D\"}]}\r\netag: W/\"3700d27749ed41faa6359246f6035193\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9b8b9612a9be0731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":51091,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (486)","md5":"de3dcd16bbced832586e79816170a34d","sha1":"fe6df311601c6c133eef5189d66408022d7b39d1","sha256":"0519be799e6c779f84b167be27a7fda41add0d748e7a89f72cba3e8dcb1abd0d","sha512":"a84c28308be595e34184e6c990025cfdb213132344ff9b523b877bbd66d754e756979dda74d4c2775ad3c0405824fe8e029a14b9e4d96c6590db531e72d05a79","ssdeep":"1536:VzcGwVRclFaeA02I5K8CMKK2IPbKf4hT3Adai3K3D3QdaS3Kg:DwV5ZK2IPbKf4q","tlshash":"46331e49adf32052591372fe4faf6045b5388027214dce09b89ea3a45f55f2c93fabd8","first_seen":"2025-05-06T14:56:29.60368Z","last_seen":"2026-05-10T22:50:28.04562Z","times_seen":38,"resource_available":true,"data":null}},"time_used":58,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":57,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"f-module-pc10.ivtfxip.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ivtfxip.com/pc/static/js/npm.core-js~987e6011.c1aa8c4c.js","fqdn":"ivtfxip.com","domain":"ivtfxip.com","tld":"com"},"ip":{"addr":"104.21.78.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ivtfxip.com/pc/","date":"2026-01-04T14:57:00.577Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ivtfxip.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 25 Dec 2025 22:47:06 GMT","end":"Wed, 25 Mar 2026 23:47:02 GMT"},"fingerprint":{"sha1":"A2:E6:E0:E1:3D:71:15:E7:6A:95:1C:EC:53:3E:E4:AC:2E:D2:14:88","sha256":"EA:63:A1:B5:51:F9:8A:2E:D6:72:A0:97:14:88:41:61:B9:B7:97:70:CB:73:D8:93:0E:BF:F1:D0:C9:0A:B5:89"}}},"request":{"raw":"GET /pc/static/js/npm.core-js~987e6011.c1aa8c4c.js HTTP/1.1\r\nHost: ivtfxip.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ivtfxip.com/pc/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 04 Jan 2026 14:57:00 GMT\r\npriority: u=3,i=?0\r\ncontent-type: application/javascript\r\ncf-cache-status: MISS\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kl81b4MhlALvVAWcdbnoJkfDL7oD8udMMvew5x5YQWmQURSKabNi6vmDZlC%2B3pm4kzjCmPItqvdhQbPD7RgYb%2Fr8id9Q%2FmqTqkXz\"}]}\r\netag: W/\"7b8e42c8bbab16fb0048ce64b3339a69\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9b8b95fa6fdf35a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":48640,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (48636), with no line terminators","md5":"b637d5aaae71f41208ab93f2e842bd60","sha1":"a71ff2d0571918ae5a419951b6de5939d8d9c5cf","sha256":"17f572281fa7b03aeada1fd14382bf970b4ff712a118d0a0c8e8dab3eebf1567","sha512":"d389bfc7833710e813a3d2c477c89375251102435d4029d1fbb4f557b6fc8ab7ba4446de482fc2acd9d9c937ebc67a268972f1efcab2eaf2760ec25720dfc2fe","ssdeep":"768:+ZxQAR0ueStt9wU0e22lcvJwGBWIkhTt8jK:wx/n9p0rJvJkTf","tlshash":"d923528cf1d2b4d80ed274ec411fa40be1b75a68746e84d1ffe6d4c4ac7699fa132a18","first_seen":"2026-01-04T14:57:54.944513Z","last_seen":"2026-04-13T23:57:13.944787Z","times_seen":3,"resource_available":true,"data":null}},"time_used":53,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":49,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"ivtfxip.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ivtfxip.com/pc/static/js/npm.zrender~cd89f23c.9f26840a.js","fqdn":"ivtfxip.com","domain":"ivtfxip.com","tld":"com"},"ip":{"addr":"104.21.78.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ivtfxip.com/pc/","date":"2026-01-04T14:57:00.583Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ivtfxip.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 25 Dec 2025 22:47:06 GMT","end":"Wed, 25 Mar 2026 23:47:02 GMT"},"fingerprint":{"sha1":"A2:E6:E0:E1:3D:71:15:E7:6A:95:1C:EC:53:3E:E4:AC:2E:D2:14:88","sha256":"EA:63:A1:B5:51:F9:8A:2E:D6:72:A0:97:14:88:41:61:B9:B7:97:70:CB:73:D8:93:0E:BF:F1:D0:C9:0A:B5:89"}}},"request":{"raw":"GET /pc/static/js/npm.zrender~cd89f23c.9f26840a.js HTTP/1.1\r\nHost: ivtfxip.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ivtfxip.com/pc/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 04 Jan 2026 14:57:00 GMT\r\npriority: u=3,i=?0\r\ncontent-type: application/javascript\r\ncf-cache-status: MISS\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EdTo1JgNFj%2BrXrRftUTyB3cE7G7Qm6Z3Ck5E4AoSlVKZn7yr4ssI9viyvrNs%2FIILZJNFem1wNX4R0RqJ40WJIDHFxPS16%2BcUUw%3D%3D\"}]}\r\netag: W/\"67b9a14b651687f099e21e07024ec2ad\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9b8b95fa7fe735a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":230399,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (57111)","md5":"7989b3e5759b93c712056d5f76e2d43e","sha1":"4461531238819c59fc30e1435ade99bc049a7d25","sha256":"5ce6145c3a11904243b10a3da84d08df4bc7a0d715e911749262053a6294f7a7","sha512":"18e4405477effa6eaff3dc4e79bfbcdb30c182945819ab6eb7fe93225bca0b528cdfb4654d0790265f303c09a8275e4c87b10f036041e47ce1a14d34859987e6","ssdeep":"3072:eJq8dyZzg7JerD5rTnQg7APl08+RcABn9V9s:44Zzg7crDJQgcPl+R9M","tlshash":"3934f8e8b681b064434362e5803f150ff23b255db50e89acf625e4da6cbc44d627bf7a","first_seen":"2025-05-16T20:21:57.639301Z","last_seen":"2026-05-20T20:17:42.872033Z","times_seen":39,"resource_available":true,"data":null}},"time_used":135,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":131,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"ivtfxip.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.ivtfxip.com/api/app/indexPage/config","fqdn":"api.ivtfxip.com","domain":"ivtfxip.com","tld":"com"},"ip":{"addr":"104.21.78.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ivtfxip.com/pc/","date":"2026-01-04T14:57:02.699Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.ivtfxip.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 25 Dec 2025 22:40:43 GMT","end":"Wed, 25 Mar 2026 23:40:41 GMT"},"fingerprint":{"sha1":"D1:71:A2:C4:12:9D:CD:50:E5:B5:2D:A0:DB:0A:A0:3E:34:E8:FC:96","sha256":"F4:93:8B:FD:69:F9:AF:4F:CA:47:BC:51:06:9A:1E:76:FD:94:50:77:F6:22:8E:6E:51:5C:40:DA:2A:C7:4B:B6"}}},"request":{"raw":"GET /api/app/indexPage/config HTTP/1.1\r\nHost: api.ivtfxip.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ivtfxip.com/\r\naws-check: true\r\nX-Requested-With: XMLHttpRequest\r\napp_language: English\r\napp_version: P2.9.3\r\napp_client_timezone: +8\r\nrequest_domain: https://ivtfxip.com/pc/#/\r\napp_analog: false\r\napp_model: f\r\napp_auth_by_token: \r\ntheme-mode: 2\r\nOrigin: https://ivtfxip.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 04 Jan 2026 14:57:02 GMT\r\ncontent-type: application/json\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IM0HklDjVNrwb4XihvcSu9YKkHBC1tlRRezJewQzAoiLUE8qqo6GLkRj%2BefrQ87yPGjZIW1vqzBZTEmQP2%2BvY%2FdofhdEZRclhNQkllVUzA%3D%3D\"}]}\r\nserver: cloudflare\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: https://ivtfxip.com\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 86400\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9b8b9606ecaeb1b8-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5492,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"99d32e95f290cb84ba6cfb54052b08ab","sha1":"152b8d2ef773207f847ff92b68b8d0b9fade8419","sha256":"f8cbda5ceb3f633bc8de415b3475ca6d84edc74f19db107cd1dfc2d025240e81","sha512":"d0304fd70fd7149b6ea4b6fc5bf25e1fca61d0811d30eaff20d0fb0cd465bebed18a7eacf98b574107b3cbe4a12af657a233e008a9d82e34eab3c9ac27dca717","ssdeep":"48:YyOfehe/8NYeferOIBeFevYv6efeL+Cre5ePMBUePeTOM9ele/AjWePej+mqvPe9:SaGeK622yqvJho7","tlshash":"a2b121ababf06a9bc61d71eef854bd541fd93cf3c6464ca2e89c5df914a0c3228d4421","first_seen":"2026-01-04T14:57:54.946422Z","last_seen":"2026-01-04T14:57:54.946422Z","times_seen":1,"resource_available":false,"data":null}},"time_used":215,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":215,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"api.ivtfxip.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.ivtfxip.com/api/app/basis/article/byType","fqdn":"api.ivtfxip.com","domain":"ivtfxip.com","tld":"com"},"ip":{"addr":"104.21.78.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ivtfxip.com/pc/","date":"2026-01-04T14:57:02.873Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.ivtfxip.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 25 Dec 2025 22:40:43 GMT","end":"Wed, 25 Mar 2026 23:40:41 GMT"},"fingerprint":{"sha1":"D1:71:A2:C4:12:9D:CD:50:E5:B5:2D:A0:DB:0A:A0:3E:34:E8:FC:96","sha256":"F4:93:8B:FD:69:F9:AF:4F:CA:47:BC:51:06:9A:1E:76:FD:94:50:77:F6:22:8E:6E:51:5C:40:DA:2A:C7:4B:B6"}}},"request":{"raw":"OPTIONS /api/app/basis/article/byType HTTP/1.1\r\nHost: api.ivtfxip.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: app_analog,app_auth_by_token,app_client_timezone,app_language,app_model,app_version,aws-check,content-type,request_domain,theme-mode,x-requested-with\r\nReferer: https://ivtfxip.com/\r\nOrigin: https://ivtfxip.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 04 Jan 2026 14:57:03 GMT\r\ncontent-length: 0\r\nserver: cloudflare\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=D%2B0j1fAbE397TeevBUnN5y966uwETVmTE5tUsdsrgdiq7WZ9qytR4yqYFBON4AUz8E1%2FUoJjuudPeamwyNfMOJOzwrkma7bxOqoASKZsYQ%3D%3D\"}]}\r\naccess-control-allow-origin: https://ivtfxip.com\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: app_analog,app_auth_by_token,app_client_timezone,app_language,app_model,app_version,aws-check,content-type,request_domain,theme-mode,x-requested-with\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 86400\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nallow: GET, HEAD, POST, PUT, DELETE, TRACE, OPTIONS, PATCH\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b8b9608fa0db1b8-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-13T16:33:36.180633Z","times_seen":16390792,"resource_available":true,"data":null}},"time_used":231,"timings":{"blocked":2,"dns":0,"connect":0,"send":0,"wait":229,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"api.ivtfxip.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.ivtfxip.com/upload/2025-12-24/792335cc01724235bd7831cad28254dd.png","fqdn":"api.ivtfxip.com","domain":"ivtfxip.com","tld":"com"},"ip":{"addr":"104.21.78.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ivtfxip.com/pc/","date":"2026-01-04T14:57:03.325Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.ivtfxip.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 25 Dec 2025 22:40:43 GMT","end":"Wed, 25 Mar 2026 23:40:41 GMT"},"fingerprint":{"sha1":"D1:71:A2:C4:12:9D:CD:50:E5:B5:2D:A0:DB:0A:A0:3E:34:E8:FC:96","sha256":"F4:93:8B:FD:69:F9:AF:4F:CA:47:BC:51:06:9A:1E:76:FD:94:50:77:F6:22:8E:6E:51:5C:40:DA:2A:C7:4B:B6"}}},"request":{"raw":"GET /upload/2025-12-24/792335cc01724235bd7831cad28254dd.png HTTP/1.1\r\nHost: api.ivtfxip.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ivtfxip.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 04 Jan 2026 14:57:03 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Hm1thAYgt40Xkd8Mwt9HIOOVAjARFR6aNmKgZyHqzZRwHC3CbljqXwmLtlBLSUK3h4Gn9mCgmR7U10ofRpFjDJ5g9Bj43iBUQ%2BnzCEw%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-length: 5776\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: *\r\naccess-control-allow-origin: *\r\naccess-control-max-age: 86400\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nlast-modified: Tue, 23 Dec 2025 18:26:47 GMT\r\nvary: Origin, accept-encoding\r\ncf-cache-status: MISS\r\nexpires: Sun, 04 Jan 2026 18:57:03 GMT\r\ncache-control: public, max-age=14400\r\naccept-ranges: bytes\r\ncf-ray: 9b8b960bbd3856b7-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5776,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 150 x 50, 8-bit/color RGBA, non-interlaced","md5":"5c09ea1c13e28d29a747cccb723760cc","sha1":"477e3c927fd8bf5e6cc504bb9bf1f8a85f3ab4ca","sha256":"b794ca20290b352439e3bfe8778a38338b71a2e75e10cdb5b0a3d4ff8218d553","sha512":"072959f095d9f79c958720ae0b591f53c85907d0e4254267d459f879b98842d759cad4e307bfa88d6a606f4f7a1e730f68fd778a3eb8463eb8cc074904c97fc3","ssdeep":"96:PTfncLiCcLwXIz4WhDoGdmwJpncbb7NPDh5NfShG0rrgqFecfyYtxJha3/3Xl:4ekXsd9oWr3nudh5NfB04qDQP3Xl","tlshash":"adc1ae19246064ba1cfe5ca000ae4b7e297b15951f18e266ded343693cf8276e6c3b29","first_seen":"2026-01-04T14:57:54.94769Z","last_seen":"2026-01-04T14:57:54.94769Z","times_seen":1,"resource_available":false,"data":null}},"time_used":95,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":94,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"api.ivtfxip.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"f-module-pc10.ivtfxip.com/f-module-pc10-6/assets/js/element-ui.css","fqdn":"f-module-pc10.ivtfxip.com","domain":"ivtfxip.com","tld":"com"},"ip":{"addr":"104.21.78.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://f-module-pc10.ivtfxip.com/f-module-pc10-6/?moduleName=f-module-pc10-6","date":"2026-01-04T14:57:04.482Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"f-module-pc10.ivtfxip.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 25 Dec 2025 22:43:25 GMT","end":"Wed, 25 Mar 2026 23:43:19 GMT"},"fingerprint":{"sha1":"BD:75:C7:0C:CF:4C:8B:C6:F0:02:2E:9D:B3:1B:50:54:C3:72:BE:D9","sha256":"19:4F:8E:B1:B5:41:99:3C:AC:F4:8B:36:B6:A9:44:7E:9A:11:1B:8C:E9:7F:5B:40:32:92:FF:44:8F:66:46:C3"}}},"request":{"raw":"GET /f-module-pc10-6/assets/js/element-ui.css HTTP/1.1\r\nHost: f-module-pc10.ivtfxip.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://f-module-pc10.ivtfxip.com/f-module-pc10-6/?moduleName=f-module-pc10-6\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 04 Jan 2026 14:57:04 GMT\r\npriority: u=2,i=?0\r\ncontent-type: text/css; charset=utf-8\r\ncf-cache-status: MISS\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rYKlMo3EBgnmuNsWoMRNV%2Fy2WH50tHt7NcJMKdtEJSel00gaI32%2FKcXAU2eIMLddQ8E0eQv47By62bzfsOLrUEPZT6DnVxXycx%2BNy0h%2BAAD7TeUznn8r\"}]}\r\netag: W/\"632d3d97e401fbba7d150528ffec271f\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9b8b9612d9ce0731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":240033,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"07ced7e527d781115b5a9f3f3f559884","sha1":"371b1a3e8d3453a2451e76320d9d7c0e301331b8","sha256":"dc86d4797565d05e88d63598128328e2ed6f02f7f6d950a36a1c4ca9eb9c8057","sha512":"a19dda2047af06da26cb446e5a9184fbb87ef5db209368305f4636d5bf28bd29442d05b556540359dc41198218092ce706bf1a7b765e18b3c481c2edd068e10e","ssdeep":"1536:c28Y7SrW3YeWXA1u9w4HCe/l4TEg5fqMEeje378OaiZkW1YO8eQM+yFffwbIcfGc:lvHjahfAG1U2VGDt","tlshash":"b234a7219b03216b612bde6cb6c0ba895f18c323d4725bbbfe95740dc7d34891267a4f","first_seen":"2023-08-28T11:31:40Z","last_seen":"2026-06-13T01:56:53.17937Z","times_seen":1444,"resource_available":false,"data":null}},"time_used":46,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":44,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"f-module-pc10.ivtfxip.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ivtfxip.com/pc/static/css/about~d44a7288.a1438087.css","fqdn":"ivtfxip.com","domain":"ivtfxip.com","tld":"com"},"ip":{"addr":"104.21.78.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ivtfxip.com/pc/","date":"2026-01-04T14:57:02.128Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ivtfxip.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 25 Dec 2025 22:47:06 GMT","end":"Wed, 25 Mar 2026 23:47:02 GMT"},"fingerprint":{"sha1":"A2:E6:E0:E1:3D:71:15:E7:6A:95:1C:EC:53:3E:E4:AC:2E:D2:14:88","sha256":"EA:63:A1:B5:51:F9:8A:2E:D6:72:A0:97:14:88:41:61:B9:B7:97:70:CB:73:D8:93:0E:BF:F1:D0:C9:0A:B5:89"}}},"request":{"raw":"GET /pc/static/css/about~d44a7288.a1438087.css HTTP/1.1\r\nHost: ivtfxip.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ivtfxip.com/pc/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 04 Jan 2026 14:57:02 GMT\r\npriority: u=2,i=?0\r\ncontent-type: text/css; charset=utf-8\r\ncf-cache-status: MISS\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hKCta7m8jnbhY0rCzCZMKTdK5cMgTmXAbLWv8LByJhw3pYZEvzSFswB2BiWLExSOW6EtZ%2FCCyHT035cKyiPtAVeWF19IJ5hgnnHl\"}]}\r\netag: W/\"0a92f17013ff4461ff18dfdf89c0e9bb\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9b8b960449ea35a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":200331,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"c7c6c0d39b50559d13bd9de733ee65e3","sha1":"0072cec2382b391a5846adf3a6ddc36464fa879b","sha256":"30b30774abe414fa72a88824d76e509ecb8902ab44121420ece342c7b226eb93","sha512":"241ee037249ab299dd11d10dd6e53e0bc226bfcda76d2f9ac0ed8e158139feee6e80aa6205c592e8b7e0d5b019244727976bf2ed42ba6ac064469650df61dcb4","ssdeep":"768:6oFj+QCarIoz+B5gElZm1YPNHCHN/MY3lbSe4Ohb18Kjd38MmgLPVo4u9Y:6oFj+Qd+7gElZmW0v5Se4ONV","tlshash":"7a14772e7a4d282d413bc5593895be8d4d20f27bd201837c6a7b651acdc33533e9a7ac","first_seen":"2026-01-04T14:57:54.948958Z","last_seen":"2026-04-13T23:57:13.876291Z","times_seen":3,"resource_available":false,"data":null}},"time_used":210,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":130,"receive":80,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"ivtfxip.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"f-module-pc10.ivtfxip.com/f-module-pc10-2/assets/js/vue@2.7.16.js","fqdn":"f-module-pc10.ivtfxip.com","domain":"ivtfxip.com","tld":"com"},"ip":{"addr":"104.21.78.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://f-module-pc10.ivtfxip.com/f-module-pc10-2/?moduleName=f-module-pc10-2","date":"2026-01-04T14:57:04.546Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"f-module-pc10.ivtfxip.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 25 Dec 2025 22:43:25 GMT","end":"Wed, 25 Mar 2026 23:43:19 GMT"},"fingerprint":{"sha1":"BD:75:C7:0C:CF:4C:8B:C6:F0:02:2E:9D:B3:1B:50:54:C3:72:BE:D9","sha256":"19:4F:8E:B1:B5:41:99:3C:AC:F4:8B:36:B6:A9:44:7E:9A:11:1B:8C:E9:7F:5B:40:32:92:FF:44:8F:66:46:C3"}}},"request":{"raw":"GET /f-module-pc10-2/assets/js/vue@2.7.16.js HTTP/1.1\r\nHost: f-module-pc10.ivtfxip.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://f-module-pc10.ivtfxip.com/f-module-pc10-2/?moduleName=f-module-pc10-2\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 04 Jan 2026 14:57:04 GMT\r\npriority: u=2,i=?0\r\ncontent-type: application/javascript\r\ncf-cache-status: MISS\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vxyxaU8aWIWSUID6nPiCFxADxkZzYR1639nbCHTSn6XIXEzdR17iQFzftBM0EbNXaNdQPogKnZaR83ZPDwPmsq1vYvYLNa8slCpbR8qcC8H5aBWWvK5HujM%3D\"}]}\r\netag: W/\"d32a2d073a37b5945a7495822ee7c821\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9b8b961329e10731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":107679,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65362)","md5":"8da91780fa9815752579efedb7b6ee03","sha1":"4525cbd167c96324016eaa2584703e2024e85c90","sha256":"3c1d4b0c549e8de9d4a9bafb12ab70b6a1ac747d07293b98c5b25b6632999afd","sha512":"5b1f278866cf3420fcee64ae174b01472b705b6fb6645afb1f054317c92b09bdde82cb42738a107e283efdc7e0d8e1ddf3629c525398c6548302a747a8ae530b","ssdeep":"1536:/xUpXlU1At+HWTcPKoVMurh6AiRuA7O8vGwYjT9cisc/tz0bl1:eXCIgrHL8vGwYN5tz0bL","tlshash":"53b3e8dcb296b47113eb20b1417f150bf33a6915a80ac590f223e4d67db8c8e916be7d","first_seen":"2023-12-27T12:14:10Z","last_seen":"2026-06-13T08:21:09.6147Z","times_seen":2044,"resource_available":true,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"f-module-pc10.ivtfxip.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"f-module-pc10.ivtfxip.com/f-module-pc10-2/assets/svg/icon-arrow.svg","fqdn":"f-module-pc10.ivtfxip.com","domain":"ivtfxip.com","tld":"com"},"ip":{"addr":"104.21.78.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://f-module-pc10.ivtfxip.com/f-module-pc10-2/?moduleName=f-module-pc10-2","date":"2026-01-04T14:57:04.583Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"f-module-pc10.ivtfxip.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 25 Dec 2025 22:43:25 GMT","end":"Wed, 25 Mar 2026 23:43:19 GMT"},"fingerprint":{"sha1":"BD:75:C7:0C:CF:4C:8B:C6:F0:02:2E:9D:B3:1B:50:54:C3:72:BE:D9","sha256":"19:4F:8E:B1:B5:41:99:3C:AC:F4:8B:36:B6:A9:44:7E:9A:11:1B:8C:E9:7F:5B:40:32:92:FF:44:8F:66:46:C3"}}},"request":{"raw":"GET /f-module-pc10-2/assets/svg/icon-arrow.svg HTTP/1.1\r\nHost: f-module-pc10.ivtfxip.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://f-module-pc10.ivtfxip.com/f-module-pc10-2/?moduleName=f-module-pc10-2\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 04 Jan 2026 14:57:04 GMT\r\npriority: u=4,i=?0\r\ncontent-type: image/svg+xml\r\ncf-cache-status: MISS\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ij%2BHdKMCEUyi%2BY1RjDt4oNvxaQ8XzPVP45VQluD2VFsylnsHw2%2BxEAyawu3seIeKu6JQmIXlTIzd2SxAwTX85I3NMRSn0gJ5XmVQzvpXhOp5F3A0kkxh\"}]}\r\netag: W/\"5c9012635843f03084d48e4e20809bc6\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9b8b961349e90731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":552,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"d1d8171140f59dd4ed4d6bcd2a87e510","sha1":"7cb99afb346f5f7c0e5b7681f3d9453ac75b07af","sha256":"8bff5636a2b7da7def2b4d3ef8e3bb2c9bcc452e1233a64025d7c59ec2f6835a","sha512":"f32f6350a566d710bccce1be9b57c458566ad813a80fe4061ca54cb6a745ae7f6a26e0516503c383d52d21a2f575a968f58384fee39d36d60d3eb71f137f3466","ssdeep":"","tlshash":"1ef026480240a43d9121833493fc5ac3d375304fd1454dac95ea2fb6b2b50a50551be4","first_seen":"2025-05-06T14:56:29.630384Z","last_seen":"2026-06-09T19:00:14.331635Z","times_seen":17,"resource_available":false,"data":null}},"time_used":90,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":90,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"f-module-pc10.ivtfxip.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ivtfxip.com/","fqdn":"ivtfxip.com","domain":"ivtfxip.com","tld":"com"},"ip":{"addr":"104.21.78.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-01-04T14:57:00.052Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ivtfxip.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 25 Dec 2025 22:47:06 GMT","end":"Wed, 25 Mar 2026 23:47:02 GMT"},"fingerprint":{"sha1":"A2:E6:E0:E1:3D:71:15:E7:6A:95:1C:EC:53:3E:E4:AC:2E:D2:14:88","sha256":"EA:63:A1:B5:51:F9:8A:2E:D6:72:A0:97:14:88:41:61:B9:B7:97:70:CB:73:D8:93:0E:BF:F1:D0:C9:0A:B5:89"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: ivtfxip.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 04 Jan 2026 14:57:00 GMT\r\ncontent-type: text/html; charset=utf-8\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8Y1%2FjMz4wJbts5q2LGHKABdmyB%2Fpi96SwfeeAwPeQCa%2FjDzClKynQsbHM0t7xk4319awaz91RzTPvSnkIwmBJxT%2FqbLPY7kz%2BQz7\"}]}\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\ncontent-encoding: br\r\ncf-ray: 9b8b95f76e014c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5300,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with CRLF line terminators","md5":"136411721564e3b8ca91d79e7c28d9dd","sha1":"6afd5a3ad08b41b5ab0402e5ef2ff241a19a3db6","sha256":"6ba29b8fdc1cc09479f5e001f2a7f4fe3af06be63d21a127c5fb1b7dbd7344c5","sha512":"db88f795dfa11bf0c379495e67fcf1869a0f45ccec8289a85072a4c4a850c6b2a3e3e896e7f67aff38a00f10ff450cb4dd2102c120445e81baaea66aecdcead8","ssdeep":"96:LSusFo7g3zqU0FJ6X8Zd47QOte2w33qMMEp:LKR+FJ6X8Z1Ote2w33qM/","tlshash":"78b1cdce419112091af2bb319e47b508e17b15ab1508d0077e5c9b226fb8a0f85b7efe","first_seen":"2025-10-07T13:51:05.861653Z","last_seen":"2026-05-01T07:36:15.777169Z","times_seen":11,"resource_available":true,"data":null}},"time_used":189,"timings":{"blocked":19,"dns":0,"connect":1,"send":0,"wait":152,"receive":0,"ssl":15},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"ivtfxip.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ivtfxip.com/pc/","fqdn":"ivtfxip.com","domain":"ivtfxip.com","tld":"com"},"ip":{"addr":"104.21.78.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-01-04T14:57:00.409Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ivtfxip.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 25 Dec 2025 22:47:06 GMT","end":"Wed, 25 Mar 2026 23:47:02 GMT"},"fingerprint":{"sha1":"A2:E6:E0:E1:3D:71:15:E7:6A:95:1C:EC:53:3E:E4:AC:2E:D2:14:88","sha256":"EA:63:A1:B5:51:F9:8A:2E:D6:72:A0:97:14:88:41:61:B9:B7:97:70:CB:73:D8:93:0E:BF:F1:D0:C9:0A:B5:89"}}},"request":{"raw":"GET /pc/ HTTP/1.1\r\nHost: ivtfxip.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ivtfxip.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ncontent-encoding: br\r\ncontent-type: text/html; charset=utf-8\r\ndate: Sun, 04 Jan 2026 14:57:00 GMT\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Y3XwDYRMMtM%2BVaO%2BegjLm%2FH8c5Dn3R2tdX3f2xqN97CoJKaa8hrgONbqn%2Bo13mxbx%2BLfyUPrliWZCqdENDZRXH0wfjxeAp%2FlgRj%2F\"}]}\r\ncf-cache-status: DYNAMIC\r\npriority: u=1,i=?0\r\ncf-ray: 9b8b95f98f9535a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7686,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (4173)","md5":"4930843dfb4635890647af11ae9b510c","sha1":"32a1e9f886eb81c828d4db49ad361d570b05dbee","sha256":"153989bd09b053dc878ba8418dd2022ba97bc94bd2b0ebb9e54c83527274f03c","sha512":"a71239f1a04c56dc255f658fbf6889dde39210d0932d86f8199da76a829f12cdc64e34b365a28124b902dcdab9e55babb1616a4e09aa06bf2f66f7d6a04d7aea","ssdeep":"192:3WJhpD56nItOa3w2qq2gFCLEnHaF0CGr9+SNcWpyhKLcm:kqqb2GrNcm","tlshash":"6cf18055fd08d5ee5c70ae56fb6a756a80cae86f0c30d890b4be0e35c7647c86b79803","first_seen":"2026-01-04T14:57:54.951613Z","last_seen":"2026-04-13T23:57:13.854257Z","times_seen":2,"resource_available":false,"data":null}},"time_used":77,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":77,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"ivtfxip.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ivtfxip.com/pc/static/js/app~1fb183e4.0cde874d.js","fqdn":"ivtfxip.com","domain":"ivtfxip.com","tld":"com"},"ip":{"addr":"104.21.78.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ivtfxip.com/pc/","date":"2026-01-04T14:57:00.556Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ivtfxip.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 25 Dec 2025 22:47:06 GMT","end":"Wed, 25 Mar 2026 23:47:02 GMT"},"fingerprint":{"sha1":"A2:E6:E0:E1:3D:71:15:E7:6A:95:1C:EC:53:3E:E4:AC:2E:D2:14:88","sha256":"EA:63:A1:B5:51:F9:8A:2E:D6:72:A0:97:14:88:41:61:B9:B7:97:70:CB:73:D8:93:0E:BF:F1:D0:C9:0A:B5:89"}}},"request":{"raw":"GET /pc/static/js/app~1fb183e4.0cde874d.js HTTP/1.1\r\nHost: ivtfxip.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ivtfxip.com/pc/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 04 Jan 2026 14:57:00 GMT\r\npriority: u=3,i=?0\r\ncontent-type: application/javascript\r\ncf-cache-status: MISS\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4M1JH7rPkDnBLFczPMzL32ozANvPXuJZ%2BmEA2ItU7s%2BplIyVlcgktWvyYouhgTsHb4QO9jP%2Bix4cYIVtXS134ZWp0yBZx6Pj7g%3D%3D\"}]}\r\netag: W/\"3c4a451081e88f5592e8b4a9f3001327\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9b8b95fa5fcf35a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":850290,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (24966), with no line terminators","md5":"f3000be17d1e0092757c4e0738848cc8","sha1":"b3a6697cd3265c4c07d0fb13456f6d4643f90630","sha256":"7012e36057b6d0b633e7145ec4179dd0475c9a88ffad5b51056a9da468c45ef1","sha512":"add29c225651b9fad9bce7a27cc25bf999b1d96b5bb430405cbc5180899f05aa875c47ce38c414d3213b3f3a3be21ed74b336ede6eef520b22e9b01ea6985ffd","ssdeep":"12288:l6cDp0FG1AFkh4zCZFIrRblK8sfpVl6uhRnLgHovNmNc2M9StIYhwDCem5H0b4B7:5RnLgHovNmK2N2k5HbAM","tlshash":"9b15093ad296435426c632523e4b338ae364cd55e6a3f4ec48cdc01922d9fe9d066ff6","first_seen":"2026-01-04T14:57:54.95293Z","last_seen":"2026-01-04T14:57:54.95293Z","times_seen":1,"resource_available":false,"data":null}},"time_used":311,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":305,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"ivtfxip.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ivtfxip.com/pc/static/js/npm.echarts~9187ef67.37e78c7f.js","fqdn":"ivtfxip.com","domain":"ivtfxip.com","tld":"com"},"ip":{"addr":"104.21.78.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ivtfxip.com/pc/","date":"2026-01-04T14:57:00.581Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ivtfxip.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 25 Dec 2025 22:47:06 GMT","end":"Wed, 25 Mar 2026 23:47:02 GMT"},"fingerprint":{"sha1":"A2:E6:E0:E1:3D:71:15:E7:6A:95:1C:EC:53:3E:E4:AC:2E:D2:14:88","sha256":"EA:63:A1:B5:51:F9:8A:2E:D6:72:A0:97:14:88:41:61:B9:B7:97:70:CB:73:D8:93:0E:BF:F1:D0:C9:0A:B5:89"}}},"request":{"raw":"GET /pc/static/js/npm.echarts~9187ef67.37e78c7f.js HTTP/1.1\r\nHost: ivtfxip.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ivtfxip.com/pc/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 04 Jan 2026 14:57:00 GMT\r\npriority: u=3,i=?0\r\ncontent-type: application/javascript\r\ncf-cache-status: MISS\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YUTgd8rtIqj3QCemFPkVVJ%2F2ZsuLC2QVh7pdZ8lQam22glI5tKHktWmdEFIu%2Bc1GNucWrI5u8ZditicVSWYp29gTThxUDJinsitN\"}]}\r\netag: W/\"d9bbd60423761f6490642d144adcb1cb\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9b8b95fa7fe535a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":136795,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"1a787ace583807774829a55d6dbba03b","sha1":"ddde0757489ee8eb46d680cce900899d53c12a64","sha256":"912958be6d81ec72b3448be95edc2069748528547b88ee92834e28d1b5d11413","sha512":"e49beb60b64110b05d9568e31c4b62674c8c26b072b035cda05e30ebc9bb9b39e8f7ddec9390c1891c935b423cb1fdfb53a54f7a900153aaa939492c67a99b39","ssdeep":"3072:xH51e1uvwmJ4kg4vBF7MsSNiHtpUP6VLo5J:hwmJi4ZF7MlYVLo5J","tlshash":"a9d3a49cb1c9f05a93a332f940af140fd33a199a7c0ed910a651e0c57c7956da33bf6a","first_seen":"2025-04-19T14:49:36.170606Z","last_seen":"2026-05-20T20:17:42.880866Z","times_seen":46,"resource_available":true,"data":null}},"time_used":83,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":82,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"ivtfxip.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.ivtfxip.com/api/app/mining/config","fqdn":"api.ivtfxip.com","domain":"ivtfxip.com","tld":"com"},"ip":{"addr":"104.21.78.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ivtfxip.com/pc/","date":"2026-01-04T14:57:01.971Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.ivtfxip.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 25 Dec 2025 22:40:43 GMT","end":"Wed, 25 Mar 2026 23:40:41 GMT"},"fingerprint":{"sha1":"D1:71:A2:C4:12:9D:CD:50:E5:B5:2D:A0:DB:0A:A0:3E:34:E8:FC:96","sha256":"F4:93:8B:FD:69:F9:AF:4F:CA:47:BC:51:06:9A:1E:76:FD:94:50:77:F6:22:8E:6E:51:5C:40:DA:2A:C7:4B:B6"}}},"request":{"raw":"OPTIONS /api/app/mining/config HTTP/1.1\r\nHost: api.ivtfxip.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: app_analog,app_auth_by_token,app_client_timezone,app_language,app_model,app_version,aws-check,request_domain,theme-mode,x-requested-with\r\nReferer: https://ivtfxip.com/\r\nOrigin: https://ivtfxip.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 04 Jan 2026 14:57:02 GMT\r\ncontent-length: 0\r\nserver: cloudflare\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Hrro0ZA8T1zJVi1UEEmHqXTvGwl0WFlOwAPd2k0cJZeVFBp5U%2By1C6LreVNVoAPzWVyiL3OOcvxJYOL7UEiH41z2YdfYZrpZ1il%2FCw69EQ%3D%3D\"}]}\r\naccess-control-allow-origin: https://ivtfxip.com\r\naccess-control-allow-methods: GET\r\naccess-control-allow-headers: app_analog,app_auth_by_token,app_client_timezone,app_language,app_model,app_version,aws-check,request_domain,theme-mode,x-requested-with\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 86400\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nallow: GET, HEAD, POST, PUT, DELETE, TRACE, OPTIONS, PATCH\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b8b96038bc5b1b8-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-13T16:33:36.180633Z","times_seen":16390792,"resource_available":true,"data":null}},"time_used":512,"timings":{"blocked":39,"dns":0,"connect":0,"send":0,"wait":470,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"api.ivtfxip.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ivtfxip.com/pc/static/img/Loading.b098319f.gif","fqdn":"ivtfxip.com","domain":"ivtfxip.com","tld":"com"},"ip":{"addr":"104.21.78.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ivtfxip.com/pc/","date":"2026-01-04T14:57:02.158Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ivtfxip.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 25 Dec 2025 22:47:06 GMT","end":"Wed, 25 Mar 2026 23:47:02 GMT"},"fingerprint":{"sha1":"A2:E6:E0:E1:3D:71:15:E7:6A:95:1C:EC:53:3E:E4:AC:2E:D2:14:88","sha256":"EA:63:A1:B5:51:F9:8A:2E:D6:72:A0:97:14:88:41:61:B9:B7:97:70:CB:73:D8:93:0E:BF:F1:D0:C9:0A:B5:89"}}},"request":{"raw":"GET /pc/static/img/Loading.b098319f.gif HTTP/1.1\r\nHost: ivtfxip.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ivtfxip.com/pc/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 63696\r\npriority: u=4,i=?0\r\ncontent-type: image/gif\r\ncf-cache-status: MISS\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"9c54dd11736de9238b8963f1b70b63bb\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=iyV0q%2BiSftp5QsBdKFvkTqWk6%2BkeC2WKxaepgiqTFBCVSvd%2BWyd5egU4Y7WmoYgJgXkTYhkO3mD4hUnhmVvmfggZZHtRRqjZK0Ob\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\naccept-ranges: bytes\r\ndate: Sun, 04 Jan 2026 14:57:02 GMT\r\ncf-ray: 9b8b960489f835a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":63696,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 800 x 600","md5":"b098319fe47bd019cd653bd36cbf386a","sha1":"045ddc21f28a8812ea89741c07c7d180ce361ec8","sha256":"99efc3a3fa7e98ca2c0041273ab0ca072d1c6f09fe262adb26638d705d1fad32","sha512":"8604ac4fe4c5ea3878402f969a6795fc5260fabfd99f90836ba99924c129657ccf392dc791ba5a01b7ef93f94ca02f60b9271b42b908beb7ce7b4634cce1fe98","ssdeep":"1536:3bx/4nMpLaHEB4Gs+hNyb6qhbstFBFbj+:3bx/4nMpLkEGgWbyBFbj+","tlshash":"d8538db8f1bd5e52d8090034305d52bd0d5ec0ace9b5fd2332a8bf9a8b8a4753dd0ad6","first_seen":"2023-05-26T08:05:36Z","last_seen":"2026-06-10T03:07:08.792535Z","times_seen":1199,"resource_available":false,"data":null}},"time_used":103,"timings":{"blocked":2,"dns":0,"connect":0,"send":0,"wait":99,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"ivtfxip.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.ivtfxip.com/api/app/customConfig","fqdn":"api.ivtfxip.com","domain":"ivtfxip.com","tld":"com"},"ip":{"addr":"104.21.78.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ivtfxip.com/pc/","date":"2026-01-04T14:57:02.713Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.ivtfxip.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 25 Dec 2025 22:40:43 GMT","end":"Wed, 25 Mar 2026 23:40:41 GMT"},"fingerprint":{"sha1":"D1:71:A2:C4:12:9D:CD:50:E5:B5:2D:A0:DB:0A:A0:3E:34:E8:FC:96","sha256":"F4:93:8B:FD:69:F9:AF:4F:CA:47:BC:51:06:9A:1E:76:FD:94:50:77:F6:22:8E:6E:51:5C:40:DA:2A:C7:4B:B6"}}},"request":{"raw":"GET /api/app/customConfig HTTP/1.1\r\nHost: api.ivtfxip.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ivtfxip.com/\r\naws-check: true\r\nX-Requested-With: XMLHttpRequest\r\napp_language: English\r\napp_version: P2.9.3\r\napp_client_timezone: +8\r\nrequest_domain: https://ivtfxip.com/pc/#/\r\napp_analog: false\r\napp_model: f\r\napp_auth_by_token: \r\ntheme-mode: 2\r\nOrigin: https://ivtfxip.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 04 Jan 2026 14:57:02 GMT\r\ncontent-type: application/json\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=E5%2FGRbzk5GCRkgXAAycsu8IYWNH%2BoYzwdOdET4pqjtxxZpfNMW08RmlgMAKPO%2BWT8%2FiS%2FjVLW%2Fy5R0lXl%2BvkUaGoPz0kCEYfQR3S94wXIQ%3D%3D\"}]}\r\nserver: cloudflare\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: https://ivtfxip.com\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 86400\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9b8b96076defb1b8-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1584,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"60f74bd488d0c81fdb0b33ecdb4dd253","sha1":"bf9df72fed2f2aedcb2a7815d97ae7d2c57508ba","sha256":"b07f3206c8fe2aefb527234bbd31a4e61f35652f1c5bb7ea28792823964b5f8b","sha512":"a7db3bcebbaa6f6d448abe1c8bd12fe67c6fcecd2c7346e99cd4f6953bde75d0df1a2ee13256a21b3fe410e1fbf79ea44358e3c8e4dc7a2354188b71e83cb02c","ssdeep":"","tlshash":"3331ef3d595142bc46aa321dd41f6b689bbc5371321c7028e5da0f8571ebcd8eb7860f","first_seen":"2026-01-04T14:57:54.895458Z","last_seen":"2026-01-04T14:57:54.895458Z","times_seen":1,"resource_available":false,"data":null}},"time_used":216,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":216,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"api.ivtfxip.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ivtfxip.com/pc/static/css/about~753d5752.e40272bc.css","fqdn":"ivtfxip.com","domain":"ivtfxip.com","tld":"com"},"ip":{"addr":"104.21.78.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://ivtfxip.com/pc/","date":"2026-01-04T14:57:03.053Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ivtfxip.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 25 Dec 2025 22:47:06 GMT","end":"Wed, 25 Mar 2026 23:47:02 GMT"},"fingerprint":{"sha1":"A2:E6:E0:E1:3D:71:15:E7:6A:95:1C:EC:53:3E:E4:AC:2E:D2:14:88","sha256":"EA:63:A1:B5:51:F9:8A:2E:D6:72:A0:97:14:88:41:61:B9:B7:97:70:CB:73:D8:93:0E:BF:F1:D0:C9:0A:B5:89"}}},"request":{"raw":"GET /pc/static/css/about~753d5752.e40272bc.css HTTP/1.1\r\nHost: ivtfxip.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ivtfxip.com/pc/\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 04 Jan 2026 14:57:03 GMT\r\npriority: u=4,i=?0\r\ncontent-type: text/css; charset=utf-8\r\ncf-cache-status: REVALIDATED\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=B3JOGewt0aBFqLzyP9WaKFVxuIbAm6gFIWO%2B2B9TpdQqMOXiHOqIdUzT4EFyfCXb68il1mCmZYRQ0v4Lj9CVcUWaz9Ov5a9%2BJw%3D%3D\"}]}\r\netag: W/\"96dbaf2c2f01cca6cac861ff5702f615\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9b8b960a0af435a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":80480,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"c93a16039d298bdd10f6d72530f1cdae","sha1":"140a3df4fdbae7c3caebe4652b766b696bf1e6e4","sha256":"33aed8f0c62a383ce17de147b297c99c7a7b082c5355321565e2bbeb7ee894c5","sha512":"4bbb3a9b281a4749c30d21b574ae8480d8b46bcef103caee8dfe715a737f87107697154f78b1d2ef3971b2564724b4a63ff5ac42246411e68d668f55e28e1e16","ssdeep":"1536:kjb3yg/vdv6JgvGaVKSWxpU3YlukfwitwOKVczq5sYCRHOf:VaASWcYLUlv","tlshash":"3b73dd9d3d8c2d3d913fc52934d52e9b8c10e217c712d16e2a77961acec72832ee59ac","first_seen":"2025-07-17T05:14:10.724313Z","last_seen":"2026-05-20T20:17:42.836102Z","times_seen":31,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"ivtfxip.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.ivtfxip.com/api/app/indexPage/config","fqdn":"api.ivtfxip.com","domain":"ivtfxip.com","tld":"com"},"ip":{"addr":"104.21.78.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ivtfxip.com/pc/","date":"2026-01-04T14:57:01.976Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.ivtfxip.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 25 Dec 2025 22:40:43 GMT","end":"Wed, 25 Mar 2026 23:40:41 GMT"},"fingerprint":{"sha1":"D1:71:A2:C4:12:9D:CD:50:E5:B5:2D:A0:DB:0A:A0:3E:34:E8:FC:96","sha256":"F4:93:8B:FD:69:F9:AF:4F:CA:47:BC:51:06:9A:1E:76:FD:94:50:77:F6:22:8E:6E:51:5C:40:DA:2A:C7:4B:B6"}}},"request":{"raw":"OPTIONS /api/app/indexPage/config HTTP/1.1\r\nHost: api.ivtfxip.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: app_analog,app_auth_by_token,app_client_timezone,app_language,app_model,app_version,aws-check,request_domain,theme-mode,x-requested-with\r\nReferer: https://ivtfxip.com/\r\nOrigin: https://ivtfxip.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 04 Jan 2026 14:57:02 GMT\r\ncontent-length: 0\r\nserver: cloudflare\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4HYM5x4oaOYnZY0isgG5Y%2Fcb%2BTBV%2FqpiLJXXuK7S%2BF3XUzXi%2FCAA4RdVJMapctycTlyHx8Y2kaZpCgpXPE6JghsPgyJyLaDQZ%2FgnnZi9UQ%3D%3D\"}]}\r\naccess-control-allow-origin: https://ivtfxip.com\r\naccess-control-allow-methods: GET\r\naccess-control-allow-headers: app_analog,app_auth_by_token,app_client_timezone,app_language,app_model,app_version,aws-check,request_domain,theme-mode,x-requested-with\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 86400\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nallow: GET, HEAD, POST, PUT, DELETE, TRACE, OPTIONS, PATCH\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b8b96038bc7b1b8-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-13T16:33:36.180633Z","times_seen":16390792,"resource_available":true,"data":null}},"time_used":478,"timings":{"blocked":34,"dns":0,"connect":0,"send":0,"wait":441,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"api.ivtfxip.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ivtfxip.com/pc/static/css/about~d44a7288.a1438087.css","fqdn":"ivtfxip.com","domain":"ivtfxip.com","tld":"com"},"ip":{"addr":"104.21.78.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://ivtfxip.com/pc/","date":"2026-01-04T14:57:03.057Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ivtfxip.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 25 Dec 2025 22:47:06 GMT","end":"Wed, 25 Mar 2026 23:47:02 GMT"},"fingerprint":{"sha1":"A2:E6:E0:E1:3D:71:15:E7:6A:95:1C:EC:53:3E:E4:AC:2E:D2:14:88","sha256":"EA:63:A1:B5:51:F9:8A:2E:D6:72:A0:97:14:88:41:61:B9:B7:97:70:CB:73:D8:93:0E:BF:F1:D0:C9:0A:B5:89"}}},"request":{"raw":"GET /pc/static/css/about~d44a7288.a1438087.css HTTP/1.1\r\nHost: ivtfxip.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ivtfxip.com/pc/\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 04 Jan 2026 14:57:03 GMT\r\npriority: u=4,i=?0\r\ncontent-type: text/css; charset=utf-8\r\ncf-cache-status: REVALIDATED\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hKCta7m8jnbhY0rCzCZMKTdK5cMgTmXAbLWv8LByJhw3pYZEvzSFswB2BiWLExSOW6EtZ%2FCCyHT035cKyiPtAVeWF19IJ5hgnnHl\"}]}\r\netag: W/\"0a92f17013ff4461ff18dfdf89c0e9bb\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9b8b960a0af635a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":200331,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"c7c6c0d39b50559d13bd9de733ee65e3","sha1":"0072cec2382b391a5846adf3a6ddc36464fa879b","sha256":"30b30774abe414fa72a88824d76e509ecb8902ab44121420ece342c7b226eb93","sha512":"241ee037249ab299dd11d10dd6e53e0bc226bfcda76d2f9ac0ed8e158139feee6e80aa6205c592e8b7e0d5b019244727976bf2ed42ba6ac064469650df61dcb4","ssdeep":"768:6oFj+QCarIoz+B5gElZm1YPNHCHN/MY3lbSe4Ohb18Kjd38MmgLPVo4u9Y:6oFj+Qd+7gElZmW0v5Se4ONV","tlshash":"7a14772e7a4d282d413bc5593895be8d4d20f27bd201837c6a7b651acdc33533e9a7ac","first_seen":"2026-01-04T14:57:54.948958Z","last_seen":"2026-04-13T23:57:13.876291Z","times_seen":3,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"ivtfxip.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"f-module-pc10.ivtfxip.com/f-module-pc10-3/assets/js/vue@2.7.16.js","fqdn":"f-module-pc10.ivtfxip.com","domain":"ivtfxip.com","tld":"com"},"ip":{"addr":"104.21.78.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://f-module-pc10.ivtfxip.com/f-module-pc10-3/?moduleName=f-module-pc10-3","date":"2026-01-04T14:57:04.498Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"f-module-pc10.ivtfxip.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 25 Dec 2025 22:43:25 GMT","end":"Wed, 25 Mar 2026 23:43:19 GMT"},"fingerprint":{"sha1":"BD:75:C7:0C:CF:4C:8B:C6:F0:02:2E:9D:B3:1B:50:54:C3:72:BE:D9","sha256":"19:4F:8E:B1:B5:41:99:3C:AC:F4:8B:36:B6:A9:44:7E:9A:11:1B:8C:E9:7F:5B:40:32:92:FF:44:8F:66:46:C3"}}},"request":{"raw":"GET /f-module-pc10-3/assets/js/vue@2.7.16.js HTTP/1.1\r\nHost: f-module-pc10.ivtfxip.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://f-module-pc10.ivtfxip.com/f-module-pc10-3/?moduleName=f-module-pc10-3\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 04 Jan 2026 14:57:04 GMT\r\npriority: u=2,i=?0\r\ncontent-type: application/javascript\r\ncf-cache-status: MISS\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=n%2BKrCc%2B5kyj7KcIYmUtxRCV%2BbtTfm%2BLzsI1BL17bi%2FBsyIe%2BAtuGDbOzcOxeYCXK%2FZFw06k2aCKqtD0VHY26Zw%2BaBhc%2BxBxvMhIAu4jZCvVbal7I1Oz9\"}]}\r\netag: W/\"d32a2d073a37b5945a7495822ee7c821\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9b8b9612f9d60731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":107679,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65362)","md5":"8da91780fa9815752579efedb7b6ee03","sha1":"4525cbd167c96324016eaa2584703e2024e85c90","sha256":"3c1d4b0c549e8de9d4a9bafb12ab70b6a1ac747d07293b98c5b25b6632999afd","sha512":"5b1f278866cf3420fcee64ae174b01472b705b6fb6645afb1f054317c92b09bdde82cb42738a107e283efdc7e0d8e1ddf3629c525398c6548302a747a8ae530b","ssdeep":"1536:/xUpXlU1At+HWTcPKoVMurh6AiRuA7O8vGwYjT9cisc/tz0bl1:eXCIgrHL8vGwYN5tz0bL","tlshash":"53b3e8dcb296b47113eb20b1417f150bf33a6915a80ac590f223e4d67db8c8e916be7d","first_seen":"2023-12-27T12:14:10Z","last_seen":"2026-06-13T08:21:09.6147Z","times_seen":2044,"resource_available":true,"data":null}},"time_used":46,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":43,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"f-module-pc10.ivtfxip.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.ivtfxip.com/api/app/language/dict","fqdn":"api.ivtfxip.com","domain":"ivtfxip.com","tld":"com"},"ip":{"addr":"104.21.78.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ivtfxip.com/pc/","date":"2026-01-04T14:57:02.490Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.ivtfxip.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 25 Dec 2025 22:40:43 GMT","end":"Wed, 25 Mar 2026 23:40:41 GMT"},"fingerprint":{"sha1":"D1:71:A2:C4:12:9D:CD:50:E5:B5:2D:A0:DB:0A:A0:3E:34:E8:FC:96","sha256":"F4:93:8B:FD:69:F9:AF:4F:CA:47:BC:51:06:9A:1E:76:FD:94:50:77:F6:22:8E:6E:51:5C:40:DA:2A:C7:4B:B6"}}},"request":{"raw":"POST /api/app/language/dict HTTP/1.1\r\nHost: api.ivtfxip.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ivtfxip.com/\r\nContent-Type: application/json;charset=UTF-8\r\naws-check: true\r\nX-Requested-With: XMLHttpRequest\r\napp_language: English\r\napp_version: P2.9.3\r\napp_client_timezone: +8\r\nrequest_domain: https://ivtfxip.com/pc/#/\r\napp_analog: false\r\napp_model: f\r\napp_auth_by_token: \r\ntheme-mode: 2\r\nContent-Length: 29\r\nOrigin: https://ivtfxip.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":29,"data":"{\"key\":\"liquidityMiningNoun\"}"}},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 04 Jan 2026 14:57:02 GMT\r\ncontent-type: application/json\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=aVbCpq2riuQptL5%2B7kBTtXq4Uwct%2BzYYsqLB74ngweSCZKjrL5VzpJsQ1ZYn5gbcZwg3bvW480P2Z5QkOhM0mLjSgZCoo4phLoRR0jXD3g%3D%3D\"}]}\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: https://ivtfxip.com\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 86400\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 9b8b96064abcb1b8-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":59,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"9c2f820634d4f7804bff9473e1075d96","sha1":"797e965053c4474e3d577561ccc5cfc7db3e85e3","sha256":"7929171477295ed05b0ddd10eace22051c46cecffdc3a9780c1d763302984108","sha512":"b6950b8a0f3fd45982168ca8ea9644960eb1b7a447f042a6257bdef2b265bfa0688eb7ec8581f614756a778264a02aa3ed327de7a9b465f48ef809c706320a5e","ssdeep":"","tlshash":"60a002c018ec00b14f808384101f192148bda4d519290100576cd82652f40713614726","first_seen":"2025-04-07T10:36:29.519274Z","last_seen":"2026-06-10T03:07:08.799026Z","times_seen":1173,"resource_available":false,"data":null}},"time_used":199,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":199,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"api.ivtfxip.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ivtfxip.com/pc/static/img/footer-bg.74af97b9.jpg","fqdn":"ivtfxip.com","domain":"ivtfxip.com","tld":"com"},"ip":{"addr":"104.21.78.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ivtfxip.com/pc/","date":"2026-01-04T14:57:02.747Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ivtfxip.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 25 Dec 2025 22:47:06 GMT","end":"Wed, 25 Mar 2026 23:47:02 GMT"},"fingerprint":{"sha1":"A2:E6:E0:E1:3D:71:15:E7:6A:95:1C:EC:53:3E:E4:AC:2E:D2:14:88","sha256":"EA:63:A1:B5:51:F9:8A:2E:D6:72:A0:97:14:88:41:61:B9:B7:97:70:CB:73:D8:93:0E:BF:F1:D0:C9:0A:B5:89"}}},"request":{"raw":"GET /pc/static/img/footer-bg.74af97b9.jpg HTTP/1.1\r\nHost: ivtfxip.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ivtfxip.com/pc/static/css/app~f71cff67.78767e4f.css\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 17060\r\npriority: u=4,i=?0\r\ncontent-type: image/jpeg\r\ncf-cache-status: MISS\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"276b6c0e92e414f9831f1ce4dc76d01f\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dI%2B6K2Vt8yXkzmFfrnfzxiV1i%2F%2FavzB%2BYCWvYn2O0nO73zXL5%2F9b3sbGiqXs3bMmfR3T2j4ROG%2FJYTJERJdmfy7jeIdKysbnBg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\naccept-ranges: bytes\r\ndate: Sun, 04 Jan 2026 14:57:02 GMT\r\ncf-ray: 9b8b96082aac35a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":17060,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 1920x602, components 3","md5":"74af97b999ec93ac3f77c0c595d7def7","sha1":"ee3c3b9332c24c52223d9ca16506d33c5616af06","sha256":"0fa375dadcdd827c10fd14a5cf5252b775d88145d1eefa83a381d7e016c9df3d","sha512":"02d2ab3139212ec916d88ccb3a40009d1a136ed93699d39a5c83853b14d46fbd8f7a7886132f859c273156c36348fa9bd3c447b1d7a164d44e16653681eacd62","ssdeep":"192:4YNMtKwEKpfm0UQbsvWnqwMJY8FPsvzGw/uO9yPd/vJEdZ/G4QF1NZwLGpUzLuds:4YNg7TPwYcPsvzGZOWR4Z/p4NUvuds","tlshash":"b0728b6baf21cc02c4d1a63810d7f3653faa1a74eb575095a2d52e26b0f73e1de1d241","first_seen":"2025-05-06T14:56:29.662566Z","last_seen":"2026-05-20T20:17:42.887557Z","times_seen":39,"resource_available":false,"data":null}},"time_used":81,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":80,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"ivtfxip.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"f-module-pc10.ivtfxip.com/f-module-pc10-3/assets/js/vue-i18n.js","fqdn":"f-module-pc10.ivtfxip.com","domain":"ivtfxip.com","tld":"com"},"ip":{"addr":"104.21.78.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://f-module-pc10.ivtfxip.com/f-module-pc10-3/?moduleName=f-module-pc10-3","date":"2026-01-04T14:57:04.500Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"f-module-pc10.ivtfxip.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 25 Dec 2025 22:43:25 GMT","end":"Wed, 25 Mar 2026 23:43:19 GMT"},"fingerprint":{"sha1":"BD:75:C7:0C:CF:4C:8B:C6:F0:02:2E:9D:B3:1B:50:54:C3:72:BE:D9","sha256":"19:4F:8E:B1:B5:41:99:3C:AC:F4:8B:36:B6:A9:44:7E:9A:11:1B:8C:E9:7F:5B:40:32:92:FF:44:8F:66:46:C3"}}},"request":{"raw":"GET /f-module-pc10-3/assets/js/vue-i18n.js HTTP/1.1\r\nHost: f-module-pc10.ivtfxip.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://f-module-pc10.ivtfxip.com/f-module-pc10-3/?moduleName=f-module-pc10-3\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 04 Jan 2026 14:57:04 GMT\r\npriority: u=2,i=?0\r\ncontent-type: application/javascript\r\ncf-cache-status: MISS\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4husyi2N%2FpT0uNSV8h4P%2BMoIa2ZmaeoLSbgAGfopkqEJX7yJzS9L5kyGdBPyhZgPh8Bd1x1AKKjuWqWGlpAksYjqbvidmkSx35y3m4xEeWtWUKXK9HWHmKg%3D\"}]}\r\netag: W/\"3700d27749ed41faa6359246f6035193\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9b8b9612f9d70731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":51091,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (486)","md5":"de3dcd16bbced832586e79816170a34d","sha1":"fe6df311601c6c133eef5189d66408022d7b39d1","sha256":"0519be799e6c779f84b167be27a7fda41add0d748e7a89f72cba3e8dcb1abd0d","sha512":"a84c28308be595e34184e6c990025cfdb213132344ff9b523b877bbd66d754e756979dda74d4c2775ad3c0405824fe8e029a14b9e4d96c6590db531e72d05a79","ssdeep":"1536:VzcGwVRclFaeA02I5K8CMKK2IPbKf4hT3Adai3K3D3QdaS3Kg:DwV5ZK2IPbKf4q","tlshash":"46331e49adf32052591372fe4faf6045b5388027214dce09b89ea3a45f55f2c93fabd8","first_seen":"2025-05-06T14:56:29.60368Z","last_seen":"2026-05-10T22:50:28.04562Z","times_seen":38,"resource_available":true,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"f-module-pc10.ivtfxip.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"f-module-pc10.ivtfxip.com/f-module-pc10-5/assets/js/vue-i18n.js","fqdn":"f-module-pc10.ivtfxip.com","domain":"ivtfxip.com","tld":"com"},"ip":{"addr":"104.21.78.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://f-module-pc10.ivtfxip.com/f-module-pc10-5/?moduleName=f-module-pc10-5","date":"2026-01-04T14:57:04.596Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"f-module-pc10.ivtfxip.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 25 Dec 2025 22:43:25 GMT","end":"Wed, 25 Mar 2026 23:43:19 GMT"},"fingerprint":{"sha1":"BD:75:C7:0C:CF:4C:8B:C6:F0:02:2E:9D:B3:1B:50:54:C3:72:BE:D9","sha256":"19:4F:8E:B1:B5:41:99:3C:AC:F4:8B:36:B6:A9:44:7E:9A:11:1B:8C:E9:7F:5B:40:32:92:FF:44:8F:66:46:C3"}}},"request":{"raw":"GET /f-module-pc10-5/assets/js/vue-i18n.js HTTP/1.1\r\nHost: f-module-pc10.ivtfxip.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://f-module-pc10.ivtfxip.com/f-module-pc10-5/?moduleName=f-module-pc10-5\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 04 Jan 2026 14:57:04 GMT\r\npriority: u=2,i=?0\r\ncontent-type: application/javascript\r\ncf-cache-status: MISS\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TJWmizK%2FFtfeejOtvKyIRjhTTDx7Ii%2FWQj%2BIMdC%2F3NtOjNdOBJdyDIAgbPF%2Be1No8grBdF5M%2Bqx1FuKo%2Fzj%2FMrV2qcxzVQzQUACqjepYG25xfbPnvJHK\"}]}\r\netag: W/\"3700d27749ed41faa6359246f6035193\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9b8b961359ef0731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":51091,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (486)","md5":"de3dcd16bbced832586e79816170a34d","sha1":"fe6df311601c6c133eef5189d66408022d7b39d1","sha256":"0519be799e6c779f84b167be27a7fda41add0d748e7a89f72cba3e8dcb1abd0d","sha512":"a84c28308be595e34184e6c990025cfdb213132344ff9b523b877bbd66d754e756979dda74d4c2775ad3c0405824fe8e029a14b9e4d96c6590db531e72d05a79","ssdeep":"1536:VzcGwVRclFaeA02I5K8CMKK2IPbKf4hT3Adai3K3D3QdaS3Kg:DwV5ZK2IPbKf4q","tlshash":"46331e49adf32052591372fe4faf6045b5388027214dce09b89ea3a45f55f2c93fabd8","first_seen":"2025-05-06T14:56:29.60368Z","last_seen":"2026-05-10T22:50:28.04562Z","times_seen":38,"resource_available":true,"data":null}},"time_used":42,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":39,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"f-module-pc10.ivtfxip.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.ivtfxip.com/api/app/language","fqdn":"api.ivtfxip.com","domain":"ivtfxip.com","tld":"com"},"ip":{"addr":"104.21.78.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ivtfxip.com/pc/","date":"2026-01-04T14:57:02.625Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.ivtfxip.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 25 Dec 2025 22:40:43 GMT","end":"Wed, 25 Mar 2026 23:40:41 GMT"},"fingerprint":{"sha1":"D1:71:A2:C4:12:9D:CD:50:E5:B5:2D:A0:DB:0A:A0:3E:34:E8:FC:96","sha256":"F4:93:8B:FD:69:F9:AF:4F:CA:47:BC:51:06:9A:1E:76:FD:94:50:77:F6:22:8E:6E:51:5C:40:DA:2A:C7:4B:B6"}}},"request":{"raw":"POST /api/app/language HTTP/1.1\r\nHost: api.ivtfxip.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ivtfxip.com/\r\nContent-Type: application/json;charset=UTF-8\r\naws-check: true\r\nX-Requested-With: XMLHttpRequest\r\napp_language: English\r\napp_version: P2.9.3\r\napp_client_timezone: +8\r\nrequest_domain: https://ivtfxip.com/pc/#/\r\napp_analog: false\r\napp_model: f\r\napp_auth_by_token: \r\ntheme-mode: 2\r\nOrigin: https://ivtfxip.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 04 Jan 2026 14:57:02 GMT\r\ncontent-type: application/json\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HelBEE2qi9DUn7lLB9YBc9SEHQBgvMLqZNZbztn6ATKx1Bhg6mLTOCD%2BWzJoEc0kuTH%2BBYE%2F16cdV5oJc0u25SDxp71OOH%2Bd96FuJNNA1A%3D%3D\"}]}\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: https://ivtfxip.com\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 86400\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 9b8b96066af8b1b8-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":270,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"c0ddfa63092c8f290792f90e30b4849d","sha1":"6c3df2ae6e785ddcb52eb9020e4bc60dd10eb77a","sha256":"eff9f966e1f1c56bde8c073b5aff6c3066e4bf1e8f7f39b0c2b414f3b1958237","sha512":"f90a98ddd35147a3af80b2cff8102860dbf46cf8467c0f2a25f7c6f8ef8783182745ea32ccfed88c6c562d28602cd73fb5020f2bebf71ecf9b4aba708be4f6db","ssdeep":"","tlshash":"e8d0c2cc20fd18fc2a846e19904b8d1927ed75eb309c4c852170c9a040c91202e22333","first_seen":"2025-04-08T11:47:58.752774Z","last_seen":"2026-04-10T23:45:47.504989Z","times_seen":38,"resource_available":false,"data":null}},"time_used":212,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":212,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"api.ivtfxip.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.ivtfxip.com/api/app/config","fqdn":"api.ivtfxip.com","domain":"ivtfxip.com","tld":"com"},"ip":{"addr":"104.21.78.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ivtfxip.com/pc/","date":"2026-01-04T14:57:02.703Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.ivtfxip.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 25 Dec 2025 22:40:43 GMT","end":"Wed, 25 Mar 2026 23:40:41 GMT"},"fingerprint":{"sha1":"D1:71:A2:C4:12:9D:CD:50:E5:B5:2D:A0:DB:0A:A0:3E:34:E8:FC:96","sha256":"F4:93:8B:FD:69:F9:AF:4F:CA:47:BC:51:06:9A:1E:76:FD:94:50:77:F6:22:8E:6E:51:5C:40:DA:2A:C7:4B:B6"}}},"request":{"raw":"POST /api/app/config HTTP/1.1\r\nHost: api.ivtfxip.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ivtfxip.com/\r\nContent-Type: application/json;charset=UTF-8\r\naws-check: true\r\nX-Requested-With: XMLHttpRequest\r\napp_language: English\r\napp_version: P2.9.3\r\napp_client_timezone: +8\r\nrequest_domain: https://ivtfxip.com/pc/#/\r\napp_analog: false\r\napp_model: f\r\napp_auth_by_token: \r\ntheme-mode: 2\r\nOrigin: https://ivtfxip.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 04 Jan 2026 14:57:03 GMT\r\ncontent-type: application/json\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UWwgHN0IHTG8FSQ8z4oPQHsjtPv0sX9md59zdEi35vtA8DbJk%2BgQNSbhKrp%2F0vdxjbhu%2BOpXsDvb34zUHNC2taRMEaZBhu4qilf7yyUwfw%3D%3D\"}]}\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: https://ivtfxip.com\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 86400\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 9b8b96073d83b1b8-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4587,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"fcc72d2c4103215e8dc881f4ab3a5f1f","sha1":"6d740d8638e1a41ecf2bd06b7562181f34b33155","sha256":"dfe5531e75d28bdbb4c69aed3daa27395e890a1475d456845e98e11a478cd9ee","sha512":"7fe3ce07db2f4c9c55e070c574d9b2088e69440fe99a4f46e29bd7754c159f49551596fa64aa1155bad1faa9c76dc6aadd147a1ad087bc22f9d83e4acb45455a","ssdeep":"96:j0/44gTcbzsOwWrzbnlEQkjUHTOtZHff8l0MXKmSYaNRHpLmr2Y:jUtgTcbXHZyAT2BHs0MXKbYyHpLmyY","tlshash":"d591b7292618057cdb520285b06b2f6acf7c46b3320d691ce29e4e1831e74ddd63a64f","first_seen":"2026-01-04T14:57:54.957993Z","last_seen":"2026-01-04T14:57:54.957993Z","times_seen":1,"resource_available":false,"data":null}},"time_used":429,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":429,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"api.ivtfxip.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.ivtfxip.com/api/app/basis/article/byType","fqdn":"api.ivtfxip.com","domain":"ivtfxip.com","tld":"com"},"ip":{"addr":"104.21.78.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ivtfxip.com/pc/","date":"2026-01-04T14:57:02.865Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.ivtfxip.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 25 Dec 2025 22:40:43 GMT","end":"Wed, 25 Mar 2026 23:40:41 GMT"},"fingerprint":{"sha1":"D1:71:A2:C4:12:9D:CD:50:E5:B5:2D:A0:DB:0A:A0:3E:34:E8:FC:96","sha256":"F4:93:8B:FD:69:F9:AF:4F:CA:47:BC:51:06:9A:1E:76:FD:94:50:77:F6:22:8E:6E:51:5C:40:DA:2A:C7:4B:B6"}}},"request":{"raw":"OPTIONS /api/app/basis/article/byType HTTP/1.1\r\nHost: api.ivtfxip.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: app_analog,app_auth_by_token,app_client_timezone,app_language,app_model,app_version,aws-check,content-type,request_domain,theme-mode,x-requested-with\r\nReferer: https://ivtfxip.com/\r\nOrigin: https://ivtfxip.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 04 Jan 2026 14:57:03 GMT\r\ncontent-length: 0\r\nserver: cloudflare\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ONfpnLgK8xCuAf4118uQ4SsU83Jhz%2BorETx51aHyXpW0yyB9HcPgI6cBBMkt8crx1qH9Po%2BQPvQAU2FDZ0iNdJD08KQvFHKqvO2vl8e5EQ%3D%3D\"}]}\r\naccess-control-allow-origin: https://ivtfxip.com\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: app_analog,app_auth_by_token,app_client_timezone,app_language,app_model,app_version,aws-check,content-type,request_domain,theme-mode,x-requested-with\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 86400\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nallow: GET, HEAD, POST, PUT, DELETE, TRACE, OPTIONS, PATCH\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b8b9608e9e2b1b8-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-13T16:33:36.180633Z","times_seen":16390792,"resource_available":true,"data":null}},"time_used":219,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":219,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"api.ivtfxip.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.ivtfxip.com/api/app/basis/article/byType","fqdn":"api.ivtfxip.com","domain":"ivtfxip.com","tld":"com"},"ip":{"addr":"104.21.78.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ivtfxip.com/pc/","date":"2026-01-04T14:57:03.322Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.ivtfxip.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 25 Dec 2025 22:40:43 GMT","end":"Wed, 25 Mar 2026 23:40:41 GMT"},"fingerprint":{"sha1":"D1:71:A2:C4:12:9D:CD:50:E5:B5:2D:A0:DB:0A:A0:3E:34:E8:FC:96","sha256":"F4:93:8B:FD:69:F9:AF:4F:CA:47:BC:51:06:9A:1E:76:FD:94:50:77:F6:22:8E:6E:51:5C:40:DA:2A:C7:4B:B6"}}},"request":{"raw":"POST /api/app/basis/article/byType HTTP/1.1\r\nHost: api.ivtfxip.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ivtfxip.com/\r\nContent-Type: application/json;charset=UTF-8\r\naws-check: true\r\nX-Requested-With: XMLHttpRequest\r\napp_language: English\r\napp_version: P2.9.3\r\napp_client_timezone: +8\r\nrequest_domain: https://ivtfxip.com/pc/#/\r\napp_analog: false\r\napp_model: f\r\napp_auth_by_token: \r\ntheme-mode: 2\r\nContent-Length: 11\r\nOrigin: https://ivtfxip.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":11,"data":"{\"type\":55}"}},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 04 Jan 2026 14:57:03 GMT\r\ncontent-type: application/json\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BU2LVVOO3i%2FpvM7AbLi%2FD44ri6yLHC7quShfJm9BEqVz4ismKUu9ztS%2BIYnqpQjYkuDQC1%2Bg%2FQEL2tjDCh97u3Dh1axRRHPXkfnyb5A%3D\"}]}\r\nvary: accept-encoding\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: https://ivtfxip.com\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 86400\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncf-ray: 9b8b960bb9d256c3-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":59,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"9c2f820634d4f7804bff9473e1075d96","sha1":"797e965053c4474e3d577561ccc5cfc7db3e85e3","sha256":"7929171477295ed05b0ddd10eace22051c46cecffdc3a9780c1d763302984108","sha512":"b6950b8a0f3fd45982168ca8ea9644960eb1b7a447f042a6257bdef2b265bfa0688eb7ec8581f614756a778264a02aa3ed327de7a9b465f48ef809c706320a5e","ssdeep":"","tlshash":"60a002c018ec00b14f808384101f192148bda4d519290100576cd82652f40713614726","first_seen":"2025-04-07T10:36:29.519274Z","last_seen":"2026-06-10T03:07:08.799026Z","times_seen":1173,"resource_available":false,"data":null}},"time_used":460,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":460,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"api.ivtfxip.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"f-module-pc10.ivtfxip.com/f-module-pc10-6/?moduleName=f-module-pc10-6","fqdn":"f-module-pc10.ivtfxip.com","domain":"ivtfxip.com","tld":"com"},"ip":{"addr":"104.21.78.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://ivtfxip.com/pc/","date":"2026-01-04T14:57:03.903Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"f-module-pc10.ivtfxip.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 25 Dec 2025 22:43:25 GMT","end":"Wed, 25 Mar 2026 23:43:19 GMT"},"fingerprint":{"sha1":"BD:75:C7:0C:CF:4C:8B:C6:F0:02:2E:9D:B3:1B:50:54:C3:72:BE:D9","sha256":"19:4F:8E:B1:B5:41:99:3C:AC:F4:8B:36:B6:A9:44:7E:9A:11:1B:8C:E9:7F:5B:40:32:92:FF:44:8F:66:46:C3"}}},"request":{"raw":"GET /f-module-pc10-6/?moduleName=f-module-pc10-6 HTTP/1.1\r\nHost: f-module-pc10.ivtfxip.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ivtfxip.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 04 Jan 2026 14:57:04 GMT\r\ncontent-type: text/html; charset=utf-8\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=66HPWwsErKYwv7NYRUx6uJiZdXtHLJTdzQEYa1hlra407urlEhDqXMCrS3hZUT%2BKruqFbY%2B03INXod6ejXTZs3R9gUyh0Npu5eayjQOFO6R5X4GIExXK\"}]}\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\ncontent-encoding: br\r\ncf-ray: 9b8b960fdb055688-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4819,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"70bde095b07215e4c3ee8956b26f042b","sha1":"6ae929e10476155a430de0649a1e2a2d7f8360b5","sha256":"7e4c5b8e13b84aeddfb8aa732237c7795a0f899a97f6530b53f058c7754c2577","sha512":"521cc84948c6c2f463025329a1ffb61351e1189f6cbc3d79f1e6aaefe4d26f39aa6c8ad265e818203af16bacc34789f65b53072934e80c6c9ab6c67e02b56d66","ssdeep":"48:x9rou6PaF+yvxu5eK+bMtmjutjoJWWQqca99od4KYrH6ilhtYVmBqgI:xSusGyefm09oyRz6ivk8qgI","tlshash":"25a1031d29f10027008391967fa7760a3ed1a94b9d1f9e143ead07e05fc5e9ddca3724","first_seen":"2026-01-04T14:57:54.959382Z","last_seen":"2026-01-04T14:57:54.959382Z","times_seen":1,"resource_available":false,"data":null}},"time_used":377,"timings":{"blocked":72,"dns":2,"connect":11,"send":0,"wait":224,"receive":0,"ssl":53},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"f-module-pc10.ivtfxip.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"f-module-pc10.ivtfxip.com/f-module-pc10-1/assets/style/style.min.css","fqdn":"f-module-pc10.ivtfxip.com","domain":"ivtfxip.com","tld":"com"},"ip":{"addr":"104.21.78.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://f-module-pc10.ivtfxip.com/f-module-pc10-1/?moduleName=f-module-pc10-1","date":"2026-01-04T14:57:04.448Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"f-module-pc10.ivtfxip.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 25 Dec 2025 22:43:25 GMT","end":"Wed, 25 Mar 2026 23:43:19 GMT"},"fingerprint":{"sha1":"BD:75:C7:0C:CF:4C:8B:C6:F0:02:2E:9D:B3:1B:50:54:C3:72:BE:D9","sha256":"19:4F:8E:B1:B5:41:99:3C:AC:F4:8B:36:B6:A9:44:7E:9A:11:1B:8C:E9:7F:5B:40:32:92:FF:44:8F:66:46:C3"}}},"request":{"raw":"GET /f-module-pc10-1/assets/style/style.min.css HTTP/1.1\r\nHost: f-module-pc10.ivtfxip.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://f-module-pc10.ivtfxip.com/f-module-pc10-1/?moduleName=f-module-pc10-1\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 04 Jan 2026 14:57:04 GMT\r\npriority: u=2,i=?0\r\ncontent-type: text/css; charset=utf-8\r\ncf-cache-status: MISS\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=c5Tkh05jk9ZzdiI0urPQTtCOzuC9ds8HLJYkBR9eufrwrpsMHp6fxuHzOzqm4t2d9zZeESwviHtTqwCfT%2BMtd8My19UJnUfPLPqa14kVxiwxMO0yJsAp\"}]}\r\netag: W/\"bc5277aa3f870c0beef5a5a6c83506b8\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9b8b9612b9c30731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1787,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (1786)","md5":"8d46162c9348e801a19fbb232b4f5e3a","sha1":"5224bc21e08dbed5e8fc8b9fbe857f180cdeab3a","sha256":"75b818d2705c16ce17959dc67fbdd58a768a21cdae193b6b554bf7cc1981b5f7","sha512":"475116268cf2d6a236749a7a4a7dee53a172d202a70189b2bb4445e036373a9109e36968469b005ae2318bf849b570b7a2e9529eaa09c23868551e2c425cf473","ssdeep":"","tlshash":"d131002306b22f2cd14fd84b3688a64b760681f2e2535bdcea636b6dd7cf1e30556247","first_seen":"2026-01-04T14:57:54.960598Z","last_seen":"2026-01-04T14:57:54.960598Z","times_seen":1,"resource_available":false,"data":null}},"time_used":80,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":80,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"f-module-pc10.ivtfxip.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ivtfxip.com/pc/static/js/app~06837ae4.955d0dfe.js","fqdn":"ivtfxip.com","domain":"ivtfxip.com","tld":"com"},"ip":{"addr":"104.21.78.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ivtfxip.com/pc/","date":"2026-01-04T14:57:00.553Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ivtfxip.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 25 Dec 2025 22:47:06 GMT","end":"Wed, 25 Mar 2026 23:47:02 GMT"},"fingerprint":{"sha1":"A2:E6:E0:E1:3D:71:15:E7:6A:95:1C:EC:53:3E:E4:AC:2E:D2:14:88","sha256":"EA:63:A1:B5:51:F9:8A:2E:D6:72:A0:97:14:88:41:61:B9:B7:97:70:CB:73:D8:93:0E:BF:F1:D0:C9:0A:B5:89"}}},"request":{"raw":"GET /pc/static/js/app~06837ae4.955d0dfe.js HTTP/1.1\r\nHost: ivtfxip.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ivtfxip.com/pc/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 04 Jan 2026 14:57:00 GMT\r\npriority: u=3,i=?0\r\ncontent-type: application/javascript\r\ncf-cache-status: MISS\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RkQEuqG3yOXu4xeEV2Fix0UZg7dM%2FrnXw2aeSHY%2BkeCNJyr31sOL2svuXwRPVq1dCWtG285T8VTEejNt72KGmqnrdBNWYOOeUtsV\"}]}\r\netag: W/\"04f0c9ddd50e37f32065205c4a766f65\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9b8b95fa5fce35a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":888241,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"a34d2cff5c45719f38803e5ec358b7e6","sha1":"6d1d3463ce7e02ccda4ff674b4fef5aa78c572b9","sha256":"d3747cd122a1b118a170ff86767425d7d294890b957e87fa9617470dc100a232","sha512":"5e88e162332dc7cfd055b887ec09a582d26d918b9c2dec987a0e198cd706f37d0c0d01770fa7e3a824ddbca3a3ef7de66b45148fe01f93c46f976b64743b744e","ssdeep":"12288:XC943yMQaTL7NvsXSr7h/0YATkwARZNt+dl3/YCUTWFXyWNVWm/j2cHi4hX4mDvC:Xvi1apioLircNt+P3ySXye0mhv9D6","tlshash":"1a15013b30573d8549a58df8f01bad0a6ce2580fe49c5042aa9c5fd6eceeb14274b4ed","first_seen":"2026-01-04T14:57:54.961927Z","last_seen":"2026-04-13T23:57:13.942661Z","times_seen":3,"resource_available":false,"data":null}},"time_used":239,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":223,"receive":16,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"ivtfxip.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ivtfxip.com/pc/static/js/npm.echarts~2119ef82.fa75221f.js","fqdn":"ivtfxip.com","domain":"ivtfxip.com","tld":"com"},"ip":{"addr":"104.21.78.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ivtfxip.com/pc/","date":"2026-01-04T14:57:00.578Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ivtfxip.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 25 Dec 2025 22:47:06 GMT","end":"Wed, 25 Mar 2026 23:47:02 GMT"},"fingerprint":{"sha1":"A2:E6:E0:E1:3D:71:15:E7:6A:95:1C:EC:53:3E:E4:AC:2E:D2:14:88","sha256":"EA:63:A1:B5:51:F9:8A:2E:D6:72:A0:97:14:88:41:61:B9:B7:97:70:CB:73:D8:93:0E:BF:F1:D0:C9:0A:B5:89"}}},"request":{"raw":"GET /pc/static/js/npm.echarts~2119ef82.fa75221f.js HTTP/1.1\r\nHost: ivtfxip.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ivtfxip.com/pc/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 04 Jan 2026 14:57:00 GMT\r\npriority: u=3,i=?0\r\ncontent-type: application/javascript\r\ncf-cache-status: MISS\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=K0UVrdYlngWUi8bsgbCpN4xnXpN5OqEuqmzTwzQAtKwbdvI6zhSabSBOkeL75QenvMWrvuBgX98oT1tyRiCapR1X1upU7ZFv6nNN\"}]}\r\netag: W/\"4fa83c4549165bca265798cc23d14671\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9b8b95fa6fe035a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":257654,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65534), with no line terminators","md5":"c230e516390ca2b75fc9857bde2e2aef","sha1":"23ee568fd61235120353720b2ab8d87ed8eced0e","sha256":"798a9e200eaa8ff8b1b436874918dc6072895d270e6d15d11ae61a2e71b9567f","sha512":"0ea6f29cc826dc6e0b434f81a2435c89ce07bb3654b95d79756d36fd484e43ff1888ee90f2098cc23cc9c6a88de6fe283b795c9a83305d9fc1a66b4498491062","ssdeep":"3072:G0fv/x6+g3OhFfqbTUHKFbcHZb2hrlJazcExdnY:NfBM+hFyl9cHZb2FCdnY","tlshash":"8344f8ac7644f01142a332a5446f540f9236681db50fd938be5ad8daa8fd48b333bf79","first_seen":"2025-04-19T14:49:36.346912Z","last_seen":"2026-05-20T20:17:42.858048Z","times_seen":47,"resource_available":true,"data":null}},"time_used":82,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":77,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"ivtfxip.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.ivtfxip.com/api/app/language/dict","fqdn":"api.ivtfxip.com","domain":"ivtfxip.com","tld":"com"},"ip":{"addr":"104.21.78.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ivtfxip.com/pc/","date":"2026-01-04T14:57:02.701Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.ivtfxip.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 25 Dec 2025 22:40:43 GMT","end":"Wed, 25 Mar 2026 23:40:41 GMT"},"fingerprint":{"sha1":"D1:71:A2:C4:12:9D:CD:50:E5:B5:2D:A0:DB:0A:A0:3E:34:E8:FC:96","sha256":"F4:93:8B:FD:69:F9:AF:4F:CA:47:BC:51:06:9A:1E:76:FD:94:50:77:F6:22:8E:6E:51:5C:40:DA:2A:C7:4B:B6"}}},"request":{"raw":"POST /api/app/language/dict HTTP/1.1\r\nHost: api.ivtfxip.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ivtfxip.com/\r\nContent-Type: application/json;charset=UTF-8\r\naws-check: true\r\nX-Requested-With: XMLHttpRequest\r\napp_language: English\r\napp_version: P2.9.3\r\napp_client_timezone: +8\r\nrequest_domain: https://ivtfxip.com/pc/#/\r\napp_analog: false\r\napp_model: f\r\napp_auth_by_token: \r\ntheme-mode: 2\r\nContent-Length: 39\r\nOrigin: https://ivtfxip.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":39,"data":"{\"key\":\"assetPageFreezeChangesPending\"}"}},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 04 Jan 2026 14:57:02 GMT\r\ncontent-type: application/json\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=aJ%2Fkotxpyqvl4c1RMdNsNAa77mu10Xn7fYK9YzNvFHAM5rl9WYOanVjgtJ2Wuoi0PhxRC9xn%2FOxFqh6ILORvf9%2FYVi%2BKfdxPjxYtA3a2Zw%3D%3D\"}]}\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: https://ivtfxip.com\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 86400\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 9b8b96070d04b1b8-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":59,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"9c2f820634d4f7804bff9473e1075d96","sha1":"797e965053c4474e3d577561ccc5cfc7db3e85e3","sha256":"7929171477295ed05b0ddd10eace22051c46cecffdc3a9780c1d763302984108","sha512":"b6950b8a0f3fd45982168ca8ea9644960eb1b7a447f042a6257bdef2b265bfa0688eb7ec8581f614756a778264a02aa3ed327de7a9b465f48ef809c706320a5e","ssdeep":"","tlshash":"60a002c018ec00b14f808384101f192148bda4d519290100576cd82652f40713614726","first_seen":"2025-04-07T10:36:29.519274Z","last_seen":"2026-06-10T03:07:08.799026Z","times_seen":1173,"resource_available":false,"data":null}},"time_used":214,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":214,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"api.ivtfxip.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"f-module-pc10.ivtfxip.com/f-module-pc10-6/assets/js/vue@2.7.16.js","fqdn":"f-module-pc10.ivtfxip.com","domain":"ivtfxip.com","tld":"com"},"ip":{"addr":"104.21.78.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://f-module-pc10.ivtfxip.com/f-module-pc10-6/?moduleName=f-module-pc10-6","date":"2026-01-04T14:57:04.471Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"f-module-pc10.ivtfxip.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 25 Dec 2025 22:43:25 GMT","end":"Wed, 25 Mar 2026 23:43:19 GMT"},"fingerprint":{"sha1":"BD:75:C7:0C:CF:4C:8B:C6:F0:02:2E:9D:B3:1B:50:54:C3:72:BE:D9","sha256":"19:4F:8E:B1:B5:41:99:3C:AC:F4:8B:36:B6:A9:44:7E:9A:11:1B:8C:E9:7F:5B:40:32:92:FF:44:8F:66:46:C3"}}},"request":{"raw":"GET /f-module-pc10-6/assets/js/vue@2.7.16.js HTTP/1.1\r\nHost: f-module-pc10.ivtfxip.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://f-module-pc10.ivtfxip.com/f-module-pc10-6/?moduleName=f-module-pc10-6\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 04 Jan 2026 14:57:04 GMT\r\npriority: u=2,i=?0\r\ncontent-type: application/javascript\r\ncf-cache-status: MISS\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sdi8ugGDaZjgMU2zns%2FQuKBLX6mzfL%2FEr3MZ%2BacPsxwQGDDVrwSBX6rA10yHU0TyVEY8tB62AdL9%2FBLHNgeejHlnGHswHo7uybgTpKBiuilu%2BuWs%2BLt4\"}]}\r\netag: W/\"d32a2d073a37b5945a7495822ee7c821\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9b8b9612d9c90731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":107679,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65362)","md5":"8da91780fa9815752579efedb7b6ee03","sha1":"4525cbd167c96324016eaa2584703e2024e85c90","sha256":"3c1d4b0c549e8de9d4a9bafb12ab70b6a1ac747d07293b98c5b25b6632999afd","sha512":"5b1f278866cf3420fcee64ae174b01472b705b6fb6645afb1f054317c92b09bdde82cb42738a107e283efdc7e0d8e1ddf3629c525398c6548302a747a8ae530b","ssdeep":"1536:/xUpXlU1At+HWTcPKoVMurh6AiRuA7O8vGwYjT9cisc/tz0bl1:eXCIgrHL8vGwYN5tz0bL","tlshash":"53b3e8dcb296b47113eb20b1417f150bf33a6915a80ac590f223e4d67db8c8e916be7d","first_seen":"2023-12-27T12:14:10Z","last_seen":"2026-06-13T08:21:09.6147Z","times_seen":2044,"resource_available":true,"data":null}},"time_used":67,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":63,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"f-module-pc10.ivtfxip.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"f-module-pc10.ivtfxip.com/f-module-pc10-5/assets/js/element-ui.js","fqdn":"f-module-pc10.ivtfxip.com","domain":"ivtfxip.com","tld":"com"},"ip":{"addr":"104.21.78.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://f-module-pc10.ivtfxip.com/f-module-pc10-5/?moduleName=f-module-pc10-5","date":"2026-01-04T14:57:04.598Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"f-module-pc10.ivtfxip.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 25 Dec 2025 22:43:25 GMT","end":"Wed, 25 Mar 2026 23:43:19 GMT"},"fingerprint":{"sha1":"BD:75:C7:0C:CF:4C:8B:C6:F0:02:2E:9D:B3:1B:50:54:C3:72:BE:D9","sha256":"19:4F:8E:B1:B5:41:99:3C:AC:F4:8B:36:B6:A9:44:7E:9A:11:1B:8C:E9:7F:5B:40:32:92:FF:44:8F:66:46:C3"}}},"request":{"raw":"GET /f-module-pc10-5/assets/js/element-ui.js HTTP/1.1\r\nHost: f-module-pc10.ivtfxip.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://f-module-pc10.ivtfxip.com/f-module-pc10-5/?moduleName=f-module-pc10-5\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 04 Jan 2026 14:57:04 GMT\r\npriority: u=2,i=?0\r\ncontent-type: application/javascript\r\ncf-cache-status: MISS\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5OxGKr8lHaUf7Sx5pPg9dt45RxRsIK11ykUHZFbXgfVdhLmnL1n8UtQ8lUCsVldpOGmEKPGLz6ztM98f5syw%2FdWlr7Nf0D7mnFbtDLjOry3PlJmm%2FiYp\"}]}\r\netag: W/\"d7dad5eb31c2ff0c23cd1c94667f1e2c\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9b8b961359f30731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":664912,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65336), with no line terminators","md5":"871ab253bcff550f462f866dbdef7465","sha1":"616b57088730b5322c12649d31d620afd3abc8e6","sha256":"89d3c55e8fa03f177b1cc3824aede7c94b2ce4143f6a30f54ebb96e20eb42bc2","sha512":"45d91bcef6b33e603fef096e9e21efeaa30cab43423d8b5a98911f98da8d9b2e9a7654a9f479444a9bbd8dc4ca4968d5e7a64abee42fa88023c676d75856131d","ssdeep":"6144:BSqtkdlBC7d1xSBiwzlPQa/R6rvnGehHjcFFFw9/8CslIvi/x1:Wm7d1xSBnzlPQa/ofxhHwHFt/x1","tlshash":"e9e4098d72c1b53147a36071103f250bb33b2a9ca809809cb679d5ea6dbda0d526ff7d","first_seen":"2023-09-27T20:28:23Z","last_seen":"2026-06-08T02:28:42.770668Z","times_seen":2934,"resource_available":true,"data":null}},"time_used":200,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":158,"receive":42,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"f-module-pc10.ivtfxip.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"f-module-pc10.ivtfxip.com/f-module-pc10-6/assets/images/bg.jpg","fqdn":"f-module-pc10.ivtfxip.com","domain":"ivtfxip.com","tld":"com"},"ip":{"addr":"104.21.78.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://f-module-pc10.ivtfxip.com/f-module-pc10-6/?moduleName=f-module-pc10-6","date":"2026-01-04T14:57:05.578Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"f-module-pc10.ivtfxip.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 25 Dec 2025 22:43:25 GMT","end":"Wed, 25 Mar 2026 23:43:19 GMT"},"fingerprint":{"sha1":"BD:75:C7:0C:CF:4C:8B:C6:F0:02:2E:9D:B3:1B:50:54:C3:72:BE:D9","sha256":"19:4F:8E:B1:B5:41:99:3C:AC:F4:8B:36:B6:A9:44:7E:9A:11:1B:8C:E9:7F:5B:40:32:92:FF:44:8F:66:46:C3"}}},"request":{"raw":"GET /f-module-pc10-6/assets/images/bg.jpg HTTP/1.1\r\nHost: f-module-pc10.ivtfxip.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://f-module-pc10.ivtfxip.com/f-module-pc10-6/assets/style/style.min.css\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 123928\r\npriority: u=4,i=?0\r\ncontent-type: image/jpeg\r\ncf-cache-status: MISS\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"ad17992746a6aa97281c88e8b8830cef\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CVbIa0D1LeSBK5FP6GImcRN9d4EkA5J6h0hnjLcZKJ2qOGhrJqulFmKk0IVG7294ABGj9dS8MqX5s3wD4mE9oCKdFARw9sngZs9Ttxq99nvMvely%2BwESwnY%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\naccept-ranges: bytes\r\ndate: Sun, 04 Jan 2026 14:57:05 GMT\r\ncf-ray: 9b8b9619daf20731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":123928,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=12, height=650, bps=0, PhotometricInterpretation=RGB, orientation=upper-left, width=1355], progressive, precision 8, 1355x650, components 3","md5":"275807dce02fecda13bfdfdef93bc7a4","sha1":"06b4b77466dc92ebe9037cbe7109c4dea2eb4362","sha256":"822de45ba619d69150c9329c60c721c7907a86006b038ad72c61037dbbcacbf0","sha512":"578790b6d6f7470c795413debcbf4e9ee2703cb58b11f7429422d1c3e9c315e2811d95563a59273faff9ddd21a64cf15e14c9e94ed10f1378f5944594d7804b6","ssdeep":"3072:SVW1Q6QBfm1zxgtbB25gR0C9F+igMmD+Or9SBZ03g:7xQBfyitN/GdiOXSB2g","tlshash":"97c3023ac30adda1f1c4603a50caeebda904998cd3679f56709d2fc57b347325e4829e","first_seen":"2026-01-04T14:57:54.964022Z","last_seen":"2026-01-04T14:57:54.964022Z","times_seen":1,"resource_available":false,"data":null}},"time_used":114,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":101,"receive":13,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"f-module-pc10.ivtfxip.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"f-module-pc10.ivtfxip.com/f-module-pc10-4/?moduleName=f-module-pc10-4","fqdn":"f-module-pc10.ivtfxip.com","domain":"ivtfxip.com","tld":"com"},"ip":{"addr":"104.21.78.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://ivtfxip.com/pc/","date":"2026-01-04T14:57:03.900Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"f-module-pc10.ivtfxip.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 25 Dec 2025 22:43:25 GMT","end":"Wed, 25 Mar 2026 23:43:19 GMT"},"fingerprint":{"sha1":"BD:75:C7:0C:CF:4C:8B:C6:F0:02:2E:9D:B3:1B:50:54:C3:72:BE:D9","sha256":"19:4F:8E:B1:B5:41:99:3C:AC:F4:8B:36:B6:A9:44:7E:9A:11:1B:8C:E9:7F:5B:40:32:92:FF:44:8F:66:46:C3"}}},"request":{"raw":"GET /f-module-pc10-4/?moduleName=f-module-pc10-4 HTTP/1.1\r\nHost: f-module-pc10.ivtfxip.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ivtfxip.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 04 Jan 2026 14:57:04 GMT\r\ncontent-type: text/html; charset=utf-8\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1zal7LGNWeYfGvkUX4dXf8S8TLjPJdH902usXB4E9o7%2Fc29f3ixCpC9qyjspbemJX6ef%2BBBWzwo5SKTaQKce%2B%2FdCBW%2FTpXQ5%2FV2IJaukjc0ZsIB%2BN6AK\"}]}\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\ncontent-encoding: br\r\ncf-ray: 9b8b960fcb015688-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4800,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"96e0d6d849af53344d98e9a30c673fb4","sha1":"b1502d4de66026e54768b207d79347fcbb823730","sha256":"72b62400881ab05a841febc27133b044e493dce8654bb35a0e71e7e6bd1554da","sha512":"893dda2428710bdf566f4d43331c5a7cbf779d526ae85265517e17c554829bb6aab2e2e07df47704ac1cf232544d865ac9bb0be89031490d3e404e08db0b58aa","ssdeep":"48:x9rou6PaF+yvxuIMZp7bqCY99od4KYrH6ilhtYVmEqgI:xSusGdQu9oyRz6ivkRqgI","tlshash":"1da1ce2854f204670083618a7f6b71463bc1fa8b991fdf047ead07e06f85e99dda3b64","first_seen":"2026-01-04T14:57:54.965401Z","last_seen":"2026-01-04T14:57:54.965401Z","times_seen":1,"resource_available":false,"data":null}},"time_used":371,"timings":{"blocked":70,"dns":1,"connect":11,"send":0,"wait":227,"receive":0,"ssl":53},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"f-module-pc10.ivtfxip.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.ivtfxip.com/api/app/config","fqdn":"api.ivtfxip.com","domain":"ivtfxip.com","tld":"com"},"ip":{"addr":"104.21.78.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ivtfxip.com/pc/","date":"2026-01-04T14:57:03.936Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.ivtfxip.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 25 Dec 2025 22:40:43 GMT","end":"Wed, 25 Mar 2026 23:40:41 GMT"},"fingerprint":{"sha1":"D1:71:A2:C4:12:9D:CD:50:E5:B5:2D:A0:DB:0A:A0:3E:34:E8:FC:96","sha256":"F4:93:8B:FD:69:F9:AF:4F:CA:47:BC:51:06:9A:1E:76:FD:94:50:77:F6:22:8E:6E:51:5C:40:DA:2A:C7:4B:B6"}}},"request":{"raw":"POST /api/app/config HTTP/1.1\r\nHost: api.ivtfxip.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ivtfxip.com/\r\nContent-Type: application/json;charset=UTF-8\r\naws-check: true\r\nX-Requested-With: XMLHttpRequest\r\napp_language: English\r\napp_version: P2.9.3\r\napp_client_timezone: +8\r\nrequest_domain: https://ivtfxip.com/pc/#/\r\napp_analog: false\r\napp_model: f\r\napp_auth_by_token: \r\ntheme-mode: 2\r\nOrigin: https://ivtfxip.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 04 Jan 2026 14:57:04 GMT\r\ncontent-type: application/json\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pFUaAYA9S2UD9fJKEefQZD8%2F8Vdkte3VsJ%2FAoLlTjZqx671%2FFm%2Bg9ZJERTsKVPcW1TQCs1dLgI80voYr6cv%2F9hhOzEKRiMZR395p0rs%3D\"}]}\r\nvary: accept-encoding\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: https://ivtfxip.com\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 86400\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncf-ray: 9b8b960faa0d56c3-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4587,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"3107576ef465e34344bb6bacfef2208a","sha1":"60a1c0ba07d4b45d6cda41b267b3c87f8e69bbcc","sha256":"a5e99eb08d13f7d6f2b7c66ad4d157b6929906c77bf498eb7a3b6742126e047f","sha512":"9e4aa33ffd598dcd63eef3d31de5f945e7dde8e0726d2d256956991b49111c1e77eef401fd07914a1cdb60b8e02c336da7a4dbdd63703268ae9466a52c3270f9","ssdeep":"96:j0/44gTcbzYOwWrzbnlEQkjUHTOtZHff8l0MXKmSYaNRHpLmr2Y:jUtgTcbTHZyAT2BHs0MXKbYyHpLmyY","tlshash":"0591b7292618057cdb520685b06b2f6acf7c46b3320d691ce29e4e1831e74ddd63a64f","first_seen":"2026-01-04T14:57:54.966606Z","last_seen":"2026-01-04T14:57:54.966606Z","times_seen":1,"resource_available":false,"data":null}},"time_used":222,"timings":{"blocked":8,"dns":0,"connect":0,"send":0,"wait":212,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"api.ivtfxip.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"f-module-pc10.ivtfxip.com/f-module-pc10-1/assets/js/element-ui.css","fqdn":"f-module-pc10.ivtfxip.com","domain":"ivtfxip.com","tld":"com"},"ip":{"addr":"104.21.78.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://f-module-pc10.ivtfxip.com/f-module-pc10-1/?moduleName=f-module-pc10-1","date":"2026-01-04T14:57:04.445Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"f-module-pc10.ivtfxip.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 25 Dec 2025 22:43:25 GMT","end":"Wed, 25 Mar 2026 23:43:19 GMT"},"fingerprint":{"sha1":"BD:75:C7:0C:CF:4C:8B:C6:F0:02:2E:9D:B3:1B:50:54:C3:72:BE:D9","sha256":"19:4F:8E:B1:B5:41:99:3C:AC:F4:8B:36:B6:A9:44:7E:9A:11:1B:8C:E9:7F:5B:40:32:92:FF:44:8F:66:46:C3"}}},"request":{"raw":"GET /f-module-pc10-1/assets/js/element-ui.css HTTP/1.1\r\nHost: f-module-pc10.ivtfxip.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://f-module-pc10.ivtfxip.com/f-module-pc10-1/?moduleName=f-module-pc10-1\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 04 Jan 2026 14:57:04 GMT\r\npriority: u=2,i=?0\r\ncontent-type: text/css; charset=utf-8\r\ncf-cache-status: MISS\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gprS9qwAnCLhRhLtRAtlORpDLPOfMgEIW5YlpgKTwsTqhgsJVX5qPNE2yo4VyOY4wpoqNxX5GhS9pmFa6Dc2nIUzfKBR00NwFbZSj7TvW9SemE86kNIk\"}]}\r\netag: W/\"632d3d97e401fbba7d150528ffec271f\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9b8b9612a9bf0731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":240033,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"07ced7e527d781115b5a9f3f3f559884","sha1":"371b1a3e8d3453a2451e76320d9d7c0e301331b8","sha256":"dc86d4797565d05e88d63598128328e2ed6f02f7f6d950a36a1c4ca9eb9c8057","sha512":"a19dda2047af06da26cb446e5a9184fbb87ef5db209368305f4636d5bf28bd29442d05b556540359dc41198218092ce706bf1a7b765e18b3c481c2edd068e10e","ssdeep":"1536:c28Y7SrW3YeWXA1u9w4HCe/l4TEg5fqMEeje378OaiZkW1YO8eQM+yFffwbIcfGc:lvHjahfAG1U2VGDt","tlshash":"b234a7219b03216b612bde6cb6c0ba895f18c323d4725bbbfe95740dc7d34891267a4f","first_seen":"2023-08-28T11:31:40Z","last_seen":"2026-06-13T01:56:53.17937Z","times_seen":1444,"resource_available":false,"data":null}},"time_used":60,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":51,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"f-module-pc10.ivtfxip.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"f-module-pc10.ivtfxip.com/f-module-pc10-3/assets/images/1.png","fqdn":"f-module-pc10.ivtfxip.com","domain":"ivtfxip.com","tld":"com"},"ip":{"addr":"104.21.78.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://f-module-pc10.ivtfxip.com/f-module-pc10-3/?moduleName=f-module-pc10-3","date":"2026-01-04T14:57:04.525Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"f-module-pc10.ivtfxip.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 25 Dec 2025 22:43:25 GMT","end":"Wed, 25 Mar 2026 23:43:19 GMT"},"fingerprint":{"sha1":"BD:75:C7:0C:CF:4C:8B:C6:F0:02:2E:9D:B3:1B:50:54:C3:72:BE:D9","sha256":"19:4F:8E:B1:B5:41:99:3C:AC:F4:8B:36:B6:A9:44:7E:9A:11:1B:8C:E9:7F:5B:40:32:92:FF:44:8F:66:46:C3"}}},"request":{"raw":"GET /f-module-pc10-3/assets/images/1.png HTTP/1.1\r\nHost: f-module-pc10.ivtfxip.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://f-module-pc10.ivtfxip.com/f-module-pc10-3/?moduleName=f-module-pc10-3\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 323591\r\npriority: u=4,i=?0\r\ncontent-type: image/png\r\ncf-cache-status: MISS\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"6d2dbbdac527702c58fc9f428e526d79\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=w%2FrMDdj0labm%2BbIZvv2WQYwj6GX0ewPUuprGb43wm1Flp1%2F1aRY1jwbw6n6kGNJGFCvrmTWoy7ptV%2BaH%2FumYQMp7XoDdbO3gktar1g3Dn%2ByO4HRwXyEM\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\naccept-ranges: bytes\r\ndate: Sun, 04 Jan 2026 14:57:04 GMT\r\ncf-ray: 9b8b961309dd0731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":323591,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 470 x 320, 8-bit/color RGBA, non-interlaced","md5":"7707ccd5b5848f4ce00beae14b3c5398","sha1":"86431c1800cb6dab32cf14d8685e8875b9441cda","sha256":"58de7de9fe02a316289d82e57116ddaac0a56edc870d21a2f8f7f856debc6b56","sha512":"ac845e2e4d7f5e3b025e092f69ed1c4b425d4215065ff07a211b7fd9e5b41ee0d7fd4f6bcd49b4d026d916a973c84bba3bb2a50836c638ed292cab83dbeb9dd7","ssdeep":"6144:kyLK3fPatj2LJinD5Sem1jA+er/BCtfmy+GZFbkPidxcZg7n9vR:kcKPCtj2KDYjAL/BAfmy+GZAidxc09vR","tlshash":"cd6423d25b0e90bca60d1229f36fb2649d505e9f8bd8cd1d5b88f6e50f02dc88b5a5f0","first_seen":"2026-01-04T14:57:54.967884Z","last_seen":"2026-01-04T14:57:54.967884Z","times_seen":1,"resource_available":false,"data":null}},"time_used":111,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":73,"receive":38,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"f-module-pc10.ivtfxip.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ivtfxip.com/pc/static/js/about~748942c6.467a5c52.js","fqdn":"ivtfxip.com","domain":"ivtfxip.com","tld":"com"},"ip":{"addr":"104.21.78.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ivtfxip.com/pc/","date":"2026-01-04T14:57:02.115Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ivtfxip.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 25 Dec 2025 22:47:06 GMT","end":"Wed, 25 Mar 2026 23:47:02 GMT"},"fingerprint":{"sha1":"A2:E6:E0:E1:3D:71:15:E7:6A:95:1C:EC:53:3E:E4:AC:2E:D2:14:88","sha256":"EA:63:A1:B5:51:F9:8A:2E:D6:72:A0:97:14:88:41:61:B9:B7:97:70:CB:73:D8:93:0E:BF:F1:D0:C9:0A:B5:89"}}},"request":{"raw":"GET /pc/static/js/about~748942c6.467a5c52.js HTTP/1.1\r\nHost: ivtfxip.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ivtfxip.com/pc/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 04 Jan 2026 14:57:02 GMT\r\npriority: u=3,i=?0\r\ncontent-type: application/javascript\r\ncf-cache-status: MISS\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JK8bq%2Bc6nygZ%2BsopMdXrO5f7awylIxN6jw05kq6nwpkUT%2FwEtBn056v7%2BwUrW6PY9gO6pxw7MXR6I3H6WwsrbG2mXzdu%2FgZ%2FwQ%3D%3D\"}]}\r\netag: W/\"eaecae9fef0c7281f6f8ab05f11efb90\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9b8b960429e435a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":245496,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (63080)","md5":"78402fb403da7d0bb359f7b5c317b400","sha1":"293fb2f0abe898d7c8a5cc85e4a0e163e425d136","sha256":"3e53223942197f39e4502bce8a23b26fcff93b7f8bb09789335c40dedee1471c","sha512":"ff0150f3a80f6b6916d208ddb7744c67a80f5fa709febe5cc23a98400163ec534d8b52acbb4b2bfb06927c79424d35cf1a7a8949dc6deb9234816557839f634f","ssdeep":"3072:V3dq49TZ4juqmXYfTQnihMxKhHDHhjHXlmn+XP:ddqMt4ju5XYfUnihMxKhjHhbXpf","tlshash":"0b34e698f395b02186976135003f250bb2366454a5cbc68cf13adae96e7c88d36b3f3d","first_seen":"2025-06-28T18:37:46.383524Z","last_seen":"2026-05-20T20:17:42.838659Z","times_seen":33,"resource_available":true,"data":null}},"time_used":85,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":83,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"ivtfxip.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ivtfxip.com/pc/static/js/app~6ed3fd28.f335bf52.js","fqdn":"ivtfxip.com","domain":"ivtfxip.com","tld":"com"},"ip":{"addr":"104.21.78.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ivtfxip.com/pc/","date":"2026-01-04T14:57:00.562Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ivtfxip.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 25 Dec 2025 22:47:06 GMT","end":"Wed, 25 Mar 2026 23:47:02 GMT"},"fingerprint":{"sha1":"A2:E6:E0:E1:3D:71:15:E7:6A:95:1C:EC:53:3E:E4:AC:2E:D2:14:88","sha256":"EA:63:A1:B5:51:F9:8A:2E:D6:72:A0:97:14:88:41:61:B9:B7:97:70:CB:73:D8:93:0E:BF:F1:D0:C9:0A:B5:89"}}},"request":{"raw":"GET /pc/static/js/app~6ed3fd28.f335bf52.js HTTP/1.1\r\nHost: ivtfxip.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ivtfxip.com/pc/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 04 Jan 2026 14:57:00 GMT\r\npriority: u=3,i=?0\r\ncontent-type: application/javascript\r\ncf-cache-status: MISS\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xte1bgyT4QEoGElJWNgwtbhBcjekMYBiiqIW2ChNUDTDIPl%2BpJa%2FV8acOsdiZnCfd5r45K8mqEpsjYAQ%2BWiwjjo6TEuwIHrURL2P\"}]}\r\netag: W/\"5c7605a4fe29a836a9fbeccc51c01da9\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9b8b95fa5fd335a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":518792,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"d5f75586353a6bb36ef7f387f114f508","sha1":"d4fabfc8d06811b0e32a5558892d18b9b0a57ce0","sha256":"3ee1bcdd723b291db5fad2654c4d48207414101c14c9105fc6f885a15d2dda00","sha512":"81076e7bb71506f83d70c99587a85fd13dfb354c99e080ec832625cd505e3236a6e20bb4a5ae25f40433564bc36906e7f0b5cca7f02c97ec7e7de9cf289931ba","ssdeep":"6144:/U7OCukUx3JvuLe3+jZN+JidanUb1CoQ8isfZxZQw:/UOCukUx3J2LeGCskUQoZQw","tlshash":"e9b41b8972c5b9714ba36070103f250bb33b299ca40580dcb679d9ea5dbde09522ffbd","first_seen":"2025-04-19T14:49:36.205102Z","last_seen":"2026-05-20T20:17:42.824017Z","times_seen":63,"resource_available":true,"data":null}},"time_used":155,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":150,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"ivtfxip.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ivtfxip.com/pc/static/js/npm.echarts~4939e289.8c50a0e4.js","fqdn":"ivtfxip.com","domain":"ivtfxip.com","tld":"com"},"ip":{"addr":"104.21.78.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ivtfxip.com/pc/","date":"2026-01-04T14:57:00.580Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ivtfxip.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 25 Dec 2025 22:47:06 GMT","end":"Wed, 25 Mar 2026 23:47:02 GMT"},"fingerprint":{"sha1":"A2:E6:E0:E1:3D:71:15:E7:6A:95:1C:EC:53:3E:E4:AC:2E:D2:14:88","sha256":"EA:63:A1:B5:51:F9:8A:2E:D6:72:A0:97:14:88:41:61:B9:B7:97:70:CB:73:D8:93:0E:BF:F1:D0:C9:0A:B5:89"}}},"request":{"raw":"GET /pc/static/js/npm.echarts~4939e289.8c50a0e4.js HTTP/1.1\r\nHost: ivtfxip.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ivtfxip.com/pc/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 04 Jan 2026 14:57:00 GMT\r\npriority: u=3,i=?0\r\ncontent-type: application/javascript\r\ncf-cache-status: MISS\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=v3u64C0g8No8O5fcfQbx8i7AJ4rRSJc4ypwpFDBidT1y1podfrgDr3lJhrDT3bv2HTZ%2BvmNQnmcHCXedFCsj3mZyszUqQv1GYmFf\"}]}\r\netag: W/\"8be45f362ea5b7732e712c4ffaa3f810\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9b8b95fa6fe435a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":187942,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"b6cc7ec8fb15c152bdd42d698d0715ee","sha1":"04006694ff40c3d9ba14fc9425eaa7a1b5d35d75","sha256":"a71a8fa7f6de6f377118d122dcb72fa45e14c0958a311dfab28e59ca65e81d55","sha512":"5b73a3df4dd3fc6779c7d5dc25d1997084243a9b06e4b1cb66684d03efec2ea2a9f21be6a338abc2fa13b8e471b9c38e177179c322039f0707e8db1a1c3a27ee","ssdeep":"1536:I/sMp67O+woDhKVM9LioOlpE+7aXGQT5N438jxGf9+V2:tMpcO+wm9L8lhAjcVf","tlshash":"ac04a498f695f065439731a0467f050fe33a685db80a85acfa90c4da6cbc44a363bf79","first_seen":"2025-04-19T14:49:36.176387Z","last_seen":"2026-05-20T20:17:42.8165Z","times_seen":47,"resource_available":true,"data":null}},"time_used":87,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":85,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"ivtfxip.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.ivtfxip.com/api/app/config","fqdn":"api.ivtfxip.com","domain":"ivtfxip.com","tld":"com"},"ip":{"addr":"104.21.78.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ivtfxip.com/pc/","date":"2026-01-04T14:57:01.987Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.ivtfxip.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 25 Dec 2025 22:40:43 GMT","end":"Wed, 25 Mar 2026 23:40:41 GMT"},"fingerprint":{"sha1":"D1:71:A2:C4:12:9D:CD:50:E5:B5:2D:A0:DB:0A:A0:3E:34:E8:FC:96","sha256":"F4:93:8B:FD:69:F9:AF:4F:CA:47:BC:51:06:9A:1E:76:FD:94:50:77:F6:22:8E:6E:51:5C:40:DA:2A:C7:4B:B6"}}},"request":{"raw":"GET /api/app/config HTTP/1.1\r\nHost: api.ivtfxip.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ivtfxip.com/\r\nOrigin: https://ivtfxip.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 04 Jan 2026 14:57:02 GMT\r\ncontent-type: application/json\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Nk7PdCuRObXlwl1w6tS9Eie1PXLEUqqHlCqXHUtqvusd1rD6PWGkdGW1qVPbycdGGz1N%2BPEBnZop5BXLvNA0MEFhQRfd13423nfSQlIdjA%3D%3D\"}]}\r\nserver: cloudflare\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: https://ivtfxip.com\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 86400\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9b8b96038bc3b1b8-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4587,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"539b2ea3c4dbe32d8702c85bc79b1e79","sha1":"7bdf67c076c1f77f0a7d132840a59778290778a2","sha256":"270cc8ea980d34ec960e67d8665145bb508c17182a39e5cccdb5b5a3196eac71","sha512":"c137e850ec7646e0f283953f84a9b6c0fb1d469002c40dd6ed5c6658cf66497de99dc418eef953aba62320618960c813d9f262d92ee796040e8e09c65cacd6d1","ssdeep":"96:j0/44gTcbzbOwWrzbnlEQkjUHTOtZHff8l0MXKmSYaNRHpLmr2Y:jUtgTcbOHZyAT2BHs0MXKbYyHpLmyY","tlshash":"8391c8292618057cdb520285b07b2f6acf7c46f3320d691ce29e4e1831e74ddd63a64f","first_seen":"2026-01-04T14:57:54.970705Z","last_seen":"2026-01-04T14:57:54.970705Z","times_seen":1,"resource_available":false,"data":null}},"time_used":468,"timings":{"blocked":22,"dns":0,"connect":0,"send":0,"wait":446,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"api.ivtfxip.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"f-module-pc10.ivtfxip.com/f-module-pc10-6/assets/js/i18n.js","fqdn":"f-module-pc10.ivtfxip.com","domain":"ivtfxip.com","tld":"com"},"ip":{"addr":"104.21.78.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://f-module-pc10.ivtfxip.com/f-module-pc10-6/?moduleName=f-module-pc10-6","date":"2026-01-04T14:57:04.493Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"f-module-pc10.ivtfxip.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 25 Dec 2025 22:43:25 GMT","end":"Wed, 25 Mar 2026 23:43:19 GMT"},"fingerprint":{"sha1":"BD:75:C7:0C:CF:4C:8B:C6:F0:02:2E:9D:B3:1B:50:54:C3:72:BE:D9","sha256":"19:4F:8E:B1:B5:41:99:3C:AC:F4:8B:36:B6:A9:44:7E:9A:11:1B:8C:E9:7F:5B:40:32:92:FF:44:8F:66:46:C3"}}},"request":{"raw":"GET /f-module-pc10-6/assets/js/i18n.js HTTP/1.1\r\nHost: f-module-pc10.ivtfxip.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://f-module-pc10.ivtfxip.com/f-module-pc10-6/?moduleName=f-module-pc10-6\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 04 Jan 2026 14:57:04 GMT\r\npriority: u=2,i=?0\r\ncontent-type: application/javascript\r\ncf-cache-status: MISS\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1dH%2BS%2B7MxvxdYTfNGxFFu3IwC8gTurt8RKS3NtwQqxNc89h%2BQYyDoMHVtkivv3blSb1vtnFn21D39vAHlDpnPqwk1ZXA2xBjh3kdzuP%2FNQBLLsIJsGTB\"}]}\r\netag: W/\"f7483be62183b503da8492906a5e245b\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9b8b9612e9d40731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10584,"size_decoded":0,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text","md5":"57dd5c12f1ec5caea5cf521b439ef4c8","sha1":"0278bf311ca764cea161ad31eba2c5e10bd466e8","sha256":"845af8f65d775c531965f2afb82ca8f0fb8f6bee44147e14c81b77d65347e0b0","sha512":"5b36b8291a1c57b0996dd4b9b233d4a37125f9e5c97fb005607cba090021e8125f3dc99f9368e66947cdc2544822f5c93833bbbf3a7c9d20782f7d5901186b02","ssdeep":"192:38lgDxZkzhk/zVhqxrj/PvxP853PGZTOsF2K:38liTkzhk/zVhK/3poGZTOsn","tlshash":"c322937666b1181641079112a88d368a7b1925df6e1cbcf0be4d905a2fec93dc3f4bf4","first_seen":"2026-01-04T14:57:54.971694Z","last_seen":"2026-01-04T14:57:54.971694Z","times_seen":1,"resource_available":true,"data":null}},"time_used":177,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":175,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"f-module-pc10.ivtfxip.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ivtfxip.com/pc","fqdn":"ivtfxip.com","domain":"ivtfxip.com","tld":"com"},"ip":{"addr":"104.21.78.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-01-04T14:57:00.383Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ivtfxip.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 25 Dec 2025 22:47:06 GMT","end":"Wed, 25 Mar 2026 23:47:02 GMT"},"fingerprint":{"sha1":"A2:E6:E0:E1:3D:71:15:E7:6A:95:1C:EC:53:3E:E4:AC:2E:D2:14:88","sha256":"EA:63:A1:B5:51:F9:8A:2E:D6:72:A0:97:14:88:41:61:B9:B7:97:70:CB:73:D8:93:0E:BF:F1:D0:C9:0A:B5:89"}}},"request":{"raw":"GET /pc HTTP/1.1\r\nHost: ivtfxip.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ivtfxip.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 308 Permanent Redirect\r\ncontent-length: 0\r\npriority: u=1,i=?0\r\nlocation: /pc/\r\ncf-cache-status: DYNAMIC\r\naccess-control-allow-origin: *\r\nreferrer-policy: strict-origin-when-cross-origin\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=iv4NVSBSEPaRGUkJ8RjiAWqntJJLu00FQvJNObJzR3PkeI1FHGIluUS7vmyW1Ys%2BrF6zpbCHWWAgQN5Gy3VOaEFiJBHAPVCk3bhc\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ndate: Sun, 04 Jan 2026 14:57:00 GMT\r\ncf-ray: 9b8b95f95f8c35a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"308","status_text":"Permanent Redirect","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7686,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (4173)","md5":"4930843dfb4635890647af11ae9b510c","sha1":"32a1e9f886eb81c828d4db49ad361d570b05dbee","sha256":"153989bd09b053dc878ba8418dd2022ba97bc94bd2b0ebb9e54c83527274f03c","sha512":"a71239f1a04c56dc255f658fbf6889dde39210d0932d86f8199da76a829f12cdc64e34b365a28124b902dcdab9e55babb1616a4e09aa06bf2f66f7d6a04d7aea","ssdeep":"192:3WJhpD56nItOa3w2qq2gFCLEnHaF0CGr9+SNcWpyhKLcm:kqqb2GrNcm","tlshash":"6cf18055fd08d5ee5c70ae56fb6a756a80cae86f0c30d890b4be0e35c7647c86b79803","first_seen":"2026-01-04T14:57:54.951613Z","last_seen":"2026-04-13T23:57:13.854257Z","times_seen":2,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"ivtfxip.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ivtfxip.com/pc/static/css/app~06837ae4.e2ff8f62.css","fqdn":"ivtfxip.com","domain":"ivtfxip.com","tld":"com"},"ip":{"addr":"104.21.78.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ivtfxip.com/pc/","date":"2026-01-04T14:57:00.547Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ivtfxip.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 25 Dec 2025 22:47:06 GMT","end":"Wed, 25 Mar 2026 23:47:02 GMT"},"fingerprint":{"sha1":"A2:E6:E0:E1:3D:71:15:E7:6A:95:1C:EC:53:3E:E4:AC:2E:D2:14:88","sha256":"EA:63:A1:B5:51:F9:8A:2E:D6:72:A0:97:14:88:41:61:B9:B7:97:70:CB:73:D8:93:0E:BF:F1:D0:C9:0A:B5:89"}}},"request":{"raw":"GET /pc/static/css/app~06837ae4.e2ff8f62.css HTTP/1.1\r\nHost: ivtfxip.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ivtfxip.com/pc/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 04 Jan 2026 14:57:00 GMT\r\npriority: u=2,i=?0\r\ncontent-type: text/css; charset=utf-8\r\ncf-cache-status: MISS\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GB9K%2FmMiMc5kek3ZTbErglM%2F0uYlOnjPPAyCzXydgk90deZR%2BPa5Db1Cyq%2BF4vk2OaydaohTEZ5cAy8B4BocNb0x8ad4arKoGQ%3D%3D\"}]}\r\netag: W/\"8bf24d2bbe1702f87769cb53132e0f35\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9b8b95fa5fc835a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":21670,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"Unicode text, UTF-8 text, with very long lines (21572), with no line terminators","md5":"c9da861f5cc1b7f5dd933148419e322d","sha1":"575cfb0db24ba102052e60bdcca8666d4ee85d31","sha256":"61aedf07cc389ca14c7a63833e92c77a3e62abbca685b24ab233f7681081e732","sha512":"dc654e5b931de3c381af633395b1e9b302abc7cab05425877c389de3fd40569235a5bf8cd2a3e6c14cbc60032a9c2b35afae908a53c99baccd28054af623ddf3","ssdeep":"384:ZTjzwaGBm2jXG5W8JRGZ89F+eKFiG9r2jIu0/oHR:ZZJRGS6/oHR","tlshash":"79a2be6f6f96218c822fca52c6a577e9bb20f51da351e7dfe4433912cec624b0a1056c","first_seen":"2025-05-06T14:56:29.614252Z","last_seen":"2026-05-20T20:17:42.874258Z","times_seen":34,"resource_available":false,"data":null}},"time_used":90,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":90,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"ivtfxip.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"f-module-pc10.ivtfxip.com/f-module-pc10-3/?moduleName=f-module-pc10-3","fqdn":"f-module-pc10.ivtfxip.com","domain":"ivtfxip.com","tld":"com"},"ip":{"addr":"104.21.78.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://ivtfxip.com/pc/","date":"2026-01-04T14:57:03.898Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"f-module-pc10.ivtfxip.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 25 Dec 2025 22:43:25 GMT","end":"Wed, 25 Mar 2026 23:43:19 GMT"},"fingerprint":{"sha1":"BD:75:C7:0C:CF:4C:8B:C6:F0:02:2E:9D:B3:1B:50:54:C3:72:BE:D9","sha256":"19:4F:8E:B1:B5:41:99:3C:AC:F4:8B:36:B6:A9:44:7E:9A:11:1B:8C:E9:7F:5B:40:32:92:FF:44:8F:66:46:C3"}}},"request":{"raw":"GET /f-module-pc10-3/?moduleName=f-module-pc10-3 HTTP/1.1\r\nHost: f-module-pc10.ivtfxip.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ivtfxip.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 04 Jan 2026 14:57:04 GMT\r\ncontent-type: text/html; charset=utf-8\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=F3bsMnShrz4Cd4rMlQhVfdswhwnMwRMyuf1lLW%2BL5AEUCYqpSDuAwG44pTWg7kh%2BepEfWC7OON5VHwOPprqNcUV%2BOs0QTAt2kb82AikSpnJyCpyTR6C5\"}]}\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\ncontent-encoding: br\r\ncf-ray: 9b8b960fcb005688-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4090,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"faac2ba30389770120f9d9d79b696be8","sha1":"f9c4b61304f1e8181ac267ade899f1d77acfa4d5","sha256":"c127721e8dee48f72fc77bef9481f4f3df4509fab3d158113e6e2a32128abb67","sha512":"075cf96aac3c1d664aafa7c374b9bd38a9f8e1fec384bd347f2120d94f2f38be05b4a57755fc9c17f14f48bcafd5970293eadbc1a1ac175008a2085eaca61ae1","ssdeep":"","tlshash":"7181cf1914f200570087719a7f9a71063bc1b68b9a1fee147ebd46e05fc5e89eca3b24","first_seen":"2026-01-04T14:57:54.973567Z","last_seen":"2026-01-04T14:57:54.973567Z","times_seen":1,"resource_available":false,"data":null}},"time_used":398,"timings":{"blocked":72,"dns":4,"connect":1,"send":0,"wait":249,"receive":0,"ssl":59},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"f-module-pc10.ivtfxip.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"f-module-pc10.ivtfxip.com/f-module-pc10-1/assets/js/element-ui.js","fqdn":"f-module-pc10.ivtfxip.com","domain":"ivtfxip.com","tld":"com"},"ip":{"addr":"104.21.78.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://f-module-pc10.ivtfxip.com/f-module-pc10-1/?moduleName=f-module-pc10-1","date":"2026-01-04T14:57:04.447Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"f-module-pc10.ivtfxip.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 25 Dec 2025 22:43:25 GMT","end":"Wed, 25 Mar 2026 23:43:19 GMT"},"fingerprint":{"sha1":"BD:75:C7:0C:CF:4C:8B:C6:F0:02:2E:9D:B3:1B:50:54:C3:72:BE:D9","sha256":"19:4F:8E:B1:B5:41:99:3C:AC:F4:8B:36:B6:A9:44:7E:9A:11:1B:8C:E9:7F:5B:40:32:92:FF:44:8F:66:46:C3"}}},"request":{"raw":"GET /f-module-pc10-1/assets/js/element-ui.js HTTP/1.1\r\nHost: f-module-pc10.ivtfxip.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://f-module-pc10.ivtfxip.com/f-module-pc10-1/?moduleName=f-module-pc10-1\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 04 Jan 2026 14:57:04 GMT\r\npriority: u=2,i=?0\r\ncontent-type: application/javascript\r\ncf-cache-status: MISS\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pO51pu%2FC63ZnviGovq80uj0jdoEiEibM0VcBDFhtLKZtcum%2Fcs5XRDiVZQj0BgjUWtpgRuFUgpOhUoy8Yy6uNuTcJjH4IaATjhc7a4OsE8ix9wcVkQ%2FakQ8%3D\"}]}\r\netag: W/\"d7dad5eb31c2ff0c23cd1c94667f1e2c\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9b8b9612b9c10731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":664912,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65336), with no line terminators","md5":"871ab253bcff550f462f866dbdef7465","sha1":"616b57088730b5322c12649d31d620afd3abc8e6","sha256":"89d3c55e8fa03f177b1cc3824aede7c94b2ce4143f6a30f54ebb96e20eb42bc2","sha512":"45d91bcef6b33e603fef096e9e21efeaa30cab43423d8b5a98911f98da8d9b2e9a7654a9f479444a9bbd8dc4ca4968d5e7a64abee42fa88023c676d75856131d","ssdeep":"6144:BSqtkdlBC7d1xSBiwzlPQa/R6rvnGehHjcFFFw9/8CslIvi/x1:Wm7d1xSBnzlPQa/ofxhHwHFt/x1","tlshash":"e9e4098d72c1b53147a36071103f250bb33b2a9ca809809cb679d5ea6dbda0d526ff7d","first_seen":"2023-09-27T20:28:23Z","last_seen":"2026-06-08T02:28:42.770668Z","times_seen":2934,"resource_available":true,"data":null}},"time_used":308,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":260,"receive":48,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"f-module-pc10.ivtfxip.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"f-module-pc10.ivtfxip.com/f-module-pc10-4/assets/images/bg.png","fqdn":"f-module-pc10.ivtfxip.com","domain":"ivtfxip.com","tld":"com"},"ip":{"addr":"104.21.78.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://f-module-pc10.ivtfxip.com/f-module-pc10-4/?moduleName=f-module-pc10-4","date":"2026-01-04T14:57:05.753Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"f-module-pc10.ivtfxip.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 25 Dec 2025 22:43:25 GMT","end":"Wed, 25 Mar 2026 23:43:19 GMT"},"fingerprint":{"sha1":"BD:75:C7:0C:CF:4C:8B:C6:F0:02:2E:9D:B3:1B:50:54:C3:72:BE:D9","sha256":"19:4F:8E:B1:B5:41:99:3C:AC:F4:8B:36:B6:A9:44:7E:9A:11:1B:8C:E9:7F:5B:40:32:92:FF:44:8F:66:46:C3"}}},"request":{"raw":"GET /f-module-pc10-4/assets/images/bg.png HTTP/1.1\r\nHost: f-module-pc10.ivtfxip.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://f-module-pc10.ivtfxip.com/f-module-pc10-4/assets/style/style.min.css\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 111049\r\npriority: u=4,i=?0\r\ncontent-type: image/png\r\ncf-cache-status: MISS\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"45d1aa006996c4a4e3efda56536dc46f\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=z%2FAvPYy%2FrG8eAuVmx1eGA6SaZ%2BU991AJ3toEA2TRnHOKREA7RpQECAcAJwbp1KzPGpQn4C%2Br1j84TMvMGtI0VjB5ZdSTxiRirY%2BILTR7MsC%2FUgPYD469grE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\naccept-ranges: bytes\r\ndate: Sun, 04 Jan 2026 14:57:05 GMT\r\ncf-ray: 9b8b961afb2f0731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":111049,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1920 x 2014, 8-bit/color RGB, non-interlaced","md5":"ff22fdfc911344fe1b2e9532ab5cfdd7","sha1":"f23ffad57ba6ebe57c89ced438e3630d715792e8","sha256":"cf37d3aa17d7ca54d03be88bb20ac44ffb27e3b8ac93193d796fff24cc2582fa","sha512":"bc35be54fdc58d44ecb7cca01f2bc1f8051c360d56554317f9e3aa96af421933a935847c9c6a5d8d456a3b6f9ebad288f13b19e6081683d4d5cae58b6aa4ad3c","ssdeep":"1536:9YP7vRhtCLMY4P4t6FtlBgBbYroLTH+fesSbhKqbRx/N40KpxZcuLI0SQdGeco+O:W7vRhQX0g0liB+ofH+vsf/2HN5ndhNsi","tlshash":"8fb3126073616cd4f8b54d3c1873a76f2bb3ce5846506b374d51b6216f13f22388a8e9","first_seen":"2025-05-06T14:56:29.611673Z","last_seen":"2026-06-09T19:07:39.560027Z","times_seen":16,"resource_available":false,"data":null}},"time_used":56,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":52,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"f-module-pc10.ivtfxip.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ivtfxip.com/pc/static/css/app~f71cff67.78767e4f.css","fqdn":"ivtfxip.com","domain":"ivtfxip.com","tld":"com"},"ip":{"addr":"104.21.78.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ivtfxip.com/pc/","date":"2026-01-04T14:57:00.552Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ivtfxip.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 25 Dec 2025 22:47:06 GMT","end":"Wed, 25 Mar 2026 23:47:02 GMT"},"fingerprint":{"sha1":"A2:E6:E0:E1:3D:71:15:E7:6A:95:1C:EC:53:3E:E4:AC:2E:D2:14:88","sha256":"EA:63:A1:B5:51:F9:8A:2E:D6:72:A0:97:14:88:41:61:B9:B7:97:70:CB:73:D8:93:0E:BF:F1:D0:C9:0A:B5:89"}}},"request":{"raw":"GET /pc/static/css/app~f71cff67.78767e4f.css HTTP/1.1\r\nHost: ivtfxip.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ivtfxip.com/pc/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 04 Jan 2026 14:57:00 GMT\r\npriority: u=2,i=?0\r\ncontent-type: text/css; charset=utf-8\r\ncf-cache-status: MISS\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ySOP92f7HCD8%2FvVxGAMppte1jalOlKWs8%2BsLXKotTua4jPgkY%2FpzY%2BtaiVj0eK7ZM%2BRNc%2FVmjuQ9HUbBIs4dBOhCyvQpBLgq3Lwt\"}]}\r\netag: W/\"744da693ecf4415e1eea151247ea11fa\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9b8b95fa5fcd35a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":17242,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (17242), with no line terminators","md5":"814abe0b9fb272b07c3664844354781a","sha1":"79200ed2345d9ee182aecc91abd4409c75e973d3","sha256":"15482d480d820f71197facf85678c2f41de39c3cb9415bf653dc93baf49c9220","sha512":"c993e8eaa68c715ceb0d689b5bb60e123c1b6762bcdc9d8b69ff2f4856c788ae9399c7975def190b4d8f108e44232bbb46da76f76bfc48f1629876f1521c4a1f","ssdeep":"192:iFoPXiHyvs7JVJofoB3Od6dZZhGlYVLoOyEUQ31fuuuE3A2:yoqHyvsOfoB3+3uVkOyEj4uuEw2","tlshash":"8772132eb93e283d5177c8123868eecd9e16f556d311633eb65b6613ccc36972c71288","first_seen":"2026-01-04T14:57:54.975683Z","last_seen":"2026-04-13T23:57:13.890334Z","times_seen":3,"resource_available":false,"data":null}},"time_used":63,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":62,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"ivtfxip.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.ivtfxip.com/api/app/language","fqdn":"api.ivtfxip.com","domain":"ivtfxip.com","tld":"com"},"ip":{"addr":"104.21.78.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ivtfxip.com/pc/","date":"2026-01-04T14:57:01.963Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.ivtfxip.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 25 Dec 2025 22:40:43 GMT","end":"Wed, 25 Mar 2026 23:40:41 GMT"},"fingerprint":{"sha1":"D1:71:A2:C4:12:9D:CD:50:E5:B5:2D:A0:DB:0A:A0:3E:34:E8:FC:96","sha256":"F4:93:8B:FD:69:F9:AF:4F:CA:47:BC:51:06:9A:1E:76:FD:94:50:77:F6:22:8E:6E:51:5C:40:DA:2A:C7:4B:B6"}}},"request":{"raw":"OPTIONS /api/app/language HTTP/1.1\r\nHost: api.ivtfxip.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: app_analog,app_auth_by_token,app_client_timezone,app_language,app_model,app_version,aws-check,content-type,request_domain,theme-mode,x-requested-with\r\nReferer: https://ivtfxip.com/\r\nOrigin: https://ivtfxip.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 04 Jan 2026 14:57:02 GMT\r\ncontent-length: 0\r\nserver: cloudflare\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Shyg4nXxR1m8zsU15NQ5oSlbkHa1J4kW6NpfjhyRrKbhscSME%2FKlldmLmxzoMSsI0DMsVsySBffAPeUOCmhmqItizvTLlM024MydsyqVHQ%3D%3D\"}]}\r\naccess-control-allow-origin: https://ivtfxip.com\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: app_analog,app_auth_by_token,app_client_timezone,app_language,app_model,app_version,aws-check,content-type,request_domain,theme-mode,x-requested-with\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 86400\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nallow: GET, HEAD, POST, PUT, DELETE, TRACE, OPTIONS, PATCH\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b8b96039bd7b1b8-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-13T16:33:36.180633Z","times_seen":16390792,"resource_available":true,"data":null}},"time_used":527,"timings":{"blocked":52,"dns":8,"connect":1,"send":0,"wait":409,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"api.ivtfxip.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"f-module-pc10.ivtfxip.com/f-module-pc10-5/assets/images/2.gif","fqdn":"f-module-pc10.ivtfxip.com","domain":"ivtfxip.com","tld":"com"},"ip":{"addr":"104.21.78.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://f-module-pc10.ivtfxip.com/f-module-pc10-5/?moduleName=f-module-pc10-5","date":"2026-01-04T14:57:04.602Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"f-module-pc10.ivtfxip.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 25 Dec 2025 22:43:25 GMT","end":"Wed, 25 Mar 2026 23:43:19 GMT"},"fingerprint":{"sha1":"BD:75:C7:0C:CF:4C:8B:C6:F0:02:2E:9D:B3:1B:50:54:C3:72:BE:D9","sha256":"19:4F:8E:B1:B5:41:99:3C:AC:F4:8B:36:B6:A9:44:7E:9A:11:1B:8C:E9:7F:5B:40:32:92:FF:44:8F:66:46:C3"}}},"request":{"raw":"GET /f-module-pc10-5/assets/images/2.gif HTTP/1.1\r\nHost: f-module-pc10.ivtfxip.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://f-module-pc10.ivtfxip.com/f-module-pc10-5/?moduleName=f-module-pc10-5\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 498085\r\npriority: u=4,i=?0\r\ncontent-type: image/gif\r\ncf-cache-status: MISS\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"de0c770ce31fca87256b1d1d5cb1fd65\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rjYkOYj7OD8uamRxzZ2EAVDUAofCNCHt9jRevhKwxZVSB6ooJXBkjQ8wxlvk0fQBRScgL5RQJwEB9293wwM%2FvLSdEeAMddpTJYnARDdXqmAeySxCxRQu\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\naccept-ranges: bytes\r\ndate: Sun, 04 Jan 2026 14:57:04 GMT\r\ncf-ray: 9b8b961369f60731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":498085,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 110 x 110","md5":"8cb1f1c98b2a40cf5ed85682d5e6a672","sha1":"af75d48e120e5b95e39b56687e70a535370bb7cc","sha256":"0d18e7a2b592970cf4d03445ef9a9ec923623c34b065f66b9ab1b338f7f0eba0","sha512":"053cd5ee4726e1db774a383d8706687811624e675fd8c6c9c062742e0a549805b695a10e036269ef301d2d7de3d738000485fad7e1ed07c346fdb836f89cb772","ssdeep":"12288:c5vACM5bOZoXwIZnfPdPy5fqL95p4bmWTOgIvUu/LbuM:svACkO6p3dPAc4JTOgIDuM","tlshash":"f8b4236cc2566eccf03dbbbc464d6f61994d8df9c3d4786669c53cb4e01862e806a3b2","first_seen":"2025-05-06T14:56:29.622831Z","last_seen":"2026-06-09T19:00:14.322902Z","times_seen":15,"resource_available":false,"data":null}},"time_used":174,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":84,"receive":90,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"f-module-pc10.ivtfxip.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ivtfxip.com/pc/static/js/npm.echarts~2aec3c5f.70f1e423.js","fqdn":"ivtfxip.com","domain":"ivtfxip.com","tld":"com"},"ip":{"addr":"104.21.78.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ivtfxip.com/pc/","date":"2026-01-04T14:57:00.578Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ivtfxip.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 25 Dec 2025 22:47:06 GMT","end":"Wed, 25 Mar 2026 23:47:02 GMT"},"fingerprint":{"sha1":"A2:E6:E0:E1:3D:71:15:E7:6A:95:1C:EC:53:3E:E4:AC:2E:D2:14:88","sha256":"EA:63:A1:B5:51:F9:8A:2E:D6:72:A0:97:14:88:41:61:B9:B7:97:70:CB:73:D8:93:0E:BF:F1:D0:C9:0A:B5:89"}}},"request":{"raw":"GET /pc/static/js/npm.echarts~2aec3c5f.70f1e423.js HTTP/1.1\r\nHost: ivtfxip.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ivtfxip.com/pc/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 04 Jan 2026 14:57:00 GMT\r\npriority: u=3,i=?0\r\ncontent-type: application/javascript\r\ncf-cache-status: MISS\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dz6VGwQWRict55krvZxWDfakkVQIdACh%2FH%2FLlMMmHiV%2BYkOqU%2BelIH045emE0OIl0QXXu%2BCXvftu%2FtB0sG1F1EoEUhUOloSf5ams\"}]}\r\netag: W/\"b63fd2c257139bf2b44ba203d37b56ec\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9b8b95fa6fe135a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":20580,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (20580), with no line terminators","md5":"11427ee2ddc371dd01f6be8bd2181122","sha1":"18b7e8c273be7cc60307937402e3f0048d7d552c","sha256":"576a7edc0b4ea3d209f82efd39e892ee53cc072806a5987428a7f10b04080645","sha512":"ca4b01425818596ee0b6f460680c580e146559d69955fa57e914e45b72910727360e555563139b245c16314c5c290161f6e4666b3e1461f9e650a6e0f5ce83ec","ssdeep":"384:/mRF5hEvBPeBdIoRK/TMBlLD14K3Pn/DW3y3:eRDhLiMBlLDB3Psy3","tlshash":"999272dcb6c6f09a069b36f4056f1827e3366c8abd0de9009781c0d6786855db327f6e","first_seen":"2025-04-19T14:49:36.304969Z","last_seen":"2026-05-20T20:17:42.877874Z","times_seen":64,"resource_available":true,"data":null}},"time_used":73,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":73,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"ivtfxip.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ivtfxip.com/pc/static/js/npm.deficonnect~15eb8913.97ac2e3c.js","fqdn":"ivtfxip.com","domain":"ivtfxip.com","tld":"com"},"ip":{"addr":"104.21.78.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ivtfxip.com/pc/","date":"2026-01-04T14:57:02.112Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ivtfxip.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 25 Dec 2025 22:47:06 GMT","end":"Wed, 25 Mar 2026 23:47:02 GMT"},"fingerprint":{"sha1":"A2:E6:E0:E1:3D:71:15:E7:6A:95:1C:EC:53:3E:E4:AC:2E:D2:14:88","sha256":"EA:63:A1:B5:51:F9:8A:2E:D6:72:A0:97:14:88:41:61:B9:B7:97:70:CB:73:D8:93:0E:BF:F1:D0:C9:0A:B5:89"}}},"request":{"raw":"GET /pc/static/js/npm.deficonnect~15eb8913.97ac2e3c.js HTTP/1.1\r\nHost: ivtfxip.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ivtfxip.com/pc/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 04 Jan 2026 14:57:02 GMT\r\npriority: u=3,i=?0\r\ncontent-type: application/javascript\r\ncf-cache-status: MISS\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=E5%2F%2FGHYMgpw7LcA%2FjnhO%2F4ZPVID%2BDKRzPNt3plRi3ToQavTPLtkNCBQEqAZWQ9UNzsoWxgCv4fSzWj1bK1GZPa60LcLXTOMwFXyT\"}]}\r\netag: W/\"2438d9a5d846135586ec1257dd223502\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9b8b960429e235a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":127795,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65503), with no line terminators","md5":"c06e3292c75d72c9a84f2413a6f1d2d1","sha1":"87ed14895abab15ff2cfce6d9b65527fc777c88b","sha256":"cad661c8ee7d2fc3fc2135e26850deb8f413c95712f6bc1a85c8ab6ea4bc55f0","sha512":"028679c6069d76c6119c2fed36d66b90606b9723d84d3e6880babcb44c67c421a179a4e2898885c99c5b77d19f5aec592c61f9cb5cbf455fd7773e3a81000a5b","ssdeep":"1536:Bkli80B2mAkxkJ+BHka1kcjDZrB98ldklfi6+Wl1k6PMXDQ9:BklDb4kE3/9bAklb+WTxEXDY","tlshash":"11c3d7c9f6d2f0a10397a175513f510bf23b2da8782e90d4e366d5e06cb8989813bf6d","first_seen":"2025-04-19T14:49:36.324774Z","last_seen":"2026-05-20T20:17:42.873498Z","times_seen":52,"resource_available":true,"data":null}},"time_used":54,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":54,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"ivtfxip.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.ivtfxip.com/api/app/indexPage/demoList","fqdn":"api.ivtfxip.com","domain":"ivtfxip.com","tld":"com"},"ip":{"addr":"104.21.78.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ivtfxip.com/pc/","date":"2026-01-04T14:57:03.326Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.ivtfxip.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 25 Dec 2025 22:40:43 GMT","end":"Wed, 25 Mar 2026 23:40:41 GMT"},"fingerprint":{"sha1":"D1:71:A2:C4:12:9D:CD:50:E5:B5:2D:A0:DB:0A:A0:3E:34:E8:FC:96","sha256":"F4:93:8B:FD:69:F9:AF:4F:CA:47:BC:51:06:9A:1E:76:FD:94:50:77:F6:22:8E:6E:51:5C:40:DA:2A:C7:4B:B6"}}},"request":{"raw":"OPTIONS /api/app/indexPage/demoList HTTP/1.1\r\nHost: api.ivtfxip.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: app_analog,app_auth_by_token,app_client_timezone,app_language,app_model,app_version,aws-check,request_domain,theme-mode,x-requested-with\r\nReferer: https://ivtfxip.com/\r\nOrigin: https://ivtfxip.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 04 Jan 2026 14:57:03 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hOlvZxnY2lLs6%2FEmJocgCa%2BtYrbiX9Y%2BzyEwDqLqQ8ztE9ZrtWkUZAP3a5Xu0ABKsuzkEI2BQIvnxDmANG54egcObaDRsIlzPTGmqZI%3D\"}]}\r\naccess-control-allow-origin: https://ivtfxip.com\r\naccess-control-allow-methods: GET\r\naccess-control-allow-headers: app_analog,app_auth_by_token,app_client_timezone,app_language,app_model,app_version,aws-check,request_domain,theme-mode,x-requested-with\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 86400\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nallow: GET, HEAD, POST, PUT, DELETE, TRACE, OPTIONS, PATCH\r\ncf-cache-status: DYNAMIC\r\ncontent-length: 0\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncf-ray: 9b8b960bc9d456c3-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-13T16:33:36.180633Z","times_seen":16390792,"resource_available":true,"data":null}},"time_used":206,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":206,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"api.ivtfxip.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ivtfxip.com/pc/static/css/app~9c5b28f6.fc4ff950.css","fqdn":"ivtfxip.com","domain":"ivtfxip.com","tld":"com"},"ip":{"addr":"104.21.78.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ivtfxip.com/pc/","date":"2026-01-04T14:57:00.550Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ivtfxip.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 25 Dec 2025 22:47:06 GMT","end":"Wed, 25 Mar 2026 23:47:02 GMT"},"fingerprint":{"sha1":"A2:E6:E0:E1:3D:71:15:E7:6A:95:1C:EC:53:3E:E4:AC:2E:D2:14:88","sha256":"EA:63:A1:B5:51:F9:8A:2E:D6:72:A0:97:14:88:41:61:B9:B7:97:70:CB:73:D8:93:0E:BF:F1:D0:C9:0A:B5:89"}}},"request":{"raw":"GET /pc/static/css/app~9c5b28f6.fc4ff950.css HTTP/1.1\r\nHost: ivtfxip.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ivtfxip.com/pc/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 04 Jan 2026 14:57:00 GMT\r\npriority: u=2,i=?0\r\ncontent-type: text/css; charset=utf-8\r\ncf-cache-status: MISS\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=b4Cp8PDNTnmE4cdQqV1LQCVrzNf4F9x2r4njQyRl6fTvuWThnFwNpSCmsk83XJesx9BGTNAhL9v%2B8rW5LhMJVa2lnuCwBEn1Gd%2FX\"}]}\r\netag: W/\"0bef10225f59fc185545142f021ed248\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9b8b95fa5fcb35a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1130,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (1130), with no line terminators","md5":"cadb3862300ae32cc5625ffae0bb119a","sha1":"11996f79a0157f4c8c9a670b8c0ee9feb583257f","sha256":"442730495c48287b3488d478ff957780dbac8612db8788b29a565d6c69e60585","sha512":"c93862a4c5dbefe4522e5b3353ac2edca26a456ff79d0f5a12ac42533f9de785dda94ef2711aabee4f1a097b1443b07b7a5aa552dbf13a6b0f3607858e4a4ae4","ssdeep":"","tlshash":"3021a92adca0006b81275e02b3da0ac907b9e605923bc18d7f227159c356b4c1c9af9b","first_seen":"2025-04-19T14:49:36.208051Z","last_seen":"2026-05-20T20:17:42.83922Z","times_seen":68,"resource_available":false,"data":null}},"time_used":51,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":51,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"ivtfxip.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ivtfxip.com/pc/static/js/app~9c5b28f6.1702a01c.js","fqdn":"ivtfxip.com","domain":"ivtfxip.com","tld":"com"},"ip":{"addr":"104.21.78.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ivtfxip.com/pc/","date":"2026-01-04T14:57:00.569Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ivtfxip.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 25 Dec 2025 22:47:06 GMT","end":"Wed, 25 Mar 2026 23:47:02 GMT"},"fingerprint":{"sha1":"A2:E6:E0:E1:3D:71:15:E7:6A:95:1C:EC:53:3E:E4:AC:2E:D2:14:88","sha256":"EA:63:A1:B5:51:F9:8A:2E:D6:72:A0:97:14:88:41:61:B9:B7:97:70:CB:73:D8:93:0E:BF:F1:D0:C9:0A:B5:89"}}},"request":{"raw":"GET /pc/static/js/app~9c5b28f6.1702a01c.js HTTP/1.1\r\nHost: ivtfxip.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ivtfxip.com/pc/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 04 Jan 2026 14:57:00 GMT\r\npriority: u=3,i=?0\r\ncontent-type: application/javascript\r\ncf-cache-status: MISS\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KGFb%2F70CmMeZPkZvGf3uh%2BmKeEe8iAwZ4IRWzNV1embEMMQOEtUibZ9f%2Fpg7Ur%2BvneDSBQ8ebLddfuII9YJzcMGLVrhvIMQTQt8s\"}]}\r\netag: W/\"6b08d1dbf69079f0a54fa571158de4f6\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9b8b95fa6fd735a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":290141,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (41434)","md5":"5209251eacb21195967a1a53eacc29e9","sha1":"41640411086deb1e43561521e81bd6b94d03baa4","sha256":"b4d88f1e61a8bdafb2dac1e2391b0488ecba9d345cee0a2edcb2e9b0aa5786d2","sha512":"aa96244ee1ba1de491d2a01e85d28c87646b159b005d08fec865a2429f4805f3baad43ebee12c1a35e9e3372ffbbf7c39a846ad778b2ea22308e5abb3c88c8cc","ssdeep":"3072:aPCcYQCXWgfhbMdoaI6ww+SDAI037p/RK13bLmx+iM3Kv8lZq:Jf5zuD303F6UB","tlshash":"7e540ad8f2a2707503d724e5407f150bf23a6869680e80e4f265e4e57cb998ea17bf3d","first_seen":"2025-05-16T20:21:57.539256Z","last_seen":"2026-05-20T20:17:42.876899Z","times_seen":36,"resource_available":true,"data":null}},"time_used":187,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":185,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"ivtfxip.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.ivtfxip.com/api/app/basis/article/byType","fqdn":"api.ivtfxip.com","domain":"ivtfxip.com","tld":"com"},"ip":{"addr":"104.21.78.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ivtfxip.com/pc/","date":"2026-01-04T14:57:01.981Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.ivtfxip.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 25 Dec 2025 22:40:43 GMT","end":"Wed, 25 Mar 2026 23:40:41 GMT"},"fingerprint":{"sha1":"D1:71:A2:C4:12:9D:CD:50:E5:B5:2D:A0:DB:0A:A0:3E:34:E8:FC:96","sha256":"F4:93:8B:FD:69:F9:AF:4F:CA:47:BC:51:06:9A:1E:76:FD:94:50:77:F6:22:8E:6E:51:5C:40:DA:2A:C7:4B:B6"}}},"request":{"raw":"OPTIONS /api/app/basis/article/byType HTTP/1.1\r\nHost: api.ivtfxip.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: app_analog,app_auth_by_token,app_client_timezone,app_language,app_model,app_version,aws-check,content-type,request_domain,theme-mode,x-requested-with\r\nReferer: https://ivtfxip.com/\r\nOrigin: https://ivtfxip.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 04 Jan 2026 14:57:02 GMT\r\ncontent-length: 0\r\nserver: cloudflare\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YAd3M3ke7Fr50NMQSY0IPoe8D2DkvCQhqT7ybHs1qklBQVgD9Ep0YI6FcjBnSS9E4r4hyjnY%2FZAfYbp5oRcQP8hVOR6A33VpzRQ0%2Fgpyhg%3D%3D\"}]}\r\naccess-control-allow-origin: https://ivtfxip.com\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: app_analog,app_auth_by_token,app_client_timezone,app_language,app_model,app_version,aws-check,content-type,request_domain,theme-mode,x-requested-with\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 86400\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nallow: GET, HEAD, POST, PUT, DELETE, TRACE, OPTIONS, PATCH\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b8b96038bc9b1b8-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-13T16:33:36.180633Z","times_seen":16390792,"resource_available":true,"data":null}},"time_used":468,"timings":{"blocked":29,"dns":0,"connect":0,"send":0,"wait":431,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"api.ivtfxip.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ivtfxip.com/pc/static/css/about~f71cff67.ed9d5f92.css","fqdn":"ivtfxip.com","domain":"ivtfxip.com","tld":"com"},"ip":{"addr":"104.21.78.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ivtfxip.com/pc/","date":"2026-01-04T14:57:02.121Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ivtfxip.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 25 Dec 2025 22:47:06 GMT","end":"Wed, 25 Mar 2026 23:47:02 GMT"},"fingerprint":{"sha1":"A2:E6:E0:E1:3D:71:15:E7:6A:95:1C:EC:53:3E:E4:AC:2E:D2:14:88","sha256":"EA:63:A1:B5:51:F9:8A:2E:D6:72:A0:97:14:88:41:61:B9:B7:97:70:CB:73:D8:93:0E:BF:F1:D0:C9:0A:B5:89"}}},"request":{"raw":"GET /pc/static/css/about~f71cff67.ed9d5f92.css HTTP/1.1\r\nHost: ivtfxip.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ivtfxip.com/pc/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 04 Jan 2026 14:57:02 GMT\r\npriority: u=2,i=?0\r\ncontent-type: text/css; charset=utf-8\r\ncf-cache-status: MISS\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AuUQ5dreJ8zCXCF0wlkMGn%2BSDRXO2uXyaTyXO5SPZkkxi9C9nbabc4RfRi7gVethO6qmAQgSKPJ9MU%2BpYvgDdzFY3HFhcVMe5n2A\"}]}\r\netag: W/\"b9b37c6e8c2a2c2c6cd099333f5af79d\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9b8b960439e535a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8858,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (8858), with no line terminators","md5":"db9dfbfc970fcbd71707938af934242a","sha1":"326ea5e690d0edcf6602f869b221ffb192543ef7","sha256":"46d5edac3ebcc2e31657400975af2a3358f51a86cc1bb8ba66b8a634832761d9","sha512":"a5a0e8665c7699326df16d12d3a81df03e4f83a3ab1bca6cdfcca5f1bfa283534af9a547b0c65e396d4f049a5e79afa48039410f27bfe08367178488f607fdc6","ssdeep":"96:SZNZLZ5xTfW5BQvBFMPUXUZBZLZ5yTiPU8WZUZ6ZS70yWmBxwBwMeFQZ0YhsMhZg:Sb1R9Un1jWKM8sT/hWMu","tlshash":"3402c019b9cd6005d37fc6f01eeb9ef49069266bb5c1d2a895572021c8c3266383fee6","first_seen":"2025-07-17T05:14:10.791486Z","last_seen":"2026-05-20T20:17:42.837329Z","times_seen":31,"resource_available":false,"data":null}},"time_used":51,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":51,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"ivtfxip.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"f-module-pc10.ivtfxip.com/f-module-pc10-6/assets/js/element-ui.js","fqdn":"f-module-pc10.ivtfxip.com","domain":"ivtfxip.com","tld":"com"},"ip":{"addr":"104.21.78.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://f-module-pc10.ivtfxip.com/f-module-pc10-6/?moduleName=f-module-pc10-6","date":"2026-01-04T14:57:04.489Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"f-module-pc10.ivtfxip.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 25 Dec 2025 22:43:25 GMT","end":"Wed, 25 Mar 2026 23:43:19 GMT"},"fingerprint":{"sha1":"BD:75:C7:0C:CF:4C:8B:C6:F0:02:2E:9D:B3:1B:50:54:C3:72:BE:D9","sha256":"19:4F:8E:B1:B5:41:99:3C:AC:F4:8B:36:B6:A9:44:7E:9A:11:1B:8C:E9:7F:5B:40:32:92:FF:44:8F:66:46:C3"}}},"request":{"raw":"GET /f-module-pc10-6/assets/js/element-ui.js HTTP/1.1\r\nHost: f-module-pc10.ivtfxip.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://f-module-pc10.ivtfxip.com/f-module-pc10-6/?moduleName=f-module-pc10-6\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 04 Jan 2026 14:57:04 GMT\r\npriority: u=2,i=?0\r\ncontent-type: application/javascript\r\ncf-cache-status: MISS\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BJA5fcnixdNxgm0XbSbY7sdo0QtqHm88yafqcdqA1hxOIfCNhuYZSMsII2XJ929%2BQzWeeETdaRLJWV3mLRvdbuhWiCM3OcNYfHYUGjPkh3%2FmZr4M%2BnZjBdA%3D\"}]}\r\netag: W/\"d7dad5eb31c2ff0c23cd1c94667f1e2c\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9b8b9612e9d00731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":664912,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65336), with no line terminators","md5":"871ab253bcff550f462f866dbdef7465","sha1":"616b57088730b5322c12649d31d620afd3abc8e6","sha256":"89d3c55e8fa03f177b1cc3824aede7c94b2ce4143f6a30f54ebb96e20eb42bc2","sha512":"45d91bcef6b33e603fef096e9e21efeaa30cab43423d8b5a98911f98da8d9b2e9a7654a9f479444a9bbd8dc4ca4968d5e7a64abee42fa88023c676d75856131d","ssdeep":"6144:BSqtkdlBC7d1xSBiwzlPQa/R6rvnGehHjcFFFw9/8CslIvi/x1:Wm7d1xSBnzlPQa/ofxhHwHFt/x1","tlshash":"e9e4098d72c1b53147a36071103f250bb33b2a9ca809809cb679d5ea6dbda0d526ff7d","first_seen":"2023-09-27T20:28:23Z","last_seen":"2026-06-08T02:28:42.770668Z","times_seen":2934,"resource_available":true,"data":null}},"time_used":278,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":232,"receive":46,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"f-module-pc10.ivtfxip.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ivtfxip.com/pc/static/css/app~5a11b65b.737fbb1b.css","fqdn":"ivtfxip.com","domain":"ivtfxip.com","tld":"com"},"ip":{"addr":"104.21.78.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ivtfxip.com/pc/","date":"2026-01-04T14:57:00.549Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ivtfxip.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 25 Dec 2025 22:47:06 GMT","end":"Wed, 25 Mar 2026 23:47:02 GMT"},"fingerprint":{"sha1":"A2:E6:E0:E1:3D:71:15:E7:6A:95:1C:EC:53:3E:E4:AC:2E:D2:14:88","sha256":"EA:63:A1:B5:51:F9:8A:2E:D6:72:A0:97:14:88:41:61:B9:B7:97:70:CB:73:D8:93:0E:BF:F1:D0:C9:0A:B5:89"}}},"request":{"raw":"GET /pc/static/css/app~5a11b65b.737fbb1b.css HTTP/1.1\r\nHost: ivtfxip.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ivtfxip.com/pc/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 04 Jan 2026 14:57:00 GMT\r\npriority: u=2,i=?0\r\ncontent-type: text/css; charset=utf-8\r\ncf-cache-status: MISS\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uFNWAsw4ubbH5Pcs3JahFbFgQr5KkGJBTcSBgxQAcM1%2BKhZkQLjnkDSazsyEz8yp6e4kXzSIIUVdv4oFiIC0Xwm8Htoo3oo5wlS%2B\"}]}\r\netag: W/\"6fe9a1b3c898a89d7131d4cd96588955\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9b8b95fa5fca35a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":636,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (636), with no line terminators","md5":"fd5809c9db4610806c184e4be2b44bf6","sha1":"61b8a09a40b6c216270992e0ec29721f91019a5e","sha256":"5b67e5aaafdc2795d97448c6342a696760a564dbfd4b54a6d64784ece0c5f527","sha512":"ba7564e79d596420497df199aaf5a55fcb1f537479ff04b3a52b2a85c71e2e4455c4c95054ea6547fb10ba668e2fe418d031051df7abc4f1e625e4bce844a51d","ssdeep":"","tlshash":"aaf028222f89747d73b3915da0c952660b189617f34256e8b8456470b8cb3fd2135e6a","first_seen":"2025-05-06T14:56:29.697011Z","last_seen":"2026-05-20T20:17:42.880307Z","times_seen":34,"resource_available":false,"data":null}},"time_used":73,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":73,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"ivtfxip.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"wss","addr":"api.ivtfxip.com/ws/sub-quotes","fqdn":"api.ivtfxip.com","domain":"ivtfxip.com","tld":"com"},"ip":{"addr":"104.21.78.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://ivtfxip.com/pc/","date":"2026-01-04T14:57:02.155Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.ivtfxip.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 25 Dec 2025 22:40:43 GMT","end":"Wed, 25 Mar 2026 23:40:41 GMT"},"fingerprint":{"sha1":"D1:71:A2:C4:12:9D:CD:50:E5:B5:2D:A0:DB:0A:A0:3E:34:E8:FC:96","sha256":"F4:93:8B:FD:69:F9:AF:4F:CA:47:BC:51:06:9A:1E:76:FD:94:50:77:F6:22:8E:6E:51:5C:40:DA:2A:C7:4B:B6"}}},"request":{"raw":"GET /ws/sub-quotes HTTP/1.1\r\nHost: api.ivtfxip.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nSec-WebSocket-Version: 13\r\nOrigin: https://ivtfxip.com\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: EsfCGt3jTa5v6nLBEZxZ3g==\r\nDNT: 1\r\nConnection: keep-alive, Upgrade\r\nSec-Fetch-Dest: websocket\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 101 Switching Protocols\r\nDate: Sun, 04 Jan 2026 14:57:02 GMT\r\nConnection: upgrade\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Accept: IoXslAQkxQUC1kaRwMFH1M+asLw=\r\nUpgrade: WebSocket\r\ncf-cache-status: DYNAMIC\r\nReport-To: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=E77I%2FZFNeIyws59%2FIsK5fMlrdfre3xoh3RYQ%2FjfL7wyRAREMwmeDbt72QBK9fhLR2SMI%2BLiWqkXx5jQEZPLdTL3hPmRemDPFV0AGxj%2B6Dmx4SPiyViuG%2BSMj0t7OOgtuesw%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nNEL: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nServer: cloudflare\r\nCF-RAY: 9b8b96049e5db1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=508\u0026min_rtt=469\u0026rtt_var=163\u0026sent=5\u0026recv=8\u0026lost=0\u0026retrans=0\u0026sent_bytes=3184\u0026recv_bytes=1290\u0026delivery_rate=7074918\u0026cwnd=252\u0026unsent_bytes=0\u0026cid=ce45a42a545de222\u0026ts=460\u0026x=0\"\r\n\r\n","headers":null,"cookies":null,"status_code":"101","status_text":"Switching Protocols","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-13T16:33:36.180633Z","times_seen":16390792,"resource_available":true,"data":null}},"time_used":466,"timings":{"blocked":0,"dns":1,"connect":1,"send":0,"wait":445,"receive":0,"ssl":19},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"api.ivtfxip.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.ivtfxip.com/upload/logo.png","fqdn":"api.ivtfxip.com","domain":"ivtfxip.com","tld":"com"},"ip":{"addr":"104.21.78.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ivtfxip.com/pc/","date":"2026-01-04T14:57:03.984Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.ivtfxip.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 25 Dec 2025 22:40:43 GMT","end":"Wed, 25 Mar 2026 23:40:41 GMT"},"fingerprint":{"sha1":"D1:71:A2:C4:12:9D:CD:50:E5:B5:2D:A0:DB:0A:A0:3E:34:E8:FC:96","sha256":"F4:93:8B:FD:69:F9:AF:4F:CA:47:BC:51:06:9A:1E:76:FD:94:50:77:F6:22:8E:6E:51:5C:40:DA:2A:C7:4B:B6"}}},"request":{"raw":"GET /upload/logo.png HTTP/1.1\r\nHost: api.ivtfxip.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ivtfxip.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 04 Jan 2026 14:57:04 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wUETmzPQPT3yuLl9Rh8q55e%2FLo8BkZkBc9Bq6e39vBuGmlq8kZR5fE8304xbjs%2BpgTKiBa1myB7OFbTBOzR5%2BPbv4SUdxfbOoteX7Dk%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-length: 225424\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: *\r\naccess-control-allow-origin: *\r\naccess-control-max-age: 86400\r\nserver: cloudflare\r\npriority: u=6,i=?0\r\nlast-modified: Wed, 24 Dec 2025 05:19:00 GMT\r\nvary: Origin, accept-encoding\r\ncf-cache-status: HIT\r\nexpires: Sun, 04 Jan 2026 18:57:04 GMT\r\ncache-control: public, max-age=14400\r\naccept-ranges: bytes\r\nage: 0\r\ncf-ray: 9b8b960fed7756b7-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":225424,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1024 x 1024, 8-bit/color RGB, non-interlaced","md5":"102aaaec15c83b299b1935ae88ba57c6","sha1":"4f4d431b3e2241db131d1d9eb4e2c3650813d24f","sha256":"fe9daf23e3b6498afec9edf7f7dac7f86fff9674ddc20c3f61ab8e33f13ff8ee","sha512":"fc95ca6f1a93920447cf2cf95112f675cdd880a7ef7bdb56fe4fd5f810bcdb6f20f939efd4ee02836ded9a5ec77396a2d370b4cb82f048602b720181845d399b","ssdeep":"6144:AOSfwceS/3fsWHE/dGXU6ZBaEmXvNe68S:FJS/3lE/FCBmXES","tlshash":"502423f4519847ce773669f10b2452628e886db0fdb996687d7f2a0c0cc198fadeb844","first_seen":"2026-01-04T14:57:54.927925Z","last_seen":"2026-01-04T14:57:54.927925Z","times_seen":1,"resource_available":false,"data":null}},"time_used":117,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":70,"receive":47,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"api.ivtfxip.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"f-module-pc10.ivtfxip.com/f-module-pc10-6/assets/images/1.png","fqdn":"f-module-pc10.ivtfxip.com","domain":"ivtfxip.com","tld":"com"},"ip":{"addr":"104.21.78.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://f-module-pc10.ivtfxip.com/f-module-pc10-6/?moduleName=f-module-pc10-6","date":"2026-01-04T14:57:05.581Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"f-module-pc10.ivtfxip.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 25 Dec 2025 22:43:25 GMT","end":"Wed, 25 Mar 2026 23:43:19 GMT"},"fingerprint":{"sha1":"BD:75:C7:0C:CF:4C:8B:C6:F0:02:2E:9D:B3:1B:50:54:C3:72:BE:D9","sha256":"19:4F:8E:B1:B5:41:99:3C:AC:F4:8B:36:B6:A9:44:7E:9A:11:1B:8C:E9:7F:5B:40:32:92:FF:44:8F:66:46:C3"}}},"request":{"raw":"GET /f-module-pc10-6/assets/images/1.png HTTP/1.1\r\nHost: f-module-pc10.ivtfxip.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://f-module-pc10.ivtfxip.com/f-module-pc10-6/assets/style/style.min.css\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 10518\r\npriority: u=4,i=?0\r\ncontent-type: image/png\r\ncf-cache-status: MISS\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"f85e4a56d4bd31904a8c17b4ee916f46\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qjZpxNdke4Zy1NHb7l0z6J8AxpmEL1dOdt0hNMJ9LDIzlb8wlV%2FPqKnb4cHYHbwboU20e2uk6XPsUvWkcwbyLMztyGpw0IIpQTmhDVtiY1AXGmxzWOECFVw%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\naccept-ranges: bytes\r\ndate: Sun, 04 Jan 2026 14:57:05 GMT\r\ncf-ray: 9b8b9619daf30731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10518,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 420 x 274, 8-bit/color RGBA, non-interlaced","md5":"eab07707184665e30ede2f16deada07a","sha1":"45e8185629e3c18209adc9e87a900788ae460d43","sha256":"451fe662b34fcd6f312e804500c81d1ca7934c649d40b0af8484bf29af41c149","sha512":"4c8ebaceaeace2267e0e0c4d0bd80d78aeb031b97ad2693dfd4475d9c9ca68b018292c488417dd9a12cc5f0f480d2bdf9d3b19cf6d94c8ac0e168c86072587f1","ssdeep":"192:ASxfhfsLKH92YIKbqkMyDrx9s14kHMYFc9vx/XYQbAE5QmxkhuMtm9P+LwS68S:nVOLJkqkMyDw1pH69vJXYYqhxmFJ8S","tlshash":"d622bf71642cd4931ff5a3b496967fe49ae5d2b0c346a129f1345005b6fd3ec9cb0870","first_seen":"2025-05-06T14:56:29.612739Z","last_seen":"2026-05-10T22:50:28.063439Z","times_seen":13,"resource_available":false,"data":null}},"time_used":58,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":55,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"f-module-pc10.ivtfxip.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ivtfxip.com/pc/static/js/app~4a523aed.66813282.js","fqdn":"ivtfxip.com","domain":"ivtfxip.com","tld":"com"},"ip":{"addr":"104.21.78.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ivtfxip.com/pc/","date":"2026-01-04T14:57:00.560Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ivtfxip.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 25 Dec 2025 22:47:06 GMT","end":"Wed, 25 Mar 2026 23:47:02 GMT"},"fingerprint":{"sha1":"A2:E6:E0:E1:3D:71:15:E7:6A:95:1C:EC:53:3E:E4:AC:2E:D2:14:88","sha256":"EA:63:A1:B5:51:F9:8A:2E:D6:72:A0:97:14:88:41:61:B9:B7:97:70:CB:73:D8:93:0E:BF:F1:D0:C9:0A:B5:89"}}},"request":{"raw":"GET /pc/static/js/app~4a523aed.66813282.js HTTP/1.1\r\nHost: ivtfxip.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ivtfxip.com/pc/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 04 Jan 2026 14:57:00 GMT\r\npriority: u=3,i=?0\r\ncontent-type: application/javascript\r\ncf-cache-status: MISS\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZZcsj2yHnbatoiaIpBrKd7IDPko8aNMQbEE1qjLobS8JNmg7o8yzQH2xuN6gSW5kvtx3MX6G8%2B%2Fg1ywnPL%2Bia63XRGwnCFs30p8j\"}]}\r\netag: W/\"29044ffc1fef99b64677d3cc981be687\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9b8b95fa5fd135a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":766094,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (63266), with no line terminators","md5":"77cc2d65806747d40e1253a1171c00b7","sha1":"9184c16559e048be372357e4e1a32e268d48af92","sha256":"f09ba4a91cc09817ded00a3c548bb567833706c0e327508dec93ac66495adc87","sha512":"da49ee7dd7dbfc09ead717567ed9eee1bceb5a0a82ceb492e665126e3b73002986b92d971bd8dc35d2649ba791c8e30a7937070b2c6dae356633a9304b7328f4","ssdeep":"12288:zCRYR0yB2NAhXOY0+b9HpHqrCgQEG4uuph0pdhJOEUtua7AnAkpzKmktodC3KL5e:1R0yiAh+Y0+xHpK2uph0FaF6COu1xaU","tlshash":"b0f44e7109d5209d0226d70ad9c87a0e7add85beff9287a61ddc1c3f30d29a0c6ad36d","first_seen":"2026-01-04T14:57:54.982615Z","last_seen":"2026-05-01T07:36:15.854459Z","times_seen":3,"resource_available":false,"data":null}},"time_used":277,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":270,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"ivtfxip.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.ivtfxip.com/api/app/language/dict","fqdn":"api.ivtfxip.com","domain":"ivtfxip.com","tld":"com"},"ip":{"addr":"104.21.78.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ivtfxip.com/pc/","date":"2026-01-04T14:57:01.984Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.ivtfxip.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 25 Dec 2025 22:40:43 GMT","end":"Wed, 25 Mar 2026 23:40:41 GMT"},"fingerprint":{"sha1":"D1:71:A2:C4:12:9D:CD:50:E5:B5:2D:A0:DB:0A:A0:3E:34:E8:FC:96","sha256":"F4:93:8B:FD:69:F9:AF:4F:CA:47:BC:51:06:9A:1E:76:FD:94:50:77:F6:22:8E:6E:51:5C:40:DA:2A:C7:4B:B6"}}},"request":{"raw":"OPTIONS /api/app/language/dict HTTP/1.1\r\nHost: api.ivtfxip.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: app_analog,app_auth_by_token,app_client_timezone,app_language,app_model,app_version,aws-check,content-type,request_domain,theme-mode,x-requested-with\r\nReferer: https://ivtfxip.com/\r\nOrigin: https://ivtfxip.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 04 Jan 2026 14:57:02 GMT\r\ncontent-length: 0\r\nserver: cloudflare\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hztt%2FcXyQoJ7PFRjMNpY9zdkaHDxwNhXfnqWO6BW56jzQ5k%2BIEyeTISr1RlTQzdsPvFLuxbld64Fc3D20kL5iqV00Nb%2BwiZH96uLE2oj9g%3D%3D\"}]}\r\naccess-control-allow-origin: https://ivtfxip.com\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: app_analog,app_auth_by_token,app_client_timezone,app_language,app_model,app_version,aws-check,content-type,request_domain,theme-mode,x-requested-with\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 86400\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nallow: GET, HEAD, POST, PUT, DELETE, TRACE, OPTIONS, PATCH\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b8b96039bd0b1b8-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-13T16:33:36.180633Z","times_seen":16390792,"resource_available":true,"data":null}},"time_used":466,"timings":{"blocked":29,"dns":0,"connect":0,"send":0,"wait":437,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"api.ivtfxip.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ivtfxip.com/pc/static/css/about~defe45ab.4390022f.css","fqdn":"ivtfxip.com","domain":"ivtfxip.com","tld":"com"},"ip":{"addr":"104.21.78.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ivtfxip.com/pc/","date":"2026-01-04T14:57:02.126Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ivtfxip.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 25 Dec 2025 22:47:06 GMT","end":"Wed, 25 Mar 2026 23:47:02 GMT"},"fingerprint":{"sha1":"A2:E6:E0:E1:3D:71:15:E7:6A:95:1C:EC:53:3E:E4:AC:2E:D2:14:88","sha256":"EA:63:A1:B5:51:F9:8A:2E:D6:72:A0:97:14:88:41:61:B9:B7:97:70:CB:73:D8:93:0E:BF:F1:D0:C9:0A:B5:89"}}},"request":{"raw":"GET /pc/static/css/about~defe45ab.4390022f.css HTTP/1.1\r\nHost: ivtfxip.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ivtfxip.com/pc/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 04 Jan 2026 14:57:02 GMT\r\npriority: u=2,i=?0\r\ncontent-type: text/css; charset=utf-8\r\ncf-cache-status: MISS\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6UZMwonOTjpF1YRGEnAqYLpfQuipVtEg17Iy846oTJ2jo59NywO7DCEk9uKaiYZP%2FmPa5cVECIuxHXXR2%2Bmqzl5PYKjrdIyMorsJ\"}]}\r\netag: W/\"6ca65117ab4489e5faa56d56a2f83cba\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9b8b960439e835a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":163783,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"d42ddc32a8684ec604be7195bf6451bd","sha1":"dd17452eeb0a0badc26576ea818fe79548fc5617","sha256":"d0f8c6858f82516e4fd133e2318c914c8f2a3dbc54ee147c619076ea6c6db04a","sha512":"a983a7d5ce8384796e6251c5d4f90c3ce4fd628913feb60c39a3b15018f160f8f202efc65c502d107857333bf5007b5c27d7eb0a7ed1f3ca8e0d48d033900bd0","ssdeep":"768:6yLLN7P8dGTalk8h22CdbD+TriUFxXiC/SYdf3fCNbRI1HK3Esj0sxuGStjxAsmO:6yLL+TriUFxXiC/SYdKeVT","tlshash":"45f3621e7a8f740a507fca423950bec88e18b3b7c7458b3ea96b7902ccc72577617a54","first_seen":"2025-10-07T13:51:05.880471Z","last_seen":"2026-05-01T07:36:15.761376Z","times_seen":6,"resource_available":false,"data":null}},"time_used":61,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":61,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"ivtfxip.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ivtfxip.com/pc/static/js/about~d44a7288.cd4becb3.js","fqdn":"ivtfxip.com","domain":"ivtfxip.com","tld":"com"},"ip":{"addr":"104.21.78.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ivtfxip.com/pc/","date":"2026-01-04T14:57:02.129Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ivtfxip.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 25 Dec 2025 22:47:06 GMT","end":"Wed, 25 Mar 2026 23:47:02 GMT"},"fingerprint":{"sha1":"A2:E6:E0:E1:3D:71:15:E7:6A:95:1C:EC:53:3E:E4:AC:2E:D2:14:88","sha256":"EA:63:A1:B5:51:F9:8A:2E:D6:72:A0:97:14:88:41:61:B9:B7:97:70:CB:73:D8:93:0E:BF:F1:D0:C9:0A:B5:89"}}},"request":{"raw":"GET /pc/static/js/about~d44a7288.cd4becb3.js HTTP/1.1\r\nHost: ivtfxip.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ivtfxip.com/pc/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 04 Jan 2026 14:57:02 GMT\r\npriority: u=3,i=?0\r\ncontent-type: application/javascript\r\ncf-cache-status: MISS\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lCqAHbOQDht5OmAjQOn49kSAHWGMzG1L8OlVPfPZdBI0bY6LUDv2bCjBpdPjNZd%2FL2xQCHUYiaOm51ld%2BVE7XFW6z%2FxmsuWc9g%3D%3D\"}]}\r\netag: W/\"af820fcbba993a27ceb824ca31385556\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9b8b960449eb35a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":442327,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65447), with no line terminators","md5":"d7d8e818fe7bac13946eed1b0dfbaf39","sha1":"4b1a6f342d89bab99f55aa7f4974337347bc9c9c","sha256":"1ba47f2ef4a0687862eb820669e58419c9fb6dbba098193b41d46be93d816a34","sha512":"1bb741990a7b720d8c4e5aed85670ff2fe7347e1263b59dfe79ad2e6c00809b98852026eb72c30bb37d9d8f971005e2264f9cae0a3ca09f183f5da493f203277","ssdeep":"6144:rv5L/M7KvFY6mNt4hS/M7PKpsyrtBFtKKR/M7kLPlLNxgZCD/MxZX:l7sA","tlshash":"a7948410b597a27edebe5012701a1930f1762fe4d005905bb73c8d95aac8da8b72e7fc","first_seen":"2026-01-04T14:57:54.983797Z","last_seen":"2026-04-13T23:57:13.843194Z","times_seen":3,"resource_available":true,"data":null}},"time_used":327,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":327,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"ivtfxip.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.ivtfxip.com/api/app/basis/article/byType","fqdn":"api.ivtfxip.com","domain":"ivtfxip.com","tld":"com"},"ip":{"addr":"104.21.78.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ivtfxip.com/pc/","date":"2026-01-04T14:57:03.303Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.ivtfxip.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 25 Dec 2025 22:40:43 GMT","end":"Wed, 25 Mar 2026 23:40:41 GMT"},"fingerprint":{"sha1":"D1:71:A2:C4:12:9D:CD:50:E5:B5:2D:A0:DB:0A:A0:3E:34:E8:FC:96","sha256":"F4:93:8B:FD:69:F9:AF:4F:CA:47:BC:51:06:9A:1E:76:FD:94:50:77:F6:22:8E:6E:51:5C:40:DA:2A:C7:4B:B6"}}},"request":{"raw":"POST /api/app/basis/article/byType HTTP/1.1\r\nHost: api.ivtfxip.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ivtfxip.com/\r\nContent-Type: application/json;charset=UTF-8\r\naws-check: true\r\nX-Requested-With: XMLHttpRequest\r\napp_language: English\r\napp_version: P2.9.3\r\napp_client_timezone: +8\r\nrequest_domain: https://ivtfxip.com/pc/#/\r\napp_analog: false\r\napp_model: f\r\napp_auth_by_token: \r\ntheme-mode: 2\r\nContent-Length: 11\r\nOrigin: https://ivtfxip.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":11,"data":"{\"type\":56}"}},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 04 Jan 2026 14:57:03 GMT\r\ncontent-type: application/json\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cPo1%2FarkoqpAY7wodBTxznHy3wj3GPJEfI3OITE6CFmsftyqGQAZhOWRD2EhWoep%2FsiThlIW08Rq6eN%2BYjVFQdVRODGR6Z%2BTf%2FLTvDs%3D\"}]}\r\nvary: accept-encoding\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: https://ivtfxip.com\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 86400\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncf-ray: 9b8b960b79cc56c3-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":59,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"9c2f820634d4f7804bff9473e1075d96","sha1":"797e965053c4474e3d577561ccc5cfc7db3e85e3","sha256":"7929171477295ed05b0ddd10eace22051c46cecffdc3a9780c1d763302984108","sha512":"b6950b8a0f3fd45982168ca8ea9644960eb1b7a447f042a6257bdef2b265bfa0688eb7ec8581f614756a778264a02aa3ed327de7a9b465f48ef809c706320a5e","ssdeep":"","tlshash":"60a002c018ec00b14f808384101f192148bda4d519290100576cd82652f40713614726","first_seen":"2025-04-07T10:36:29.519274Z","last_seen":"2026-06-10T03:07:08.799026Z","times_seen":1173,"resource_available":false,"data":null}},"time_used":441,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":441,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"api.ivtfxip.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.ivtfxip.com/api/app/config","fqdn":"api.ivtfxip.com","domain":"ivtfxip.com","tld":"com"},"ip":{"addr":"104.21.78.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ivtfxip.com/pc/","date":"2026-01-04T14:57:03.727Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.ivtfxip.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 25 Dec 2025 22:40:43 GMT","end":"Wed, 25 Mar 2026 23:40:41 GMT"},"fingerprint":{"sha1":"D1:71:A2:C4:12:9D:CD:50:E5:B5:2D:A0:DB:0A:A0:3E:34:E8:FC:96","sha256":"F4:93:8B:FD:69:F9:AF:4F:CA:47:BC:51:06:9A:1E:76:FD:94:50:77:F6:22:8E:6E:51:5C:40:DA:2A:C7:4B:B6"}}},"request":{"raw":"OPTIONS /api/app/config HTTP/1.1\r\nHost: api.ivtfxip.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: app_analog,app_auth_by_token,app_client_timezone,app_language,app_model,app_version,aws-check,content-type,request_domain,theme-mode,x-requested-with\r\nReferer: https://ivtfxip.com/\r\nOrigin: https://ivtfxip.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 04 Jan 2026 14:57:03 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IxNt0PqtRaEKyy4iHv%2BT7Z3XksSc2Bwi%2FmM04PkMyeb%2Fs0tOaZoOFqvp5D9omf%2FOyjZXZ7MqGszgkBZqwFa0LlHtkcbXsf6TSc%2BcduQ%3D\"}]}\r\naccess-control-allow-origin: https://ivtfxip.com\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: app_analog,app_auth_by_token,app_client_timezone,app_language,app_model,app_version,aws-check,content-type,request_domain,theme-mode,x-requested-with\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 86400\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nallow: GET, HEAD, POST, PUT, DELETE, TRACE, OPTIONS, PATCH\r\ncf-cache-status: DYNAMIC\r\ncontent-length: 0\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncf-ray: 9b8b960e49e856c3-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-13T16:33:36.180633Z","times_seen":16390792,"resource_available":true,"data":null}},"time_used":206,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":206,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"api.ivtfxip.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"f-module-pc10.ivtfxip.com/f-module-pc10-2/assets/svg/icon-notice.svg","fqdn":"f-module-pc10.ivtfxip.com","domain":"ivtfxip.com","tld":"com"},"ip":{"addr":"104.21.78.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://f-module-pc10.ivtfxip.com/f-module-pc10-2/?moduleName=f-module-pc10-2","date":"2026-01-04T14:57:04.573Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"f-module-pc10.ivtfxip.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 25 Dec 2025 22:43:25 GMT","end":"Wed, 25 Mar 2026 23:43:19 GMT"},"fingerprint":{"sha1":"BD:75:C7:0C:CF:4C:8B:C6:F0:02:2E:9D:B3:1B:50:54:C3:72:BE:D9","sha256":"19:4F:8E:B1:B5:41:99:3C:AC:F4:8B:36:B6:A9:44:7E:9A:11:1B:8C:E9:7F:5B:40:32:92:FF:44:8F:66:46:C3"}}},"request":{"raw":"GET /f-module-pc10-2/assets/svg/icon-notice.svg HTTP/1.1\r\nHost: f-module-pc10.ivtfxip.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://f-module-pc10.ivtfxip.com/f-module-pc10-2/?moduleName=f-module-pc10-2\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 04 Jan 2026 14:57:04 GMT\r\npriority: u=4,i=?0\r\ncontent-type: image/svg+xml\r\ncf-cache-status: MISS\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=061Xy4G9WuZ7uMuUMzp5P%2Fhfn8AWR%2BAjKuyNvKEbEy8hvko8DMsJ7sqIBLKYdhVuGkdjq4HDNhNiCjTUcR1knAW3mv0YZc4NwjKEd%2B37HOvsfELULoRJHoo%3D\"}]}\r\netag: W/\"e8166dbf2219045f26a972fefa6d920e\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9b8b961339e70731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1523,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"44296320500569f8f56e71f3a7308965","sha1":"751377e1351d7b3cda2d4a029b1b667d33670b09","sha256":"ab9a3e651fb30a26dffdf3cb4cea7f47efcc5425d26fbe6099d043caeec5d7b5","sha512":"c155714a4ccdd986f624570066ab273d38a548cd0908ad7c7ec78c5995c63775146f052448326253dccd57b30d2233c54c942cd18b861b2ae2cd89bc02f618cc","ssdeep":"","tlshash":"1d31aa23136d565879a30162683c15c2e3e1d1cbc3c265a8e77a9d58e0f6bb50318bfc","first_seen":"2025-05-06T14:56:29.634721Z","last_seen":"2026-06-09T19:07:39.559339Z","times_seen":18,"resource_available":false,"data":null}},"time_used":65,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":65,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"f-module-pc10.ivtfxip.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}}]}