{"report_id":"2ba6a947-06f6-40c2-9cb8-bd31437287d2","version":0,"status":"done","tags":[],"date":"2026-09-07T03:45:00Z","url":{"schema":"http","addr":"ubii.pago.rk.xflvwh.com/","fqdn":"ubii.pago.rk.xflvwh.com","domain":"xflvwh.com","tld":"com"},"ip":{"addr":"13.140.41.231","port":0,"asn":0,"as":"","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"ubii.pago.rk.xflvwh.com/","fqdn":"ubii.pago.rk.xflvwh.com","domain":"xflvwh.com","tld":"com"},"title":"Ubii - Inicia sesión","dom":{"size":5701,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (479)","md5":"6b3acf29356640c899dd579291c17896","sha1":"84d0443e2aef0944e86ceb1edc7fd1eefe3e45e6","sha256":"d8a374cbe318c2bbd243082de85f5974d743e61d5a04d478120758a020cd4d50","sha512":"705986217160d985c237b13b524ece4ee7ae3037c8ae6314c23bc501eda7080c4599636de336db3d61f9f73b2f2274f4e03d0efec4f6819d1f7abafc93638a69","ssdeep":"48:tBGYsUO/lQTpd5PlPoP8q5iUab8W3Xgt22weejOOmI+63RhO85H35ngf3GMLiN+o:kUO/lQTY0Gy6OxtO85tkLxO","tlshash":"24c1ee2055f84a3e218381c59a62762b3f98e603e60f56187aac47f54fd3d8edc3716c","dom_hash":"domhash5d6565ff5362613f8ffb64b1dc0cc906","first_seen":"2026-09-07T03:43:35.294669Z","last_seen":"2026-09-07T03:45:03.029592Z","times_seen":2,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"ubii.pago.rk.xflvwh.com/","fqdn":"ubii.pago.rk.xflvwh.com","domain":"xflvwh.com","tld":"com"},"ip":{"addr":"13.140.41.231","port":0,"asn":0,"as":"","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-10-12T03:45:00Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":null},"summary":[{"fqdn":"ubii.pago.rk.xflvwh.com","ip":{"addr":"13.140.41.231","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"domain_registered":"2026-08-10","domain_rank":0,"first_seen":"2026-09-07T03:43:30.078175Z","last_seen":"2026-09-07T03:43:30.078175Z","alert_count":0,"request_count":7,"received_data":24143,"sent_data":3334,"comment":"","tags":null,"fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"ubii.pago.rk.xflvwh.com/modal.js","fqdn":"ubii.pago.rk.xflvwh.com","domain":"xflvwh.com","tld":"com"},"ip":{"addr":"13.140.41.231","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"30250526eb79db7e8c91977bb083ead1","sha1":"000812b568428b89048c1d84de563b5d18eaca52","sha256":"23fe00c276925bcf5d0ee491f985cf967baec6b52e2a3d96a2f3a8d3fff8d678","sha512":"60ba86f6dcb64dbdae21946479668a15a7a7f444302d642328ee97643e4a6892377f28cd70e0b9867209b755c4efec42dd2ab2747046f4dcd70ebf019882410a","ssdeep":"","tlshash":"f151cfa167fc063c65a78283c756733d6b29a143e50d8e187a6d0aa84fc1dcddc775c4","size":3045,"data":"","first_seen":"2026-09-07T03:43:35.299325Z","last_seen":"2026-09-08T09:59:11.603078Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ubii.pago.rk.xflvwh.com/script.js","fqdn":"ubii.pago.rk.xflvwh.com","domain":"xflvwh.com","tld":"com"},"ip":{"addr":"13.140.41.231","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"3b1624ac8dc34da3a78493ddd67fd98e","sha1":"7ea2a5559a252a6cdbfe8afb32a49630e9eec8c6","sha256":"7511802f3d0867e218bef9241749300961c903c4b00eb65a5de066c1c27358e5","sha512":"c2608d94a4cacc5d0fabf4b21659101eb8becafbe79881ae79680a5b0da74db927f6f6a69cdb08a3c5fc263749c53b72a8980af97fcdcc97e8b4c7cb45ecae06","ssdeep":"96:gjC1A4hWa0pePP24vxSYta9EHSbub/rOPJJDezVg:gjeA4hWa0pePP24vx89Bub/reJiJg","tlshash":"aed1e1792176483206f392ae97cb91827520c0173849d8a53bbcc35d2fe7d81dab2bd7","size":6269,"data":"","first_seen":"2026-09-07T03:43:35.300316Z","last_seen":"2026-09-08T09:59:11.604115Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ubii.pago.rk.xflvwh.com/utils.js","fqdn":"ubii.pago.rk.xflvwh.com","domain":"xflvwh.com","tld":"com"},"ip":{"addr":"13.140.41.231","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"381b29a6feeb9804a8f3325d1cdeb3d6","sha1":"d09c4971841ccb9507a967570157504d11101232","sha256":"e766bd7cde099481113dc5f34eb03c2daa722d4a28c387a8454c75b62572fce4","sha512":"4c04680eca45a60fbe170236c6a551a4aa0d09f0b1eba0e90498b8bc1eb13962c7f0d895d6e1faec8071cf2496536e0aceb1faed2ae9e01d8a7ddf1ecbcaefa9","ssdeep":"","tlshash":"6311cbd72df7593102dbb499471f94127102d12b1c9ecc8a7a4d83940fc8a288862acc","size":1009,"data":"","first_seen":"2026-09-07T03:43:35.298493Z","last_seen":"2026-09-07T03:45:03.043668Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"ubii.pago.rk.xflvwh.com/LogoUbiiOnline.svg","fqdn":"ubii.pago.rk.xflvwh.com","domain":"xflvwh.com","tld":"com"},"ip":{"addr":"13.140.41.231","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ubii.pago.rk.xflvwh.com/","date":"2026-09-07T03:44:32.040Z","timestamp":1788752672040,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.ubii.pago.rk.xflvwh.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 05 Sep 2026 23:17:42 GMT","end":"Fri, 04 Dec 2026 23:17:41 GMT"},"fingerprint":{"sha1":"AB:95:42:5B:F7:0F:EA:58:AB:11:6D:BF:A9:32:E0:51:90:7B:A7:62","sha256":"B6:A9:9D:FA:59:F9:91:BC:72:10:B8:8C:1D:53:FC:02:5F:C9:77:CE:C9:03:7D:9F:DF:8E:20:1D:39:E0:FD:0F"}}},"request":{"raw":"GET /LogoUbiiOnline.svg HTTP/1.1\r\nHost: ubii.pago.rk.xflvwh.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ubii.pago.rk.xflvwh.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 07 Sep 2026 03:44:32 GMT\r\nServer: Apache\r\nLast-Modified: Sun, 06 Sep 2026 00:16:51 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 1876\r\nKeep-Alive: timeout=5, max=98\r\nConnection: Keep-Alive\r\nContent-Type: image/svg+xml\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":1876,"size_decoded":2122,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"cd357abbf9f6991540e05f4c26f34c6c","sha1":"2ab8dbcc976871c6c32351612f6a570154e95e86","sha256":"571c6ac18d9f5b83349c26b03aa606fb62989a3e0def2c28d4a3eeb2c7abccf4","sha512":"b0520e6442b7bcb60d2a5c6830c3ae58b60025508fc317bbb14c4e6801134d39ec7c2178465e922aa9ef026c27879d20c0a3107082e7e06984abe26b0e6bd07a","ssdeep":"","tlshash":"a43112ca3128c5a8ad00db6fa70a9c7d206324e575824691eb827f0ebd8947b5e135cf","first_seen":"2026-09-07T03:43:35.301407Z","last_seen":"2026-09-08T09:59:11.605076Z","times_seen":4,"resource_available":false,"data":null}},"time_used":196,"timings":{"blocked":95,"dns":0,"connect":97,"send":0,"wait":101,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ubii.pago.rk.xflvwh.com/favicon.ico","fqdn":"ubii.pago.rk.xflvwh.com","domain":"xflvwh.com","tld":"com"},"ip":{"addr":"13.140.41.231","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ubii.pago.rk.xflvwh.com/","date":"2026-09-07T03:44:32.464Z","timestamp":1788752672464,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.ubii.pago.rk.xflvwh.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 05 Sep 2026 23:17:42 GMT","end":"Fri, 04 Dec 2026 23:17:41 GMT"},"fingerprint":{"sha1":"AB:95:42:5B:F7:0F:EA:58:AB:11:6D:BF:A9:32:E0:51:90:7B:A7:62","sha256":"B6:A9:9D:FA:59:F9:91:BC:72:10:B8:8C:1D:53:FC:02:5F:C9:77:CE:C9:03:7D:9F:DF:8E:20:1D:39:E0:FD:0F"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: ubii.pago.rk.xflvwh.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ubii.pago.rk.xflvwh.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nDate: Mon, 07 Sep 2026 03:44:32 GMT\r\nServer: Apache\r\nContent-Length: 355\r\nKeep-Alive: timeout=5, max=97\r\nConnection: Keep-Alive\r\nContent-Type: text/html; charset=iso-8859-1\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":355,"size_decoded":555,"mime_type":"text/html; charset=iso-8859-1","magic":"HTML document, ASCII text","md5":"4525b2d648f7c457a689fd96421783a5","sha1":"11bfe30ce44585a15a38e86bc094224ddfe2c08e","sha256":"cc0b4e42510d49c6decd464123ecf3b14ae9b47f9b4ed2ee64893e2d6520a264","sha512":"94e3e8246cf38ff7740e51aa115c8c455b14f78e672c2686b782c0ce30b6fa2dbd91a78b29b3964d9c0414aabd4b9391fd5db326665e25b4b8e73dae60ffe979","ssdeep":"","tlshash":"71e0c04f4057b3474011a2907dc01291e505236b38a152f93ac09467500897dc4aa2dd","first_seen":"2025-12-09T03:51:58.5943Z","last_seen":"2026-09-09T01:42:20.538961Z","times_seen":61481,"resource_available":true,"data":null}},"time_used":144,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":144,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ubii.pago.rk.xflvwh.com/","fqdn":"ubii.pago.rk.xflvwh.com","domain":"xflvwh.com","tld":"com"},"ip":{"addr":"13.140.41.231","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-07T03:44:31.504Z","timestamp":1788752671504,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.ubii.pago.rk.xflvwh.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 05 Sep 2026 23:17:42 GMT","end":"Fri, 04 Dec 2026 23:17:41 GMT"},"fingerprint":{"sha1":"AB:95:42:5B:F7:0F:EA:58:AB:11:6D:BF:A9:32:E0:51:90:7B:A7:62","sha256":"B6:A9:9D:FA:59:F9:91:BC:72:10:B8:8C:1D:53:FC:02:5F:C9:77:CE:C9:03:7D:9F:DF:8E:20:1D:39:E0:FD:0F"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: ubii.pago.rk.xflvwh.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 07 Sep 2026 03:44:31 GMT\r\nServer: Apache\r\nLast-Modified: Sun, 06 Sep 2026 21:06:14 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 3623\r\nKeep-Alive: timeout=5, max=100\r\nConnection: Keep-Alive\r\nContent-Type: text/html\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":3623,"size_decoded":3866,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text","md5":"767a260de09d5fc134aaf7a62fc0afa0","sha1":"c8c8ebda00135ccda9894ca7a147a981f8c5cc90","sha256":"2580ffd289064667ff0affbc5cfa981fce0157dca75d94a5253f824ad6c7fcdc","sha512":"f75a330533b7fac7100639321173c0dafedab7e71f65b505e078808c3d6c7b84e86b5391adac7d9f1a194b61e86dea34bebdc0e8960a81ddc344772efcb3d5e8","ssdeep":"","tlshash":"5571f21024f48e77118380d969a2ba1b7ed4da13d60b15047aec9be24fd7e8ecc3766d","first_seen":"2026-09-07T03:43:35.296482Z","last_seen":"2026-09-07T03:45:03.038385Z","times_seen":2,"resource_available":false,"data":null}},"time_used":324,"timings":{"blocked":-1,"dns":3,"connect":95,"send":0,"wait":115,"receive":0,"ssl":110},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ubii.pago.rk.xflvwh.com/styles.css","fqdn":"ubii.pago.rk.xflvwh.com","domain":"xflvwh.com","tld":"com"},"ip":{"addr":"13.140.41.231","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ubii.pago.rk.xflvwh.com/","date":"2026-09-07T03:44:32.031Z","timestamp":1788752672031,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.ubii.pago.rk.xflvwh.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 05 Sep 2026 23:17:42 GMT","end":"Fri, 04 Dec 2026 23:17:41 GMT"},"fingerprint":{"sha1":"AB:95:42:5B:F7:0F:EA:58:AB:11:6D:BF:A9:32:E0:51:90:7B:A7:62","sha256":"B6:A9:9D:FA:59:F9:91:BC:72:10:B8:8C:1D:53:FC:02:5F:C9:77:CE:C9:03:7D:9F:DF:8E:20:1D:39:E0:FD:0F"}}},"request":{"raw":"GET /styles.css HTTP/1.1\r\nHost: ubii.pago.rk.xflvwh.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ubii.pago.rk.xflvwh.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 07 Sep 2026 03:44:32 GMT\r\nServer: Apache\r\nLast-Modified: Sun, 06 Sep 2026 00:16:52 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 6289\r\nKeep-Alive: timeout=5, max=99\r\nConnection: Keep-Alive\r\nContent-Type: text/css\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":6289,"size_decoded":6530,"mime_type":"text/css","magic":"assembler source, Unicode text, UTF-8 text","md5":"9c684ffc46f8a563fea340c3ee841878","sha1":"e9d94e82b34f8f0636f84b8660e0b98539b40dba","sha256":"de4b739c0ec120b330c72b4d415baaee069f7b69539874d1df698b41344e9a08","sha512":"2aa871f13ddad81d8c42f52292fa4740a2055d4e2e567064cc17bc34bd606d9ba9cfd31bebc7474a91b3ea01b98f9b04ddcd1e8f49a71988baa0ac9fd7594341","ssdeep":"192:WI9qhgXktFaQFlFm+5ROeA29Ry64Cilh+wpVOHe/IYxx9R:lMmCFBFlFE2SoqE60H2","tlshash":"b5d104919a6718467407d46c3fb6d786132c9043d90ece7c3fd562988f8e298a972bcc","first_seen":"2026-09-07T03:43:35.297396Z","last_seen":"2026-09-08T09:59:11.601948Z","times_seen":4,"resource_available":false,"data":null}},"time_used":108,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":108,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ubii.pago.rk.xflvwh.com/utils.js","fqdn":"ubii.pago.rk.xflvwh.com","domain":"xflvwh.com","tld":"com"},"ip":{"addr":"13.140.41.231","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ubii.pago.rk.xflvwh.com/","date":"2026-09-07T03:44:32.032Z","timestamp":1788752672032,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.ubii.pago.rk.xflvwh.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 05 Sep 2026 23:17:42 GMT","end":"Fri, 04 Dec 2026 23:17:41 GMT"},"fingerprint":{"sha1":"AB:95:42:5B:F7:0F:EA:58:AB:11:6D:BF:A9:32:E0:51:90:7B:A7:62","sha256":"B6:A9:9D:FA:59:F9:91:BC:72:10:B8:8C:1D:53:FC:02:5F:C9:77:CE:C9:03:7D:9F:DF:8E:20:1D:39:E0:FD:0F"}}},"request":{"raw":"GET /utils.js HTTP/1.1\r\nHost: ubii.pago.rk.xflvwh.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ubii.pago.rk.xflvwh.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 07 Sep 2026 03:44:32 GMT\r\nServer: Apache\r\nLast-Modified: Sun, 06 Sep 2026 00:16:52 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 1009\r\nKeep-Alive: timeout=5, max=100\r\nConnection: Keep-Alive\r\nContent-Type: text/javascript\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":1009,"size_decoded":1258,"mime_type":"text/javascript","magic":"ASCII text","md5":"381b29a6feeb9804a8f3325d1cdeb3d6","sha1":"d09c4971841ccb9507a967570157504d11101232","sha256":"e766bd7cde099481113dc5f34eb03c2daa722d4a28c387a8454c75b62572fce4","sha512":"4c04680eca45a60fbe170236c6a551a4aa0d09f0b1eba0e90498b8bc1eb13962c7f0d895d6e1faec8071cf2496536e0aceb1faed2ae9e01d8a7ddf1ecbcaefa9","ssdeep":"","tlshash":"6311cbd72df7593102dbb499471f94127102d12b1c9ecc8a7a4d83940fc8a288862acc","first_seen":"2026-09-07T03:43:35.298493Z","last_seen":"2026-09-07T03:45:03.043668Z","times_seen":2,"resource_available":true,"data":null}},"time_used":412,"timings":{"blocked":-1,"dns":0,"connect":92,"send":0,"wait":217,"receive":0,"ssl":103},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ubii.pago.rk.xflvwh.com/modal.js","fqdn":"ubii.pago.rk.xflvwh.com","domain":"xflvwh.com","tld":"com"},"ip":{"addr":"13.140.41.231","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ubii.pago.rk.xflvwh.com/","date":"2026-09-07T03:44:32.034Z","timestamp":1788752672034,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.ubii.pago.rk.xflvwh.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 05 Sep 2026 23:17:42 GMT","end":"Fri, 04 Dec 2026 23:17:41 GMT"},"fingerprint":{"sha1":"AB:95:42:5B:F7:0F:EA:58:AB:11:6D:BF:A9:32:E0:51:90:7B:A7:62","sha256":"B6:A9:9D:FA:59:F9:91:BC:72:10:B8:8C:1D:53:FC:02:5F:C9:77:CE:C9:03:7D:9F:DF:8E:20:1D:39:E0:FD:0F"}}},"request":{"raw":"GET /modal.js HTTP/1.1\r\nHost: ubii.pago.rk.xflvwh.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ubii.pago.rk.xflvwh.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 07 Sep 2026 03:44:32 GMT\r\nServer: Apache\r\nLast-Modified: Sun, 06 Sep 2026 00:16:51 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 3045\r\nKeep-Alive: timeout=5, max=100\r\nConnection: Keep-Alive\r\nContent-Type: text/javascript\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":3045,"size_decoded":3294,"mime_type":"text/javascript","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (479)","md5":"30250526eb79db7e8c91977bb083ead1","sha1":"000812b568428b89048c1d84de563b5d18eaca52","sha256":"23fe00c276925bcf5d0ee491f985cf967baec6b52e2a3d96a2f3a8d3fff8d678","sha512":"60ba86f6dcb64dbdae21946479668a15a7a7f444302d642328ee97643e4a6892377f28cd70e0b9867209b755c4efec42dd2ab2747046f4dcd70ebf019882410a","ssdeep":"","tlshash":"f151cfa167fc063c65a78283c756733d6b29a143e50d8e187a6d0aa84fc1dcddc775c4","first_seen":"2026-09-07T03:43:35.299325Z","last_seen":"2026-09-08T09:59:11.603078Z","times_seen":4,"resource_available":true,"data":null}},"time_used":424,"timings":{"blocked":-1,"dns":0,"connect":105,"send":0,"wait":207,"receive":0,"ssl":113},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ubii.pago.rk.xflvwh.com/script.js","fqdn":"ubii.pago.rk.xflvwh.com","domain":"xflvwh.com","tld":"com"},"ip":{"addr":"13.140.41.231","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ubii.pago.rk.xflvwh.com/","date":"2026-09-07T03:44:32.035Z","timestamp":1788752672035,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.ubii.pago.rk.xflvwh.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 05 Sep 2026 23:17:42 GMT","end":"Fri, 04 Dec 2026 23:17:41 GMT"},"fingerprint":{"sha1":"AB:95:42:5B:F7:0F:EA:58:AB:11:6D:BF:A9:32:E0:51:90:7B:A7:62","sha256":"B6:A9:9D:FA:59:F9:91:BC:72:10:B8:8C:1D:53:FC:02:5F:C9:77:CE:C9:03:7D:9F:DF:8E:20:1D:39:E0:FD:0F"}}},"request":{"raw":"GET /script.js HTTP/1.1\r\nHost: ubii.pago.rk.xflvwh.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ubii.pago.rk.xflvwh.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 07 Sep 2026 03:44:32 GMT\r\nServer: Apache\r\nLast-Modified: Sun, 06 Sep 2026 00:16:52 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 6269\r\nKeep-Alive: timeout=5, max=100\r\nConnection: Keep-Alive\r\nContent-Type: text/javascript\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":6269,"size_decoded":6518,"mime_type":"text/javascript","magic":"Unicode text, UTF-8 text","md5":"3b1624ac8dc34da3a78493ddd67fd98e","sha1":"7ea2a5559a252a6cdbfe8afb32a49630e9eec8c6","sha256":"7511802f3d0867e218bef9241749300961c903c4b00eb65a5de066c1c27358e5","sha512":"c2608d94a4cacc5d0fabf4b21659101eb8becafbe79881ae79680a5b0da74db927f6f6a69cdb08a3c5fc263749c53b72a8980af97fcdcc97e8b4c7cb45ecae06","ssdeep":"96:gjC1A4hWa0pePP24vxSYta9EHSbub/rOPJJDezVg:gjeA4hWa0pePP24vx89Bub/reJiJg","tlshash":"aed1e1792176483206f392ae97cb91827520c0173849d8a53bbcc35d2fe7d81dab2bd7","first_seen":"2026-09-07T03:43:35.300316Z","last_seen":"2026-09-08T09:59:11.604115Z","times_seen":4,"resource_available":true,"data":null}},"time_used":403,"timings":{"blocked":-1,"dns":0,"connect":102,"send":0,"wait":187,"receive":0,"ssl":114},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}