{"report_id":"369b4850-d1f0-4447-a229-1a6d7d179880","version":0,"status":"done","tags":[],"date":"2026-09-04T16:46:16Z","url":{"schema":"http","addr":"wh1234.top/","fqdn":"wh1234.top","domain":"wh1234.top","tld":"top"},"ip":{"addr":"172.67.213.151","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"wh1234.top/#/","fqdn":"wh1234.top","domain":"wh1234.top","tld":"top"},"title":"Hodaxa","dom":{"size":6382,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (2425)","md5":"a8fbb4efb93aaaa00449b3d38635a62e","sha1":"bab58863543df33bfb7fd13ef4a19c296bcb9667","sha256":"9a90b439b44265b299b101f04b7f116a36858362138fad7afad8350d60d4c2b0","sha512":"7cefd800a3b4b9428cbab0834708c2b20ed7e42468c0004e1cf252c8312b8032a46af87dc947ea91c95ebc665a914792bec464b65f6eab47be013bac82c78b4c","ssdeep":"96:er87bprCuj7XKWQt/QNr6TCZydHRH/9u2mUsGKAiowGwKpvdB1NPEPHFH/10j:eqT7YwZCxfg2nfD3bwCdB1NYlf10j","tlshash":"13d1b7772d60d85e23211677eedbf4089a63711b98158824f0ed18e91fd0ff188dba39","dom_hash":"domhash57d524730bb36e7a940ffc7963fe7eb2","first_seen":"2026-09-04T16:46:51.641728Z","last_seen":"2026-09-04T16:46:51.641728Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"wh1234.top/","fqdn":"wh1234.top","domain":"wh1234.top","tld":"top"},"ip":{"addr":"172.67.213.151","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-10-09T16:46:16Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":null},"summary":[{"fqdn":"api.qawaw856.top","ip":{"addr":"186.240.200.127","port":443,"asn":7738,"as":"V tal","country":"Brazil","country_code":"BR"},"domain_registered":"2025-10-31","domain_rank":0,"first_seen":"2026-09-04T16:46:18.46211Z","last_seen":"2026-09-04T16:46:18.46211Z","alert_count":0,"request_count":1,"received_data":440,"sent_data":615,"comment":"","tags":null,"fingerprints":[{"name":"WebSocket","description":"WebSocket is a communication protocol that provides full-duplex communication channels over a single, long-lived connection, enabling interactive communication between web browsers and servers.","website":"https://en.wikipedia.org/wiki/WebSocket","common_platform_enumeration":"","icon":"WebSocket.svg","categories":["Miscellaneous"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"wh1234.top","ip":{"addr":"104.21.37.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":22,"received_data":2519622,"sent_data":9561,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"cm96.pages.dev","ip":{"addr":"172.66.45.29","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2020-09-02","domain_rank":0,"first_seen":"2026-08-28T13:07:34.872341Z","last_seen":"2026-09-04T15:51:58.773541Z","alert_count":0,"request_count":1,"received_data":15225,"sent_data":417,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"aapi.bxs201.top","ip":{"addr":"172.67.135.113","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-04-22","domain_rank":0,"first_seen":"2026-09-04T16:46:18.459162Z","last_seen":"2026-09-04T16:46:18.459162Z","alert_count":0,"request_count":2,"received_data":908,"sent_data":1040,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"recharge-override.pages.dev","ip":{"addr":"172.66.47.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2020-09-02","domain_rank":0,"first_seen":"2026-06-29T18:41:47.03049Z","last_seen":"2026-09-04T15:51:58.521953Z","alert_count":0,"request_count":1,"received_data":3828,"sent_data":438,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"wh1234.top/","fqdn":"wh1234.top","domain":"wh1234.top","tld":"top"},"ip":{"addr":"104.21.37.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"79f891ce392342b60e0a2e63b3e03967","sha1":"5f93693ec10ef08cc3a4d5c12b3149a62ce2517b","sha256":"09a09c112274930f96834a786db65366b8ec71b10be79db2d90eb819fc7b4ecb","sha512":"46a84e97da0bbcfc7fec6879ed5d691cbfcb2aeee450eb40f8744daa050dd2509f59ca9310ec3a9b5f36c8843c0f336f681d6a6578022ae54eafeed509135ae2","ssdeep":"","tlshash":"f511abfe191a602e6303404f976b7801643260b9000a184173ccde9dbb9abbde0cbb8c","size":1034,"data":"","first_seen":"2026-09-04T16:46:51.711969Z","last_seen":"2026-09-04T16:46:51.711969Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wh1234.top/","fqdn":"wh1234.top","domain":"wh1234.top","tld":"top"},"ip":{"addr":"104.21.37.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"cd7a34e714de94d5c29b8ac5acdde24b","sha1":"b722bccb435490630d97ef88cafeb02d92f70fd0","sha256":"312ebfdc50a0e168cff60c206811b02e944263a7d9060c2685509dacfacd7f71","sha512":"a724bc648a508c24e5bb1788e1f02b47030893bbb0b80a99e380d95480095983a35d8ec11193c53f0a67db47a289ab608fcbc9dbca846bfdd5d61a8832290f43","ssdeep":"","tlshash":"58e07d48ff28c7f316ce28ab516e770858d104d58c1b58024cebccc86935ed87291527","size":314,"data":"","first_seen":"2023-03-11T11:23:25Z","last_seen":"2026-09-04T18:19:42.160014Z","times_seen":42271,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wh1234.top/","fqdn":"wh1234.top","domain":"wh1234.top","tld":"top"},"ip":{"addr":"104.21.37.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"528dd01eb509d1fc3c68b48e165c9d77","sha1":"8d702f33d869eb8c53cf75c17014f96385322395","sha256":"b508dff20bdbd9138e31aa48c45bc501805e509d2fd4709b39c4a60cd5c6b43a","sha512":"4c1edeec560f431005363ff5291acc80c1c42edf7c9a6d6e4fde2f7539b6a35a8e36f0bc228503263277bf5df4525dc579575faadca614c32e5dfa885a2d343b","ssdeep":"","tlshash":"78a012bb71b851710cd51ba7a40455e01c20123105052c101c8d5151c011c171d394c0","size":84,"data":"","first_seen":"2023-04-07T06:55:59Z","last_seen":"2026-09-04T18:19:42.161906Z","times_seen":43655,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wh1234.top/charting_library/charting_library.min.js","fqdn":"wh1234.top","domain":"wh1234.top","tld":"top"},"ip":{"addr":"104.21.37.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"2a5fa40461c4e10123b62c021ab0a4ed","sha1":"527b4a35104eda6479c5ac876f57b5375ab00f51","sha256":"bcee984fd52b4a82bd6b23543bb33f6472e076c125edbdd8756d29ca230628cb","sha512":"51c91bff846f3825a21d6b301b1e4615d05bb27defef6c39c622e647f5d0262fdb0382924c9245c4a18a11cd32b60e4c913ed451b6f4b2fec1c87ce871eb874b","ssdeep":"192:9fdWSo7ktFUnoBelr6lw2LfnzuIQPlaJ1i10K+Ei/ISJhvHIheu5Ph3Ffa5:vWS2ktFUnoIlD2LfnqIJimK+5/ISJhvB","tlshash":"58224f58ed2478720acb54f0427f180f8239e278d84944ed3c84e6ec59fd44a6a6fbb8","size":10859,"data":"","first_seen":"2024-07-11T15:08:28Z","last_seen":"2026-09-04T16:48:50.862494Z","times_seen":1463,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"recharge-override.pages.dev/vendor.Z6835.js","fqdn":"recharge-override.pages.dev","domain":"recharge-override.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.47.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"504c350cd6aba7fbdc6b473bc01bcac0","sha1":"5aaf78ad998830a371db4af1a538ac894a62a0a4","sha256":"009efbec1c93669d927494ee964d81bd7a241aec57c0ee0cdf12f01f9567a36c","sha512":"6d2dd777e8f4a743f1f376d9ef942dfeba36e2e79cb28f9bdcdeb5f0d40bc61992f386eb1164f041acf9ac7407209c7244d6c19f1c5827904e39a3ec81850290","ssdeep":"","tlshash":"245194a94a54c27749d20febf0b3c6cc7e623459b107e8659b0c0c2d5447ea74ea2d9c","size":3030,"data":"","first_seen":"2026-08-28T13:07:42.328984Z","last_seen":"2026-09-04T16:46:51.678596Z","times_seen":17,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wh1234.top/#/","fqdn":"wh1234.top","domain":"wh1234.top","tld":"top"},"ip":{"addr":"104.21.37.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"7d764b0b9e8bef95dcf9f0f849edccc6","sha1":"15be8ee3a96501522a2bf45a99f67f824c8aea40","sha256":"8b8989047e79dee3c51c15e6775949819e5a84fea6abe9c0a4c705c19c380e1c","sha512":"3ed96dd8987dd6f0f5b1b37c1e7a922483c12c15802fa75cc1a7da653e06d5bcb19dc86de0b6d94558bef150d65911b020ec0639f2d3ef3844bfd33f5b78cc08","ssdeep":"","tlshash":"37e0abaa3229c03456f08b3e6dfc0c17fa576b324d8c0a1bb8f0e9091e7dd1020b88d2","size":420,"data":"","first_seen":"2026-04-22T17:43:43.839491Z","last_seen":"2026-09-04T16:46:51.715502Z","times_seen":16,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wh1234.top/assets/index-53461fb7.js","fqdn":"wh1234.top","domain":"wh1234.top","tld":"top"},"ip":{"addr":"104.21.37.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"1f32a0e757afb605a9b939c0a0fed64a","sha1":"1998c247147bfdad932893256ffdf15832488f88","sha256":"0f3c66fde20614914d67931cb158392c32d79f022659fcc088c46d23a407a4b2","sha512":"f6e17cbd422fd0c24f64049c4db2711fbf59c722fac3a23ef4158b198791081f667015436baa738dc628c371e12ae8fe031285729700a845b0d80ef7d1c2cf65","ssdeep":"96:+U5fp9YqqD+wSkSwyHFb1aiGIpTA3hvJTe34NtI7jW:+U5f7YqqiwSrlbY3YghvJayOW","tlshash":"bda1b899f80286beb97b544048480010219d7bfaf20948f5fbfead4a77b4d79d355321","size":4662,"data":"","first_seen":"2026-09-04T16:46:51.688947Z","last_seen":"2026-09-04T16:46:51.688947Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wh1234.top/assets/currencyItem-abb92136.js","fqdn":"wh1234.top","domain":"wh1234.top","tld":"top"},"ip":{"addr":"104.21.37.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"03952973ed06e581886e9dc7ecf8aa8d","sha1":"23b32a11baee7d45657b8979d3e974c224736242","sha256":"7b286ade7e2dd86100ab42c80aa96a7a7c18cd874d0ef736bce42bff9b3176bc","sha512":"bd29fa565a999aae12f8abd683635dc3541fc09e36d204c7ac80ae716a0a766066ac939f00c87358fae29863a64b3426044819264d5153684fe0182ba838adde","ssdeep":"","tlshash":"9131fec96900d6b1c7bb2492c1e80425132ebbc6711686c5fbed24063b674f8932ef26","size":1483,"data":"","first_seen":"2026-09-04T16:46:51.681611Z","last_seen":"2026-09-04T16:46:51.681611Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cm96.pages.dev/boot.js","fqdn":"cm96.pages.dev","domain":"cm96.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.45.29","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"85d48ac1712680cf860f40382e5cfe5e","sha1":"fd7c934e50ad170227ce2a71336fc9ad882f96a8","sha256":"0823cd674423df1230152137e949cea4813f3886d82c7aedcee3f2dc0bcfe62a","sha512":"38756274a839e235e804dcaac0055d81d2d27f9f9b22e5f6e5fccb23da10a2456406bdceec1a2eb6733efada2a58d6018e79935743c438d1a4a94ed2b447f00e","ssdeep":"192:576QIQyQ/C2+Nnjt1m3RiQWJQjMhiuPvQsaL0xQgIB8m/HNdbUJD/EMIi0oP0dlc:57rA9mX4MdDdOgdhkR","tlshash":"f552859ebcd3b09647a3317c4abf9401b13ea113140cda64791ca550afb166ca77beec","size":14449,"data":"","first_seen":"2026-08-28T13:07:42.394437Z","last_seen":"2026-09-04T16:46:51.664089Z","times_seen":19,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wh1234.top/assets/filters-5404949c.js","fqdn":"wh1234.top","domain":"wh1234.top","tld":"top"},"ip":{"addr":"104.21.37.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"82a042735b1589d3d284df40dc35d3e2","sha1":"58876022c14a6c935f5703c8dd37d01d97d1f1c5","sha256":"57095e42fe63f3b71f0d611779fd1adbb0a6fcecab591144e3d8a59de87e4eee","sha512":"a9dad5869c250410a843442f00ab79b9844e5e5ab54ba5e03793e76dfea39a8b5c82614a2c783c6907aefaa41708363401af1b71e831c65b4a01d88cac1efba8","ssdeep":"","tlshash":"6a6145edfdd7613396e96dfa44288410728ebe20685e0a4df54fd0425a33888e0bfb64","size":3191,"data":"","first_seen":"2026-09-04T16:46:51.699551Z","last_seen":"2026-09-04T16:46:51.699551Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wh1234.top/assets/index-f503e57a.js","fqdn":"wh1234.top","domain":"wh1234.top","tld":"top"},"ip":{"addr":"104.21.37.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"daea4a6c5ac7ce8d618b30b3a1f6daa3","sha1":"effd440714a39a31eb03d801409cfa0d95ec9e29","sha256":"3267257bf9a6eaa0e8c3ebbee8b9e2e3f17896d3ca6ebb4916d59dc6a860913f","sha512":"49547fdee13cc18670a99c464d7588853306aaca650a1c4fff6f1a447ce90f4393f944f0feee8ad3b5de112e99298f94a4bb5a0db9d96ef719a00d8b869cb862","ssdeep":"384:ALC+IQSU5p5gFV+aNUk6VqMbZ9suCxllsEEsdztZ5WoC9YNGjk6ofyemMQrCuCbl:Afl5HgFVDMVPPsuCIoC9YNhYMQrCuCbl","tlshash":"2472a542f90ac63ce5b3709105da4001721a3fdda08e98fbb1fd4d53a762ea4b7157ba","size":16763,"data":"","first_seen":"2026-09-04T16:46:51.676325Z","last_seen":"2026-09-04T16:46:51.676325Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wh1234.top/assets/index-e2cc72c8.js","fqdn":"wh1234.top","domain":"wh1234.top","tld":"top"},"ip":{"addr":"104.21.37.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"b3f43aa9537e6d12fa83b0c45708791c","sha1":"0d6ed1ba242ea2a4b8cb9a02eac4fa7b1e331bb9","sha256":"e8da2916607bac590d6e1af47cdc7b049f4236f6f814b9cc3e42e834b1efdb51","sha512":"0b22e2b94fac3f3d676be7b52c738be30bfc0f51c5fa4c78aea1c24b6113b6e91f5944f06d09e8f2f13990fcc29985527b1dff653aaa43115e1b6e71b9268b02","ssdeep":"","tlshash":"5ae0221e2aaad1b267b1c8ede2221952a3192a44131481a8e6870615a7789e6a09f368","size":388,"data":"","first_seen":"2026-09-04T16:46:51.665426Z","last_seen":"2026-09-04T16:46:51.665426Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wh1234.top/assets/index-c117a90b.js","fqdn":"wh1234.top","domain":"wh1234.top","tld":"top"},"ip":{"addr":"104.21.37.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"aa8cee52c0760b4f95dcd8f2cb6811fb","sha1":"9ce716f479dae8ab685e50afa4092575c966e9ca","sha256":"457a58238785140531c73efd64d03ac95d51e615f23e488c35c425f81899788e","sha512":"9794976338245b7b815f3b29c29c93cb3856369a7b68b3d718b40ffce9e5edc8c84e15d9a00e3fddaaffe07436052ceddd388a4d8756f800d19bdedeb9c1a052","ssdeep":"768:Yr/n6BhmPgiEAT3AlceMWBOyHwCGVh97z1TC9nGCYVAuaj2uP2cuFfyxOTJLJ2Yy:gHtyMVTz1xZ3hcuFfF9pz6Zni1Tk","tlshash":"e7a34b8da9070fbf5cfd0888a55b5a1031681fd39889cc93b7ba6e453bfac94634971c","size":103103,"data":"","first_seen":"2026-09-04T16:46:51.685848Z","last_seen":"2026-09-04T16:46:51.685848Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wh1234.top/assets/vendor-348cf0e1.js","fqdn":"wh1234.top","domain":"wh1234.top","tld":"top"},"ip":{"addr":"104.21.37.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"adf78437db266dad9d219a7ca154bcb2","sha1":"4751a690339ce8334071fc1de6adcf389b457423","sha256":"f479ad074d75a53b1d447d33e9224daea0b6cb3fc8652674a4d9b73ed13d9446","sha512":"6f8d735d41343382cb99672e6c04fa6bac1e2db0198c8d9f6ab2902754119086f9ed0c8b1231bb408218689fb325c21576def254a67fdca7f76216b94785ef68","ssdeep":"12288:CcFae4xeZMRVDwifmzbB9dw/Xbri8L1w672vI/+a8o2aqWl6yj4Ga2BD:CcFn4xLVUUmZ941w67viaqWl6yZa25","tlshash":"3d1529c57292f06147ab24e240bb0006f3396e59744e84a4f1add8db7d79d89a2b7f3c","size":881262,"data":"","first_seen":"2026-06-29T15:11:12.695981Z","last_seen":"2026-09-04T16:46:51.690901Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wh1234.top/assets/index-4f4afda7.js","fqdn":"wh1234.top","domain":"wh1234.top","tld":"top"},"ip":{"addr":"104.21.37.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"82798a2fc7298522ac5984c2865c838c","sha1":"7fa14afb916bf5d532c2f45b0cbe549ff087baf0","sha256":"4148645dd50221049c0ccf2df751e40b51d6378bf78c401b476ec7781d792482","sha512":"3594273e23be72a75b552a4005321f3a368b6f24de4ee7efbf7bfe85d84f1d1d6b5b36cc3345e9a79c1e20a97fb336f14bbdee530f0624f51f8a33bc348a0e20","ssdeep":"","tlshash":"fc01f8f8fd1d8ebb0ea20a4001902601140a2fddfa1419f198867d6a2be5940dbce32d","size":776,"data":"","first_seen":"2026-06-29T15:11:12.662053Z","last_seen":"2026-09-04T16:46:51.697711Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"wh1234.top/assets/index-4048c7de.css","fqdn":"wh1234.top","domain":"wh1234.top","tld":"top"},"ip":{"addr":"104.21.37.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://wh1234.top/","date":"2026-09-04T16:45:42.101Z","timestamp":1788540342101,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wh1234.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Aug 2026 03:01:24 GMT","end":"Tue, 03 Nov 2026 03:58:54 GMT"},"fingerprint":{"sha1":"4F:31:51:00:FA:F7:73:E7:D0:55:3A:65:0E:2F:04:FE:DA:A3:A2:AF","sha256":"2D:92:67:2E:78:26:9A:CC:28:FA:8D:03:8C:26:B6:86:3F:97:C8:18:73:30:8E:E6:30:74:D2:F8:29:E5:64:14"}}},"request":{"raw":"GET /assets/index-4048c7de.css HTTP/1.1\r\nHost: wh1234.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 04 Sep 2026 16:45:43 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 17 Jun 2026 13:42:55 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a32a45f-4aa4c\"\r\nexpires: Sat, 05 Sep 2026 04:45:42 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QcvKoTVylMaLB5NJJOgIdIk8W%2FhL7sFfjmVp7Gei2%2FNeUx3eGIMwy2TUQzYdiX3BPjVxF9B0StfkP21NtZtLkXLqnLDL8MZQQ8FHxhuXsVs3kS3%2F398NoDFaQf1b\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: a35e775229055684-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":305740,"size_decoded":67109,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (65022), with no line terminators","md5":"adaa091ef2ffaca516c7959b0bee5d19","sha1":"0df7f0d2313ec197101c8d67fca49232792f7482","sha256":"4048c7de893cf5891810c1d2a6ce1329d292091c6756851cca86aa023d2fb1e4","sha512":"4568800e3a516ad71b0451c6ac9f2261c7f5a9ab6e7de4d5c77f0c3a943e579da327a94dac0c025d794ab9f4ff93759cdfc65fdb10464a43b070547caae3812e","ssdeep":"6144:nAN/9SpddBmkZ8w71ZACkFDS3vyf58rBeV05Ts:AN/YBTZ8w71ZACkFDS3vyf58rBeV05Ts","tlshash":"9154e8a9a59011bc6f23aa7597ce5ad8f23ce6719c118de8f201600a4fc3ff91363617","first_seen":"2026-09-04T16:46:51.655948Z","last_seen":"2026-09-04T16:46:51.655948Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1874,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":901,"receive":973,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cm96.pages.dev/boot.js","fqdn":"cm96.pages.dev","domain":"cm96.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.45.29","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://wh1234.top/","date":"2026-09-04T16:45:44.005Z","timestamp":1788540344005,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cm96.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 22 Aug 2026 20:37:40 GMT","end":"Fri, 20 Nov 2026 21:35:14 GMT"},"fingerprint":{"sha1":"2E:51:33:E5:01:E6:80:F5:90:A6:7B:84:FE:59:1F:C4:16:82:F0:4F","sha256":"89:B3:C0:9C:05:73:1A:F9:40:60:D3:4B:FE:D0:B4:4D:6A:71:72:5B:DF:36:5B:39:6B:51:D7:78:01:60:20:14"}}},"request":{"raw":"GET /boot.js HTTP/1.1\r\nHost: cm96.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 04 Sep 2026 16:45:44 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=3,i=?0\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PmF%2B2Gr92pvcnXe25o1bqIeYKy5CX7bLqp8SvLeSjeW2Y4IfmqK5nkf0Sf4NIEZPZHCqxprrUrhPHmyFBlIpnueONoAdJ0Wk46ewEs6UWwNBXG5SVaCbkHaHrOvhYR1v8A%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"416b2396ec5ed3364b50800c87aa83be\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: a35e775e2f5256c1-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14449,"size_decoded":5517,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with CRLF, LF line terminators","md5":"85d48ac1712680cf860f40382e5cfe5e","sha1":"fd7c934e50ad170227ce2a71336fc9ad882f96a8","sha256":"0823cd674423df1230152137e949cea4813f3886d82c7aedcee3f2dc0bcfe62a","sha512":"38756274a839e235e804dcaac0055d81d2d27f9f9b22e5f6e5fccb23da10a2456406bdceec1a2eb6733efada2a58d6018e79935743c438d1a4a94ed2b447f00e","ssdeep":"192:576QIQyQ/C2+Nnjt1m3RiQWJQjMhiuPvQsaL0xQgIB8m/HNdbUJD/EMIi0oP0dlc:57rA9mX4MdDdOgdhkR","tlshash":"f552859ebcd3b09647a3317c4abf9401b13ea113140cda64791ca550afb166ca77beec","first_seen":"2026-08-28T13:07:42.394437Z","last_seen":"2026-09-04T16:46:51.664089Z","times_seen":19,"resource_available":true,"data":null}},"time_used":74,"timings":{"blocked":0,"dns":6,"connect":12,"send":0,"wait":56,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wh1234.top/assets/index-e2cc72c8.js","fqdn":"wh1234.top","domain":"wh1234.top","tld":"top"},"ip":{"addr":"104.21.37.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://wh1234.top/","date":"2026-09-04T16:45:44.114Z","timestamp":1788540344114,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wh1234.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Aug 2026 03:01:24 GMT","end":"Tue, 03 Nov 2026 03:58:54 GMT"},"fingerprint":{"sha1":"4F:31:51:00:FA:F7:73:E7:D0:55:3A:65:0E:2F:04:FE:DA:A3:A2:AF","sha256":"2D:92:67:2E:78:26:9A:CC:28:FA:8D:03:8C:26:B6:86:3F:97:C8:18:73:30:8E:E6:30:74:D2:F8:29:E5:64:14"}}},"request":{"raw":"GET /assets/index-e2cc72c8.js HTTP/1.1\r\nHost: wh1234.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 04 Sep 2026 16:45:44 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9T5gqYFVNQ3a8OF1z0VRxj%2FBXiHSA8opjopSWjtQERsWCuSAWmaUdH%2BHUTE081oPoDJ1LcAPEu2EIn2%2BLVaLQYKsX9VcMvMQEn1LLY%2FfoCSazRlJw5ESrkyo3%2Fz6\"}]}\r\nlast-modified: Wed, 17 Jun 2026 13:42:55 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Sat, 05 Sep 2026 04:45:44 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\npriority: u=1,i=?0\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\netag: W/\"6a32a45f-184\"\r\ncf-ray: a35e775eb9a95684-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":388,"size_decoded":1053,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (387)","md5":"b3f43aa9537e6d12fa83b0c45708791c","sha1":"0d6ed1ba242ea2a4b8cb9a02eac4fa7b1e331bb9","sha256":"e8da2916607bac590d6e1af47cdc7b049f4236f6f814b9cc3e42e834b1efdb51","sha512":"0b22e2b94fac3f3d676be7b52c738be30bfc0f51c5fa4c78aea1c24b6113b6e91f5944f06d09e8f2f13990fcc29985527b1dff653aaa43115e1b6e71b9268b02","ssdeep":"","tlshash":"5ae0221e2aaad1b267b1c8ede2221952a3192a44131481a8e6870615a7789e6a09f368","first_seen":"2026-09-04T16:46:51.665426Z","last_seen":"2026-09-04T16:46:51.665426Z","times_seen":1,"resource_available":true,"data":null}},"time_used":761,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":760,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wh1234.top/platform/dev/logo_144.png?2.0.1781703775642","fqdn":"wh1234.top","domain":"wh1234.top","tld":"top"},"ip":{"addr":"104.21.37.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wh1234.top/","date":"2026-09-04T16:45:45.087Z","timestamp":1788540345087,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wh1234.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Aug 2026 03:01:24 GMT","end":"Tue, 03 Nov 2026 03:58:54 GMT"},"fingerprint":{"sha1":"4F:31:51:00:FA:F7:73:E7:D0:55:3A:65:0E:2F:04:FE:DA:A3:A2:AF","sha256":"2D:92:67:2E:78:26:9A:CC:28:FA:8D:03:8C:26:B6:86:3F:97:C8:18:73:30:8E:E6:30:74:D2:F8:29:E5:64:14"}}},"request":{"raw":"GET /platform/dev/logo_144.png?2.0.1781703775642 HTTP/1.1\r\nHost: wh1234.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 04 Sep 2026 16:45:45 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 17 Jun 2026 13:42:36 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a32a44c-b21\"\r\nexpires: Sun, 04 Oct 2026 16:45:45 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=q%2F%2BVsqfFbxAjIAw47KuCfvVeDG0KWUtBBDWpzffaZXvfykdxguYvVHDsY4Nl6veDDdIfrMC9609hd4trPzphkt21hf2IGkbakeVA%2BQvVVa3K%2F%2FI0XpOI7fS3b2H2\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\ncf-ray: a35e7764c9e35684-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2849,"size_decoded":2939,"mime_type":"image/png","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1], baseline, precision 8, 144x96, components 3","md5":"18f4dc99730ab0192f1a361453f4ce19","sha1":"9f85660c4aa52d9e1d7d968095939219080fa43b","sha256":"e07901bdf4690353f08129dfebb3a9ef22fb47bd5d6fabd9aed8112322881311","sha512":"f4c8b14037d066b57f945ddffc463c10bf30fc4ae268b973cc2c90e3af6f5e951f01cafb7480db0d9d08bf8884bb9b9898a02f9328fda6e27139ea92f5b2e704","ssdeep":"","tlshash":"5451b6a7f36d0a92e465db71ff88eb51e3e82b11b1d633c6a50182f69b049c1ac6c509","first_seen":"2026-06-29T15:11:12.691421Z","last_seen":"2026-09-04T16:46:51.66813Z","times_seen":8,"resource_available":false,"data":null}},"time_used":697,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":697,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wh1234.top/","fqdn":"wh1234.top","domain":"wh1234.top","tld":"top"},"ip":{"addr":"104.21.37.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-04T16:45:41.166Z","timestamp":1788540341166,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wh1234.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Aug 2026 03:01:24 GMT","end":"Tue, 03 Nov 2026 03:58:54 GMT"},"fingerprint":{"sha1":"4F:31:51:00:FA:F7:73:E7:D0:55:3A:65:0E:2F:04:FE:DA:A3:A2:AF","sha256":"2D:92:67:2E:78:26:9A:CC:28:FA:8D:03:8C:26:B6:86:3F:97:C8:18:73:30:8E:E6:30:74:D2:F8:29:E5:64:14"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: wh1234.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 04 Sep 2026 16:45:41 GMT\r\ncontent-type: text/html\r\nlast-modified: Mon, 13 Jul 2026 15:12:08 GMT\r\nvary: Accept-Encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000\r\npriority: u=0,i\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=clWQQzvU1oUYVItHbJMwQzFjBjP0NyEAwJg8SfKrW48YYRkpd5GVoTqrpkzjb74VRejhIpbV3qobna9Jtdcn%2BcgufGw2S4OGtlEGPDtti3t6RObdXjUbKWnXKknv\"}]}\r\ncontent-encoding: zstd\r\ncf-ray: a35e774cb8475684-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5370,"size_decoded":2646,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1094), with CRLF, LF line terminators","md5":"c68be69cd43f4dc1718d7926ddad02a1","sha1":"45dd871081817e3237377cc9d2c4601218e6597d","sha256":"e42647cda72a7a9cc9c427d3416786a334a5d28698c6517c404165458bb9ffec","sha512":"912b285605c719a05bacabe4850537bcf0ee93b8b3923906b62ef17a0d4b4030ca2e124db4808bd3b3150805f0e5abced687d1ff8f00e44dd8237276c7b1ec53","ssdeep":"96:+r82ztf53uSPEFLhVt/pqr6TCZydHRH/gu2mUsGKAiowGwuB1niHZiHFH/1U:+FR9PEdWZCxfP2nfD3bwuB1ni5ilf1U","tlshash":"54b172b35ca1c82e2371022beed7f008df611193851a4950b4dc54ee4fe2fe588dbb26","first_seen":"2026-09-04T16:46:51.671299Z","last_seen":"2026-09-04T16:46:51.671299Z","times_seen":1,"resource_available":false,"data":null}},"time_used":759,"timings":{"blocked":-1,"dns":37,"connect":23,"send":0,"wait":699,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wh1234.top/platform/dev/config.js?1788540344056","fqdn":"wh1234.top","domain":"wh1234.top","tld":"top"},"ip":{"addr":"104.21.37.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://wh1234.top/","date":"2026-09-04T16:45:44.060Z","timestamp":1788540344060,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wh1234.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Aug 2026 03:01:24 GMT","end":"Tue, 03 Nov 2026 03:58:54 GMT"},"fingerprint":{"sha1":"4F:31:51:00:FA:F7:73:E7:D0:55:3A:65:0E:2F:04:FE:DA:A3:A2:AF","sha256":"2D:92:67:2E:78:26:9A:CC:28:FA:8D:03:8C:26:B6:86:3F:97:C8:18:73:30:8E:E6:30:74:D2:F8:29:E5:64:14"}}},"request":{"raw":"GET /platform/dev/config.js?1788540344056 HTTP/1.1\r\nHost: wh1234.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 04 Sep 2026 16:45:44 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=w6ow3WBK9LS5jNeLl0XBBTl9Nnu3YEISOyTzkUz7%2FcXgriKoKJHmsgvIdAZIGbPPAa2yI2ulu%2FOxVZt1aikuejANbjB8EGglFrTELe%2BJ%2FxQ79cqKGPhwVFhU79hB\"}]}\r\nlast-modified: Wed, 17 Jun 2026 13:42:36 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Sat, 05 Sep 2026 04:45:44 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\npriority: u=3,i=?0\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\netag: W/\"6a32a44c-18a\"\r\ncf-ray: a35e775e69a05684-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":394,"size_decoded":1039,"mime_type":"application/javascript","magic":"ASCII text, with CRLF line terminators","md5":"945c4407e2ebb40991241bd54af50e8b","sha1":"c83ca8c3a55b8d2472227c14d99ca7f306aebb4c","sha256":"fe08fe2646cf28b611f22664d9224cf38fcacf1af20343b9042dcdeafea2a5da","sha512":"71f47c7555ff48524c751684074b8c6f2a99f9087e87af2371bb951533308003cd862bd31c47418d2ebe3f5940a0aae2fa40d473f7728ec5708b77ff0f5b4857","ssdeep":"","tlshash":"a6e02b663228c03455b48b2a6dfc0d17f65767324d9c051bb8b495091e79d5420b8892","first_seen":"2026-04-22T17:43:43.793988Z","last_seen":"2026-09-04T16:46:51.673861Z","times_seen":16,"resource_available":false,"data":null}},"time_used":677,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":677,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aapi.bxs201.top/api/common/getAllSetting","fqdn":"aapi.bxs201.top","domain":"bxs201.top","tld":"top"},"ip":{"addr":"172.67.135.113","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://wh1234.top/","date":"2026-09-04T16:45:44.065Z","timestamp":1788540344065,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bxs201.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 27 Aug 2026 10:45:50 GMT","end":"Wed, 25 Nov 2026 11:43:12 GMT"},"fingerprint":{"sha1":"DD:48:61:44:2E:A6:8C:7C:75:35:8A:71:DD:BA:A4:AD:E0:35:BE:7E","sha256":"F7:DE:33:EB:1A:8B:81:02:18:4C:A3:47:86:76:B0:48:62:9D:5C:65:38:26:13:B6:57:30:8A:81:CF:0E:42:FD"}}},"request":{"raw":"OPTIONS /api/common/getAllSetting HTTP/1.1\r\nHost: aapi.bxs201.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: lang\r\nOrigin: https://wh1234.top\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 502 \r\nretry-after: 60\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\ndate: Fri, 04 Sep 2026 16:45:44 GMT\r\nx-frame-options: SAMEORIGIN\r\nserver-timing: cfExtPri\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\ncf-ray: a35e775ee84a49c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 6403\r\n\r\n","headers":null,"cookies":null,"status_code":"502","status_text":"Bad Gateway","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":454,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-04T18:58:27.736951Z","times_seen":18278546,"resource_available":true,"data":null}},"time_used":749,"timings":{"blocked":-1,"dns":60,"connect":13,"send":0,"wait":675,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wh1234.top/assets/index-f503e57a.js","fqdn":"wh1234.top","domain":"wh1234.top","tld":"top"},"ip":{"addr":"104.21.37.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://wh1234.top/","date":"2026-09-04T16:45:44.106Z","timestamp":1788540344106,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wh1234.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Aug 2026 03:01:24 GMT","end":"Tue, 03 Nov 2026 03:58:54 GMT"},"fingerprint":{"sha1":"4F:31:51:00:FA:F7:73:E7:D0:55:3A:65:0E:2F:04:FE:DA:A3:A2:AF","sha256":"2D:92:67:2E:78:26:9A:CC:28:FA:8D:03:8C:26:B6:86:3F:97:C8:18:73:30:8E:E6:30:74:D2:F8:29:E5:64:14"}}},"request":{"raw":"GET /assets/index-f503e57a.js HTTP/1.1\r\nHost: wh1234.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 04 Sep 2026 16:45:44 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 17 Jun 2026 13:42:55 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a32a45f-417b\"\r\nexpires: Sat, 05 Sep 2026 04:45:44 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GkOslgiunZo5acgd3otiArojRisFRXXvFKuWKpUIZBMsqMwWtZ2ACaRufBcHP3kKsCkLiJ4uM4Gcgs%2BYaTnEDxp5lpqWEJi5ki9FjLvxXGQcrCSQIeDyv%2Be1bFQd\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=1,i=?0\r\ncf-ray: a35e775ea9a35684-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16763,"size_decoded":5220,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (16762)","md5":"daea4a6c5ac7ce8d618b30b3a1f6daa3","sha1":"effd440714a39a31eb03d801409cfa0d95ec9e29","sha256":"3267257bf9a6eaa0e8c3ebbee8b9e2e3f17896d3ca6ebb4916d59dc6a860913f","sha512":"49547fdee13cc18670a99c464d7588853306aaca650a1c4fff6f1a447ce90f4393f944f0feee8ad3b5de112e99298f94a4bb5a0db9d96ef719a00d8b869cb862","ssdeep":"384:ALC+IQSU5p5gFV+aNUk6VqMbZ9suCxllsEEsdztZ5WoC9YNGjk6ofyemMQrCuCbl:Afl5HgFVDMVPPsuCIoC9YNhYMQrCuCbl","tlshash":"2472a542f90ac63ce5b3709105da4001721a3fdda08e98fbb1fd4d53a762ea4b7157ba","first_seen":"2026-09-04T16:46:51.676325Z","last_seen":"2026-09-04T16:46:51.676325Z","times_seen":1,"resource_available":true,"data":null}},"time_used":745,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":705,"receive":40,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"recharge-override.pages.dev/vendor.Z6835.js","fqdn":"recharge-override.pages.dev","domain":"recharge-override.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.47.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://wh1234.top/","date":"2026-09-04T16:45:42.292Z","timestamp":1788540342292,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"recharge-override.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 17 Aug 2026 06:46:15 GMT","end":"Sun, 15 Nov 2026 07:45:00 GMT"},"fingerprint":{"sha1":"31:FD:F0:1A:FC:08:A4:E4:F5:76:F4:5C:C7:1B:4C:C7:F3:24:EC:57","sha256":"B2:09:71:70:0D:F8:13:51:A0:E9:29:C4:6A:34:F8:F8:77:FB:0A:5C:00:C4:F6:85:EE:94:96:1E:AD:75:A1:C0"}}},"request":{"raw":"GET /vendor.Z6835.js HTTP/1.1\r\nHost: recharge-override.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 04 Sep 2026 16:45:42 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=3,i=?0\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xCpOHRK4a8heXFetboMCqLL3PJssLB3mKguZEr4Vb%2BmGUdks8VaanHL6zrGBBwXX64nnvFfSx%2FmLRl7UtNAqeyk%2F0zh%2FDfzVaeb3deghdjDj8vUgL6QmzTdQ5%2BM4fzo2B2fZsPAIyhjDOcrUko4%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"ff691e356d6eced588bb084e9c0aab41\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: a35e77537e040b65-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3030,"size_decoded":2072,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text, with very long lines (3029)","md5":"504c350cd6aba7fbdc6b473bc01bcac0","sha1":"5aaf78ad998830a371db4af1a538ac894a62a0a4","sha256":"009efbec1c93669d927494ee964d81bd7a241aec57c0ee0cdf12f01f9567a36c","sha512":"6d2dd777e8f4a743f1f376d9ef942dfeba36e2e79cb28f9bdcdeb5f0d40bc61992f386eb1164f041acf9ac7407209c7244d6c19f1c5827904e39a3ec81850290","ssdeep":"","tlshash":"245194a94a54c27749d20febf0b3c6cc7e623459b107e8659b0c0c2d5447ea74ea2d9c","first_seen":"2026-08-28T13:07:42.328984Z","last_seen":"2026-09-04T16:46:51.678596Z","times_seen":17,"resource_available":true,"data":null}},"time_used":126,"timings":{"blocked":-1,"dns":4,"connect":16,"send":0,"wait":105,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wh1234.top/assets/index-9fa27bd9.css","fqdn":"wh1234.top","domain":"wh1234.top","tld":"top"},"ip":{"addr":"104.21.37.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://wh1234.top/","date":"2026-09-04T16:45:44.116Z","timestamp":1788540344116,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wh1234.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Aug 2026 03:01:24 GMT","end":"Tue, 03 Nov 2026 03:58:54 GMT"},"fingerprint":{"sha1":"4F:31:51:00:FA:F7:73:E7:D0:55:3A:65:0E:2F:04:FE:DA:A3:A2:AF","sha256":"2D:92:67:2E:78:26:9A:CC:28:FA:8D:03:8C:26:B6:86:3F:97:C8:18:73:30:8E:E6:30:74:D2:F8:29:E5:64:14"}}},"request":{"raw":"GET /assets/index-9fa27bd9.css HTTP/1.1\r\nHost: wh1234.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 04 Sep 2026 16:45:44 GMT\r\ncontent-type: text/css\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lvRjLzaqSealbu8z5EbknUT%2FzH%2FnZA2uLXiq%2BBzQUppraAEOZShyZVMW5UsZtJl0lHJaAwXNahY3Wi4%2FPYr3sT%2ByyeoAPDLy2xY4Sdd7GxocJnLNi7uOHECB3WRG\"}]}\r\nlast-modified: Wed, 17 Jun 2026 13:42:55 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Sat, 05 Sep 2026 04:45:44 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\npriority: u=2,i=?0\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\netag: W/\"6a32a45f-3d\"\r\ncf-ray: a35e775eb9aa5684-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":61,"size_decoded":815,"mime_type":"text/css","magic":"ASCII text","md5":"aedeb74e602c41cee34bd6935a50e570","sha1":"7fd40dd1eec17a39582985c82e309a548cc7bd33","sha256":"9fa27bd952afcd8941dc89eabf27d6a5c5b11b12921f61f91ca79b0fd41dd1f6","sha512":"d2c82c912e79868d7a71a602e20e1bf65838fdf3e6f954e7ef98f434629ce2f9de4b62de550d15efcedf2a91a6172addb05208a68d8cabcfff72f58af08df442","ssdeep":"","tlshash":"dda0022d12192504f3364712ff0ae90ecf3d69579b91422953031ca635dba8f255810a","first_seen":"2026-06-01T14:27:43.793485Z","last_seen":"2026-09-04T16:46:51.679443Z","times_seen":10,"resource_available":false,"data":null}},"time_used":671,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":671,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wh1234.top/assets/currencyItem-abb92136.js","fqdn":"wh1234.top","domain":"wh1234.top","tld":"top"},"ip":{"addr":"104.21.37.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://wh1234.top/","date":"2026-09-04T16:45:44.120Z","timestamp":1788540344120,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wh1234.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Aug 2026 03:01:24 GMT","end":"Tue, 03 Nov 2026 03:58:54 GMT"},"fingerprint":{"sha1":"4F:31:51:00:FA:F7:73:E7:D0:55:3A:65:0E:2F:04:FE:DA:A3:A2:AF","sha256":"2D:92:67:2E:78:26:9A:CC:28:FA:8D:03:8C:26:B6:86:3F:97:C8:18:73:30:8E:E6:30:74:D2:F8:29:E5:64:14"}}},"request":{"raw":"GET /assets/currencyItem-abb92136.js HTTP/1.1\r\nHost: wh1234.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 04 Sep 2026 16:45:44 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 17 Jun 2026 13:42:55 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a32a45f-5cb\"\r\nexpires: Sat, 05 Sep 2026 04:45:44 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Okemw%2BWgWQCDHSLxW5gSiVPMsmfUzGk%2FA6QJ%2FO%2FC7SrO8Q%2BN8cTGOQnAMZDdtApkfGewkhNE2IHBXMunrZY9Zbb6cCoik50yghrjjAtLXDvotIKL4Jp52KFBOta5\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=1,i=?0\r\ncf-ray: a35e775ec9ac5684-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1483,"size_decoded":1539,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (1482)","md5":"03952973ed06e581886e9dc7ecf8aa8d","sha1":"23b32a11baee7d45657b8979d3e974c224736242","sha256":"7b286ade7e2dd86100ab42c80aa96a7a7c18cd874d0ef736bce42bff9b3176bc","sha512":"bd29fa565a999aae12f8abd683635dc3541fc09e36d204c7ac80ae716a0a766066ac939f00c87358fae29863a64b3426044819264d5153684fe0182ba838adde","ssdeep":"","tlshash":"9131fec96900d6b1c7bb2492c1e80425132ebbc6711686c5fbed24063b674f8932ef26","first_seen":"2026-09-04T16:46:51.681611Z","last_seen":"2026-09-04T16:46:51.681611Z","times_seen":1,"resource_available":true,"data":null}},"time_used":715,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":715,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wh1234.top/platform/dev/favicon.ico?2.0.1781703775642","fqdn":"wh1234.top","domain":"wh1234.top","tld":"top"},"ip":{"addr":"104.21.37.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wh1234.top/","date":"2026-09-04T16:45:45.091Z","timestamp":1788540345091,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wh1234.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Aug 2026 03:01:24 GMT","end":"Tue, 03 Nov 2026 03:58:54 GMT"},"fingerprint":{"sha1":"4F:31:51:00:FA:F7:73:E7:D0:55:3A:65:0E:2F:04:FE:DA:A3:A2:AF","sha256":"2D:92:67:2E:78:26:9A:CC:28:FA:8D:03:8C:26:B6:86:3F:97:C8:18:73:30:8E:E6:30:74:D2:F8:29:E5:64:14"}}},"request":{"raw":"GET /platform/dev/favicon.ico?2.0.1781703775642 HTTP/1.1\r\nHost: wh1234.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 04 Sep 2026 16:45:46 GMT\r\ncontent-type: image/x-icon\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OBbGGqf0NqSvE1JVfLJK2H4UB4Rq474tgQXoK3MmiXFBeFhpCK2uAu%2BoIbZT4Fw%2FwfweSUfzCDVHOHeMoVMigMZzWJdmUIqWGBMaGS9w52VyvJXj11D%2Bw7z8bqAx\"}]}\r\nlast-modified: Wed, 17 Jun 2026 13:42:36 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000\r\npriority: u=6,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\netag: W/\"6a32a44c-68d\"\r\ncf-ray: a35e7764d9e55684-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1677,"size_decoded":1926,"mime_type":"image/x-icon","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1], baseline, precision 8, 57x38, components 3","md5":"5cc0155043de66e7e554dc76dea7e7e6","sha1":"d86031f827d88bda5257306aaca13e8de1584536","sha256":"1298dcbf9df2717544de0dc74ede64fddf06692244761d675c3e0c34df1aa94c","sha512":"9a13af77aba2e36169e3baac0d53ccada2cf15e3a3089d5a3cc4645be92c3d705edf24e0205aac5ecbff220f32ae6ba51dc635cc14dcff54aa094c6807080e1d","ssdeep":"","tlshash":"aa319672b78567a1ec518bf582022796f7ac7922fac56715a9c041f3cb10ec5685c90d","first_seen":"2026-06-29T15:11:12.654967Z","last_seen":"2026-09-04T16:46:51.683886Z","times_seen":8,"resource_available":false,"data":null}},"time_used":985,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":985,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wh1234.top/assets/index-c117a90b.js","fqdn":"wh1234.top","domain":"wh1234.top","tld":"top"},"ip":{"addr":"104.21.37.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://wh1234.top/","date":"2026-09-04T16:45:42.097Z","timestamp":1788540342097,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wh1234.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Aug 2026 03:01:24 GMT","end":"Tue, 03 Nov 2026 03:58:54 GMT"},"fingerprint":{"sha1":"4F:31:51:00:FA:F7:73:E7:D0:55:3A:65:0E:2F:04:FE:DA:A3:A2:AF","sha256":"2D:92:67:2E:78:26:9A:CC:28:FA:8D:03:8C:26:B6:86:3F:97:C8:18:73:30:8E:E6:30:74:D2:F8:29:E5:64:14"}}},"request":{"raw":"GET /assets/index-c117a90b.js HTTP/1.1\r\nHost: wh1234.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 04 Sep 2026 16:45:42 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 27 Jul 2026 08:04:11 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a6710fb-192bf\"\r\nexpires: Sat, 05 Sep 2026 04:45:42 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=acqBW1cEN9%2Fhoj54WUqFu6kR7Bz%2FaISNr0P84jFoC2u3e%2Fs884zImvOu9PPZkbrpRtpDrqEunqNl2nMOV1Nz0uzripIuq6smELcH9EBF1S%2BHn354UMRPpuzaUR1j\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a35e775219025684-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":103103,"size_decoded":29141,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65526), with no line terminators","md5":"aa8cee52c0760b4f95dcd8f2cb6811fb","sha1":"9ce716f479dae8ab685e50afa4092575c966e9ca","sha256":"457a58238785140531c73efd64d03ac95d51e615f23e488c35c425f81899788e","sha512":"9794976338245b7b815f3b29c29c93cb3856369a7b68b3d718b40ffce9e5edc8c84e15d9a00e3fddaaffe07436052ceddd388a4d8756f800d19bdedeb9c1a052","ssdeep":"768:Yr/n6BhmPgiEAT3AlceMWBOyHwCGVh97z1TC9nGCYVAuaj2uP2cuFfyxOTJLJ2Yy:gHtyMVTz1xZ3hcuFfF9pz6Zni1Tk","tlshash":"e7a34b8da9070fbf5cfd0888a55b5a1031681fd39889cc93b7ba6e453bfac94634971c","first_seen":"2026-09-04T16:46:51.685848Z","last_seen":"2026-09-04T16:46:51.685848Z","times_seen":1,"resource_available":true,"data":null}},"time_used":943,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":891,"receive":52,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wh1234.top/assets/vendor-72ef657d.css","fqdn":"wh1234.top","domain":"wh1234.top","tld":"top"},"ip":{"addr":"104.21.37.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://wh1234.top/","date":"2026-09-04T16:45:42.100Z","timestamp":1788540342100,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wh1234.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Aug 2026 03:01:24 GMT","end":"Tue, 03 Nov 2026 03:58:54 GMT"},"fingerprint":{"sha1":"4F:31:51:00:FA:F7:73:E7:D0:55:3A:65:0E:2F:04:FE:DA:A3:A2:AF","sha256":"2D:92:67:2E:78:26:9A:CC:28:FA:8D:03:8C:26:B6:86:3F:97:C8:18:73:30:8E:E6:30:74:D2:F8:29:E5:64:14"}}},"request":{"raw":"GET /assets/vendor-72ef657d.css HTTP/1.1\r\nHost: wh1234.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 04 Sep 2026 16:45:43 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 17 Jun 2026 13:42:55 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a32a45f-16997\"\r\nexpires: Sat, 05 Sep 2026 04:45:42 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SuY%2BgQOLZJzEHbF9QIUfbWj5zEJyTIIYj63IyWwpSJneAV40aquLoKGVVwAe%2FGM9uoL4784JbaRrmmUpQfLCBq%2F%2B6OH7u0bT4MgtXU91X73jYY9GvfBwzygqNQVr\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: a35e775229045684-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":92567,"size_decoded":38358,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (65022), with no line terminators","md5":"b40940e3efd47e3e653fe1fbec0ab363","sha1":"3911d44e1bceb07e83746e6bc68de9dbb587b11a","sha256":"72ef657df5906e9f23040a4ceb49985bf894ddcb4324d7d873a0c20b15d3e864","sha512":"f3706c9146b2091fb1a864ab4180d0a1538e801686af21bab4c7231421859a99fba7dd694632faaf1c457fb06711fcb16809e2221fe692c16390e7e98ccbf4d5","ssdeep":"1536:ZTIyNBi3MFYaQj73rx3WqyrtpqoSWEDZEnX73:ZdN0rxmNH9yDWr3","tlshash":"0193c5a5e9c4a1fc6f26f6659b4766d8f13cf661cc01daa0f109512d0fc7bf50223a2a","first_seen":"2024-01-05T03:21:29Z","last_seen":"2026-09-04T16:46:51.687996Z","times_seen":382,"resource_available":false,"data":null}},"time_used":1030,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":933,"receive":97,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wh1234.top/assets/index-53461fb7.js","fqdn":"wh1234.top","domain":"wh1234.top","tld":"top"},"ip":{"addr":"104.21.37.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://wh1234.top/","date":"2026-09-04T16:45:44.108Z","timestamp":1788540344108,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wh1234.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Aug 2026 03:01:24 GMT","end":"Tue, 03 Nov 2026 03:58:54 GMT"},"fingerprint":{"sha1":"4F:31:51:00:FA:F7:73:E7:D0:55:3A:65:0E:2F:04:FE:DA:A3:A2:AF","sha256":"2D:92:67:2E:78:26:9A:CC:28:FA:8D:03:8C:26:B6:86:3F:97:C8:18:73:30:8E:E6:30:74:D2:F8:29:E5:64:14"}}},"request":{"raw":"GET /assets/index-53461fb7.js HTTP/1.1\r\nHost: wh1234.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 04 Sep 2026 16:45:44 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 17 Jun 2026 13:42:55 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a32a45f-1236\"\r\nexpires: Sat, 05 Sep 2026 04:45:44 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XS7zhte7IrGNWXHDm5LOWi1pC8y2fz8FzU%2F3I3lHhfqtSKo6JrubtgX14MICjU1auQNEEqUY6Cv4x9%2B%2FeLEw7W4nRgi%2Bc%2FcyYNys3kurocUFnjMAzEqylzjhS4Zj\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=1,i=?0\r\ncf-ray: a35e775ea9a45684-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4662,"size_decoded":2862,"mime_type":"application/javascript","magic":"Java source, Unicode text, UTF-8 text, with very long lines (4657)","md5":"1f32a0e757afb605a9b939c0a0fed64a","sha1":"1998c247147bfdad932893256ffdf15832488f88","sha256":"0f3c66fde20614914d67931cb158392c32d79f022659fcc088c46d23a407a4b2","sha512":"f6e17cbd422fd0c24f64049c4db2711fbf59c722fac3a23ef4158b198791081f667015436baa738dc628c371e12ae8fe031285729700a845b0d80ef7d1c2cf65","ssdeep":"96:+U5fp9YqqD+wSkSwyHFb1aiGIpTA3hvJTe34NtI7jW:+U5f7YqqiwSrlbY3YghvJayOW","tlshash":"bda1b899f80286beb97b544048480010219d7bfaf20948f5fbfead4a77b4d79d355321","first_seen":"2026-09-04T16:46:51.688947Z","last_seen":"2026-09-04T16:46:51.688947Z","times_seen":1,"resource_available":true,"data":null}},"time_used":697,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":697,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wh1234.top/assets/vendor-348cf0e1.js","fqdn":"wh1234.top","domain":"wh1234.top","tld":"top"},"ip":{"addr":"104.21.37.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://wh1234.top/","date":"2026-09-04T16:45:42.099Z","timestamp":1788540342099,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wh1234.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Aug 2026 03:01:24 GMT","end":"Tue, 03 Nov 2026 03:58:54 GMT"},"fingerprint":{"sha1":"4F:31:51:00:FA:F7:73:E7:D0:55:3A:65:0E:2F:04:FE:DA:A3:A2:AF","sha256":"2D:92:67:2E:78:26:9A:CC:28:FA:8D:03:8C:26:B6:86:3F:97:C8:18:73:30:8E:E6:30:74:D2:F8:29:E5:64:14"}}},"request":{"raw":"GET /assets/vendor-348cf0e1.js HTTP/1.1\r\nHost: wh1234.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 04 Sep 2026 16:45:43 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 17 Jun 2026 13:42:55 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a32a45f-d726e\"\r\nexpires: Sat, 05 Sep 2026 04:45:42 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IU%2Fqu3LTA45nhhLzUN1rIFWUMF9%2FoNV8OKdQXLUhU3qWVhy3e5K8QTnvD83y8Zyf%2BqyROzyu1%2BN4CqEexhWgEb2eidKkkaMapLFMWTMeVoiBm1TMrznqolbYdE1Z\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=1,i=?0\r\ncf-ray: a35e775229035684-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":881262,"size_decoded":291883,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"adf78437db266dad9d219a7ca154bcb2","sha1":"4751a690339ce8334071fc1de6adcf389b457423","sha256":"f479ad074d75a53b1d447d33e9224daea0b6cb3fc8652674a4d9b73ed13d9446","sha512":"6f8d735d41343382cb99672e6c04fa6bac1e2db0198c8d9f6ab2902754119086f9ed0c8b1231bb408218689fb325c21576def254a67fdca7f76216b94785ef68","ssdeep":"12288:CcFae4xeZMRVDwifmzbB9dw/Xbri8L1w672vI/+a8o2aqWl6yj4Ga2BD:CcFn4xLVUUmZ941w67viaqWl6yZa25","tlshash":"3d1529c57292f06147ab24e240bb0006f3396e59744e84a4f1add8db7d79d89a2b7f3c","first_seen":"2026-06-29T15:11:12.695981Z","last_seen":"2026-09-04T16:46:51.690901Z","times_seen":8,"resource_available":true,"data":null}},"time_used":1606,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":903,"receive":703,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wh1234.top/resource/fonts/Arial.ttf","fqdn":"wh1234.top","domain":"wh1234.top","tld":"top"},"ip":{"addr":"104.21.37.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://wh1234.top/","date":"2026-09-04T16:45:44.002Z","timestamp":1788540344002,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wh1234.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Aug 2026 03:01:24 GMT","end":"Tue, 03 Nov 2026 03:58:54 GMT"},"fingerprint":{"sha1":"4F:31:51:00:FA:F7:73:E7:D0:55:3A:65:0E:2F:04:FE:DA:A3:A2:AF","sha256":"2D:92:67:2E:78:26:9A:CC:28:FA:8D:03:8C:26:B6:86:3F:97:C8:18:73:30:8E:E6:30:74:D2:F8:29:E5:64:14"}}},"request":{"raw":"GET /resource/fonts/Arial.ttf HTTP/1.1\r\nHost: wh1234.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://wh1234.top/assets/index-4048c7de.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 04 Sep 2026 16:45:44 GMT\r\ncontent-type: application/octet-stream\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 17 Jun 2026 13:42:36 GMT\r\netag: \"6a32a44c-ff9e4\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FJk8Z7PWY1u4ttYLfWBvwPiXIcGJaBdeDO5MExqXvV7RbWGRB1Haukl%2BJXLpm2w25FADJcu0oiVai4flSXGpDvvoJ8om71BEUI9jplEts4zTgVmMATL%2BFUO%2FWZ3R\"}]}\r\ncf-ray: a35e775e099e5684-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1047012\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1047012,"size_decoded":1047757,"mime_type":"application/octet-stream","magic":"TrueType Font data, digitally signed, 25 tables, 1st \"DSIG\", 58 names, Unicode, � 2017 The Monotype Corporation. All Rights Reserved. ","md5":"ffe66dbfc4b07f36ef38dd621ad2c7cc","sha1":"e032b102cfc37c3226d17e1b462edea5fbf8fe1c","sha256":"c1216a01b3cc4e94df72577a6f618154058a1d8999ed58fa31ab7e54c7e4be4b","sha512":"3c7952b71c8117938c5284efca0e0b3e8c20d7b84c74a4890f76a72af3b26295786b0f7c33d9b6c980527b4c4c8dad628d1f5e7e5f202d11076367f082349bb3","ssdeep":"24576:NoQIQRjo/Y7wjgTmKJ4WxA7EAD4OBfDamXKE6AMra:NHIQJo/Y7wjgTm0PxAwJHE6hG","tlshash":"f125be0bf3929f0fe3902b38c9a5d761939b76189b2743b73d8c5858ecc85a45e487d2","first_seen":"2023-07-29T15:16:45Z","last_seen":"2026-09-04T16:58:43.029725Z","times_seen":2378,"resource_available":false,"data":null}},"time_used":1747,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":470,"receive":1277,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wh1234.top/assets/index-bc011be9.css","fqdn":"wh1234.top","domain":"wh1234.top","tld":"top"},"ip":{"addr":"104.21.37.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://wh1234.top/","date":"2026-09-04T16:45:44.111Z","timestamp":1788540344111,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wh1234.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Aug 2026 03:01:24 GMT","end":"Tue, 03 Nov 2026 03:58:54 GMT"},"fingerprint":{"sha1":"4F:31:51:00:FA:F7:73:E7:D0:55:3A:65:0E:2F:04:FE:DA:A3:A2:AF","sha256":"2D:92:67:2E:78:26:9A:CC:28:FA:8D:03:8C:26:B6:86:3F:97:C8:18:73:30:8E:E6:30:74:D2:F8:29:E5:64:14"}}},"request":{"raw":"GET /assets/index-bc011be9.css HTTP/1.1\r\nHost: wh1234.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 04 Sep 2026 16:45:45 GMT\r\ncontent-type: text/css\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=e2ya568iBc21oYtTo0MFpljXik42P279%2FuXLrbK8A9xYxoZZjEA3E%2F%2FkDb2WdJ0ibt4%2FYoDaMy%2FigRoypGaJThbbOibUkU7MBV5CwGQEpYLZ3qNNPeMSgU%2FftefU\"}]}\r\nlast-modified: Wed, 17 Jun 2026 13:42:55 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Sat, 05 Sep 2026 04:45:45 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\npriority: u=2,i=?0\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\netag: W/\"6a32a45f-18d\"\r\ncf-ray: a35e775eb9a65684-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":397,"size_decoded":950,"mime_type":"text/css","magic":"ASCII text, with very long lines (396)","md5":"5353ff252ee4a5e7a3d0176de6a6c712","sha1":"c83942b5dfdb4aa8be53f26b39e53b0b257595e0","sha256":"bc011be90fd6cd33a399912151a5f69ba0d8e394563c71c4c1bea7a4ec032516","sha512":"9a17506817918ef0c9a5d0caebaed8f603641dc1015a726bdf247645a7e0a988b543756d7254abafa18dd4cd9d27c9a198300632156faf59f05c1e27f0a5e30a","ssdeep":"","tlshash":"5ae092c890d6927fb62b607d267c931ad425ac88d8007bb8e67fabb146c7ac53172215","first_seen":"2024-01-05T03:21:29Z","last_seen":"2026-09-04T16:46:51.693515Z","times_seen":1564,"resource_available":false,"data":null}},"time_used":1751,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1751,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wh1234.top/assets/index-df50c91c.css","fqdn":"wh1234.top","domain":"wh1234.top","tld":"top"},"ip":{"addr":"104.21.37.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://wh1234.top/","date":"2026-09-04T16:45:44.124Z","timestamp":1788540344124,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wh1234.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Aug 2026 03:01:24 GMT","end":"Tue, 03 Nov 2026 03:58:54 GMT"},"fingerprint":{"sha1":"4F:31:51:00:FA:F7:73:E7:D0:55:3A:65:0E:2F:04:FE:DA:A3:A2:AF","sha256":"2D:92:67:2E:78:26:9A:CC:28:FA:8D:03:8C:26:B6:86:3F:97:C8:18:73:30:8E:E6:30:74:D2:F8:29:E5:64:14"}}},"request":{"raw":"GET /assets/index-df50c91c.css HTTP/1.1\r\nHost: wh1234.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 04 Sep 2026 16:45:44 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 17 Jun 2026 13:42:55 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a32a45f-46f8\"\r\nexpires: Sat, 05 Sep 2026 04:45:44 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FP0F8HVEi8fHBaMcGCcI3SntrQZ6ORvvEpPueuIUth73HN6Y2Tfh%2FvGI12lDKs5NYbC8YJNhmZOGz72eW1LX7V%2F1amTdsC8UD5Etz22iWIjYwkgPZ8S1FsSmJT1B\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: a35e775ec9ae5684-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":18168,"size_decoded":4037,"mime_type":"text/css","magic":"ASCII text, with very long lines (18167)","md5":"2f608b43d97bcdef562421210230b9b5","sha1":"72a40a07e30bf47a5f9c9270ed199cc0c7989133","sha256":"df50c91c4ec158612ce8491371cc63911e83331b8bc0ce285bb448a0dd4abf9d","sha512":"f2ee569734f43d7dd58d8707ccbbd90567a9d67f874b8904652ef822294e6ae3ff71ac653b01289cf95559aa9b4335673e1743ea8c6aaf41b9cfe54e2ecb9639","ssdeep":"96:b8AHfX2yGswFezOETj8XMp5mXUVM2tL0a5O9tIQy62rbFf7g4659oLm7l/KweDZR:b8bRePfpYv7tG1g/59oLm7l/KweDS0","tlshash":"f9828729f7ba1134a837d295fed859cce10da912e1a39dd4eb13dd308cdb2d7262014e","first_seen":"2026-09-04T16:46:51.694208Z","last_seen":"2026-09-04T16:46:51.694208Z","times_seen":1,"resource_available":false,"data":null}},"time_used":699,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":698,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wh1234.top/charting_library/charting_library.min.js","fqdn":"wh1234.top","domain":"wh1234.top","tld":"top"},"ip":{"addr":"104.21.37.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://wh1234.top/","date":"2026-09-04T16:45:42.095Z","timestamp":1788540342095,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wh1234.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Aug 2026 03:01:24 GMT","end":"Tue, 03 Nov 2026 03:58:54 GMT"},"fingerprint":{"sha1":"4F:31:51:00:FA:F7:73:E7:D0:55:3A:65:0E:2F:04:FE:DA:A3:A2:AF","sha256":"2D:92:67:2E:78:26:9A:CC:28:FA:8D:03:8C:26:B6:86:3F:97:C8:18:73:30:8E:E6:30:74:D2:F8:29:E5:64:14"}}},"request":{"raw":"GET /charting_library/charting_library.min.js HTTP/1.1\r\nHost: wh1234.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 04 Sep 2026 16:45:42 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 17 Jun 2026 13:42:36 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a32a44c-2a6b\"\r\nexpires: Sat, 05 Sep 2026 04:45:42 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cGe0a1ltwSrqes1VVa8L%2BB35IXoMj68kdGgH00vGmP8LDty%2Bj2qWdGnBEA%2BuJBpJHk1ytPrINiEDd9pNW8ln497KNH9cQQsWgwJoA1%2BapLTjZCcGQNlWzXJnyY8%2B\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a35e775219015684-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10859,"size_decoded":3967,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (10857), with CRLF line terminators","md5":"2a5fa40461c4e10123b62c021ab0a4ed","sha1":"527b4a35104eda6479c5ac876f57b5375ab00f51","sha256":"bcee984fd52b4a82bd6b23543bb33f6472e076c125edbdd8756d29ca230628cb","sha512":"51c91bff846f3825a21d6b301b1e4615d05bb27defef6c39c622e647f5d0262fdb0382924c9245c4a18a11cd32b60e4c913ed451b6f4b2fec1c87ce871eb874b","ssdeep":"192:9fdWSo7ktFUnoBelr6lw2LfnzuIQPlaJ1i10K+Ei/ISJhvHIheu5Ph3Ffa5:vWS2ktFUnoIlD2LfnqIJimK+5/ISJhvB","tlshash":"58224f58ed2478720acb54f0427f180f8239e278d84944ed3c84e6ec59fd44a6a6fbb8","first_seen":"2024-07-11T15:08:28Z","last_seen":"2026-09-04T16:48:50.862494Z","times_seen":1463,"resource_available":true,"data":null}},"time_used":721,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":721,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aapi.bxs201.top/api/common/getCoinList","fqdn":"aapi.bxs201.top","domain":"bxs201.top","tld":"top"},"ip":{"addr":"172.67.135.113","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://wh1234.top/","date":"2026-09-04T16:45:44.067Z","timestamp":1788540344067,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bxs201.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 27 Aug 2026 10:45:50 GMT","end":"Wed, 25 Nov 2026 11:43:12 GMT"},"fingerprint":{"sha1":"DD:48:61:44:2E:A6:8C:7C:75:35:8A:71:DD:BA:A4:AD:E0:35:BE:7E","sha256":"F7:DE:33:EB:1A:8B:81:02:18:4C:A3:47:86:76:B0:48:62:9D:5C:65:38:26:13:B6:57:30:8A:81:CF:0E:42:FD"}}},"request":{"raw":"OPTIONS /api/common/getCoinList HTTP/1.1\r\nHost: aapi.bxs201.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: lang\r\nOrigin: https://wh1234.top\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 502 \r\nretry-after: 60\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\ndate: Fri, 04 Sep 2026 16:45:44 GMT\r\nx-frame-options: SAMEORIGIN\r\nserver-timing: cfExtPri\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\ncf-ray: a35e775ee84949c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 6403\r\n\r\n","headers":null,"cookies":null,"status_code":"502","status_text":"Bad Gateway","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":454,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-04T18:58:27.736951Z","times_seen":18278546,"resource_available":true,"data":null}},"time_used":748,"timings":{"blocked":72,"dns":0,"connect":0,"send":0,"wait":676,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wh1234.top/assets/index-4f4afda7.js","fqdn":"wh1234.top","domain":"wh1234.top","tld":"top"},"ip":{"addr":"104.21.37.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://wh1234.top/","date":"2026-09-04T16:45:44.110Z","timestamp":1788540344110,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wh1234.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Aug 2026 03:01:24 GMT","end":"Tue, 03 Nov 2026 03:58:54 GMT"},"fingerprint":{"sha1":"4F:31:51:00:FA:F7:73:E7:D0:55:3A:65:0E:2F:04:FE:DA:A3:A2:AF","sha256":"2D:92:67:2E:78:26:9A:CC:28:FA:8D:03:8C:26:B6:86:3F:97:C8:18:73:30:8E:E6:30:74:D2:F8:29:E5:64:14"}}},"request":{"raw":"GET /assets/index-4f4afda7.js HTTP/1.1\r\nHost: wh1234.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 04 Sep 2026 16:45:44 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FiJqeFq0MzI9A39ZieCH7XVfztnrt2H6zC7MflgDkKkDkeseBDVgSe1%2Fp8xXHNi5UAUx5jff2s8f7rP%2Bimr4Q5Qa4G9w1cJO8q0zkhtQuT2%2BNs96SH8GMW2YpfU%2F\"}]}\r\nlast-modified: Wed, 17 Jun 2026 13:42:55 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Sat, 05 Sep 2026 04:45:44 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\npriority: u=1,i=?0\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\netag: W/\"6a32a45f-308\"\r\ncf-ray: a35e775eb9a55684-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":776,"size_decoded":1250,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (775)","md5":"82798a2fc7298522ac5984c2865c838c","sha1":"7fa14afb916bf5d532c2f45b0cbe549ff087baf0","sha256":"4148645dd50221049c0ccf2df751e40b51d6378bf78c401b476ec7781d792482","sha512":"3594273e23be72a75b552a4005321f3a368b6f24de4ee7efbf7bfe85d84f1d1d6b5b36cc3345e9a79c1e20a97fb336f14bbdee530f0624f51f8a33bc348a0e20","ssdeep":"","tlshash":"fc01f8f8fd1d8ebb0ea20a4001902601140a2fddfa1419f198867d6a2be5940dbce32d","first_seen":"2026-06-29T15:11:12.662053Z","last_seen":"2026-09-04T16:46:51.697711Z","times_seen":8,"resource_available":true,"data":null}},"time_used":730,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":730,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wh1234.top/assets/filters-5404949c.js","fqdn":"wh1234.top","domain":"wh1234.top","tld":"top"},"ip":{"addr":"104.21.37.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://wh1234.top/","date":"2026-09-04T16:45:44.118Z","timestamp":1788540344118,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wh1234.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Aug 2026 03:01:24 GMT","end":"Tue, 03 Nov 2026 03:58:54 GMT"},"fingerprint":{"sha1":"4F:31:51:00:FA:F7:73:E7:D0:55:3A:65:0E:2F:04:FE:DA:A3:A2:AF","sha256":"2D:92:67:2E:78:26:9A:CC:28:FA:8D:03:8C:26:B6:86:3F:97:C8:18:73:30:8E:E6:30:74:D2:F8:29:E5:64:14"}}},"request":{"raw":"GET /assets/filters-5404949c.js HTTP/1.1\r\nHost: wh1234.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 04 Sep 2026 16:45:44 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 17 Jun 2026 13:42:55 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a32a45f-c77\"\r\nexpires: Sat, 05 Sep 2026 04:45:44 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gaX%2BYE7mnd9SmnXD7ZW%2FwyqdBkBe0ovRIAm4qOG%2F7Z3GCdfUqJSdIvDP0waB0I2%2FLVq4tzn910evFxWX7gyeSsl%2FA8hq0okGKprsa4UsEijMEdP0HdmOcaPBF6kE\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=1,i=?0\r\ncf-ray: a35e775eb9ab5684-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3191,"size_decoded":1945,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (3190)","md5":"82a042735b1589d3d284df40dc35d3e2","sha1":"58876022c14a6c935f5703c8dd37d01d97d1f1c5","sha256":"57095e42fe63f3b71f0d611779fd1adbb0a6fcecab591144e3d8a59de87e4eee","sha512":"a9dad5869c250410a843442f00ab79b9844e5e5ab54ba5e03793e76dfea39a8b5c82614a2c783c6907aefaa41708363401af1b71e831c65b4a01d88cac1efba8","ssdeep":"","tlshash":"6a6145edfdd7613396e96dfa44288410728ebe20685e0a4df54fd0425a33888e0bfb64","first_seen":"2026-09-04T16:46:51.699551Z","last_seen":"2026-09-04T16:46:51.699551Z","times_seen":1,"resource_available":true,"data":null}},"time_used":696,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":696,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wh1234.top/assets/index-28f71d93.css","fqdn":"wh1234.top","domain":"wh1234.top","tld":"top"},"ip":{"addr":"104.21.37.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://wh1234.top/","date":"2026-09-04T16:45:44.126Z","timestamp":1788540344126,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wh1234.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Aug 2026 03:01:24 GMT","end":"Tue, 03 Nov 2026 03:58:54 GMT"},"fingerprint":{"sha1":"4F:31:51:00:FA:F7:73:E7:D0:55:3A:65:0E:2F:04:FE:DA:A3:A2:AF","sha256":"2D:92:67:2E:78:26:9A:CC:28:FA:8D:03:8C:26:B6:86:3F:97:C8:18:73:30:8E:E6:30:74:D2:F8:29:E5:64:14"}}},"request":{"raw":"GET /assets/index-28f71d93.css HTTP/1.1\r\nHost: wh1234.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 04 Sep 2026 16:45:44 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 17 Jun 2026 13:42:55 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a32a45f-6de\"\r\nexpires: Sat, 05 Sep 2026 04:45:44 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZeBCDaXSsz%2F8%2FEsFVl7un3Kv8zNusNn91i%2FnjNja5IhxcjHYRYGqC%2BMimDqp5gRDO4zHWxz84haQtQrI6wmnvX%2BBpuf71B1yMO3ong%2BhpR7Tac%2F0YgwYJu2zu0gB\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: a35e775ec9af5684-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1758,"size_decoded":1283,"mime_type":"text/css","magic":"ASCII text, with very long lines (1757)","md5":"10891831727c74395a4a703a08b3e658","sha1":"4c782938cd57393f946807ccb770cf6d4fe77140","sha256":"28f71d931343a969e88ee27d761468c9bdd028fde33053d803fdf471e3e42e5e","sha512":"6ae07dba34a028f49b46d7729750810432366cacf4bed1b4fef0c8dd39f1e69f42c92fe757f93324ef34f3a624f13db9dbd73abc0995dcc7a8d0a707f4abc891","ssdeep":"","tlshash":"bc31f46b659862785ed6f175d3cf11e4e23d9120cd21817db216471e2fe337441e2624","first_seen":"2024-12-01T15:40:05.189135Z","last_seen":"2026-09-04T16:46:51.701201Z","times_seen":19,"resource_available":false,"data":null}},"time_used":753,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":753,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wh1234.top/assets/index-dc796a3e.css","fqdn":"wh1234.top","domain":"wh1234.top","tld":"top"},"ip":{"addr":"104.21.37.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://wh1234.top/","date":"2026-09-04T16:45:44.113Z","timestamp":1788540344113,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wh1234.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Aug 2026 03:01:24 GMT","end":"Tue, 03 Nov 2026 03:58:54 GMT"},"fingerprint":{"sha1":"4F:31:51:00:FA:F7:73:E7:D0:55:3A:65:0E:2F:04:FE:DA:A3:A2:AF","sha256":"2D:92:67:2E:78:26:9A:CC:28:FA:8D:03:8C:26:B6:86:3F:97:C8:18:73:30:8E:E6:30:74:D2:F8:29:E5:64:14"}}},"request":{"raw":"GET /assets/index-dc796a3e.css HTTP/1.1\r\nHost: wh1234.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 04 Sep 2026 16:45:44 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 17 Jun 2026 13:42:55 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a32a45f-a01\"\r\nexpires: Sat, 05 Sep 2026 04:45:44 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nHe2i6T9M%2BCGcj6KOMSn0ZOM5mW%2BnP1589zj4OBe9zHFtQFaraN1dW3UNt%2FgRT2TnwgieOQFLqMXfhOBJKbz2ucQa2Iep%2FoKjNjrdmDQ8I6FzeQSMMdK8zv7hUb7\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: a35e775eb9a85684-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2561,"size_decoded":1533,"mime_type":"text/css","magic":"ASCII text, with very long lines (2560)","md5":"9e40ee39d9cab7b995f249ad5dc32db9","sha1":"935f8ca606e053638571d41706c8c381969ad608","sha256":"dc796a3eca9e613b750d7442ba502982f2f8c38c4bffe9422fe9723578fe38b8","sha512":"479996f68c22d71ffdf6d636a60d9111fe7ee38a5bfffdfd3ae6405b3f869238572b99ef5ea320e10433d4e09cb4dc65d25e10555d12ff296ca844926be5ac5a","ssdeep":"","tlshash":"5b51375df79a12344c7bd68bbf589f8894006e91d1879dc5f103c6070acfdb7262a25b","first_seen":"2026-09-04T16:46:51.702957Z","last_seen":"2026-09-04T16:46:51.702957Z","times_seen":1,"resource_available":false,"data":null}},"time_used":729,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":729,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wh1234.top/assets/currencyItem-60709842.css","fqdn":"wh1234.top","domain":"wh1234.top","tld":"top"},"ip":{"addr":"104.21.37.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://wh1234.top/","date":"2026-09-04T16:45:44.121Z","timestamp":1788540344121,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wh1234.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Aug 2026 03:01:24 GMT","end":"Tue, 03 Nov 2026 03:58:54 GMT"},"fingerprint":{"sha1":"4F:31:51:00:FA:F7:73:E7:D0:55:3A:65:0E:2F:04:FE:DA:A3:A2:AF","sha256":"2D:92:67:2E:78:26:9A:CC:28:FA:8D:03:8C:26:B6:86:3F:97:C8:18:73:30:8E:E6:30:74:D2:F8:29:E5:64:14"}}},"request":{"raw":"GET /assets/currencyItem-60709842.css HTTP/1.1\r\nHost: wh1234.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 04 Sep 2026 16:45:44 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 17 Jun 2026 13:42:55 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a32a45f-6d6\"\r\nexpires: Sat, 05 Sep 2026 04:45:44 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9vZLqbz9MKgjQNp9j6v%2FiEz4lXh01IU9T73DQrVsd153vNgrQLeeFW8V%2FCb5NpZZpPIbctcs2R6TevyMAc0zOdCNmPbZURW5C3B%2F%2Fn7gaEbYfY6IxrpPkKXPKg9o\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: a35e775ec9ad5684-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1750,"size_decoded":1274,"mime_type":"text/css","magic":"ASCII text, with very long lines (1749)","md5":"58467f212ee43e86293f568e17f83fb5","sha1":"f864223f2ab0436dae7f6090a377c88612496790","sha256":"6070984220d9be91a63d35b23f2645aa98dabba53728b96aa13fcc107473f75a","sha512":"6ad5df158f3aced8a32888a1a6aa771dfe1753d49a4762773bd8fb622af059e0069f4008f0dccbccaa405ba91b29f4867b5a35e52196690b364cc0f9689892ef","ssdeep":"","tlshash":"09310384571503b4e937d48e6eb85189e0147fc190c7a5d9e98f0a279ccfab3ce7096a","first_seen":"2026-09-04T16:46:51.70953Z","last_seen":"2026-09-04T16:46:51.70953Z","times_seen":1,"resource_available":false,"data":null}},"time_used":742,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":742,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"wss","addr":"wss://api.qawaw856.top/ws/99979899-332b-4232-bd50-cae6791df3b1","fqdn":"api.qawaw856.top","domain":"qawaw856.top","tld":"top"},"ip":{"addr":"186.240.200.127","port":443,"asn":7738,"as":"V tal","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://wh1234.top/","date":"2026-09-04T16:45:44.123Z","timestamp":1788540344123,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.qawaw856.top","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 22 Aug 2026 14:54:48 GMT","end":"Fri, 20 Nov 2026 14:54:47 GMT"},"fingerprint":{"sha1":"40:96:2D:E9:C9:7F:F8:C5:C0:B9:9E:E4:0D:1F:6C:7C:8D:7D:53:10","sha256":"8B:2E:28:61:DC:2A:5A:83:22:18:BE:CE:B3:A1:39:2D:8C:78:9B:96:D5:DF:A6:25:06:2D:3F:57:A3:AE:E3:CF"}}},"request":{"raw":"GET /ws/99979899-332b-4232-bd50-cae6791df3b1 HTTP/1.1\r\nHost: api.qawaw856.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-WebSocket-Version: 13\r\nOrigin: https://wh1234.top\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: 6Hzj5HfjYuNetLJwU94wgA==\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: Upgrade\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 101 \r\nServer: nginx\r\nDate: Fri, 04 Sep 2026 16:45:45 GMT\r\nConnection: upgrade\r\nVary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nAccess-Control-Allow-Origin: https://wh1234.top\r\nAccess-Control-Allow-Credentials: true\r\nUpgrade: websocket\r\nSec-WebSocket-Accept: cuHGcjaut21MMqs5jlpqSBOr8+k=\r\nSec-WebSocket-Extensions: permessage-deflate\r\nX-Content-Type-Options: nosniff\r\nX-XSS-Protection: 1; mode=block\r\n\r\n","headers":null,"cookies":null,"status_code":"101","status_text":"Switching Protocols","fingerprints":[{"name":"WebSocket","description":"WebSocket is a communication protocol that provides full-duplex communication channels over a single, long-lived connection, enabling interactive communication between web browsers and servers.","website":"https://en.wikipedia.org/wiki/WebSocket","common_platform_enumeration":"","icon":"WebSocket.svg","categories":["Miscellaneous"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":440,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-04T18:58:27.736951Z","times_seen":18278546,"resource_available":true,"data":null}},"time_used":2904,"timings":{"blocked":-1,"dns":1099,"connect":1290,"send":0,"wait":257,"receive":0,"ssl":258},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}