{"report_id":"5104f2d9-e333-4904-95f2-6ab19f3a1bdc","version":0,"status":"done","tags":[],"date":"2026-08-19T22:32:10Z","url":{"schema":"http","addr":"rs-shop-ph.com/thejoystoreblkxbash","fqdn":"rs-shop-ph.com","domain":"rs-shop-ph.com","tld":"com"},"ip":{"addr":"203.171.27.189","port":0,"asn":45903,"as":"CMC Telecom Infrastructure Company","country":"Vietnam","country_code":"VN"},"final":{"url":{"schema":"https","addr":"rs-shop-ph.com/thejoystoreblkxbash","fqdn":"rs-shop-ph.com","domain":"rs-shop-ph.com","tld":"com"},"title":"BUY 1 TAKE 1 PROMO! FREE SHIPPING NATIONWIDE!","dom":{"size":296128,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (53087)","md5":"1c107068ca0d74e19c8d34be62864636","sha1":"7b6bef814c7a35e08e58469dc91d45f9ce5c812f","sha256":"92212242262c95cb1a98a56c1bbd23828045ad564391b562d3723ce76149c484","sha512":"31ed52aecfad608173daf42aff73ff43c5f504d8df1ea004e513a9edfa7a56b01120af4b4575d63c911738921d3a81d735ecaead5934aa989217a0405d1e4c61","ssdeep":"3072:7FD6kBhQPils/CrFYUup6e2/CrFYUup6e1zhKJAzeeZTqnyec+Cv:7FD6kBhQqGu9zhKJAzeeZTqlCv","tlshash":"61541c31b6941066713bc6e37849b78e6296c10bcb070668f29c6ab4cfcda893571fdd","dom_hash":"domhash898455faed36d85475ebfaea301d3989","first_seen":"2026-08-19T22:32:23.54244Z","last_seen":"2026-08-19T22:32:23.54244Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"rs-shop-ph.com/thejoystoreblkxbash","fqdn":"rs-shop-ph.com","domain":"rs-shop-ph.com","tld":"com"},"ip":{"addr":"203.171.27.189","port":0,"asn":45903,"as":"CMC Telecom Infrastructure Company","country":"Vietnam","country_code":"VN"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-09-23T22:32:10Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":5}},"detection":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-19","alert":"Phishing Block","trigger":"rs-shop-ph.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"rs-shop-ph.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"rs-shop-ph.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"statics.pancake.vn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"statics.pancake.vn","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"statics.pancake.vn","ip":{"addr":"203.171.27.184","port":443,"asn":45903,"as":"CMC Telecom Infrastructure Company","country":"Vietnam","country_code":"VN"},"domain_registered":"unknown","domain_rank":1373225,"first_seen":"2020-08-14T15:33:36Z","last_seen":"2026-08-18T11:37:12.177598Z","alert_count":2,"request_count":1,"received_data":1001,"sent_data":646,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"api.webcake.io","ip":{"addr":"113.20.119.13","port":443,"asn":45903,"as":"CMC Telecom Infrastructure Company","country":"Vietnam","country_code":"VN"},"domain_registered":"2019-11-06","domain_rank":993001,"first_seen":"2020-05-25T10:12:21Z","last_seen":"2026-08-18T12:18:31.244191Z","alert_count":0,"request_count":5,"received_data":1939953,"sent_data":2557,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"OpenResty:1.25.3.2","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"WebSocket","description":"WebSocket is a communication protocol that provides full-duplex communication channels over a single, long-lived connection, enabling interactive communication between web browsers and servers.","website":"https://en.wikipedia.org/wiki/WebSocket","common_platform_enumeration":"","icon":"WebSocket.svg","categories":["Miscellaneous"]}]},{"fqdn":"a.pancake.vn","ip":{"addr":"113.20.119.13","port":443,"asn":45903,"as":"CMC Telecom Infrastructure Company","country":"Vietnam","country_code":"VN"},"domain_registered":"unknown","domain_rank":894710,"first_seen":"2021-03-22T10:44:20Z","last_seen":"2026-08-18T12:18:31.835456Z","alert_count":0,"request_count":6,"received_data":57296,"sent_data":3534,"comment":"","tags":null,"fingerprints":[{"name":"OpenResty:1.25.3.2","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"content.pancake.vn","ip":{"addr":"203.171.27.184","port":443,"asn":45903,"as":"CMC Telecom Infrastructure Company","country":"Vietnam","country_code":"VN"},"domain_registered":"unknown","domain_rank":628227,"first_seen":"2023-06-23T04:24:01Z","last_seen":"2026-08-18T12:18:32.080928Z","alert_count":0,"request_count":23,"received_data":883674,"sent_data":15043,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"rs-shop-ph.com","ip":{"addr":"203.171.27.189","port":443,"asn":45903,"as":"CMC Telecom Infrastructure Company","country":"Vietnam","country_code":"VN"},"domain_registered":"2026-07-13","domain_rank":0,"first_seen":"2026-08-19T22:32:16.685059Z","last_seen":"2026-08-19T22:32:16.685059Z","alert_count":24,"request_count":8,"received_data":1209266,"sent_data":4608,"comment":"","tags":null,"fingerprints":[{"name":"Google Tag Manager","description":"Google Tag Manager is a tag management system (TMS) that allows you to quickly and easily update measurement codes and related code fragments collectively known as tags on your website or mobile app.","website":"https://www.google.com/tagmanager","common_platform_enumeration":"","icon":"Google Tag Manager.svg","categories":["Tag managers"]},{"name":"OpenResty:1.27.1.1","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"FingerprintJS","description":"FingerprintJS is a browser fingerprinting library that queries browser attributes and computes a hashed visitor identifier from them.","website":"https://fingerprintjs.com","common_platform_enumeration":"","icon":"FingerprintJS.svg","categories":["JavaScript libraries","Browser fingerprinting"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-08-16T22:20:46.906465Z","alert_count":0,"request_count":11,"received_data":284438,"sent_data":6124,"comment":"","tags":null,"fingerprints":null},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-08-16T22:23:57.509837Z","alert_count":0,"request_count":1,"received_data":52239,"sent_data":756,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"api.webcake.io/cart/app.js?r=5155.76105565713","fqdn":"api.webcake.io","domain":"webcake.io","tld":"io"},"ip":{"addr":"113.20.119.13","port":443,"asn":45903,"as":"CMC Telecom Infrastructure Company","country":"Vietnam","country_code":"VN"},"introduction_type":"scriptElement","is_inline":false,"md5":"355fc77b5148dd834596ccc771fd8d08","sha1":"c77821dc7c97dad0123f31b11bc492a2152aeb4b","sha256":"0ee978e4018551ecba8bfe01c1681cbc41360f29b72aec610d086f340c9211df","sha512":"29e4c1fcb999e719f3a7b983c56fcaff01396a445ed0ac309689bcbdd838ddd0ae9fd2d17a8a335e2a407ae1bec85208f1a22f19f84789edd8f972ace8f21813","ssdeep":"3072:IS7wlsPJx8k3TDvr+5PKyMPTWmkgNlfln0T6i+:NdJx8q3r+5PKyMPqmkOdhV","tlshash":"1e142ae9b295f072522f5561425b0336f236b1367036c0b8b6ddedd32b29c897123aed","size":200548,"data":"","first_seen":"2026-08-19T01:01:57.481444Z","last_seen":"2026-08-19T22:32:23.596845Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.webcake.io/address_wc/address.63.min.js?v=1","fqdn":"api.webcake.io","domain":"webcake.io","tld":"io"},"ip":{"addr":"113.20.119.13","port":443,"asn":45903,"as":"CMC Telecom Infrastructure Company","country":"Vietnam","country_code":"VN"},"introduction_type":"scriptElement","is_inline":false,"md5":"e13e98908e3d290912a7da53478ac94b","sha1":"a3b7e9254e4221509d0db0579ce2c209c218c2a8","sha256":"316547f1d5126d381447797dd92b357f4fc9aa82759d8977b51e2fd5960b99b7","sha512":"5c3174a743dac2ade9458dfb40b732020f4b7a5166b64e9c08b16f8a508aef3f2a5b75a98b41ec5bd47d02d6e93d23d37eba8e1e9e0e4e575488b581f712c4e0","ssdeep":"6144:jIZT/0n9y9x8s/8X6kGNGBtNUSbS4tsvynnhpXlt:jeD0n9ydI6kGNGGSb/ky/lt","tlshash":"fa753f85ca3badfe59b01e026ce379bc65f02e6a94cd0a49f06c545706b77e037097b8","size":1637074,"data":"","first_seen":"2026-02-01T08:20:39.749147Z","last_seen":"2026-08-19T22:32:23.615942Z","times_seen":15,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rs-shop-ph.com/thejoystoreblkxbash","fqdn":"rs-shop-ph.com","domain":"rs-shop-ph.com","tld":"com"},"ip":{"addr":"203.171.27.189","port":443,"asn":45903,"as":"CMC Telecom Infrastructure Company","country":"Vietnam","country_code":"VN"},"introduction_type":"scriptElement","is_inline":true,"md5":"89b1ea4181eb1faedefccb8bf194d042","sha1":"95962e2745ba671abb43ee1bad46ec22a885b4da","sha256":"fbbe48bd936c6aae98e9b092b6c669be9d9bd019715a6fa601b4048f7fae309d","sha512":"ba06bf17946bb97aac81494ba25faabe07f762b16b58a572d1430dd55f87364e5fbd047bc7d6dab7b198c986d534b10a1b7fc6ca74cc147e632cc1b79a7cde8b","ssdeep":"","tlshash":"d3e0abc65b072d2d1340d341ec3ec10dd58826371e63dc9108cee279ac38c408aa0438","size":421,"data":"","first_seen":"2026-06-08T16:08:01.738881Z","last_seen":"2026-08-19T22:32:23.617688Z","times_seen":15,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rs-shop-ph.com/thejoystoreblkxbash","fqdn":"rs-shop-ph.com","domain":"rs-shop-ph.com","tld":"com"},"ip":{"addr":"203.171.27.189","port":443,"asn":45903,"as":"CMC Telecom Infrastructure Company","country":"Vietnam","country_code":"VN"},"introduction_type":"scriptElement","is_inline":true,"md5":"1b5f1cecd3216f3bb3d2ea9862a42f31","sha1":"f22b861e8f2d5c7fab66a3e645c604b1de91b725","sha256":"f4045c3d083691bf77370a011dedbbd977beeef52d16c99836d5555d817164ee","sha512":"579c8fd2620e1d3830e53827f5aa7794fdd99147e9361fc56dc64232df5d0776734e85839be338d2ccd89fc3aab529ca08817522587fb4697f92c0e0a921517c","ssdeep":"","tlshash":"9d01ac3d36e5a26804671008cf2ac1846a1a80e3129b8d10bf4c2bc15fe35276187be8","size":668,"data":"","first_seen":"2026-06-08T16:08:01.740008Z","last_seen":"2026-08-19T22:32:23.618438Z","times_seen":26,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rs-shop-ph.com/thejoystoreblkxbash","fqdn":"rs-shop-ph.com","domain":"rs-shop-ph.com","tld":"com"},"ip":{"addr":"203.171.27.189","port":443,"asn":45903,"as":"CMC Telecom Infrastructure Company","country":"Vietnam","country_code":"VN"},"introduction_type":"scriptElement","is_inline":true,"md5":"2e1e0f8561c759acee826f2335a31748","sha1":"f9bf0dac81dd9ea8ea777627c9d7662a4059a7ba","sha256":"aecf52b85cb7146a6745ff8151e6529b75b213e70d2aa4b6de65f518d2eb5b33","sha512":"1c5b03788e1ebff989a57fd280f1d684351283eaf38d5963d4767de244a84ebf9eb3cf30a2244b4568db09d02b9bd46bfb2044c089ad2d45093fd14f4e44e64c","ssdeep":"","tlshash":"2380002022a3e8208030000b0b02220230a3020e802a3820ab0a8802ae0c2f300aa8e0","size":32,"data":"","first_seen":"2026-06-08T16:08:01.740927Z","last_seen":"2026-08-19T22:32:23.619826Z","times_seen":26,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rs-shop-ph.com/thejoystoreblkxbash","fqdn":"rs-shop-ph.com","domain":"rs-shop-ph.com","tld":"com"},"ip":{"addr":"203.171.27.189","port":443,"asn":45903,"as":"CMC Telecom Infrastructure Company","country":"Vietnam","country_code":"VN"},"introduction_type":"scriptElement","is_inline":true,"md5":"6d448cb3a18d43e2af3a069b8d0761f9","sha1":"142106944a5f9c7964ce9dbe3a4f3f4a5f5cbb00","sha256":"0bb8ee2854b3093291eb40119639774ff1c39ef8a2838b74a4125cd94b8be59a","sha512":"59c7f617411f2cbdbd9ae025a590b08601ab2fbabf76984ed21297471897c5f48f5f189339a47a938dc1f805a772be4999a72fab8f84d6ba9e747ae0c2493ef0","ssdeep":"","tlshash":"d2f0c95e2c43706323f57a39d3335aa7b365070139929918ab2ecd1028bb8d36486c8d","size":524,"data":"","first_seen":"2026-08-19T22:32:23.620612Z","last_seen":"2026-08-19T22:32:23.620612Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rs-shop-ph.com/thejoystoreblkxbash","fqdn":"rs-shop-ph.com","domain":"rs-shop-ph.com","tld":"com"},"ip":{"addr":"203.171.27.189","port":443,"asn":45903,"as":"CMC Telecom Infrastructure Company","country":"Vietnam","country_code":"VN"},"introduction_type":"scriptElement","is_inline":true,"md5":"9610cd019445afb4c35bffb453274d2e","sha1":"047e88898e5669cf0ccfebca7d3a837ba409b10e","sha256":"a832e81e1a9742bebd53f763ea4fb35f682b2e239c08b65bce40977a5a38ce11","sha512":"05399991a915a6390310f6fb8985226350df17f243e2ae201cc7d2c345c61b06ec68905453c103d501804df6cd79a053cf7e37a1b6ce511147bd80cc3c488f49","ssdeep":"","tlshash":"f8e0a3595607343023791266a767d31ca1ba519e49018d12c14fc0c03722f9fd47b7dc","size":434,"data":"","first_seen":"2026-08-19T01:01:57.504663Z","last_seen":"2026-08-19T22:32:23.622386Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rs-shop-ph.com/thejoystoreblkxbash","fqdn":"rs-shop-ph.com","domain":"rs-shop-ph.com","tld":"com"},"ip":{"addr":"203.171.27.189","port":443,"asn":45903,"as":"CMC Telecom Infrastructure Company","country":"Vietnam","country_code":"VN"},"introduction_type":"scriptElement","is_inline":true,"md5":"b0a40fd7a41bf2a9e904e0f4b223a0f7","sha1":"4bce6eadc90f8071f2d3c2268fd019dd48214954","sha256":"82e630a3a89c82162308f65bb5b794651bbd49b730f5a26b959683d753ad4ecd","sha512":"8547ea3773499be7098d7615b4f14e814b9973d8ad591c5699b1bddf9e2ed47377d5badcd6a7b97f18d14260fcb12f14db8e9262d67fc0cc247109636b2e8a13","ssdeep":"","tlshash":"77e0cdb8f6067184581ad08e5819de45a8c9d845d7590f9f716352f4f65404dcbc4f01","size":330,"data":"","first_seen":"2026-08-19T01:01:57.506052Z","last_seen":"2026-08-19T22:32:23.623635Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rs-shop-ph.com/thejoystoreblkxbash","fqdn":"rs-shop-ph.com","domain":"rs-shop-ph.com","tld":"com"},"ip":{"addr":"203.171.27.189","port":443,"asn":45903,"as":"CMC Telecom Infrastructure Company","country":"Vietnam","country_code":"VN"},"introduction_type":"scriptElement","is_inline":true,"md5":"5a5a9bad17e396c350daf6572a5567ed","sha1":"61c85f7e47ea891bb88fd0faf208c5daabca7e4a","sha256":"6810e0b5b6afc437abee0bcfef73bf3c734d42799326470989f0b148a22b0124","sha512":"6f11dd99180b4f69ed13aede2c04ffb542e28e67336b2159460434f65aed7268692b1a07a1936a14f0302e1c1d6226a1565c8ef4c135b9378f2414c1859ca413","ssdeep":"","tlshash":"f1d02bacb922b00e442b74b0152f448f5c134803c61842a400205a644aa3d5a523bf0e","size":254,"data":"","first_seen":"2025-01-15T12:29:10.713506Z","last_seen":"2026-08-19T22:32:23.625025Z","times_seen":187,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rs-shop-ph.com/thejoystoreblkxbash","fqdn":"rs-shop-ph.com","domain":"rs-shop-ph.com","tld":"com"},"ip":{"addr":"203.171.27.189","port":443,"asn":45903,"as":"CMC Telecom Infrastructure Company","country":"Vietnam","country_code":"VN"},"introduction_type":"scriptElement","is_inline":true,"md5":"c25d7d71d054b3cb380944f336eb832a","sha1":"636ff8f157a7092d24a55d50c91968df41603d33","sha256":"02d6765e4b7fe00687ebde8c48802ba728e348c6919755971dac654096f4d25a","sha512":"d77c9d7df37de04c2233e55b2850662e7464af733ae5dd9131bc68fc3505b314ab96e670c5644befd7c221bc170105d55feadcfcf604533bb1124b13433ccb01","ssdeep":"","tlshash":"1b111074220d3536956d439fe66ef382a11d22bb9513d081743fc9a9a018e93f49bbd2","size":952,"data":"","first_seen":"2025-06-28T10:27:23.906221Z","last_seen":"2026-08-19T22:32:23.625608Z","times_seen":166,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rs-shop-ph.com/thejoystoreblkxbash","fqdn":"rs-shop-ph.com","domain":"rs-shop-ph.com","tld":"com"},"ip":{"addr":"203.171.27.189","port":443,"asn":45903,"as":"CMC Telecom Infrastructure Company","country":"Vietnam","country_code":"VN"},"introduction_type":"scriptElement","is_inline":true,"md5":"c1acfa47cc9bed04286156e00fdb7986","sha1":"2877fe94ee0b9e03c986ed311ffda7d526f464c9","sha256":"e0805d4c793b054ff7d744229186739d0fef05de7afcd0a1481f8e72e5212b21","sha512":"9f37d7ad28b2ead71aafa42f3421162d5fc809a55aa7f8ae2411f5d8ac7a37a4a442873bb23d1c58b117ace115ac821aefae200864c14ce26a0b6dd8c5cd2055","ssdeep":"1536:vrtL5eEoCxZ3DR5yQ7fwqCAoCtd3DXjQKjHinnnEKRDad7/BDcyNJisje4:vqnye4","tlshash":"07439302b7489cf2655a57e31dcf3d22e4de6c2ad08429d5d8e88d1896ed398322277f","size":55559,"data":"","first_seen":"2026-08-19T01:01:57.509088Z","last_seen":"2026-08-19T22:32:23.626211Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rs-shop-ph.com/thejoystoreblkxbash","fqdn":"rs-shop-ph.com","domain":"rs-shop-ph.com","tld":"com"},"ip":{"addr":"203.171.27.189","port":443,"asn":45903,"as":"CMC Telecom Infrastructure Company","country":"Vietnam","country_code":"VN"},"introduction_type":"scriptElement","is_inline":true,"md5":"3ba2d16b87998222c505140285e946d7","sha1":"285686228a870ab21e78e881395a1bcb1e82749c","sha256":"9775fa29568edb8541c1a9f6be5ad4a233ae72a7da5eda8724dc6dc780094995","sha512":"aa1eee7b44da1a72ea018aab5c14e44c02ed1a27015adaea1960ef537e925297518d26b985ccc22aa030b2a92866205d78bac2185fa5053e39b434777f538470","ssdeep":"","tlshash":"4dd0a705dc5c89f546f4f272fa1faaa832c92026c49c0a9bedd44fb6295d04307c5de0","size":246,"data":"","first_seen":"2026-08-19T01:01:57.51067Z","last_seen":"2026-08-19T22:32:23.627387Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rs-shop-ph.com/thejoystoreblkxbash","fqdn":"rs-shop-ph.com","domain":"rs-shop-ph.com","tld":"com"},"ip":{"addr":"203.171.27.189","port":443,"asn":45903,"as":"CMC Telecom Infrastructure Company","country":"Vietnam","country_code":"VN"},"introduction_type":"scriptElement","is_inline":true,"md5":"7abea6a1ddf9cd97af937de56d92d8fb","sha1":"627d168e1af400589f6314bc6df567bb3cf5723e","sha256":"003b93206a30b4767e58b89dc3c57e806ced6195b5485270d7c4b08903eddd1d","sha512":"77e9d30c2bbe0c9922d8e364af07dc0c3777f41115de9776aed15cb350b690e24afe4e04b52e6d16555b9e4b7393dd3e7487bf4145d56400283e133911d6ed27","ssdeep":"","tlshash":"bbb012e8c11014a830342772a227378393001cc642c3540c4b02041030d087300bdfd1","size":96,"data":"","first_seen":"2026-08-19T22:32:23.628457Z","last_seen":"2026-08-19T22:32:23.628457Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rs-shop-ph.com/thejoystoreblkxbash","fqdn":"rs-shop-ph.com","domain":"rs-shop-ph.com","tld":"com"},"ip":{"addr":"203.171.27.189","port":443,"asn":45903,"as":"CMC Telecom Infrastructure Company","country":"Vietnam","country_code":"VN"},"introduction_type":"scriptElement","is_inline":true,"md5":"1f168826d4467b1d45cee52a3360dd61","sha1":"e87aca7faacf92f20d69743bfd21409b3ae04e90","sha256":"24b39f472dedb9916830aeb05d0807939a7cb6889b3879b1eb51f808a85b0b01","sha512":"5b864ce108916a9b5a0ba1b30f1823f0bfac5153349440d99212b1fe97d399de3b194480ca603aad8eeb07bbd2a20536166ae324f0731b284608d8c3065cc3b3","ssdeep":"","tlshash":"60d0221ca0208cda802585280e4b7d066a404903a40932a8bf5cca047f5128bc0c8fd2","size":210,"data":"","first_seen":"2026-08-19T01:01:57.514111Z","last_seen":"2026-08-19T22:32:23.629587Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rs-shop-ph.com/thejoystoreblkxbash","fqdn":"rs-shop-ph.com","domain":"rs-shop-ph.com","tld":"com"},"ip":{"addr":"203.171.27.189","port":443,"asn":45903,"as":"CMC Telecom Infrastructure Company","country":"Vietnam","country_code":"VN"},"introduction_type":"scriptElement","is_inline":true,"md5":"adc46efe54c82ddce4c2abfa20d14bc3","sha1":"f14a955d6ad57f6259fe4f84192bb32d4c2dc65a","sha256":"e9064b66a9e76e968f6ee707fb33f19c000004656a7cbedd4971b9db0b306e6a","sha512":"9416f2314d4825454807e6d96d130110c9d00b21cd3945b7381e07ee4ae51ac86252482fb0e9d47025ac3ebec3c260eb48bc9e68cd892238fc910e149b42f3d1","ssdeep":"","tlshash":"0bf0971ecda8d4231d93302e4f2f2301323b5503c889a401bbff07a11f8383882679c1","size":528,"data":"","first_seen":"2026-06-08T16:08:01.745721Z","last_seen":"2026-08-19T22:32:23.632547Z","times_seen":26,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rs-shop-ph.com/thejoystoreblkxbash","fqdn":"rs-shop-ph.com","domain":"rs-shop-ph.com","tld":"com"},"ip":{"addr":"203.171.27.189","port":443,"asn":45903,"as":"CMC Telecom Infrastructure Company","country":"Vietnam","country_code":"VN"},"introduction_type":"scriptElement","is_inline":true,"md5":"6af35b91ac64c1527e2ee22b8ce96f6a","sha1":"3e31c8162768fdf16ccb74f574fbed8060257d6c","sha256":"fbffac14101db12bc0474149f142ad6107c1eadf0f7b893425807f8df2897097","sha512":"6a0e5dc25dddb42a57b6e519335bd06f873abce79ab1dbe93280dad051f58c68ebc0979a4fecfe5652cd4ba636b6f6a119bd12c6e3d1b36c12293583fc93ba82","ssdeep":"","tlshash":"f8f0e21c41a7153a62af2150194be760352204033148a8c43a7d8b889ffafebc0e7bc7","size":508,"data":"","first_seen":"2026-06-08T16:08:01.746553Z","last_seen":"2026-08-19T22:32:23.633797Z","times_seen":26,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rs-shop-ph.com/thejoystoreblkxbash","fqdn":"rs-shop-ph.com","domain":"rs-shop-ph.com","tld":"com"},"ip":{"addr":"203.171.27.189","port":443,"asn":45903,"as":"CMC Telecom Infrastructure Company","country":"Vietnam","country_code":"VN"},"introduction_type":"scriptElement","is_inline":true,"md5":"8493a4f3ed3c2808f9c3bce340ef8df3","sha1":"6af2a6523fe50a1bc6b52ab1c6ad9fe6279dd0b2","sha256":"0d28137e5a476e00f8c0dabd50b88adf71c7c32a09c06c2abfc8ee814846401e","sha512":"79489d5f68f876d2280fe5856f8154c23423fa01b5c9d1df5ede300795057a19e9d05ae25bef699a4dd9f729e588079f76115431b22ab279c79bad0d77117c90","ssdeep":"","tlshash":"c1f059691031919503e720aa20eba364fd301007730490b939bdcb5c1f05d9fce3eae4","size":574,"data":"","first_seen":"2026-06-08T16:08:01.747373Z","last_seen":"2026-08-19T22:32:23.634453Z","times_seen":26,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rs-shop-ph.com/thejoystoreblkxbash","fqdn":"rs-shop-ph.com","domain":"rs-shop-ph.com","tld":"com"},"ip":{"addr":"203.171.27.189","port":443,"asn":45903,"as":"CMC Telecom Infrastructure Company","country":"Vietnam","country_code":"VN"},"introduction_type":"scriptElement","is_inline":true,"md5":"90a846f5936d53d5dff580d2e0b0bdaf","sha1":"03201ae966b6a6eab633a750d670ee11a4957f4e","sha256":"80cd216160c440c84b47ded5db3bcd83e78e028d9c3604fe214257c2d5f937f4","sha512":"365434e1704e5fc4b9a3f08f1fc41a35caee68193fddedf2d38a65e37286d073270870228f795d7bfccf485d8adda36f5d9f6b27564c6c6b648123320083b7de","ssdeep":"","tlshash":"bad0a93a23203824d9ab908b260bb7003463012722224902bb0c828caf31e53f8a56e9","size":234,"data":"","first_seen":"2026-06-08T16:08:01.748175Z","last_seen":"2026-08-19T22:32:23.635541Z","times_seen":26,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rs-shop-ph.com/thejoystoreblkxbash","fqdn":"rs-shop-ph.com","domain":"rs-shop-ph.com","tld":"com"},"ip":{"addr":"203.171.27.189","port":443,"asn":45903,"as":"CMC Telecom Infrastructure Company","country":"Vietnam","country_code":"VN"},"introduction_type":"scriptElement","is_inline":true,"md5":"a4fa482de0e8305d23b12f33e4e72aaa","sha1":"bbc7777ee662ec29291e600b72ef4024ac3b3a3c","sha256":"f5fa3fd2c75bb44224eb1e86ac9051a01535cf0e9d630d468948ba97302e3ad6","sha512":"715ead2bacadb644a5a890e2f7cce01a29e7700295923017000b0388b26e7a8abe4b806c5d9cbfb9775a7e0d64a47ed0b172f4d59fcbd947e81c41fae9b0b2c3","ssdeep":"","tlshash":"95218ebd10bb201440d771697fbe22587126c367fa21e8ae788c47211f09f168ad6bda","size":1294,"data":"","first_seen":"2026-06-08T16:08:01.748997Z","last_seen":"2026-08-19T22:32:23.636513Z","times_seen":26,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rs-shop-ph.com/thejoystoreblkxbash","fqdn":"rs-shop-ph.com","domain":"rs-shop-ph.com","tld":"com"},"ip":{"addr":"203.171.27.189","port":443,"asn":45903,"as":"CMC Telecom Infrastructure Company","country":"Vietnam","country_code":"VN"},"introduction_type":"scriptElement","is_inline":false,"md5":"3cf05a80a4193fdf7576655baf3232d0","sha1":"3bb94f25c94844eae248dda066d9de38bf78a426","sha256":"4baaaa2130d0b04667e4cefb3b86bfd6d7b74577f3067fc4c7ddd957febcc431","sha512":"e82db8b4f2d7264357643cb707e6d52027487ee614dc4f3979ef34400a00e08ef215ff5daa15a2aa0e9edb3656e559a0872cfec0b25b8462ab081605d3eb303b","ssdeep":"","tlshash":"2de07d06750208b62773047a43fb820860d6004f9913c882b45bccd12f12fa6444a79c","size":318,"data":"","first_seen":"2026-08-19T01:01:57.520632Z","last_seen":"2026-08-19T22:32:23.637103Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"a.pancake.vn/js/heatmap.js?vsn=d\u0026version=8","fqdn":"a.pancake.vn","domain":"pancake.vn","tld":"vn"},"ip":{"addr":"113.20.119.13","port":443,"asn":45903,"as":"CMC Telecom Infrastructure Company","country":"Vietnam","country_code":"VN"},"introduction_type":"scriptElement","is_inline":false,"md5":"0944c4d99031741168687ee532400a28","sha1":"9079df062c35a357049ff02c571b0491af87076b","sha256":"6f9e3ee7dc4459c9000f8866c414bd06d87a4f5527986b6ffbdf6051f0f2e0a2","sha512":"d9803490f7bb6de686a950ffe271169ec34a5cf0f69bcdd55652ae96d6570eed76b0684d8f5e885cac1f51571baa47fcfbc70f9d8bc281c35e84fa09dce62c1d","ssdeep":"768:YgJF0SJTFb1t0Wrx8EB1adVf8kFTe9ey+4gCSXUruL:YgwSJTXtnTqd1PFyQ4wXR","tlshash":"c1d2a48db595f0b543e371b0802f520bb277662a704ec4e4ea65d9e2ac7490e9237f7c","size":29103,"data":"","first_seen":"2025-11-24T10:58:04.664335Z","last_seen":"2026-08-19T22:32:23.594165Z","times_seen":57,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rs-shop-ph.com/webcake/v4/ebcce32d-de92-4730-8501-1c241f135cbf","fqdn":"rs-shop-ph.com","domain":"rs-shop-ph.com","tld":"com"},"ip":{"addr":"203.171.27.189","port":443,"asn":45903,"as":"CMC Telecom Infrastructure Company","country":"Vietnam","country_code":"VN"},"introduction_type":"scriptElement","is_inline":false,"md5":"e95bc1ae7d7c03dbd6eaa00e1ec913e9","sha1":"2b84ff4adf3150d41a44e3281f9db6d6eeaca302","sha256":"2b49a23052e3740769d10674f973fab53afb1dab836893ef5c1e46b3f158399f","sha512":"8bce263bbc2dfd6708969f944f70e550a120f79712f2f5c89c1893acb4408cfa4239fbca7deefb6e14b68dc2ee8ff1b27f39e87a4309dfc268ea4abf1d628cd9","ssdeep":"6144:80zpb8rgcKFaMSW+8PKyMPqmkOu0LOcoWO4grL+eof1PnVpuhXzMFyfR:Ppb8EUMz+uPILOcoWk+f1PnVpGMFyfR","tlshash":"c2c44c98b396f07241bf61b2406f5216b33ab51954458874b929cdd33a28c8bb373ff9","size":585046,"data":"","first_seen":"2026-08-08T01:24:36.261588Z","last_seen":"2026-08-19T22:32:23.549244Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rs-shop-ph.com/thejoystoreblkxbash","fqdn":"rs-shop-ph.com","domain":"rs-shop-ph.com","tld":"com"},"ip":{"addr":"203.171.27.189","port":443,"asn":45903,"as":"CMC Telecom Infrastructure Company","country":"Vietnam","country_code":"VN"},"introduction_type":"eventHandler","is_inline":false,"md5":"87b659c90b81604997dd06a67e8b773e","sha1":"bc13329ca575a3e32c93e0e1cf791f47f91b0c2f","sha256":"1ac445488ebead2ed0b74a9c86ad76fa1a81f363806218afb2ae4aae5f127448","sha512":"a2f82c520753c0b9093fec4ee7b367523cb2d7156efd5587b0c15b385661beda71050b73710a80f4d4ccc38d7921d5f01a590fa7744f204468dd63411d16509d","ssdeep":"","tlshash":"db90000c0a20c0882b00af00e000c202a0c2202f0220a38ce823bce2a83c888808fea0","size":39,"data":"","first_seen":"2023-04-11T03:58:47Z","last_seen":"2026-08-19T23:22:11.95966Z","times_seen":35719,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rs-shop-ph.com/render_v4/product.js?v=1787178690210flry2owrrv","fqdn":"rs-shop-ph.com","domain":"rs-shop-ph.com","tld":"com"},"ip":{"addr":"203.171.27.189","port":443,"asn":45903,"as":"CMC Telecom Infrastructure Company","country":"Vietnam","country_code":"VN"},"introduction_type":"scriptElement","is_inline":false,"md5":"a3f0c942ce091154cfec6373e017956e","sha1":"2c4e000c3f0b6dba6aa11d76fdc19585f6aa5e00","sha256":"7dd21ea3654795ceaf1b0f296fb834b9edddd5727f0e05b2e659e616bb8b6865","sha512":"e4259b4fe901b460533594991ec6d2b0287d3b368168d3b76f2ed79770d2cc95615c94c9db3db5d583e15b9009a32e13ed7ae463a93e895a8f412f2a35caec4a","ssdeep":"3072:3fg5A7Oo3zSE8AaPiNAp+E6iYdCRqjgkz1+8PKyMPTWmkgNlh5sa8rJbyct9g7w:34WnOE8Aah87+8PKyMPqmkO/5s15r","tlshash":"b6644ce8b296f072416f7161412f5321b23ab5253465c474b92addd73a28cceb323bf9","size":319665,"data":"","first_seen":"2026-08-19T01:01:57.468978Z","last_seen":"2026-08-19T22:32:23.576186Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"a.pancake.vn/js/fingerprint.js","fqdn":"a.pancake.vn","domain":"pancake.vn","tld":"vn"},"ip":{"addr":"113.20.119.13","port":443,"asn":45903,"as":"CMC Telecom Infrastructure Company","country":"Vietnam","country_code":"VN"},"introduction_type":"scriptElement","is_inline":false,"md5":"1fa8c121ca9b293e122e1f23ba22310d","sha1":"9607288bc95b5c8d0d2b9e4c85dda12e59734c17","sha256":"fc3e94fe78f6ac40aebb652df5f93eb985f6da5500970cbe1a6503343f751f52","sha512":"37380cab497b819c45bf5759dfeb8a3b3c0c0ad19c0b40894640ab4ad845d39d9ca7371d3b9d679bba7d0052bd02b3afe0c4c9ee4b81790f827b28f0a157313b","ssdeep":"192:/4Rj8kbU5Tew4oTKh68MhYlA3UhqnoqN/t6GFgqRPr4tP1sC63n:8jZHh68EKo9t6TG8tAn","tlshash":"db1294cdb2daf06503d375b4901f100ae33a5969f44e8484e729e8e2bc7545ea22bf7d","size":9116,"data":"","first_seen":"2025-11-02T09:55:24.078171Z","last_seen":"2026-08-19T22:32:23.545962Z","times_seen":141,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"a.pancake.vn/js/app.js?vsn=5","fqdn":"a.pancake.vn","domain":"pancake.vn","tld":"vn"},"ip":{"addr":"113.20.119.13","port":443,"asn":45903,"as":"CMC Telecom Infrastructure Company","country":"Vietnam","country_code":"VN"},"introduction_type":"scriptElement","is_inline":false,"md5":"53af075dc64e39d4e607fdcff175db84","sha1":"35cd392d34d3062caade29e80f9da67bf908e12e","sha256":"1c83cd814385448c3d9051e7c0e58f8dff57292b689931ba26c8e075f8ca9f34","sha512":"0e30b1f6af3494cebf1dd3aa49a3247609cbecee5e2586a11d95e91f6c31a0179e4945ae89606408649b286b8432fce264281949d95d9e2f49477d64eb95a4fb","ssdeep":"384:8tsGfMlScIrOMgl/eed35awvPuwt8+lxBd6CAYS1x:8xfMX+OVphdJau2wt8+lxB4CAj1x","tlshash":"9972d6c9b1c2f0b1439b6074423f110af27aa41ab14ed8d0e71addd2bcb494e9223f78","size":16810,"data":"","first_seen":"2025-11-24T10:58:04.623764Z","last_seen":"2026-08-19T22:32:23.557276Z","times_seen":129,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":[{"level":"log","text":"Joined successfully!map[actor:server1.conn0.watcher16.process8//obj57 class:Object extensible:true frozen:false isError:false ownPropertyLength:0 preview:map[kind:Object ownProperties:map[] ownPropertiesLength:0] sealed:false type:object]","filename":"https://rs-shop-ph.com/render_v4/product.js?v=1787178690210flry2owrrv","line_number":2,"column_number":129164},{"level":"log","text":"Joined topic flash_sale successfully!map[actor:server1.conn0.watcher16.process8//obj58 class:Object extensible:true frozen:false isError:false ownPropertyLength:0 preview:map[kind:Object ownProperties:map[] ownPropertiesLength:0] sealed:false type:object]","filename":"https://rs-shop-ph.com/render_v4/product.js?v=1787178690210flry2owrrv","line_number":2,"column_number":129304},{"level":"log","text":"Joined topic promotion_advance successfully!","filename":"https://rs-shop-ph.com/render_v4/product.js?v=1787178690210flry2owrrv","line_number":2,"column_number":129461}]},"http":[{"url":{"schema":"https","addr":"api.webcake.io/animate/animatev4.css?v=1","fqdn":"api.webcake.io","domain":"webcake.io","tld":"io"},"ip":{"addr":"113.20.119.13","port":443,"asn":45903,"as":"CMC Telecom Infrastructure Company","country":"Vietnam","country_code":"VN"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rs-shop-ph.com/thejoystoreblkxbash","date":"2026-08-19T22:31:30.542Z","timestamp":1787178690542,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.webcake.io","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 30 Sep 2025 00:00:00 GMT","end":"Thu, 01 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C8:DD:D0:B1:2C:13:30:FC:EE:ED:F7:2B:58:21:66:5A:0F:4A:A8:75","sha256":"59:D5:31:20:93:CF:51:56:BD:93:1D:CA:7D:59:B2:EA:8E:B3:B6:51:A6:68:15:42:55:F4:94:8B:C9:B0:1B:D2"}}},"request":{"raw":"GET /animate/animatev4.css?v=1 HTTP/1.1\r\nHost: api.webcake.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rs-shop-ph.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: openresty/1.25.3.2\r\ndate: Wed, 19 Aug 2026 22:31:31 GMT\r\ncontent-type: text/css\r\ncontent-length: 6687\r\nservice-worker-allowed: /\r\naccept-ranges: bytes\r\ncache-control: public, max-age=31536000\r\ncontent-encoding: gzip\r\netag: \"63281D0\"\r\nvary: Accept-Encoding\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"OpenResty:1.25.3.2","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":100201,"size_decoded":6987,"mime_type":"text/css","magic":"ASCII text","md5":"32c93e3d053f601bfc6b3b83a21460df","sha1":"70d496f672bfc9d961bda09e302eaf35c46fba86","sha256":"debe5cc979354039fc42335030359258a752d8b80d92f0d622ccaba8edf6def0","sha512":"0946961a589f553fc1ef42360006e83800866f2a14833466894bed54788d06af987f5bbb2170a6d6cdbd0dd4d2d2e85dbf7db59fdeb95f711a5e20758d9558ba","ssdeep":"768:cD2K+D9wwrWJlKIqfqnpKLbQo9uGusYQY8uuuPukupw4U:cD2K+D9wwrWJlKIqepKLbQyw4U","tlshash":"43a34dad29d1118452778a2d93df5e38163ce5b31416adef72c2588fcf86fa863c9207","first_seen":"2025-11-02T09:55:24.095261Z","last_seen":"2026-08-19T22:32:23.544444Z","times_seen":154,"resource_available":false,"data":null}},"time_used":1216,"timings":{"blocked":-1,"dns":71,"connect":229,"send":0,"wait":230,"receive":0,"ssl":686},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.webcake.io/render_iconfont/iconfont.css?v=1","fqdn":"api.webcake.io","domain":"webcake.io","tld":"io"},"ip":{"addr":"113.20.119.13","port":443,"asn":45903,"as":"CMC Telecom Infrastructure Company","country":"Vietnam","country_code":"VN"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rs-shop-ph.com/thejoystoreblkxbash","date":"2026-08-19T22:31:30.544Z","timestamp":1787178690544,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.webcake.io","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 30 Sep 2025 00:00:00 GMT","end":"Thu, 01 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C8:DD:D0:B1:2C:13:30:FC:EE:ED:F7:2B:58:21:66:5A:0F:4A:A8:75","sha256":"59:D5:31:20:93:CF:51:56:BD:93:1D:CA:7D:59:B2:EA:8E:B3:B6:51:A6:68:15:42:55:F4:94:8B:C9:B0:1B:D2"}}},"request":{"raw":"GET /render_iconfont/iconfont.css?v=1 HTTP/1.1\r\nHost: api.webcake.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rs-shop-ph.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: openresty/1.25.3.2\r\ndate: Wed, 19 Aug 2026 22:31:31 GMT\r\ncontent-type: text/css\r\ncontent-length: 302\r\nservice-worker-allowed: /\r\naccept-ranges: bytes\r\ncache-control: public, max-age=31536000\r\ncontent-encoding: gzip\r\netag: \"119F651\"\r\nvary: Accept-Encoding\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty:1.25.3.2","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":654,"size_decoded":601,"mime_type":"text/css","magic":"ASCII text","md5":"e35bda369458e13a9de042dabef63b49","sha1":"d37d221d9eee4bbaf39c66ef1c9907996a101c09","sha256":"a7f565be47dcd36f197bdb273b3cdd06ac2ac12e7b7d44ac089f6461f9fe2394","sha512":"bdc8f74a2baf9cd0f885306d98111000accd56d97f4117f8501444c60d2ea6f0acea182c6fc175c552fb3dfdb0f51d16429d00abc9704264ddc266030a83d77d","ssdeep":"","tlshash":"e2f02bd598fc2c5163585c89724b6f31bf0c70950d474c6ab29f786c9ff36154292b8c","first_seen":"2023-04-11T03:58:48Z","last_seen":"2026-08-19T22:32:23.54527Z","times_seen":342,"resource_available":false,"data":null}},"time_used":1454,"timings":{"blocked":-1,"dns":70,"connect":230,"send":0,"wait":230,"receive":0,"ssl":923},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"a.pancake.vn/js/fingerprint.js","fqdn":"a.pancake.vn","domain":"pancake.vn","tld":"vn"},"ip":{"addr":"113.20.119.13","port":443,"asn":45903,"as":"CMC Telecom Infrastructure Company","country":"Vietnam","country_code":"VN"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rs-shop-ph.com/thejoystoreblkxbash","date":"2026-08-19T22:31:30.812Z","timestamp":1787178690812,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"a.pancake.vn","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 04 Jul 2026 01:16:23 GMT","end":"Fri, 02 Oct 2026 01:16:22 GMT"},"fingerprint":{"sha1":"5C:9A:A7:13:C6:1C:D2:5B:C7:8D:37:50:F5:9D:C1:14:29:0D:D2:7B","sha256":"FC:50:DC:40:9F:1A:E3:96:14:F0:00:AF:EA:59:CF:B3:82:5D:78:F7:D5:44:62:40:D9:42:9A:06:C7:E0:D1:B8"}}},"request":{"raw":"GET /js/fingerprint.js HTTP/1.1\r\nHost: a.pancake.vn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rs-shop-ph.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: openresty/1.25.3.2\r\ndate: Wed, 19 Aug 2026 22:31:31 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 9116\r\naccept-ranges: bytes\r\ncache-control: public\r\netag: \"55AEF1F\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty:1.25.3.2","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":9116,"size_decoded":9331,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (9116), with no line terminators","md5":"1fa8c121ca9b293e122e1f23ba22310d","sha1":"9607288bc95b5c8d0d2b9e4c85dda12e59734c17","sha256":"fc3e94fe78f6ac40aebb652df5f93eb985f6da5500970cbe1a6503343f751f52","sha512":"37380cab497b819c45bf5759dfeb8a3b3c0c0ad19c0b40894640ab4ad845d39d9ca7371d3b9d679bba7d0052bd02b3afe0c4c9ee4b81790f827b28f0a157313b","ssdeep":"192:/4Rj8kbU5Tew4oTKh68MhYlA3UhqnoqN/t6GFgqRPr4tP1sC63n:8jZHh68EKo9t6TG8tAn","tlshash":"db1294cdb2daf06503d375b4901f100ae33a5969f44e8484e729e8e2bc7545ea22bf7d","first_seen":"2025-11-02T09:55:24.078171Z","last_seen":"2026-08-19T22:32:23.545962Z","times_seen":141,"resource_available":true,"data":null}},"time_used":1175,"timings":{"blocked":-1,"dns":11,"connect":231,"send":0,"wait":232,"receive":0,"ssl":700},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"content.pancake.vn/web-media-263/b2/90/9c/d4/1b48fa901e4e9716f65f313cc7c1ec5000f6381aa926a257df05af63-w:1080-h:1350-l:20707-t:image/webp.webp","fqdn":"content.pancake.vn","domain":"pancake.vn","tld":"vn"},"ip":{"addr":"203.171.27.184","port":443,"asn":45903,"as":"CMC Telecom Infrastructure Company","country":"Vietnam","country_code":"VN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rs-shop-ph.com/thejoystoreblkxbash","date":"2026-08-19T22:31:32.248Z","timestamp":1787178692248,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.pancake.vn","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 10 Jul 2026 00:00:00 GMT","end":"Sun, 24 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"5A:44:4F:CC:D2:24:0B:45:5F:98:33:58:C2:FB:7C:EE:CE:28:65:3C","sha256":"73:95:94:73:D8:1E:58:5C:83:CA:31:9F:16:6C:8D:18:E8:97:2C:1C:31:57:58:88:0D:62:86:AF:F7:39:11:8F"}}},"request":{"raw":"GET /web-media-263/b2/90/9c/d4/1b48fa901e4e9716f65f313cc7c1ec5000f6381aa926a257df05af63-w:1080-h:1350-l:20707-t:image/webp.webp HTTP/1.1\r\nHost: content.pancake.vn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rs-shop-ph.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.22.1\r\ndate: Wed, 19 Aug 2026 22:31:32 GMT\r\ncontent-type: image/webp\r\ncontent-length: 20072\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: \r\ncache-control: public, max-age=2505600\r\ncontent-security-policy: default-src 'none'; script-src 'none'; media-src *\r\netag: webp.webp\r\nx-content-type-options: nosniff\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":20072,"size_decoded":20509,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"75eb42731cc75b5eb9806c21c48f4e25","sha1":"ea471500c4f84d67e6ee1866900cbcb08b970b34","sha256":"b2909cd41b48fa901e4e9716f65f313cc7c1ec5000f6381aa926a257df05af63","sha512":"57456aef79712c7dd2ce78090fff6532cbb55bbcab6bb6fd9e522805a8141bdef613f51aa334ec27f032b6b28679ee9d2b2f17d88e0147b63060872ce23a6e2f","ssdeep":"384:LwEk8oawCAkVezz2HVbpMtKN9rxmyjBG4OaqmbJYAIsPhM9UQ6oCHEQgTHCYVPX3:cEk8oaNYmVPN9rELmlYZsPWR4EtFV","tlshash":"bd92af3056781655e3863c7a45398c1c933df6dd428e37e90152e3baeda08a11f8adfe","first_seen":"2026-08-19T01:01:57.431016Z","last_seen":"2026-08-19T22:32:23.546742Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1437,"timings":{"blocked":216,"dns":0,"connect":0,"send":0,"wait":975,"receive":246,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"content.pancake.vn/web-media-263/s962x962/fwebp80/d4/f8/a0/3c/13bf8f5305f4be1605006d18b257becf39bf30d3a2a36ba6d52eff95-w:1500-h:1500-l:101486-t:image/webp.webp","fqdn":"content.pancake.vn","domain":"pancake.vn","tld":"vn"},"ip":{"addr":"203.171.27.184","port":443,"asn":45903,"as":"CMC Telecom Infrastructure Company","country":"Vietnam","country_code":"VN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rs-shop-ph.com/thejoystoreblkxbash","date":"2026-08-19T22:31:32.250Z","timestamp":1787178692250,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.pancake.vn","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 10 Jul 2026 00:00:00 GMT","end":"Sun, 24 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"5A:44:4F:CC:D2:24:0B:45:5F:98:33:58:C2:FB:7C:EE:CE:28:65:3C","sha256":"73:95:94:73:D8:1E:58:5C:83:CA:31:9F:16:6C:8D:18:E8:97:2C:1C:31:57:58:88:0D:62:86:AF:F7:39:11:8F"}}},"request":{"raw":"GET /web-media-263/s962x962/fwebp80/d4/f8/a0/3c/13bf8f5305f4be1605006d18b257becf39bf30d3a2a36ba6d52eff95-w:1500-h:1500-l:101486-t:image/webp.webp HTTP/1.1\r\nHost: content.pancake.vn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rs-shop-ph.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.22.1\r\ndate: Wed, 19 Aug 2026 22:31:32 GMT\r\ncontent-type: image/webp\r\ncontent-length: 50452\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: \r\ncache-control: public, max-age=2505600\r\ncontent-security-policy: default-src 'none'; script-src 'none'; media-src *\r\netag: webp.webp\r\nx-content-type-options: nosniff\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":50452,"size_decoded":50889,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"31d8ae274e00cdd0cb13fd89dc2a649f","sha1":"66569801b09f822061acd7fa5a47f9deead3a43b","sha256":"73ff991948812d2f24196dbb336057641f644af9ef84150a4d1e13171d5b9a0d","sha512":"9c10e6579626d2709f2e8b1ab80a0c82694395cb9f44ee62e76d85760d54b724f2618d95cf2158372d7c4f334503f91c5c3074cf2267f8126f46a41853fae18f","ssdeep":"768:c8PuUh0q5m7cr+im9HFea1OqAKUAi/VenD7YX7tTK2+oFKFpIYjMVVxZ19NQocIW:zuPqoaDkBUzdeQX7tT6UNWMV3ZPNQodW","tlshash":"4333020f37225a4af15fa5765f07b85f2999e1c52b42c3d702305321dc325c8dbb0baa","first_seen":"2026-08-19T01:01:57.463835Z","last_seen":"2026-08-19T22:32:23.548022Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1437,"timings":{"blocked":216,"dns":0,"connect":0,"send":0,"wait":974,"receive":247,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rs-shop-ph.com/webcake/v4/ebcce32d-de92-4730-8501-1c241f135cbf","fqdn":"rs-shop-ph.com","domain":"rs-shop-ph.com","tld":"com"},"ip":{"addr":"203.171.27.189","port":443,"asn":45903,"as":"CMC Telecom Infrastructure Company","country":"Vietnam","country_code":"VN"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rs-shop-ph.com/thejoystoreblkxbash","date":"2026-08-19T22:31:30.808Z","timestamp":1787178690808,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rs-shop-ph.com","organization":""},"issuer":{"commonName":"ZeroSSL ECC DV SSL CA 2","organization":"ZeroSSL GmbH"},"validity":{"start":"Mon, 13 Jul 2026 00:00:00 GMT","end":"Sun, 11 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"94:AD:C6:A8:92:B5:65:CB:7E:C8:46:96:D0:B2:34:AC:82:A4:3A:56","sha256":"D7:84:7A:F5:79:31:63:69:0E:42:57:BA:A8:86:A6:20:15:46:B9:B1:6F:2F:C3:38:54:8F:0F:4A:5A:CD:1E:9C"}}},"request":{"raw":"GET /webcake/v4/ebcce32d-de92-4730-8501-1c241f135cbf HTTP/1.1\r\nHost: rs-shop-ph.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rs-shop-ph.com/thejoystoreblkxbash\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: openresty/1.27.1.1\r\ndate: Wed, 19 Aug 2026 22:31:30 GMT\r\ncontent-type: text/plain\r\ncontent-length: 158807\r\ncache-control: max-age=0, private, must-revalidate\r\ncontent-encoding: gzip\r\nvary: accept-encoding\r\nx-request-id: GM1VjO6iS5CRng3VnrdC\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Tag Manager","description":"Google Tag Manager is a tag management system (TMS) that allows you to quickly and easily update measurement codes and related code fragments collectively known as tags on your website or mobile app.","website":"https://www.google.com/tagmanager","common_platform_enumeration":"","icon":"Google Tag Manager.svg","categories":["Tag managers"]},{"name":"OpenResty:1.27.1.1","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":585046,"size_decoded":159124,"mime_type":"text/plain","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65354)","md5":"e95bc1ae7d7c03dbd6eaa00e1ec913e9","sha1":"2b84ff4adf3150d41a44e3281f9db6d6eeaca302","sha256":"2b49a23052e3740769d10674f973fab53afb1dab836893ef5c1e46b3f158399f","sha512":"8bce263bbc2dfd6708969f944f70e550a120f79712f2f5c89c1893acb4408cfa4239fbca7deefb6e14b68dc2ee8ff1b27f39e87a4309dfc268ea4abf1d628cd9","ssdeep":"6144:80zpb8rgcKFaMSW+8PKyMPqmkOu0LOcoWO4grL+eof1PnVpuhXzMFyfR:Ppb8EUMz+uPILOcoWk+f1PnVpGMFyfR","tlshash":"c2c44c98b396f07241bf61b2406f5216b33ab51954458874b929cdd33a28c8bb373ff9","first_seen":"2026-08-08T01:24:36.261588Z","last_seen":"2026-08-19T22:32:23.549244Z","times_seen":6,"resource_available":true,"data":null}},"time_used":698,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":467,"receive":231,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-19","alert":"Phishing Block","trigger":"rs-shop-ph.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"rs-shop-ph.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"rs-shop-ph.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rs-shop-ph.com/sync/78b27b7c-c0fb-4838-9434-1d4e4f860774","fqdn":"rs-shop-ph.com","domain":"rs-shop-ph.com","tld":"com"},"ip":{"addr":"203.171.27.189","port":443,"asn":45903,"as":"CMC Telecom Infrastructure Company","country":"Vietnam","country_code":"VN"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://rs-shop-ph.com/thejoystoreblkxbash","date":"2026-08-19T22:31:32.117Z","timestamp":1787178692117,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rs-shop-ph.com","organization":""},"issuer":{"commonName":"ZeroSSL ECC DV SSL CA 2","organization":"ZeroSSL GmbH"},"validity":{"start":"Mon, 13 Jul 2026 00:00:00 GMT","end":"Sun, 11 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"94:AD:C6:A8:92:B5:65:CB:7E:C8:46:96:D0:B2:34:AC:82:A4:3A:56","sha256":"D7:84:7A:F5:79:31:63:69:0E:42:57:BA:A8:86:A6:20:15:46:B9:B1:6F:2F:C3:38:54:8F:0F:4A:5A:CD:1E:9C"}}},"request":{"raw":"GET /sync/78b27b7c-c0fb-4838-9434-1d4e4f860774 HTTP/1.1\r\nHost: rs-shop-ph.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rs-shop-ph.com/thejoystoreblkxbash\r\nCookie: external_id=mqw1l171br1l2b1gcogew; _p_session_id=83c54cf3-6a8c-4c55-82d6-79f1f91bc9a8\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: openresty/1.27.1.1\r\ndate: Wed, 19 Aug 2026 22:31:32 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 3112\r\ncache-control: max-age=0, private, must-revalidate\r\ncontent-encoding: gzip\r\nvary: accept-encoding\r\nx-request-id: GM1VjTzO_FzBY5DHzCfj\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty:1.27.1.1","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":13214,"size_decoded":3448,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"717858552f0369eab20f34cfc58cc235","sha1":"63510af68e06952eb28c80c1fd77e126a0c92f56","sha256":"6c646b6414d477141b0df9c70acf8320f20883be0106781a206fe8eec9d2863e","sha512":"213e81c1996d6eb7c6b10d78e33bd0ac79311db348c79a52c6bf18c503424593ad84fd49ef7eb7d5855196728e6495f2a6aea8bd852be1d9e0c27f8cd0ffae04","ssdeep":"384:/OhU2Mo+p3MPbDUe3l6ERGpoiPgTcW5KwHfoiPgTcW5KwH/:/z23EubDUe3l6Ei66","tlshash":"8b52a64a817c3cf789e295036c8636aef0bdd30ecff40e4c5169c622ebd469a5b2655c","first_seen":"2026-08-19T22:32:23.549852Z","last_seen":"2026-08-19T22:32:23.549852Z","times_seen":1,"resource_available":false,"data":null}},"time_used":240,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":240,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"rs-shop-ph.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-19","alert":"Phishing Block","trigger":"rs-shop-ph.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"rs-shop-ph.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/lato/v25/S6u9w4BMUTPHh6UVSwiPGQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://rs-shop-ph.com/thejoystoreblkxbash","date":"2026-08-19T22:31:32.202Z","timestamp":1787178692202,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Aug 2026 20:43:51 GMT","end":"Wed, 28 Oct 2026 20:43:50 GMT"},"fingerprint":{"sha1":"B9:F7:74:85:7B:1C:5F:E9:C2:86:5A:AA:63:0F:34:84:5F:79:D6:96","sha256":"BA:57:10:D4:7E:A5:7C:C6:22:90:71:24:65:31:49:39:40:E5:C8:EB:E4:74:F7:D9:0B:3E:17:36:DD:31:9D:EB"}}},"request":{"raw":"GET /s/lato/v25/S6u9w4BMUTPHh6UVSwiPGQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://rs-shop-ph.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 23040\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sun, 16 Aug 2026 10:07:28 GMT\r\nexpires: Mon, 16 Aug 2027 10:07:28 GMT\r\ncache-control: public, max-age=31536000\r\nage: 303844\r\nlast-modified: Mon, 15 Sep 2025 17:11:31 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":23040,"size_decoded":23853,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 23040, version 1.0","md5":"de69cf9e514df447d1b0bb16f49d2457","sha1":"2ac78601179c3a63ba3f3f3081556b12ddcaf655","sha256":"c447dd7677b419db7b21dbdfc6277c7816a913ffda76fd2e52702df538de0e49","sha512":"4aebb7e54d88827d4a02808f04901c0d09b756c518202b056a6c0f664948f5585221d16967f546e064187c6545acef15d59b68d0a7a59897bd899d3e9dda37b1","ssdeep":"384:adpABC4a0HkBpR1HWtGu06B6lsoAKiwY0HcLKglV6Z+DVb35PJZDdiZeJ1vqYg:0AHa0Ezf2tZn6lsoABwTKK46ZQb3V7wD","tlshash":"fca2e1c05cc1e2d4ae02daf7fda5a4eab4e2f01123a8f65f8f114b75d505993640fe01","first_seen":"2023-04-05T13:28:45Z","last_seen":"2026-08-20T01:30:46.549354Z","times_seen":187728,"resource_available":false,"data":null}},"time_used":75,"timings":{"blocked":6,"dns":0,"connect":0,"send":0,"wait":50,"receive":19,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"content.pancake.vn/web-media/c4/1e/34/58/1300d6867e9149ed7d0730da2d7652bfe4e009006bc92a1bd3cd38c5-w:728-h:318-l:10768-t:image/png.png","fqdn":"content.pancake.vn","domain":"pancake.vn","tld":"vn"},"ip":{"addr":"203.171.27.184","port":443,"asn":45903,"as":"CMC Telecom Infrastructure Company","country":"Vietnam","country_code":"VN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rs-shop-ph.com/thejoystoreblkxbash","date":"2026-08-19T22:31:32.233Z","timestamp":1787178692233,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.pancake.vn","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 10 Jul 2026 00:00:00 GMT","end":"Sun, 24 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"5A:44:4F:CC:D2:24:0B:45:5F:98:33:58:C2:FB:7C:EE:CE:28:65:3C","sha256":"73:95:94:73:D8:1E:58:5C:83:CA:31:9F:16:6C:8D:18:E8:97:2C:1C:31:57:58:88:0D:62:86:AF:F7:39:11:8F"}}},"request":{"raw":"GET /web-media/c4/1e/34/58/1300d6867e9149ed7d0730da2d7652bfe4e009006bc92a1bd3cd38c5-w:728-h:318-l:10768-t:image/png.png HTTP/1.1\r\nHost: content.pancake.vn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rs-shop-ph.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.22.1\r\ndate: Wed, 19 Aug 2026 22:31:32 GMT\r\ncontent-type: image/png\r\ncontent-length: 10155\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: \r\ncache-control: public, max-age=2505600\r\ncontent-security-policy: default-src 'none'; script-src 'none'; media-src *\r\netag: png.png\r\nx-content-type-options: nosniff\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":10155,"size_decoded":10589,"mime_type":"image/png","magic":"PNG image data, 728 x 318, 8-bit colormap, interlaced","md5":"6f24efa691aceb735c7fe7bd566a8703","sha1":"13e210ac08a6ae4ef2966fb17fbfbc9229a02467","sha256":"c41e34581300d6867e9149ed7d0730da2d7652bfe4e009006bc92a1bd3cd38c5","sha512":"fe9a16f7f2a12d5b03b14f631545c8a0140082f3e00d06c0d707c115bd1e2cca100c68c5ff29b7c52eff91ece427b8a6fe99068d2aaee29f5972af53c9a2f552","ssdeep":"192:8FTCaB8IDeCioYYClexrKciaPXP3RNtjj5tE2+oKy+KI96w0j7ZKYfhvH4FZk:8waB8IoYCAdHXfztjjo2+q2X0j9xRY3k","tlshash":"7622bf2f2946463701033a749d1ea750c878589ff8aca6efcb4228a0f59fd605b0b777","first_seen":"2026-08-19T01:01:57.414163Z","last_seen":"2026-08-19T22:32:23.551676Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1237,"timings":{"blocked":257,"dns":0,"connect":0,"send":0,"wait":978,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"content.pancake.vn/web-media-263/s962x962/fwebp80/55/da/a1/6b/7fbcf54e40cb0ab8e381009c0079ccc9ea69596d04df9eaef57d5895-w:1500-h:1500-l:167136-t:image/webp.webp","fqdn":"content.pancake.vn","domain":"pancake.vn","tld":"vn"},"ip":{"addr":"203.171.27.184","port":443,"asn":45903,"as":"CMC Telecom Infrastructure Company","country":"Vietnam","country_code":"VN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rs-shop-ph.com/thejoystoreblkxbash","date":"2026-08-19T22:31:32.232Z","timestamp":1787178692232,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.pancake.vn","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 10 Jul 2026 00:00:00 GMT","end":"Sun, 24 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"5A:44:4F:CC:D2:24:0B:45:5F:98:33:58:C2:FB:7C:EE:CE:28:65:3C","sha256":"73:95:94:73:D8:1E:58:5C:83:CA:31:9F:16:6C:8D:18:E8:97:2C:1C:31:57:58:88:0D:62:86:AF:F7:39:11:8F"}}},"request":{"raw":"GET /web-media-263/s962x962/fwebp80/55/da/a1/6b/7fbcf54e40cb0ab8e381009c0079ccc9ea69596d04df9eaef57d5895-w:1500-h:1500-l:167136-t:image/webp.webp HTTP/1.1\r\nHost: content.pancake.vn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rs-shop-ph.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.22.1\r\ndate: Wed, 19 Aug 2026 22:31:32 GMT\r\ncontent-type: image/webp\r\ncontent-length: 92774\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: \r\ncache-control: public, max-age=2505600\r\ncontent-security-policy: default-src 'none'; script-src 'none'; media-src *\r\netag: webp.webp\r\nx-content-type-options: nosniff\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":92774,"size_decoded":93211,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"358d9d84956a794bf1912cc89a917b0b","sha1":"0c81645009fba834eb0e3ffd3da45d5ee5e16809","sha256":"d5f2003d9ad3089a137b2c832cf72d5e1b752e0a5bda41365911c8cf8162382e","sha512":"c7210103422f2261bf2ec579ae9ac36d132be75adeba428226fa59a153c2735a910eda18ebe3b1befc64c47dc62cd3b7e0426fecc488a9c3e0dbb44e647d01e5","ssdeep":"1536:+dY+7H0gWjDWBb3/L7bC3dlF8QQJBbgH1H6oDxCsQj1Xqjbr71kkZgId:+zH0JyTL7bedlF/QJuVHdk/t6z1vd","tlshash":"4893020417a5db1ff61ed1b1022f82cc671cedc19270285ef6ce86572a262215cfbfa9","first_seen":"2026-08-19T01:01:57.487822Z","last_seen":"2026-08-19T22:32:23.553062Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1235,"timings":{"blocked":257,"dns":0,"connect":0,"send":0,"wait":489,"receive":489,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"content.pancake.vn/web-media/c8/50/0e/9a/de88d3d828c3da71e3f0ecb4b04a51eee70cd6a17bcc2028e89284f5-w:225-h:225-l:6563-t:image/png.png","fqdn":"content.pancake.vn","domain":"pancake.vn","tld":"vn"},"ip":{"addr":"203.171.27.184","port":443,"asn":45903,"as":"CMC Telecom Infrastructure Company","country":"Vietnam","country_code":"VN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rs-shop-ph.com/thejoystoreblkxbash","date":"2026-08-19T22:31:32.236Z","timestamp":1787178692236,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.pancake.vn","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 10 Jul 2026 00:00:00 GMT","end":"Sun, 24 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"5A:44:4F:CC:D2:24:0B:45:5F:98:33:58:C2:FB:7C:EE:CE:28:65:3C","sha256":"73:95:94:73:D8:1E:58:5C:83:CA:31:9F:16:6C:8D:18:E8:97:2C:1C:31:57:58:88:0D:62:86:AF:F7:39:11:8F"}}},"request":{"raw":"GET /web-media/c8/50/0e/9a/de88d3d828c3da71e3f0ecb4b04a51eee70cd6a17bcc2028e89284f5-w:225-h:225-l:6563-t:image/png.png HTTP/1.1\r\nHost: content.pancake.vn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rs-shop-ph.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.22.1\r\ndate: Wed, 19 Aug 2026 22:31:32 GMT\r\ncontent-type: image/png\r\ncontent-length: 5961\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: \r\ncache-control: public, max-age=2505600\r\ncontent-security-policy: default-src 'none'; script-src 'none'; media-src *\r\netag: png.png\r\nx-content-type-options: nosniff\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5961,"size_decoded":6394,"mime_type":"image/png","magic":"PNG image data, 225 x 225, 8-bit/color RGB, non-interlaced","md5":"d6cafae567007f2fd797cf3ef3d7264d","sha1":"358c5ba097c901e83a06aaf1480e83b9eb9b22c8","sha256":"c8500e9ade88d3d828c3da71e3f0ecb4b04a51eee70cd6a17bcc2028e89284f5","sha512":"588ed21fefb5b384f0210f24b5131cf1c59c2986aad2744c7296683f6388b271b62e1cb9224fc5b5eab7373ccd8c18d26ac2252159c9f2c4700ecf484c792968","ssdeep":"96:yeAa08XR1XyZrpl1ZiK+am8Z27m2zibYH/aGRj6pHaXDAGOlTwHdXpaVcf11Bmm+:t08LXg18SZBgwYHjstdlWX0VcVmtt","tlshash":"f3c19e9de33b56fe3b523036423a5b26f636b62c3090d2cc56ac01b987297754c696e0","first_seen":"2026-08-19T01:01:57.495738Z","last_seen":"2026-08-19T22:32:23.55463Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1234,"timings":{"blocked":257,"dns":0,"connect":0,"send":0,"wait":977,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rs-shop-ph.com/track","fqdn":"rs-shop-ph.com","domain":"rs-shop-ph.com","tld":"com"},"ip":{"addr":"203.171.27.189","port":443,"asn":45903,"as":"CMC Telecom Infrastructure Company","country":"Vietnam","country_code":"VN"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://rs-shop-ph.com/thejoystoreblkxbash","date":"2026-08-19T22:31:32.255Z","timestamp":1787178692255,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rs-shop-ph.com","organization":""},"issuer":{"commonName":"ZeroSSL ECC DV SSL CA 2","organization":"ZeroSSL GmbH"},"validity":{"start":"Mon, 13 Jul 2026 00:00:00 GMT","end":"Sun, 11 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"94:AD:C6:A8:92:B5:65:CB:7E:C8:46:96:D0:B2:34:AC:82:A4:3A:56","sha256":"D7:84:7A:F5:79:31:63:69:0E:42:57:BA:A8:86:A6:20:15:46:B9:B1:6F:2F:C3:38:54:8F:0F:4A:5A:CD:1E:9C"}}},"request":{"raw":"POST /track HTTP/1.1\r\nHost: rs-shop-ph.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json;charset=utf-8\r\nContent-Length: 546\r\nOrigin: https://rs-shop-ph.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rs-shop-ph.com/thejoystoreblkxbash\r\nCookie: external_id=mqw1l171br1l2b1gcogew; _p_session_id=83c54cf3-6a8c-4c55-82d6-79f1f91bc9a8\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":546,"data":"{\"page_id\":\"78b27b7c-c0fb-4838-9434-1d4e4f860774\",\"type\":\"ViewContent\",\"data\":{\"eventID\":\"webcake.mujra6evrt\"},\"gtrack\":{\"id\":27099,\"name\":\"The Joy Store - NewBlkxBash\",\"settings\":{\"fb_tracking_code\":\"27740121415670460\",\"gg_ads_id\":\"\",\"gg_tag_manager_id\":\"\",\"gg_tracking_code\":\"\",\"tiktok_script\":\"\"}},\"ua\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\",\"origin\":\"https://rs-shop-ph.com\",\"pathname\":\"/thejoystoreblkxbash\",\"url\":\"https://rs-shop-ph.com/thejoystoreblkxbash\",\"external_id\":\"mqw1l171br1l2b1gcogew\"}"}},"response":{"raw":"HTTP/2 200 \r\nserver: openresty/1.27.1.1\r\ndate: Wed, 19 Aug 2026 22:31:32 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 42\r\ncache-control: max-age=0, private, must-revalidate\r\nx-request-id: GM1VjUS5NwjjBQrsiRBC\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty:1.27.1.1","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":42,"size_decoded":329,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"672de82a2e20a9e5b84b67e40acb054d","sha1":"16a6ed99f109c4c835a5ec9853cc804800149c1d","sha256":"a623f062796cfce011fa3457a9edc020590545bd15bebf421271427da86c435f","sha512":"c13ea3cda18b39e89ee6e094af64508be40860e80bcf44a4afa864dc12dbc2024949c97a7d3a6ca625cf81dbad1e2e42e7d8a9a7fe6817db30da76e955d218a4","ssdeep":"","tlshash":"2d9004c7410110d1d414f70505351f5130451013d7044031c4dc334ccfd004cf3c3147","first_seen":"2025-07-02T06:31:57.757445Z","last_seen":"2026-08-19T22:32:23.556173Z","times_seen":16,"resource_available":false,"data":null}},"time_used":437,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":437,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"rs-shop-ph.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-19","alert":"Phishing Block","trigger":"rs-shop-ph.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"rs-shop-ph.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"a.pancake.vn/js/app.js?vsn=5","fqdn":"a.pancake.vn","domain":"pancake.vn","tld":"vn"},"ip":{"addr":"113.20.119.13","port":443,"asn":45903,"as":"CMC Telecom Infrastructure Company","country":"Vietnam","country_code":"VN"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rs-shop-ph.com/thejoystoreblkxbash","date":"2026-08-19T22:31:32.051Z","timestamp":1787178692051,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"a.pancake.vn","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 04 Jul 2026 01:16:23 GMT","end":"Fri, 02 Oct 2026 01:16:22 GMT"},"fingerprint":{"sha1":"5C:9A:A7:13:C6:1C:D2:5B:C7:8D:37:50:F5:9D:C1:14:29:0D:D2:7B","sha256":"FC:50:DC:40:9F:1A:E3:96:14:F0:00:AF:EA:59:CF:B3:82:5D:78:F7:D5:44:62:40:D9:42:9A:06:C7:E0:D1:B8"}}},"request":{"raw":"GET /js/app.js?vsn=5 HTTP/1.1\r\nHost: a.pancake.vn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rs-shop-ph.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: openresty/1.25.3.2\r\ndate: Wed, 19 Aug 2026 22:31:32 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 16810\r\naccept-ranges: bytes\r\ncache-control: public, max-age=31536000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty:1.25.3.2","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":16810,"size_decoded":17027,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (16810), with no line terminators","md5":"53af075dc64e39d4e607fdcff175db84","sha1":"35cd392d34d3062caade29e80f9da67bf908e12e","sha256":"1c83cd814385448c3d9051e7c0e58f8dff57292b689931ba26c8e075f8ca9f34","sha512":"0e30b1f6af3494cebf1dd3aa49a3247609cbecee5e2586a11d95e91f6c31a0179e4945ae89606408649b286b8432fce264281949d95d9e2f49477d64eb95a4fb","ssdeep":"384:8tsGfMlScIrOMgl/eed35awvPuwt8+lxBd6CAYS1x:8xfMX+OVphdJau2wt8+lxB4CAj1x","tlshash":"9972d6c9b1c2f0b1439b6074423f110af27aa41ab14ed8d0e71addd2bcb494e9223f78","first_seen":"2025-11-24T10:58:04.623764Z","last_seen":"2026-08-19T22:32:23.557276Z","times_seen":129,"resource_available":true,"data":null}},"time_used":426,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":426,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://rs-shop-ph.com/thejoystoreblkxbash","date":"2026-08-19T22:31:32.187Z","timestamp":1787178692187,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Aug 2026 20:43:51 GMT","end":"Wed, 28 Oct 2026 20:43:50 GMT"},"fingerprint":{"sha1":"B9:F7:74:85:7B:1C:5F:E9:C2:86:5A:AA:63:0F:34:84:5F:79:D6:96","sha256":"BA:57:10:D4:7E:A5:7C:C6:22:90:71:24:65:31:49:39:40:E5:C8:EB:E4:74:F7:D9:0B:3E:17:36:DD:31:9D:EB"}}},"request":{"raw":"GET /s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://rs-shop-ph.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 43136\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 13 Aug 2026 10:17:38 GMT\r\nexpires: Fri, 13 Aug 2027 10:17:38 GMT\r\ncache-control: public, max-age=31536000\r\nage: 562434\r\nlast-modified: Wed, 18 Feb 2026 19:51:37 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":43136,"size_decoded":43949,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 43136, version 1.0","md5":"665db5e157d2138835c4037c971ff3a4","sha1":"41ca6b7e4818eb81531d8006ff7ddd971c640879","sha256":"1404ca348bd75ef836f4dd8b6f2cc719458642d1237c368296b2fc652dca47dc","sha512":"6c999466673c9873b1b112d6ab95c7cecb99467ea156e3e046b54c5f3d109c3845b05cbb2a0245d178430c7b2ceacd5110f7d8faf7e041100f44852b0c29fe9a","ssdeep":"768:tMTmVhyXCrekkraPAjrWMMWD3UJmw0FRwoglekm+hQ7//geceSF/mEQBPMAmDu5:cmHkCrHvPAjrWMMI3UJswogl4j7/hSlW","tlshash":"f9130231eb70ee59962c903454e7fda9433b1457d731aca80e99a1ce6f8103454facec","first_seen":"2026-02-19T22:27:43.350598Z","last_seen":"2026-08-20T01:29:35.591876Z","times_seen":267701,"resource_available":false,"data":null}},"time_used":90,"timings":{"blocked":22,"dns":0,"connect":0,"send":0,"wait":21,"receive":47,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"content.pancake.vn/web-media-263/08/7e/e8/6c/2514f576f98f1167837aa61aff458bb64ce1718bae4f06e714026ded-w:1080-h:1350-l:32362-t:image/webp.webp","fqdn":"content.pancake.vn","domain":"pancake.vn","tld":"vn"},"ip":{"addr":"203.171.27.184","port":443,"asn":45903,"as":"CMC Telecom Infrastructure Company","country":"Vietnam","country_code":"VN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rs-shop-ph.com/thejoystoreblkxbash","date":"2026-08-19T22:31:32.244Z","timestamp":1787178692244,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.pancake.vn","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 10 Jul 2026 00:00:00 GMT","end":"Sun, 24 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"5A:44:4F:CC:D2:24:0B:45:5F:98:33:58:C2:FB:7C:EE:CE:28:65:3C","sha256":"73:95:94:73:D8:1E:58:5C:83:CA:31:9F:16:6C:8D:18:E8:97:2C:1C:31:57:58:88:0D:62:86:AF:F7:39:11:8F"}}},"request":{"raw":"GET /web-media-263/08/7e/e8/6c/2514f576f98f1167837aa61aff458bb64ce1718bae4f06e714026ded-w:1080-h:1350-l:32362-t:image/webp.webp HTTP/1.1\r\nHost: content.pancake.vn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rs-shop-ph.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.22.1\r\ndate: Wed, 19 Aug 2026 22:31:32 GMT\r\ncontent-type: image/webp\r\ncontent-length: 31726\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: \r\ncache-control: public, max-age=2505600\r\ncontent-security-policy: default-src 'none'; script-src 'none'; media-src *\r\netag: webp.webp\r\nx-content-type-options: nosniff\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":31726,"size_decoded":32163,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"40e5a49902c6e463a6e9c7753577fe2b","sha1":"9eb8c92b36cce3637db9411732d1e7ed8a2fd3f5","sha256":"087ee86c2514f576f98f1167837aa61aff458bb64ce1718bae4f06e714026ded","sha512":"554da80b871cf82d54ba56c748371fb27b173a0ae166669c6f1bbde1e23d6e9e7692f3faeb977783bf6302bbc21c35841a6f5638919f827b938445dc20b1bfa4","ssdeep":"768:JPZD0Zjx0jtVSb6GGMqm9A8MtaAjcuqdQR7AcB:xyD+TPRg3AQRQRcc","tlshash":"90e2bfa0d295a058e137333675e9d01ba5fb281a13fd12737b9caf39224a80dcd46f65","first_seen":"2026-08-19T01:01:57.461014Z","last_seen":"2026-08-19T22:32:23.55903Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1442,"timings":{"blocked":218,"dns":0,"connect":0,"send":0,"wait":977,"receive":247,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"wss","addr":"wss://api.webcake.io/socket/websocket?vsn=2.0.0","fqdn":"api.webcake.io","domain":"webcake.io","tld":"io"},"ip":{"addr":"113.20.119.13","port":443,"asn":45903,"as":"CMC Telecom Infrastructure Company","country":"Vietnam","country_code":"VN"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://rs-shop-ph.com/thejoystoreblkxbash","date":"2026-08-19T22:31:32.405Z","timestamp":1787178692405,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.webcake.io","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 30 Sep 2025 00:00:00 GMT","end":"Thu, 01 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C8:DD:D0:B1:2C:13:30:FC:EE:ED:F7:2B:58:21:66:5A:0F:4A:A8:75","sha256":"59:D5:31:20:93:CF:51:56:BD:93:1D:CA:7D:59:B2:EA:8E:B3:B6:51:A6:68:15:42:55:F4:94:8B:C9:B0:1B:D2"}}},"request":{"raw":"GET /socket/websocket?vsn=2.0.0 HTTP/1.1\r\nHost: api.webcake.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-WebSocket-Version: 13\r\nOrigin: https://rs-shop-ph.com\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: f8UoizZKYUvWHEtthYpPqQ==\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: Upgrade\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 101 Switching Protocols\r\nServer: openresty/1.25.3.2\r\nDate: Wed, 19 Aug 2026 22:31:33 GMT\r\nConnection: upgrade\r\ncache-control: max-age=0, private, must-revalidate\r\nsec-websocket-accept: UN/FLQRmwAP+ZW3yXVE+lRw8Y70=\r\nupgrade: websocket\r\n\r\n","headers":null,"cookies":null,"status_code":"101","status_text":"Switching Protocols","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"WebSocket","description":"WebSocket is a communication protocol that provides full-duplex communication channels over a single, long-lived connection, enabling interactive communication between web browsers and servers.","website":"https://en.wikipedia.org/wiki/WebSocket","common_platform_enumeration":"","icon":"WebSocket.svg","categories":["Miscellaneous"]},{"name":"OpenResty:1.25.3.2","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":0,"size_decoded":246,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-20T01:30:40.329369Z","times_seen":17981838,"resource_available":true,"data":null}},"time_used":977,"timings":{"blocked":-1,"dns":0,"connect":243,"send":0,"wait":244,"receive":0,"ssl":489},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/lato/v25/S6uyw4BMUTPHjx4wXg.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://rs-shop-ph.com/thejoystoreblkxbash","date":"2026-08-19T22:31:32.199Z","timestamp":1787178692199,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Aug 2026 20:43:51 GMT","end":"Wed, 28 Oct 2026 20:43:50 GMT"},"fingerprint":{"sha1":"B9:F7:74:85:7B:1C:5F:E9:C2:86:5A:AA:63:0F:34:84:5F:79:D6:96","sha256":"BA:57:10:D4:7E:A5:7C:C6:22:90:71:24:65:31:49:39:40:E5:C8:EB:E4:74:F7:D9:0B:3E:17:36:DD:31:9D:EB"}}},"request":{"raw":"GET /s/lato/v25/S6uyw4BMUTPHjx4wXg.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://rs-shop-ph.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 23580\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 13 Aug 2026 02:02:02 GMT\r\nexpires: Fri, 13 Aug 2027 02:02:02 GMT\r\ncache-control: public, max-age=31536000\r\nage: 592170\r\nlast-modified: Mon, 15 Sep 2025 17:09:41 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":23580,"size_decoded":24393,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 23580, version 1.0","md5":"e1b3b5908c9cf23dfb2b9c52b9a023ab","sha1":"fcd4136085f2a03481d9958cc6793a5ed98e714c","sha256":"918b7dc3e2e2d015c16ce08b57bcb64d2253bafc1707658f361e72865498e537","sha512":"b2da7ef768385707afed62ca1f178efc6aa14519762e3f270129b3afee4d3782cb991e6fa66b3b08a2f81ff7caba0b4c34c726d952198b2ac4a784b36eb2a828","ssdeep":"384:dRkIAJ8pVwWTW5VVjdVn8+2yvAMdriCEOY0kfW9GkAPqpPHi2vUuUSzB8:dKIAJ8pVHTZ+riY9oCpPHiodUeK","tlshash":"91b2e1ce5d546e3a8028213785c17b488273572e9edf42c6dd83a6263a7092cfd3d96e","first_seen":"2023-04-05T13:28:45Z","last_seen":"2026-08-20T01:30:46.567281Z","times_seen":258681,"resource_available":false,"data":null}},"time_used":75,"timings":{"blocked":6,"dns":0,"connect":0,"send":0,"wait":48,"receive":21,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/lato/v25/S6uyw4BMUTPHjxAwXjeu.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://rs-shop-ph.com/thejoystoreblkxbash","date":"2026-08-19T22:31:32.201Z","timestamp":1787178692201,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Aug 2026 20:43:51 GMT","end":"Wed, 28 Oct 2026 20:43:50 GMT"},"fingerprint":{"sha1":"B9:F7:74:85:7B:1C:5F:E9:C2:86:5A:AA:63:0F:34:84:5F:79:D6:96","sha256":"BA:57:10:D4:7E:A5:7C:C6:22:90:71:24:65:31:49:39:40:E5:C8:EB:E4:74:F7:D9:0B:3E:17:36:DD:31:9D:EB"}}},"request":{"raw":"GET /s/lato/v25/S6uyw4BMUTPHjxAwXjeu.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://rs-shop-ph.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 5612\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 13 Aug 2026 07:41:17 GMT\r\nexpires: Fri, 13 Aug 2027 07:41:17 GMT\r\ncache-control: public, max-age=31536000\r\nage: 571815\r\nlast-modified: Mon, 15 Sep 2025 17:09:42 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":5612,"size_decoded":6424,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 5612, version 1.0","md5":"633f8feda2188d767d2396652da17377","sha1":"d35cc70037f82ab61d86f2c4d80685a474821d45","sha256":"8b9fc9737043f88c1a9a7195c27a239bd329cc33d928ffb67736c61ae7a1dbbd","sha512":"edadc35473adc7d3d2b6c0bc04789dc78c7f38c0eccac6f08625738d5c8cfa9203c1d9ef2ee6ce721fabc5a4eba41cd19f47e56dc85ff3bc1f7f0ede2ec5ba0b","ssdeep":"96:iD0G8mpQLE+J8uftoCUdUZ/OGjfSg7uov39XTr9a8dBmhPk7jJ5lpqaAjiv/8qBA:7xXLZ8uVoCUdUFOGjJ7Pv39Pw0MiZ5cB","tlshash":"23c1af36b54e1d4bf74201b8137b823e41c70c621637356dbb16aa9418dcf4161371e7","first_seen":"2025-09-17T03:45:02.002945Z","last_seen":"2026-08-19T22:32:23.564039Z","times_seen":5445,"resource_available":false,"data":null}},"time_used":54,"timings":{"blocked":6,"dns":0,"connect":0,"send":0,"wait":48,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"a.pancake.vn/collect_heatmap","fqdn":"a.pancake.vn","domain":"pancake.vn","tld":"vn"},"ip":{"addr":"113.20.119.13","port":443,"asn":45903,"as":"CMC Telecom Infrastructure Company","country":"Vietnam","country_code":"VN"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://rs-shop-ph.com/thejoystoreblkxbash","date":"2026-08-19T22:32:02.491Z","timestamp":1787178722491,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"a.pancake.vn","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 04 Jul 2026 01:16:23 GMT","end":"Fri, 02 Oct 2026 01:16:22 GMT"},"fingerprint":{"sha1":"5C:9A:A7:13:C6:1C:D2:5B:C7:8D:37:50:F5:9D:C1:14:29:0D:D2:7B","sha256":"FC:50:DC:40:9F:1A:E3:96:14:F0:00:AF:EA:59:CF:B3:82:5D:78:F7:D5:44:62:40:D9:42:9A:06:C7:E0:D1:B8"}}},"request":{"raw":"POST /collect_heatmap HTTP/1.1\r\nHost: a.pancake.vn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/x-www-form-urlencoded;charset=utf-8\r\nContent-Length: 585\r\nOrigin: https://rs-shop-ph.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rs-shop-ph.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":585,"data":"data=%7B%22screen_size%22%3A%221280x1024%22%2C%22track_id%22%3A%22hm-lp-78b27b7c-c0fb-4838-9434-1d4e4f860774%22%2C%22data%22%3A%7B%22click%22%3A%5B%5D%2C%22mousemove%22%3A%5B%5D%2C%22scroll%22%3A%5B%5D%7D%2C%22viewport%22%3A%221280x1024%22%2C%22unique_tab_id%22%3A%222251aa68-1479-4146-b977-d1875e0989d4%22%2C%22domain%22%3A%22rs-shop-ph.com%22%2C%22href%22%3A%22https%3A%2F%2Frs-shop-ph.com%2Fthejoystoreblkxbash%22%2C%22device%22%3A%22desktop%22%2C%22version_id%22%3A%224ffe531f-02f1-4e2d-9575-faa3c2aa92fe%22%2C%22width_section%22%3A%7B%22desktop%22%3A960%2C%22mobile%22%3A420%7D%7D"}},"response":{"raw":"HTTP/2 200 \r\nserver: openresty/1.25.3.2\r\ndate: Wed, 19 Aug 2026 22:32:02 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 16\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://rs-shop-ph.com\r\ncache-control: max-age=0, private, must-revalidate\r\ncross-origin-window-policy: deny\r\nvary: origin\r\nx-content-type-options: nosniff\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-request-id: GM1VlE8Qv37XMTO_Anqh\r\nx-xss-protection: 1; mode=block\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"OpenResty:1.25.3.2","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":16,"size_decoded":576,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"7363e85fe9edee6f053a4b319588c086","sha1":"a15e2127145548437173fc17f3e980e3f3dee2d0","sha256":"c955e57777ec0d73639dca6748560d00aa5eb8e12f13ebb2ed9656add3908f97","sha512":"a2fd24056e3ec2f1628f89eb2f1b36a9fc2437ae58d34190630fe065df2bbedaf9bd8aee5f8949a002070052ca68cc6c0167214dd55df289783cff682b808d85","ssdeep":"","tlshash":"f0600003000000a2c000220002382e202080002280000008800c20088a20000208300a","first_seen":"2023-04-05T04:17:27Z","last_seen":"2026-08-20T00:56:50.308514Z","times_seen":183972,"resource_available":false,"data":null}},"time_used":236,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":236,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/mavenpro/v40/7Au9p_AqnyWWAxW2Wk3GzWQI.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://rs-shop-ph.com/thejoystoreblkxbash","date":"2026-08-19T22:31:32.182Z","timestamp":1787178692182,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Aug 2026 20:43:51 GMT","end":"Wed, 28 Oct 2026 20:43:50 GMT"},"fingerprint":{"sha1":"B9:F7:74:85:7B:1C:5F:E9:C2:86:5A:AA:63:0F:34:84:5F:79:D6:96","sha256":"BA:57:10:D4:7E:A5:7C:C6:22:90:71:24:65:31:49:39:40:E5:C8:EB:E4:74:F7:D9:0B:3E:17:36:DD:31:9D:EB"}}},"request":{"raw":"GET /s/mavenpro/v40/7Au9p_AqnyWWAxW2Wk3GzWQI.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://rs-shop-ph.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 20140\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 19 Aug 2026 13:13:11 GMT\r\nexpires: Thu, 19 Aug 2027 13:13:11 GMT\r\ncache-control: public, max-age=31536000\r\nage: 33501\r\nlast-modified: Fri, 29 Aug 2025 03:25:37 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":20140,"size_decoded":20952,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 20140, version 1.0","md5":"983bb0feb829de031ab574857c119dc2","sha1":"2ebc112e1e080219eed917c71b49de3cf4877f22","sha256":"968b1a6ec61d2e6d238adbbb8ecca304cda2e251bbef7f9085df187c993195a3","sha512":"f3b457a3fea5819d9527f285c10046df5757a60845e8194c1a92042ad71ef48bb3e6253e551a4bc01a1bce72dd8013e199fd36d2854f823ff309abacd0aa1772","ssdeep":"384:FXRx3n9UoDtMpUMUk3t8dH3qrQEiCI8bgDZMJHW85SV6O0LRV1wXMUSj0OpUdWn:hR19Ryv3t8dX+Q2eDZ2f9O0LRKMUSjjL","tlshash":"c292cfe71bd17d1de88ebe3139701ac10baed4b347e6459290ac8ab6161d2cd544f3ce","first_seen":"2025-03-05T04:36:04.179611Z","last_seen":"2026-08-19T22:32:23.566956Z","times_seen":2388,"resource_available":false,"data":null}},"time_used":103,"timings":{"blocked":-1,"dns":0,"connect":31,"send":0,"wait":42,"receive":28,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3KUBGEe.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://rs-shop-ph.com/thejoystoreblkxbash","date":"2026-08-19T22:31:32.197Z","timestamp":1787178692197,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Aug 2026 20:43:51 GMT","end":"Wed, 28 Oct 2026 20:43:50 GMT"},"fingerprint":{"sha1":"B9:F7:74:85:7B:1C:5F:E9:C2:86:5A:AA:63:0F:34:84:5F:79:D6:96","sha256":"BA:57:10:D4:7E:A5:7C:C6:22:90:71:24:65:31:49:39:40:E5:C8:EB:E4:74:F7:D9:0B:3E:17:36:DD:31:9D:EB"}}},"request":{"raw":"GET /s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3KUBGEe.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://rs-shop-ph.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 29392\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sun, 16 Aug 2026 10:06:55 GMT\r\nexpires: Mon, 16 Aug 2027 10:06:55 GMT\r\ncache-control: public, max-age=31536000\r\nage: 303877\r\nlast-modified: Wed, 18 Feb 2026 19:51:43 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":29392,"size_decoded":30205,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 29392, version 1.0","md5":"a6323dda0842401b2923554d0ed8945f","sha1":"6a5e89b2f9b47f5a2fb11831479c02b4eebe3089","sha256":"cedb374b05a35034cf96db185db4eeb8f8ce49e1a56197673702ff11b5533d6e","sha512":"6fe8df13c6dbc738b1cfd40c14bda19dca6114b3a4f521ff46fa7ebe25f6ce11046b7d41c1a8528d2294afea5a1c985ff43db37a2de028c1fb61b7197210dac1","ssdeep":"384:Wz9Te6aaq6lpCaascbVjmWd8NifWrHJi9grlYlMl1EfUxFvskjZAFWiMhv4K6Nb2:u9jN2bVjmWQFqgskSWiVK6NbKd","tlshash":"65d2f15cb579c636a098e4b70df5e3bf9599cb39224b9b288341c0385aa3941e442b97","first_seen":"2026-02-19T22:46:38.271285Z","last_seen":"2026-08-20T01:19:08.748046Z","times_seen":14936,"resource_available":false,"data":null}},"time_used":77,"timings":{"blocked":7,"dns":0,"connect":0,"send":0,"wait":53,"receive":17,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"content.pancake.vn/web-media-263/b8/3d/9c/00/70a8eaed5e0306033a6c16289a5a0b8cfe532c9438b6c8bfd01ae4c5-w:1080-h:1350-l:39291-t:image/webp.webp","fqdn":"content.pancake.vn","domain":"pancake.vn","tld":"vn"},"ip":{"addr":"203.171.27.184","port":443,"asn":45903,"as":"CMC Telecom Infrastructure Company","country":"Vietnam","country_code":"VN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rs-shop-ph.com/thejoystoreblkxbash","date":"2026-08-19T22:31:32.246Z","timestamp":1787178692246,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.pancake.vn","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 10 Jul 2026 00:00:00 GMT","end":"Sun, 24 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"5A:44:4F:CC:D2:24:0B:45:5F:98:33:58:C2:FB:7C:EE:CE:28:65:3C","sha256":"73:95:94:73:D8:1E:58:5C:83:CA:31:9F:16:6C:8D:18:E8:97:2C:1C:31:57:58:88:0D:62:86:AF:F7:39:11:8F"}}},"request":{"raw":"GET /web-media-263/b8/3d/9c/00/70a8eaed5e0306033a6c16289a5a0b8cfe532c9438b6c8bfd01ae4c5-w:1080-h:1350-l:39291-t:image/webp.webp HTTP/1.1\r\nHost: content.pancake.vn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rs-shop-ph.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.22.1\r\ndate: Wed, 19 Aug 2026 22:31:32 GMT\r\ncontent-type: image/webp\r\ncontent-length: 38656\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: \r\ncache-control: public, max-age=2505600\r\ncontent-security-policy: default-src 'none'; script-src 'none'; media-src *\r\netag: webp.webp\r\nx-content-type-options: nosniff\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":38656,"size_decoded":39093,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"ca7fed9c354f55bef491e46672dd5f0b","sha1":"6858aa6bb5f503ec8d32d8f395a6463a3ef6f98d","sha256":"b83d9c0070a8eaed5e0306033a6c16289a5a0b8cfe532c9438b6c8bfd01ae4c5","sha512":"27ed12b21542582618b7af6302fe4def74f9076b3e0a98f16f6022117a44043e625bb80228670089a9d3426d489c02cd2a830d3bfd450a0cd6d214124dccb3dd","ssdeep":"768:scd+sfti+TlBY7byP0U25s4GV2tsBanMVljrro:JdLe7bW25sph","tlshash":"3903d088bdba036dfd5d2a3c2305e3e5c922259767ae8d0bad80009933b2d26f15f457","first_seen":"2026-08-19T01:01:57.47542Z","last_seen":"2026-08-19T22:32:23.568511Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1684,"timings":{"blocked":220,"dns":0,"connect":0,"send":0,"wait":975,"receive":489,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"content.pancake.vn/web-media-263/s962x962/fwebp80/80/54/c5/37/efd1321b413aafe64d66d0c9e548e2fc749b5f85feade4ec0aedba37-w:1500-h:1500-l:178678-t:image/webp.webp","fqdn":"content.pancake.vn","domain":"pancake.vn","tld":"vn"},"ip":{"addr":"203.171.27.184","port":443,"asn":45903,"as":"CMC Telecom Infrastructure Company","country":"Vietnam","country_code":"VN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rs-shop-ph.com/thejoystoreblkxbash","date":"2026-08-19T22:31:54.259Z","timestamp":1787178714259,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.pancake.vn","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 10 Jul 2026 00:00:00 GMT","end":"Sun, 24 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"5A:44:4F:CC:D2:24:0B:45:5F:98:33:58:C2:FB:7C:EE:CE:28:65:3C","sha256":"73:95:94:73:D8:1E:58:5C:83:CA:31:9F:16:6C:8D:18:E8:97:2C:1C:31:57:58:88:0D:62:86:AF:F7:39:11:8F"}}},"request":{"raw":"GET /web-media-263/s962x962/fwebp80/80/54/c5/37/efd1321b413aafe64d66d0c9e548e2fc749b5f85feade4ec0aedba37-w:1500-h:1500-l:178678-t:image/webp.webp HTTP/1.1\r\nHost: content.pancake.vn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rs-shop-ph.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.22.1\r\ndate: Wed, 19 Aug 2026 22:31:54 GMT\r\ncontent-type: image/webp\r\ncontent-length: 94146\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: \r\ncache-control: public, max-age=2505600\r\ncontent-security-policy: default-src 'none'; script-src 'none'; media-src *\r\netag: webp.webp\r\nx-content-type-options: nosniff\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":94146,"size_decoded":94583,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"af59171ff338599e71b20539546ad052","sha1":"d1c705559725ff4e7e9fcc5dc658851d3286d0fa","sha256":"646f875f8bb8b3840db50835ddc998bc926558bbc27eeb51dd8e62c5a440bfd4","sha512":"c186c6de21fce2101291be62b952bfccb20105befc3456f697680e47e84d4f0f210929670b4b75afe500ec6706edb62c1cc5b23dfcd3a37a9311022bf50364e2","ssdeep":"1536:0B77R5uoIxRbhIlDL95A3p1brHtz6NqJYscvGAh2Q1mqznFC3FDDi0tKpIzMRSA7:4PR5mxRb8rA3p1brENFscp2Q1mqznaxS","tlshash":"8d931266df06d15ee9e340fe270bcec5ea7fcd990b97b4a241581718ca889d5e4c80bc","first_seen":"2026-08-19T01:01:57.423744Z","last_seen":"2026-08-19T22:32:23.570694Z","times_seen":2,"resource_available":false,"data":null}},"time_used":737,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":493,"receive":244,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rs-shop-ph.com/thejoystoreblkxbash","fqdn":"rs-shop-ph.com","domain":"rs-shop-ph.com","tld":"com"},"ip":{"addr":"203.171.27.189","port":443,"asn":45903,"as":"CMC Telecom Infrastructure Company","country":"Vietnam","country_code":"VN"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-08-19T22:31:29.353Z","timestamp":1787178689353,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rs-shop-ph.com","organization":""},"issuer":{"commonName":"ZeroSSL ECC DV SSL CA 2","organization":"ZeroSSL GmbH"},"validity":{"start":"Mon, 13 Jul 2026 00:00:00 GMT","end":"Sun, 11 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"94:AD:C6:A8:92:B5:65:CB:7E:C8:46:96:D0:B2:34:AC:82:A4:3A:56","sha256":"D7:84:7A:F5:79:31:63:69:0E:42:57:BA:A8:86:A6:20:15:46:B9:B1:6F:2F:C3:38:54:8F:0F:4A:5A:CD:1E:9C"}}},"request":{"raw":"GET /thejoystoreblkxbash HTTP/1.1\r\nHost: rs-shop-ph.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: openresty/1.27.1.1\r\ndate: Wed, 19 Aug 2026 22:31:30 GMT\r\ncontent-type: text/html; charset=utf-8\r\ncontent-length: 53470\r\ncontent-security-policy: \r\nserver-timing: Published;dur=4.673,Controller;dur=3.829\r\ncache-control: max-age=0, private, must-revalidate\r\ncontent-encoding: gzip\r\nvary: accept-encoding\r\nx-request-id: GM1VjMN31FbrH-UEgy8B\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"FingerprintJS","description":"FingerprintJS is a browser fingerprinting library that queries browser attributes and computes a hashed visitor identifier from them.","website":"https://fingerprintjs.com","common_platform_enumeration":"","icon":"FingerprintJS.svg","categories":["JavaScript libraries","Browser fingerprinting"]},{"name":"OpenResty:1.27.1.1","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":279968,"size_decoded":53884,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (53087)","md5":"f499c38e7b923c97e7a4c36a66caa3ed","sha1":"9ce3180ec189906ad73295643ded51014298c44f","sha256":"c97c882813b75869ccead31aa681e3499656f17c4cc583c28c28ff1e51f8132b","sha512":"c2c3445a805db5654fb3cb48cb989bab84c62732da8bd6daf66f6f10486d81057c014839880eeb952d790010d6af8b38bd954a69acf80e499906fd5ad5302fc5","ssdeep":"3072:sFD6kBhQPils/CrFYUup6e2/CrFYUup6ecA5ge/rwAzeezzqnyecQ:sFD6kBhQqGu0A5ge/rwAzeezzqR","tlshash":"27540a30a28810a6b13bc6f37549bb4f6696c00bdb070658f69c69b4cfcda853572f9d","first_seen":"2026-08-19T22:32:23.572305Z","last_seen":"2026-08-19T22:32:23.572305Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1448,"timings":{"blocked":-1,"dns":41,"connect":231,"send":0,"wait":254,"receive":463,"ssl":459},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"rs-shop-ph.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-19","alert":"Phishing Block","trigger":"rs-shop-ph.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"rs-shop-ph.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"content.pancake.vn/1/31/23/51/e5/41806a12b05813bfc36f3ad3d1a580aa060a9d8f1736cc38e197a61f.svg","fqdn":"content.pancake.vn","domain":"pancake.vn","tld":"vn"},"ip":{"addr":"203.171.27.184","port":443,"asn":45903,"as":"CMC Telecom Infrastructure Company","country":"Vietnam","country_code":"VN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rs-shop-ph.com/thejoystoreblkxbash","date":"2026-08-19T22:31:30.793Z","timestamp":1787178690793,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.pancake.vn","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 10 Jul 2026 00:00:00 GMT","end":"Sun, 24 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"5A:44:4F:CC:D2:24:0B:45:5F:98:33:58:C2:FB:7C:EE:CE:28:65:3C","sha256":"73:95:94:73:D8:1E:58:5C:83:CA:31:9F:16:6C:8D:18:E8:97:2C:1C:31:57:58:88:0D:62:86:AF:F7:39:11:8F"}}},"request":{"raw":"GET /1/31/23/51/e5/41806a12b05813bfc36f3ad3d1a580aa060a9d8f1736cc38e197a61f.svg HTTP/1.1\r\nHost: content.pancake.vn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rs-shop-ph.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.22.1\r\ndate: Wed, 19 Aug 2026 22:31:32 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 544\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: \r\ncache-control: public, max-age=2505600\r\ncontent-security-policy: default-src 'none'; script-src 'none'; media-src *\r\netag: 41806a12b05813bfc36f3ad3d1a580aa060a9d8f1736cc38e197a61f.svg\r\nx-content-type-options: nosniff\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":544,"size_decoded":1033,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"a440adac58541ca3f261cc6a5008a016","sha1":"410e3c3ddc99e909f09bd7b0f49ce795ac749746","sha256":"312351e541806a12b05813bfc36f3ad3d1a580aa060a9d8f1736cc38e197a61f","sha512":"a2bba015a90fd41be065929f2ce8eb35633559e5624d9fc401920e26c7c473723187b9200ae63d1bb8262c41514ec824e7334541172ffaee508fda28b6d03a7e","ssdeep":"","tlshash":"edf0264db248d594e05943047a7c1d90a90162c6c5c30cacc6406c75e1d4cef3e002dd","first_seen":"2023-05-14T04:41:43Z","last_seen":"2026-08-19T22:32:23.573911Z","times_seen":101,"resource_available":false,"data":null}},"time_used":3180,"timings":{"blocked":974,"dns":0,"connect":247,"send":0,"wait":973,"receive":489,"ssl":497},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"content.pancake.vn/web-media/99/d2/ce/a4/0325b310d635ee1147f696bb8e422349350444eed8b35628fb3bd0d2-w:16-h:16-l:2158-t:image/svg+xml.svg","fqdn":"content.pancake.vn","domain":"pancake.vn","tld":"vn"},"ip":{"addr":"203.171.27.184","port":443,"asn":45903,"as":"CMC Telecom Infrastructure Company","country":"Vietnam","country_code":"VN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rs-shop-ph.com/thejoystoreblkxbash","date":"2026-08-19T22:31:32.235Z","timestamp":1787178692235,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.pancake.vn","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 10 Jul 2026 00:00:00 GMT","end":"Sun, 24 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"5A:44:4F:CC:D2:24:0B:45:5F:98:33:58:C2:FB:7C:EE:CE:28:65:3C","sha256":"73:95:94:73:D8:1E:58:5C:83:CA:31:9F:16:6C:8D:18:E8:97:2C:1C:31:57:58:88:0D:62:86:AF:F7:39:11:8F"}}},"request":{"raw":"GET /web-media/99/d2/ce/a4/0325b310d635ee1147f696bb8e422349350444eed8b35628fb3bd0d2-w:16-h:16-l:2158-t:image/svg+xml.svg HTTP/1.1\r\nHost: content.pancake.vn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rs-shop-ph.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.22.1\r\ndate: Wed, 19 Aug 2026 22:31:32 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 1547\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: \r\ncache-control: public, max-age=2505600\r\ncontent-security-policy: default-src 'none'; script-src 'none'; media-src *\r\netag: svg+xml.svg\r\nx-content-type-options: nosniff\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1547,"size_decoded":1988,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"2ddce623d80d185c9d0f99a0ffce6f11","sha1":"d44468b597ce71c63a20c1cc3c543507c8efa1c2","sha256":"99d2cea40325b310d635ee1147f696bb8e422349350444eed8b35628fb3bd0d2","sha512":"85b1297d8ab0e150de4e890172336b7810144305252c8173ebbcb2f823c78585a1c5be4d8a20a8bc4f67d436c60ac678ba4568387986a692a8ae0fb6a90299bd","ssdeep":"","tlshash":"22310e78935d42ed3147db488f23e270631e96baf276c5a468cedbf18053879e993120","first_seen":"2026-08-19T01:01:57.437644Z","last_seen":"2026-08-19T22:32:23.574944Z","times_seen":2,"resource_available":false,"data":null}},"time_used":989,"timings":{"blocked":257,"dns":0,"connect":0,"send":0,"wait":488,"receive":244,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rs-shop-ph.com/render_v4/product.js?v=1787178690210flry2owrrv","fqdn":"rs-shop-ph.com","domain":"rs-shop-ph.com","tld":"com"},"ip":{"addr":"203.171.27.189","port":443,"asn":45903,"as":"CMC Telecom Infrastructure Company","country":"Vietnam","country_code":"VN"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rs-shop-ph.com/thejoystoreblkxbash","date":"2026-08-19T22:31:30.810Z","timestamp":1787178690810,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rs-shop-ph.com","organization":""},"issuer":{"commonName":"ZeroSSL ECC DV SSL CA 2","organization":"ZeroSSL GmbH"},"validity":{"start":"Mon, 13 Jul 2026 00:00:00 GMT","end":"Sun, 11 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"94:AD:C6:A8:92:B5:65:CB:7E:C8:46:96:D0:B2:34:AC:82:A4:3A:56","sha256":"D7:84:7A:F5:79:31:63:69:0E:42:57:BA:A8:86:A6:20:15:46:B9:B1:6F:2F:C3:38:54:8F:0F:4A:5A:CD:1E:9C"}}},"request":{"raw":"GET /render_v4/product.js?v=1787178690210flry2owrrv HTTP/1.1\r\nHost: rs-shop-ph.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rs-shop-ph.com/thejoystoreblkxbash\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: openresty/1.27.1.1\r\ndate: Wed, 19 Aug 2026 22:31:30 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 93421\r\nservice-worker-allowed: /\r\naccept-ranges: bytes\r\ncache-control: public, max-age=31536000\r\ncontent-encoding: gzip\r\netag: \"710DB33\"\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty:1.27.1.1","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":319665,"size_decoded":93768,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65351)","md5":"a3f0c942ce091154cfec6373e017956e","sha1":"2c4e000c3f0b6dba6aa11d76fdc19585f6aa5e00","sha256":"7dd21ea3654795ceaf1b0f296fb834b9edddd5727f0e05b2e659e616bb8b6865","sha512":"e4259b4fe901b460533594991ec6d2b0287d3b368168d3b76f2ed79770d2cc95615c94c9db3db5d583e15b9009a32e13ed7ae463a93e895a8f412f2a35caec4a","ssdeep":"3072:3fg5A7Oo3zSE8AaPiNAp+E6iYdCRqjgkz1+8PKyMPTWmkgNlh5sa8rJbyct9g7w:34WnOE8Aah87+8PKyMPqmkO/5s15r","tlshash":"b6644ce8b296f072416f7161412f5321b23ab5253465c474b92addd73a28cceb323bf9","first_seen":"2026-08-19T01:01:57.468978Z","last_seen":"2026-08-19T22:32:23.576186Z","times_seen":2,"resource_available":true,"data":null}},"time_used":466,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":234,"receive":232,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"rs-shop-ph.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-19","alert":"Phishing Block","trigger":"rs-shop-ph.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"rs-shop-ph.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"content.pancake.vn/web-media-263/s842x1053/fwebp80/59/fa/ac/9d/4188f749412ed34e0146ff67a53ac87e17e6d19de095ea01a3a9d4ec-w:1080-h:1350-l:154949-t:image/webp.webp","fqdn":"content.pancake.vn","domain":"pancake.vn","tld":"vn"},"ip":{"addr":"203.171.27.184","port":443,"asn":45903,"as":"CMC Telecom Infrastructure Company","country":"Vietnam","country_code":"VN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rs-shop-ph.com/thejoystoreblkxbash","date":"2026-08-19T22:31:32.242Z","timestamp":1787178692242,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.pancake.vn","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 10 Jul 2026 00:00:00 GMT","end":"Sun, 24 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"5A:44:4F:CC:D2:24:0B:45:5F:98:33:58:C2:FB:7C:EE:CE:28:65:3C","sha256":"73:95:94:73:D8:1E:58:5C:83:CA:31:9F:16:6C:8D:18:E8:97:2C:1C:31:57:58:88:0D:62:86:AF:F7:39:11:8F"}}},"request":{"raw":"GET /web-media-263/s842x1053/fwebp80/59/fa/ac/9d/4188f749412ed34e0146ff67a53ac87e17e6d19de095ea01a3a9d4ec-w:1080-h:1350-l:154949-t:image/webp.webp HTTP/1.1\r\nHost: content.pancake.vn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rs-shop-ph.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.22.1\r\ndate: Wed, 19 Aug 2026 22:31:32 GMT\r\ncontent-type: image/webp\r\ncontent-length: 73528\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: \r\ncache-control: public, max-age=2505600\r\ncontent-security-policy: default-src 'none'; script-src 'none'; media-src *\r\netag: webp.webp\r\nx-content-type-options: nosniff\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":73528,"size_decoded":73965,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"a8ffa54ef7a0c2107f8b0271124fccef","sha1":"eaaae6c239b6f9f67d388ca9e9b1ec1415330bb7","sha256":"c80ab8ecdd5553d960e94bfa53dc8810b44b647edb3d78cc7dc86870c3b14e00","sha512":"af66c32b2657a227c6e2169d28f354d15807e124f1f7f49bbdbfea4cc6ca2970573e9f145f27420b0f1f47ef3fc771eea70c5a961ead24a2818033e5f01e4c09","ssdeep":"1536:jaMxFtRVacLfpAqOVUdGKInyGyapgZ0YJjQVre6YVAaP+oELBm3UR52fgk:dFtRVhK3U0KVGHXyjQVrhYKazESq2j","tlshash":"95730245fa560972c89735f22e7dc12d4bdeca2cc5c87217f437a43a7d582a841c76a3","first_seen":"2026-08-19T01:01:57.420074Z","last_seen":"2026-08-19T22:32:23.577602Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1454,"timings":{"blocked":233,"dns":0,"connect":0,"send":0,"wait":976,"receive":245,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"a.pancake.vn/collect?dl=https%3A%2F%2Frs-shop-ph.com%2Fthejoystoreblkxbash\u0026hn=rs-shop-ph.com\u0026sc=https%3A\u0026sr=1280x1024\u0026vp=1280x1024\u0026dt=BUY%201%20TAKE%201%20PROMO!%20FREE%20SHIPPING%20NATIONWIDE!\u0026tid=ab-lp-78b27b7c-c0fb-4838-9434-1d4e4f860774\u0026ts=1787178692485\u0026_v=2.0\u0026fr=\u0026_aba=CPA2.1787178692485.2.6ae754d9-842e-4f93-ab5f-95f4955012de\u0026_abd=CPD2.1787178692485.2.01e5f655-e719-4536-9b00-680a345a047c\u0026_abt=CPT2.1787178692485.2.5a95b936-d4ad-4b20-bfff-21f236ea67cd\u0026campaign_id=null\u0026campaign_variant_id=null","fqdn":"a.pancake.vn","domain":"pancake.vn","tld":"vn"},"ip":{"addr":"113.20.119.13","port":443,"asn":45903,"as":"CMC Telecom Infrastructure Company","country":"Vietnam","country_code":"VN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rs-shop-ph.com/thejoystoreblkxbash","date":"2026-08-19T22:31:32.487Z","timestamp":1787178692487,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"a.pancake.vn","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 04 Jul 2026 01:16:23 GMT","end":"Fri, 02 Oct 2026 01:16:22 GMT"},"fingerprint":{"sha1":"5C:9A:A7:13:C6:1C:D2:5B:C7:8D:37:50:F5:9D:C1:14:29:0D:D2:7B","sha256":"FC:50:DC:40:9F:1A:E3:96:14:F0:00:AF:EA:59:CF:B3:82:5D:78:F7:D5:44:62:40:D9:42:9A:06:C7:E0:D1:B8"}}},"request":{"raw":"GET /collect?dl=https%3A%2F%2Frs-shop-ph.com%2Fthejoystoreblkxbash\u0026hn=rs-shop-ph.com\u0026sc=https%3A\u0026sr=1280x1024\u0026vp=1280x1024\u0026dt=BUY%201%20TAKE%201%20PROMO!%20FREE%20SHIPPING%20NATIONWIDE!\u0026tid=ab-lp-78b27b7c-c0fb-4838-9434-1d4e4f860774\u0026ts=1787178692485\u0026_v=2.0\u0026fr=\u0026_aba=CPA2.1787178692485.2.6ae754d9-842e-4f93-ab5f-95f4955012de\u0026_abd=CPD2.1787178692485.2.01e5f655-e719-4536-9b00-680a345a047c\u0026_abt=CPT2.1787178692485.2.5a95b936-d4ad-4b20-bfff-21f236ea67cd\u0026campaign_id=null\u0026campaign_variant_id=null HTTP/1.1\r\nHost: a.pancake.vn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rs-shop-ph.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: openresty/1.25.3.2\r\ndate: Wed, 19 Aug 2026 22:31:32 GMT\r\ncontent-type: image/gif\r\ncontent-length: 35\r\ncache-control: max-age=0, private, must-revalidate\r\ncross-origin-window-policy: deny\r\nx-content-type-options: nosniff\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-request-id: GM1VjIKpxpp5Uym9GOGD\r\nx-xss-protection: 1; mode=block\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"OpenResty:1.25.3.2","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":35,"size_decoded":466,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"c2196de8ba412c60c22ab491af7b1409","sha1":"5fbd472222feb8a22cf5b8aa5dc5b8e13af88e2b","sha256":"6adc3d4c1056996e4e8b765a62604c78b1f867cceb3b15d0b9bedb7c4857f992","sha512":"84e24a70b78e9de9c9d0dfeb49f3f4247dbc1c715d8844471ee40669270682e199d48f5fbec62bd984c9c0270534b407c4d2561dd6c05adec3c83c1534f32d5c","ssdeep":"","tlshash":"d4800003e280c002c2a2c0300e0ccb802b88b0208a28030fb0ec2baeec3a2a00c02000","first_seen":"2023-04-05T07:36:27Z","last_seen":"2026-08-20T00:47:16.003823Z","times_seen":187422,"resource_available":true,"data":null}},"time_used":241,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":241,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"content.pancake.vn/web-media-263/s962x962/fwebp80/80/ef/f8/f3/145d69df5c31dafede0f05dcfe8e5f15beacdec4af43f4430b16d881-w:1500-h:1500-l:99644-t:image/webp.webp","fqdn":"content.pancake.vn","domain":"pancake.vn","tld":"vn"},"ip":{"addr":"203.171.27.184","port":443,"asn":45903,"as":"CMC Telecom Infrastructure Company","country":"Vietnam","country_code":"VN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rs-shop-ph.com/thejoystoreblkxbash","date":"2026-08-19T22:31:42.240Z","timestamp":1787178702240,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.pancake.vn","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 10 Jul 2026 00:00:00 GMT","end":"Sun, 24 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"5A:44:4F:CC:D2:24:0B:45:5F:98:33:58:C2:FB:7C:EE:CE:28:65:3C","sha256":"73:95:94:73:D8:1E:58:5C:83:CA:31:9F:16:6C:8D:18:E8:97:2C:1C:31:57:58:88:0D:62:86:AF:F7:39:11:8F"}}},"request":{"raw":"GET /web-media-263/s962x962/fwebp80/80/ef/f8/f3/145d69df5c31dafede0f05dcfe8e5f15beacdec4af43f4430b16d881-w:1500-h:1500-l:99644-t:image/webp.webp HTTP/1.1\r\nHost: content.pancake.vn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rs-shop-ph.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.22.1\r\ndate: Wed, 19 Aug 2026 22:31:42 GMT\r\ncontent-type: image/webp\r\ncontent-length: 47360\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: \r\ncache-control: public, max-age=2505600\r\ncontent-security-policy: default-src 'none'; script-src 'none'; media-src *\r\netag: webp.webp\r\nx-content-type-options: nosniff\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":47360,"size_decoded":47797,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"677f3d16dd0b5f7c379b8a85ada6613e","sha1":"6b526b77d28528aae39ac15fe64a5ecaf8a1c09e","sha256":"40c305a9a48c9bfb16c7109fe33c347bd2c872cc6a27a530f280fd510cec3537","sha512":"32e75faded659dbf1f456d426be9143ef0627aed134f9d4c43da85de3a44a80be7cebcced6d281fdc0a0da10fefec5acfe9e24cdeb50587d5ef1b899c529b823","ssdeep":"768:bQv+1h8x49UQr9dpnYROGxKtgFaB7Q+k7r2obdFjMVyFjs1RLot1YQpWI5:gx49UYpnYRKgcXoQchsH+pWY","tlshash":"3b2302f1b13d1e7cec7ed8b966cb25c9a086f66f5d617c3ba40bcd04806542a235cca0","first_seen":"2026-08-19T01:01:57.489764Z","last_seen":"2026-08-19T22:32:23.584586Z","times_seen":2,"resource_available":false,"data":null}},"time_used":736,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":492,"receive":244,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Roboto:100,300,400,700,900|Arial:100,300,400,700,900|Maven%20Pro:100,300,400,700,900|SVN-Gilroy%20XBold.otf:100,300,400,700,900|Muli:100,300,400,700,900|Lato:100,300,400,700,900|Oswald:100,300,400,700,900|ttf:100,300,400,700,900|Jost:100,300,400,700,900\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rs-shop-ph.com/thejoystoreblkxbash","date":"2026-08-19T22:31:30.791Z","timestamp":1787178690791,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Aug 2026 20:43:53 GMT","end":"Wed, 28 Oct 2026 20:43:52 GMT"},"fingerprint":{"sha1":"91:24:44:08:3E:65:60:72:3B:18:06:E2:82:7E:C0:8F:97:46:5D:B2","sha256":"71:59:B7:BB:3B:E8:E0:81:C8:B6:24:A3:57:11:62:47:10:A1:3D:E4:38:30:54:27:2E:19:C8:96:02:25:52:DD"}}},"request":{"raw":"GET /css?family=Roboto:100,300,400,700,900|Arial:100,300,400,700,900|Maven%20Pro:100,300,400,700,900|SVN-Gilroy%20XBold.otf:100,300,400,700,900|Muli:100,300,400,700,900|Lato:100,300,400,700,900|Oswald:100,300,400,700,900|ttf:100,300,400,700,900|Jost:100,300,400,700,900\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rs-shop-ph.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=0\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Wed, 19 Aug 2026 22:31:30 GMT\r\ndate: Wed, 19 Aug 2026 22:31:30 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":51555,"size_decoded":3147,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (1572)","md5":"5c464ca802f9fee344bd16f71dc290d6","sha1":"42596284f6781879d7cc6c84dfd98f760ab2e110","sha256":"bd10c028c39d45bfc5e606cacf8a182f4c6e22f2333e7ea68c33e003aebb7792","sha512":"b75a1b5dc56c1c731cef78301cd08e8b18caa553ca9d8485691cd5651d63bc6ea7d502c9d6afe841d7fe570b30b990599b77ce3727639c59570e451609c87de0","ssdeep":"768:k2mxHroD4fMmxywDZDCDHDHDY4DRLDuDWDyDS99YURRuWDyjooYhREHPWP2ZZYQa:+xyjff","tlshash":"36331c91042b9400eb834cd223cebf36fe0f62517441c179abfd1a9aacdbc66536975d","first_seen":"2026-08-19T01:01:57.433784Z","last_seen":"2026-08-19T22:32:23.586033Z","times_seen":2,"resource_available":false,"data":null}},"time_used":82,"timings":{"blocked":-1,"dns":0,"connect":15,"send":0,"wait":36,"receive":0,"ssl":31},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"content.pancake.vn/web-media-263/2d/c3/8a/32/c51d901f8fa61a319985c051fbe18ddee39c2b84bb5401e8c5913654-w:1080-h:1350-l:43504-t:image/webp.webp","fqdn":"content.pancake.vn","domain":"pancake.vn","tld":"vn"},"ip":{"addr":"203.171.27.184","port":443,"asn":45903,"as":"CMC Telecom Infrastructure Company","country":"Vietnam","country_code":"VN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rs-shop-ph.com/thejoystoreblkxbash","date":"2026-08-19T22:31:32.247Z","timestamp":1787178692247,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.pancake.vn","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 10 Jul 2026 00:00:00 GMT","end":"Sun, 24 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"5A:44:4F:CC:D2:24:0B:45:5F:98:33:58:C2:FB:7C:EE:CE:28:65:3C","sha256":"73:95:94:73:D8:1E:58:5C:83:CA:31:9F:16:6C:8D:18:E8:97:2C:1C:31:57:58:88:0D:62:86:AF:F7:39:11:8F"}}},"request":{"raw":"GET /web-media-263/2d/c3/8a/32/c51d901f8fa61a319985c051fbe18ddee39c2b84bb5401e8c5913654-w:1080-h:1350-l:43504-t:image/webp.webp HTTP/1.1\r\nHost: content.pancake.vn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rs-shop-ph.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.22.1\r\ndate: Wed, 19 Aug 2026 22:31:32 GMT\r\ncontent-type: image/webp\r\ncontent-length: 42868\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: \r\ncache-control: public, max-age=2505600\r\ncontent-security-policy: default-src 'none'; script-src 'none'; media-src *\r\netag: webp.webp\r\nx-content-type-options: nosniff\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":42868,"size_decoded":43305,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"96f792eb1b73b368445b8897d2f927c9","sha1":"62cf5f69ed1ae03e71bc1604f09b08a36d8e49d4","sha256":"2dc38a32c51d901f8fa61a319985c051fbe18ddee39c2b84bb5401e8c5913654","sha512":"7eabf1d954981a1f75c9ffb423273097d3965a2c6b83497c8bd4feb9ca553701229403be9f24ade27c73d04db2bfc51c4bc3ca17e1f3b53202c74adf2245f470","ssdeep":"768:/670X6J6S6QwuuboUGrnIXZAizEDdN22H0ONDoV81fnLwa7QFHnkw5a:i96I16oUMiPu22H0ONy8PLwa+n","tlshash":"4f13bfc92a904ed4f70235f254098e78bb94869277f6c98b79cf22309840bd7e217dde","first_seen":"2026-08-19T01:01:57.417229Z","last_seen":"2026-08-19T22:32:23.587376Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1679,"timings":{"blocked":216,"dns":0,"connect":0,"send":0,"wait":977,"receive":486,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"content.pancake.vn/1/d8/88/b5/1f/ce7bea1db3f2c535a89a2c99988aeba8d3a361b2c72c9d08950d10e7.svg","fqdn":"content.pancake.vn","domain":"pancake.vn","tld":"vn"},"ip":{"addr":"203.171.27.184","port":443,"asn":45903,"as":"CMC Telecom Infrastructure Company","country":"Vietnam","country_code":"VN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rs-shop-ph.com/thejoystoreblkxbash","date":"2026-08-19T22:31:30.789Z","timestamp":1787178690789,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.pancake.vn","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 10 Jul 2026 00:00:00 GMT","end":"Sun, 24 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"5A:44:4F:CC:D2:24:0B:45:5F:98:33:58:C2:FB:7C:EE:CE:28:65:3C","sha256":"73:95:94:73:D8:1E:58:5C:83:CA:31:9F:16:6C:8D:18:E8:97:2C:1C:31:57:58:88:0D:62:86:AF:F7:39:11:8F"}}},"request":{"raw":"GET /1/d8/88/b5/1f/ce7bea1db3f2c535a89a2c99988aeba8d3a361b2c72c9d08950d10e7.svg HTTP/1.1\r\nHost: content.pancake.vn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rs-shop-ph.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.22.1\r\ndate: Wed, 19 Aug 2026 22:31:32 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 545\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: \r\ncache-control: public, max-age=2505600\r\ncontent-security-policy: default-src 'none'; script-src 'none'; media-src *\r\netag: ce7bea1db3f2c535a89a2c99988aeba8d3a361b2c72c9d08950d10e7.svg\r\nx-content-type-options: nosniff\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":545,"size_decoded":1034,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"6f469e274013b69f63763294b1ca4298","sha1":"8041292052dda128ef9e5ede14a1e1bdfed98609","sha256":"d888b51fce7bea1db3f2c535a89a2c99988aeba8d3a361b2c72c9d08950d10e7","sha512":"5ef6fbf17445aec7cf90e2b815bcff1e1a09e99845a30a368b96c3d9a16bc144dddbba88dd288c6bf0ae77f54e6d8e51f60b17e8ff0bf60b91108cd783ff6259","ssdeep":"","tlshash":"5cf0268ca104e684d10dc34177781591d70520c696c70cdcc3807cb5d1d4cfe2d0939e","first_seen":"2023-05-14T04:41:43Z","last_seen":"2026-08-19T22:32:23.589093Z","times_seen":101,"resource_available":false,"data":null}},"time_used":2204,"timings":{"blocked":974,"dns":0,"connect":244,"send":0,"wait":491,"receive":0,"ssl":495},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMaxKUBGEe.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://rs-shop-ph.com/thejoystoreblkxbash","date":"2026-08-19T22:31:32.190Z","timestamp":1787178692190,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Aug 2026 20:43:51 GMT","end":"Wed, 28 Oct 2026 20:43:50 GMT"},"fingerprint":{"sha1":"B9:F7:74:85:7B:1C:5F:E9:C2:86:5A:AA:63:0F:34:84:5F:79:D6:96","sha256":"BA:57:10:D4:7E:A5:7C:C6:22:90:71:24:65:31:49:39:40:E5:C8:EB:E4:74:F7:D9:0B:3E:17:36:DD:31:9D:EB"}}},"request":{"raw":"GET /s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMaxKUBGEe.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://rs-shop-ph.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 20556\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 13 Aug 2026 02:37:18 GMT\r\nexpires: Fri, 13 Aug 2027 02:37:18 GMT\r\ncache-control: public, max-age=31536000\r\nage: 590054\r\nlast-modified: Wed, 18 Feb 2026 19:51:43 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":20556,"size_decoded":21369,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 20556, version 1.0","md5":"8feefe1e602c4b14ff414a77c3af2c2c","sha1":"e57daae78e76c8944e97edecfa656f8608e09db5","sha256":"2addf2d86d7a5778653b36d551e97a39da52855f82fac7461cfc1bd86d460aed","sha512":"893f9695ee887eed00246f24d4ec3e17ed64e2af4fab055f951795f50d34f3685aafcfbda943060a132c42169d2ef5c99d3db4fb901d57a09e712b4ff02afd92","ssdeep":"384:tpv6fcCujSd2+uNZ0omwRnNPqfWvx/CldKV8D2w9lQXL79Ci5q8S/USM2BHRpWp6:fxC0So4wRhx90K6ywQLIWS8S5By5AR","tlshash":"8792e056b288746a77e4e3ecc859ae6c65ed9b0f0c1b15b909322122f196c4734930f9","first_seen":"2026-02-19T22:35:21.90447Z","last_seen":"2026-08-20T01:24:16.655142Z","times_seen":33951,"resource_available":false,"data":null}},"time_used":42,"timings":{"blocked":9,"dns":0,"connect":0,"send":0,"wait":27,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"content.pancake.vn/web-media-263/s842x1053/fwebp80/2c/f8/60/7a/7ac3308a8b25700d44cd596e05ce887336b62f8035f67f7d1f5c24c5-w:1080-h:1350-l:161486-t:image/webp.webp","fqdn":"content.pancake.vn","domain":"pancake.vn","tld":"vn"},"ip":{"addr":"203.171.27.184","port":443,"asn":45903,"as":"CMC Telecom Infrastructure Company","country":"Vietnam","country_code":"VN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rs-shop-ph.com/thejoystoreblkxbash","date":"2026-08-19T22:31:32.243Z","timestamp":1787178692243,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.pancake.vn","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 10 Jul 2026 00:00:00 GMT","end":"Sun, 24 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"5A:44:4F:CC:D2:24:0B:45:5F:98:33:58:C2:FB:7C:EE:CE:28:65:3C","sha256":"73:95:94:73:D8:1E:58:5C:83:CA:31:9F:16:6C:8D:18:E8:97:2C:1C:31:57:58:88:0D:62:86:AF:F7:39:11:8F"}}},"request":{"raw":"GET /web-media-263/s842x1053/fwebp80/2c/f8/60/7a/7ac3308a8b25700d44cd596e05ce887336b62f8035f67f7d1f5c24c5-w:1080-h:1350-l:161486-t:image/webp.webp HTTP/1.1\r\nHost: content.pancake.vn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rs-shop-ph.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.22.1\r\ndate: Wed, 19 Aug 2026 22:31:32 GMT\r\ncontent-type: image/webp\r\ncontent-length: 82820\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: \r\ncache-control: public, max-age=2505600\r\ncontent-security-policy: default-src 'none'; script-src 'none'; media-src *\r\netag: webp.webp\r\nx-content-type-options: nosniff\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":82820,"size_decoded":83257,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"26666528fb77e8e89e8924ac157f26f6","sha1":"96a96a36680cf1ea97c8206b5f8c1df6fedd7b63","sha256":"0f62194e31d0f67dbea474761001648934b049fb973f16104df9d33b7f0ebaf9","sha512":"b548521d9052095969fcece32bfb02da318467f59694f34979e54ed3370141726ac188e985e10c88ff91d0cd3e61c68611cb52c31f1ef30969af8426ba5e07f7","ssdeep":"1536:dWWWWWWWWZS1+m5D8AbeFZHd9cidQEaCCgyoqwG9mvXqRiTpwCTrVWowM1qZ:aQmCZHcid5ajVd59eqgVZrFwpZ","tlshash":"ed8312980410450fe960f53cf737ec9259fc0658e8886165ee7f9b7029896ecba6e7d0","first_seen":"2026-08-19T01:01:57.428304Z","last_seen":"2026-08-19T22:32:23.591685Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1455,"timings":{"blocked":233,"dns":0,"connect":0,"send":0,"wait":976,"receive":246,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rs-shop-ph.com/products/78b27b7c-c0fb-4838-9434-1d4e4f860774?offset=0\u0026limit=50\u0026expect=1843042761\u0026except=\u0026type=expect\u0026select=category","fqdn":"rs-shop-ph.com","domain":"rs-shop-ph.com","tld":"com"},"ip":{"addr":"203.171.27.189","port":443,"asn":45903,"as":"CMC Telecom Infrastructure Company","country":"Vietnam","country_code":"VN"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://rs-shop-ph.com/thejoystoreblkxbash","date":"2026-08-19T22:31:32.464Z","timestamp":1787178692464,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rs-shop-ph.com","organization":""},"issuer":{"commonName":"ZeroSSL ECC DV SSL CA 2","organization":"ZeroSSL GmbH"},"validity":{"start":"Mon, 13 Jul 2026 00:00:00 GMT","end":"Sun, 11 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"94:AD:C6:A8:92:B5:65:CB:7E:C8:46:96:D0:B2:34:AC:82:A4:3A:56","sha256":"D7:84:7A:F5:79:31:63:69:0E:42:57:BA:A8:86:A6:20:15:46:B9:B1:6F:2F:C3:38:54:8F:0F:4A:5A:CD:1E:9C"}}},"request":{"raw":"GET /products/78b27b7c-c0fb-4838-9434-1d4e4f860774?offset=0\u0026limit=50\u0026expect=1843042761\u0026except=\u0026type=expect\u0026select=category HTTP/1.1\r\nHost: rs-shop-ph.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rs-shop-ph.com/thejoystoreblkxbash\r\nCookie: external_id=mqw1l171br1l2b1gcogew; _p_session_id=83c54cf3-6a8c-4c55-82d6-79f1f91bc9a8\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: openresty/1.27.1.1\r\ndate: Wed, 19 Aug 2026 22:31:32 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 2923\r\ncache-control: max-age=0, private, must-revalidate\r\ncontent-encoding: gzip\r\nvary: accept-encoding\r\nx-request-id: GM1VjVE2vZovmLTgkzsC\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty:1.27.1.1","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":8665,"size_decoded":3259,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"c2ef2695fb6c4e904e04419f65421802","sha1":"69ee49e818db23f3c8fe97819567b0fd0a8e7b81","sha256":"feaf6c44c7e6da2caf09cef6aa7a993c9a002eae21cc99d586f2b616d4632fd0","sha512":"34caf30de5b3813d7566d8b6e0ddcd65774353a61634112dc60ec79501d03894db49160606644d96ce9ff26917acce6d43c2bd8f7a88131b39d975a4c4210ed6","ssdeep":"192:aiEHsksMo+p3MPbYAUe3lFwYHRziRsipibOP5PiTcE/iW5/iwW5id:pU2Mo+p3MPbDUe3l6ERGpoiPgTcW5Kw9","tlshash":"a702c84ac56c3cf399d295035c8626afb06dd20e8fb40f8c5069c622ebd465a9e3795c","first_seen":"2026-08-19T22:32:23.592989Z","last_seen":"2026-08-19T22:32:23.592989Z","times_seen":1,"resource_available":false,"data":null}},"time_used":239,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":239,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"rs-shop-ph.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-19","alert":"Phishing Block","trigger":"rs-shop-ph.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"rs-shop-ph.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"a.pancake.vn/collect_heatmap","fqdn":"a.pancake.vn","domain":"pancake.vn","tld":"vn"},"ip":{"addr":"113.20.119.13","port":443,"asn":45903,"as":"CMC Telecom Infrastructure Company","country":"Vietnam","country_code":"VN"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://rs-shop-ph.com/thejoystoreblkxbash","date":"2026-08-19T22:31:47.489Z","timestamp":1787178707489,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"a.pancake.vn","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 04 Jul 2026 01:16:23 GMT","end":"Fri, 02 Oct 2026 01:16:22 GMT"},"fingerprint":{"sha1":"5C:9A:A7:13:C6:1C:D2:5B:C7:8D:37:50:F5:9D:C1:14:29:0D:D2:7B","sha256":"FC:50:DC:40:9F:1A:E3:96:14:F0:00:AF:EA:59:CF:B3:82:5D:78:F7:D5:44:62:40:D9:42:9A:06:C7:E0:D1:B8"}}},"request":{"raw":"POST /collect_heatmap HTTP/1.1\r\nHost: a.pancake.vn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/x-www-form-urlencoded;charset=utf-8\r\nContent-Length: 585\r\nOrigin: https://rs-shop-ph.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rs-shop-ph.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":585,"data":"data=%7B%22screen_size%22%3A%221280x1024%22%2C%22track_id%22%3A%22hm-lp-78b27b7c-c0fb-4838-9434-1d4e4f860774%22%2C%22data%22%3A%7B%22click%22%3A%5B%5D%2C%22mousemove%22%3A%5B%5D%2C%22scroll%22%3A%5B%5D%7D%2C%22viewport%22%3A%221280x1024%22%2C%22unique_tab_id%22%3A%222251aa68-1479-4146-b977-d1875e0989d4%22%2C%22domain%22%3A%22rs-shop-ph.com%22%2C%22href%22%3A%22https%3A%2F%2Frs-shop-ph.com%2Fthejoystoreblkxbash%22%2C%22device%22%3A%22desktop%22%2C%22version_id%22%3A%224ffe531f-02f1-4e2d-9575-faa3c2aa92fe%22%2C%22width_section%22%3A%7B%22desktop%22%3A960%2C%22mobile%22%3A420%7D%7D"}},"response":{"raw":"HTTP/2 200 \r\nserver: openresty/1.25.3.2\r\ndate: Wed, 19 Aug 2026 22:31:47 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 16\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://rs-shop-ph.com\r\ncache-control: max-age=0, private, must-revalidate\r\ncross-origin-window-policy: deny\r\nvary: origin\r\nx-content-type-options: nosniff\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-request-id: GM1VkADkU5Cus4W9bO_C\r\nx-xss-protection: 1; mode=block\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"OpenResty:1.25.3.2","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":16,"size_decoded":576,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"7363e85fe9edee6f053a4b319588c086","sha1":"a15e2127145548437173fc17f3e980e3f3dee2d0","sha256":"c955e57777ec0d73639dca6748560d00aa5eb8e12f13ebb2ed9656add3908f97","sha512":"a2fd24056e3ec2f1628f89eb2f1b36a9fc2437ae58d34190630fe065df2bbedaf9bd8aee5f8949a002070052ca68cc6c0167214dd55df289783cff682b808d85","ssdeep":"","tlshash":"f0600003000000a2c000220002382e202080002280000008800c20088a20000208300a","first_seen":"2023-04-05T04:17:27Z","last_seen":"2026-08-20T00:56:50.308514Z","times_seen":183972,"resource_available":false,"data":null}},"time_used":239,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":239,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"a.pancake.vn/js/heatmap.js?vsn=d\u0026version=8","fqdn":"a.pancake.vn","domain":"pancake.vn","tld":"vn"},"ip":{"addr":"113.20.119.13","port":443,"asn":45903,"as":"CMC Telecom Infrastructure Company","country":"Vietnam","country_code":"VN"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rs-shop-ph.com/thejoystoreblkxbash","date":"2026-08-19T22:31:32.012Z","timestamp":1787178692012,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"a.pancake.vn","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 04 Jul 2026 01:16:23 GMT","end":"Fri, 02 Oct 2026 01:16:22 GMT"},"fingerprint":{"sha1":"5C:9A:A7:13:C6:1C:D2:5B:C7:8D:37:50:F5:9D:C1:14:29:0D:D2:7B","sha256":"FC:50:DC:40:9F:1A:E3:96:14:F0:00:AF:EA:59:CF:B3:82:5D:78:F7:D5:44:62:40:D9:42:9A:06:C7:E0:D1:B8"}}},"request":{"raw":"GET /js/heatmap.js?vsn=d\u0026version=8 HTTP/1.1\r\nHost: a.pancake.vn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rs-shop-ph.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: openresty/1.25.3.2\r\ndate: Wed, 19 Aug 2026 22:31:32 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 29103\r\naccept-ranges: bytes\r\ncache-control: public, max-age=31536000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"OpenResty:1.25.3.2","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":29103,"size_decoded":29320,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (29103), with no line terminators","md5":"0944c4d99031741168687ee532400a28","sha1":"9079df062c35a357049ff02c571b0491af87076b","sha256":"6f9e3ee7dc4459c9000f8866c414bd06d87a4f5527986b6ffbdf6051f0f2e0a2","sha512":"d9803490f7bb6de686a950ffe271169ec34a5cf0f69bcdd55652ae96d6570eed76b0684d8f5e885cac1f51571baa47fcfbc70f9d8bc281c35e84fa09dce62c1d","ssdeep":"768:YgJF0SJTFb1t0Wrx8EB1adVf8kFTe9ey+4gCSXUruL:YgwSJTXtnTqd1PFyQ4wXR","tlshash":"c1d2a48db595f0b543e371b0802f520bb277662a704ec4e4ea65d9e2ac7490e9237f7c","first_seen":"2025-11-24T10:58:04.664335Z","last_seen":"2026-08-19T22:32:23.594165Z","times_seen":57,"resource_available":true,"data":null}},"time_used":464,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":233,"receive":231,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://rs-shop-ph.com/thejoystoreblkxbash","date":"2026-08-19T22:31:32.194Z","timestamp":1787178692194,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Aug 2026 20:43:51 GMT","end":"Wed, 28 Oct 2026 20:43:50 GMT"},"fingerprint":{"sha1":"B9:F7:74:85:7B:1C:5F:E9:C2:86:5A:AA:63:0F:34:84:5F:79:D6:96","sha256":"BA:57:10:D4:7E:A5:7C:C6:22:90:71:24:65:31:49:39:40:E5:C8:EB:E4:74:F7:D9:0B:3E:17:36:DD:31:9D:EB"}}},"request":{"raw":"GET /s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://rs-shop-ph.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 43136\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 13 Aug 2026 10:17:38 GMT\r\nexpires: Fri, 13 Aug 2027 10:17:38 GMT\r\ncache-control: public, max-age=31536000\r\nage: 562434\r\nlast-modified: Wed, 18 Feb 2026 19:51:37 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":43136,"size_decoded":43949,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 43136, version 1.0","md5":"665db5e157d2138835c4037c971ff3a4","sha1":"41ca6b7e4818eb81531d8006ff7ddd971c640879","sha256":"1404ca348bd75ef836f4dd8b6f2cc719458642d1237c368296b2fc652dca47dc","sha512":"6c999466673c9873b1b112d6ab95c7cecb99467ea156e3e046b54c5f3d109c3845b05cbb2a0245d178430c7b2ceacd5110f7d8faf7e041100f44852b0c29fe9a","ssdeep":"768:tMTmVhyXCrekkraPAjrWMMWD3UJmw0FRwoglekm+hQ7//geceSF/mEQBPMAmDu5:cmHkCrHvPAjrWMMI3UJswogl4j7/hSlW","tlshash":"f9130231eb70ee59962c903454e7fda9433b1457d731aca80e99a1ce6f8103454facec","first_seen":"2026-02-19T22:27:43.350598Z","last_seen":"2026-08-20T01:29:35.591876Z","times_seen":267701,"resource_available":false,"data":null}},"time_used":80,"timings":{"blocked":8,"dns":0,"connect":0,"send":0,"wait":33,"receive":39,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.webcake.io/cart/app.js?r=5155.76105565713","fqdn":"api.webcake.io","domain":"webcake.io","tld":"io"},"ip":{"addr":"113.20.119.13","port":443,"asn":45903,"as":"CMC Telecom Infrastructure Company","country":"Vietnam","country_code":"VN"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rs-shop-ph.com/thejoystoreblkxbash","date":"2026-08-19T22:31:32.228Z","timestamp":1787178692228,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.webcake.io","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 30 Sep 2025 00:00:00 GMT","end":"Thu, 01 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C8:DD:D0:B1:2C:13:30:FC:EE:ED:F7:2B:58:21:66:5A:0F:4A:A8:75","sha256":"59:D5:31:20:93:CF:51:56:BD:93:1D:CA:7D:59:B2:EA:8E:B3:B6:51:A6:68:15:42:55:F4:94:8B:C9:B0:1B:D2"}}},"request":{"raw":"GET /cart/app.js?r=5155.76105565713 HTTP/1.1\r\nHost: api.webcake.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rs-shop-ph.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: openresty/1.25.3.2\r\ndate: Wed, 19 Aug 2026 22:31:32 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 61268\r\nservice-worker-allowed: /\r\naccept-ranges: bytes\r\ncache-control: public, max-age=31536000\r\ncontent-encoding: gzip\r\netag: \"6F62417\"\r\nvary: Accept-Encoding\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"OpenResty:1.25.3.2","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":200548,"size_decoded":61583,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65469)","md5":"355fc77b5148dd834596ccc771fd8d08","sha1":"c77821dc7c97dad0123f31b11bc492a2152aeb4b","sha256":"0ee978e4018551ecba8bfe01c1681cbc41360f29b72aec610d086f340c9211df","sha512":"29e4c1fcb999e719f3a7b983c56fcaff01396a445ed0ac309689bcbdd838ddd0ae9fd2d17a8a335e2a407ae1bec85208f1a22f19f84789edd8f972ace8f21813","ssdeep":"3072:IS7wlsPJx8k3TDvr+5PKyMPTWmkgNlfln0T6i+:NdJx8q3r+5PKyMPqmkOdhV","tlshash":"1e142ae9b295f072522f5561425b0336f236b1367036c0b8b6ddedd32b29c897123aed","first_seen":"2026-08-19T01:01:57.481444Z","last_seen":"2026-08-19T22:32:23.596845Z","times_seen":2,"resource_available":true,"data":null}},"time_used":459,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":230,"receive":229,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"content.pancake.vn/web-media-263/79/5b/4f/7c/07784d8c1dea9bcb58b22ba4aae0ace653a4efb176543b2eaa272136-w:160-h:63-l:3919-t:image/webp.webp","fqdn":"content.pancake.vn","domain":"pancake.vn","tld":"vn"},"ip":{"addr":"203.171.27.184","port":443,"asn":45903,"as":"CMC Telecom Infrastructure Company","country":"Vietnam","country_code":"VN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rs-shop-ph.com/thejoystoreblkxbash","date":"2026-08-19T22:31:32.229Z","timestamp":1787178692229,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.pancake.vn","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 10 Jul 2026 00:00:00 GMT","end":"Sun, 24 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"5A:44:4F:CC:D2:24:0B:45:5F:98:33:58:C2:FB:7C:EE:CE:28:65:3C","sha256":"73:95:94:73:D8:1E:58:5C:83:CA:31:9F:16:6C:8D:18:E8:97:2C:1C:31:57:58:88:0D:62:86:AF:F7:39:11:8F"}}},"request":{"raw":"GET /web-media-263/79/5b/4f/7c/07784d8c1dea9bcb58b22ba4aae0ace653a4efb176543b2eaa272136-w:160-h:63-l:3919-t:image/webp.webp HTTP/1.1\r\nHost: content.pancake.vn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rs-shop-ph.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.22.1\r\ndate: Wed, 19 Aug 2026 22:31:32 GMT\r\ncontent-type: image/webp\r\ncontent-length: 3290\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: \r\ncache-control: public, max-age=2505600\r\ncontent-security-policy: default-src 'none'; script-src 'none'; media-src *\r\netag: webp.webp\r\nx-content-type-options: nosniff\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3290,"size_decoded":3726,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"eb6214938fe7bb5801e957350c504863","sha1":"709d76e17132444ba4a85d41c1db2650c640f069","sha256":"795b4f7c07784d8c1dea9bcb58b22ba4aae0ace653a4efb176543b2eaa272136","sha512":"30071777a5e543643469daf3010f447eb0e439ab620b99f5998f8184205a61c3282627df7f649dfb13c2e99d454d65847ada764029c725db98eb22905e5e3d9a","ssdeep":"","tlshash":"fe615d62d30c13aef2312275804a4f83e31b7b46c1a565756182116ac7fe6c45e9f18b","first_seen":"2026-08-19T01:01:57.493833Z","last_seen":"2026-08-19T22:32:23.59872Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1504,"timings":{"blocked":-1,"dns":0,"connect":231,"send":0,"wait":790,"receive":246,"ssl":237},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"content.pancake.vn/web-media-263/ea/c1/da/22/6f6a9d26678eec80c9a4dabe103121d2ad69d823f05e8230ea546d8b-w:232-h:64-l:4722-t:image/webp.webp","fqdn":"content.pancake.vn","domain":"pancake.vn","tld":"vn"},"ip":{"addr":"203.171.27.184","port":443,"asn":45903,"as":"CMC Telecom Infrastructure Company","country":"Vietnam","country_code":"VN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rs-shop-ph.com/thejoystoreblkxbash","date":"2026-08-19T22:31:32.241Z","timestamp":1787178692241,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.pancake.vn","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 10 Jul 2026 00:00:00 GMT","end":"Sun, 24 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"5A:44:4F:CC:D2:24:0B:45:5F:98:33:58:C2:FB:7C:EE:CE:28:65:3C","sha256":"73:95:94:73:D8:1E:58:5C:83:CA:31:9F:16:6C:8D:18:E8:97:2C:1C:31:57:58:88:0D:62:86:AF:F7:39:11:8F"}}},"request":{"raw":"GET /web-media-263/ea/c1/da/22/6f6a9d26678eec80c9a4dabe103121d2ad69d823f05e8230ea546d8b-w:232-h:64-l:4722-t:image/webp.webp HTTP/1.1\r\nHost: content.pancake.vn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rs-shop-ph.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.22.1\r\ndate: Wed, 19 Aug 2026 22:31:32 GMT\r\ncontent-type: image/webp\r\ncontent-length: 4054\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: \r\ncache-control: public, max-age=2505600\r\ncontent-security-policy: default-src 'none'; script-src 'none'; media-src *\r\netag: webp.webp\r\nx-content-type-options: nosniff\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4054,"size_decoded":4490,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"8931704f774dbca7f801a51f1c377287","sha1":"b38dc02e167e9a00ebb6a2bf6c88d9a58941caeb","sha256":"eac1da226f6a9d26678eec80c9a4dabe103121d2ad69d823f05e8230ea546d8b","sha512":"0bb155cf09c7f35b8f31a01a4f581a3e17451e684bb6539ab87b62a21fd94b999dd20ce4d6002fd1f60c2de24ebb0e8d108b1c67601f43130ca1b28a92054936","ssdeep":"","tlshash":"00816d1703512e98f45289b829060dc3f6f30e65580f971da0f657344651fd66d6f7d3","first_seen":"2026-08-19T01:01:57.390455Z","last_seen":"2026-08-19T22:32:23.599835Z","times_seen":2,"resource_available":false,"data":null}},"time_used":965,"timings":{"blocked":233,"dns":0,"connect":0,"send":0,"wait":732,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"content.pancake.vn/web-media-263/s962x962/fwebp80/24/e7/17/c6/755c4999843ee3d42beccc8126cb9d183d211ab1232192ce0fc4f78a-w:1500-h:1500-l:449970-t:image/webp.webp","fqdn":"content.pancake.vn","domain":"pancake.vn","tld":"vn"},"ip":{"addr":"203.171.27.184","port":443,"asn":45903,"as":"CMC Telecom Infrastructure Company","country":"Vietnam","country_code":"VN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rs-shop-ph.com/thejoystoreblkxbash","date":"2026-08-19T22:31:58.242Z","timestamp":1787178718242,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.pancake.vn","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 10 Jul 2026 00:00:00 GMT","end":"Sun, 24 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"5A:44:4F:CC:D2:24:0B:45:5F:98:33:58:C2:FB:7C:EE:CE:28:65:3C","sha256":"73:95:94:73:D8:1E:58:5C:83:CA:31:9F:16:6C:8D:18:E8:97:2C:1C:31:57:58:88:0D:62:86:AF:F7:39:11:8F"}}},"request":{"raw":"GET /web-media-263/s962x962/fwebp80/24/e7/17/c6/755c4999843ee3d42beccc8126cb9d183d211ab1232192ce0fc4f78a-w:1500-h:1500-l:449970-t:image/webp.webp HTTP/1.1\r\nHost: content.pancake.vn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rs-shop-ph.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.22.1\r\ndate: Wed, 19 Aug 2026 22:31:58 GMT\r\ncontent-type: image/webp\r\ncontent-length: 218306\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: \r\ncache-control: public, max-age=2505600\r\ncontent-security-policy: default-src 'none'; script-src 'none'; media-src *\r\netag: webp.webp\r\nx-content-type-options: nosniff\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":218306,"size_decoded":218744,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"e8d7b19381d12d1e6f085eb1547481c4","sha1":"0be515f40a24f44641f78714335056bea85970c8","sha256":"cbe8b6d93afb4443727dbd7150533a8776aa7215766e42ec313c0065a00bad19","sha512":"3643365cc0d1508693420e9ba4949710742488bbfd50544cd1a953d13643fa919a6953df95aef675ff74044e98c0927ea8c291c800f4e25bbef37e4a73298c66","ssdeep":"6144:W/sTEXIDb3LIqaD94ljhkip9IZ1PzXD4kh3UV:W/cwIUPUlzi1Pzkkl8","tlshash":"6e24239202521f7bf3d2d9bea3c02878f81c964f723b216e5350e56789bfa3144b611b","first_seen":"2026-08-19T01:01:57.456178Z","last_seen":"2026-08-19T22:32:23.600952Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1227,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":494,"receive":733,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/muli/v34/7Auwp_0qiz-afTLGLQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://rs-shop-ph.com/thejoystoreblkxbash","date":"2026-08-19T22:31:32.184Z","timestamp":1787178692184,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Aug 2026 20:43:51 GMT","end":"Wed, 28 Oct 2026 20:43:50 GMT"},"fingerprint":{"sha1":"B9:F7:74:85:7B:1C:5F:E9:C2:86:5A:AA:63:0F:34:84:5F:79:D6:96","sha256":"BA:57:10:D4:7E:A5:7C:C6:22:90:71:24:65:31:49:39:40:E5:C8:EB:E4:74:F7:D9:0B:3E:17:36:DD:31:9D:EB"}}},"request":{"raw":"GET /s/muli/v34/7Auwp_0qiz-afTLGLQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://rs-shop-ph.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 32868\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 19 Aug 2026 13:11:40 GMT\r\nexpires: Thu, 19 Aug 2027 13:11:40 GMT\r\ncache-control: public, max-age=31536000\r\nage: 33592\r\nlast-modified: Mon, 08 Sep 2025 18:05:36 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":32868,"size_decoded":33680,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 32868, version 1.0","md5":"1405c728dc80e40832bd97a8b156df25","sha1":"a96218e8987a6f3b6da022efe8365ad1118c90ae","sha256":"a91cd9085d4f94c0fb01e3e77f7363eea92bf6ed0faa0cee05d85050535f38a9","sha512":"99b9507d45fc508d13e0544fee7cd2efe01eb8a0f153fabdb794e58e2f39397fbaca228256c43428496ad25db6d48e16141558f4c4deb5a3a33f442bd3862af3","ssdeep":"768:jj1BDg1j8bGPwwXu+r3Nso9wcXQzEpFMQY:jzvVw3r3a7SQVQY","tlshash":"a8e2f1c063561a15a868a8343b6b6fdc68d8c0c1612e4d68fd75f0609ab5b2dc3e03fe","first_seen":"2025-09-09T02:07:46.120406Z","last_seen":"2026-08-20T00:31:39.288344Z","times_seen":12728,"resource_available":false,"data":null}},"time_used":94,"timings":{"blocked":22,"dns":0,"connect":0,"send":0,"wait":58,"receive":14,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/oswald/v57/TK3iWkUHHAIjg752GT8G.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://rs-shop-ph.com/thejoystoreblkxbash","date":"2026-08-19T22:31:32.206Z","timestamp":1787178692206,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Aug 2026 20:43:51 GMT","end":"Wed, 28 Oct 2026 20:43:50 GMT"},"fingerprint":{"sha1":"B9:F7:74:85:7B:1C:5F:E9:C2:86:5A:AA:63:0F:34:84:5F:79:D6:96","sha256":"BA:57:10:D4:7E:A5:7C:C6:22:90:71:24:65:31:49:39:40:E5:C8:EB:E4:74:F7:D9:0B:3E:17:36:DD:31:9D:EB"}}},"request":{"raw":"GET /s/oswald/v57/TK3iWkUHHAIjg752GT8G.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://rs-shop-ph.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 28488\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 13 Aug 2026 05:54:22 GMT\r\nexpires: Fri, 13 Aug 2027 05:54:22 GMT\r\ncache-control: public, max-age=31536000\r\nage: 578230\r\nlast-modified: Wed, 10 Sep 2025 16:46:11 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":28488,"size_decoded":29301,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 28488, version 1.0","md5":"22c3b00d2e65fb2c876a292423108958","sha1":"3c61d84659817fef687045bbfa0e1da9568e164b","sha256":"bd73278ee0c50041b91b4c03d1229e35b501637f46b6409e7da2d3a758446ea5","sha512":"33954d8a7ed3c87b3af8577bbae9439b9efba2a64445463d893681dad085bb8630d31c995ce010510a9c732926017dba9d5fd5002d0000ec1488b61889d6ddfe","ssdeep":"384:jlzdJfoB5YJ2kG1CdQegm8m00xr19KB668/BOTqE85gyqvPA34uEomcGvpMwvg84:jlzdyBzhIb0u1QB6vBOv8uvPAovJCs4","tlshash":"cfd2e0195e9673efe4552d3ea830affe91e32aad30507162c5db6c1155c438bc8e4ec4","first_seen":"2025-09-11T19:05:43.498829Z","last_seen":"2026-08-20T00:25:14.436124Z","times_seen":34245,"resource_available":false,"data":null}},"time_used":77,"timings":{"blocked":6,"dns":0,"connect":0,"send":0,"wait":63,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"statics.pancake.vn/web-media/55/b6/a5/37/2754eb2671dd061fda0f76b2f6f7030ca4a75fa823d1d6bb0ec98105-w:64-h:64-l:1170-t:image/svg+xml.svg","fqdn":"statics.pancake.vn","domain":"pancake.vn","tld":"vn"},"ip":{"addr":"203.171.27.184","port":443,"asn":45903,"as":"CMC Telecom Infrastructure Company","country":"Vietnam","country_code":"VN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rs-shop-ph.com/thejoystoreblkxbash","date":"2026-08-19T22:31:32.733Z","timestamp":1787178692733,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.pancake.vn","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 10 Jul 2026 00:00:00 GMT","end":"Sun, 24 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"5A:44:4F:CC:D2:24:0B:45:5F:98:33:58:C2:FB:7C:EE:CE:28:65:3C","sha256":"73:95:94:73:D8:1E:58:5C:83:CA:31:9F:16:6C:8D:18:E8:97:2C:1C:31:57:58:88:0D:62:86:AF:F7:39:11:8F"}}},"request":{"raw":"GET /web-media/55/b6/a5/37/2754eb2671dd061fda0f76b2f6f7030ca4a75fa823d1d6bb0ec98105-w:64-h:64-l:1170-t:image/svg+xml.svg HTTP/1.1\r\nHost: statics.pancake.vn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rs-shop-ph.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.22.1\r\ndate: Wed, 19 Aug 2026 22:31:32 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 561\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: \r\ncache-control: public, max-age=2505600\r\ncontent-security-policy: default-src 'none'; script-src 'none'; media-src *\r\netag: svg+xml.svg\r\nx-content-type-options: nosniff\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":561,"size_decoded":1001,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"e2f4eb877c76a651b6fb46211bb567a4","sha1":"917adb4956c03063a81702fba56b92ea43291479","sha256":"55b6a5372754eb2671dd061fda0f76b2f6f7030ca4a75fa823d1d6bb0ec98105","sha512":"d4b2f473d63b67b923135f60892d8ca8c54f17ae195eb55b7b34d2dc207010dd1cd13105d47dd3525c97be7b3190103a3240f76177e49325a8f458e1a0229c88","ssdeep":"","tlshash":"14f0c9f7615833ed21900f800aa1729823379192729f327adfe3d8499c080d3703c8ae","first_seen":"2025-07-09T23:01:27.08891Z","last_seen":"2026-08-19T22:32:23.603889Z","times_seen":12,"resource_available":false,"data":null}},"time_used":1239,"timings":{"blocked":-1,"dns":1,"connect":230,"send":0,"wait":728,"receive":487,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"statics.pancake.vn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"statics.pancake.vn","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rs-shop-ph.com/page_view.gif?pid=78b27b7c-c0fb-4838-9434-1d4e4f860774","fqdn":"rs-shop-ph.com","domain":"rs-shop-ph.com","tld":"com"},"ip":{"addr":"203.171.27.189","port":443,"asn":45903,"as":"CMC Telecom Infrastructure Company","country":"Vietnam","country_code":"VN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rs-shop-ph.com/thejoystoreblkxbash","date":"2026-08-19T22:31:30.814Z","timestamp":1787178690814,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rs-shop-ph.com","organization":""},"issuer":{"commonName":"ZeroSSL ECC DV SSL CA 2","organization":"ZeroSSL GmbH"},"validity":{"start":"Mon, 13 Jul 2026 00:00:00 GMT","end":"Sun, 11 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"94:AD:C6:A8:92:B5:65:CB:7E:C8:46:96:D0:B2:34:AC:82:A4:3A:56","sha256":"D7:84:7A:F5:79:31:63:69:0E:42:57:BA:A8:86:A6:20:15:46:B9:B1:6F:2F:C3:38:54:8F:0F:4A:5A:CD:1E:9C"}}},"request":{"raw":"GET /page_view.gif?pid=78b27b7c-c0fb-4838-9434-1d4e4f860774 HTTP/1.1\r\nHost: rs-shop-ph.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rs-shop-ph.com/thejoystoreblkxbash\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: openresty/1.27.1.1\r\ndate: Wed, 19 Aug 2026 22:31:30 GMT\r\ncontent-type: image/gif\r\ncontent-length: 35\r\ncache-control: max-age=0, private, must-revalidate\r\nx-request-id: GM1VjO61rzxD5jTrGdOi\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty:1.27.1.1","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":35,"size_decoded":300,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"c2196de8ba412c60c22ab491af7b1409","sha1":"5fbd472222feb8a22cf5b8aa5dc5b8e13af88e2b","sha256":"6adc3d4c1056996e4e8b765a62604c78b1f867cceb3b15d0b9bedb7c4857f992","sha512":"84e24a70b78e9de9c9d0dfeb49f3f4247dbc1c715d8844471ee40669270682e199d48f5fbec62bd984c9c0270534b407c4d2561dd6c05adec3c83c1534f32d5c","ssdeep":"","tlshash":"d4800003e280c002c2a2c0300e0ccb802b88b0208a28030fb0ec2baeec3a2a00c02000","first_seen":"2023-04-05T07:36:27Z","last_seen":"2026-08-20T00:47:16.003823Z","times_seen":187422,"resource_available":true,"data":null}},"time_used":462,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":462,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-19","alert":"Phishing Block","trigger":"rs-shop-ph.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"rs-shop-ph.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"rs-shop-ph.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/lato/v25/S6u9w4BMUTPHh6UVSwaPGR_p.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://rs-shop-ph.com/thejoystoreblkxbash","date":"2026-08-19T22:31:32.205Z","timestamp":1787178692205,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Aug 2026 20:43:51 GMT","end":"Wed, 28 Oct 2026 20:43:50 GMT"},"fingerprint":{"sha1":"B9:F7:74:85:7B:1C:5F:E9:C2:86:5A:AA:63:0F:34:84:5F:79:D6:96","sha256":"BA:57:10:D4:7E:A5:7C:C6:22:90:71:24:65:31:49:39:40:E5:C8:EB:E4:74:F7:D9:0B:3E:17:36:DD:31:9D:EB"}}},"request":{"raw":"GET /s/lato/v25/S6u9w4BMUTPHh6UVSwaPGR_p.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://rs-shop-ph.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 5552\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 18 Aug 2026 23:07:14 GMT\r\nexpires: Wed, 18 Aug 2027 23:07:14 GMT\r\ncache-control: public, max-age=31536000\r\nage: 84258\r\nlast-modified: Mon, 15 Sep 2025 17:11:37 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":5552,"size_decoded":6363,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 5552, version 1.0","md5":"33c906549bd61edf700e9a28132f25f8","sha1":"30128ef02a089c98139c978a2a0cedaadd634dbe","sha256":"3a5797f440bc67b59830cad81e59a71011e35cb45ed7f747b61a69b0a9b0d6ae","sha512":"dc4a63153cec46714504239de7184f87585c5805498300c8d1ba066053135ca04895f1484e739ee3fc492baba6920b5686e40a05ade1b962e5113a9635013503","ssdeep":"96:tg4V29KoaW+ekf+c3aIw2Lp/HwoGccbVjNRFRf7g/v/88V6PnW4+Kydey7kh:tnKKovjHULVHwMcbtFR+v082njyPg","tlshash":"c6b1ae0c7d929cebf5ac14792c508c34199b5eac8f5ee94c8c860c2a02e25dd1e0e7be","first_seen":"2025-09-17T01:22:23.26484Z","last_seen":"2026-08-20T00:26:19.016835Z","times_seen":3855,"resource_available":false,"data":null}},"time_used":69,"timings":{"blocked":6,"dns":0,"connect":0,"send":0,"wait":63,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"content.pancake.vn/web-media-263/60/2c/4b/f6/a7f39eb193f828ef8b1d4bb6d0bb06e4f3dae3cb7bc9d42fce678cdd-w:24-h:24-l:1229-t:image/webp.webp","fqdn":"content.pancake.vn","domain":"pancake.vn","tld":"vn"},"ip":{"addr":"203.171.27.184","port":443,"asn":45903,"as":"CMC Telecom Infrastructure Company","country":"Vietnam","country_code":"VN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rs-shop-ph.com/thejoystoreblkxbash","date":"2026-08-19T22:31:32.230Z","timestamp":1787178692230,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.pancake.vn","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 10 Jul 2026 00:00:00 GMT","end":"Sun, 24 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"5A:44:4F:CC:D2:24:0B:45:5F:98:33:58:C2:FB:7C:EE:CE:28:65:3C","sha256":"73:95:94:73:D8:1E:58:5C:83:CA:31:9F:16:6C:8D:18:E8:97:2C:1C:31:57:58:88:0D:62:86:AF:F7:39:11:8F"}}},"request":{"raw":"GET /web-media-263/60/2c/4b/f6/a7f39eb193f828ef8b1d4bb6d0bb06e4f3dae3cb7bc9d42fce678cdd-w:24-h:24-l:1229-t:image/webp.webp HTTP/1.1\r\nHost: content.pancake.vn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rs-shop-ph.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.22.1\r\ndate: Wed, 19 Aug 2026 22:31:32 GMT\r\ncontent-type: image/webp\r\ncontent-length: 616\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: \r\ncache-control: public, max-age=2505600\r\ncontent-security-policy: default-src 'none'; script-src 'none'; media-src *\r\netag: webp.webp\r\nx-content-type-options: nosniff\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":616,"size_decoded":1051,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"2c61c4de8bfd5ae5ea74661b7b6243eb","sha1":"8862f4872bbbc6373a1c4a4caa11bc3d1eb71416","sha256":"602c4bf6a7f39eb193f828ef8b1d4bb6d0bb06e4f3dae3cb7bc9d42fce678cdd","sha512":"d35970f292d91cb1c9a1df5bd33bfee5627b092614d2809de0dea2a8d43790563b2240038b87477d5d786db8985b7845a5f0048e0cbb709aa63704647deb897b","ssdeep":"","tlshash":"2af0d47513148b4cf0116b7850d01b83f3a4fd15c30b5a16934086222f15bd56d6d187","first_seen":"2026-08-19T01:01:57.485579Z","last_seen":"2026-08-19T22:32:23.605865Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1744,"timings":{"blocked":-1,"dns":0,"connect":247,"send":0,"wait":752,"receive":487,"ssl":251},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"content.pancake.vn/web-media-263/s50x50/fwebp/s50x50/fwebp/s50x50/fwebp/s50x50/fwebp/9a/47/fb/a4/062ff8aeabbffe5b3baaaaa95113f48f02628ce39592b72e9c3776b8-w:1500-h:1500-l:86484-t:image/webp.webp","fqdn":"content.pancake.vn","domain":"pancake.vn","tld":"vn"},"ip":{"addr":"203.171.27.184","port":443,"asn":45903,"as":"CMC Telecom Infrastructure Company","country":"Vietnam","country_code":"VN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rs-shop-ph.com/thejoystoreblkxbash","date":"2026-08-19T22:31:33.989Z","timestamp":1787178693989,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.pancake.vn","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 10 Jul 2026 00:00:00 GMT","end":"Sun, 24 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"5A:44:4F:CC:D2:24:0B:45:5F:98:33:58:C2:FB:7C:EE:CE:28:65:3C","sha256":"73:95:94:73:D8:1E:58:5C:83:CA:31:9F:16:6C:8D:18:E8:97:2C:1C:31:57:58:88:0D:62:86:AF:F7:39:11:8F"}}},"request":{"raw":"GET /web-media-263/s50x50/fwebp/s50x50/fwebp/s50x50/fwebp/s50x50/fwebp/9a/47/fb/a4/062ff8aeabbffe5b3baaaaa95113f48f02628ce39592b72e9c3776b8-w:1500-h:1500-l:86484-t:image/webp.webp HTTP/1.1\r\nHost: content.pancake.vn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rs-shop-ph.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.22.1\r\ndate: Wed, 19 Aug 2026 22:31:34 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1306\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: \r\ncache-control: public, max-age=2505600\r\ncontent-security-policy: default-src 'none'; script-src 'none'; media-src *\r\netag: webp.webp\r\nx-content-type-options: nosniff\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1306,"size_decoded":1742,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"ce7fa60e3e6ce2d8cc464beb7a72d6a5","sha1":"0807dbb12d3c5e93b89177b5dc107c407fed8760","sha256":"527717d494db5cc769045bee86bf5e1c8d5fa4eae372efc2a3308ae27f7330fc","sha512":"f54d8b3682b467f4805596c3c9e25751887bf7d9f76ace81dc367f420ed281bb23b3805ae12b1ade9d28b0cd58f07e7f2314a87486d0774bbcf60a1787ee4f0f","ssdeep":"","tlshash":"ed21632ff3102bace4226678a4d02701db2ab551c6298f5b120486768f857c4785c2c6","first_seen":"2026-08-19T01:01:57.466435Z","last_seen":"2026-08-19T22:32:23.607338Z","times_seen":2,"resource_available":false,"data":null}},"time_used":248,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":248,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"content.pancake.vn/web-media-263/s962x962/fwebp80/9a/47/fb/a4/062ff8aeabbffe5b3baaaaa95113f48f02628ce39592b72e9c3776b8-w:1500-h:1500-l:86484-t:image/webp.webp","fqdn":"content.pancake.vn","domain":"pancake.vn","tld":"vn"},"ip":{"addr":"203.171.27.184","port":443,"asn":45903,"as":"CMC Telecom Infrastructure Company","country":"Vietnam","country_code":"VN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rs-shop-ph.com/thejoystoreblkxbash","date":"2026-08-19T22:31:38.151Z","timestamp":1787178698151,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.pancake.vn","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 10 Jul 2026 00:00:00 GMT","end":"Sun, 24 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"5A:44:4F:CC:D2:24:0B:45:5F:98:33:58:C2:FB:7C:EE:CE:28:65:3C","sha256":"73:95:94:73:D8:1E:58:5C:83:CA:31:9F:16:6C:8D:18:E8:97:2C:1C:31:57:58:88:0D:62:86:AF:F7:39:11:8F"}}},"request":{"raw":"GET /web-media-263/s962x962/fwebp80/9a/47/fb/a4/062ff8aeabbffe5b3baaaaa95113f48f02628ce39592b72e9c3776b8-w:1500-h:1500-l:86484-t:image/webp.webp HTTP/1.1\r\nHost: content.pancake.vn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rs-shop-ph.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.22.1\r\ndate: Wed, 19 Aug 2026 22:31:38 GMT\r\ncontent-type: image/webp\r\ncontent-length: 50586\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: \r\ncache-control: public, max-age=2505600\r\ncontent-security-policy: default-src 'none'; script-src 'none'; media-src *\r\netag: webp.webp\r\nx-content-type-options: nosniff\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":50586,"size_decoded":51023,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"e868259d38d528a32e27bd72b27de26b","sha1":"e3411ccc424020de54745feb3c9ff2e049b8d8fb","sha256":"540a54cd9b928dd455b1125c77b6a62f6442771539a2510f857167b0db5bf656","sha512":"52c9b23deaa7455d1e3b2965738520c77cf37f0cdf8cae1f2d0ffa713e1e475d6ff4e1c0b9e6c1775bb9229d595f701cb91a54dcea3e18fdc3eee0f1821e200b","ssdeep":"1536:sIwwoXaxp0uiSvtsNOYMOx5un2fo5BcFn:sIwwNxp0vROYbmtA","tlshash":"3033f14e82a459f6f71b527024a21e039161d6fcdbc17c0b5f9ff2761a14601ae8fe47","first_seen":"2026-08-19T01:01:57.500208Z","last_seen":"2026-08-19T22:32:23.608759Z","times_seen":2,"resource_available":false,"data":null}},"time_used":735,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":491,"receive":244,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"content.pancake.vn/1/s752x752/fwebp80/54/69/e4/13/d02869f068e9b7c043efc7c551d2042a678a104b32495639f71c33a1.png","fqdn":"content.pancake.vn","domain":"pancake.vn","tld":"vn"},"ip":{"addr":"203.171.27.184","port":443,"asn":45903,"as":"CMC Telecom Infrastructure Company","country":"Vietnam","country_code":"VN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rs-shop-ph.com/thejoystoreblkxbash","date":"2026-08-19T22:31:30.794Z","timestamp":1787178690794,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.pancake.vn","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 10 Jul 2026 00:00:00 GMT","end":"Sun, 24 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"5A:44:4F:CC:D2:24:0B:45:5F:98:33:58:C2:FB:7C:EE:CE:28:65:3C","sha256":"73:95:94:73:D8:1E:58:5C:83:CA:31:9F:16:6C:8D:18:E8:97:2C:1C:31:57:58:88:0D:62:86:AF:F7:39:11:8F"}}},"request":{"raw":"GET /1/s752x752/fwebp80/54/69/e4/13/d02869f068e9b7c043efc7c551d2042a678a104b32495639f71c33a1.png HTTP/1.1\r\nHost: content.pancake.vn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rs-shop-ph.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.22.1\r\ndate: Wed, 19 Aug 2026 22:31:32 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1496\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: \r\ncache-control: public, max-age=2505600\r\ncontent-security-policy: default-src 'none'; script-src 'none'; media-src *\r\netag: d02869f068e9b7c043efc7c551d2042a678a104b32495639f71c33a1.png\r\nx-content-type-options: nosniff\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1496,"size_decoded":1983,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"6a8adcfa3afce1de7f12073a1eda24be","sha1":"f41f25e35719df6605069a8c00b02dbaa48c9132","sha256":"116db5b2d2c840fa876f95aee1d68b89cc678eb0c37ec221609300e870460b6f","sha512":"caa6c23e984f521a304bad93f40f5ccadb7e64cde9b96ee8ed6d399acf3758b55b2c42e98851caabf1d07c36df95adeb27d97c9f0611f4b78803ce30a7e25167","ssdeep":"","tlshash":"6c311b43c9e2ad48e9604e37605447e9f0cb6e41547dfd5b38c817315c2eec0899dbd6","first_seen":"2026-02-22T21:42:00.45657Z","last_seen":"2026-08-19T22:32:23.610063Z","times_seen":3,"resource_available":false,"data":null}},"time_used":3180,"timings":{"blocked":973,"dns":0,"connect":248,"send":0,"wait":971,"receive":489,"ssl":498},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"content.pancake.vn/web-media-263/d6/a3/b8/4e/2b5051bf7b51130c3a13141bef24690f7a3a2b29e8822b0b16164f34-w:16-h:16-l:1283-t:image/webp.webp","fqdn":"content.pancake.vn","domain":"pancake.vn","tld":"vn"},"ip":{"addr":"203.171.27.184","port":443,"asn":45903,"as":"CMC Telecom Infrastructure Company","country":"Vietnam","country_code":"VN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rs-shop-ph.com/thejoystoreblkxbash","date":"2026-08-19T22:31:32.226Z","timestamp":1787178692226,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.pancake.vn","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 10 Jul 2026 00:00:00 GMT","end":"Sun, 24 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"5A:44:4F:CC:D2:24:0B:45:5F:98:33:58:C2:FB:7C:EE:CE:28:65:3C","sha256":"73:95:94:73:D8:1E:58:5C:83:CA:31:9F:16:6C:8D:18:E8:97:2C:1C:31:57:58:88:0D:62:86:AF:F7:39:11:8F"}}},"request":{"raw":"GET /web-media-263/d6/a3/b8/4e/2b5051bf7b51130c3a13141bef24690f7a3a2b29e8822b0b16164f34-w:16-h:16-l:1283-t:image/webp.webp HTTP/1.1\r\nHost: content.pancake.vn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rs-shop-ph.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.22.1\r\ndate: Wed, 19 Aug 2026 22:31:32 GMT\r\ncontent-type: image/webp\r\ncontent-length: 670\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: \r\ncache-control: public, max-age=2505600\r\ncontent-security-policy: default-src 'none'; script-src 'none'; media-src *\r\netag: webp.webp\r\nx-content-type-options: nosniff\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":670,"size_decoded":1105,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"6218a400e88554a72acfce313d497e84","sha1":"8d15fe2e14b578f3721cb233d62e102793e35759","sha256":"d6a3b84e2b5051bf7b51130c3a13141bef24690f7a3a2b29e8822b0b16164f34","sha512":"989f034f0fee4ef92af082fa7a50cc15489138ed5018e5fbdbffea9c6ef3c577452eb44c007c15dd8094d14a7ed58c86af5101a8c36bc65fe9904819eb3fb8bc","ssdeep":"","tlshash":"bc01c0756358176cf0202bb470902b42f37bfd2282479f2682c002221b188c51c6c687","first_seen":"2026-08-19T01:01:57.491687Z","last_seen":"2026-08-19T22:32:23.611391Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1506,"timings":{"blocked":-1,"dns":0,"connect":231,"send":0,"wait":790,"receive":246,"ssl":238},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.webcake.io/address_wc/address.63.min.js?v=1","fqdn":"api.webcake.io","domain":"webcake.io","tld":"io"},"ip":{"addr":"113.20.119.13","port":443,"asn":45903,"as":"CMC Telecom Infrastructure Company","country":"Vietnam","country_code":"VN"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rs-shop-ph.com/thejoystoreblkxbash","date":"2026-08-19T22:31:30.785Z","timestamp":1787178690785,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.webcake.io","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 30 Sep 2025 00:00:00 GMT","end":"Thu, 01 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C8:DD:D0:B1:2C:13:30:FC:EE:ED:F7:2B:58:21:66:5A:0F:4A:A8:75","sha256":"59:D5:31:20:93:CF:51:56:BD:93:1D:CA:7D:59:B2:EA:8E:B3:B6:51:A6:68:15:42:55:F4:94:8B:C9:B0:1B:D2"}}},"request":{"raw":"GET /address_wc/address.63.min.js?v=1 HTTP/1.1\r\nHost: api.webcake.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rs-shop-ph.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: openresty/1.25.3.2\r\ndate: Wed, 19 Aug 2026 22:31:32 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 416200\r\nservice-worker-allowed: /\r\naccept-ranges: bytes\r\ncache-control: public, max-age=31536000\r\ncontent-encoding: gzip\r\netag: \"62121DC\"\r\nvary: Accept-Encoding\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty:1.25.3.2","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1637074,"size_decoded":416516,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"f7487a9d359b7758bbd07dd084f06f48","sha1":"ff0fa3303a0c3070c9b14509e80296fc5f882ace","sha256":"e9c24a273244c94c396c0e88a6bee9f6929eb5f69a6db18f2197c340b904f121","sha512":"848d5def818493068ce3209c1756776e03ce210d5bfd5a8125583a1812b93c2608ab056204953f0439e68443808a246ff50bbe473fbaf7c689bdb0e0716aa7a0","ssdeep":"3072:jIZT/0x4eBOc9yDJx8seydL8GM6k9jg9XD58V:jIZT/0n9y9x8s/8X6kGNGV","tlshash":"e4254085ca3baeee99b41e017ce378bd61f02e6a94cd0a49f16c505706b33e137057b9","first_seen":"2026-02-01T08:20:39.72611Z","last_seen":"2026-08-19T22:32:23.613658Z","times_seen":15,"resource_available":false,"data":null}},"time_used":2588,"timings":{"blocked":-1,"dns":0,"connect":232,"send":0,"wait":230,"receive":491,"ssl":1634},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rs-shop-ph.com/track","fqdn":"rs-shop-ph.com","domain":"rs-shop-ph.com","tld":"com"},"ip":{"addr":"203.171.27.189","port":443,"asn":45903,"as":"CMC Telecom Infrastructure Company","country":"Vietnam","country_code":"VN"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://rs-shop-ph.com/thejoystoreblkxbash","date":"2026-08-19T22:31:32.254Z","timestamp":1787178692254,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rs-shop-ph.com","organization":""},"issuer":{"commonName":"ZeroSSL ECC DV SSL CA 2","organization":"ZeroSSL GmbH"},"validity":{"start":"Mon, 13 Jul 2026 00:00:00 GMT","end":"Sun, 11 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"94:AD:C6:A8:92:B5:65:CB:7E:C8:46:96:D0:B2:34:AC:82:A4:3A:56","sha256":"D7:84:7A:F5:79:31:63:69:0E:42:57:BA:A8:86:A6:20:15:46:B9:B1:6F:2F:C3:38:54:8F:0F:4A:5A:CD:1E:9C"}}},"request":{"raw":"POST /track HTTP/1.1\r\nHost: rs-shop-ph.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json;charset=utf-8\r\nContent-Length: 543\r\nOrigin: https://rs-shop-ph.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rs-shop-ph.com/thejoystoreblkxbash\r\nCookie: external_id=mqw1l171br1l2b1gcogew; _p_session_id=83c54cf3-6a8c-4c55-82d6-79f1f91bc9a8\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":543,"data":"{\"page_id\":\"78b27b7c-c0fb-4838-9434-1d4e4f860774\",\"type\":\"PageView\",\"data\":{\"eventID\":\"webcake.u1qos6fzxr\"},\"gtrack\":{\"id\":27099,\"name\":\"The Joy Store - NewBlkxBash\",\"settings\":{\"fb_tracking_code\":\"27740121415670460\",\"gg_ads_id\":\"\",\"gg_tag_manager_id\":\"\",\"gg_tracking_code\":\"\",\"tiktok_script\":\"\"}},\"ua\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\",\"origin\":\"https://rs-shop-ph.com\",\"pathname\":\"/thejoystoreblkxbash\",\"url\":\"https://rs-shop-ph.com/thejoystoreblkxbash\",\"external_id\":\"mqw1l171br1l2b1gcogew\"}"}},"response":{"raw":"HTTP/2 200 \r\nserver: openresty/1.27.1.1\r\ndate: Wed, 19 Aug 2026 22:31:32 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 42\r\ncache-control: max-age=0, private, must-revalidate\r\nx-request-id: GM1VjUTecQiuQEj4hC4h\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty:1.27.1.1","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":42,"size_decoded":329,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"672de82a2e20a9e5b84b67e40acb054d","sha1":"16a6ed99f109c4c835a5ec9853cc804800149c1d","sha256":"a623f062796cfce011fa3457a9edc020590545bd15bebf421271427da86c435f","sha512":"c13ea3cda18b39e89ee6e094af64508be40860e80bcf44a4afa864dc12dbc2024949c97a7d3a6ca625cf81dbad1e2e42e7d8a9a7fe6817db30da76e955d218a4","ssdeep":"","tlshash":"2d9004c7410110d1d414f70505351f5130451013d7044031c4dc334ccfd004cf3c3147","first_seen":"2025-07-02T06:31:57.757445Z","last_seen":"2026-08-19T22:32:23.556173Z","times_seen":16,"resource_available":false,"data":null}},"time_used":435,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":435,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-19","alert":"Phishing Block","trigger":"rs-shop-ph.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"rs-shop-ph.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"rs-shop-ph.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}}]}