{"report_id":"5894a739-72f7-41bb-8761-c8b1a028fbf2","version":6,"status":"done","tags":[],"date":"2026-03-25T21:54:12Z","url":{"schema":"http","addr":"affg.cc/yafa","fqdn":"affg.cc","domain":"affg.cc","tld":"cc"},"ip":{"addr":"172.67.163.111","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"yangfuinei.biz/register?code=jycICrYk","fqdn":"yangfuinei.biz","domain":"yangfuinei.biz","tld":"biz"},"title":"扬帆云","dom":{"size":197630,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (2159)","md5":"7a5b144121f6968960776f4c283e7319","sha1":"451285cec30b38563f81bd30c52508a60c8dafdd","sha256":"b1e2dc22032a1dbe2940fcacc7d31211bd79b4c55e120a19e4c8511ac31c7a1b","sha512":"9a53551ab2df9c1fa37f640a9c79a3f4854c47a64a9d96288c26cf7cad6a7789f12366d24ea38475db2831ba07d2de7defcc2895e99923d439737c4df8a2cbd9","ssdeep":"768:NjTU3TDbP7HVmQBmjsqHX4k27r1D82RfMBxJ/0+WSG:NU3TDbP7HVDBuHXM8wJZ7","tlshash":"ac1432166c731424681e72a363e7ab1f637872979f15f802f9df42d16f823b6762a304","dom_hash":"domhash206697479ddac5a844a00f95e91f3b7c","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"affg.cc/yafa","fqdn":"affg.cc","domain":"affg.cc","tld":"cc"},"ip":{"addr":"172.67.163.111","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-04-29T21:54:12Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":null},"summary":[{"fqdn":"zd.pao1.top","ip":{"addr":"51.79.169.129","port":443,"asn":16276,"as":"OVH SAS","country":"Singapore","country_code":"SG"},"domain_registered":"2024-04-17","domain_rank":0,"first_seen":"2026-03-25T21:54:15.005255Z","last_seen":"2026-03-25T21:54:15.005255Z","alert_count":0,"request_count":1,"received_data":90303,"sent_data":458,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"yangfuinei.biz","ip":{"addr":"103.73.220.71","port":443,"asn":0,"as":"","country":"India","country_code":"IN"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":26,"received_data":3265339,"sent_data":12071,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"103.73.220.72","ip":{"addr":"103.73.220.72","port":1000,"asn":0,"as":"","country":"India","country_code":"IN"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":2,"received_data":1215,"sent_data":1048,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"smartchat.pao1.top","ip":{"addr":"103.73.220.71","port":443,"asn":0,"as":"","country":"India","country_code":"IN"},"domain_registered":"2024-04-17","domain_rank":0,"first_seen":"2026-01-30T01:40:20.444989Z","last_seen":"2026-01-30T01:40:23.771659Z","alert_count":0,"request_count":4,"received_data":283644,"sent_data":2020,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"yawdg.net","ip":{"addr":"64.118.146.251","port":443,"asn":7029,"as":"WINDSTREAM","country":"United States","country_code":"US"},"domain_registered":"2026-01-05","domain_rank":0,"first_seen":"2026-01-05T13:17:07.025994Z","last_seen":"2026-01-05T13:17:07.025994Z","alert_count":0,"request_count":6,"received_data":54544,"sent_data":2926,"comment":"","tags":null,"fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Caddy","description":"","website":"https://caddyserver.com","common_platform_enumeration":"cpe:2.3:a:caddyserver:caddy:*:*:*:*:*:*:*:*","icon":"caddy.svg","categories":["Web servers"]}]},{"fqdn":"yawzz.net","ip":{"addr":"51.83.33.39","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"domain_registered":"2026-01-05","domain_rank":0,"first_seen":"2026-03-01T15:40:24.245795Z","last_seen":"2026-03-01T15:40:24.245796Z","alert_count":0,"request_count":4,"received_data":37080,"sent_data":1828,"comment":"","tags":null,"fingerprints":[{"name":"Caddy","description":"","website":"https://caddyserver.com","common_platform_enumeration":"cpe:2.3:a:caddyserver:caddy:*:*:*:*:*:*:*:*","icon":"caddy.svg","categories":["Web servers"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}]},{"fqdn":"affg.cc","ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-06-03","domain_rank":0,"first_seen":"2025-08-21T08:28:19.704979Z","last_seen":"2025-12-30T10:59:52.096567Z","alert_count":0,"request_count":1,"received_data":18051,"sent_data":480,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"yangfuinei.biz/js/q2yzloxs-1763765398047.js","fqdn":"yangfuinei.biz","domain":"yangfuinei.biz","tld":"biz"},"ip":{"addr":"103.73.220.71","port":443,"asn":0,"as":"","country":"India","country_code":"IN"},"introduction_type":"scriptElement","is_inline":false,"md5":"9b9488b812db596bc7a44ee42d29cca7","sha1":"fbe29e3b793ff05618046c49b74fe525541bc346","sha256":"96c70933d99541f037b713f1d211742a8be1163b9b87ed4a0e6051123cb26bb3","sha512":"f85fb12795fef7fac1c86f7d91548ab85282b352b34e04cd6666411aa4ab5b2254581faf42b95421b4efdad96ab8d9d032c5cf1361105b9a4753b4f2c2c9466b","ssdeep":"384:KEXnN+Y0QfwjZcRHcQcLOaoqoiaoCVDfiL525:KE3N+HQfw1w31TiDCVDfi9k","tlshash":"2952ea587bbdcb78eab318ddd44b100431561b5f812064c2b1feabac2a7dd919394b3d","size":13704,"data":"","first_seen":"2025-12-30T11:00:15.308442Z","last_seen":"2026-03-25T21:54:23.825975Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yawzz.net/register?code=jycICrYk","fqdn":"yawzz.net","domain":"yawzz.net","tld":"net"},"ip":{"addr":"51.83.33.39","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"introduction_type":"scriptElement","is_inline":true,"md5":"4c640ba53f582093a3886d458b772a38","sha1":"a191d7428af255feaa0df458953baef0692ff711","sha256":"11c4707e1b30161e05f9f7b41ddf5633389411cd249e8d57d388cc851d873b20","sha512":"2043a92caf4c1d5d2629547b667866fba081783f7cf38c6feaa14c73bcbc50425f1588bf1b32ea2c561c2210296c19f6fc66fba9d674b6a48bb21fa87f780775","ssdeep":"192:lX+TQRiJ1aGZRJ+eRB5fyqpwRsSv2ZsfuGFcL3frYXv3LRq92fDRuwBrIGdHISFX:R+T0iJNZhXwRskuGTVu2dhnQTc","tlshash":"6772a5de59e700e26e27707e4b6f610878b5496b2449c902bc4fa3504f90f19279abff","size":16298,"data":"","first_seen":"2026-03-25T21:54:23.833366Z","last_seen":"2026-03-25T21:54:23.833366Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yangfuinei.biz/register?code=jycICrYk","fqdn":"yangfuinei.biz","domain":"yangfuinei.biz","tld":"biz"},"ip":{"addr":"103.73.220.71","port":443,"asn":0,"as":"","country":"India","country_code":"IN"},"introduction_type":"scriptElement","is_inline":true,"md5":"01e56568bc867328f25812d0af7b8f96","sha1":"fb82991a4fccfa2221082f16d082e5b03111ef7a","sha256":"6bcebe274d3228539aaa24df8f526a7b294040d45dab7bb1adbae21d2a221578","sha512":"335e3af3b0d5407547edf7a0d365e261c0632d8241c08a48ae64ed55fc7ec94af7273087fb5930b7c9ffd214c9cf81c5d6b6388f6f4866d05952b03f3ae06d22","ssdeep":"","tlshash":"7511ef6e1de510250527217a0e2fe21473b2a51e854de8167ccc9c6c3f94d6371e2fc8","size":917,"data":"","first_seen":"2026-03-25T21:54:23.834257Z","last_seen":"2026-03-25T21:54:23.834257Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yangfuinei.biz/js/BsMBd6cE-1763765398141.js","fqdn":"yangfuinei.biz","domain":"yangfuinei.biz","tld":"biz"},"ip":{"addr":"103.73.220.71","port":443,"asn":0,"as":"","country":"India","country_code":"IN"},"introduction_type":"importedModule","is_inline":false,"md5":"bdb575bfcc4d44fd2c94646db6d1577f","sha1":"b01cbe88077d2d6e895957e08322d10eadd591e2","sha256":"26b4ef8c4c8584e8a1e81e5bcd31338902c511086ce51f27ee6d49dd9b130071","sha512":"06d00fb452d5d05d507fd5e3b9846a8501ed8492b3c8212fc3b3ee4cd6d1428644b4d42739eea18001098d2c358045bc4864d7ba3d2d7ba50f0e99dc8fcb1751","ssdeep":"","tlshash":"fff0d44e6f6dd2b9a572684c9bb7401e36491b37132045f0d0d61c71a36d419f87d157","size":490,"data":"","first_seen":"2025-12-30T11:00:15.286381Z","last_seen":"2026-03-25T21:54:23.827744Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yangfuinei.biz/js/DGOGOvCg-1763765398145.js","fqdn":"yangfuinei.biz","domain":"yangfuinei.biz","tld":"biz"},"ip":{"addr":"103.73.220.71","port":443,"asn":0,"as":"","country":"India","country_code":"IN"},"introduction_type":"importedModule","is_inline":false,"md5":"f67021a78515b194f2c9d3bef605ddbb","sha1":"4f973e8001bae698c9a55e5a6aff70697fded3e7","sha256":"d36beed2b5fb1a3ed7935b00dee2662387c9dd652344b8418841925294520c97","sha512":"a95a8251940527a61be06beac2d194aabba6e8b7b52e12e3b7927c7727444f40835f7a034910302895552bc3e0dfe84055da2f1f5f6e5c5b6249b68cc4503c2a","ssdeep":"192:CglGWJSrbdQEXu6VmF87mGF7wQudy+bcv:CgnJSrxJu6Vy87F7whMT","tlshash":"6332535eb8e25948492360e9b89e3430f111bb056046b070f6894e8dffdde07f1b5ba7","size":11493,"data":"","first_seen":"2025-12-30T11:00:15.263786Z","last_seen":"2026-03-25T21:54:23.835062Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yawdg.net/register?code=jycICrYk","fqdn":"yawdg.net","domain":"yawdg.net","tld":"net"},"ip":{"addr":"64.118.146.251","port":443,"asn":7029,"as":"WINDSTREAM","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"4c640ba53f582093a3886d458b772a38","sha1":"a191d7428af255feaa0df458953baef0692ff711","sha256":"11c4707e1b30161e05f9f7b41ddf5633389411cd249e8d57d388cc851d873b20","sha512":"2043a92caf4c1d5d2629547b667866fba081783f7cf38c6feaa14c73bcbc50425f1588bf1b32ea2c561c2210296c19f6fc66fba9d674b6a48bb21fa87f780775","ssdeep":"192:lX+TQRiJ1aGZRJ+eRB5fyqpwRsSv2ZsfuGFcL3frYXv3LRq92fDRuwBrIGdHISFX:R+T0iJNZhXwRskuGTVu2dhnQTc","tlshash":"6772a5de59e700e26e27707e4b6f610878b5496b2449c902bc4fa3504f90f19279abff","size":16298,"data":"","first_seen":"2026-03-25T21:54:23.833366Z","last_seen":"2026-03-25T21:54:23.833366Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yangfuinei.biz/register?code=jycICrYk","fqdn":"yangfuinei.biz","domain":"yangfuinei.biz","tld":"biz"},"ip":{"addr":"103.73.220.71","port":443,"asn":0,"as":"","country":"India","country_code":"IN"},"introduction_type":"scriptElement","is_inline":true,"md5":"fa8913a876171b11bd72aae644d20536","sha1":"23c3c51d242c79e94da94cba003325c822a4f7a1","sha256":"133cda257a639c9f61440195aebbaa404cce6364bb2105716ba784aa566bd1f3","sha512":"dcab8dc718a7fd7df29e6b6379a21a96016a1a352047e3fd25411be9d4fa5a0a4faf16a0a31b9986ae9c601ee87c84c8c394ddc2343b1a0048a7ad42704a4eaf","ssdeep":"96:pzRai74gg3GBT3jeFpn4rJ9Z0l32m2QxmQ8mimy41Tm73Kfm1MOQqHDqN:pAi742BjO4rPjQFSDuN","tlshash":"c29165ed64fa727166536038076f101c712c5847e984ce1a7d6ea20c6f8cbbc86b7aa5","size":4230,"data":"","first_seen":"2026-01-05T13:17:35.51039Z","last_seen":"2026-03-25T21:54:23.83613Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yangfuinei.biz/js/60ZSTeR0-1763765397967.js","fqdn":"yangfuinei.biz","domain":"yangfuinei.biz","tld":"biz"},"ip":{"addr":"103.73.220.71","port":443,"asn":0,"as":"","country":"India","country_code":"IN"},"introduction_type":"importedModule","is_inline":false,"md5":"33a6cc3290a8d4b88d683d61beea3b1e","sha1":"051d79fa3c4858a5a146238aefb0a7f95c9132f7","sha256":"a4afda16e5ef0a32a8d3f43463b4bbc644a7a6c9b0667adf509b05bca08bd767","sha512":"2fcc5acf250e1167ca550085dc37b306e853756527a9f565be9cd732fe1a35279a73611bcc24392bdab9b0f4b53316fac0960a0c6c3e04b8e9e295fb0f613a56","ssdeep":"1536:b3hTyNWOawHa0n5cpbCTxvaaGRG6MulUL4jusyejZNL7vhdhtIX1ay4AiG:bxTyNWONHa0n5s+TNnGRVMeis5XldAiG","tlshash":"50e328e93282b07253fa15e6407b4116f3391915384ec8d4f06ea9db3c3785a92bbf6d","size":145414,"data":"","first_seen":"2025-10-09T21:46:44.39396Z","last_seen":"2026-04-26T23:02:34.08871Z","times_seen":12,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yangfuinei.biz/js/DMBOBHbD-1763765398047.js","fqdn":"yangfuinei.biz","domain":"yangfuinei.biz","tld":"biz"},"ip":{"addr":"103.73.220.71","port":443,"asn":0,"as":"","country":"India","country_code":"IN"},"introduction_type":"scriptElement","is_inline":false,"md5":"64d15e9c498ce0653e7c5b42185d0a1a","sha1":"0c3693723bd61d0d6487432d79cfda8a36ef30a4","sha256":"b6324b96a0ba9540d199cab3c64ae3930f8980dd14268cba85ac3c20873b407a","sha512":"6222f20e21059e9bb3656f46b87db07a11b04e324fe87e6658ec67cd8f67b4af14cbec776c3d98a104be7a564406e2fefe7aef2d74c6def9515e0c7cdb8c63c4","ssdeep":"","tlshash":"73e0cdde585683f5740564a5eaa7115252142dfe37bc34d0518a97255331592e01fa12","size":308,"data":"","first_seen":"2025-12-30T11:00:15.288548Z","last_seen":"2026-03-25T21:54:23.826805Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yangfuinei.biz/js/DgBwhFlo-1763765398145.js","fqdn":"yangfuinei.biz","domain":"yangfuinei.biz","tld":"biz"},"ip":{"addr":"103.73.220.71","port":443,"asn":0,"as":"","country":"India","country_code":"IN"},"introduction_type":"importedModule","is_inline":false,"md5":"0362932d68da32c27609de59203c0ac0","sha1":"40dcccc8e9b38b1d721d89bf61eb05227ed7c491","sha256":"65e41b6c1444a66e826823c0a2a7fbbecd318259acce4fcf9ef5a304e03bb379","sha512":"0c04e5f93534b4ece50328fbdc36de0ea987549a9010b98f26b182951f3e69e120c95d418ee5515128cbb5d83c3987f3d6252f91e6e5fd20edece27fb8359549","ssdeep":"768:Riq2nu50YvPvnnzlGNUfOKPaMWgAbbxIwtt/kFkuazc5XSfUHGh78lF8dh5B/qML:GFfpw1cBivuF3Ui","tlshash":"91d209d576d1f06253aa21f140bb0405f33a9519744e84e8f128aceb3cb614a97b7fbd","size":29571,"data":"","first_seen":"2025-08-14T22:09:07.206772Z","last_seen":"2026-06-02T01:57:29.38665Z","times_seen":16,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yangfuinei.biz/register?code=jycICrYk","fqdn":"yangfuinei.biz","domain":"yangfuinei.biz","tld":"biz"},"ip":{"addr":"103.73.220.71","port":443,"asn":0,"as":"","country":"India","country_code":"IN"},"introduction_type":"eventHandler","is_inline":false,"md5":"ca47538621e85e9f977b5723181cbbc1","sha1":"5d4b2a75fb973d3d0c41c5f450704167f6d0b352","sha256":"a7041db96c57dc29bb94b6d0980a2cee7ef744b3f842bb020c57a39ac05d67bf","sha512":"3e557940e46be32dc3cbf7bef5329367fe5ae09154979576146e83d2cbb6fe023727976b989d24f27afdcacef317875bb349a6384c110cc4bee2d561aaa1a345","ssdeep":"","tlshash":"2f700082280a82080288802000a00b22202a200c0ac0a20c8c2000a0820a8a820300b0","size":25,"data":"","first_seen":"2023-04-11T08:24:11Z","last_seen":"2026-06-02T15:26:13.606264Z","times_seen":1870,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"smartchat.pao1.top/widget.js","fqdn":"smartchat.pao1.top","domain":"pao1.top","tld":"top"},"ip":{"addr":"103.73.220.71","port":443,"asn":0,"as":"","country":"India","country_code":"IN"},"introduction_type":"scriptElement","is_inline":false,"md5":"82cf05ec9b5f5d70078557a2c9a67e2b","sha1":"3aa231a816b59391514cf419a6bb252404990274","sha256":"a5b4251fd6e75e8bc6c7cb599f00527adb1d057eee823ee1d5eeb26e3a412009","sha512":"f847faab2a74f65b7ad724c72af0c9b2c46543c25b42704593d144af2a09ef8b9ab39b7df6a3682e925c4f1601a1da4ae30da7d29fd87830ca72f07f1df91cdc","ssdeep":"1536:4NYYDBuHXmlp//YlIIq9d3JV0x72hyN9QMQgwtaKD6amNMXDBdpwniG3yC4f3g4v:WFl/Lc2hyZwy47pwniGJY6V2","tlshash":"1d54097a75f704151923a07b67db624a3220b003a00ace24bfdc5ba56fc1db955f3bda","size":280609,"data":"","first_seen":"2026-03-25T21:54:23.831151Z","last_seen":"2026-03-25T21:54:23.831151Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yangfuinei.biz/register?code=jycICrYk","fqdn":"yangfuinei.biz","domain":"yangfuinei.biz","tld":"biz"},"ip":{"addr":"103.73.220.71","port":443,"asn":0,"as":"","country":"India","country_code":"IN"},"introduction_type":"scriptElement","is_inline":true,"md5":"edc69caa5edd8dfbe99f1ee82765910f","sha1":"9f2ab4630e6453d1abbf708a37b275f43c330562","sha256":"99bd96c79f05ee72ce7d250d39ac849f950c789c83a7c74923a8e2d3f06b2a3d","sha512":"3a1b106a6e53817140b74726ea350d52f2939d2b4affdec07adda32a6e05d66d5637b5176bd53c66af1f34196d04165717cda01be195b5ac7e07782f15c8d1b4","ssdeep":"","tlshash":"fb41bd6bb6b364b38963506a533f7768303580134482da703dbe8fd84fd49662752ad6","size":1918,"data":"","first_seen":"2026-01-05T13:17:35.511845Z","last_seen":"2026-03-25T21:54:23.837427Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yangfuinei.biz/js/Bj7lXNfZ-1763765398141.js","fqdn":"yangfuinei.biz","domain":"yangfuinei.biz","tld":"biz"},"ip":{"addr":"103.73.220.71","port":443,"asn":0,"as":"","country":"India","country_code":"IN"},"introduction_type":"importedModule","is_inline":false,"md5":"ce2c165ca4b727d80f0dd86a17323b17","sha1":"984be00f1738a3481fd5e8b771a839b657c44712","sha256":"73ddaab6c04a99413e09902b47aaa871fbdd7f58d34db39204ebf364ec95b8ed","sha512":"034e19472a19bc6be27ab29585598651b2ffeb5128ce26b1451ba127a0e6b9bd266a8a2f3b02e4f33b47846a0fcfae5e12f85e9b3757417bdbae630b29c95e51","ssdeep":"","tlshash":"7af023d8000bcafdf4136eece645001513310eba230980e1a0cf4028db13120b32f72b","size":461,"data":"","first_seen":"2025-12-30T11:00:15.280834Z","last_seen":"2026-03-25T21:54:23.816363Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yangfuinei.biz/mala-pro.js","fqdn":"yangfuinei.biz","domain":"yangfuinei.biz","tld":"biz"},"ip":{"addr":"103.73.220.71","port":443,"asn":0,"as":"","country":"India","country_code":"IN"},"introduction_type":"scriptElement","is_inline":false,"md5":"3239b9b21f429337af816cd756dfa16d","sha1":"bdff7be86a5b761ca54819f9f1c96f7962efaa11","sha256":"46c4a75be9fc7b45d5b1fed7bd88854b5f1669012f1087e8340e33989bf77d44","sha512":"d3d5e4e5b98c96f5b68694307e55dace86db83c3e14e20c177742fff3d86b4ec9d663f62b550a20ee5fa9e510985f4d01c7b64c3085425201734816c42defa96","ssdeep":"96:+0FQS3v+Wzn2zJq3tth903CT8PHeAKbw+WTt5sKruy:+UrfF+Jihyyf0+yC1y","tlshash":"78b1d7c76a70a5bd4c6600e01b9b3884a716229fcc65e43af6b746087f0e82f04b5ed7","size":5207,"data":"","first_seen":"2026-01-05T13:17:35.473827Z","last_seen":"2026-03-25T21:54:23.824584Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yangfuinei.biz/js/CTZo_vmD-1763765397966.js","fqdn":"yangfuinei.biz","domain":"yangfuinei.biz","tld":"biz"},"ip":{"addr":"103.73.220.71","port":443,"asn":0,"as":"","country":"India","country_code":"IN"},"introduction_type":"scriptElement","is_inline":false,"md5":"518f07de63d6bcfcaf333f922493f75e","sha1":"cd1eb3d2a3708d09be07a2a6e06e33c96c002c45","sha256":"b7e2ad0f583df7b6d165b024afdd9577fecb5bbb895645f97dc26b434a745454","sha512":"b48705d46e582d0fe94f0974fa99b0bda70cd168bd3a41e747c19d6e258e1f70ad5e07bd1f787be798cc3c65234662f254c9636a6c3e731dde02fb93948f83d3","ssdeep":"24576:2Qm42ZCwRa6sGxi/glX5PTBhgOFRfNH/4Ec9/j+dwJNovwXWkM1XApmIuIXp:2Qm42ZCwRa6sGxi/glX5PTBhgOFRfNH2","tlshash":"4a255c45b285383287b7559dd4af1206a2356f49584cc4f8f4bed8e63899e4833ebf38","size":1046751,"data":"","first_seen":"2025-12-30T11:00:15.290479Z","last_seen":"2026-03-25T21:54:23.822387Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"yangfuinei.biz/assets/css/BLNqON5M-1763765398356.css","fqdn":"yangfuinei.biz","domain":"yangfuinei.biz","tld":"biz"},"ip":{"addr":"103.73.220.71","port":443,"asn":0,"as":"","country":"India","country_code":"IN"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://yangfuinei.biz/register?code=jycICrYk","date":"2026-03-25T21:53:54.808Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yangfuinei.biz","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 31 Jan 2026 06:49:57 GMT","end":"Fri, 01 May 2026 06:49:56 GMT"},"fingerprint":{"sha1":"92:D1:83:CD:64:10:8D:2E:BB:4C:03:7E:41:89:D8:40:8E:11:A3:8D","sha256":"FC:09:F0:D9:70:0D:59:E1:E6:DC:80:2B:4C:A1:3C:84:FA:DB:EC:F1:24:B1:03:D0:6F:B0:4D:99:A3:6C:E4:97"}}},"request":{"raw":"GET /assets/css/BLNqON5M-1763765398356.css HTTP/1.1\r\nHost: yangfuinei.biz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://yangfuinei.biz/register?code=jycICrYk\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nalt-svc: h3=\":443\"; ma=2592000\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\ncontent-type: text/css\r\ndate: Wed, 25 Mar 2026 21:53:54 GMT\r\netag: \"6920eddc-20c-gzip\"\r\nexpires: Thu, 26 Mar 2026 09:53:54 GMT\r\nlast-modified: Fri, 21 Nov 2025 22:55:24 GMT\r\nserver: nginx\r\nvary: Accept-Encoding\r\nvia: 1.1 Caddy\r\ncontent-length: 297\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":524,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (523)","md5":"9df9fc72bbfaa8738580ec4f8f1300ac","sha1":"7243f46291d0550ae36f052bb57fe3c09dd73e49","sha256":"2e73262017fcf932324377982e5a3c3b606a1b391c9b90143d18aae8f585d2a2","sha512":"d266b39f0ce1c2a491eed8d1beb2b54dca9318415533944612e693b7afe4bc6687b5149c5d6909f7d3e830c0a3ecfe6b5c0a5111bedce379e361aa2311be9fd2","ssdeep":"","tlshash":"53f02b640d15e89d8d3fe312b4c7654805b6ad877b6205ae0e9d5c14c68b3542572b44","first_seen":"2025-04-13T05:46:49.455481Z","last_seen":"2026-06-02T01:57:29.385592Z","times_seen":21,"resource_available":false,"data":null}},"time_used":249,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":248,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"103.73.220.72:1000/api/v1/guest/comm/config","fqdn":"103.73.220.72","domain":"103.73.220.72","tld":""},"ip":{"addr":"103.73.220.72","port":1000,"asn":0,"as":"","country":"India","country_code":"IN"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://yangfuinei.biz/register?code=jycICrYk","date":"2026-03-25T21:53:55.751Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"103.73.220.72","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 21 Nov 2025 00:00:00 GMT","end":"Mon, 21 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E0:E1:A2:ED:6B:33:B1:67:F3:9F:72:D2:F5:DC:6B:3C:77:39:D1:81","sha256":"FD:E5:36:FC:D4:B4:20:11:02:F4:03:97:A9:43:34:45:80:6C:3C:70:3E:16:C9:08:6A:A7:30:B5:8D:12:9D:58"}}},"request":{"raw":"OPTIONS /api/v1/guest/comm/config HTTP/1.1\r\nHost: 103.73.220.72:1000\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: theme-ua\r\nReferer: https://yangfuinei.biz/\r\nOrigin: https://yangfuinei.biz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 25 Mar 2026 21:01:38 GMT\r\ncontent-length: 0\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: *\r\naccess-control-allow-origin: *\r\ncache-control: no-cache, no-cache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-02T18:08:06.981696Z","times_seen":16047564,"resource_available":true,"data":null}},"time_used":1691,"timings":{"blocked":688,"dns":0,"connect":218,"send":0,"wait":310,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"smartchat.pao1.top/api/smartchat/site-config?site_key=sk_8enxj15s4c6O4UEOx29mJBN6kAvr5SL2","fqdn":"smartchat.pao1.top","domain":"pao1.top","tld":"top"},"ip":{"addr":"103.73.220.71","port":443,"asn":0,"as":"","country":"India","country_code":"IN"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://yangfuinei.biz/register?code=jycICrYk","date":"2026-03-25T21:53:55.821Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"smartchat.pao1.top","organization":""},"issuer":{"commonName":"ZeroSSL ECC Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Tue, 13 Jan 2026 00:00:00 GMT","end":"Mon, 13 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"0E:F1:3D:EC:D0:1A:EC:63:F3:F5:13:1D:52:ED:F8:CE:0B:57:ED:DB","sha256":"72:1C:E9:77:80:F1:71:F5:EC:A7:A1:5A:97:D7:35:4F:D8:64:A7:B2:56:AF:AD:17:8B:0C:45:45:F0:D0:C4:70"}}},"request":{"raw":"GET /api/smartchat/site-config?site_key=sk_8enxj15s4c6O4UEOx29mJBN6kAvr5SL2 HTTP/1.1\r\nHost: smartchat.pao1.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://yangfuinei.biz/\r\nOrigin: https://yangfuinei.biz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\nalt-svc: h3=\":443\"; ma=2592000\r\ncache-control: no-cache, private\r\ncontent-encoding: gzip\r\ncontent-type: application/json\r\ndate: Wed, 25 Mar 2026 21:53:56 GMT\r\nserver: nginx\r\nstrict-transport-security: max-age=31536000\r\nvary: Accept-Encoding\r\nvia: 1.1 Caddy\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1217,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"bd91281ed8a9477fbf177c2f1c5ac939","sha1":"f7aec8ff8b1fc3cfc1f3a7fa0f86e17b54f631be","sha256":"6a841619fc4ff2aa3cc86f4fca4ef88a68c1070b776a8317e2e1fd99fe5cfdac","sha512":"1c60393117d490bdfeae421c3c520d394de9ab7505eb1782f40a9e78a2431c108ba8595005d317b41e78d91a154d3915e8f097de78b4af20c609bb7d8c4c2bae","ssdeep":"","tlshash":"13210fede781462668e812c4ed443ffdced03b105461c72bd4fe5c2935245ae2152e99","first_seen":"2026-03-25T21:54:23.810587Z","last_seen":"2026-03-25T21:54:23.810587Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1209,"timings":{"blocked":477,"dns":1,"connect":227,"send":0,"wait":255,"receive":0,"ssl":245},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yangfuinei.biz/js/DGOGOvCg-1763765398145.js","fqdn":"yangfuinei.biz","domain":"yangfuinei.biz","tld":"biz"},"ip":{"addr":"103.73.220.71","port":443,"asn":0,"as":"","country":"India","country_code":"IN"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://yangfuinei.biz/register?code=jycICrYk","date":"2026-03-25T21:53:54.824Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yangfuinei.biz","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 31 Jan 2026 06:49:57 GMT","end":"Fri, 01 May 2026 06:49:56 GMT"},"fingerprint":{"sha1":"92:D1:83:CD:64:10:8D:2E:BB:4C:03:7E:41:89:D8:40:8E:11:A3:8D","sha256":"FC:09:F0:D9:70:0D:59:E1:E6:DC:80:2B:4C:A1:3C:84:FA:DB:EC:F1:24:B1:03:D0:6F:B0:4D:99:A3:6C:E4:97"}}},"request":{"raw":"GET /js/DGOGOvCg-1763765398145.js HTTP/1.1\r\nHost: yangfuinei.biz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://yangfuinei.biz/register?code=jycICrYk\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nalt-svc: h3=\":443\"; ma=2592000\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\ncontent-type: application/javascript\r\ndate: Wed, 25 Mar 2026 21:53:54 GMT\r\netag: \"6920edd5-2cf3-gzip\"\r\nexpires: Thu, 26 Mar 2026 09:53:54 GMT\r\nlast-modified: Fri, 21 Nov 2025 22:55:17 GMT\r\nserver: nginx\r\nvary: Accept-Encoding\r\nvia: 1.1 Caddy\r\ncontent-length: 2913\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":11507,"size_decoded":0,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text, with very long lines (10856), with LF, NEL line terminators","md5":"dc49585ddb1028f248c00ef6518001b7","sha1":"d8a26a85310a23cbb89bc64168c570f7cadc6f92","sha256":"e0edb5ec6f0b0957e7d457938d4c25183d10f1596b68dd2036fdd40de9fd6cd3","sha512":"e09317cf8e4e69de282d1a0bb3784d9391ac3764093bc71e964edaa3d245cd701002de1bc5bc890c28568cf3916522ed17df7e21816573322373f231899e39be","ssdeep":"192:CglGWJSrbdQEXu6VmF87mGF7wOCUy+CcU:CgnJSrxJu6Vy87F7wOUR","tlshash":"a832644eb8e35a484a2360e9b89d3430f111bb45604ab160e7994ec9ffdce07f175ba7","first_seen":"2026-03-25T21:54:23.811461Z","last_seen":"2026-03-25T21:54:23.811461Z","times_seen":1,"resource_available":false,"data":null}},"time_used":277,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":277,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yawdg.net/api/jump-config","fqdn":"yawdg.net","domain":"yawdg.net","tld":"net"},"ip":{"addr":"64.118.146.251","port":443,"asn":7029,"as":"WINDSTREAM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://yawdg.net/register?code=jycICrYk","date":"2026-03-25T21:53:49.422Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yawdg.net","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 05 Jan 2026 08:19:29 GMT","end":"Sun, 05 Apr 2026 08:19:28 GMT"},"fingerprint":{"sha1":"06:7C:CF:3B:AB:65:4C:21:BA:7F:9B:D3:7C:2A:DD:D7:56:41:86:CD","sha256":"59:6B:28:17:3F:1F:9D:88:48:A0:95:BE:A0:BC:8C:DB:E1:D5:58:4D:A6:86:35:F9:B9:C4:1E:2E:10:C9:89:68"}}},"request":{"raw":"GET /api/jump-config HTTP/1.1\r\nHost: yawdg.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://yawdg.net/register?code=jycICrYk\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/json; charset=utf-8\r\ndate: Wed, 25 Mar 2026 21:53:49 GMT\r\netag: W/\"35b-ZA+vSoE3PZxIDbZif2QAAex4o/A\"\r\nvia: 1.1 Caddy\r\nx-cache: BYPASS\r\nx-powered-by: Express\r\ncontent-length: 859\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":859,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"d5e5b1536f42691d18df8348f2264695","sha1":"640faf4a81373d9c480db6627f640001ec78a3f0","sha256":"7729bdf0ac1a8102f5c06182a54318d3686138bc858c23ab344bf47effc1f157","sha512":"7b8a79fb36b90c3ef43ed5754043cd020e41258d0d5d75526f2cf1fce9b0a5ef9e60b12298a20db102cc8c4cf1af363cdaf0d862565a9c9b979602a255eb011b","ssdeep":"","tlshash":"d0112f5e040dcdb5c2e80e48688b2b81edb08477a6507858bd99cd45cab7a353163a5b","first_seen":"2026-03-25T21:54:23.812312Z","last_seen":"2026-03-25T21:54:23.812312Z","times_seen":1,"resource_available":false,"data":null}},"time_used":342,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":341,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yawdg.net/api/go","fqdn":"yawdg.net","domain":"yawdg.net","tld":"net"},"ip":{"addr":"64.118.146.251","port":443,"asn":7029,"as":"WINDSTREAM","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-25T21:53:49.801Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yawdg.net","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 05 Jan 2026 08:19:29 GMT","end":"Sun, 05 Apr 2026 08:19:28 GMT"},"fingerprint":{"sha1":"06:7C:CF:3B:AB:65:4C:21:BA:7F:9B:D3:7C:2A:DD:D7:56:41:86:CD","sha256":"59:6B:28:17:3F:1F:9D:88:48:A0:95:BE:A0:BC:8C:DB:E1:D5:58:4D:A6:86:35:F9:B9:C4:1E:2E:10:C9:89:68"}}},"request":{"raw":"POST /api/go HTTP/1.1\r\nHost: yawdg.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded\r\nContent-Length: 60\r\nOrigin: https://yawdg.net\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://yawdg.net/register?code=jycICrYk\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":60,"data":"r=\u0026t=mn6kz2s1\u0026s=MTI4MHgxMDI0\u0026p=%2Fregister%3Fcode%3DjycICrYk"}},"response":{"raw":"HTTP/2 302 Found\r\ncontent-type: text/html; charset=utf-8\r\ndate: Wed, 25 Mar 2026 21:53:49 GMT\r\nlocation: https://yawzz.net/register?code=jycICrYk\r\nvary: Accept\r\nvia: 1.1 Caddy\r\nx-cache: BYPASS\r\nx-powered-by: Express\r\ncontent-length: 69\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":17409,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-02T18:08:06.981696Z","times_seen":16047564,"resource_available":true,"data":null}},"time_used":338,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":338,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yawzz.net/favicon.ico","fqdn":"yawzz.net","domain":"yawzz.net","tld":"net"},"ip":{"addr":"51.83.33.39","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://yawzz.net/register?code=jycICrYk","date":"2026-03-25T21:53:50.732Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yawzz.net","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 10 Jan 2026 17:07:42 GMT","end":"Fri, 10 Apr 2026 17:07:41 GMT"},"fingerprint":{"sha1":"5B:4A:98:77:D4:F5:9E:02:B7:92:AF:EE:AD:A8:0D:89:77:8F:9D:D8","sha256":"E7:F2:88:01:92:B2:9C:0E:36:11:97:13:7E:BD:E2:C9:50:FC:17:C8:94:7B:16:46:E0:0B:8E:38:B0:D3:E2:6F"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: yawzz.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://yawzz.net/register?code=jycICrYk\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncontent-type: text/html; charset=utf-8\r\ndate: Wed, 25 Mar 2026 21:42:08 GMT\r\netag: \"dh0m1b7l3wv5dfl\"\r\nlast-modified: Wed, 25 Mar 2026 21:42:08 GMT\r\nserver: Caddy\r\nvary: Accept-Encoding\r\nx-cache: HIT, policy, disk\r\ncontent-length: 17409\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Caddy","description":"","website":"https://caddyserver.com","common_platform_enumeration":"cpe:2.3:a:caddyserver:caddy:*:*:*:*:*:*:*:*","icon":"caddy.svg","categories":["Web servers"]}],"data":{"size":17409,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"c3f28757f38021d4ac3efb2c260335b5","sha1":"28669735ffd0648f016cf57f8a82a72cb36f10fc","sha256":"726fcc40e977adbec0fbb7067d16c47d6fe1d90d508177ef87401fa14a1fb1d2","sha512":"f4dd10fd871b01ba93d9b3771804c628dfc41e316e32085bbca42d3de79a96b4dca2dcd5cba65bf0c495d4fa49585983140804229f2669225d4a0fdfe138b8c2","ssdeep":"192:erf0X+TQRiJ1aGZRJ+eRB5fyqpwRsSv2ZsfuGFcL3frYXv3LRq92fDRuwBrIGdHw:erY+T0iJNZhXwRskuGTVu2dhnQTl","tlshash":"9e72b6de59e700926e23b07a5b6f610878b5891b244ac901bd4fb3504f90f1917dabff","first_seen":"2026-03-25T21:54:23.81331Z","last_seen":"2026-03-25T21:54:23.81331Z","times_seen":1,"resource_available":false,"data":null}},"time_used":47,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":33,"receive":14,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yawzz.net/api/jump-config","fqdn":"yawzz.net","domain":"yawzz.net","tld":"net"},"ip":{"addr":"51.83.33.39","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://yawzz.net/register?code=jycICrYk","date":"2026-03-25T21:53:50.735Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yawzz.net","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 10 Jan 2026 17:07:42 GMT","end":"Fri, 10 Apr 2026 17:07:41 GMT"},"fingerprint":{"sha1":"5B:4A:98:77:D4:F5:9E:02:B7:92:AF:EE:AD:A8:0D:89:77:8F:9D:D8","sha256":"E7:F2:88:01:92:B2:9C:0E:36:11:97:13:7E:BD:E2:C9:50:FC:17:C8:94:7B:16:46:E0:0B:8E:38:B0:D3:E2:6F"}}},"request":{"raw":"GET /api/jump-config HTTP/1.1\r\nHost: yawzz.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://yawzz.net/register?code=jycICrYk\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/json; charset=utf-8\r\ndate: Wed, 25 Mar 2026 21:53:50 GMT\r\netag: W/\"3ea-XbszkOXWsPPClLc1ag0TaSna+j0\"\r\nvia: 1.1 Caddy\r\nx-cache: BYPASS\r\nx-powered-by: Express\r\ncontent-length: 1002\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":1002,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"03ce20644e0fc08c88cf6114dae29c32","sha1":"5dbb3390e5d6b0f3c294b7356a0d136929dafa3d","sha256":"151ba141fe3d9f0e026a0398bec5975120dfec01e173f49be5493f2e48e81cb3","sha512":"21e01895a40dd2b480610fa89af71a4f4a8a7bb600cb288bd37b5b2af9e7082009ec6d61168cbba36c22b20c041ead5338987f625b318975141495c86eaddfee","ssdeep":"","tlshash":"8d11029b0909cd74c3e44ed8585e3b85da30406bb6a0b89dfb99cd46c6a7574302355b","first_seen":"2026-03-25T21:54:23.814214Z","last_seen":"2026-03-25T21:54:23.814214Z","times_seen":1,"resource_available":false,"data":null}},"time_used":185,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":185,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yangfuinei.biz/assets/css/C4l9JPhj-1763765398349.css","fqdn":"yangfuinei.biz","domain":"yangfuinei.biz","tld":"biz"},"ip":{"addr":"103.73.220.71","port":443,"asn":0,"as":"","country":"India","country_code":"IN"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://yangfuinei.biz/register?code=jycICrYk","date":"2026-03-25T21:53:53.077Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yangfuinei.biz","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 31 Jan 2026 06:49:57 GMT","end":"Fri, 01 May 2026 06:49:56 GMT"},"fingerprint":{"sha1":"92:D1:83:CD:64:10:8D:2E:BB:4C:03:7E:41:89:D8:40:8E:11:A3:8D","sha256":"FC:09:F0:D9:70:0D:59:E1:E6:DC:80:2B:4C:A1:3C:84:FA:DB:EC:F1:24:B1:03:D0:6F:B0:4D:99:A3:6C:E4:97"}}},"request":{"raw":"GET /assets/css/C4l9JPhj-1763765398349.css HTTP/1.1\r\nHost: yangfuinei.biz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://yangfuinei.biz/register?code=jycICrYk\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nalt-svc: h3=\":443\"; ma=2592000\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\ncontent-type: text/css\r\ndate: Wed, 25 Mar 2026 21:53:53 GMT\r\netag: \"6920eddc-be80b-gzip\"\r\nexpires: Thu, 26 Mar 2026 09:53:53 GMT\r\nlast-modified: Fri, 21 Nov 2025 22:55:24 GMT\r\nserver: nginx\r\nvary: Accept-Encoding\r\nvia: 1.1 Caddy\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":780299,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (61165), with no line terminators","md5":"16c340e78cb5cbf392b39a56610a723b","sha1":"4913b79e473fde8d913b38b5d2f5293004b13bfe","sha256":"4bd1c92914592ca5c553e125b4b3d6e517f6b09db808fda0a0c487d01b3ba122","sha512":"f86e86a0b9cc45ee964ab3b7b0b7d4b1f47d308bcf1f8faab37e6235a6261f698d0d69cbc2b6e4e05c81c22206b7b07a0b31dfca7115e34ed909ac9e9f816a1d","ssdeep":"12288:B8ZL4Y62UO4W+MhYHIY6pIO1zufoZsPfPP+H:B8ZL4Y62UO4W+MhYHIYhQZsPfPmH","tlshash":"21f4c9e2f18800d6a727d952d380f7bda52ff5b1c6094c56fa4b271d4ac32a615c2f2e","first_seen":"2026-03-25T21:54:23.815062Z","last_seen":"2026-03-25T21:54:23.815062Z","times_seen":1,"resource_available":false,"data":null}},"time_used":352,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":352,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yangfuinei.biz/js/60ZSTeR0-1763765397967.js","fqdn":"yangfuinei.biz","domain":"yangfuinei.biz","tld":"biz"},"ip":{"addr":"103.73.220.71","port":443,"asn":0,"as":"","country":"India","country_code":"IN"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://yangfuinei.biz/register?code=jycICrYk","date":"2026-03-25T21:53:54.365Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yangfuinei.biz","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 31 Jan 2026 06:49:57 GMT","end":"Fri, 01 May 2026 06:49:56 GMT"},"fingerprint":{"sha1":"92:D1:83:CD:64:10:8D:2E:BB:4C:03:7E:41:89:D8:40:8E:11:A3:8D","sha256":"FC:09:F0:D9:70:0D:59:E1:E6:DC:80:2B:4C:A1:3C:84:FA:DB:EC:F1:24:B1:03:D0:6F:B0:4D:99:A3:6C:E4:97"}}},"request":{"raw":"GET /js/60ZSTeR0-1763765397967.js HTTP/1.1\r\nHost: yangfuinei.biz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://yangfuinei.biz/js/CTZo_vmD-1763765397966.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nalt-svc: h3=\":443\"; ma=2592000\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\ncontent-type: application/javascript\r\ndate: Wed, 25 Mar 2026 21:53:54 GMT\r\netag: \"6920edd3-23806-gzip\"\r\nexpires: Thu, 26 Mar 2026 09:53:54 GMT\r\nlast-modified: Fri, 21 Nov 2025 22:55:15 GMT\r\nserver: nginx\r\nvary: Accept-Encoding\r\nvia: 1.1 Caddy\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":145414,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"33a6cc3290a8d4b88d683d61beea3b1e","sha1":"051d79fa3c4858a5a146238aefb0a7f95c9132f7","sha256":"a4afda16e5ef0a32a8d3f43463b4bbc644a7a6c9b0667adf509b05bca08bd767","sha512":"2fcc5acf250e1167ca550085dc37b306e853756527a9f565be9cd732fe1a35279a73611bcc24392bdab9b0f4b53316fac0960a0c6c3e04b8e9e295fb0f613a56","ssdeep":"1536:b3hTyNWOawHa0n5cpbCTxvaaGRG6MulUL4jusyejZNL7vhdhtIX1ay4AiG:bxTyNWONHa0n5s+TNnGRVMeis5XldAiG","tlshash":"50e328e93282b07253fa15e6407b4116f3391915384ec8d4f06ea9db3c3785a92bbf6d","first_seen":"2025-10-09T21:46:44.39396Z","last_seen":"2026-04-26T23:02:34.08871Z","times_seen":12,"resource_available":true,"data":null}},"time_used":258,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":258,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yangfuinei.biz/js/Bj7lXNfZ-1763765398141.js","fqdn":"yangfuinei.biz","domain":"yangfuinei.biz","tld":"biz"},"ip":{"addr":"103.73.220.71","port":443,"asn":0,"as":"","country":"India","country_code":"IN"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://yangfuinei.biz/register?code=jycICrYk","date":"2026-03-25T21:53:55.318Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yangfuinei.biz","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 31 Jan 2026 06:49:57 GMT","end":"Fri, 01 May 2026 06:49:56 GMT"},"fingerprint":{"sha1":"92:D1:83:CD:64:10:8D:2E:BB:4C:03:7E:41:89:D8:40:8E:11:A3:8D","sha256":"FC:09:F0:D9:70:0D:59:E1:E6:DC:80:2B:4C:A1:3C:84:FA:DB:EC:F1:24:B1:03:D0:6F:B0:4D:99:A3:6C:E4:97"}}},"request":{"raw":"GET /js/Bj7lXNfZ-1763765398141.js HTTP/1.1\r\nHost: yangfuinei.biz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://yangfuinei.biz/js/DMBOBHbD-1763765398047.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\nalt-svc: h3=\":443\"; ma=2592000\r\ncache-control: max-age=43200\r\ncontent-type: application/javascript\r\ndate: Wed, 25 Mar 2026 21:53:55 GMT\r\netag: \"6920edd3-1cd\"\r\nexpires: Thu, 26 Mar 2026 09:53:55 GMT\r\nlast-modified: Fri, 21 Nov 2025 22:55:15 GMT\r\nserver: nginx\r\nvia: 1.1 Caddy\r\ncontent-length: 461\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":461,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (460)","md5":"ce2c165ca4b727d80f0dd86a17323b17","sha1":"984be00f1738a3481fd5e8b771a839b657c44712","sha256":"73ddaab6c04a99413e09902b47aaa871fbdd7f58d34db39204ebf364ec95b8ed","sha512":"034e19472a19bc6be27ab29585598651b2ffeb5128ce26b1451ba127a0e6b9bd266a8a2f3b02e4f33b47846a0fcfae5e12f85e9b3757417bdbae630b29c95e51","ssdeep":"","tlshash":"7af023d8000bcafdf4136eece645001513310eba230980e1a0cf4028db13120b32f72b","first_seen":"2025-12-30T11:00:15.280834Z","last_seen":"2026-03-25T21:54:23.816363Z","times_seen":4,"resource_available":true,"data":null}},"time_used":248,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":248,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"affg.cc/yafa","fqdn":"affg.cc","domain":"affg.cc","tld":"cc"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-25T21:53:48.165Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"affg.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 19 Mar 2026 17:52:55 GMT","end":"Wed, 17 Jun 2026 18:51:21 GMT"},"fingerprint":{"sha1":"03:A1:38:61:2E:2F:96:56:6F:23:2A:E7:4C:B5:23:92:29:61:A1:3E","sha256":"65:3E:37:43:3A:13:B4:C4:31:3F:53:A5:D7:C0:E9:A3:38:F6:AC:DD:61:DA:EF:45:A3:18:18:C6:70:E6:95:3F"}}},"request":{"raw":"GET /yafa HTTP/1.1\r\nHost: affg.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\ndate: Wed, 25 Mar 2026 21:53:48 GMT\r\ncontent-length: 0\r\nlocation: https://yawdg.net/register?code=jycICrYk\r\nserver-timing: cfEdge;dur=6,cfOrigin;dur=0,cfWorker;dur=39\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TqmMTTwIX8VV9XT%2FwSQYvBOqbliWGIPtg9GemeNCmhyIrSaX%2FMWVCWnM2btgH4vpOa8cfTr6Xi%2FwmnjZ6Ndiye8pkRwa93QHl80UA7jACNBArvGDOcuvU7%2Bn\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 9e2126844d1b5864-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":17409,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-02T18:08:06.981696Z","times_seen":16047564,"resource_available":true,"data":null}},"time_used":134,"timings":{"blocked":38,"dns":1,"connect":8,"send":0,"wait":56,"receive":1,"ssl":25},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yangfuinei.biz/assets/css/CY_HGAwf-1763765398357.css","fqdn":"yangfuinei.biz","domain":"yangfuinei.biz","tld":"biz"},"ip":{"addr":"103.73.220.71","port":443,"asn":0,"as":"","country":"India","country_code":"IN"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://yangfuinei.biz/register?code=jycICrYk","date":"2026-03-25T21:53:54.811Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yangfuinei.biz","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 31 Jan 2026 06:49:57 GMT","end":"Fri, 01 May 2026 06:49:56 GMT"},"fingerprint":{"sha1":"92:D1:83:CD:64:10:8D:2E:BB:4C:03:7E:41:89:D8:40:8E:11:A3:8D","sha256":"FC:09:F0:D9:70:0D:59:E1:E6:DC:80:2B:4C:A1:3C:84:FA:DB:EC:F1:24:B1:03:D0:6F:B0:4D:99:A3:6C:E4:97"}}},"request":{"raw":"GET /assets/css/CY_HGAwf-1763765398357.css HTTP/1.1\r\nHost: yangfuinei.biz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://yangfuinei.biz/register?code=jycICrYk\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\nalt-svc: h3=\":443\"; ma=2592000\r\ncache-control: max-age=43200\r\ncontent-type: text/css\r\ndate: Wed, 25 Mar 2026 21:53:54 GMT\r\netag: \"6920eddc-154\"\r\nexpires: Thu, 26 Mar 2026 09:53:54 GMT\r\nlast-modified: Fri, 21 Nov 2025 22:55:24 GMT\r\nserver: nginx\r\nvia: 1.1 Caddy\r\ncontent-length: 340\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":340,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (339)","md5":"4f2dd3b3a7a2afa650f24eb287557ead","sha1":"a7a6bc2d0f502a87c9d2878afac1605db29c7d48","sha256":"11eb2fbb11b8c5b4a5090d79ed857e958e1502082a8fab0e48fda964949bcb9e","sha512":"36196fb8d39248cd90c3d510c03b46d903159e3ce893663b57654640430d31fb97136b8109d7dd0d5435a0c1e742778317f97b4dc474f5541aa958ca8138ce23","ssdeep":"","tlshash":"3ce020a1db4d14e1e49fd11b0190e4dca2742382d5f7875961b6b150f0040673623bc8","first_seen":"2025-12-30T11:00:15.316676Z","last_seen":"2026-03-25T21:54:23.818183Z","times_seen":4,"resource_available":false,"data":null}},"time_used":248,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":248,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yangfuinei.biz/js/Bj7lXNfZ-1763765398141.js","fqdn":"yangfuinei.biz","domain":"yangfuinei.biz","tld":"biz"},"ip":{"addr":"103.73.220.71","port":443,"asn":0,"as":"","country":"India","country_code":"IN"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://yangfuinei.biz/register?code=jycICrYk","date":"2026-03-25T21:53:54.820Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yangfuinei.biz","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 31 Jan 2026 06:49:57 GMT","end":"Fri, 01 May 2026 06:49:56 GMT"},"fingerprint":{"sha1":"92:D1:83:CD:64:10:8D:2E:BB:4C:03:7E:41:89:D8:40:8E:11:A3:8D","sha256":"FC:09:F0:D9:70:0D:59:E1:E6:DC:80:2B:4C:A1:3C:84:FA:DB:EC:F1:24:B1:03:D0:6F:B0:4D:99:A3:6C:E4:97"}}},"request":{"raw":"GET /js/Bj7lXNfZ-1763765398141.js HTTP/1.1\r\nHost: yangfuinei.biz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://yangfuinei.biz/register?code=jycICrYk\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\nalt-svc: h3=\":443\"; ma=2592000\r\ncache-control: max-age=43200\r\ncontent-type: application/javascript\r\ndate: Wed, 25 Mar 2026 21:53:54 GMT\r\netag: \"6920edd3-1cd\"\r\nexpires: Thu, 26 Mar 2026 09:53:54 GMT\r\nlast-modified: Fri, 21 Nov 2025 22:55:15 GMT\r\nserver: nginx\r\nvia: 1.1 Caddy\r\ncontent-length: 461\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":461,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (460)","md5":"ce2c165ca4b727d80f0dd86a17323b17","sha1":"984be00f1738a3481fd5e8b771a839b657c44712","sha256":"73ddaab6c04a99413e09902b47aaa871fbdd7f58d34db39204ebf364ec95b8ed","sha512":"034e19472a19bc6be27ab29585598651b2ffeb5128ce26b1451ba127a0e6b9bd266a8a2f3b02e4f33b47846a0fcfae5e12f85e9b3757417bdbae630b29c95e51","ssdeep":"","tlshash":"7af023d8000bcafdf4136eece645001513310eba230980e1a0cf4028db13120b32f72b","first_seen":"2025-12-30T11:00:15.280834Z","last_seen":"2026-03-25T21:54:23.816363Z","times_seen":4,"resource_available":true,"data":null}},"time_used":269,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":269,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yangfuinei.biz/favicon.png","fqdn":"yangfuinei.biz","domain":"yangfuinei.biz","tld":"biz"},"ip":{"addr":"103.73.220.71","port":443,"asn":0,"as":"","country":"India","country_code":"IN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://yangfuinei.biz/register?code=jycICrYk","date":"2026-03-25T21:53:55.635Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yangfuinei.biz","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 31 Jan 2026 06:49:57 GMT","end":"Fri, 01 May 2026 06:49:56 GMT"},"fingerprint":{"sha1":"92:D1:83:CD:64:10:8D:2E:BB:4C:03:7E:41:89:D8:40:8E:11:A3:8D","sha256":"FC:09:F0:D9:70:0D:59:E1:E6:DC:80:2B:4C:A1:3C:84:FA:DB:EC:F1:24:B1:03:D0:6F:B0:4D:99:A3:6C:E4:97"}}},"request":{"raw":"GET /favicon.png HTTP/1.1\r\nHost: yangfuinei.biz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://yangfuinei.biz/register?code=jycICrYk\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\nalt-svc: h3=\":443\"; ma=2592000\r\ncontent-type: text/html\r\ndate: Wed, 25 Mar 2026 21:53:55 GMT\r\netag: \"695b4930-8a\"\r\nserver: nginx\r\nvia: 1.1 Caddy\r\ncontent-length: 138\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":138,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"7389d931c86b3d7bb6b8af46d8c4172b","sha1":"8d2a4760aa0b47984d11cd1a66448719177fb791","sha256":"301bd9f16f94feedfae7a946a14bac38cb73c43efe6117bc5586835af03d7d6f","sha512":"dd6d1511e4fcd5bc09d821ffe091fb5946ac9654c48664aed504e479e9ac20c1cad44b6df90f42190d47e28f5f96bfb09d24056df6b950243d68ee8100a9a889","ssdeep":"","tlshash":"d9c09b5d755366449913155167c33641d196837f689a84510941c593f0cf69ac4c73a9","first_seen":"2023-03-13T12:56:15Z","last_seen":"2026-06-02T18:08:42.812222Z","times_seen":278223,"resource_available":true,"data":null}},"time_used":248,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":248,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yangfuinei.biz/assets/svg/sprite.svg","fqdn":"yangfuinei.biz","domain":"yangfuinei.biz","tld":"biz"},"ip":{"addr":"103.73.220.71","port":443,"asn":0,"as":"","country":"India","country_code":"IN"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://yangfuinei.biz/register?code=jycICrYk","date":"2026-03-25T21:53:55.750Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yangfuinei.biz","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 31 Jan 2026 06:49:57 GMT","end":"Fri, 01 May 2026 06:49:56 GMT"},"fingerprint":{"sha1":"92:D1:83:CD:64:10:8D:2E:BB:4C:03:7E:41:89:D8:40:8E:11:A3:8D","sha256":"FC:09:F0:D9:70:0D:59:E1:E6:DC:80:2B:4C:A1:3C:84:FA:DB:EC:F1:24:B1:03:D0:6F:B0:4D:99:A3:6C:E4:97"}}},"request":{"raw":"GET /assets/svg/sprite.svg HTTP/1.1\r\nHost: yangfuinei.biz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://yangfuinei.biz/register?code=jycICrYk\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: same-origin\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nalt-svc: h3=\":443\"; ma=2592000\r\ncontent-encoding: gzip\r\ncontent-type: image/svg+xml\r\ndate: Wed, 25 Mar 2026 21:53:55 GMT\r\netag: W/\"6920edda-3a4ae\"\r\nlast-modified: Fri, 21 Nov 2025 22:55:22 GMT\r\nserver: nginx\r\nvary: Accept-Encoding\r\nvia: 1.1 Caddy\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":238766,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"7b5d009819ca3c5c993368ab8e87119a","sha1":"72e20e39bb414d6942ef1f18360211249c63764c","sha256":"2b18e1e322ec2555a46b2fefac8d0a709db0683cadce0b0fbb67a1b442f21b19","sha512":"0caa5c20912f855292e795f98957e5d336030c87af2b81d239de0d36fa55df70b1b1c34fde1bc3c77542d701ddef331e0a5886b49423a47a3bca4e418823bb25","ssdeep":"1536:rN4QZkQVRjh8kmJGOVFm92C6JU6ueRi9Jbd2WhZMYPC+g3lHIu7zTkzKLatDz6xv:r/kvSp5UYPCNIu7OpLc8u","tlshash":"0a34a79a93d8dafce44387e9db36b171312b62fa3a6ac39466759771f2010cccc57980","first_seen":"2025-04-13T05:46:49.450728Z","last_seen":"2026-03-25T21:54:23.819563Z","times_seen":9,"resource_available":false,"data":null}},"time_used":280,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":280,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"smartchat.pao1.top/api/chat/agent-status","fqdn":"smartchat.pao1.top","domain":"pao1.top","tld":"top"},"ip":{"addr":"103.73.220.71","port":443,"asn":0,"as":"","country":"India","country_code":"IN"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://yangfuinei.biz/register?code=jycICrYk","date":"2026-03-25T21:53:56.532Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"smartchat.pao1.top","organization":""},"issuer":{"commonName":"ZeroSSL ECC Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Tue, 13 Jan 2026 00:00:00 GMT","end":"Mon, 13 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"0E:F1:3D:EC:D0:1A:EC:63:F3:F5:13:1D:52:ED:F8:CE:0B:57:ED:DB","sha256":"72:1C:E9:77:80:F1:71:F5:EC:A7:A1:5A:97:D7:35:4F:D8:64:A7:B2:56:AF:AD:17:8B:0C:45:45:F0:D0:C4:70"}}},"request":{"raw":"GET /api/chat/agent-status HTTP/1.1\r\nHost: smartchat.pao1.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://yangfuinei.biz/\r\nContent-Type: application/json\r\nX-Site-Key: sk_8enxj15s4c6O4UEOx29mJBN6kAvr5SL2\r\nOrigin: https://yangfuinei.biz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\nalt-svc: h3=\":443\"; ma=2592000\r\ncache-control: no-cache, private\r\ncontent-encoding: gzip\r\ncontent-type: application/json\r\ndate: Wed, 25 Mar 2026 21:53:56 GMT\r\nserver: nginx\r\nstrict-transport-security: max-age=31536000\r\nvary: Accept-Encoding\r\nvia: 1.1 Caddy\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":62,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"72998634ee54b426f3fc7ff9c004aff2","sha1":"cad147cbfcf667a829574abe02a0c75c2341da45","sha256":"b96fe9bf5af017b378359183eb0e93c64d59d1c948290d7afd522e8959fbb33e","sha512":"5cc2f41ff97e210f0d2a81749e182f33e34e71f90fce171b507c0a41d1f3e0ecf809ce6a2a639437010e09c391a2ee4539abc4b78575331801db5cf2c21ad0a0","ssdeep":"","tlshash":"32a0020219a301b1c710539812243f1c5aac123344010b2cf04c6084f9b421e354265f","first_seen":"2026-03-25T21:54:23.820076Z","last_seen":"2026-03-25T21:54:23.820076Z","times_seen":1,"resource_available":false,"data":null}},"time_used":255,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":255,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zd.pao1.top/tp/images/20260106_001230_f3f3caf9.jpg","fqdn":"zd.pao1.top","domain":"pao1.top","tld":"top"},"ip":{"addr":"51.79.169.129","port":443,"asn":16276,"as":"OVH SAS","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://yangfuinei.biz/register?code=jycICrYk","date":"2026-03-25T21:53:56.558Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zd.pao1.top","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 05 Mar 2026 15:11:51 GMT","end":"Wed, 03 Jun 2026 15:11:50 GMT"},"fingerprint":{"sha1":"B0:13:21:87:76:E2:DF:71:38:FC:3D:7D:DF:9F:04:64:E9:CF:CA:CE","sha256":"29:8F:E7:F5:F6:F3:EA:68:B8:6B:FC:32:81:CB:C6:EA:97:16:47:50:3C:95:F4:F6:62:AF:E9:C5:48:23:E1:13"}}},"request":{"raw":"GET /tp/images/20260106_001230_f3f3caf9.jpg HTTP/1.1\r\nHost: zd.pao1.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://yangfuinei.biz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 25 Mar 2026 21:53:57 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 89956\r\nlast-modified: Sun, 22 Mar 2026 08:15:57 GMT\r\netag: \"69bfa53d-15f64\"\r\nexpires: Fri, 24 Apr 2026 21:53:57 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":89956,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1024x1024, components 3","md5":"c64185cd32a3847dd8cfa8ca1e624a6a","sha1":"995b0bfb8071394a8a6c43d00498631949429215","sha256":"53231e1f7df55c3d46e38835d97700b59a9be2799db3326830e7eb96dba6c79f","sha512":"eb5981dd95002713110eddf4caec1b860a5b60b329e2b9c1ed78be8d76c3d06c7704f84388ec7a996428d67488ceafe6854e786a9f8b2ee57ae4938882f90657","ssdeep":"1536:NcHUaCGdx8VKthvtwuSBUxgtMO6ej1oc6s9IhJqtVWU2DTqLAotdHUh343:Nqx8VksxwI2c6HJF9DkdtdHoo3","tlshash":"0a9312160750264bfbe54a1a15dfdf7bc880392a591726ce16e8b7ee44e8148f8370df","first_seen":"2026-03-25T21:54:23.820763Z","last_seen":"2026-03-25T21:54:23.820763Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1987,"timings":{"blocked":531,"dns":13,"connect":254,"send":0,"wait":517,"receive":408,"ssl":259},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"103.73.220.72:1000/api/v1/guest/comm/config","fqdn":"103.73.220.72","domain":"103.73.220.72","tld":""},"ip":{"addr":"103.73.220.72","port":1000,"asn":0,"as":"","country":"India","country_code":"IN"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://yangfuinei.biz/register?code=jycICrYk","date":"2026-03-25T21:53:56.774Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"103.73.220.72","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 21 Nov 2025 00:00:00 GMT","end":"Mon, 21 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E0:E1:A2:ED:6B:33:B1:67:F3:9F:72:D2:F5:DC:6B:3C:77:39:D1:81","sha256":"FD:E5:36:FC:D4:B4:20:11:02:F4:03:97:A9:43:34:45:80:6C:3C:70:3E:16:C9:08:6A:A7:30:B5:8D:12:9D:58"}}},"request":{"raw":"GET /api/v1/guest/comm/config HTTP/1.1\r\nHost: 103.73.220.72:1000\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\ntheme-ua: mala-pro\r\nOrigin: https://yangfuinei.biz\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://yangfuinei.biz/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 25 Mar 2026 21:01:39 GMT\r\ncontent-type: text/plain\r\ncontent-length: 528\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: *\r\naccess-control-allow-origin: *\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nserver-unique-id: server-unique-id-12345\r\nserver-version: 1.0.0\r\nstrict-transport-security: max-age=31536000\r\ncache-control: no-store, no-cache, no-cache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":528,"size_decoded":0,"mime_type":"text/plain","magic":"ASCII text, with very long lines (528), with no line terminators","md5":"df12f71d5014b527659952778879e20e","sha1":"15a757f5ece72004101e94a0c12ce02622bbe10b","sha256":"0cf2e5f878f9b94b68de2aa15437597ad8e46f97c421872d596035426da923ce","sha512":"223ee4abeecc9d5370ffbbeb1ce7831318ad856dcaeb4c8bc324a414fc483ac358676f71d6de9d6737e6419bd9fb0ef50c10a4bd7e7f3957c120efb599756729","ssdeep":"","tlshash":"28f02002242a1a68fa2f58f241a8332a8603ac87ac406a14206ce608f60bcbf646549e","first_seen":"2025-12-31T02:31:28.458414Z","last_seen":"2026-03-25T21:54:23.82171Z","times_seen":2,"resource_available":false,"data":null}},"time_used":487,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":487,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yangfuinei.biz/js/CTZo_vmD-1763765397966.js","fqdn":"yangfuinei.biz","domain":"yangfuinei.biz","tld":"biz"},"ip":{"addr":"103.73.220.71","port":443,"asn":0,"as":"","country":"India","country_code":"IN"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://yangfuinei.biz/register?code=jycICrYk","date":"2026-03-25T21:53:53.076Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yangfuinei.biz","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 31 Jan 2026 06:49:57 GMT","end":"Fri, 01 May 2026 06:49:56 GMT"},"fingerprint":{"sha1":"92:D1:83:CD:64:10:8D:2E:BB:4C:03:7E:41:89:D8:40:8E:11:A3:8D","sha256":"FC:09:F0:D9:70:0D:59:E1:E6:DC:80:2B:4C:A1:3C:84:FA:DB:EC:F1:24:B1:03:D0:6F:B0:4D:99:A3:6C:E4:97"}}},"request":{"raw":"GET /js/CTZo_vmD-1763765397966.js HTTP/1.1\r\nHost: yangfuinei.biz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://yangfuinei.biz/register?code=jycICrYk\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nalt-svc: h3=\":443\"; ma=2592000\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\ncontent-type: application/javascript\r\ndate: Wed, 25 Mar 2026 21:53:53 GMT\r\netag: \"6920edd4-ff8df-gzip\"\r\nexpires: Thu, 26 Mar 2026 09:53:53 GMT\r\nlast-modified: Fri, 21 Nov 2025 22:55:16 GMT\r\nserver: nginx\r\nvary: Accept-Encoding\r\nvia: 1.1 Caddy\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1046751,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (63066)","md5":"518f07de63d6bcfcaf333f922493f75e","sha1":"cd1eb3d2a3708d09be07a2a6e06e33c96c002c45","sha256":"b7e2ad0f583df7b6d165b024afdd9577fecb5bbb895645f97dc26b434a745454","sha512":"b48705d46e582d0fe94f0974fa99b0bda70cd168bd3a41e747c19d6e258e1f70ad5e07bd1f787be798cc3c65234662f254c9636a6c3e731dde02fb93948f83d3","ssdeep":"24576:2Qm42ZCwRa6sGxi/glX5PTBhgOFRfNH/4Ec9/j+dwJNovwXWkM1XApmIuIXp:2Qm42ZCwRa6sGxi/glX5PTBhgOFRfNH2","tlshash":"4a255c45b285383287b7559dd4af1206a2356f49584cc4f8f4bed8e63899e4833ebf38","first_seen":"2025-12-30T11:00:15.290479Z","last_seen":"2026-03-25T21:54:23.822387Z","times_seen":4,"resource_available":true,"data":null}},"time_used":338,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":338,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yangfuinei.biz/js/DgBwhFlo-1763765398145.js","fqdn":"yangfuinei.biz","domain":"yangfuinei.biz","tld":"biz"},"ip":{"addr":"103.73.220.71","port":443,"asn":0,"as":"","country":"India","country_code":"IN"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://yangfuinei.biz/register?code=jycICrYk","date":"2026-03-25T21:53:55.336Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yangfuinei.biz","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 31 Jan 2026 06:49:57 GMT","end":"Fri, 01 May 2026 06:49:56 GMT"},"fingerprint":{"sha1":"92:D1:83:CD:64:10:8D:2E:BB:4C:03:7E:41:89:D8:40:8E:11:A3:8D","sha256":"FC:09:F0:D9:70:0D:59:E1:E6:DC:80:2B:4C:A1:3C:84:FA:DB:EC:F1:24:B1:03:D0:6F:B0:4D:99:A3:6C:E4:97"}}},"request":{"raw":"GET /js/DgBwhFlo-1763765398145.js HTTP/1.1\r\nHost: yangfuinei.biz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://yangfuinei.biz/js/q2yzloxs-1763765398047.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nalt-svc: h3=\":443\"; ma=2592000\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\ncontent-type: application/javascript\r\ndate: Wed, 25 Mar 2026 21:53:55 GMT\r\netag: \"6920edd5-7383-gzip\"\r\nexpires: Thu, 26 Mar 2026 09:53:55 GMT\r\nlast-modified: Fri, 21 Nov 2025 22:55:17 GMT\r\nserver: nginx\r\nvary: Accept-Encoding\r\nvia: 1.1 Caddy\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":29571,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (29570)","md5":"0362932d68da32c27609de59203c0ac0","sha1":"40dcccc8e9b38b1d721d89bf61eb05227ed7c491","sha256":"65e41b6c1444a66e826823c0a2a7fbbecd318259acce4fcf9ef5a304e03bb379","sha512":"0c04e5f93534b4ece50328fbdc36de0ea987549a9010b98f26b182951f3e69e120c95d418ee5515128cbb5d83c3987f3d6252f91e6e5fd20edece27fb8359549","ssdeep":"768:Riq2nu50YvPvnnzlGNUfOKPaMWgAbbxIwtt/kFkuazc5XSfUHGh78lF8dh5B/qML:GFfpw1cBivuF3Ui","tlshash":"91d209d576d1f06253aa21f140bb0405f33a9519744e84e8f128aceb3cb614a97b7fbd","first_seen":"2025-08-14T22:09:07.206772Z","last_seen":"2026-06-02T01:57:29.38665Z","times_seen":16,"resource_available":true,"data":null}},"time_used":252,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":252,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yawdg.net/favicon.ico","fqdn":"yawdg.net","domain":"yawdg.net","tld":"net"},"ip":{"addr":"64.118.146.251","port":443,"asn":7029,"as":"WINDSTREAM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://yawdg.net/register?code=jycICrYk","date":"2026-03-25T21:53:49.419Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yawdg.net","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 05 Jan 2026 08:19:29 GMT","end":"Sun, 05 Apr 2026 08:19:28 GMT"},"fingerprint":{"sha1":"06:7C:CF:3B:AB:65:4C:21:BA:7F:9B:D3:7C:2A:DD:D7:56:41:86:CD","sha256":"59:6B:28:17:3F:1F:9D:88:48:A0:95:BE:A0:BC:8C:DB:E1:D5:58:4D:A6:86:35:F9:B9:C4:1E:2E:10:C9:89:68"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: yawdg.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://yawdg.net/register?code=jycICrYk\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncontent-type: text/html; charset=utf-8\r\ndate: Wed, 25 Mar 2026 21:34:16 GMT\r\netag: \"dh0m1b7l3wv5dfl\"\r\nlast-modified: Wed, 25 Mar 2026 21:34:16 GMT\r\nserver: Caddy\r\nvary: Accept-Encoding\r\nx-cache: HIT, policy, disk\r\ncontent-length: 17409\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Caddy","description":"","website":"https://caddyserver.com","common_platform_enumeration":"cpe:2.3:a:caddyserver:caddy:*:*:*:*:*:*:*:*","icon":"caddy.svg","categories":["Web servers"]}],"data":{"size":17409,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"c3f28757f38021d4ac3efb2c260335b5","sha1":"28669735ffd0648f016cf57f8a82a72cb36f10fc","sha256":"726fcc40e977adbec0fbb7067d16c47d6fe1d90d508177ef87401fa14a1fb1d2","sha512":"f4dd10fd871b01ba93d9b3771804c628dfc41e316e32085bbca42d3de79a96b4dca2dcd5cba65bf0c495d4fa49585983140804229f2669225d4a0fdfe138b8c2","ssdeep":"192:erf0X+TQRiJ1aGZRJ+eRB5fyqpwRsSv2ZsfuGFcL3frYXv3LRq92fDRuwBrIGdHw:erY+T0iJNZhXwRskuGTVu2dhnQTl","tlshash":"9e72b6de59e700926e23b07a5b6f610878b5891b244ac901bd4fb3504f90f1917dabff","first_seen":"2026-03-25T21:54:23.81331Z","last_seen":"2026-03-25T21:54:23.81331Z","times_seen":1,"resource_available":false,"data":null}},"time_used":344,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":264,"receive":80,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yawdg.net/api/success-log?target=\u0026w=1280\u0026h=1024\u0026ref=\u0026_=1774475629776","fqdn":"yawdg.net","domain":"yawdg.net","tld":"net"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://yawdg.net/register?code=jycICrYk","date":"2026-03-25T21:53:49.778Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yawdg.net","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 05 Jan 2026 08:19:29 GMT","end":"Sun, 05 Apr 2026 08:19:28 GMT"},"fingerprint":{"sha1":"06:7C:CF:3B:AB:65:4C:21:BA:7F:9B:D3:7C:2A:DD:D7:56:41:86:CD","sha256":"59:6B:28:17:3F:1F:9D:88:48:A0:95:BE:A0:BC:8C:DB:E1:D5:58:4D:A6:86:35:F9:B9:C4:1E:2E:10:C9:89:68"}}},"request":{"raw":"GET /api/success-log?target=\u0026w=1280\u0026h=1024\u0026ref=\u0026_=1774475629776 HTTP/1.1\r\nHost: yawdg.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://yawdg.net/register?code=jycICrYk\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-02T18:08:06.981696Z","times_seen":16047564,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yawzz.net/register?code=jycICrYk","fqdn":"yawzz.net","domain":"yawzz.net","tld":"net"},"ip":{"addr":"51.83.33.39","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-25T21:53:50.141Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yawzz.net","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 10 Jan 2026 17:07:42 GMT","end":"Fri, 10 Apr 2026 17:07:41 GMT"},"fingerprint":{"sha1":"5B:4A:98:77:D4:F5:9E:02:B7:92:AF:EE:AD:A8:0D:89:77:8F:9D:D8","sha256":"E7:F2:88:01:92:B2:9C:0E:36:11:97:13:7E:BD:E2:C9:50:FC:17:C8:94:7B:16:46:E0:0B:8E:38:B0:D3:E2:6F"}}},"request":{"raw":"GET /register?code=jycICrYk HTTP/1.1\r\nHost: yawzz.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://yawdg.net/\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncontent-type: text/html; charset=utf-8\r\ndate: Wed, 25 Mar 2026 21:53:50 GMT\r\netag: \"dh0m1b7l3wv5dfl\"\r\nlast-modified: Thu, 12 Mar 2026 07:03:30 GMT\r\nserver: Caddy\r\nvary: Accept-Encoding\r\nx-cache: BYPASS\r\ncontent-length: 17409\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Caddy","description":"","website":"https://caddyserver.com","common_platform_enumeration":"cpe:2.3:a:caddyserver:caddy:*:*:*:*:*:*:*:*","icon":"caddy.svg","categories":["Web servers"]}],"data":{"size":17409,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"c3f28757f38021d4ac3efb2c260335b5","sha1":"28669735ffd0648f016cf57f8a82a72cb36f10fc","sha256":"726fcc40e977adbec0fbb7067d16c47d6fe1d90d508177ef87401fa14a1fb1d2","sha512":"f4dd10fd871b01ba93d9b3771804c628dfc41e316e32085bbca42d3de79a96b4dca2dcd5cba65bf0c495d4fa49585983140804229f2669225d4a0fdfe138b8c2","ssdeep":"192:erf0X+TQRiJ1aGZRJ+eRB5fyqpwRsSv2ZsfuGFcL3frYXv3LRq92fDRuwBrIGdHw:erY+T0iJNZhXwRskuGTVu2dhnQTl","tlshash":"9e72b6de59e700926e23b07a5b6f610878b5891b244ac901bd4fb3504f90f1917dabff","first_seen":"2026-03-25T21:54:23.81331Z","last_seen":"2026-03-25T21:54:23.81331Z","times_seen":1,"resource_available":false,"data":null}},"time_used":677,"timings":{"blocked":96,"dns":21,"connect":33,"send":0,"wait":333,"receive":151,"ssl":40},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yangfuinei.biz/check.gif?_=17744756310760.8628658706429593","fqdn":"yangfuinei.biz","domain":"yangfuinei.biz","tld":"biz"},"ip":{"addr":"103.73.220.71","port":443,"asn":0,"as":"","country":"India","country_code":"IN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://yawzz.net/register?code=jycICrYk","date":"2026-03-25T21:53:51.081Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yangfuinei.biz","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 31 Jan 2026 06:49:57 GMT","end":"Fri, 01 May 2026 06:49:56 GMT"},"fingerprint":{"sha1":"92:D1:83:CD:64:10:8D:2E:BB:4C:03:7E:41:89:D8:40:8E:11:A3:8D","sha256":"FC:09:F0:D9:70:0D:59:E1:E6:DC:80:2B:4C:A1:3C:84:FA:DB:EC:F1:24:B1:03:D0:6F:B0:4D:99:A3:6C:E4:97"}}},"request":{"raw":"GET /check.gif?_=17744756310760.8628658706429593 HTTP/1.1\r\nHost: yangfuinei.biz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://yawzz.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\nalt-svc: h3=\":443\"; ma=2592000\r\ncache-control: max-age=2592000\r\ncontent-type: image/gif\r\ndate: Wed, 25 Mar 2026 21:53:51 GMT\r\netag: \"6965e821-2a\"\r\nexpires: Fri, 24 Apr 2026 21:53:51 GMT\r\nlast-modified: Tue, 13 Jan 2026 06:37:21 GMT\r\nserver: nginx\r\nvia: 1.1 Caddy\r\ncontent-length: 42\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":42,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"d89746888da2d9510b64a9f031eaecd5","sha1":"d5fceb6532643d0d84ffe09c40c481ecdf59e15a","sha256":"ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629","sha512":"d5da26b5d496edb0221df1a4057a8b0285d15592a8f8dc7016a294df37ed335f3fde6a2252962e0df38b62847f8b771463a0124ef3f84299f262ed9d9d3cee4c","ssdeep":"","tlshash":"c4900023fa808000c3a8c2300a0b238a2b8c80200a28030b80ae208cec3a3a22c03020","first_seen":"2023-04-05T02:54:03Z","last_seen":"2026-06-02T18:08:20.435493Z","times_seen":929783,"resource_available":true,"data":null}},"time_used":1207,"timings":{"blocked":464,"dns":22,"connect":216,"send":0,"wait":278,"receive":0,"ssl":225},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yangfuinei.biz/mala-pro.js","fqdn":"yangfuinei.biz","domain":"yangfuinei.biz","tld":"biz"},"ip":{"addr":"103.73.220.71","port":443,"asn":0,"as":"","country":"India","country_code":"IN"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://yangfuinei.biz/register?code=jycICrYk","date":"2026-03-25T21:53:53.075Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yangfuinei.biz","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 31 Jan 2026 06:49:57 GMT","end":"Fri, 01 May 2026 06:49:56 GMT"},"fingerprint":{"sha1":"92:D1:83:CD:64:10:8D:2E:BB:4C:03:7E:41:89:D8:40:8E:11:A3:8D","sha256":"FC:09:F0:D9:70:0D:59:E1:E6:DC:80:2B:4C:A1:3C:84:FA:DB:EC:F1:24:B1:03:D0:6F:B0:4D:99:A3:6C:E4:97"}}},"request":{"raw":"GET /mala-pro.js HTTP/1.1\r\nHost: yangfuinei.biz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://yangfuinei.biz/register?code=jycICrYk\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nalt-svc: h3=\":443\"; ma=2592000\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\ncontent-type: application/javascript\r\ndate: Wed, 25 Mar 2026 21:53:53 GMT\r\netag: \"695b7928-1457-gzip\"\r\nexpires: Thu, 26 Mar 2026 09:53:53 GMT\r\nlast-modified: Mon, 05 Jan 2026 08:41:12 GMT\r\nserver: nginx\r\nvary: Accept-Encoding\r\nvia: 1.1 Caddy\r\ncontent-length: 2785\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5207,"size_decoded":0,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text","md5":"3239b9b21f429337af816cd756dfa16d","sha1":"bdff7be86a5b761ca54819f9f1c96f7962efaa11","sha256":"46c4a75be9fc7b45d5b1fed7bd88854b5f1669012f1087e8340e33989bf77d44","sha512":"d3d5e4e5b98c96f5b68694307e55dace86db83c3e14e20c177742fff3d86b4ec9d663f62b550a20ee5fa9e510985f4d01c7b64c3085425201734816c42defa96","ssdeep":"96:+0FQS3v+Wzn2zJq3tth903CT8PHeAKbw+WTt5sKruy:+UrfF+Jihyyf0+yC1y","tlshash":"78b1d7c76a70a5bd4c6600e01b9b3884a716229fcc65e43af6b746087f0e82f04b5ed7","first_seen":"2026-01-05T13:17:35.473827Z","last_seen":"2026-03-25T21:54:23.824584Z","times_seen":2,"resource_available":true,"data":null}},"time_used":249,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":249,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yangfuinei.biz/assets/woff2/BgdjCeQL-1763765397365.woff2","fqdn":"yangfuinei.biz","domain":"yangfuinei.biz","tld":"biz"},"ip":{"addr":"103.73.220.71","port":443,"asn":0,"as":"","country":"India","country_code":"IN"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://yangfuinei.biz/register?code=jycICrYk","date":"2026-03-25T21:53:54.190Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yangfuinei.biz","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 31 Jan 2026 06:49:57 GMT","end":"Fri, 01 May 2026 06:49:56 GMT"},"fingerprint":{"sha1":"92:D1:83:CD:64:10:8D:2E:BB:4C:03:7E:41:89:D8:40:8E:11:A3:8D","sha256":"FC:09:F0:D9:70:0D:59:E1:E6:DC:80:2B:4C:A1:3C:84:FA:DB:EC:F1:24:B1:03:D0:6F:B0:4D:99:A3:6C:E4:97"}}},"request":{"raw":"GET /assets/woff2/BgdjCeQL-1763765397365.woff2 HTTP/1.1\r\nHost: yangfuinei.biz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://yangfuinei.biz/assets/css/C4l9JPhj-1763765398349.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\nalt-svc: h3=\":443\"; ma=2592000\r\ncontent-type: font/woff2\r\ndate: Wed, 25 Mar 2026 21:53:54 GMT\r\netag: \"6920edd5-37968\"\r\nlast-modified: Fri, 21 Nov 2025 22:55:17 GMT\r\nserver: nginx\r\nvia: 1.1 Caddy\r\ncontent-length: 227688\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":227688,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 227688, version 1.0","md5":"6718c2681ffa562474407218ac0b08ae","sha1":"03d67f11d4c6bcdd6182f0bcebb26d11e8c13dd3","sha256":"d2d2d11234d0d74c0ed3e9727ef07ac8422cbd5b356296b0f87f679c9f74ce83","sha512":"9b4b3421ef643c6257cd4bd4e363d71eadb4dfeba0ce14434e7024650f2b8d696b9eaf5d065d0819827feefc8ab52483f80f52418ec867274ea55c0b7c1d72db","ssdeep":"6144:I2J5iBFBB6t3c5FXrz+x3CmO9r+LmfGCyFwM1kUCcFlgyu:IvBAt8rzPEK18wEXRFlG","tlshash":"f8241294624e839de46837f5a6a4770174730873cdc99f682d3ef94d24fcaacb8a05e1","first_seen":"2023-04-11T09:27:06Z","last_seen":"2026-06-02T13:03:30.193246Z","times_seen":996,"resource_available":false,"data":null}},"time_used":285,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":249,"receive":36,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yangfuinei.biz/js/60ZSTeR0-1763765397967.js","fqdn":"yangfuinei.biz","domain":"yangfuinei.biz","tld":"biz"},"ip":{"addr":"103.73.220.71","port":443,"asn":0,"as":"","country":"India","country_code":"IN"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://yangfuinei.biz/register?code=jycICrYk","date":"2026-03-25T21:53:54.658Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yangfuinei.biz","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 31 Jan 2026 06:49:57 GMT","end":"Fri, 01 May 2026 06:49:56 GMT"},"fingerprint":{"sha1":"92:D1:83:CD:64:10:8D:2E:BB:4C:03:7E:41:89:D8:40:8E:11:A3:8D","sha256":"FC:09:F0:D9:70:0D:59:E1:E6:DC:80:2B:4C:A1:3C:84:FA:DB:EC:F1:24:B1:03:D0:6F:B0:4D:99:A3:6C:E4:97"}}},"request":{"raw":"GET /js/60ZSTeR0-1763765397967.js HTTP/1.1\r\nHost: yangfuinei.biz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://yangfuinei.biz/register?code=jycICrYk\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nalt-svc: h3=\":443\"; ma=2592000\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\ncontent-type: application/javascript\r\ndate: Wed, 25 Mar 2026 21:53:54 GMT\r\netag: \"6920edd3-23806-gzip\"\r\nexpires: Thu, 26 Mar 2026 09:53:54 GMT\r\nlast-modified: Fri, 21 Nov 2025 22:55:15 GMT\r\nserver: nginx\r\nvary: Accept-Encoding\r\nvia: 1.1 Caddy\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":145414,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"33a6cc3290a8d4b88d683d61beea3b1e","sha1":"051d79fa3c4858a5a146238aefb0a7f95c9132f7","sha256":"a4afda16e5ef0a32a8d3f43463b4bbc644a7a6c9b0667adf509b05bca08bd767","sha512":"2fcc5acf250e1167ca550085dc37b306e853756527a9f565be9cd732fe1a35279a73611bcc24392bdab9b0f4b53316fac0960a0c6c3e04b8e9e295fb0f613a56","ssdeep":"1536:b3hTyNWOawHa0n5cpbCTxvaaGRG6MulUL4jusyejZNL7vhdhtIX1ay4AiG:bxTyNWONHa0n5s+TNnGRVMeis5XldAiG","tlshash":"50e328e93282b07253fa15e6407b4116f3391915384ec8d4f06ea9db3c3785a92bbf6d","first_seen":"2025-10-09T21:46:44.39396Z","last_seen":"2026-04-26T23:02:34.08871Z","times_seen":12,"resource_available":true,"data":null}},"time_used":263,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":263,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yangfuinei.biz/js/q2yzloxs-1763765398047.js","fqdn":"yangfuinei.biz","domain":"yangfuinei.biz","tld":"biz"},"ip":{"addr":"103.73.220.71","port":443,"asn":0,"as":"","country":"India","country_code":"IN"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://yangfuinei.biz/register?code=jycICrYk","date":"2026-03-25T21:53:54.822Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yangfuinei.biz","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 31 Jan 2026 06:49:57 GMT","end":"Fri, 01 May 2026 06:49:56 GMT"},"fingerprint":{"sha1":"92:D1:83:CD:64:10:8D:2E:BB:4C:03:7E:41:89:D8:40:8E:11:A3:8D","sha256":"FC:09:F0:D9:70:0D:59:E1:E6:DC:80:2B:4C:A1:3C:84:FA:DB:EC:F1:24:B1:03:D0:6F:B0:4D:99:A3:6C:E4:97"}}},"request":{"raw":"GET /js/q2yzloxs-1763765398047.js HTTP/1.1\r\nHost: yangfuinei.biz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://yangfuinei.biz/register?code=jycICrYk\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nalt-svc: h3=\":443\"; ma=2592000\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\ncontent-type: application/javascript\r\ndate: Wed, 25 Mar 2026 21:53:54 GMT\r\netag: \"6920edd5-358c-gzip\"\r\nexpires: Thu, 26 Mar 2026 09:53:54 GMT\r\nlast-modified: Fri, 21 Nov 2025 22:55:17 GMT\r\nserver: nginx\r\nvary: Accept-Encoding\r\nvia: 1.1 Caddy\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":13708,"size_decoded":0,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text, with very long lines (13115)","md5":"9b9488b812db596bc7a44ee42d29cca7","sha1":"fbe29e3b793ff05618046c49b74fe525541bc346","sha256":"96c70933d99541f037b713f1d211742a8be1163b9b87ed4a0e6051123cb26bb3","sha512":"f85fb12795fef7fac1c86f7d91548ab85282b352b34e04cd6666411aa4ab5b2254581faf42b95421b4efdad96ab8d9d032c5cf1361105b9a4753b4f2c2c9466b","ssdeep":"384:KEXnN+Y0QfwjZcRHcQcLOaoqoiaoCVDfiL525:KE3N+HQfw1w31TiDCVDfi9k","tlshash":"2952ea587bbdcb78eab318ddd44b100431561b5f812064c2b1feabac2a7dd919394b3d","first_seen":"2025-12-30T11:00:15.308442Z","last_seen":"2026-03-25T21:54:23.825975Z","times_seen":4,"resource_available":true,"data":null}},"time_used":271,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":271,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yangfuinei.biz/js/DMBOBHbD-1763765398047.js","fqdn":"yangfuinei.biz","domain":"yangfuinei.biz","tld":"biz"},"ip":{"addr":"103.73.220.71","port":443,"asn":0,"as":"","country":"India","country_code":"IN"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://yangfuinei.biz/register?code=jycICrYk","date":"2026-03-25T21:53:54.818Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yangfuinei.biz","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 31 Jan 2026 06:49:57 GMT","end":"Fri, 01 May 2026 06:49:56 GMT"},"fingerprint":{"sha1":"92:D1:83:CD:64:10:8D:2E:BB:4C:03:7E:41:89:D8:40:8E:11:A3:8D","sha256":"FC:09:F0:D9:70:0D:59:E1:E6:DC:80:2B:4C:A1:3C:84:FA:DB:EC:F1:24:B1:03:D0:6F:B0:4D:99:A3:6C:E4:97"}}},"request":{"raw":"GET /js/DMBOBHbD-1763765398047.js HTTP/1.1\r\nHost: yangfuinei.biz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://yangfuinei.biz/register?code=jycICrYk\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\nalt-svc: h3=\":443\"; ma=2592000\r\ncache-control: max-age=43200\r\ncontent-type: application/javascript\r\ndate: Wed, 25 Mar 2026 21:53:54 GMT\r\netag: \"6920edd5-134\"\r\nexpires: Thu, 26 Mar 2026 09:53:54 GMT\r\nlast-modified: Fri, 21 Nov 2025 22:55:17 GMT\r\nserver: nginx\r\nvia: 1.1 Caddy\r\ncontent-length: 308\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":308,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (307)","md5":"64d15e9c498ce0653e7c5b42185d0a1a","sha1":"0c3693723bd61d0d6487432d79cfda8a36ef30a4","sha256":"b6324b96a0ba9540d199cab3c64ae3930f8980dd14268cba85ac3c20873b407a","sha512":"6222f20e21059e9bb3656f46b87db07a11b04e324fe87e6658ec67cd8f67b4af14cbec776c3d98a104be7a564406e2fefe7aef2d74c6def9515e0c7cdb8c63c4","ssdeep":"","tlshash":"73e0cdde585683f5740564a5eaa7115252142dfe37bc34d0518a97255331592e01fa12","first_seen":"2025-12-30T11:00:15.288548Z","last_seen":"2026-03-25T21:54:23.826805Z","times_seen":4,"resource_available":true,"data":null}},"time_used":249,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":248,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yangfuinei.biz/js/DMBOBHbD-1763765398047.js","fqdn":"yangfuinei.biz","domain":"yangfuinei.biz","tld":"biz"},"ip":{"addr":"103.73.220.71","port":443,"asn":0,"as":"","country":"India","country_code":"IN"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://yangfuinei.biz/register?code=jycICrYk","date":"2026-03-25T21:53:55.067Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yangfuinei.biz","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 31 Jan 2026 06:49:57 GMT","end":"Fri, 01 May 2026 06:49:56 GMT"},"fingerprint":{"sha1":"92:D1:83:CD:64:10:8D:2E:BB:4C:03:7E:41:89:D8:40:8E:11:A3:8D","sha256":"FC:09:F0:D9:70:0D:59:E1:E6:DC:80:2B:4C:A1:3C:84:FA:DB:EC:F1:24:B1:03:D0:6F:B0:4D:99:A3:6C:E4:97"}}},"request":{"raw":"GET /js/DMBOBHbD-1763765398047.js HTTP/1.1\r\nHost: yangfuinei.biz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://yangfuinei.biz/js/CTZo_vmD-1763765397966.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\nalt-svc: h3=\":443\"; ma=2592000\r\ncache-control: max-age=43200\r\ncontent-type: application/javascript\r\ndate: Wed, 25 Mar 2026 21:53:55 GMT\r\netag: \"6920edd5-134\"\r\nexpires: Thu, 26 Mar 2026 09:53:55 GMT\r\nlast-modified: Fri, 21 Nov 2025 22:55:17 GMT\r\nserver: nginx\r\nvia: 1.1 Caddy\r\ncontent-length: 308\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":308,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (307)","md5":"64d15e9c498ce0653e7c5b42185d0a1a","sha1":"0c3693723bd61d0d6487432d79cfda8a36ef30a4","sha256":"b6324b96a0ba9540d199cab3c64ae3930f8980dd14268cba85ac3c20873b407a","sha512":"6222f20e21059e9bb3656f46b87db07a11b04e324fe87e6658ec67cd8f67b4af14cbec776c3d98a104be7a564406e2fefe7aef2d74c6def9515e0c7cdb8c63c4","ssdeep":"","tlshash":"73e0cdde585683f5740564a5eaa7115252142dfe37bc34d0518a97255331592e01fa12","first_seen":"2025-12-30T11:00:15.288548Z","last_seen":"2026-03-25T21:54:23.826805Z","times_seen":4,"resource_available":true,"data":null}},"time_used":248,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":248,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yangfuinei.biz/js/q2yzloxs-1763765398047.js","fqdn":"yangfuinei.biz","domain":"yangfuinei.biz","tld":"biz"},"ip":{"addr":"103.73.220.71","port":443,"asn":0,"as":"","country":"India","country_code":"IN"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://yangfuinei.biz/register?code=jycICrYk","date":"2026-03-25T21:53:55.069Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yangfuinei.biz","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 31 Jan 2026 06:49:57 GMT","end":"Fri, 01 May 2026 06:49:56 GMT"},"fingerprint":{"sha1":"92:D1:83:CD:64:10:8D:2E:BB:4C:03:7E:41:89:D8:40:8E:11:A3:8D","sha256":"FC:09:F0:D9:70:0D:59:E1:E6:DC:80:2B:4C:A1:3C:84:FA:DB:EC:F1:24:B1:03:D0:6F:B0:4D:99:A3:6C:E4:97"}}},"request":{"raw":"GET /js/q2yzloxs-1763765398047.js HTTP/1.1\r\nHost: yangfuinei.biz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://yangfuinei.biz/js/CTZo_vmD-1763765397966.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nalt-svc: h3=\":443\"; ma=2592000\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\ncontent-type: application/javascript\r\ndate: Wed, 25 Mar 2026 21:53:55 GMT\r\netag: \"6920edd5-358c-gzip\"\r\nexpires: Thu, 26 Mar 2026 09:53:55 GMT\r\nlast-modified: Fri, 21 Nov 2025 22:55:17 GMT\r\nserver: nginx\r\nvary: Accept-Encoding\r\nvia: 1.1 Caddy\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":13708,"size_decoded":0,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text, with very long lines (13115)","md5":"9b9488b812db596bc7a44ee42d29cca7","sha1":"fbe29e3b793ff05618046c49b74fe525541bc346","sha256":"96c70933d99541f037b713f1d211742a8be1163b9b87ed4a0e6051123cb26bb3","sha512":"f85fb12795fef7fac1c86f7d91548ab85282b352b34e04cd6666411aa4ab5b2254581faf42b95421b4efdad96ab8d9d032c5cf1361105b9a4753b4f2c2c9466b","ssdeep":"384:KEXnN+Y0QfwjZcRHcQcLOaoqoiaoCVDfiL525:KE3N+HQfw1w31TiDCVDfi9k","tlshash":"2952ea587bbdcb78eab318ddd44b100431561b5f812064c2b1feabac2a7dd919394b3d","first_seen":"2025-12-30T11:00:15.308442Z","last_seen":"2026-03-25T21:54:23.825975Z","times_seen":4,"resource_available":true,"data":null}},"time_used":256,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":256,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yangfuinei.biz/js/BsMBd6cE-1763765398141.js","fqdn":"yangfuinei.biz","domain":"yangfuinei.biz","tld":"biz"},"ip":{"addr":"103.73.220.71","port":443,"asn":0,"as":"","country":"India","country_code":"IN"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://yangfuinei.biz/register?code=jycICrYk","date":"2026-03-25T21:53:55.333Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yangfuinei.biz","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 31 Jan 2026 06:49:57 GMT","end":"Fri, 01 May 2026 06:49:56 GMT"},"fingerprint":{"sha1":"92:D1:83:CD:64:10:8D:2E:BB:4C:03:7E:41:89:D8:40:8E:11:A3:8D","sha256":"FC:09:F0:D9:70:0D:59:E1:E6:DC:80:2B:4C:A1:3C:84:FA:DB:EC:F1:24:B1:03:D0:6F:B0:4D:99:A3:6C:E4:97"}}},"request":{"raw":"GET /js/BsMBd6cE-1763765398141.js HTTP/1.1\r\nHost: yangfuinei.biz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://yangfuinei.biz/js/q2yzloxs-1763765398047.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\nalt-svc: h3=\":443\"; ma=2592000\r\ncache-control: max-age=43200\r\ncontent-type: application/javascript\r\ndate: Wed, 25 Mar 2026 21:53:55 GMT\r\netag: \"6920edd4-1ea\"\r\nexpires: Thu, 26 Mar 2026 09:53:55 GMT\r\nlast-modified: Fri, 21 Nov 2025 22:55:16 GMT\r\nserver: nginx\r\nvia: 1.1 Caddy\r\ncontent-length: 490\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":490,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (489)","md5":"bdb575bfcc4d44fd2c94646db6d1577f","sha1":"b01cbe88077d2d6e895957e08322d10eadd591e2","sha256":"26b4ef8c4c8584e8a1e81e5bcd31338902c511086ce51f27ee6d49dd9b130071","sha512":"06d00fb452d5d05d507fd5e3b9846a8501ed8492b3c8212fc3b3ee4cd6d1428644b4d42739eea18001098d2c358045bc4864d7ba3d2d7ba50f0e99dc8fcb1751","ssdeep":"","tlshash":"fff0d44e6f6dd2b9a572684c9bb7401e36491b37132045f0d0d61c71a36d419f87d157","first_seen":"2025-12-30T11:00:15.286381Z","last_seen":"2026-03-25T21:54:23.827744Z","times_seen":4,"resource_available":true,"data":null}},"time_used":248,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":248,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"smartchat.pao1.top/api/chat/agent-status","fqdn":"smartchat.pao1.top","domain":"pao1.top","tld":"top"},"ip":{"addr":"103.73.220.71","port":443,"asn":0,"as":"","country":"India","country_code":"IN"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://yangfuinei.biz/register?code=jycICrYk","date":"2026-03-25T21:53:55.824Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"smartchat.pao1.top","organization":""},"issuer":{"commonName":"ZeroSSL ECC Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Tue, 13 Jan 2026 00:00:00 GMT","end":"Mon, 13 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"0E:F1:3D:EC:D0:1A:EC:63:F3:F5:13:1D:52:ED:F8:CE:0B:57:ED:DB","sha256":"72:1C:E9:77:80:F1:71:F5:EC:A7:A1:5A:97:D7:35:4F:D8:64:A7:B2:56:AF:AD:17:8B:0C:45:45:F0:D0:C4:70"}}},"request":{"raw":"OPTIONS /api/chat/agent-status HTTP/1.1\r\nHost: smartchat.pao1.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: content-type,x-site-key\r\nReferer: https://yangfuinei.biz/\r\nOrigin: https://yangfuinei.biz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 No Content\r\naccess-control-allow-headers: content-type,x-site-key\r\naccess-control-allow-methods: GET\r\naccess-control-allow-origin: *\r\naccess-control-max-age: 0\r\nalt-svc: h3=\":443\"; ma=2592000\r\ncache-control: no-cache, private\r\ncontent-type: text/html; charset=UTF-8\r\ndate: Wed, 25 Mar 2026 21:53:56 GMT\r\nserver: nginx\r\nstrict-transport-security: max-age=31536000\r\nvary: Access-Control-Request-Method, Access-Control-Request-Headers\r\nvia: 1.1 Caddy\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-02T18:08:06.981696Z","times_seen":16047564,"resource_available":true,"data":null}},"time_used":1159,"timings":{"blocked":450,"dns":1,"connect":216,"send":0,"wait":256,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yawdg.net/register?code=jycICrYk","fqdn":"yawdg.net","domain":"yawdg.net","tld":"net"},"ip":{"addr":"64.118.146.251","port":443,"asn":7029,"as":"WINDSTREAM","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-25T21:53:48.264Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yawdg.net","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 05 Jan 2026 08:19:29 GMT","end":"Sun, 05 Apr 2026 08:19:28 GMT"},"fingerprint":{"sha1":"06:7C:CF:3B:AB:65:4C:21:BA:7F:9B:D3:7C:2A:DD:D7:56:41:86:CD","sha256":"59:6B:28:17:3F:1F:9D:88:48:A0:95:BE:A0:BC:8C:DB:E1:D5:58:4D:A6:86:35:F9:B9:C4:1E:2E:10:C9:89:68"}}},"request":{"raw":"GET /register?code=jycICrYk HTTP/1.1\r\nHost: yawdg.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncontent-type: text/html; charset=utf-8\r\ndate: Wed, 25 Mar 2026 21:53:49 GMT\r\netag: \"dh0m1b7l3wv5dfl\"\r\nlast-modified: Thu, 12 Mar 2026 07:03:30 GMT\r\nserver: Caddy\r\nvary: Accept-Encoding\r\nx-cache: BYPASS\r\ncontent-length: 17409\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Caddy","description":"","website":"https://caddyserver.com","common_platform_enumeration":"cpe:2.3:a:caddyserver:caddy:*:*:*:*:*:*:*:*","icon":"caddy.svg","categories":["Web servers"]}],"data":{"size":17409,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"c3f28757f38021d4ac3efb2c260335b5","sha1":"28669735ffd0648f016cf57f8a82a72cb36f10fc","sha256":"726fcc40e977adbec0fbb7067d16c47d6fe1d90d508177ef87401fa14a1fb1d2","sha512":"f4dd10fd871b01ba93d9b3771804c628dfc41e316e32085bbca42d3de79a96b4dca2dcd5cba65bf0c495d4fa49585983140804229f2669225d4a0fdfe138b8c2","ssdeep":"192:erf0X+TQRiJ1aGZRJ+eRB5fyqpwRsSv2ZsfuGFcL3frYXv3LRq92fDRuwBrIGdHw:erY+T0iJNZhXwRskuGTVu2dhnQTl","tlshash":"9e72b6de59e700926e23b07a5b6f610878b5891b244ac901bd4fb3504f90f1917dabff","first_seen":"2026-03-25T21:54:23.81331Z","last_seen":"2026-03-25T21:54:23.81331Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1753,"timings":{"blocked":608,"dns":60,"connect":264,"send":0,"wait":336,"receive":201,"ssl":272},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yawdg.net/api/next-target","fqdn":"yawdg.net","domain":"yawdg.net","tld":"net"},"ip":{"addr":"64.118.146.251","port":443,"asn":7029,"as":"WINDSTREAM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://yawdg.net/register?code=jycICrYk","date":"2026-03-25T21:53:49.427Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yawdg.net","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 05 Jan 2026 08:19:29 GMT","end":"Sun, 05 Apr 2026 08:19:28 GMT"},"fingerprint":{"sha1":"06:7C:CF:3B:AB:65:4C:21:BA:7F:9B:D3:7C:2A:DD:D7:56:41:86:CD","sha256":"59:6B:28:17:3F:1F:9D:88:48:A0:95:BE:A0:BC:8C:DB:E1:D5:58:4D:A6:86:35:F9:B9:C4:1E:2E:10:C9:89:68"}}},"request":{"raw":"GET /api/next-target HTTP/1.1\r\nHost: yawdg.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://yawdg.net/register?code=jycICrYk\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/json; charset=utf-8\r\ndate: Wed, 25 Mar 2026 21:53:49 GMT\r\netag: W/\"89-gnHPXGNFJQRamwzL67TGUHqkfS0\"\r\nvia: 1.1 Caddy\r\nx-cache: BYPASS\r\nx-powered-by: Express\r\ncontent-length: 137\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":137,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"7316cdfd760ff109f5e768729e997bb3","sha1":"8271cf5c634525045a9b0ccbebb4c6507aa47d2d","sha256":"b1d4a564eafd2c4c606cf38bf2c12ada38178d177a93e7baf72306b66bb3d908","sha512":"ab98bc716c3cc8775134521587aa42743aa0e5df84f6054c382001a8594dfb2bcef2c22e68c031c037a00d7773ec9484d7e0725c83cd5f09fce460fd5e1b71ba","ssdeep":"","tlshash":"bfc0928ff70265f3210413d590d28327d0c00ea67096baa6dc9033ecc28788db649b5f","first_seen":"2026-03-25T21:54:23.828751Z","last_seen":"2026-03-25T21:54:23.828751Z","times_seen":1,"resource_available":false,"data":null}},"time_used":341,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":341,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yawzz.net/api/next-target","fqdn":"yawzz.net","domain":"yawzz.net","tld":"net"},"ip":{"addr":"51.83.33.39","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://yawzz.net/register?code=jycICrYk","date":"2026-03-25T21:53:50.739Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yawzz.net","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 10 Jan 2026 17:07:42 GMT","end":"Fri, 10 Apr 2026 17:07:41 GMT"},"fingerprint":{"sha1":"5B:4A:98:77:D4:F5:9E:02:B7:92:AF:EE:AD:A8:0D:89:77:8F:9D:D8","sha256":"E7:F2:88:01:92:B2:9C:0E:36:11:97:13:7E:BD:E2:C9:50:FC:17:C8:94:7B:16:46:E0:0B:8E:38:B0:D3:E2:6F"}}},"request":{"raw":"GET /api/next-target HTTP/1.1\r\nHost: yawzz.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://yawzz.net/register?code=jycICrYk\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/json; charset=utf-8\r\ndate: Wed, 25 Mar 2026 21:53:50 GMT\r\netag: W/\"c5-wl2vE4/NZMrnl9kMrLuhNrSH/XI\"\r\nvia: 1.1 Caddy\r\nx-cache: BYPASS\r\nx-powered-by: Express\r\ncontent-length: 197\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":197,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"4951db1171a9dd26c9555cd62201295e","sha1":"c25daf138fcd64cae797d90cacbba136b487fd72","sha256":"22b4218d4eae4f7e0a3ec20be95c26f184aa8d92cd0cb2da866cf6f34f14d0e6","sha512":"6dd6f8dff88f0426f73fdfa3b342c16a277205ffe3bcf1ed7c459605aa46adb784db03c8ef3fd1b7d1432be4b4f8b1291c74fa95f0a8b1845352d6dc7fe7aa21","ssdeep":"","tlshash":"edd022cf6b802330870007dd00ad2b0ada1602ab3ab0759afaa08e9eca03084300651f","first_seen":"2026-03-25T21:54:23.829541Z","last_seen":"2026-03-25T21:54:23.829541Z","times_seen":1,"resource_available":false,"data":null}},"time_used":334,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":334,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yangfuinei.biz/register?code=jycICrYk","fqdn":"yangfuinei.biz","domain":"yangfuinei.biz","tld":"biz"},"ip":{"addr":"103.73.220.71","port":443,"asn":0,"as":"","country":"India","country_code":"IN"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-25T21:53:51.857Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yangfuinei.biz","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 31 Jan 2026 06:49:57 GMT","end":"Fri, 01 May 2026 06:49:56 GMT"},"fingerprint":{"sha1":"92:D1:83:CD:64:10:8D:2E:BB:4C:03:7E:41:89:D8:40:8E:11:A3:8D","sha256":"FC:09:F0:D9:70:0D:59:E1:E6:DC:80:2B:4C:A1:3C:84:FA:DB:EC:F1:24:B1:03:D0:6F:B0:4D:99:A3:6C:E4:97"}}},"request":{"raw":"GET /register?code=jycICrYk HTTP/1.1\r\nHost: yangfuinei.biz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://yawzz.net/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nalt-svc: h3=\":443\"; ma=2592000\r\ncontent-encoding: gzip\r\ncontent-type: text/html\r\ndate: Wed, 25 Mar 2026 21:53:52 GMT\r\netag: W/\"695ce8e3-2718\"\r\nlast-modified: Tue, 06 Jan 2026 10:50:11 GMT\r\nserver: nginx\r\nvary: Accept-Encoding\r\nvia: 1.1 Caddy\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":10008,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text","md5":"36b8ff161207ec6116bcd686b9e03665","sha1":"cdfa4e730425269234dd79f2ffff34aecd775151","sha256":"68f495b0a6475dbe13c464ee4d7065bcf3058f081f8c942d374e679d2609b7d6","sha512":"c1bd82eb0278aadbd2698e2ba8d334696088763af5f73e7462c8e0e0504ded73f1c9a097633277c4ae7400cc27f53f5e1bb4b6f623dde31c41fb33b1d7b0e668","ssdeep":"192:fnNun2cyfeHAi742BjO4rPjQFSDuRTdqFfDFzSdr5y6I:fn823fMBxMjPe","tlshash":"ce2294df79f76021b6235035177f621c32399807d589cd253dad928c9f88ba887b3a98","first_seen":"2026-03-25T21:54:23.830345Z","last_seen":"2026-03-25T21:54:23.830345Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1151,"timings":{"blocked":427,"dns":0,"connect":217,"send":0,"wait":279,"receive":-1,"ssl":227},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"smartchat.pao1.top/widget.js","fqdn":"smartchat.pao1.top","domain":"pao1.top","tld":"top"},"ip":{"addr":"103.73.220.71","port":443,"asn":0,"as":"","country":"India","country_code":"IN"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://yangfuinei.biz/register?code=jycICrYk","date":"2026-03-25T21:53:54.181Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"smartchat.pao1.top","organization":""},"issuer":{"commonName":"ZeroSSL ECC Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Tue, 13 Jan 2026 00:00:00 GMT","end":"Mon, 13 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"0E:F1:3D:EC:D0:1A:EC:63:F3:F5:13:1D:52:ED:F8:CE:0B:57:ED:DB","sha256":"72:1C:E9:77:80:F1:71:F5:EC:A7:A1:5A:97:D7:35:4F:D8:64:A7:B2:56:AF:AD:17:8B:0C:45:45:F0:D0:C4:70"}}},"request":{"raw":"GET /widget.js HTTP/1.1\r\nHost: smartchat.pao1.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://yangfuinei.biz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nalt-svc: h3=\":443\"; ma=2592000\r\ncache-control: no-cache, no-store, no-cache, must-revalidate\r\ncontent-encoding: gzip\r\ncontent-type: application/javascript\r\ndate: Wed, 25 Mar 2026 21:53:55 GMT\r\netag: W/\"69c42db1-44901\"\r\nexpires: Wed, 25 Mar 2026 21:53:54 GMT\r\nlast-modified: Wed, 25 Mar 2026 18:47:13 GMT\r\nserver: nginx\r\nvary: Accept-Encoding\r\nvia: 1.1 Caddy\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":280833,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (481)","md5":"82cf05ec9b5f5d70078557a2c9a67e2b","sha1":"3aa231a816b59391514cf419a6bb252404990274","sha256":"a5b4251fd6e75e8bc6c7cb599f00527adb1d057eee823ee1d5eeb26e3a412009","sha512":"f847faab2a74f65b7ad724c72af0c9b2c46543c25b42704593d144af2a09ef8b9ab39b7df6a3682e925c4f1601a1da4ae30da7d29fd87830ca72f07f1df91cdc","ssdeep":"1536:4NYYDBuHXmlp//YlIIq9d3JV0x72hyN9QMQgwtaKD6amNMXDBdpwniG3yC4f3g4v:WFl/Lc2hyZwy47pwniGJY6V2","tlshash":"1d54097a75f704151923a07b67db624a3220b003a00ace24bfdc5ba56fc1db955f3bda","first_seen":"2026-03-25T21:54:23.831151Z","last_seen":"2026-03-25T21:54:23.831151Z","times_seen":1,"resource_available":true,"data":null}},"time_used":1697,"timings":{"blocked":702,"dns":230,"connect":228,"send":0,"wait":292,"receive":0,"ssl":242},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yangfuinei.biz/js/DGOGOvCg-1763765398145.js","fqdn":"yangfuinei.biz","domain":"yangfuinei.biz","tld":"biz"},"ip":{"addr":"103.73.220.71","port":443,"asn":0,"as":"","country":"India","country_code":"IN"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://yangfuinei.biz/register?code=jycICrYk","date":"2026-03-25T21:53:55.335Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yangfuinei.biz","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 31 Jan 2026 06:49:57 GMT","end":"Fri, 01 May 2026 06:49:56 GMT"},"fingerprint":{"sha1":"92:D1:83:CD:64:10:8D:2E:BB:4C:03:7E:41:89:D8:40:8E:11:A3:8D","sha256":"FC:09:F0:D9:70:0D:59:E1:E6:DC:80:2B:4C:A1:3C:84:FA:DB:EC:F1:24:B1:03:D0:6F:B0:4D:99:A3:6C:E4:97"}}},"request":{"raw":"GET /js/DGOGOvCg-1763765398145.js HTTP/1.1\r\nHost: yangfuinei.biz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://yangfuinei.biz/js/q2yzloxs-1763765398047.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nalt-svc: h3=\":443\"; ma=2592000\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\ncontent-type: application/javascript\r\ndate: Wed, 25 Mar 2026 21:53:55 GMT\r\netag: \"6920edd5-2cf3-gzip\"\r\nexpires: Thu, 26 Mar 2026 09:53:55 GMT\r\nlast-modified: Fri, 21 Nov 2025 22:55:17 GMT\r\nserver: nginx\r\nvary: Accept-Encoding\r\nvia: 1.1 Caddy\r\ncontent-length: 2913\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":11507,"size_decoded":0,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text, with very long lines (10856), with LF, NEL line terminators","md5":"dc49585ddb1028f248c00ef6518001b7","sha1":"d8a26a85310a23cbb89bc64168c570f7cadc6f92","sha256":"e0edb5ec6f0b0957e7d457938d4c25183d10f1596b68dd2036fdd40de9fd6cd3","sha512":"e09317cf8e4e69de282d1a0bb3784d9391ac3764093bc71e964edaa3d245cd701002de1bc5bc890c28568cf3916522ed17df7e21816573322373f231899e39be","ssdeep":"192:CglGWJSrbdQEXu6VmF87mGF7wOCUy+CcU:CgnJSrxJu6Vy87F7wOUR","tlshash":"a832644eb8e35a484a2360e9b89d3430f111bb45604ab160e7994ec9ffdce07f175ba7","first_seen":"2026-03-25T21:54:23.811461Z","last_seen":"2026-03-25T21:54:23.811461Z","times_seen":1,"resource_available":false,"data":null}},"time_used":252,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":251,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yangfuinei.biz/yangfanicon.png","fqdn":"yangfuinei.biz","domain":"yangfuinei.biz","tld":"biz"},"ip":{"addr":"103.73.220.71","port":443,"asn":0,"as":"","country":"India","country_code":"IN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://yangfuinei.biz/register?code=jycICrYk","date":"2026-03-25T21:53:55.718Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yangfuinei.biz","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 31 Jan 2026 06:49:57 GMT","end":"Fri, 01 May 2026 06:49:56 GMT"},"fingerprint":{"sha1":"92:D1:83:CD:64:10:8D:2E:BB:4C:03:7E:41:89:D8:40:8E:11:A3:8D","sha256":"FC:09:F0:D9:70:0D:59:E1:E6:DC:80:2B:4C:A1:3C:84:FA:DB:EC:F1:24:B1:03:D0:6F:B0:4D:99:A3:6C:E4:97"}}},"request":{"raw":"GET /yangfanicon.png HTTP/1.1\r\nHost: yangfuinei.biz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://yangfuinei.biz/register?code=jycICrYk\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\nalt-svc: h3=\":443\"; ma=2592000\r\ncache-control: max-age=2592000\r\ncontent-type: image/png\r\ndate: Wed, 25 Mar 2026 21:53:55 GMT\r\netag: \"6920ee07-224ac\"\r\nexpires: Fri, 24 Apr 2026 21:53:55 GMT\r\nlast-modified: Fri, 21 Nov 2025 22:56:07 GMT\r\nserver: nginx\r\nvary: Accept-Encoding\r\nvia: 1.1 Caddy\r\ncontent-length: 140460\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":140460,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 905 x 288, 8-bit/color RGBA, non-interlaced","md5":"5f48113c7434aecf5a45de2167f20573","sha1":"1d3d9683c155e134582a3a7fadbc1d47eaccdf2d","sha256":"cba4ddada269a8c14e44b2bc36a00f3cd739007288ef425c3c768bdf9bea2ac4","sha512":"6866884e77212ba70bb90c474a86144e2837007d045d5deeeaec8d09b9dbe0c0124e5c7b81ddd307b23d8a30282f55779f8d98026723279e8c26b3799963d062","ssdeep":"3072:GMHapLOAkkL9iVaEe7VLRQrodq+KIpBwl6uiLEUMHp5oCSHh:HHapLQKiVteBG0dqJw4iAt7SB","tlshash":"0cd3126b51504199f110657a3b6f7fa6d71d70f2ec99a2f1e83cc20b10f78336a69a90","first_seen":"2025-10-09T21:46:44.391668Z","last_seen":"2026-03-25T21:54:23.83197Z","times_seen":6,"resource_available":false,"data":null}},"time_used":274,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":249,"receive":25,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yangfuinei.biz/js/BsMBd6cE-1763765398141.js","fqdn":"yangfuinei.biz","domain":"yangfuinei.biz","tld":"biz"},"ip":{"addr":"103.73.220.71","port":443,"asn":0,"as":"","country":"India","country_code":"IN"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://yangfuinei.biz/register?code=jycICrYk","date":"2026-03-25T21:53:54.823Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yangfuinei.biz","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 31 Jan 2026 06:49:57 GMT","end":"Fri, 01 May 2026 06:49:56 GMT"},"fingerprint":{"sha1":"92:D1:83:CD:64:10:8D:2E:BB:4C:03:7E:41:89:D8:40:8E:11:A3:8D","sha256":"FC:09:F0:D9:70:0D:59:E1:E6:DC:80:2B:4C:A1:3C:84:FA:DB:EC:F1:24:B1:03:D0:6F:B0:4D:99:A3:6C:E4:97"}}},"request":{"raw":"GET /js/BsMBd6cE-1763765398141.js HTTP/1.1\r\nHost: yangfuinei.biz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://yangfuinei.biz/register?code=jycICrYk\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\nalt-svc: h3=\":443\"; ma=2592000\r\ncache-control: max-age=43200\r\ncontent-type: application/javascript\r\ndate: Wed, 25 Mar 2026 21:53:54 GMT\r\netag: \"6920edd4-1ea\"\r\nexpires: Thu, 26 Mar 2026 09:53:54 GMT\r\nlast-modified: Fri, 21 Nov 2025 22:55:16 GMT\r\nserver: nginx\r\nvia: 1.1 Caddy\r\ncontent-length: 490\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":490,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (489)","md5":"bdb575bfcc4d44fd2c94646db6d1577f","sha1":"b01cbe88077d2d6e895957e08322d10eadd591e2","sha256":"26b4ef8c4c8584e8a1e81e5bcd31338902c511086ce51f27ee6d49dd9b130071","sha512":"06d00fb452d5d05d507fd5e3b9846a8501ed8492b3c8212fc3b3ee4cd6d1428644b4d42739eea18001098d2c358045bc4864d7ba3d2d7ba50f0e99dc8fcb1751","ssdeep":"","tlshash":"fff0d44e6f6dd2b9a572684c9bb7401e36491b37132045f0d0d61c71a36d419f87d157","first_seen":"2025-12-30T11:00:15.286381Z","last_seen":"2026-03-25T21:54:23.827744Z","times_seen":4,"resource_available":true,"data":null}},"time_used":275,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":275,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yangfuinei.biz/js/DgBwhFlo-1763765398145.js","fqdn":"yangfuinei.biz","domain":"yangfuinei.biz","tld":"biz"},"ip":{"addr":"103.73.220.71","port":443,"asn":0,"as":"","country":"India","country_code":"IN"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://yangfuinei.biz/register?code=jycICrYk","date":"2026-03-25T21:53:54.826Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yangfuinei.biz","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 31 Jan 2026 06:49:57 GMT","end":"Fri, 01 May 2026 06:49:56 GMT"},"fingerprint":{"sha1":"92:D1:83:CD:64:10:8D:2E:BB:4C:03:7E:41:89:D8:40:8E:11:A3:8D","sha256":"FC:09:F0:D9:70:0D:59:E1:E6:DC:80:2B:4C:A1:3C:84:FA:DB:EC:F1:24:B1:03:D0:6F:B0:4D:99:A3:6C:E4:97"}}},"request":{"raw":"GET /js/DgBwhFlo-1763765398145.js HTTP/1.1\r\nHost: yangfuinei.biz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://yangfuinei.biz/register?code=jycICrYk\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nalt-svc: h3=\":443\"; ma=2592000\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\ncontent-type: application/javascript\r\ndate: Wed, 25 Mar 2026 21:53:54 GMT\r\netag: \"6920edd5-7383-gzip\"\r\nexpires: Thu, 26 Mar 2026 09:53:54 GMT\r\nlast-modified: Fri, 21 Nov 2025 22:55:17 GMT\r\nserver: nginx\r\nvary: Accept-Encoding\r\nvia: 1.1 Caddy\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":29571,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (29570)","md5":"0362932d68da32c27609de59203c0ac0","sha1":"40dcccc8e9b38b1d721d89bf61eb05227ed7c491","sha256":"65e41b6c1444a66e826823c0a2a7fbbecd318259acce4fcf9ef5a304e03bb379","sha512":"0c04e5f93534b4ece50328fbdc36de0ea987549a9010b98f26b182951f3e69e120c95d418ee5515128cbb5d83c3987f3d6252f91e6e5fd20edece27fb8359549","ssdeep":"768:Riq2nu50YvPvnnzlGNUfOKPaMWgAbbxIwtt/kFkuazc5XSfUHGh78lF8dh5B/qML:GFfpw1cBivuF3Ui","tlshash":"91d209d576d1f06253aa21f140bb0405f33a9519744e84e8f128aceb3cb614a97b7fbd","first_seen":"2025-08-14T22:09:07.206772Z","last_seen":"2026-06-02T01:57:29.38665Z","times_seen":16,"resource_available":true,"data":null}},"time_used":317,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":317,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yangfuinei.biz/assets/woff2/Dp5v-WZN-1763765397365.woff2?v=7.4.47","fqdn":"yangfuinei.biz","domain":"yangfuinei.biz","tld":"biz"},"ip":{"addr":"103.73.220.71","port":443,"asn":0,"as":"","country":"India","country_code":"IN"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://yangfuinei.biz/register?code=jycICrYk","date":"2026-03-25T21:53:57.329Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yangfuinei.biz","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 31 Jan 2026 06:49:57 GMT","end":"Fri, 01 May 2026 06:49:56 GMT"},"fingerprint":{"sha1":"92:D1:83:CD:64:10:8D:2E:BB:4C:03:7E:41:89:D8:40:8E:11:A3:8D","sha256":"FC:09:F0:D9:70:0D:59:E1:E6:DC:80:2B:4C:A1:3C:84:FA:DB:EC:F1:24:B1:03:D0:6F:B0:4D:99:A3:6C:E4:97"}}},"request":{"raw":"GET /assets/woff2/Dp5v-WZN-1763765397365.woff2?v=7.4.47 HTTP/1.1\r\nHost: yangfuinei.biz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://yangfuinei.biz/assets/css/C4l9JPhj-1763765398349.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\nalt-svc: h3=\":443\"; ma=2592000\r\ncontent-type: font/woff2\r\ndate: Wed, 25 Mar 2026 21:53:58 GMT\r\netag: \"6920edd7-62710\"\r\nlast-modified: Fri, 21 Nov 2025 22:55:19 GMT\r\nserver: nginx\r\nvia: 1.1 Caddy\r\ncontent-length: 403216\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":403216,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 403216, version 1.0","md5":"1d7bcee1b302339c3b8db10214dc9ec6","sha1":"4e20f6ccf43199dea5c85b23a0e0f0ba81ffee26","sha256":"662fefa8f2f8a95c18588d21774789c107c64e771cbe65a69af46291c4311afc","sha512":"6c9b5097ac35698b84624f36f39847aff57b9edd115279cc62f88f024631a6d0f5bbfde22264b71a5169c4cb865f47c4aacba11cd91ab5a7f8ba43a42b840190","ssdeep":"12288:Y2qKg4wwAtPRHbF+tHN+kGU98Qk4p9Am3nVQ0Sd:Y2qKg1bt4FD4o9AmnVQv","tlshash":"31842318e2c5f30931e05ec24c3bbfb491304e63b7aadc9c74add71903a959a1ec7a95","first_seen":"2023-12-27T10:53:37Z","last_seen":"2026-06-02T18:19:57.024327Z","times_seen":4386,"resource_available":false,"data":null}},"time_used":3016,"timings":{"blocked":662,"dns":1,"connect":324,"send":0,"wait":386,"receive":1306,"ssl":333},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}