{"report_id":"745508b5-1771-4f11-a8a7-c71ad6dd6377","version":6,"status":"done","tags":[],"date":"2026-04-10T14:51:33Z","url":{"schema":"http","addr":"teomnerxibaw222.net","fqdn":"teomnerxibaw222.net","domain":"teomnerxibaw222.net","tld":"net"},"ip":{"addr":"182.16.26.42","port":0,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"final":{"url":{"schema":"https","addr":"teomnerxibaw222.net/h5/#/","fqdn":"teomnerxibaw222.net","domain":"teomnerxibaw222.net","tld":"net"},"title":"Bitget","dom":{"size":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"teomnerxibaw222.net","fqdn":"teomnerxibaw222.net","domain":"teomnerxibaw222.net","tld":"net"},"ip":{"addr":"182.16.26.42","port":0,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-05-15T14:51:33Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":null},"summary":[{"fqdn":"teomnerxibaw222.net","ip":{"addr":"182.16.26.42","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":55,"received_data":3537345,"sent_data":46691,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"www.mycurrency.net","ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2016-06-29","domain_rank":0,"first_seen":"2016-11-25T08:09:44Z","last_seen":"2026-04-10T14:26:47.780348Z","alert_count":0,"request_count":1,"received_data":42119,"sent_data":451,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"cdn.dcloud.net.cn","ip":{"addr":"111.231.169.247","port":443,"asn":45090,"as":"Shenzhen Tencent Computer Systems Company Limited","country":"China","country_code":"CN"},"domain_registered":"2013-07-17","domain_rank":296858,"first_seen":"2018-09-15T09:18:08Z","last_seen":"2026-04-08T22:12:50.414611Z","alert_count":0,"request_count":1,"received_data":578,"sent_data":450,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"teomnerxibaw222.net/h5/","fqdn":"teomnerxibaw222.net","domain":"teomnerxibaw222.net","tld":"net"},"ip":{"addr":"182.16.26.42","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":true,"md5":"3d6b954dc2d01b7f947ffbdbc08419c4","sha1":"91b4d1da374271f3f7a26ace5bb5d9a18cc7833d","sha256":"33452930b33391ee5b905f55ea3d83da98c22f96e001002468f1230369567e4e","sha512":"0edd93b88ed4f3b4e519ecaf80b84a9226198637f31e617f182614a579969c77e65863f98bda78349defd5054b0de9daff0d03b9299fdf432a72ca1b28191074","ssdeep":"","tlshash":"bb6000c3c03303000c0033ff00c300f00000c0000000f3003cc3000330000c003c00cc","size":16,"data":"","first_seen":"2023-03-07T14:41:52Z","last_seen":"2026-05-01T02:11:36.785006Z","times_seen":727,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"teomnerxibaw222.net/h5/","fqdn":"teomnerxibaw222.net","domain":"teomnerxibaw222.net","tld":"net"},"ip":{"addr":"182.16.26.42","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":true,"md5":"c7c2044589cd6c4afb8f708d8f4929ce","sha1":"0a1a91f258a6b31b5f24008bde88fe949fd00317","sha256":"20217fc70ebe327eee12ece90b2c8ad0e6f760234c316849f05b7e2a7d0ee931","sha512":"50894a9f5d6c19842e74141d8b09cfc2ed951ee4d75dd45343c8c9156064fabc2129acf0c4635cfba00be760064af9293e826d7df958097177d67e364bb11248","ssdeep":"","tlshash":"25c04cb4761959305659a22d7239e7d83dbb501130437547901c158d0cf4e945671ea9","size":159,"data":"","first_seen":"2023-03-07T12:06:42Z","last_seen":"2026-05-01T06:37:54.637238Z","times_seen":997,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"teomnerxibaw222.net/h5/static/common/js/touch-emulator.js","fqdn":"teomnerxibaw222.net","domain":"teomnerxibaw222.net","tld":"net"},"ip":{"addr":"182.16.26.42","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"178ba7db6232252a555ba6ff953756a8","sha1":"31129606e2c7e395a73184f30e81e835a424cdf5","sha256":"2968f310031c7a0c1d271836caa44aedaa28794289d14c577f0b17033e8c036d","sha512":"dea2f867ed3e1774320ea9494c9fd6fa24a7c7eeba27e50099530d3eabe196b6a34f70cfb7d0ac87aa5c70dcb5172d149de92da8af78725b6090952588041dbd","ssdeep":"96:L+vx+c5tJzNjX/wGiZ27oA2qMrttS7KDWom4RhvYahnT/TCKkTIT1/CoShwqhzcs:yvx+chzxItcKs+LmKk8TqhzwoEPq","tlshash":"1a32314f098a226204bb7329fb9e904af67e85a311012056fcbc5f653f72a758694ecd","size":11668,"data":"","first_seen":"2023-03-07T14:41:52Z","last_seen":"2026-05-01T02:11:36.777827Z","times_seen":514,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"teomnerxibaw222.net/h5/","fqdn":"teomnerxibaw222.net","domain":"teomnerxibaw222.net","tld":"net"},"ip":{"addr":"182.16.26.42","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":true,"md5":"d9e35f3565e98641c0174d284e8ddd26","sha1":"967e8443ce108fe2742f3ec46237a40560c67c35","sha256":"6fc1c4ed09be48bc1d695bba608ad0c9ff9a525edd88b1819bdf413e88960e82","sha512":"7b6ca8aea3dd9c4b83fda1914179c9957606363ee546540bdaa87d0ed099362681da51036c06bb3a8c6641946b69621d72154075f78b02b770ab1bddb3ac8a23","ssdeep":"","tlshash":"576000000000f00c00c0000c003000c000c0f00f000c0c303c0fcc00300000c0f3000c","size":14,"data":"","first_seen":"2023-03-07T14:41:52Z","last_seen":"2026-05-01T02:11:36.787484Z","times_seen":1342,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"teomnerxibaw222.net/h5/static/js/index.35dde5cd.js","fqdn":"teomnerxibaw222.net","domain":"teomnerxibaw222.net","tld":"net"},"ip":{"addr":"182.16.26.42","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"f80cc368d82569d6829954bc074d5930","sha1":"d36f4822bfa931981105566ddec1a79a816c261d","sha256":"a95d4bd40e749eaf71ba12d1332fabde9eec7b086dea1379df72af6235ce16ce","sha512":"18e481a68a89b7aa3f6c7491ba467776b74714c02f5d09da0f120f8dcfc4a5cae30c4bbf559e0ad367f0594dd7f5364025fae7d61b34ed495ba868e35994e257","ssdeep":"24576:jITbtVr7vZdwG1ZAIkKDJ3bys5XrHeg05TOHty9FzJb/:StVXjHty9FzJb/","tlshash":"7e157d81b5c5957812d35601d08b3618a2fded3a544bb8bdf3c4ab5cdb8768a332633b","size":957463,"data":"","first_seen":"2026-04-10T14:26:53.590193Z","last_seen":"2026-04-10T14:51:41.448028Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"teomnerxibaw222.net/h5/static/js/pages-financial-index~pages-ieo-ieo~pages-index-index~pages-invest-invest.b046caf1.js","fqdn":"teomnerxibaw222.net","domain":"teomnerxibaw222.net","tld":"net"},"ip":{"addr":"182.16.26.42","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"90f46fe1b64a9483a081c8931be7e133","sha1":"cc930762bd0ca70c6e4c5b60160036287dd40553","sha256":"cba8154324fa8575726a69bb5ee1aa3584ed9e6f03e7c44af56fbb598a33d66e","sha512":"f014853e29780a4891f95f0827d8628fabcc41c8811553e45970e413326ae50cca4b16f43e95ae62be69a392dcca75f12a5f593eadbbbab5aa579ad0ffb7a01a","ssdeep":"192:xnfuEf51flC2RSMm+ofK2d8/zxYD/ytWT6Thaaw6PECAXYk2gUi2L2M222Gc2Y+F:xXiS2dQzhWT6laaw6PGcnt99BBKW","tlshash":"4143a3c3f7d8288cc577ef61d54136f89e2aba6376816ad2f8c16f244e266c6250853c","size":58195,"data":"","first_seen":"2026-03-01T15:55:48.753229Z","last_seen":"2026-04-10T14:51:41.43901Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"teomnerxibaw222.net/h5/static/js/chunk-vendors.49619787.js","fqdn":"teomnerxibaw222.net","domain":"teomnerxibaw222.net","tld":"net"},"ip":{"addr":"182.16.26.42","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"a7589c94a9b7e7400c6ce0ca8143a9ec","sha1":"8d3be8bfd9276fde34f70b26dabdb66f95a6404a","sha256":"46178b1af6743d1fe172046c81fc72ebfa0ffab5f7edda1d486954d496f8a908","sha512":"1a50ec713e1ec26136c5f791b359f88679b54c48ceb5f364461162ad5ead24196d01d13fc73d58edce9ad379ba0eaf5f394b4606ab265ee00528f16c406b2b25","ssdeep":"6144:n+UfaID3UQNN+mhXSxv9u84GmzC2bY6cVcJJb:n3i6E+NjO0zTRcCJJb","tlshash":"d9d4089cb285b06547d721b1403f220bb23b6968b40ba4d5f37ae4d46e7c94e2267f7c","size":602670,"data":"","first_seen":"2026-03-17T01:28:03.467374Z","last_seen":"2026-04-10T14:51:41.409128Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"teomnerxibaw222.net/h5/static/js/pages-common-aboutus~pages-common-area~pages-common-article~pages-common-borrowing~pages-common-cont~85764de0.32eb5b3a.js","fqdn":"teomnerxibaw222.net","domain":"teomnerxibaw222.net","tld":"net"},"ip":{"addr":"182.16.26.42","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"e1725a27b2a6155ba8be8f4a96f350d4","sha1":"cba5dacaa6b6c9ea339118712f210291a64be5a8","sha256":"33f43a2aea29d6e981f6231463eae6354c62c42a5ed765ea2ea3cb2eba845ea1","sha512":"57624a6c57924fdfb21b87d524fc45df09a2b3e564d8f4c282c20d6975fc935cb99a8cf416ac0bc82474d1e4c2eb67bb74f01eb8eaaf55e4af07771e5bd24735","ssdeep":"1536:jsYId0FHoMqu7NdEAaM2OKV+D2ikecrDg:jsp0NVr7fnaMwV+D2iZco","tlshash":"c5b3e3e2fccc90405e67ce6bf1c13af85616b72246c1f871e6493b364e52ad123e65b8","size":108939,"data":"","first_seen":"2025-10-09T04:17:48.408268Z","last_seen":"2026-04-10T14:51:41.428419Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"teomnerxibaw222.net/h5/static/js/pages-common-login~pages-common-register~pages-copytrade-copy~pages-follow-index~pages-fund-fundTran~0c3dba78.9a0709d3.js","fqdn":"teomnerxibaw222.net","domain":"teomnerxibaw222.net","tld":"net"},"ip":{"addr":"182.16.26.42","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"5c4efeb896c9ae1be54c6f422cdb5bb3","sha1":"121fe5ea00646c868a3bf721c937dc64041c0e73","sha256":"85938dbb2246c9ea78bcb011d1423db03f7a5cda44b242af9b3fa5098ccd7503","sha512":"75eed4f14bd94649924c6bd59d3035f0395f41ad8a94893491a66fb24fb434f6578a84c4c0e1b629625245094ceba031c32eb0fcc0e8fad35aa5d5f813acf577","ssdeep":"384:UrDyKtap+SkU0eJz1z5dM+4GJCz62ga741zmT8REE+utOULnbOeAc//CQ:U3ZIkO+GJqz4YdULi9JQ","tlshash":"abc3e982fadc200455b7c702916176fdeb2fae7343c26897d881ef66ce2e5d7290652c","size":121795,"data":"","first_seen":"2025-10-09T04:17:48.433127Z","last_seen":"2026-04-10T14:51:41.429032Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"teomnerxibaw222.net/h5/static/js/pages-index-index~pages-transaction-index.0849278c.js","fqdn":"teomnerxibaw222.net","domain":"teomnerxibaw222.net","tld":"net"},"ip":{"addr":"182.16.26.42","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"f840f606155d730449f6d8f7b1367cd2","sha1":"51c109386dc0f6875fef9c676b3bb4dd00c0f2d0","sha256":"c3443393b5c08d4c2ce7cb06daba2ef6883aade7fd59c27fe38a1960c62d1aa7","sha512":"d7be1030df77a94a57c833f85926fa77403709a1f6a6696dedf9fe2a2c0afb0a82e0ba624d4c78cdb7f5d6698748953bc2113c6e67b35512eeb781872688b9ab","ssdeep":"192:a00mfZUTAx1fRlj6rOyaqYEO6ud8HB1ofxWFrxnn1hQy7FozgCCe432B2v2h2IcO:h0GKZO6w8QWFrVn1hQy0qVGlXxGvbQ+Y","tlshash":"fc530b82fdec20054167eb4da14132f9db2ae96b5283fae3d8416b344eb79c63d8d51c","size":63030,"data":"","first_seen":"2026-03-01T15:55:48.710121Z","last_seen":"2026-04-10T14:51:41.423337Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"teomnerxibaw222.net/h5/static/js/pages-index-index.f3a6ddd0.js","fqdn":"teomnerxibaw222.net","domain":"teomnerxibaw222.net","tld":"net"},"ip":{"addr":"182.16.26.42","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"6583b5f9b598f62de85a500f2b43967d","sha1":"23e5393cb31d0e66f9eb2b159f4b20004904e834","sha256":"c9f8f0f3c2c6b8b3e7cb0af9ed80f1e110111d2eedaccea12ab42041b19ed2fb","sha512":"9c0e6d39871d279d7d60b8c2f98b117b055d9e6b4a52918fc0cc4bd3d38f4ee9fb1653318413dfc3a755ca1867286edc46c2dc340abca3f78b2da30600346066","ssdeep":"6144:YXTeNLDxMIxR2uDzj4C78b3RJ38VYvHXZfRrnGpr3tsVBzXRZD:fNLDxMID2uDzj4Ck3RJ38VqHXZfRc3OD","tlshash":"c6d4d686f5cc30058277c71480ab32fc963aad73524598d7f559bff08e6a9ca3269b1c","size":610874,"data":"","first_seen":"2026-04-10T14:26:53.573641Z","last_seen":"2026-04-10T14:51:41.420348Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"teomnerxibaw222.net/h5/static/js/chunk-vendors.49619787.js","fqdn":"teomnerxibaw222.net","domain":"teomnerxibaw222.net","tld":"net"},"ip":{"addr":"182.16.26.42","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://teomnerxibaw222.net/h5/","date":"2026-04-10T14:51:12.793Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"teomnerxibaw222.net","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 10 Apr 2026 02:56:33 GMT","end":"Thu, 09 Jul 2026 02:56:32 GMT"},"fingerprint":{"sha1":"B5:7B:12:B8:78:63:E7:29:56:3A:F3:0B:5A:79:65:9F:D6:2C:29:A2","sha256":"37:61:C1:C1:64:C5:0D:92:BD:75:CA:9F:12:23:01:9B:8A:A4:E1:67:5F:49:7E:95:70:E2:F8:4E:6C:C2:C8:79"}}},"request":{"raw":"GET /h5/static/js/chunk-vendors.49619787.js HTTP/1.1\r\nHost: teomnerxibaw222.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://teomnerxibaw222.net/h5/\r\nCookie: angela_session=eyJpdiI6Ikd0YUhFZng0S1pPSTA5bFhkcURCS0E9PSIsInZhbHVlIjoiSEFcL3hTZEJjRytIR25XQzVBbFNERTY4WFdubmJRVGRLRlJ2K1wvS1dXSEFaeUhJcmk1dEw1dERUWUkrSWJ0K2ZHckdGWExncjU4WXBFNzc4NnJJZFZIWE5DXC8yMmZkVUpjZTQxcFwvVUdnbUJWdHo2WVZBeUl6VEtEOEpiWDVON2taIiwibWFjIjoiOWUyNzJlZTcyN2YyYjBkMjU3YmRkMjhkZWI0NTAzODQ5ZWVkZjEwNDZjOTkzZWU3Zjk0ZmY0NGU3NGFiYzZkZCJ9\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 10 Apr 2026 14:51:12 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 05 Feb 2026 17:37:52 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6984d570-9322e\"\r\nexpires: Sat, 11 Apr 2026 02:51:12 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":602670,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65465), with no line terminators","md5":"a7589c94a9b7e7400c6ce0ca8143a9ec","sha1":"8d3be8bfd9276fde34f70b26dabdb66f95a6404a","sha256":"46178b1af6743d1fe172046c81fc72ebfa0ffab5f7edda1d486954d496f8a908","sha512":"1a50ec713e1ec26136c5f791b359f88679b54c48ceb5f364461162ad5ead24196d01d13fc73d58edce9ad379ba0eaf5f394b4606ab265ee00528f16c406b2b25","ssdeep":"6144:n+UfaID3UQNN+mhXSxv9u84GmzC2bY6cVcJJb:n3i6E+NjO0zTRcCJJb","tlshash":"d9d4089cb285b06547d721b1403f220bb23b6968b40ba4d5f37ae4d46e7c94e2267f7c","first_seen":"2026-03-17T01:28:03.467374Z","last_seen":"2026-04-10T14:51:41.409128Z","times_seen":3,"resource_available":true,"data":null}},"time_used":570,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":570,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"teomnerxibaw222.net/h5/static/fonts/DIN-Regular.1e0b91dc.ttf","fqdn":"teomnerxibaw222.net","domain":"teomnerxibaw222.net","tld":"net"},"ip":{"addr":"182.16.26.42","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://teomnerxibaw222.net/h5/","date":"2026-04-10T14:51:14.267Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"teomnerxibaw222.net","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 10 Apr 2026 02:56:33 GMT","end":"Thu, 09 Jul 2026 02:56:32 GMT"},"fingerprint":{"sha1":"B5:7B:12:B8:78:63:E7:29:56:3A:F3:0B:5A:79:65:9F:D6:2C:29:A2","sha256":"37:61:C1:C1:64:C5:0D:92:BD:75:CA:9F:12:23:01:9B:8A:A4:E1:67:5F:49:7E:95:70:E2:F8:4E:6C:C2:C8:79"}}},"request":{"raw":"GET /h5/static/fonts/DIN-Regular.1e0b91dc.ttf HTTP/1.1\r\nHost: teomnerxibaw222.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://teomnerxibaw222.net/h5/\r\nCookie: angela_session=eyJpdiI6Ikd0YUhFZng0S1pPSTA5bFhkcURCS0E9PSIsInZhbHVlIjoiSEFcL3hTZEJjRytIR25XQzVBbFNERTY4WFdubmJRVGRLRlJ2K1wvS1dXSEFaeUhJcmk1dEw1dERUWUkrSWJ0K2ZHckdGWExncjU4WXBFNzc4NnJJZFZIWE5DXC8yMmZkVUpjZTQxcFwvVUdnbUJWdHo2WVZBeUl6VEtEOEpiWDVON2taIiwibWFjIjoiOWUyNzJlZTcyN2YyYjBkMjU3YmRkMjhkZWI0NTAzODQ5ZWVkZjEwNDZjOTkzZWU3Zjk0ZmY0NGU3NGFiYzZkZCJ9\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 10 Apr 2026 14:51:14 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 24676\r\nlast-modified: Thu, 05 Feb 2026 17:37:52 GMT\r\netag: \"6984d570-6064\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":24676,"size_decoded":0,"mime_type":"application/octet-stream","magic":"TrueType Font data, 15 tables, 1st \"FFTM\", 14 names, Macintosh","md5":"1e0b91dcb4ed262d0c603006919a1fd8","sha1":"aa0cecebc344f5a3bbd614ab97a42ff8f8637d46","sha256":"4749fb5068ba31c2cba31bf6c7340977fc21cf0e9339bdf155dd57457cfc9e0d","sha512":"dc5635a9a7a8f0b3b454de6c1cd56bd22d16310a18b874f153a38bdecaf41dad5eea2405f3e092d9040f9278d37cc5163dba32f3478f91d7a6a348f4ee708bd8","ssdeep":"384:9iJk3F9sakdL5E5P/y5QJ0FNpmuJqJgkJhBZ5JeJMz1vHJb90KILamCKwL/plOLz:9JmdlAn2/pm6cBpJX2sdX4","tlshash":"9db27c0957424b0fc7277e308e2642a2d725fcb427fa9bdb9d44d8f7606d2e34c68a45","first_seen":"2023-04-17T17:59:29Z","last_seen":"2026-05-01T02:11:36.759394Z","times_seen":386,"resource_available":false,"data":null}},"time_used":364,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":363,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.mycurrency.net/US.json","fqdn":"www.mycurrency.net","domain":"mycurrency.net","tld":"net"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://teomnerxibaw222.net/h5/","date":"2026-04-10T14:51:14.278Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mycurrency.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 22 Feb 2026 14:11:44 GMT","end":"Sat, 23 May 2026 15:10:28 GMT"},"fingerprint":{"sha1":"97:DB:36:57:54:30:2A:79:6F:C3:B8:2A:F0:DC:B6:D8:0A:F6:C5:7E","sha256":"B3:C5:D1:C8:8E:E6:69:DA:E9:CD:9E:16:3B:32:16:5D:EE:BF:0F:0F:80:4E:CE:58:6E:50:03:B4:06:D2:7F:87"}}},"request":{"raw":"GET /US.json HTTP/1.1\r\nHost: www.mycurrency.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://teomnerxibaw222.net\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://teomnerxibaw222.net/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 10 Apr 2026 14:51:14 GMT\r\ncontent-type: application/json; charset=UTF-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\nnow-time: Friday, 10-Apr-2026 14:26:25 GMT\r\nx-host: www.mycurrency.net\r\ncontent-encoding: gzip\r\nage: 1488\r\nlast-modified: Fri, 10 Apr 2026 14:26:25 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2Bhx2RRHr8ja0OP71gD9t4pjOUf4lYFzLUgxKGvwe21n8z9%2FNMsJdshDHEjBYMLYPhmuGrKXhGI2d0AqoB6ZI4N5tUv1v9UgmgZzTPNQVPev73JWz49KvShkBM8YnViv3W79Eihs%3D\"}]}\r\ncf-ray: 9ea291868a230afa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":41365,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"Unicode text, UTF-8 text, with very long lines (38670), with no line terminators","md5":"29f00a815b81fd0cd67a69281640b966","sha1":"2da1dc28522f24a0b8bcda8f2d6f85f73e36cb3e","sha256":"75209d654ec5bb20d1d706a4414ab2b1512002452502af2ed2e76d05df466e1d","sha512":"af9abaaca70a71de7c7ae5b2ddcba8f0e0ff10d90ceaac3ed39a3f749cd77d958b0039986d44bc46c8c7e86c75827dea62e65c4eacf53abe6e1b9c3ce64b7be0","ssdeep":"384:ZP8ScvqO8kWvdRrzU0i88iSbWLk9rvV6sRDbqrEnDxp:IiO8kWvdRM02mk9rvV6eoEDT","tlshash":"34035a7da45ccdf8d9219092459a47bd343e26272fee08816fcdaface294261d354c3b","first_seen":"2026-04-10T14:26:53.564487Z","last_seen":"2026-04-10T14:51:41.410989Z","times_seen":2,"resource_available":false,"data":null}},"time_used":100,"timings":{"blocked":43,"dns":28,"connect":1,"send":0,"wait":12,"receive":0,"ssl":13},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"teomnerxibaw222.net/h5/static/image/nft/kv7-opt.png","fqdn":"teomnerxibaw222.net","domain":"teomnerxibaw222.net","tld":"net"},"ip":{"addr":"182.16.26.42","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://teomnerxibaw222.net/h5/","date":"2026-04-10T14:51:14.903Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"teomnerxibaw222.net","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 10 Apr 2026 02:56:33 GMT","end":"Thu, 09 Jul 2026 02:56:32 GMT"},"fingerprint":{"sha1":"B5:7B:12:B8:78:63:E7:29:56:3A:F3:0B:5A:79:65:9F:D6:2C:29:A2","sha256":"37:61:C1:C1:64:C5:0D:92:BD:75:CA:9F:12:23:01:9B:8A:A4:E1:67:5F:49:7E:95:70:E2:F8:4E:6C:C2:C8:79"}}},"request":{"raw":"GET /h5/static/image/nft/kv7-opt.png HTTP/1.1\r\nHost: teomnerxibaw222.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://teomnerxibaw222.net/h5/\r\nCookie: angela_session=eyJpdiI6Ik9wYks4Q3dGRDdiTTF6MnVCRVRaSFE9PSIsInZhbHVlIjoiUzBJOGUwVEtib2FIYXJoRSt0ZkRiZVkraWhOSG9Wa2VicEVxQ24wTU9LTjh4YStwT1NqZytuQlJsWmh3M0J6M1k1Q0ZGTHRsdzI3WmhmRU9VUklUYVwvM1FzOHNpd1BsVW9wNFpRNFlkNzNCTzI0OVMxaTVqWEhrK0gxNlVKdlJTIiwibWFjIjoiN2ViNzQyNTE5M2YwZWFjMzgwNWJhOGZiNGRmMWM3YWY1NWU2Y2YwYmZmMzU5OTg5N2YxMjE2YWQ2MTIyZDRkYyJ9\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 10 Apr 2026 14:51:14 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 05 Feb 2026 17:37:52 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6984d570-196d2\"\r\nexpires: Sun, 10 May 2026 14:51:14 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":104146,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 548 x 311, 8-bit/color RGBA, non-interlaced","md5":"2c39d4ef5697a390942229623dfee987","sha1":"a729b86e797514530ba9d516c44dab6238e09e67","sha256":"2453286d1c1cd8f888e53608dd2d63840fd8671eab2dbc32c8d9c237dae18e34","sha512":"39fc4497cb5405e7b76a65747b03448826f1ed7b30069a4b47a21e8d5e298ae0fe8c6ab9473b8f6c8f44a8f4c853ecc4cbeefd9ceff3b6247a8cb2d8faa8b2f5","ssdeep":"3072:6EGx8nFnU0EdkNjLhhZeR45AYqXquJgMzl6NhhwBoLq:SaFGqNjms/Lwgq","tlshash":"6aa312fcc73d655feda069c320f2aefa94bfd75b6d9b640d5423288c99e53e48124102","first_seen":"2023-10-14T15:22:24Z","last_seen":"2026-04-10T14:51:41.41201Z","times_seen":24,"resource_available":false,"data":null}},"time_used":192,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":192,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"teomnerxibaw222.net/h5/static/image/icon/home-nav-6.png","fqdn":"teomnerxibaw222.net","domain":"teomnerxibaw222.net","tld":"net"},"ip":{"addr":"182.16.26.42","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://teomnerxibaw222.net/h5/","date":"2026-04-10T14:51:15.270Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"teomnerxibaw222.net","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 10 Apr 2026 02:56:33 GMT","end":"Thu, 09 Jul 2026 02:56:32 GMT"},"fingerprint":{"sha1":"B5:7B:12:B8:78:63:E7:29:56:3A:F3:0B:5A:79:65:9F:D6:2C:29:A2","sha256":"37:61:C1:C1:64:C5:0D:92:BD:75:CA:9F:12:23:01:9B:8A:A4:E1:67:5F:49:7E:95:70:E2:F8:4E:6C:C2:C8:79"}}},"request":{"raw":"GET /h5/static/image/icon/home-nav-6.png HTTP/1.1\r\nHost: teomnerxibaw222.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://teomnerxibaw222.net/h5/\r\nCookie: angela_session=eyJpdiI6IlwvdXNZbDZrdjdrUDNOSE5VZG5wS2RBPT0iLCJ2YWx1ZSI6ImNLZ1BtMjNhM1pLVE5sbG9HeWVMV3RCVTNjcGpBa3NqNk1zelhLa1JwVlozbXNNaUc4anB3N2ZnMW5FQVlnR0NSRll3aGNxenJhWGpZZHhpczdJdXkwTUpJdVJuNlB5YVhTMnFaaENPQ0xxQTBIaDk5MURvdXZPSG51RWwzMHd0IiwibWFjIjoiNjgyYTExNzlmMzUzYTljODQ2ODFhMDg4Yjg1YTA2OTBhYWFkNjk5NWIyODQ2YTM3MGU0ZWNiOTEyY2RjMTQzZiJ9\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 10 Apr 2026 14:51:15 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 05 Feb 2026 17:37:52 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6984d570-f69\"\r\nexpires: Sun, 10 May 2026 14:51:15 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3945,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 46 x 46, 8-bit/color RGBA, non-interlaced","md5":"2d5b9a317f20174f750d5524ab61536b","sha1":"a17ac4797bb6584005694177000915727f98540b","sha256":"4fdd7d0112cc4d7c828747212b0eff8b681d07da84d3209a377ed54b67a37c1e","sha512":"9bfc4bc468a804a3bac5a9263161ee81036e7a41d11cdfab57911b8f3459d884e5591c5025146a5e1407d99584e6a53a3016085da7bac065825b709edfcb51d4","ssdeep":"","tlshash":"d0813a06fec178916a89d6c02fe911a64723a7c0ded0a1599ddec01b69b00b8c5df8cb","first_seen":"2023-05-20T12:09:29Z","last_seen":"2026-04-17T07:53:43.609569Z","times_seen":112,"resource_available":false,"data":null}},"time_used":192,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":192,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"teomnerxibaw222.net/api/news/list","fqdn":"teomnerxibaw222.net","domain":"teomnerxibaw222.net","tld":"net"},"ip":{"addr":"182.16.26.42","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://teomnerxibaw222.net/h5/","date":"2026-04-10T14:51:14.866Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"teomnerxibaw222.net","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 10 Apr 2026 02:56:33 GMT","end":"Thu, 09 Jul 2026 02:56:32 GMT"},"fingerprint":{"sha1":"B5:7B:12:B8:78:63:E7:29:56:3A:F3:0B:5A:79:65:9F:D6:2C:29:A2","sha256":"37:61:C1:C1:64:C5:0D:92:BD:75:CA:9F:12:23:01:9B:8A:A4:E1:67:5F:49:7E:95:70:E2:F8:4E:6C:C2:C8:79"}}},"request":{"raw":"POST /api/news/list HTTP/1.1\r\nHost: teomnerxibaw222.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAuthorization: \r\nContent-Type: application/x-www-form-urlencoded\r\nContent-Length: 14\r\nOrigin: https://teomnerxibaw222.net\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://teomnerxibaw222.net/h5/\r\nCookie: angela_session=eyJpdiI6Ik9wYks4Q3dGRDdiTTF6MnVCRVRaSFE9PSIsInZhbHVlIjoiUzBJOGUwVEtib2FIYXJoRSt0ZkRiZVkraWhOSG9Wa2VicEVxQ24wTU9LTjh4YStwT1NqZytuQlJsWmh3M0J6M1k1Q0ZGTHRsdzI3WmhmRU9VUklUYVwvM1FzOHNpd1BsVW9wNFpRNFlkNzNCTzI0OVMxaTVqWEhrK0gxNlVKdlJTIiwibWFjIjoiN2ViNzQyNTE5M2YwZWFjMzgwNWJhOGZiNGRmMWM3YWY1NWU2Y2YwYmZmMzU5OTg5N2YxMjE2YWQ2MTIyZDRkYyJ9\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":14,"data":"c_id=5\u0026lang=en"}},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ncontent-type: application/json\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: POST,GET,OPTIONS,DELETE\r\naccess-control-allow-headers: x-requested-with,content-type,Authorization\r\ncache-control: no-cache, private\r\ndate: Fri, 10 Apr 2026 14:51:14 GMT\r\nset-cookie: angela_session=eyJpdiI6IlFvQjhDdzVCM3kxR1FFWFpTNGpnQ1E9PSIsInZhbHVlIjoiQ3JVclwvSVBtRW5EXC9TWm1yK0NcL0hcL1JKRFlHWlwvMldHODdSdWVYSXUzRHhcL3ZKNmpYUmNyNEZ0RkJROTRlTVViOUZMUmt3Vm5uekhnazNCNXUyUmdmVE9kZnhOZWlnUVZsOTlCU0xWZUpqTVFaR1NxY01OeXROUkMyWGVHS2g2TksiLCJtYWMiOiJhZjAxMWUxNTE2YzAxYzI2MjY3M2U0ODJiM2Q5MmQyZjYwYmE4NTUxZjlmYzdmNDg3YTk2ZDhmYjVjMGM4NTAwIn0%3D; expires=Fri, 10-Apr-2026 16:51:14 GMT; Max-Age=7200; path=/; httponly\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":659,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"1e68adfdc3e2dddb03ebf2407ebb4908","sha1":"214ae4aa5797aa64bc6d790c5c523ced6e676671","sha256":"ab2cf287953417922cc23d826caefba80c26ccdff9d698559eda732cde83f0f8","sha512":"f7bb3f6724d1e420cacae5deae2c5e70584407def932ed172697e5ed0c55b5b2ae98575442af2323329b9ad67827830a4c8e6607040d7a51a994be72aea27d4b","ssdeep":"","tlshash":"3f0149bf7ed8d4fbf19483c22806b69c72ce328757501a451a854cccdbac2eb401b493","first_seen":"2025-10-09T04:17:48.375959Z","last_seen":"2026-04-10T14:51:41.413145Z","times_seen":5,"resource_available":false,"data":null}},"time_used":198,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":198,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"teomnerxibaw222.net/api/currency/new_timeshar?from=1775829074\u0026to=1775832674\u0026symbol=ETC%2FUSDT\u0026period=1min\u0026lang=en","fqdn":"teomnerxibaw222.net","domain":"teomnerxibaw222.net","tld":"net"},"ip":{"addr":"182.16.26.42","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://teomnerxibaw222.net/h5/","date":"2026-04-10T14:51:17.437Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"teomnerxibaw222.net","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 10 Apr 2026 02:56:33 GMT","end":"Thu, 09 Jul 2026 02:56:32 GMT"},"fingerprint":{"sha1":"B5:7B:12:B8:78:63:E7:29:56:3A:F3:0B:5A:79:65:9F:D6:2C:29:A2","sha256":"37:61:C1:C1:64:C5:0D:92:BD:75:CA:9F:12:23:01:9B:8A:A4:E1:67:5F:49:7E:95:70:E2:F8:4E:6C:C2:C8:79"}}},"request":{"raw":"GET /api/currency/new_timeshar?from=1775829074\u0026to=1775832674\u0026symbol=ETC%2FUSDT\u0026period=1min\u0026lang=en HTTP/1.1\r\nHost: teomnerxibaw222.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAuthorization: \r\nContent-Type: application/x-www-form-urlencoded\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://teomnerxibaw222.net/h5/\r\nCookie: angela_session=eyJpdiI6InY4UHpLMmVLM0VLOWtHRVhKSFhaMEE9PSIsInZhbHVlIjoialBBV2l0Z3ZlZ2VIYU90Z0luN2wyVDJKM0lSaGV5Skh5Y2FJZzI4bmRKdnF6clhiWXJLVlwvTGFyMmJUeGJVcEpkbmVkOGVyY21hMXRjNDFLTkFFWWVONU9qejVqZ1llcjN3NnVOSVEyaEpIOGtaRjZtTVF2V1M4bFwvNkVENzhmOCIsIm1hYyI6IjM4Yzk1MGRjY2ZlN2ExMTZlZjU4MTI2OTkwOGZlM2ZkYTk3ZTkxZDI0NDgzYzZmOWM2ODEwNzA5MDk5YjVmZGIifQ%3D%3D\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ncontent-type: application/json\r\nvary: Accept-Encoding\r\ncache-control: no-cache, private\r\ndate: Fri, 10 Apr 2026 14:51:17 GMT\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Origin, Content-Type, Cookie, X-CSRF-TOKEN, Accept, Authorization, X-XSRF-TOKEN\r\naccess-control-expose-headers: Authorization, authenticated\r\naccess-control-allow-methods: GET, POST, PATCH, PUT, OPTIONS\r\naccess-control-allow-credentials: false\r\nset-cookie: angela_session=eyJpdiI6IkVPQmNwS25qeGZUMmJIeStcL3Y4RndnPT0iLCJ2YWx1ZSI6IkZDNDNCdU5qRFQ2U2tINkFuK0hPZElsdzNOa2hcLzRTN2RcLzVCUGVXMGNDek81N3ZudncxK290UnRNMUU3SldqK1lUMTJmNlpDbGZiSTQ4SkJpSmp0UEg5bVNMXC9GUmtRY0JHRlhNWUlWWlR3d1RTWG42YUZQZUpjYTMrTytTblNEIiwibWFjIjoiNjM5N2Y4YjM5YTZkZTJmZDYwNGYwMTNkODY1NjhlOTM0YzA1NjgwMTY4ODU0MWYwMzcyNTVmODcwNmU4ZGQ3MSJ9; expires=Fri, 10-Apr-2026 16:51:17 GMT; Max-Age=7200; path=/; httponly\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":11347,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"9571892282b29f6eb82931203f229159","sha1":"0ac259b53d355e7a371c587763a0b2338e9229bd","sha256":"21d325d1f363918b48e9dee735d9b90ae1622af5de26f0bcbcc959424d3c5a35","sha512":"22c9ed56ecee82c086f012af913afd4be05f4d7b680496b7943ca0d61e11e844faa34235a63d73f2d75f791790000826b14e457a5e4f24c8d0d78ad03904016e","ssdeep":"96:xwZVmvwZVmIwZVm2wZVmPwZVm0wZVmHwZVmCwZVmgwZVmDwZVmmwZVmDwZVmIwZ0:KTmqB","tlshash":"45326e009bbd01d2d07661e4fdf388a487abd456a5d2cf5981be08fe15e19e6f20293f","first_seen":"2026-04-10T14:51:41.415209Z","last_seen":"2026-04-10T14:51:41.415209Z","times_seen":1,"resource_available":false,"data":null}},"time_used":203,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":203,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"teomnerxibaw222.net/h5","fqdn":"teomnerxibaw222.net","domain":"teomnerxibaw222.net","tld":"net"},"ip":{"addr":"182.16.26.42","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-04-10T14:51:12.100Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"teomnerxibaw222.net","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 10 Apr 2026 02:56:33 GMT","end":"Thu, 09 Jul 2026 02:56:32 GMT"},"fingerprint":{"sha1":"B5:7B:12:B8:78:63:E7:29:56:3A:F3:0B:5A:79:65:9F:D6:2C:29:A2","sha256":"37:61:C1:C1:64:C5:0D:92:BD:75:CA:9F:12:23:01:9B:8A:A4:E1:67:5F:49:7E:95:70:E2:F8:4E:6C:C2:C8:79"}}},"request":{"raw":"GET /h5 HTTP/1.1\r\nHost: teomnerxibaw222.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: angela_session=eyJpdiI6Ikd0YUhFZng0S1pPSTA5bFhkcURCS0E9PSIsInZhbHVlIjoiSEFcL3hTZEJjRytIR25XQzVBbFNERTY4WFdubmJRVGRLRlJ2K1wvS1dXSEFaeUhJcmk1dEw1dERUWUkrSWJ0K2ZHckdGWExncjU4WXBFNzc4NnJJZFZIWE5DXC8yMmZkVUpjZTQxcFwvVUdnbUJWdHo2WVZBeUl6VEtEOEpiWDVON2taIiwibWFjIjoiOWUyNzJlZTcyN2YyYjBkMjU3YmRkMjhkZWI0NTAzODQ5ZWVkZjEwNDZjOTkzZWU3Zjk0ZmY0NGU3NGFiYzZkZCJ9\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 Moved Permanently\r\nserver: nginx\r\ndate: Fri, 10 Apr 2026 14:51:12 GMT\r\ncontent-type: text/html\r\ncontent-length: 162\r\nlocation: https://teomnerxibaw222.net/h5/\r\nstrict-transport-security: max-age=31536000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":995,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-01T17:39:27.62522Z","times_seen":14482959,"resource_available":true,"data":null}},"time_used":191,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":191,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"wss","addr":"teomnerxibaw222.net/socket.io/?EIO=3\u0026transport=websocket","fqdn":"teomnerxibaw222.net","domain":"teomnerxibaw222.net","tld":"net"},"ip":{"addr":"182.16.26.42","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://teomnerxibaw222.net/h5/","date":"2026-04-10T14:51:14.280Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"teomnerxibaw222.net","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 10 Apr 2026 02:56:33 GMT","end":"Thu, 09 Jul 2026 02:56:32 GMT"},"fingerprint":{"sha1":"B5:7B:12:B8:78:63:E7:29:56:3A:F3:0B:5A:79:65:9F:D6:2C:29:A2","sha256":"37:61:C1:C1:64:C5:0D:92:BD:75:CA:9F:12:23:01:9B:8A:A4:E1:67:5F:49:7E:95:70:E2:F8:4E:6C:C2:C8:79"}}},"request":{"raw":"GET /socket.io/?EIO=3\u0026transport=websocket HTTP/1.1\r\nHost: teomnerxibaw222.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nSec-WebSocket-Version: 13\r\nOrigin: https://teomnerxibaw222.net\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: VGEY1EdjqF2SeNrPTClEBw==\r\nDNT: 1\r\nConnection: keep-alive, Upgrade\r\nCookie: angela_session=eyJpdiI6Ikd0YUhFZng0S1pPSTA5bFhkcURCS0E9PSIsInZhbHVlIjoiSEFcL3hTZEJjRytIR25XQzVBbFNERTY4WFdubmJRVGRLRlJ2K1wvS1dXSEFaeUhJcmk1dEw1dERUWUkrSWJ0K2ZHckdGWExncjU4WXBFNzc4NnJJZFZIWE5DXC8yMmZkVUpjZTQxcFwvVUdnbUJWdHo2WVZBeUl6VEtEOEpiWDVON2taIiwibWFjIjoiOWUyNzJlZTcyN2YyYjBkMjU3YmRkMjhkZWI0NTAzODQ5ZWVkZjEwNDZjOTkzZWU3Zjk0ZmY0NGU3NGFiYzZkZCJ9\r\nSec-Fetch-Dest: websocket\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 101 Switching Protocols\r\nServer: nginx\r\nDate: Fri, 10 Apr 2026 14:51:14 GMT\r\nContent-Length: 0\r\nConnection: upgrade\r\nUpgrade: websocket\r\nSec-WebSocket-Version: 13\r\nSec-WebSocket-Accept: xHOsXYkS/Js6ZyPQ/kNrKMwkZE8=\r\n\r\n","headers":null,"cookies":null,"status_code":"101","status_text":"Switching Protocols","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-01T17:39:27.62522Z","times_seen":14482959,"resource_available":true,"data":null}},"time_used":575,"timings":{"blocked":-1,"dns":1,"connect":189,"send":0,"wait":189,"receive":0,"ssl":195},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"teomnerxibaw222.net/api/menu?lang=en","fqdn":"teomnerxibaw222.net","domain":"teomnerxibaw222.net","tld":"net"},"ip":{"addr":"182.16.26.42","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://teomnerxibaw222.net/h5/","date":"2026-04-10T14:51:14.881Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"teomnerxibaw222.net","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 10 Apr 2026 02:56:33 GMT","end":"Thu, 09 Jul 2026 02:56:32 GMT"},"fingerprint":{"sha1":"B5:7B:12:B8:78:63:E7:29:56:3A:F3:0B:5A:79:65:9F:D6:2C:29:A2","sha256":"37:61:C1:C1:64:C5:0D:92:BD:75:CA:9F:12:23:01:9B:8A:A4:E1:67:5F:49:7E:95:70:E2:F8:4E:6C:C2:C8:79"}}},"request":{"raw":"GET /api/menu?lang=en HTTP/1.1\r\nHost: teomnerxibaw222.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAuthorization: \r\nContent-Type: application/x-www-form-urlencoded\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://teomnerxibaw222.net/h5/\r\nCookie: angela_session=eyJpdiI6Ik9wYks4Q3dGRDdiTTF6MnVCRVRaSFE9PSIsInZhbHVlIjoiUzBJOGUwVEtib2FIYXJoRSt0ZkRiZVkraWhOSG9Wa2VicEVxQ24wTU9LTjh4YStwT1NqZytuQlJsWmh3M0J6M1k1Q0ZGTHRsdzI3WmhmRU9VUklUYVwvM1FzOHNpd1BsVW9wNFpRNFlkNzNCTzI0OVMxaTVqWEhrK0gxNlVKdlJTIiwibWFjIjoiN2ViNzQyNTE5M2YwZWFjMzgwNWJhOGZiNGRmMWM3YWY1NWU2Y2YwYmZmMzU5OTg5N2YxMjE2YWQ2MTIyZDRkYyJ9\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ncontent-type: application/json\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: POST,GET,OPTIONS,DELETE\r\naccess-control-allow-headers: x-requested-with,content-type,Authorization\r\ncache-control: no-cache, private\r\ndate: Fri, 10 Apr 2026 14:51:14 GMT\r\nset-cookie: angela_session=eyJpdiI6Imw2STE2ZWl2OWVLWUtxYzZMcEZFaXc9PSIsInZhbHVlIjoiY3BvZkJmQW9EaUZEU1U3b1d5UEU0MnFEZHhpSjlnMloxS1Jma1lVOUtXcWJaMm45Sko1WXI1cHBlMGdkNWxHVFlYXC9CallHWll3cUJLOTBsblwvZUlpNUgwaEN5K3kxUVwvdytcLzJcLzh3Tkt2K1EwMlhubjl0ZVZzbkhhd2pBZ1BrUyIsIm1hYyI6ImQxZTJiNDIwZGExYTMyNzI0Y2Q4YTZlMGJkMzZlYmNjNWIwYThhMTMyOGYyZjA1YzNiZjlkYmJhMzE4NDI1ZmUifQ%3D%3D; expires=Fri, 10-Apr-2026 16:51:14 GMT; Max-Age=7200; path=/; httponly\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1326,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"5ea95886d52b71918aa2984bfc033a50","sha1":"0896ba09fa6dccd38d0286162b19bebfd99f92cf","sha256":"7e1e43d5e554bd827ec9bd34c5622a2a8bc354c2f56132ac85ae0ac4b74d2548","sha512":"f35498c9139cae64eda9b6af1b51e0a92a6357e5acb3faa255cd59b785c61c87e56f84691fd0e6817684f3e0918658b275ca5b751e0c47f906dc97c27e6092c6","ssdeep":"","tlshash":"13214bdd5ef83c2dc2fb25f558e3155e209a0507dde4b6961befaddc02e818042d7491","first_seen":"2025-10-09T04:17:48.413354Z","last_seen":"2026-04-10T14:51:41.417338Z","times_seen":5,"resource_available":false,"data":null}},"time_used":201,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":201,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"teomnerxibaw222.net/h5/static/image/icon/home-nav-10.png","fqdn":"teomnerxibaw222.net","domain":"teomnerxibaw222.net","tld":"net"},"ip":{"addr":"182.16.26.42","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://teomnerxibaw222.net/h5/","date":"2026-04-10T14:51:15.271Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"teomnerxibaw222.net","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 10 Apr 2026 02:56:33 GMT","end":"Thu, 09 Jul 2026 02:56:32 GMT"},"fingerprint":{"sha1":"B5:7B:12:B8:78:63:E7:29:56:3A:F3:0B:5A:79:65:9F:D6:2C:29:A2","sha256":"37:61:C1:C1:64:C5:0D:92:BD:75:CA:9F:12:23:01:9B:8A:A4:E1:67:5F:49:7E:95:70:E2:F8:4E:6C:C2:C8:79"}}},"request":{"raw":"GET /h5/static/image/icon/home-nav-10.png HTTP/1.1\r\nHost: teomnerxibaw222.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://teomnerxibaw222.net/h5/\r\nCookie: angela_session=eyJpdiI6IlwvdXNZbDZrdjdrUDNOSE5VZG5wS2RBPT0iLCJ2YWx1ZSI6ImNLZ1BtMjNhM1pLVE5sbG9HeWVMV3RCVTNjcGpBa3NqNk1zelhLa1JwVlozbXNNaUc4anB3N2ZnMW5FQVlnR0NSRll3aGNxenJhWGpZZHhpczdJdXkwTUpJdVJuNlB5YVhTMnFaaENPQ0xxQTBIaDk5MURvdXZPSG51RWwzMHd0IiwibWFjIjoiNjgyYTExNzlmMzUzYTljODQ2ODFhMDg4Yjg1YTA2OTBhYWFkNjk5NWIyODQ2YTM3MGU0ZWNiOTEyY2RjMTQzZiJ9\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 10 Apr 2026 14:51:15 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 05 Feb 2026 17:37:52 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6984d570-daa\"\r\nexpires: Sun, 10 May 2026 14:51:15 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3498,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 43 x 43, 8-bit/color RGBA, non-interlaced","md5":"0f68f241c0b1be6b0d358a55726edbfe","sha1":"b89870c0c736f34c4eb9e1a97861fe7169590811","sha256":"b50accd09373fd6a0eae6994ca2070f41986d766e5125c218d05659dfad454f1","sha512":"6ab288b25cecd701cf59adc30b31819a67f1021c3931454e6da5a7fa010540edb9cc13bc36f7b2d856c56e34f49c6b2b99b9e67241a66f4592e67429a502ae51","ssdeep":"","tlshash":"0c713b40db42acf07b58bb5c6be061675a2f87c046c2a0426dffe82325304a7cdca6d3","first_seen":"2023-06-06T10:11:01Z","last_seen":"2026-04-17T07:53:43.611295Z","times_seen":56,"resource_available":false,"data":null}},"time_used":192,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":192,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"teomnerxibaw222.net/api/currency/new_timeshar?from=1775829074\u0026to=1775832674\u0026symbol=BTC%2FUSDT\u0026period=1min\u0026lang=en","fqdn":"teomnerxibaw222.net","domain":"teomnerxibaw222.net","tld":"net"},"ip":{"addr":"182.16.26.42","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://teomnerxibaw222.net/h5/","date":"2026-04-10T14:51:15.382Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"teomnerxibaw222.net","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 10 Apr 2026 02:56:33 GMT","end":"Thu, 09 Jul 2026 02:56:32 GMT"},"fingerprint":{"sha1":"B5:7B:12:B8:78:63:E7:29:56:3A:F3:0B:5A:79:65:9F:D6:2C:29:A2","sha256":"37:61:C1:C1:64:C5:0D:92:BD:75:CA:9F:12:23:01:9B:8A:A4:E1:67:5F:49:7E:95:70:E2:F8:4E:6C:C2:C8:79"}}},"request":{"raw":"GET /api/currency/new_timeshar?from=1775829074\u0026to=1775832674\u0026symbol=BTC%2FUSDT\u0026period=1min\u0026lang=en HTTP/1.1\r\nHost: teomnerxibaw222.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAuthorization: \r\nContent-Type: application/x-www-form-urlencoded\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://teomnerxibaw222.net/h5/\r\nCookie: angela_session=eyJpdiI6IlwvdXNZbDZrdjdrUDNOSE5VZG5wS2RBPT0iLCJ2YWx1ZSI6ImNLZ1BtMjNhM1pLVE5sbG9HeWVMV3RCVTNjcGpBa3NqNk1zelhLa1JwVlozbXNNaUc4anB3N2ZnMW5FQVlnR0NSRll3aGNxenJhWGpZZHhpczdJdXkwTUpJdVJuNlB5YVhTMnFaaENPQ0xxQTBIaDk5MURvdXZPSG51RWwzMHd0IiwibWFjIjoiNjgyYTExNzlmMzUzYTljODQ2ODFhMDg4Yjg1YTA2OTBhYWFkNjk5NWIyODQ2YTM3MGU0ZWNiOTEyY2RjMTQzZiJ9\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ncontent-type: application/json\r\nvary: Accept-Encoding\r\ncache-control: no-cache, private\r\ndate: Fri, 10 Apr 2026 14:51:16 GMT\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Origin, Content-Type, Cookie, X-CSRF-TOKEN, Accept, Authorization, X-XSRF-TOKEN\r\naccess-control-expose-headers: Authorization, authenticated\r\naccess-control-allow-methods: GET, POST, PATCH, PUT, OPTIONS\r\naccess-control-allow-credentials: false\r\nset-cookie: angela_session=eyJpdiI6InlpeVdIQVp4RXNsbEQyaGpjam1uNXc9PSIsInZhbHVlIjoiaDZzaGVCMkM3XC9GT29GRHpKcUNYTXRDZ3NOVWwxalRVM2I1R1lzWWlXT3k5V2w3dW9ObXVBWDZnVEFicFZYWis4VWlaaDk3Nm5sbm5LNHdDWnJjaXRFc09EZ0ZqSWRDblYyRk4ycnNLVTM2a0xTU3BCUDRnMkl0UzJpaTM3Rm1cLyIsIm1hYyI6IjcxYjQ0NzFiNzhmYTgxZjI2MDY0ZTg2YTQ3N2Y3MjgyNjY4NTQ2ZjE4ZWZjMGJlODg2ODBjNjEyOWFlZDk4YmQifQ%3D%3D; expires=Fri, 10-Apr-2026 16:51:16 GMT; Max-Age=7200; path=/; httponly\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":14597,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"9746e459edef3c117768198df621ee7a","sha1":"d27b4d9f58ceda7e3204734367db74b3902e510e","sha256":"241d899d43682d8d7546c7563c5aafc15d5b3bf9079e6d2bfd04397fb1c2f62f","sha512":"a8b5a7eafce108b64aea4372b7c47aa9ff98a7837fe7876689a1d7b1d555855aa6bd613cb158a3aab792f7d795ddf387467c69a3ba91d1eb7a608585e6e1ea5e","ssdeep":"96:xrUUSrZ/0Vr8SrmNQr8+7r+8re4grOLrC4IsrJvr/7rnjrhXjr3y2Ggr1b5CLrRg:kO02GB3NInlprXb783UFsaqLsn","tlshash":"0c62c140476d06e2c0be67d4af925ce8926f725bf0c28f9481bf18d259e1db5b111a3f","first_seen":"2026-04-10T14:51:41.418469Z","last_seen":"2026-04-10T14:51:41.418469Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1190,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":1190,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"teomnerxibaw222.net/api/currency/new_timeshar?from=1775829074\u0026to=1775832674\u0026symbol=ETH%2FUSDT\u0026period=1min\u0026lang=en","fqdn":"teomnerxibaw222.net","domain":"teomnerxibaw222.net","tld":"net"},"ip":{"addr":"182.16.26.42","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://teomnerxibaw222.net/h5/","date":"2026-04-10T14:51:16.577Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"teomnerxibaw222.net","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 10 Apr 2026 02:56:33 GMT","end":"Thu, 09 Jul 2026 02:56:32 GMT"},"fingerprint":{"sha1":"B5:7B:12:B8:78:63:E7:29:56:3A:F3:0B:5A:79:65:9F:D6:2C:29:A2","sha256":"37:61:C1:C1:64:C5:0D:92:BD:75:CA:9F:12:23:01:9B:8A:A4:E1:67:5F:49:7E:95:70:E2:F8:4E:6C:C2:C8:79"}}},"request":{"raw":"GET /api/currency/new_timeshar?from=1775829074\u0026to=1775832674\u0026symbol=ETH%2FUSDT\u0026period=1min\u0026lang=en HTTP/1.1\r\nHost: teomnerxibaw222.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAuthorization: \r\nContent-Type: application/x-www-form-urlencoded\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://teomnerxibaw222.net/h5/\r\nCookie: angela_session=eyJpdiI6InlpeVdIQVp4RXNsbEQyaGpjam1uNXc9PSIsInZhbHVlIjoiaDZzaGVCMkM3XC9GT29GRHpKcUNYTXRDZ3NOVWwxalRVM2I1R1lzWWlXT3k5V2w3dW9ObXVBWDZnVEFicFZYWis4VWlaaDk3Nm5sbm5LNHdDWnJjaXRFc09EZ0ZqSWRDblYyRk4ycnNLVTM2a0xTU3BCUDRnMkl0UzJpaTM3Rm1cLyIsIm1hYyI6IjcxYjQ0NzFiNzhmYTgxZjI2MDY0ZTg2YTQ3N2Y3MjgyNjY4NTQ2ZjE4ZWZjMGJlODg2ODBjNjEyOWFlZDk4YmQifQ%3D%3D\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ncontent-type: application/json\r\nvary: Accept-Encoding\r\ncache-control: no-cache, private\r\ndate: Fri, 10 Apr 2026 14:51:16 GMT\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Origin, Content-Type, Cookie, X-CSRF-TOKEN, Accept, Authorization, X-XSRF-TOKEN\r\naccess-control-expose-headers: Authorization, authenticated\r\naccess-control-allow-methods: GET, POST, PATCH, PUT, OPTIONS\r\naccess-control-allow-credentials: false\r\nset-cookie: angela_session=eyJpdiI6IkhTUll4clJVaHdnZnhSeG90N0ZmalE9PSIsInZhbHVlIjoiSk9vWFl3blA0UXJEWm9cLzc3WnhTYU0zOXZDMnFWNVVqQ2doZ0tTRWVqakxrZmJZMjcxSHgzQTZnOHplS0ZPNWl4WDlFVjdKVURLWk5HWmducjFCeWFIR0FwWGZsbkEzcGJLR2tjVW1iTlVjRmI1eGxjSWJjUm9WWFZibE1wMCsrIiwibWFjIjoiN2JkNWE0MDQ4MWY2MDU3MzM0NmIzNTdhYTVmZTViMzliZDFlNzYwZTFjMDEyYWM5OGY5YjBkYzM0NzAxZWY3ZiJ9; expires=Fri, 10-Apr-2026 16:51:16 GMT; Max-Age=7200; path=/; httponly\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":13098,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"8bd0bfa2856be4bae3b7e8db2adb4e5c","sha1":"e2b050cc41143c76a33f23c2cea2e840b5062256","sha256":"a8486fc1d0eaa115c3efdf6adb8db8454e4d7cf287f95d2b5c937531c5cbbaa4","sha512":"225c8edaa85e03bb2fecd56b4ed8f474701a14962214cc9a0c66b039c637b140bb55453c5855a384f6bae7a20b2663e3e5037f6382595585f2ae44401f7e333e","ssdeep":"384:wjGZrr3bLif+q5xgdCXx7w1Pba9+QR9KM3GWHbVbpp2NDK5pIAxcMNyEViJgeAcZ:wjGZrr3bLif+q5xgQXx7w1Pba9+QR9KT","tlshash":"5f426c00d6b909f6c47a15c8bad28de883ab335bd4d3cea541bf04d654e17b6b106e3b","first_seen":"2026-04-10T14:51:41.419458Z","last_seen":"2026-04-10T14:51:41.419458Z","times_seen":1,"resource_available":false,"data":null}},"time_used":205,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":205,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"teomnerxibaw222.net/h5/static/js/pages-index-index.f3a6ddd0.js","fqdn":"teomnerxibaw222.net","domain":"teomnerxibaw222.net","tld":"net"},"ip":{"addr":"182.16.26.42","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://teomnerxibaw222.net/h5/","date":"2026-04-10T14:51:14.253Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"teomnerxibaw222.net","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 10 Apr 2026 02:56:33 GMT","end":"Thu, 09 Jul 2026 02:56:32 GMT"},"fingerprint":{"sha1":"B5:7B:12:B8:78:63:E7:29:56:3A:F3:0B:5A:79:65:9F:D6:2C:29:A2","sha256":"37:61:C1:C1:64:C5:0D:92:BD:75:CA:9F:12:23:01:9B:8A:A4:E1:67:5F:49:7E:95:70:E2:F8:4E:6C:C2:C8:79"}}},"request":{"raw":"GET /h5/static/js/pages-index-index.f3a6ddd0.js HTTP/1.1\r\nHost: teomnerxibaw222.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://teomnerxibaw222.net/h5/\r\nCookie: angela_session=eyJpdiI6Ikd0YUhFZng0S1pPSTA5bFhkcURCS0E9PSIsInZhbHVlIjoiSEFcL3hTZEJjRytIR25XQzVBbFNERTY4WFdubmJRVGRLRlJ2K1wvS1dXSEFaeUhJcmk1dEw1dERUWUkrSWJ0K2ZHckdGWExncjU4WXBFNzc4NnJJZFZIWE5DXC8yMmZkVUpjZTQxcFwvVUdnbUJWdHo2WVZBeUl6VEtEOEpiWDVON2taIiwibWFjIjoiOWUyNzJlZTcyN2YyYjBkMjU3YmRkMjhkZWI0NTAzODQ5ZWVkZjEwNDZjOTkzZWU3Zjk0ZmY0NGU3NGFiYzZkZCJ9\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 10 Apr 2026 14:51:14 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 10 Apr 2026 03:56:39 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69d874f7-9523a\"\r\nexpires: Sat, 11 Apr 2026 02:51:14 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":610874,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65164), with no line terminators","md5":"6583b5f9b598f62de85a500f2b43967d","sha1":"23e5393cb31d0e66f9eb2b159f4b20004904e834","sha256":"c9f8f0f3c2c6b8b3e7cb0af9ed80f1e110111d2eedaccea12ab42041b19ed2fb","sha512":"9c0e6d39871d279d7d60b8c2f98b117b055d9e6b4a52918fc0cc4bd3d38f4ee9fb1653318413dfc3a755ca1867286edc46c2dc340abca3f78b2da30600346066","ssdeep":"6144:YXTeNLDxMIxR2uDzj4C78b3RJ38VYvHXZfRrnGpr3tsVBzXRZD:fNLDxMID2uDzj4Ck3RJ38VqHXZfRc3OD","tlshash":"c6d4d686f5cc30058277c71480ab32fc963aad73524598d7f559bff08e6a9ca3269b1c","first_seen":"2026-04-10T14:26:53.573641Z","last_seen":"2026-04-10T14:51:41.420348Z","times_seen":2,"resource_available":true,"data":null}},"time_used":193,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":193,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"teomnerxibaw222.net/api/news/list","fqdn":"teomnerxibaw222.net","domain":"teomnerxibaw222.net","tld":"net"},"ip":{"addr":"182.16.26.42","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://teomnerxibaw222.net/h5/","date":"2026-04-10T14:51:14.882Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"teomnerxibaw222.net","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 10 Apr 2026 02:56:33 GMT","end":"Thu, 09 Jul 2026 02:56:32 GMT"},"fingerprint":{"sha1":"B5:7B:12:B8:78:63:E7:29:56:3A:F3:0B:5A:79:65:9F:D6:2C:29:A2","sha256":"37:61:C1:C1:64:C5:0D:92:BD:75:CA:9F:12:23:01:9B:8A:A4:E1:67:5F:49:7E:95:70:E2:F8:4E:6C:C2:C8:79"}}},"request":{"raw":"POST /api/news/list HTTP/1.1\r\nHost: teomnerxibaw222.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAuthorization: \r\nContent-Type: application/x-www-form-urlencoded\r\nContent-Length: 14\r\nOrigin: https://teomnerxibaw222.net\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://teomnerxibaw222.net/h5/\r\nCookie: angela_session=eyJpdiI6Ik9wYks4Q3dGRDdiTTF6MnVCRVRaSFE9PSIsInZhbHVlIjoiUzBJOGUwVEtib2FIYXJoRSt0ZkRiZVkraWhOSG9Wa2VicEVxQ24wTU9LTjh4YStwT1NqZytuQlJsWmh3M0J6M1k1Q0ZGTHRsdzI3WmhmRU9VUklUYVwvM1FzOHNpd1BsVW9wNFpRNFlkNzNCTzI0OVMxaTVqWEhrK0gxNlVKdlJTIiwibWFjIjoiN2ViNzQyNTE5M2YwZWFjMzgwNWJhOGZiNGRmMWM3YWY1NWU2Y2YwYmZmMzU5OTg5N2YxMjE2YWQ2MTIyZDRkYyJ9\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":14,"data":"c_id=4\u0026lang=en"}},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ncontent-type: application/json\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: POST,GET,OPTIONS,DELETE\r\naccess-control-allow-headers: x-requested-with,content-type,Authorization\r\ncache-control: no-cache, private\r\ndate: Fri, 10 Apr 2026 14:51:14 GMT\r\nset-cookie: angela_session=eyJpdiI6InpweGFXRXdabUdXSU5ndDI2Yk14b2c9PSIsInZhbHVlIjoiTDZpOVNON3NjZXVmSURkZ0wwS2k0Q3d1cW9IVnpLbytBRitROE9oTjRLQlwvRG01WU85MytuWkE1MHlGeElZbE9TZGljV3FPZzJYd012aWtzZWVBaG42STk2RjZzYXh1bWtzbytXR3EwZ1dTSWNGMkRFMzk2N3pCYlE4VnZ0bEVSIiwibWFjIjoiZGJkYTEyYzhhNjg1Y2Q0MzUyZDAyOTFiNzllMjVhNGM5MGU3ZWNkOTNjMmY1NmM2NTA1YWRiOTc0ZWJjZGYzOSJ9; expires=Fri, 10-Apr-2026 16:51:14 GMT; Max-Age=7200; path=/; httponly\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":799,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"581e2e0b6cc5524cac4f1e06695470d7","sha1":"03e9008f5bbbe2055da42402ce97d22faaff4996","sha256":"aba04d5b05484da35d53e0d9dbfcf1d29cb67922352d3d290c5dc9b756a4d8ea","sha512":"76b558948d475fbcfb2411fadc28c5446d094ad1ae9f4f99cca5124e9e4b39c485cbc3e5ac1a7a5f6757acb01a305b9e93a99fb802b0b37f127c5e0fdf5618ce","ssdeep":"","tlshash":"b30104a52e006fbf63c523cd68cbbb9aedde3013c604d65d448c98e982147b0202a077","first_seen":"2025-10-09T04:17:48.448999Z","last_seen":"2026-04-10T14:51:41.420963Z","times_seen":5,"resource_available":false,"data":null}},"time_used":198,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":198,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"teomnerxibaw222.net/h5/static/fonts/iconfont.5b8f35b1.woff2","fqdn":"teomnerxibaw222.net","domain":"teomnerxibaw222.net","tld":"net"},"ip":{"addr":"182.16.26.42","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://teomnerxibaw222.net/h5/","date":"2026-04-10T14:51:14.929Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"teomnerxibaw222.net","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 10 Apr 2026 02:56:33 GMT","end":"Thu, 09 Jul 2026 02:56:32 GMT"},"fingerprint":{"sha1":"B5:7B:12:B8:78:63:E7:29:56:3A:F3:0B:5A:79:65:9F:D6:2C:29:A2","sha256":"37:61:C1:C1:64:C5:0D:92:BD:75:CA:9F:12:23:01:9B:8A:A4:E1:67:5F:49:7E:95:70:E2:F8:4E:6C:C2:C8:79"}}},"request":{"raw":"GET /h5/static/fonts/iconfont.5b8f35b1.woff2 HTTP/1.1\r\nHost: teomnerxibaw222.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://teomnerxibaw222.net/h5/\r\nCookie: angela_session=eyJpdiI6Ik9wYks4Q3dGRDdiTTF6MnVCRVRaSFE9PSIsInZhbHVlIjoiUzBJOGUwVEtib2FIYXJoRSt0ZkRiZVkraWhOSG9Wa2VicEVxQ24wTU9LTjh4YStwT1NqZytuQlJsWmh3M0J6M1k1Q0ZGTHRsdzI3WmhmRU9VUklUYVwvM1FzOHNpd1BsVW9wNFpRNFlkNzNCTzI0OVMxaTVqWEhrK0gxNlVKdlJTIiwibWFjIjoiN2ViNzQyNTE5M2YwZWFjMzgwNWJhOGZiNGRmMWM3YWY1NWU2Y2YwYmZmMzU5OTg5N2YxMjE2YWQ2MTIyZDRkYyJ9\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 10 Apr 2026 14:51:15 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 32744\r\nlast-modified: Thu, 05 Feb 2026 17:37:52 GMT\r\netag: \"6984d570-7fe8\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":32744,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 32744, version 1.0","md5":"5b8f35b173333c5161098c675e902401","sha1":"c33837d28eff55458d49ef00e68ae9a04da46f05","sha256":"912327f77b1b2d3092e0cda25efdd0c5045ef17d018864d1cefba33db7727fce","sha512":"38a8b9a82c69376f1664e4e76f31605a6ad31e611e2f282c46a40044624072a48ed8f9fd49735136afbd21ba61cc9ac9795828e6fcb33ad4b662bd41cf6b4084","ssdeep":"768:9P1NcXcebJOUlU8WQKAfiDvCcj+IWL3OJ:9dNcXceNOUSD3AfmCcfJ","tlshash":"cee2f1303175ab40c3e6ef396e7b1c46d8724a3892785ee1e3d16e4d142bccd19d5a2b","first_seen":"2023-05-20T12:09:29Z","last_seen":"2026-05-01T02:11:36.733586Z","times_seen":297,"resource_available":false,"data":null}},"time_used":200,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":198,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"teomnerxibaw222.net/upload/1647793264553419.jpg","fqdn":"teomnerxibaw222.net","domain":"teomnerxibaw222.net","tld":"net"},"ip":{"addr":"182.16.26.42","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://teomnerxibaw222.net/h5/","date":"2026-04-10T14:51:15.111Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"teomnerxibaw222.net","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 10 Apr 2026 02:56:33 GMT","end":"Thu, 09 Jul 2026 02:56:32 GMT"},"fingerprint":{"sha1":"B5:7B:12:B8:78:63:E7:29:56:3A:F3:0B:5A:79:65:9F:D6:2C:29:A2","sha256":"37:61:C1:C1:64:C5:0D:92:BD:75:CA:9F:12:23:01:9B:8A:A4:E1:67:5F:49:7E:95:70:E2:F8:4E:6C:C2:C8:79"}}},"request":{"raw":"GET /upload/1647793264553419.jpg HTTP/1.1\r\nHost: teomnerxibaw222.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://teomnerxibaw222.net/h5/\r\nCookie: angela_session=eyJpdiI6Imw2STE2ZWl2OWVLWUtxYzZMcEZFaXc9PSIsInZhbHVlIjoiY3BvZkJmQW9EaUZEU1U3b1d5UEU0MnFEZHhpSjlnMloxS1Jma1lVOUtXcWJaMm45Sko1WXI1cHBlMGdkNWxHVFlYXC9CallHWll3cUJLOTBsblwvZUlpNUgwaEN5K3kxUVwvdytcLzJcLzh3Tkt2K1EwMlhubjl0ZVZzbkhhd2pBZ1BrUyIsIm1hYyI6ImQxZTJiNDIwZGExYTMyNzI0Y2Q4YTZlMGJkMzZlYmNjNWIwYThhMTMyOGYyZjA1YzNiZjlkYmJhMzE4NDI1ZmUifQ%3D%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 10 Apr 2026 14:51:15 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Mon, 25 Sep 2023 21:50:54 GMT\r\nvary: Accept-Encoding\r\netag: W/\"651200be-6cca\"\r\nexpires: Sun, 10 May 2026 14:51:15 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27850,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 686x277, components 3","md5":"84b3a40365c8dfe8492ca4391d30ee2c","sha1":"f88ad47fbe19be28c0e8cf8227a24d4c1faf6393","sha256":"57f3853f3c64502ef69c441b108bbe6ce687108c0d1ee89dbb491a40f431ac57","sha512":"032b577dfec64a5163b58d0561bd0db359cc4e5bd648133199684a8ecf3821e21163e6e4f431a7b4fbcb0383c51519551f3e9af38f1ad18fc2a242b05fd8b7c5","ssdeep":"384:TxWL+3ibCB89zoKUye0zBgoDIYpy0mTB95lKBCb/VxfJP71gXSvzZfMFKJZ1b2s8:THibCBgogXzfDI7T9B7zZqmzbI","tlshash":"6bc2e1038a966711e67cd4b952064c5f9460dbce313b72b062b5c887b2d1f75434eebe","first_seen":"2025-10-09T04:17:48.415653Z","last_seen":"2026-04-10T14:51:41.422088Z","times_seen":5,"resource_available":false,"data":null}},"time_used":193,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":193,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"teomnerxibaw222.net/h5/static/js/index.35dde5cd.js","fqdn":"teomnerxibaw222.net","domain":"teomnerxibaw222.net","tld":"net"},"ip":{"addr":"182.16.26.42","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://teomnerxibaw222.net/h5/","date":"2026-04-10T14:51:12.795Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"teomnerxibaw222.net","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 10 Apr 2026 02:56:33 GMT","end":"Thu, 09 Jul 2026 02:56:32 GMT"},"fingerprint":{"sha1":"B5:7B:12:B8:78:63:E7:29:56:3A:F3:0B:5A:79:65:9F:D6:2C:29:A2","sha256":"37:61:C1:C1:64:C5:0D:92:BD:75:CA:9F:12:23:01:9B:8A:A4:E1:67:5F:49:7E:95:70:E2:F8:4E:6C:C2:C8:79"}}},"request":{"raw":"GET /h5/static/js/index.35dde5cd.js HTTP/1.1\r\nHost: teomnerxibaw222.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://teomnerxibaw222.net/h5/\r\nCookie: angela_session=eyJpdiI6Ikd0YUhFZng0S1pPSTA5bFhkcURCS0E9PSIsInZhbHVlIjoiSEFcL3hTZEJjRytIR25XQzVBbFNERTY4WFdubmJRVGRLRlJ2K1wvS1dXSEFaeUhJcmk1dEw1dERUWUkrSWJ0K2ZHckdGWExncjU4WXBFNzc4NnJJZFZIWE5DXC8yMmZkVUpjZTQxcFwvVUdnbUJWdHo2WVZBeUl6VEtEOEpiWDVON2taIiwibWFjIjoiOWUyNzJlZTcyN2YyYjBkMjU3YmRkMjhkZWI0NTAzODQ5ZWVkZjEwNDZjOTkzZWU3Zjk0ZmY0NGU3NGFiYzZkZCJ9\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 10 Apr 2026 14:51:12 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 10 Apr 2026 03:56:11 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69d874db-e9c17\"\r\nexpires: Sat, 11 Apr 2026 02:51:12 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":957463,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (56115), with no line terminators","md5":"e413a069892527d4d6bcbaaeb33548d5","sha1":"fc03c0f3bce5041936fed63b32bfacbd0611b639","sha256":"54e4c52b72773a7105903b8d8cb4eb11820b95536cff745f08c44a3c0082ac82","sha512":"ae9a05356d5c59538a160abb76204e2b4aaa7daecc38e73828028c0f01aa9b45748ebc799e84c46123fb4eff4406aa908598e2b46b622fbc0a78c93e88312976","ssdeep":"24576:jITUtVr7vZdwG1ZAIkKDJ3bys5XrHeg05TOHty9FzJb/:7tVXjHty9FzJb/","tlshash":"fd157d81b5c5927813d75601d08b3218a2fddd3a544bb8bdf3c4ab58db8768a332633b","first_seen":"2026-04-10T14:51:41.422617Z","last_seen":"2026-04-10T14:51:41.422617Z","times_seen":1,"resource_available":false,"data":null}},"time_used":761,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":761,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"teomnerxibaw222.net/h5/static/js/pages-index-index~pages-transaction-index.0849278c.js","fqdn":"teomnerxibaw222.net","domain":"teomnerxibaw222.net","tld":"net"},"ip":{"addr":"182.16.26.42","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://teomnerxibaw222.net/h5/","date":"2026-04-10T14:51:14.251Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"teomnerxibaw222.net","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 10 Apr 2026 02:56:33 GMT","end":"Thu, 09 Jul 2026 02:56:32 GMT"},"fingerprint":{"sha1":"B5:7B:12:B8:78:63:E7:29:56:3A:F3:0B:5A:79:65:9F:D6:2C:29:A2","sha256":"37:61:C1:C1:64:C5:0D:92:BD:75:CA:9F:12:23:01:9B:8A:A4:E1:67:5F:49:7E:95:70:E2:F8:4E:6C:C2:C8:79"}}},"request":{"raw":"GET /h5/static/js/pages-index-index~pages-transaction-index.0849278c.js HTTP/1.1\r\nHost: teomnerxibaw222.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://teomnerxibaw222.net/h5/\r\nCookie: angela_session=eyJpdiI6Ikd0YUhFZng0S1pPSTA5bFhkcURCS0E9PSIsInZhbHVlIjoiSEFcL3hTZEJjRytIR25XQzVBbFNERTY4WFdubmJRVGRLRlJ2K1wvS1dXSEFaeUhJcmk1dEw1dERUWUkrSWJ0K2ZHckdGWExncjU4WXBFNzc4NnJJZFZIWE5DXC8yMmZkVUpjZTQxcFwvVUdnbUJWdHo2WVZBeUl6VEtEOEpiWDVON2taIiwibWFjIjoiOWUyNzJlZTcyN2YyYjBkMjU3YmRkMjhkZWI0NTAzODQ5ZWVkZjEwNDZjOTkzZWU3Zjk0ZmY0NGU3NGFiYzZkZCJ9\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 10 Apr 2026 14:51:14 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 05 Feb 2026 17:37:52 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6984d570-f6e8\"\r\nexpires: Sat, 11 Apr 2026 02:51:14 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":63208,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (62852), with no line terminators","md5":"f840f606155d730449f6d8f7b1367cd2","sha1":"51c109386dc0f6875fef9c676b3bb4dd00c0f2d0","sha256":"c3443393b5c08d4c2ce7cb06daba2ef6883aade7fd59c27fe38a1960c62d1aa7","sha512":"d7be1030df77a94a57c833f85926fa77403709a1f6a6696dedf9fe2a2c0afb0a82e0ba624d4c78cdb7f5d6698748953bc2113c6e67b35512eeb781872688b9ab","ssdeep":"192:a00mfZUTAx1fRlj6rOyaqYEO6ud8HB1ofxWFrxnn1hQy7FozgCCe432B2v2h2IcO:h0GKZO6w8QWFrVn1hQy0qVGlXxGvbQ+Y","tlshash":"fc530b82fdec20054167eb4da14132f9db2ae96b5283fae3d8416b344eb79c63d8d51c","first_seen":"2026-03-01T15:55:48.710121Z","last_seen":"2026-04-10T14:51:41.423337Z","times_seen":3,"resource_available":true,"data":null}},"time_used":192,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":192,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"teomnerxibaw222.net/h5/static/image/nav/nav-1-active.png","fqdn":"teomnerxibaw222.net","domain":"teomnerxibaw222.net","tld":"net"},"ip":{"addr":"182.16.26.42","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://teomnerxibaw222.net/h5/","date":"2026-04-10T14:51:14.257Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"teomnerxibaw222.net","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 10 Apr 2026 02:56:33 GMT","end":"Thu, 09 Jul 2026 02:56:32 GMT"},"fingerprint":{"sha1":"B5:7B:12:B8:78:63:E7:29:56:3A:F3:0B:5A:79:65:9F:D6:2C:29:A2","sha256":"37:61:C1:C1:64:C5:0D:92:BD:75:CA:9F:12:23:01:9B:8A:A4:E1:67:5F:49:7E:95:70:E2:F8:4E:6C:C2:C8:79"}}},"request":{"raw":"GET /h5/static/image/nav/nav-1-active.png HTTP/1.1\r\nHost: teomnerxibaw222.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://teomnerxibaw222.net/h5/\r\nCookie: angela_session=eyJpdiI6Ikd0YUhFZng0S1pPSTA5bFhkcURCS0E9PSIsInZhbHVlIjoiSEFcL3hTZEJjRytIR25XQzVBbFNERTY4WFdubmJRVGRLRlJ2K1wvS1dXSEFaeUhJcmk1dEw1dERUWUkrSWJ0K2ZHckdGWExncjU4WXBFNzc4NnJJZFZIWE5DXC8yMmZkVUpjZTQxcFwvVUdnbUJWdHo2WVZBeUl6VEtEOEpiWDVON2taIiwibWFjIjoiOWUyNzJlZTcyN2YyYjBkMjU3YmRkMjhkZWI0NTAzODQ5ZWVkZjEwNDZjOTkzZWU3Zjk0ZmY0NGU3NGFiYzZkZCJ9\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 10 Apr 2026 14:51:14 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 05 Feb 2026 17:37:52 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6984d570-700\"\r\nexpires: Sun, 10 May 2026 14:51:14 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1792,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 39 x 43, 8-bit/color RGBA, non-interlaced","md5":"6e2baf8ad92bb13eccce1b784be6f4de","sha1":"56195bc729f562359e7a5de5d0db813017971b68","sha256":"155295d2342170ff1b32d8bf029e9b1cd79ab884b6014fef2bc2990bf57cb44d","sha512":"ec2ecc8a420b474996700a8f7177985e1d512ede1d5fda6285ac995175c51899c90014654e5b440cfe83006d87d087f4783a729bf462be683b2936ec3ee504a5","ssdeep":"","tlshash":"39312bdb974664088db27c5113441d4c1f290b666ef7ae0c14c4f8cf31be0ca5624a38","first_seen":"2023-05-20T12:09:29Z","last_seen":"2026-04-26T22:44:21.217048Z","times_seen":136,"resource_available":false,"data":null}},"time_used":372,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":372,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"teomnerxibaw222.net/h5/static/image/nav/nav-5.png","fqdn":"teomnerxibaw222.net","domain":"teomnerxibaw222.net","tld":"net"},"ip":{"addr":"182.16.26.42","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://teomnerxibaw222.net/h5/","date":"2026-04-10T14:51:14.264Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"teomnerxibaw222.net","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 10 Apr 2026 02:56:33 GMT","end":"Thu, 09 Jul 2026 02:56:32 GMT"},"fingerprint":{"sha1":"B5:7B:12:B8:78:63:E7:29:56:3A:F3:0B:5A:79:65:9F:D6:2C:29:A2","sha256":"37:61:C1:C1:64:C5:0D:92:BD:75:CA:9F:12:23:01:9B:8A:A4:E1:67:5F:49:7E:95:70:E2:F8:4E:6C:C2:C8:79"}}},"request":{"raw":"GET /h5/static/image/nav/nav-5.png HTTP/1.1\r\nHost: teomnerxibaw222.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://teomnerxibaw222.net/h5/\r\nCookie: angela_session=eyJpdiI6Ikd0YUhFZng0S1pPSTA5bFhkcURCS0E9PSIsInZhbHVlIjoiSEFcL3hTZEJjRytIR25XQzVBbFNERTY4WFdubmJRVGRLRlJ2K1wvS1dXSEFaeUhJcmk1dEw1dERUWUkrSWJ0K2ZHckdGWExncjU4WXBFNzc4NnJJZFZIWE5DXC8yMmZkVUpjZTQxcFwvVUdnbUJWdHo2WVZBeUl6VEtEOEpiWDVON2taIiwibWFjIjoiOWUyNzJlZTcyN2YyYjBkMjU3YmRkMjhkZWI0NTAzODQ5ZWVkZjEwNDZjOTkzZWU3Zjk0ZmY0NGU3NGFiYzZkZCJ9\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 10 Apr 2026 14:51:14 GMT\r\ncontent-type: image/png\r\ncontent-length: 762\r\nlast-modified: Thu, 05 Feb 2026 17:37:52 GMT\r\netag: \"6984d570-2fa\"\r\nexpires: Sun, 10 May 2026 14:51:14 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":762,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 42 x 42, 8-bit/color RGBA, non-interlaced","md5":"214aee318b1921c9d0a518e7236f6798","sha1":"80344471faf6fbd958fa82f20128e004b71845f3","sha256":"f4d884cc4ffdaeed56d30b53ce28453c401a187591cc6ed20700b98e5e9fcbd9","sha512":"f8316fa75057752ff636710dd30eca9b9c360bcfa1a28e1fd0659b4da48d530f13e81afb14f28a38f941f0aaca142b04afdbad0052a7621835c7904c3a10af5a","ssdeep":"","tlshash":"6601b54d4520e4699a3612a3b87ac2f10c1eb01462b79dde8532e31f3432704f0842c3","first_seen":"2023-05-20T12:09:29Z","last_seen":"2026-04-26T22:44:21.201564Z","times_seen":143,"resource_available":false,"data":null}},"time_used":370,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":370,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"teomnerxibaw222.net/api/news/list","fqdn":"teomnerxibaw222.net","domain":"teomnerxibaw222.net","tld":"net"},"ip":{"addr":"182.16.26.42","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://teomnerxibaw222.net/h5/","date":"2026-04-10T14:51:14.884Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"teomnerxibaw222.net","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 10 Apr 2026 02:56:33 GMT","end":"Thu, 09 Jul 2026 02:56:32 GMT"},"fingerprint":{"sha1":"B5:7B:12:B8:78:63:E7:29:56:3A:F3:0B:5A:79:65:9F:D6:2C:29:A2","sha256":"37:61:C1:C1:64:C5:0D:92:BD:75:CA:9F:12:23:01:9B:8A:A4:E1:67:5F:49:7E:95:70:E2:F8:4E:6C:C2:C8:79"}}},"request":{"raw":"POST /api/news/list HTTP/1.1\r\nHost: teomnerxibaw222.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAuthorization: \r\nContent-Type: application/x-www-form-urlencoded\r\nContent-Length: 14\r\nOrigin: https://teomnerxibaw222.net\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://teomnerxibaw222.net/h5/\r\nCookie: angela_session=eyJpdiI6Ik9wYks4Q3dGRDdiTTF6MnVCRVRaSFE9PSIsInZhbHVlIjoiUzBJOGUwVEtib2FIYXJoRSt0ZkRiZVkraWhOSG9Wa2VicEVxQ24wTU9LTjh4YStwT1NqZytuQlJsWmh3M0J6M1k1Q0ZGTHRsdzI3WmhmRU9VUklUYVwvM1FzOHNpd1BsVW9wNFpRNFlkNzNCTzI0OVMxaTVqWEhrK0gxNlVKdlJTIiwibWFjIjoiN2ViNzQyNTE5M2YwZWFjMzgwNWJhOGZiNGRmMWM3YWY1NWU2Y2YwYmZmMzU5OTg5N2YxMjE2YWQ2MTIyZDRkYyJ9\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":14,"data":"c_id=5\u0026lang=en"}},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ncontent-type: application/json\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: POST,GET,OPTIONS,DELETE\r\naccess-control-allow-headers: x-requested-with,content-type,Authorization\r\ncache-control: no-cache, private\r\ndate: Fri, 10 Apr 2026 14:51:14 GMT\r\nset-cookie: angela_session=eyJpdiI6Ilh2TmRYc0krQzhcL0RGSTU5RzQyZkdBPT0iLCJ2YWx1ZSI6IjRKVXhHZVwvVjMzMnlBZFA1NWQzM20xaFpPNU16bUZpSnYyRXNaaU9MV3hIK2VKRlZWVlZ5SU93RzVkYkpMVEptU2JGMzhGbFExRytLWU9VZ25SV21aSnFYQ1BOSjlHWHVadmVWQ1pkZnhDTlhtSWxZSlYyMnpWbTRnWkpYaGNrSSIsIm1hYyI6ImVkYmE5MGYwZmM5MWM2YTkxYTI2MDlhOGJhNzc2ZWEzYWM4NTI5MjkxYmM2M2ViZjAzNzJmYjExOGI0M2Y2MzAifQ%3D%3D; expires=Fri, 10-Apr-2026 16:51:14 GMT; Max-Age=7200; path=/; httponly\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":659,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"1e68adfdc3e2dddb03ebf2407ebb4908","sha1":"214ae4aa5797aa64bc6d790c5c523ced6e676671","sha256":"ab2cf287953417922cc23d826caefba80c26ccdff9d698559eda732cde83f0f8","sha512":"f7bb3f6724d1e420cacae5deae2c5e70584407def932ed172697e5ed0c55b5b2ae98575442af2323329b9ad67827830a4c8e6607040d7a51a994be72aea27d4b","ssdeep":"","tlshash":"3f0149bf7ed8d4fbf19483c22806b69c72ce328757501a451a854cccdbac2eb401b493","first_seen":"2025-10-09T04:17:48.375959Z","last_seen":"2026-04-10T14:51:41.413145Z","times_seen":5,"resource_available":false,"data":null}},"time_used":198,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":198,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"teomnerxibaw222.net/api/lh/deposit/config?lang=en","fqdn":"teomnerxibaw222.net","domain":"teomnerxibaw222.net","tld":"net"},"ip":{"addr":"182.16.26.42","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://teomnerxibaw222.net/h5/","date":"2026-04-10T14:51:14.885Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"teomnerxibaw222.net","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 10 Apr 2026 02:56:33 GMT","end":"Thu, 09 Jul 2026 02:56:32 GMT"},"fingerprint":{"sha1":"B5:7B:12:B8:78:63:E7:29:56:3A:F3:0B:5A:79:65:9F:D6:2C:29:A2","sha256":"37:61:C1:C1:64:C5:0D:92:BD:75:CA:9F:12:23:01:9B:8A:A4:E1:67:5F:49:7E:95:70:E2:F8:4E:6C:C2:C8:79"}}},"request":{"raw":"GET /api/lh/deposit/config?lang=en HTTP/1.1\r\nHost: teomnerxibaw222.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAuthorization: \r\nContent-Type: application/x-www-form-urlencoded\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://teomnerxibaw222.net/h5/\r\nCookie: angela_session=eyJpdiI6Ik9wYks4Q3dGRDdiTTF6MnVCRVRaSFE9PSIsInZhbHVlIjoiUzBJOGUwVEtib2FIYXJoRSt0ZkRiZVkraWhOSG9Wa2VicEVxQ24wTU9LTjh4YStwT1NqZytuQlJsWmh3M0J6M1k1Q0ZGTHRsdzI3WmhmRU9VUklUYVwvM1FzOHNpd1BsVW9wNFpRNFlkNzNCTzI0OVMxaTVqWEhrK0gxNlVKdlJTIiwibWFjIjoiN2ViNzQyNTE5M2YwZWFjMzgwNWJhOGZiNGRmMWM3YWY1NWU2Y2YwYmZmMzU5OTg5N2YxMjE2YWQ2MTIyZDRkYyJ9\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ncontent-type: application/json\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: POST,GET,OPTIONS,DELETE\r\naccess-control-allow-headers: x-requested-with,content-type,Authorization\r\ncache-control: no-cache, private\r\ndate: Fri, 10 Apr 2026 14:51:14 GMT\r\nx-ratelimit-limit: 60\r\nx-ratelimit-remaining: 59\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1222,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"2dbab74eaa65706cc0ae9f25bd207516","sha1":"3e84e46e74396c7070b4829f0a28e6ea9fa1f0a7","sha256":"4301b6bd13fdbc21791b2e10d1fc662712b43c581c328e01e39abbf730fd5499","sha512":"51c8785fea4309bff31ff4d050d6ecbdc743077df5b05a53d947af5ef4c81d5e142816e060fb7156f6839e49c7491d5c30e9213a54cbf46f311e3e778442183e","ssdeep":"","tlshash":"b3213a69375ddbe8c16506c313eab1acb096324f2dcb4ad827ceac9c82d4532e018d33","first_seen":"2025-04-28T03:56:45.147033Z","last_seen":"2026-04-10T14:51:41.425039Z","times_seen":17,"resource_available":false,"data":null}},"time_used":199,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":199,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"teomnerxibaw222.net/api/currency/new_timeshar?from=1775829074\u0026to=1775832674\u0026symbol=QTUM%2FUSDT\u0026period=1min\u0026lang=en","fqdn":"teomnerxibaw222.net","domain":"teomnerxibaw222.net","tld":"net"},"ip":{"addr":"182.16.26.42","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://teomnerxibaw222.net/h5/","date":"2026-04-10T14:51:17.646Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"teomnerxibaw222.net","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 10 Apr 2026 02:56:33 GMT","end":"Thu, 09 Jul 2026 02:56:32 GMT"},"fingerprint":{"sha1":"B5:7B:12:B8:78:63:E7:29:56:3A:F3:0B:5A:79:65:9F:D6:2C:29:A2","sha256":"37:61:C1:C1:64:C5:0D:92:BD:75:CA:9F:12:23:01:9B:8A:A4:E1:67:5F:49:7E:95:70:E2:F8:4E:6C:C2:C8:79"}}},"request":{"raw":"GET /api/currency/new_timeshar?from=1775829074\u0026to=1775832674\u0026symbol=QTUM%2FUSDT\u0026period=1min\u0026lang=en HTTP/1.1\r\nHost: teomnerxibaw222.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAuthorization: \r\nContent-Type: application/x-www-form-urlencoded\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://teomnerxibaw222.net/h5/\r\nCookie: angela_session=eyJpdiI6IkVPQmNwS25qeGZUMmJIeStcL3Y4RndnPT0iLCJ2YWx1ZSI6IkZDNDNCdU5qRFQ2U2tINkFuK0hPZElsdzNOa2hcLzRTN2RcLzVCUGVXMGNDek81N3ZudncxK290UnRNMUU3SldqK1lUMTJmNlpDbGZiSTQ4SkJpSmp0UEg5bVNMXC9GUmtRY0JHRlhNWUlWWlR3d1RTWG42YUZQZUpjYTMrTytTblNEIiwibWFjIjoiNjM5N2Y4YjM5YTZkZTJmZDYwNGYwMTNkODY1NjhlOTM0YzA1NjgwMTY4ODU0MWYwMzcyNTVmODcwNmU4ZGQ3MSJ9\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ncontent-type: application/json\r\nvary: Accept-Encoding\r\ncache-control: no-cache, private\r\ndate: Fri, 10 Apr 2026 14:51:17 GMT\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Origin, Content-Type, Cookie, X-CSRF-TOKEN, Accept, Authorization, X-XSRF-TOKEN\r\naccess-control-expose-headers: Authorization, authenticated\r\naccess-control-allow-methods: GET, POST, PATCH, PUT, OPTIONS\r\naccess-control-allow-credentials: false\r\nset-cookie: angela_session=eyJpdiI6Img5aVEzU05VS3hsajJXWTJ6TUYxRnc9PSIsInZhbHVlIjoidnorNktrTThUcWFmbDI4Yjd5WnFvVVpMZTdFQnBFWkQzZWpPY0FBc29zQ0pQcUliNjNXWHlpR0hHXC9iR0tLTkkwZDlyeHhCeFNlenZFXC9hSmRXNUNaeUwrOE1RK21oeEJBZzRVTXpFT2pGM3ltQU5RMGxQMDY3RmdOcWtFUFZ3YSIsIm1hYyI6Ijc0YmQ3NjU4MjgwZTI0MTc2MzUwNDMxMjg0N2NiMzBkMzg1NDhkZDAwOGZlZGJiMzNjNzYyZmUwZmJlNjA5ZDAifQ%3D%3D; expires=Fri, 10-Apr-2026 16:51:17 GMT; Max-Age=7200; path=/; httponly\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":12559,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"416715ea96298fe9150fe9fcaff7528d","sha1":"17125b90e978f051d1bed29fc1ab212daa1c21be","sha256":"0fae42ffe9d996797afec46f850e3485b4a929a169b063c929d43ecfefbe2ea9","sha512":"02ee04fcf78c23cdef2bdfb83b6e02ed5da5f93e0db8b2de1a36fa9d29f2fb2a36d7ca9d4ddd69ecd13ec96fc336e30a370c716ed237f80a373193d51f8406e0","ssdeep":"96:xn1/Hn1/Un1/+VnnMin+Fn1Jn1/7cbckn1/afaDn1/0n1/Dnuun18n1/bzn1/7nB:HRY+Cvp7cbcIafO46hbXCvyU+XWyAv0T","tlshash":"b5429e4246ad0161c03b51d07ed37de9c2aaa15fa8c2cee509be4c9156e25baf303d3f","first_seen":"2026-04-10T14:51:41.425512Z","last_seen":"2026-04-10T14:51:41.425512Z","times_seen":1,"resource_available":false,"data":null}},"time_used":213,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":213,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"teomnerxibaw222.net/h5/static/image/nav/nav-2.png","fqdn":"teomnerxibaw222.net","domain":"teomnerxibaw222.net","tld":"net"},"ip":{"addr":"182.16.26.42","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://teomnerxibaw222.net/h5/","date":"2026-04-10T14:51:14.260Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"teomnerxibaw222.net","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 10 Apr 2026 02:56:33 GMT","end":"Thu, 09 Jul 2026 02:56:32 GMT"},"fingerprint":{"sha1":"B5:7B:12:B8:78:63:E7:29:56:3A:F3:0B:5A:79:65:9F:D6:2C:29:A2","sha256":"37:61:C1:C1:64:C5:0D:92:BD:75:CA:9F:12:23:01:9B:8A:A4:E1:67:5F:49:7E:95:70:E2:F8:4E:6C:C2:C8:79"}}},"request":{"raw":"GET /h5/static/image/nav/nav-2.png HTTP/1.1\r\nHost: teomnerxibaw222.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://teomnerxibaw222.net/h5/\r\nCookie: angela_session=eyJpdiI6Ikd0YUhFZng0S1pPSTA5bFhkcURCS0E9PSIsInZhbHVlIjoiSEFcL3hTZEJjRytIR25XQzVBbFNERTY4WFdubmJRVGRLRlJ2K1wvS1dXSEFaeUhJcmk1dEw1dERUWUkrSWJ0K2ZHckdGWExncjU4WXBFNzc4NnJJZFZIWE5DXC8yMmZkVUpjZTQxcFwvVUdnbUJWdHo2WVZBeUl6VEtEOEpiWDVON2taIiwibWFjIjoiOWUyNzJlZTcyN2YyYjBkMjU3YmRkMjhkZWI0NTAzODQ5ZWVkZjEwNDZjOTkzZWU3Zjk0ZmY0NGU3NGFiYzZkZCJ9\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 10 Apr 2026 14:51:14 GMT\r\ncontent-type: image/png\r\ncontent-length: 355\r\nlast-modified: Thu, 05 Feb 2026 17:37:52 GMT\r\netag: \"6984d570-163\"\r\nexpires: Sun, 10 May 2026 14:51:14 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":355,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 40 x 36, 8-bit/color RGBA, non-interlaced","md5":"bba6863c9929a3858b0fb3c77201ae8d","sha1":"f6d7dfa984b3ccf6d38d9d9051c0462578bfe9fc","sha256":"7519ccca854d4151acb7e3ef7546148612fa8be43bc7af75d98e29d65d7463fa","sha512":"9faabc908c44d52e21e308b116394e8fb4c12e31f3446b4bd8a7f5c7c418d4c064309f6c841614d018649652286b08d4ee6ebd1bf97134eae8fe3b0d9a090591","ssdeep":"","tlshash":"04e0c0c5f7e774c0d39223bf413e08260433c1ad3d55069ca31bcc55592b00b80c00d7","first_seen":"2023-05-20T12:09:29Z","last_seen":"2026-04-26T22:44:21.222728Z","times_seen":139,"resource_available":false,"data":null}},"time_used":371,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":371,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"teomnerxibaw222.net/api/currency/new_timeshar?from=1775829074\u0026to=1775832674\u0026symbol=LTC%2FUSDT\u0026period=1min\u0026lang=en","fqdn":"teomnerxibaw222.net","domain":"teomnerxibaw222.net","tld":"net"},"ip":{"addr":"182.16.26.42","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://teomnerxibaw222.net/h5/","date":"2026-04-10T14:51:17.006Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"teomnerxibaw222.net","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 10 Apr 2026 02:56:33 GMT","end":"Thu, 09 Jul 2026 02:56:32 GMT"},"fingerprint":{"sha1":"B5:7B:12:B8:78:63:E7:29:56:3A:F3:0B:5A:79:65:9F:D6:2C:29:A2","sha256":"37:61:C1:C1:64:C5:0D:92:BD:75:CA:9F:12:23:01:9B:8A:A4:E1:67:5F:49:7E:95:70:E2:F8:4E:6C:C2:C8:79"}}},"request":{"raw":"GET /api/currency/new_timeshar?from=1775829074\u0026to=1775832674\u0026symbol=LTC%2FUSDT\u0026period=1min\u0026lang=en HTTP/1.1\r\nHost: teomnerxibaw222.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAuthorization: \r\nContent-Type: application/x-www-form-urlencoded\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://teomnerxibaw222.net/h5/\r\nCookie: angela_session=eyJpdiI6ImxSbVRkczh3QWRIUVcyWm5IMVFha1E9PSIsInZhbHVlIjoiY3M2cnJzanBcL1YxRUNGRkNnRlprZ1NFUDE4dm5qMXp3Q0wzM2drTHRkRk1nTnVCM1pONDh2bldjQnBVOTJHeThVMlhsOThrK2Y2WUxDc3ZvNTk3d0swcW4zejhKV04zY0J6SnhYbUlMRlQzYkdnNkVyY1BFclBGSjBaNVBsTlQ1IiwibWFjIjoiYjY3MzU2YTU1ZmMwMzVmNzNhNmNhNWNiMzc4ODA5Mjk1Njk0OTIyN2VjODljYTk4OTljMGUyOTU4NjYyM2UwNSJ9\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ncontent-type: application/json\r\nvary: Accept-Encoding\r\ncache-control: no-cache, private\r\ndate: Fri, 10 Apr 2026 14:51:17 GMT\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Origin, Content-Type, Cookie, X-CSRF-TOKEN, Accept, Authorization, X-XSRF-TOKEN\r\naccess-control-expose-headers: Authorization, authenticated\r\naccess-control-allow-methods: GET, POST, PATCH, PUT, OPTIONS\r\naccess-control-allow-credentials: false\r\nset-cookie: angela_session=eyJpdiI6ImJjNnRcL1laUUlUZEVFNEZWWGVxOXdnPT0iLCJ2YWx1ZSI6IkNMVjZYdVFTQm4yVVYzMG41VTdHZ2NNMVVMczhHVlF0K3dHSVA3XC8yNHRqbGxXNkYxc0RENzdqNzIwZ0VhRFlraDIrWG9jUWlrXC84YXhxZlhIaHdjanhVUGF6alFZNGJSeGd5N2MxSCsxVVRrN0VVamJ6S2hPVXpCRUJoRW5hWjkiLCJtYWMiOiIzYmU5ODc4OGYzMmZkMGU2ZWU2M2Q4MDFlZTU4MjBjYzE4YmE4MTc3NTdlNDM2N2I0Yzg3OTU1MjA0NmU4MTYyIn0%3D; expires=Fri, 10-Apr-2026 16:51:17 GMT; Max-Age=7200; path=/; httponly\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":12277,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"a7d440cb9f950d0b9385d02b3edc128d","sha1":"e184af72b0d129e715492bf6d6859927e1637c7b","sha256":"b6ae12a75c58aca3539c9beea3914d84749121fb1911d5626eaae33b0e87db23","sha512":"3b44daed2475ce58124be75e3a9e4d4300863d3803b85af4853af5e768378fa612a1c941a70943ff3293653df669b9aaca80c4977d6f9e7510ff3944541df872","ssdeep":"96:xBl8BlfBwCfBwCoBwhjCBmvBwhmBdyaBx9BpWcBFYBFLB6pBJIBJXBd5Bh5SBU6l:o/CpnrTjftmGaoG","tlshash":"92424f405a6d02f2d07a62c4ee93a8e8a26e335798d3cfd842bf14d158e55b7f112d3b","first_seen":"2026-04-10T14:51:41.427193Z","last_seen":"2026-04-10T14:51:41.427193Z","times_seen":1,"resource_available":false,"data":null}},"time_used":211,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":211,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"teomnerxibaw222.net/h5/static/js/pages-common-aboutus~pages-common-area~pages-common-article~pages-common-borrowing~pages-common-cont~85764de0.32eb5b3a.js","fqdn":"teomnerxibaw222.net","domain":"teomnerxibaw222.net","tld":"net"},"ip":{"addr":"182.16.26.42","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://teomnerxibaw222.net/h5/","date":"2026-04-10T14:51:14.245Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"teomnerxibaw222.net","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 10 Apr 2026 02:56:33 GMT","end":"Thu, 09 Jul 2026 02:56:32 GMT"},"fingerprint":{"sha1":"B5:7B:12:B8:78:63:E7:29:56:3A:F3:0B:5A:79:65:9F:D6:2C:29:A2","sha256":"37:61:C1:C1:64:C5:0D:92:BD:75:CA:9F:12:23:01:9B:8A:A4:E1:67:5F:49:7E:95:70:E2:F8:4E:6C:C2:C8:79"}}},"request":{"raw":"GET /h5/static/js/pages-common-aboutus~pages-common-area~pages-common-article~pages-common-borrowing~pages-common-cont~85764de0.32eb5b3a.js HTTP/1.1\r\nHost: teomnerxibaw222.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://teomnerxibaw222.net/h5/\r\nCookie: angela_session=eyJpdiI6Ikd0YUhFZng0S1pPSTA5bFhkcURCS0E9PSIsInZhbHVlIjoiSEFcL3hTZEJjRytIR25XQzVBbFNERTY4WFdubmJRVGRLRlJ2K1wvS1dXSEFaeUhJcmk1dEw1dERUWUkrSWJ0K2ZHckdGWExncjU4WXBFNzc4NnJJZFZIWE5DXC8yMmZkVUpjZTQxcFwvVUdnbUJWdHo2WVZBeUl6VEtEOEpiWDVON2taIiwibWFjIjoiOWUyNzJlZTcyN2YyYjBkMjU3YmRkMjhkZWI0NTAzODQ5ZWVkZjEwNDZjOTkzZWU3Zjk0ZmY0NGU3NGFiYzZkZCJ9\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 10 Apr 2026 14:51:14 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 05 Feb 2026 17:37:52 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6984d570-1aa93\"\r\nexpires: Sat, 11 Apr 2026 02:51:14 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":109203,"size_decoded":0,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text, with very long lines (65272), with no line terminators","md5":"e1725a27b2a6155ba8be8f4a96f350d4","sha1":"cba5dacaa6b6c9ea339118712f210291a64be5a8","sha256":"33f43a2aea29d6e981f6231463eae6354c62c42a5ed765ea2ea3cb2eba845ea1","sha512":"57624a6c57924fdfb21b87d524fc45df09a2b3e564d8f4c282c20d6975fc935cb99a8cf416ac0bc82474d1e4c2eb67bb74f01eb8eaaf55e4af07771e5bd24735","ssdeep":"1536:jsYId0FHoMqu7NdEAaM2OKV+D2ikecrDg:jsp0NVr7fnaMwV+D2iZco","tlshash":"c5b3e3e2fccc90405e67ce6bf1c13af85616b72246c1f871e6493b364e52ad123e65b8","first_seen":"2025-10-09T04:17:48.408268Z","last_seen":"2026-04-10T14:51:41.428419Z","times_seen":5,"resource_available":true,"data":null}},"time_used":193,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":193,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"teomnerxibaw222.net/h5/static/js/pages-common-login~pages-common-register~pages-copytrade-copy~pages-follow-index~pages-fund-fundTran~0c3dba78.9a0709d3.js","fqdn":"teomnerxibaw222.net","domain":"teomnerxibaw222.net","tld":"net"},"ip":{"addr":"182.16.26.42","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://teomnerxibaw222.net/h5/","date":"2026-04-10T14:51:14.247Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"teomnerxibaw222.net","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 10 Apr 2026 02:56:33 GMT","end":"Thu, 09 Jul 2026 02:56:32 GMT"},"fingerprint":{"sha1":"B5:7B:12:B8:78:63:E7:29:56:3A:F3:0B:5A:79:65:9F:D6:2C:29:A2","sha256":"37:61:C1:C1:64:C5:0D:92:BD:75:CA:9F:12:23:01:9B:8A:A4:E1:67:5F:49:7E:95:70:E2:F8:4E:6C:C2:C8:79"}}},"request":{"raw":"GET /h5/static/js/pages-common-login~pages-common-register~pages-copytrade-copy~pages-follow-index~pages-fund-fundTran~0c3dba78.9a0709d3.js HTTP/1.1\r\nHost: teomnerxibaw222.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://teomnerxibaw222.net/h5/\r\nCookie: angela_session=eyJpdiI6Ikd0YUhFZng0S1pPSTA5bFhkcURCS0E9PSIsInZhbHVlIjoiSEFcL3hTZEJjRytIR25XQzVBbFNERTY4WFdubmJRVGRLRlJ2K1wvS1dXSEFaeUhJcmk1dEw1dERUWUkrSWJ0K2ZHckdGWExncjU4WXBFNzc4NnJJZFZIWE5DXC8yMmZkVUpjZTQxcFwvVUdnbUJWdHo2WVZBeUl6VEtEOEpiWDVON2taIiwibWFjIjoiOWUyNzJlZTcyN2YyYjBkMjU3YmRkMjhkZWI0NTAzODQ5ZWVkZjEwNDZjOTkzZWU3Zjk0ZmY0NGU3NGFiYzZkZCJ9\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 10 Apr 2026 14:51:14 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 05 Feb 2026 17:37:52 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6984d570-1dbc3\"\r\nexpires: Sat, 11 Apr 2026 02:51:14 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":121795,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65180), with no line terminators","md5":"5c4efeb896c9ae1be54c6f422cdb5bb3","sha1":"121fe5ea00646c868a3bf721c937dc64041c0e73","sha256":"85938dbb2246c9ea78bcb011d1423db03f7a5cda44b242af9b3fa5098ccd7503","sha512":"75eed4f14bd94649924c6bd59d3035f0395f41ad8a94893491a66fb24fb434f6578a84c4c0e1b629625245094ceba031c32eb0fcc0e8fad35aa5d5f813acf577","ssdeep":"384:UrDyKtap+SkU0eJz1z5dM+4GJCz62ga741zmT8REE+utOULnbOeAc//CQ:U3ZIkO+GJqz4YdULi9JQ","tlshash":"abc3e982fadc200455b7c702916176fdeb2fae7343c26897d881ef66ce2e5d7290652c","first_seen":"2025-10-09T04:17:48.433127Z","last_seen":"2026-04-10T14:51:41.429032Z","times_seen":5,"resource_available":true,"data":null}},"time_used":193,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":193,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"teomnerxibaw222.net/api/getSiteConfig?lang=en","fqdn":"teomnerxibaw222.net","domain":"teomnerxibaw222.net","tld":"net"},"ip":{"addr":"182.16.26.42","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://teomnerxibaw222.net/h5/","date":"2026-04-10T14:51:14.272Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"teomnerxibaw222.net","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 10 Apr 2026 02:56:33 GMT","end":"Thu, 09 Jul 2026 02:56:32 GMT"},"fingerprint":{"sha1":"B5:7B:12:B8:78:63:E7:29:56:3A:F3:0B:5A:79:65:9F:D6:2C:29:A2","sha256":"37:61:C1:C1:64:C5:0D:92:BD:75:CA:9F:12:23:01:9B:8A:A4:E1:67:5F:49:7E:95:70:E2:F8:4E:6C:C2:C8:79"}}},"request":{"raw":"GET /api/getSiteConfig?lang=en HTTP/1.1\r\nHost: teomnerxibaw222.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAuthorization: \r\nContent-Type: application/x-www-form-urlencoded\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://teomnerxibaw222.net/h5/\r\nCookie: angela_session=eyJpdiI6Ikd0YUhFZng0S1pPSTA5bFhkcURCS0E9PSIsInZhbHVlIjoiSEFcL3hTZEJjRytIR25XQzVBbFNERTY4WFdubmJRVGRLRlJ2K1wvS1dXSEFaeUhJcmk1dEw1dERUWUkrSWJ0K2ZHckdGWExncjU4WXBFNzc4NnJJZFZIWE5DXC8yMmZkVUpjZTQxcFwvVUdnbUJWdHo2WVZBeUl6VEtEOEpiWDVON2taIiwibWFjIjoiOWUyNzJlZTcyN2YyYjBkMjU3YmRkMjhkZWI0NTAzODQ5ZWVkZjEwNDZjOTkzZWU3Zjk0ZmY0NGU3NGFiYzZkZCJ9\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ncontent-type: application/json\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: POST,GET,OPTIONS,DELETE\r\naccess-control-allow-headers: x-requested-with,content-type,Authorization\r\ncache-control: no-cache, private\r\ndate: Fri, 10 Apr 2026 14:51:14 GMT\r\nset-cookie: angela_session=eyJpdiI6Ik9wYks4Q3dGRDdiTTF6MnVCRVRaSFE9PSIsInZhbHVlIjoiUzBJOGUwVEtib2FIYXJoRSt0ZkRiZVkraWhOSG9Wa2VicEVxQ24wTU9LTjh4YStwT1NqZytuQlJsWmh3M0J6M1k1Q0ZGTHRsdzI3WmhmRU9VUklUYVwvM1FzOHNpd1BsVW9wNFpRNFlkNzNCTzI0OVMxaTVqWEhrK0gxNlVKdlJTIiwibWFjIjoiN2ViNzQyNTE5M2YwZWFjMzgwNWJhOGZiNGRmMWM3YWY1NWU2Y2YwYmZmMzU5OTg5N2YxMjE2YWQ2MTIyZDRkYyJ9; expires=Fri, 10-Apr-2026 16:51:14 GMT; Max-Age=7200; path=/; httponly\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":116,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"974d6eeac25477d6eb4d6865d1dce924","sha1":"25548cf046950f6b40a4a9ca88f76d5cb464cc2f","sha256":"d91d759639c56e9c1bc77c004e53abd7bd34e2862a1bc35883754983f194cec5","sha512":"684a93429b2c51b16275dac2f71230b322c7ad7deeb1a749293dd4c121972796bc54ddc79017eeaa80a4192d47625c89071f3d8153246b09715a57c464931e48","ssdeep":"","tlshash":"65b0924e2144ec280602868bba862a18b18a1a4bd4936245e64ab8a9d15d0bc503a5aa","first_seen":"2025-10-09T04:17:48.434206Z","last_seen":"2026-04-10T14:51:41.429563Z","times_seen":5,"resource_available":false,"data":null}},"time_used":362,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":362,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"teomnerxibaw222.net/h5/static/img/home-bg.a827cafe.png","fqdn":"teomnerxibaw222.net","domain":"teomnerxibaw222.net","tld":"net"},"ip":{"addr":"182.16.26.42","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://teomnerxibaw222.net/h5/","date":"2026-04-10T14:51:14.924Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"teomnerxibaw222.net","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 10 Apr 2026 02:56:33 GMT","end":"Thu, 09 Jul 2026 02:56:32 GMT"},"fingerprint":{"sha1":"B5:7B:12:B8:78:63:E7:29:56:3A:F3:0B:5A:79:65:9F:D6:2C:29:A2","sha256":"37:61:C1:C1:64:C5:0D:92:BD:75:CA:9F:12:23:01:9B:8A:A4:E1:67:5F:49:7E:95:70:E2:F8:4E:6C:C2:C8:79"}}},"request":{"raw":"GET /h5/static/img/home-bg.a827cafe.png HTTP/1.1\r\nHost: teomnerxibaw222.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://teomnerxibaw222.net/h5/\r\nCookie: angela_session=eyJpdiI6Ik9wYks4Q3dGRDdiTTF6MnVCRVRaSFE9PSIsInZhbHVlIjoiUzBJOGUwVEtib2FIYXJoRSt0ZkRiZVkraWhOSG9Wa2VicEVxQ24wTU9LTjh4YStwT1NqZytuQlJsWmh3M0J6M1k1Q0ZGTHRsdzI3WmhmRU9VUklUYVwvM1FzOHNpd1BsVW9wNFpRNFlkNzNCTzI0OVMxaTVqWEhrK0gxNlVKdlJTIiwibWFjIjoiN2ViNzQyNTE5M2YwZWFjMzgwNWJhOGZiNGRmMWM3YWY1NWU2Y2YwYmZmMzU5OTg5N2YxMjE2YWQ2MTIyZDRkYyJ9\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 10 Apr 2026 14:51:15 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 05 Feb 2026 17:37:52 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6984d570-22ecb\"\r\nexpires: Sun, 10 May 2026 14:51:15 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":143051,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1125 x 786, 8-bit/color RGBA, non-interlaced","md5":"a827cafe27f786d8c8475bf0f0a9a9e3","sha1":"5ba0832763a1bd0a71bd4142dca357ddb5519ca2","sha256":"c83d155a4ed181759a68b656a354b2b2578e17e51af30591ad4e094968bb2b91","sha512":"ef6125984178cefd638c5c8b37e18789c68d14f11cdc68133083246971001ca045a4bf19c148aa8186ee60559ff8957d4b83f28c9949365c978d90568d170845","ssdeep":"3072:M2UmrYtvK2fJJM8XYc/FepUGS3IIK5knONqlkGU48M8hU+3tSOHniet/d:MZmcI2TMsYc/QpMYzkO4oNM8NddHnJ1","tlshash":"f4e3125917cbd9a2c69b2218872d08f47e5318e6a01e08422ab11d4f7a73b0ddff5d9f","first_seen":"2023-10-14T15:22:24Z","last_seen":"2026-04-10T14:51:41.430286Z","times_seen":30,"resource_available":false,"data":null}},"time_used":192,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":192,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"teomnerxibaw222.net/h5/static/image/nav/nav-3.png","fqdn":"teomnerxibaw222.net","domain":"teomnerxibaw222.net","tld":"net"},"ip":{"addr":"182.16.26.42","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://teomnerxibaw222.net/h5/","date":"2026-04-10T14:51:14.261Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"teomnerxibaw222.net","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 10 Apr 2026 02:56:33 GMT","end":"Thu, 09 Jul 2026 02:56:32 GMT"},"fingerprint":{"sha1":"B5:7B:12:B8:78:63:E7:29:56:3A:F3:0B:5A:79:65:9F:D6:2C:29:A2","sha256":"37:61:C1:C1:64:C5:0D:92:BD:75:CA:9F:12:23:01:9B:8A:A4:E1:67:5F:49:7E:95:70:E2:F8:4E:6C:C2:C8:79"}}},"request":{"raw":"GET /h5/static/image/nav/nav-3.png HTTP/1.1\r\nHost: teomnerxibaw222.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://teomnerxibaw222.net/h5/\r\nCookie: angela_session=eyJpdiI6Ikd0YUhFZng0S1pPSTA5bFhkcURCS0E9PSIsInZhbHVlIjoiSEFcL3hTZEJjRytIR25XQzVBbFNERTY4WFdubmJRVGRLRlJ2K1wvS1dXSEFaeUhJcmk1dEw1dERUWUkrSWJ0K2ZHckdGWExncjU4WXBFNzc4NnJJZFZIWE5DXC8yMmZkVUpjZTQxcFwvVUdnbUJWdHo2WVZBeUl6VEtEOEpiWDVON2taIiwibWFjIjoiOWUyNzJlZTcyN2YyYjBkMjU3YmRkMjhkZWI0NTAzODQ5ZWVkZjEwNDZjOTkzZWU3Zjk0ZmY0NGU3NGFiYzZkZCJ9\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 10 Apr 2026 14:51:14 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 05 Feb 2026 17:37:52 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6984d570-4d0\"\r\nexpires: Sun, 10 May 2026 14:51:14 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1232,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 44 x 45, 8-bit/color RGBA, non-interlaced","md5":"fd57dd6dbb1f72619420449aafe1d852","sha1":"bb99e3ba6404a1c00482576775530a0bcbf1d254","sha256":"67989dd943d26961cb26b505d15c64cb24c3ed0aacb607d32ef5d864ec1af3ef","sha512":"dbf4768c4a3c8eb9b84cf98a6086eb518d4c6cd56b57848466b8eb600191eb08c4086f19de41e62d9566ea7ba0fdf857b405108649fce438320f6f8371539181","ssdeep":"","tlshash":"f821b4d98b6c15e3c8e40c8fc53cac1b822ab45a189e2f0a46b999a70453319cf5d280","first_seen":"2023-05-20T12:09:28Z","last_seen":"2026-04-26T22:44:21.208445Z","times_seen":139,"resource_available":false,"data":null}},"time_used":370,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":370,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"teomnerxibaw222.net/h5/static/image/nav/nav-4.png","fqdn":"teomnerxibaw222.net","domain":"teomnerxibaw222.net","tld":"net"},"ip":{"addr":"182.16.26.42","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://teomnerxibaw222.net/h5/","date":"2026-04-10T14:51:14.263Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"teomnerxibaw222.net","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 10 Apr 2026 02:56:33 GMT","end":"Thu, 09 Jul 2026 02:56:32 GMT"},"fingerprint":{"sha1":"B5:7B:12:B8:78:63:E7:29:56:3A:F3:0B:5A:79:65:9F:D6:2C:29:A2","sha256":"37:61:C1:C1:64:C5:0D:92:BD:75:CA:9F:12:23:01:9B:8A:A4:E1:67:5F:49:7E:95:70:E2:F8:4E:6C:C2:C8:79"}}},"request":{"raw":"GET /h5/static/image/nav/nav-4.png HTTP/1.1\r\nHost: teomnerxibaw222.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://teomnerxibaw222.net/h5/\r\nCookie: angela_session=eyJpdiI6Ikd0YUhFZng0S1pPSTA5bFhkcURCS0E9PSIsInZhbHVlIjoiSEFcL3hTZEJjRytIR25XQzVBbFNERTY4WFdubmJRVGRLRlJ2K1wvS1dXSEFaeUhJcmk1dEw1dERUWUkrSWJ0K2ZHckdGWExncjU4WXBFNzc4NnJJZFZIWE5DXC8yMmZkVUpjZTQxcFwvVUdnbUJWdHo2WVZBeUl6VEtEOEpiWDVON2taIiwibWFjIjoiOWUyNzJlZTcyN2YyYjBkMjU3YmRkMjhkZWI0NTAzODQ5ZWVkZjEwNDZjOTkzZWU3Zjk0ZmY0NGU3NGFiYzZkZCJ9\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 10 Apr 2026 14:51:14 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 05 Feb 2026 17:37:52 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6984d570-49b\"\r\nexpires: Sun, 10 May 2026 14:51:14 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1179,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 46 x 46, 8-bit/color RGBA, non-interlaced","md5":"3b9bd6a518d868bfdf6bc671def3327d","sha1":"0002af2d238c42d44f95ffdecc0ee1957ead1e8e","sha256":"ba5a50079d685b02f29d59f5f4d16331b8c29fa2aff5eed2ffb116d1dfe572b4","sha512":"a17dc0cecdae39b67412c192887ed80d8295ed87c71d29227b916b4f7a0aa9f382677d226091e185b3a503cc5f57140c38277191a84ac2135efd6eaa085c2ab8","ssdeep":"","tlshash":"f021d7efb1c21012c729e2be1c0e9779b62da302a7b8444225c5f892fd890c33354f4e","first_seen":"2023-05-20T12:09:29Z","last_seen":"2026-04-17T07:53:43.61604Z","times_seen":124,"resource_available":false,"data":null}},"time_used":370,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":370,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"teomnerxibaw222.net/api/menu?lang=en","fqdn":"teomnerxibaw222.net","domain":"teomnerxibaw222.net","tld":"net"},"ip":{"addr":"182.16.26.42","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://teomnerxibaw222.net/h5/","date":"2026-04-10T14:51:14.881Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"teomnerxibaw222.net","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 10 Apr 2026 02:56:33 GMT","end":"Thu, 09 Jul 2026 02:56:32 GMT"},"fingerprint":{"sha1":"B5:7B:12:B8:78:63:E7:29:56:3A:F3:0B:5A:79:65:9F:D6:2C:29:A2","sha256":"37:61:C1:C1:64:C5:0D:92:BD:75:CA:9F:12:23:01:9B:8A:A4:E1:67:5F:49:7E:95:70:E2:F8:4E:6C:C2:C8:79"}}},"request":{"raw":"GET /api/menu?lang=en HTTP/1.1\r\nHost: teomnerxibaw222.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAuthorization: \r\nContent-Type: application/x-www-form-urlencoded\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://teomnerxibaw222.net/h5/\r\nCookie: angela_session=eyJpdiI6Ik9wYks4Q3dGRDdiTTF6MnVCRVRaSFE9PSIsInZhbHVlIjoiUzBJOGUwVEtib2FIYXJoRSt0ZkRiZVkraWhOSG9Wa2VicEVxQ24wTU9LTjh4YStwT1NqZytuQlJsWmh3M0J6M1k1Q0ZGTHRsdzI3WmhmRU9VUklUYVwvM1FzOHNpd1BsVW9wNFpRNFlkNzNCTzI0OVMxaTVqWEhrK0gxNlVKdlJTIiwibWFjIjoiN2ViNzQyNTE5M2YwZWFjMzgwNWJhOGZiNGRmMWM3YWY1NWU2Y2YwYmZmMzU5OTg5N2YxMjE2YWQ2MTIyZDRkYyJ9\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ncontent-type: application/json\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: POST,GET,OPTIONS,DELETE\r\naccess-control-allow-headers: x-requested-with,content-type,Authorization\r\ncache-control: no-cache, private\r\ndate: Fri, 10 Apr 2026 14:51:14 GMT\r\nset-cookie: angela_session=eyJpdiI6ImpYN1l4b21CMnNuM21TQng4Sm12eUE9PSIsInZhbHVlIjoieldQaXFjTnArYTdsQTM5YmpKa0ZQUDkyRzdoMVdkeHRxeStaY3RiN3NLb0NmM1pFMmVOXC9qeUpYWGF4TXZzb1ZlNWhxa2JKWlpcL2hOMGR5M25ob2lqa3FhMGlza3lOdnIyaHA0MEpkUnN1R1VYUjdcL1RuMGRpZmRmVlJuaTcwdGYiLCJtYWMiOiJhNmJmZmRkYjE0MGFjY2VhNDVkZmNjZDUxMWEyMDJmMDhlY2U5ODExOGE2ZjQ2ZDViYmQ2ZTczMDQ2OTA0YTNlIn0%3D; expires=Fri, 10-Apr-2026 16:51:14 GMT; Max-Age=7200; path=/; httponly\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1326,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"5ea95886d52b71918aa2984bfc033a50","sha1":"0896ba09fa6dccd38d0286162b19bebfd99f92cf","sha256":"7e1e43d5e554bd827ec9bd34c5622a2a8bc354c2f56132ac85ae0ac4b74d2548","sha512":"f35498c9139cae64eda9b6af1b51e0a92a6357e5acb3faa255cd59b785c61c87e56f84691fd0e6817684f3e0918658b275ca5b751e0c47f906dc97c27e6092c6","ssdeep":"","tlshash":"13214bdd5ef83c2dc2fb25f558e3155e209a0507dde4b6961befaddc02e818042d7491","first_seen":"2025-10-09T04:17:48.413354Z","last_seen":"2026-04-10T14:51:41.417338Z","times_seen":5,"resource_available":false,"data":null}},"time_used":198,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":198,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"teomnerxibaw222.net/h5/static/common/js/touch-emulator.js","fqdn":"teomnerxibaw222.net","domain":"teomnerxibaw222.net","tld":"net"},"ip":{"addr":"182.16.26.42","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://teomnerxibaw222.net/h5/","date":"2026-04-10T14:51:12.788Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"teomnerxibaw222.net","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 10 Apr 2026 02:56:33 GMT","end":"Thu, 09 Jul 2026 02:56:32 GMT"},"fingerprint":{"sha1":"B5:7B:12:B8:78:63:E7:29:56:3A:F3:0B:5A:79:65:9F:D6:2C:29:A2","sha256":"37:61:C1:C1:64:C5:0D:92:BD:75:CA:9F:12:23:01:9B:8A:A4:E1:67:5F:49:7E:95:70:E2:F8:4E:6C:C2:C8:79"}}},"request":{"raw":"GET /h5/static/common/js/touch-emulator.js HTTP/1.1\r\nHost: teomnerxibaw222.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://teomnerxibaw222.net/h5/\r\nCookie: angela_session=eyJpdiI6Ikd0YUhFZng0S1pPSTA5bFhkcURCS0E9PSIsInZhbHVlIjoiSEFcL3hTZEJjRytIR25XQzVBbFNERTY4WFdubmJRVGRLRlJ2K1wvS1dXSEFaeUhJcmk1dEw1dERUWUkrSWJ0K2ZHckdGWExncjU4WXBFNzc4NnJJZFZIWE5DXC8yMmZkVUpjZTQxcFwvVUdnbUJWdHo2WVZBeUl6VEtEOEpiWDVON2taIiwibWFjIjoiOWUyNzJlZTcyN2YyYjBkMjU3YmRkMjhkZWI0NTAzODQ5ZWVkZjEwNDZjOTkzZWU3Zjk0ZmY0NGU3NGFiYzZkZCJ9\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 10 Apr 2026 14:51:12 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 05 Feb 2026 17:37:52 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6984d570-2d94\"\r\nexpires: Sat, 11 Apr 2026 02:51:12 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":11668,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with CRLF line terminators","md5":"178ba7db6232252a555ba6ff953756a8","sha1":"31129606e2c7e395a73184f30e81e835a424cdf5","sha256":"2968f310031c7a0c1d271836caa44aedaa28794289d14c577f0b17033e8c036d","sha512":"dea2f867ed3e1774320ea9494c9fd6fa24a7c7eeba27e50099530d3eabe196b6a34f70cfb7d0ac87aa5c70dcb5172d149de92da8af78725b6090952588041dbd","ssdeep":"96:L+vx+c5tJzNjX/wGiZ27oA2qMrttS7KDWom4RhvYahnT/TCKkTIT1/CoShwqhzcs:yvx+chzxItcKs+LmKk8TqhzwoEPq","tlshash":"1a32314f098a226204bb7329fb9e904af67e85a311012056fcbc5f653f72a758694ecd","first_seen":"2023-03-07T14:41:52Z","last_seen":"2026-05-01T02:11:36.777827Z","times_seen":514,"resource_available":true,"data":null}},"time_used":192,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":192,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"teomnerxibaw222.net/h5/static/image/icon/home-nav-1.png","fqdn":"teomnerxibaw222.net","domain":"teomnerxibaw222.net","tld":"net"},"ip":{"addr":"182.16.26.42","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://teomnerxibaw222.net/h5/","date":"2026-04-10T14:51:15.260Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"teomnerxibaw222.net","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 10 Apr 2026 02:56:33 GMT","end":"Thu, 09 Jul 2026 02:56:32 GMT"},"fingerprint":{"sha1":"B5:7B:12:B8:78:63:E7:29:56:3A:F3:0B:5A:79:65:9F:D6:2C:29:A2","sha256":"37:61:C1:C1:64:C5:0D:92:BD:75:CA:9F:12:23:01:9B:8A:A4:E1:67:5F:49:7E:95:70:E2:F8:4E:6C:C2:C8:79"}}},"request":{"raw":"GET /h5/static/image/icon/home-nav-1.png HTTP/1.1\r\nHost: teomnerxibaw222.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://teomnerxibaw222.net/h5/\r\nCookie: angela_session=eyJpdiI6IlwvdXNZbDZrdjdrUDNOSE5VZG5wS2RBPT0iLCJ2YWx1ZSI6ImNLZ1BtMjNhM1pLVE5sbG9HeWVMV3RCVTNjcGpBa3NqNk1zelhLa1JwVlozbXNNaUc4anB3N2ZnMW5FQVlnR0NSRll3aGNxenJhWGpZZHhpczdJdXkwTUpJdVJuNlB5YVhTMnFaaENPQ0xxQTBIaDk5MURvdXZPSG51RWwzMHd0IiwibWFjIjoiNjgyYTExNzlmMzUzYTljODQ2ODFhMDg4Yjg1YTA2OTBhYWFkNjk5NWIyODQ2YTM3MGU0ZWNiOTEyY2RjMTQzZiJ9\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 10 Apr 2026 14:51:15 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 05 Feb 2026 17:37:52 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6984d570-1b25\"\r\nexpires: Sun, 10 May 2026 14:51:15 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6949,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 88 x 88, 8-bit/color RGBA, non-interlaced","md5":"e42448179a7e4cfd76149fc4e340c190","sha1":"8c9bf373b329b7cbabb770586167fadc13c34fb6","sha256":"aad8f325c9108c1b4b9a5f5fd40bc6ad910e12a81b6014d4586f6f8e8131da19","sha512":"265b4ef947931ddd88d013c03c50a6546989ef54312ed83bff4dffcbf03588ac5a37ec62e2dfd38760fe8c34a911f5b14973249c06f7a1e2d06522e92b4b4e17","ssdeep":"192:MknihKLD6GjZm0AqoXmXXTEHuh3O4nG5rg2c1sQgl:fnihKtjZm0AqoX05h3O2Wg2ADgl","tlshash":"d5e18e0d78d15ca04e635781ffcd90a30b535581fee0b8427ca6ae5bae702b1ca2d9d7","first_seen":"2023-05-20T12:09:29Z","last_seen":"2026-04-26T22:44:21.218627Z","times_seen":125,"resource_available":false,"data":null}},"time_used":192,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":192,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.dcloud.net.cn/img/shadow-grey.png","fqdn":"cdn.dcloud.net.cn","domain":"dcloud.net.cn","tld":"net.cn"},"ip":{"addr":"111.231.169.247","port":443,"asn":45090,"as":"Shenzhen Tencent Computer Systems Company Limited","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://teomnerxibaw222.net/h5/","date":"2026-04-10T14:51:16.225Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.dcloud.net.cn","organization":""},"issuer":{"commonName":"Certum Domain Validation CA SHA2","organization":"Unizeto Technologies S.A."},"validity":{"start":"Tue, 26 Aug 2025 11:47:17 GMT","end":"Fri, 25 Sep 2026 11:47:16 GMT"},"fingerprint":{"sha1":"47:A7:6C:09:6B:1D:CA:2D:7D:39:2E:C1:7F:15:DE:5D:F2:C4:0F:77","sha256":"EA:73:37:83:D0:38:44:D9:3C:0B:26:F0:DD:D1:22:2F:36:F7:F2:86:A1:B0:58:52:DE:4E:0A:21:D6:89:E7:3E"}}},"request":{"raw":"GET /img/shadow-grey.png HTTP/1.1\r\nHost: cdn.dcloud.net.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://teomnerxibaw222.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 10 Apr 2026 14:51:17 GMT\r\ncontent-type: image/png\r\ncontent-length: 136\r\nlast-modified: Thu, 06 Jun 2019 06:42:07 GMT\r\netag: \"5cf8b5bf-88\"\r\nexpires: Fri, 10 Apr 2026 15:51:17 GMT\r\ncache-control: max-age=3600\r\nset-cookie: __uni__uid=rBEQUmnZDmU8P3gGA7HsAg==; expires=Thu, 31-Dec-37 23:55:55 GMT; domain=dcloud.net.cn; path=/; secure; httponly; samesite=none\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":136,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1 x 6, 4-bit colormap, non-interlaced","md5":"5a962adf74d92ae702467b3f47976547","sha1":"36f74049375584e3fa69b5ef87e9572336ff9e7a","sha256":"ad4ebea1c3496dd2924789ee009174a2c6289d1200e9811f458fd46f172d1d6f","sha512":"4ace23fe7ec6c7271710030fd423aace13eafac68ac3e76366ce4ce9bdc702caf71c9bdc2fb6a32c8e9791546098617cc0259decd8bb8489afdbce43e1b53a73","ssdeep":"","tlshash":"47c09bf3a615dc754a0d153b42e98271f429511e07046d0e5a13c216741e3448d56793","first_seen":"2023-04-15T10:50:30Z","last_seen":"2026-05-01T17:53:45.680418Z","times_seen":15180,"resource_available":false,"data":null}},"time_used":1610,"timings":{"blocked":678,"dns":56,"connect":252,"send":0,"wait":253,"receive":0,"ssl":369},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"teomnerxibaw222.net/api/news/index_pop?lang=en","fqdn":"teomnerxibaw222.net","domain":"teomnerxibaw222.net","tld":"net"},"ip":{"addr":"182.16.26.42","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://teomnerxibaw222.net/h5/","date":"2026-04-10T14:51:14.872Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"teomnerxibaw222.net","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 10 Apr 2026 02:56:33 GMT","end":"Thu, 09 Jul 2026 02:56:32 GMT"},"fingerprint":{"sha1":"B5:7B:12:B8:78:63:E7:29:56:3A:F3:0B:5A:79:65:9F:D6:2C:29:A2","sha256":"37:61:C1:C1:64:C5:0D:92:BD:75:CA:9F:12:23:01:9B:8A:A4:E1:67:5F:49:7E:95:70:E2:F8:4E:6C:C2:C8:79"}}},"request":{"raw":"GET /api/news/index_pop?lang=en HTTP/1.1\r\nHost: teomnerxibaw222.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAuthorization: \r\nContent-Type: application/x-www-form-urlencoded\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://teomnerxibaw222.net/h5/\r\nCookie: angela_session=eyJpdiI6Ik9wYks4Q3dGRDdiTTF6MnVCRVRaSFE9PSIsInZhbHVlIjoiUzBJOGUwVEtib2FIYXJoRSt0ZkRiZVkraWhOSG9Wa2VicEVxQ24wTU9LTjh4YStwT1NqZytuQlJsWmh3M0J6M1k1Q0ZGTHRsdzI3WmhmRU9VUklUYVwvM1FzOHNpd1BsVW9wNFpRNFlkNzNCTzI0OVMxaTVqWEhrK0gxNlVKdlJTIiwibWFjIjoiN2ViNzQyNTE5M2YwZWFjMzgwNWJhOGZiNGRmMWM3YWY1NWU2Y2YwYmZmMzU5OTg5N2YxMjE2YWQ2MTIyZDRkYyJ9\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ncontent-type: application/json\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: POST,GET,OPTIONS,DELETE\r\naccess-control-allow-headers: x-requested-with,content-type,Authorization\r\ncache-control: no-cache, private\r\ndate: Fri, 10 Apr 2026 14:51:14 GMT\r\nset-cookie: angela_session=eyJpdiI6IlZwQ3JyclVqMGpqMmEwMzdqekQ1RGc9PSIsInZhbHVlIjoiQUd5T1lmclwvaTZ3Y1NWUzFwdVR5RHJZbFdkV2hId1d3MXJFUk5YaEdqck42UTg0NUI0akNjOSs1OFlneHBZMXFoZjBucFwvcVdQUWF5UEFhc2djQzd5NDJCXC9sUmdZckRob21wVk5cL2NzZVRuMUlYTnlGVlJxaXBuanZxbnZ3YVFjIiwibWFjIjoiNjk0MzI2YThhZTFmYzE3ZThhMDk3MDMzMWNmZjcwYjI2YjIxNmE3YmMxM2QzMzkzOGYxOGVkMDZkYTU4ODI1NiJ9; expires=Fri, 10-Apr-2026 16:51:14 GMT; Max-Age=7200; path=/; httponly\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":28,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"7e6fa1bf5cc93ff191f6e9d25a7b5587","sha1":"027ba2ef0614fec58e260e7a0c989c283527b30b","sha256":"4fda09bb7c83ec6f6948f56849c4f7cb727c29cdeb0b42b84bec891be728a963","sha512":"4953f0c097793c2f756ea0eb744cac4369bb3cabad68f180964c481216bd4b77a9c176b1c4c0c81caf6df74bf5c8bb91f14c7b3aa4caee30131c6811ca9a5e0d","ssdeep":"","tlshash":"4b800000a208ac28030a0a0238883800828e0083c0822a0208088e28838e8b0223232e","first_seen":"2023-11-01T08:36:58Z","last_seen":"2026-05-01T02:11:36.75306Z","times_seen":186,"resource_available":false,"data":null}},"time_used":197,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":197,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"teomnerxibaw222.net/h5/static/image/nft/ca5ef4d8-dc73-43ba-9b42-f0ed45929ac5.png","fqdn":"teomnerxibaw222.net","domain":"teomnerxibaw222.net","tld":"net"},"ip":{"addr":"182.16.26.42","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://teomnerxibaw222.net/h5/","date":"2026-04-10T14:51:14.901Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"teomnerxibaw222.net","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 10 Apr 2026 02:56:33 GMT","end":"Thu, 09 Jul 2026 02:56:32 GMT"},"fingerprint":{"sha1":"B5:7B:12:B8:78:63:E7:29:56:3A:F3:0B:5A:79:65:9F:D6:2C:29:A2","sha256":"37:61:C1:C1:64:C5:0D:92:BD:75:CA:9F:12:23:01:9B:8A:A4:E1:67:5F:49:7E:95:70:E2:F8:4E:6C:C2:C8:79"}}},"request":{"raw":"GET /h5/static/image/nft/ca5ef4d8-dc73-43ba-9b42-f0ed45929ac5.png HTTP/1.1\r\nHost: teomnerxibaw222.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://teomnerxibaw222.net/h5/\r\nCookie: angela_session=eyJpdiI6Ik9wYks4Q3dGRDdiTTF6MnVCRVRaSFE9PSIsInZhbHVlIjoiUzBJOGUwVEtib2FIYXJoRSt0ZkRiZVkraWhOSG9Wa2VicEVxQ24wTU9LTjh4YStwT1NqZytuQlJsWmh3M0J6M1k1Q0ZGTHRsdzI3WmhmRU9VUklUYVwvM1FzOHNpd1BsVW9wNFpRNFlkNzNCTzI0OVMxaTVqWEhrK0gxNlVKdlJTIiwibWFjIjoiN2ViNzQyNTE5M2YwZWFjMzgwNWJhOGZiNGRmMWM3YWY1NWU2Y2YwYmZmMzU5OTg5N2YxMjE2YWQ2MTIyZDRkYyJ9\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 10 Apr 2026 14:51:14 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 05 Feb 2026 17:37:52 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6984d570-85b\"\r\nexpires: Sun, 10 May 2026 14:51:14 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2139,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 216 x 216, 8-bit colormap, non-interlaced","md5":"69de9a2cf0575d15dbe7bb9831f1ce05","sha1":"807c28d7f2de76b692f142d7894abc29bf8085d7","sha256":"4648f72bc0667e4f56606ca3a6280321b7dd7962dcd36ce29d540a6551c10ebc","sha512":"8587ac5a7fbda4067e7258c478107f5255da383a7ce9f5866b071cc255895770fac66a1e9a5bb0da0b13ae08d72b0afb49434f232060b59ac827c85b97f2fcb1","ssdeep":"","tlshash":"8b4109ae8129c7c5d79196ce592dd88cf506cf5d051782d8a82e6cfcb0a3063538956b","first_seen":"2023-10-14T15:22:24Z","last_seen":"2026-04-10T14:51:41.434743Z","times_seen":28,"resource_available":false,"data":null}},"time_used":192,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":192,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"teomnerxibaw222.net/h5/static/image/nft/seo-Banner1.png","fqdn":"teomnerxibaw222.net","domain":"teomnerxibaw222.net","tld":"net"},"ip":{"addr":"182.16.26.42","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://teomnerxibaw222.net/h5/","date":"2026-04-10T14:51:14.926Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"teomnerxibaw222.net","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 10 Apr 2026 02:56:33 GMT","end":"Thu, 09 Jul 2026 02:56:32 GMT"},"fingerprint":{"sha1":"B5:7B:12:B8:78:63:E7:29:56:3A:F3:0B:5A:79:65:9F:D6:2C:29:A2","sha256":"37:61:C1:C1:64:C5:0D:92:BD:75:CA:9F:12:23:01:9B:8A:A4:E1:67:5F:49:7E:95:70:E2:F8:4E:6C:C2:C8:79"}}},"request":{"raw":"GET /h5/static/image/nft/seo-Banner1.png HTTP/1.1\r\nHost: teomnerxibaw222.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://teomnerxibaw222.net/h5/\r\nCookie: angela_session=eyJpdiI6Ik9wYks4Q3dGRDdiTTF6MnVCRVRaSFE9PSIsInZhbHVlIjoiUzBJOGUwVEtib2FIYXJoRSt0ZkRiZVkraWhOSG9Wa2VicEVxQ24wTU9LTjh4YStwT1NqZytuQlJsWmh3M0J6M1k1Q0ZGTHRsdzI3WmhmRU9VUklUYVwvM1FzOHNpd1BsVW9wNFpRNFlkNzNCTzI0OVMxaTVqWEhrK0gxNlVKdlJTIiwibWFjIjoiN2ViNzQyNTE5M2YwZWFjMzgwNWJhOGZiNGRmMWM3YWY1NWU2Y2YwYmZmMzU5OTg5N2YxMjE2YWQ2MTIyZDRkYyJ9\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 10 Apr 2026 14:51:15 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 05 Feb 2026 17:37:52 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6984d570-2a93c\"\r\nexpires: Sun, 10 May 2026 14:51:15 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":174396,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1600 x 224, 8-bit/color RGBA, non-interlaced","md5":"1889cc1f7dda7a2ab3901eef32858a33","sha1":"2cce6f0de7e8519e1a7e6618c7fb77daf6722a7c","sha256":"2a9813e8cc7b0e5cfe0c690e3c8cff61524968b2eaa560505aebb12fb61682a7","sha512":"a2b7f4cdb6327691eefb5699089a2749587064cac1dc042b5d38d6694042df0045be625925bab301d5e21d610d75ebacf68304106860e14d855dad5a3246af26","ssdeep":"3072:ENnxaPkomt1IfA4Eue00n0viHLelY2WD8J14kIw8YM1L3B0xJOJ6gh0tD:Epq1EuZohL4JD8lxkgKtD","tlshash":"b504128abe9587066f4d792fedbd3521d30bc4c2f23b878083e07462af1958a5358ce5","first_seen":"2023-10-14T15:22:24Z","last_seen":"2026-04-10T14:51:41.435587Z","times_seen":24,"resource_available":false,"data":null}},"time_used":197,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":197,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"teomnerxibaw222.net/h5/static/img/mobile-background-image.bdf38153.png","fqdn":"teomnerxibaw222.net","domain":"teomnerxibaw222.net","tld":"net"},"ip":{"addr":"182.16.26.42","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://teomnerxibaw222.net/h5/","date":"2026-04-10T14:51:14.928Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"teomnerxibaw222.net","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 10 Apr 2026 02:56:33 GMT","end":"Thu, 09 Jul 2026 02:56:32 GMT"},"fingerprint":{"sha1":"B5:7B:12:B8:78:63:E7:29:56:3A:F3:0B:5A:79:65:9F:D6:2C:29:A2","sha256":"37:61:C1:C1:64:C5:0D:92:BD:75:CA:9F:12:23:01:9B:8A:A4:E1:67:5F:49:7E:95:70:E2:F8:4E:6C:C2:C8:79"}}},"request":{"raw":"GET /h5/static/img/mobile-background-image.bdf38153.png HTTP/1.1\r\nHost: teomnerxibaw222.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://teomnerxibaw222.net/h5/\r\nCookie: angela_session=eyJpdiI6Ik9wYks4Q3dGRDdiTTF6MnVCRVRaSFE9PSIsInZhbHVlIjoiUzBJOGUwVEtib2FIYXJoRSt0ZkRiZVkraWhOSG9Wa2VicEVxQ24wTU9LTjh4YStwT1NqZytuQlJsWmh3M0J6M1k1Q0ZGTHRsdzI3WmhmRU9VUklUYVwvM1FzOHNpd1BsVW9wNFpRNFlkNzNCTzI0OVMxaTVqWEhrK0gxNlVKdlJTIiwibWFjIjoiN2ViNzQyNTE5M2YwZWFjMzgwNWJhOGZiNGRmMWM3YWY1NWU2Y2YwYmZmMzU5OTg5N2YxMjE2YWQ2MTIyZDRkYyJ9\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 10 Apr 2026 14:51:15 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 05 Feb 2026 17:37:52 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6984d570-12ac\"\r\nexpires: Sun, 10 May 2026 14:51:15 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4780,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1500 x 2592, 1-bit colormap, non-interlaced","md5":"bdf38153f4456b4e3021a8ab7ad12b9e","sha1":"b3b2efa73c0dfabd2410cc73c7c871592f36ebf9","sha256":"6cf9c453c869a380987288fae7c64640cd1f49e78080ba65044a43ea670db771","sha512":"20d55cee9c5dfc717c6842637ac34859b81c5c7aaf41a34e31369deaa4bbf2696410b5a4f50e1778b375b1fce18e51dee62a97f2a626909e4f0d182cb27250f1","ssdeep":"96:bwZPPPPPPPPPPPPPPPPPPPoCrK2p2eotRTcjcyvdMYgzgAZgf5g+THjzFvtEtI1t:bw6CrieSTcjcyvdMNMbmODxvti8hx1","tlshash":"e2a1074b725dc8c53c9a7e1baa7399eb08127022d8db5cc33304501de7576aa6b602eb","first_seen":"2023-10-14T15:22:24Z","last_seen":"2026-04-10T14:51:41.436083Z","times_seen":28,"resource_available":false,"data":null}},"time_used":201,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":201,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"teomnerxibaw222.net/api/currency/quotation_new?lang=en","fqdn":"teomnerxibaw222.net","domain":"teomnerxibaw222.net","tld":"net"},"ip":{"addr":"182.16.26.42","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://teomnerxibaw222.net/h5/","date":"2026-04-10T14:51:14.880Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"teomnerxibaw222.net","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 10 Apr 2026 02:56:33 GMT","end":"Thu, 09 Jul 2026 02:56:32 GMT"},"fingerprint":{"sha1":"B5:7B:12:B8:78:63:E7:29:56:3A:F3:0B:5A:79:65:9F:D6:2C:29:A2","sha256":"37:61:C1:C1:64:C5:0D:92:BD:75:CA:9F:12:23:01:9B:8A:A4:E1:67:5F:49:7E:95:70:E2:F8:4E:6C:C2:C8:79"}}},"request":{"raw":"GET /api/currency/quotation_new?lang=en HTTP/1.1\r\nHost: teomnerxibaw222.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAuthorization: \r\nContent-Type: application/x-www-form-urlencoded\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://teomnerxibaw222.net/h5/\r\nCookie: angela_session=eyJpdiI6Ik9wYks4Q3dGRDdiTTF6MnVCRVRaSFE9PSIsInZhbHVlIjoiUzBJOGUwVEtib2FIYXJoRSt0ZkRiZVkraWhOSG9Wa2VicEVxQ24wTU9LTjh4YStwT1NqZytuQlJsWmh3M0J6M1k1Q0ZGTHRsdzI3WmhmRU9VUklUYVwvM1FzOHNpd1BsVW9wNFpRNFlkNzNCTzI0OVMxaTVqWEhrK0gxNlVKdlJTIiwibWFjIjoiN2ViNzQyNTE5M2YwZWFjMzgwNWJhOGZiNGRmMWM3YWY1NWU2Y2YwYmZmMzU5OTg5N2YxMjE2YWQ2MTIyZDRkYyJ9\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ncontent-type: application/json\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: POST,GET,OPTIONS,DELETE\r\naccess-control-allow-headers: x-requested-with,content-type,Authorization\r\ncache-control: no-cache, private\r\ndate: Fri, 10 Apr 2026 14:51:14 GMT\r\nset-cookie: angela_session=eyJpdiI6IlwvdXNZbDZrdjdrUDNOSE5VZG5wS2RBPT0iLCJ2YWx1ZSI6ImNLZ1BtMjNhM1pLVE5sbG9HeWVMV3RCVTNjcGpBa3NqNk1zelhLa1JwVlozbXNNaUc4anB3N2ZnMW5FQVlnR0NSRll3aGNxenJhWGpZZHhpczdJdXkwTUpJdVJuNlB5YVhTMnFaaENPQ0xxQTBIaDk5MURvdXZPSG51RWwzMHd0IiwibWFjIjoiNjgyYTExNzlmMzUzYTljODQ2ODFhMDg4Yjg1YTA2OTBhYWFkNjk5NWIyODQ2YTM3MGU0ZWNiOTEyY2RjMTQzZiJ9; expires=Fri, 10-Apr-2026 16:51:15 GMT; Max-Age=7200; path=/; httponly\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":25475,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"d5952fa1d22ec3c5b8adf8d928993ec4","sha1":"970b5921709641e215806e3e802e6873b2cdece0","sha256":"026699ef160351e510fc8edb60a0b38c822cba26ea0111abe946d1bc1e15d81b","sha512":"b7b230f084ac8c4c0c02c52b512fb844d9b75d406bbbb7311631ddb4b20bb0a677c951af97522a350b3823c2fc828f7c894dbc5511b69651a882f8e246666bff","ssdeep":"384:8EYuzbcL1kHNphsxTRDiw00BXHY37+MG2:8EYuzbcL1ktpOxTRDiw00BXHY37+MG2","tlshash":"e3b2d09d322c8a78c3f69ec2de9e32693594b5079ec28f85d3dd9fc842c4576e20b512","first_seen":"2026-04-10T14:51:41.436921Z","last_seen":"2026-04-10T14:51:41.436921Z","times_seen":1,"resource_available":false,"data":null}},"time_used":238,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":238,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"teomnerxibaw222.net/h5/static/image/icon/home-nav-8.png","fqdn":"teomnerxibaw222.net","domain":"teomnerxibaw222.net","tld":"net"},"ip":{"addr":"182.16.26.42","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://teomnerxibaw222.net/h5/","date":"2026-04-10T14:51:15.275Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"teomnerxibaw222.net","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 10 Apr 2026 02:56:33 GMT","end":"Thu, 09 Jul 2026 02:56:32 GMT"},"fingerprint":{"sha1":"B5:7B:12:B8:78:63:E7:29:56:3A:F3:0B:5A:79:65:9F:D6:2C:29:A2","sha256":"37:61:C1:C1:64:C5:0D:92:BD:75:CA:9F:12:23:01:9B:8A:A4:E1:67:5F:49:7E:95:70:E2:F8:4E:6C:C2:C8:79"}}},"request":{"raw":"GET /h5/static/image/icon/home-nav-8.png HTTP/1.1\r\nHost: teomnerxibaw222.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://teomnerxibaw222.net/h5/\r\nCookie: angela_session=eyJpdiI6IlwvdXNZbDZrdjdrUDNOSE5VZG5wS2RBPT0iLCJ2YWx1ZSI6ImNLZ1BtMjNhM1pLVE5sbG9HeWVMV3RCVTNjcGpBa3NqNk1zelhLa1JwVlozbXNNaUc4anB3N2ZnMW5FQVlnR0NSRll3aGNxenJhWGpZZHhpczdJdXkwTUpJdVJuNlB5YVhTMnFaaENPQ0xxQTBIaDk5MURvdXZPSG51RWwzMHd0IiwibWFjIjoiNjgyYTExNzlmMzUzYTljODQ2ODFhMDg4Yjg1YTA2OTBhYWFkNjk5NWIyODQ2YTM3MGU0ZWNiOTEyY2RjMTQzZiJ9\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 10 Apr 2026 14:51:15 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 05 Feb 2026 17:37:52 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6984d570-dc7\"\r\nexpires: Sun, 10 May 2026 14:51:15 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3527,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 46 x 46, 8-bit/color RGBA, non-interlaced","md5":"41eadc23d7b1205aee669c392b355bf5","sha1":"20acccda3dcc24a4c19af7b895c55a55e120669c","sha256":"f6c85ce9e70e6f75d3464d40a2392b3aa22100351263d624e38d0f02a0cd99bd","sha512":"a823dee23c79668b783100bbc87363a9fdb38849551b371fb27b37a2a41fd76b63928f92736fc3d02c2065d22e6770d502dd5bed03a9af6c7481618383e1abff","ssdeep":"","tlshash":"0e711b85e940ec21c141e880aef6a15b9d2f9a80dfc1c1e5fefec44365a04f8c99d9e7","first_seen":"2023-08-01T21:32:35Z","last_seen":"2026-04-17T07:53:43.629001Z","times_seen":58,"resource_available":false,"data":null}},"time_used":192,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":192,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"teomnerxibaw222.net/h5/static/index.css","fqdn":"teomnerxibaw222.net","domain":"teomnerxibaw222.net","tld":"net"},"ip":{"addr":"182.16.26.42","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://teomnerxibaw222.net/h5/","date":"2026-04-10T14:51:12.791Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"teomnerxibaw222.net","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 10 Apr 2026 02:56:33 GMT","end":"Thu, 09 Jul 2026 02:56:32 GMT"},"fingerprint":{"sha1":"B5:7B:12:B8:78:63:E7:29:56:3A:F3:0B:5A:79:65:9F:D6:2C:29:A2","sha256":"37:61:C1:C1:64:C5:0D:92:BD:75:CA:9F:12:23:01:9B:8A:A4:E1:67:5F:49:7E:95:70:E2:F8:4E:6C:C2:C8:79"}}},"request":{"raw":"GET /h5/static/index.css HTTP/1.1\r\nHost: teomnerxibaw222.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://teomnerxibaw222.net/h5/\r\nCookie: angela_session=eyJpdiI6Ikd0YUhFZng0S1pPSTA5bFhkcURCS0E9PSIsInZhbHVlIjoiSEFcL3hTZEJjRytIR25XQzVBbFNERTY4WFdubmJRVGRLRlJ2K1wvS1dXSEFaeUhJcmk1dEw1dERUWUkrSWJ0K2ZHckdGWExncjU4WXBFNzc4NnJJZFZIWE5DXC8yMmZkVUpjZTQxcFwvVUdnbUJWdHo2WVZBeUl6VEtEOEpiWDVON2taIiwibWFjIjoiOWUyNzJlZTcyN2YyYjBkMjU3YmRkMjhkZWI0NTAzODQ5ZWVkZjEwNDZjOTkzZWU3Zjk0ZmY0NGU3NGFiYzZkZCJ9\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 10 Apr 2026 14:51:12 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 05 Feb 2026 17:37:52 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6984d570-17031\"\r\nexpires: Sat, 11 Apr 2026 02:51:12 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":94257,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"fc17a23366f0d403f0e880cd38a36cec","sha1":"3d8eccc32293b0a135090e72149934a645006312","sha256":"e31510de0f2232eb0826e2b8809d02d0b1b9cbdbda9c3dbcc96e6cd0d1f94a8b","sha512":"2e3346419375ae224065d411a60078bba44ce09ceeee92a9567175214cf8a2e93af84131acc635c591cb0d1c274b6d9cc2f4e0d630d4d23b3ad341481213ecdf","ssdeep":"1536:PlIUpuK7hmVmg26S1Wu3xdynf7ehgndhl+bc:iUpuK7hmVpS1Wu3iq6ndPF","tlshash":"1b93083719012e3ae52bcd16b6c1ab4a1e61c133e15307adfbb476288bcf9c9167b345","first_seen":"2023-04-10T00:59:05Z","last_seen":"2026-04-27T08:35:30.517141Z","times_seen":129,"resource_available":false,"data":null}},"time_used":380,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":380,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"teomnerxibaw222.net/h5/static/js/pages-financial-index~pages-ieo-ieo~pages-index-index~pages-invest-invest.b046caf1.js","fqdn":"teomnerxibaw222.net","domain":"teomnerxibaw222.net","tld":"net"},"ip":{"addr":"182.16.26.42","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://teomnerxibaw222.net/h5/","date":"2026-04-10T14:51:14.249Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"teomnerxibaw222.net","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 10 Apr 2026 02:56:33 GMT","end":"Thu, 09 Jul 2026 02:56:32 GMT"},"fingerprint":{"sha1":"B5:7B:12:B8:78:63:E7:29:56:3A:F3:0B:5A:79:65:9F:D6:2C:29:A2","sha256":"37:61:C1:C1:64:C5:0D:92:BD:75:CA:9F:12:23:01:9B:8A:A4:E1:67:5F:49:7E:95:70:E2:F8:4E:6C:C2:C8:79"}}},"request":{"raw":"GET /h5/static/js/pages-financial-index~pages-ieo-ieo~pages-index-index~pages-invest-invest.b046caf1.js HTTP/1.1\r\nHost: teomnerxibaw222.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://teomnerxibaw222.net/h5/\r\nCookie: angela_session=eyJpdiI6Ikd0YUhFZng0S1pPSTA5bFhkcURCS0E9PSIsInZhbHVlIjoiSEFcL3hTZEJjRytIR25XQzVBbFNERTY4WFdubmJRVGRLRlJ2K1wvS1dXSEFaeUhJcmk1dEw1dERUWUkrSWJ0K2ZHckdGWExncjU4WXBFNzc4NnJJZFZIWE5DXC8yMmZkVUpjZTQxcFwvVUdnbUJWdHo2WVZBeUl6VEtEOEpiWDVON2taIiwibWFjIjoiOWUyNzJlZTcyN2YyYjBkMjU3YmRkMjhkZWI0NTAzODQ5ZWVkZjEwNDZjOTkzZWU3Zjk0ZmY0NGU3NGFiYzZkZCJ9\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 10 Apr 2026 14:51:14 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 05 Feb 2026 17:37:52 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6984d570-e405\"\r\nexpires: Sat, 11 Apr 2026 02:51:14 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":58373,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (58017), with no line terminators","md5":"90f46fe1b64a9483a081c8931be7e133","sha1":"cc930762bd0ca70c6e4c5b60160036287dd40553","sha256":"cba8154324fa8575726a69bb5ee1aa3584ed9e6f03e7c44af56fbb598a33d66e","sha512":"f014853e29780a4891f95f0827d8628fabcc41c8811553e45970e413326ae50cca4b16f43e95ae62be69a392dcca75f12a5f593eadbbbab5aa579ad0ffb7a01a","ssdeep":"192:xnfuEf51flC2RSMm+ofK2d8/zxYD/ytWT6Thaaw6PECAXYk2gUi2L2M222Gc2Y+F:xXiS2dQzhWT6laaw6PGcnt99BBKW","tlshash":"4143a3c3f7d8288cc577ef61d54136f89e2aba6376816ad2f8c16f244e266c6250853c","first_seen":"2026-03-01T15:55:48.753229Z","last_seen":"2026-04-10T14:51:41.43901Z","times_seen":3,"resource_available":true,"data":null}},"time_used":193,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":193,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"teomnerxibaw222.net/h5/static/image/icon/home-nav-2.png","fqdn":"teomnerxibaw222.net","domain":"teomnerxibaw222.net","tld":"net"},"ip":{"addr":"182.16.26.42","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://teomnerxibaw222.net/h5/","date":"2026-04-10T14:51:15.273Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"teomnerxibaw222.net","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 10 Apr 2026 02:56:33 GMT","end":"Thu, 09 Jul 2026 02:56:32 GMT"},"fingerprint":{"sha1":"B5:7B:12:B8:78:63:E7:29:56:3A:F3:0B:5A:79:65:9F:D6:2C:29:A2","sha256":"37:61:C1:C1:64:C5:0D:92:BD:75:CA:9F:12:23:01:9B:8A:A4:E1:67:5F:49:7E:95:70:E2:F8:4E:6C:C2:C8:79"}}},"request":{"raw":"GET /h5/static/image/icon/home-nav-2.png HTTP/1.1\r\nHost: teomnerxibaw222.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://teomnerxibaw222.net/h5/\r\nCookie: angela_session=eyJpdiI6IlwvdXNZbDZrdjdrUDNOSE5VZG5wS2RBPT0iLCJ2YWx1ZSI6ImNLZ1BtMjNhM1pLVE5sbG9HeWVMV3RCVTNjcGpBa3NqNk1zelhLa1JwVlozbXNNaUc4anB3N2ZnMW5FQVlnR0NSRll3aGNxenJhWGpZZHhpczdJdXkwTUpJdVJuNlB5YVhTMnFaaENPQ0xxQTBIaDk5MURvdXZPSG51RWwzMHd0IiwibWFjIjoiNjgyYTExNzlmMzUzYTljODQ2ODFhMDg4Yjg1YTA2OTBhYWFkNjk5NWIyODQ2YTM3MGU0ZWNiOTEyY2RjMTQzZiJ9\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 10 Apr 2026 14:51:15 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 05 Feb 2026 17:37:52 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6984d570-17be\"\r\nexpires: Sun, 10 May 2026 14:51:15 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6078,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 88 x 88, 8-bit/color RGBA, non-interlaced","md5":"8edb61a43ebbac5b1c00c183530722fe","sha1":"602712cb46dbce14c871f2ca1ebd29acf6136368","sha256":"b53157f804ec5e41faf0213dfcf9f05a00d55ec3390266848735d3e62275829c","sha512":"2edb5e4f1ac0068c4225b411d622a9c06162cfa2db87e6658df5b4cb14bc4670a6f64537d25471c27295a05549b89f9c3d5d688738591fd26989506019e6fb78","ssdeep":"96:MknmWIHF/KENGWGMHOzH5ogs4rpHggsBRC70n4wj7isQwtJDvv1Wm1VKUi8s528l:MknEj4+X2bsBsANjmsTDVnbfM5Gy3","tlshash":"cfc15c56d8b059751215e6592add30227f3603c08751ea84ecfedc7ab6600bd9dbcdc3","first_seen":"2023-05-20T12:09:29Z","last_seen":"2026-04-26T22:44:21.179989Z","times_seen":128,"resource_available":false,"data":null}},"time_used":192,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":192,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"teomnerxibaw222.net/h5/static/image/nft/quickBuyBg.png","fqdn":"teomnerxibaw222.net","domain":"teomnerxibaw222.net","tld":"net"},"ip":{"addr":"182.16.26.42","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://teomnerxibaw222.net/h5/","date":"2026-04-10T14:51:15.278Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"teomnerxibaw222.net","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 10 Apr 2026 02:56:33 GMT","end":"Thu, 09 Jul 2026 02:56:32 GMT"},"fingerprint":{"sha1":"B5:7B:12:B8:78:63:E7:29:56:3A:F3:0B:5A:79:65:9F:D6:2C:29:A2","sha256":"37:61:C1:C1:64:C5:0D:92:BD:75:CA:9F:12:23:01:9B:8A:A4:E1:67:5F:49:7E:95:70:E2:F8:4E:6C:C2:C8:79"}}},"request":{"raw":"GET /h5/static/image/nft/quickBuyBg.png HTTP/1.1\r\nHost: teomnerxibaw222.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://teomnerxibaw222.net/h5/\r\nCookie: angela_session=eyJpdiI6IlwvdXNZbDZrdjdrUDNOSE5VZG5wS2RBPT0iLCJ2YWx1ZSI6ImNLZ1BtMjNhM1pLVE5sbG9HeWVMV3RCVTNjcGpBa3NqNk1zelhLa1JwVlozbXNNaUc4anB3N2ZnMW5FQVlnR0NSRll3aGNxenJhWGpZZHhpczdJdXkwTUpJdVJuNlB5YVhTMnFaaENPQ0xxQTBIaDk5MURvdXZPSG51RWwzMHd0IiwibWFjIjoiNjgyYTExNzlmMzUzYTljODQ2ODFhMDg4Yjg1YTA2OTBhYWFkNjk5NWIyODQ2YTM3MGU0ZWNiOTEyY2RjMTQzZiJ9\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 10 Apr 2026 14:51:15 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 05 Feb 2026 17:37:52 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6984d570-1baaa\"\r\nexpires: Sun, 10 May 2026 14:51:15 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":113322,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1129 x 748, 8-bit/color RGBA, non-interlaced","md5":"0faab310160aa9ad9abface94ef17fea","sha1":"c6fc9cfd18fa1a85812a58cc578da9bb1791e631","sha256":"d155e0d644bcee1e08f1bc5d7b42e9b507dc06b3defa24209451e643e31dffef","sha512":"fc9a927c9becf4392247aedcdb0cbafbecc72eab09a9f93a815cfc8ddbf8d63a5dfda1e23fe01991b70e1091525e8a95984038b5b72e50b9c9178a43cc80e209","ssdeep":"3072:eu/XJw0kwmMM23vxXV2olASxRn6VD48546l2XSzLTP:r/a0kwm5spF2tmdW7zLz","tlshash":"dfb3123c7da07d88cc50587389ff2a92ffe94e6c37940b80552939766838df5b1a216e","first_seen":"2023-10-14T15:22:24Z","last_seen":"2026-04-10T14:51:41.440013Z","times_seen":25,"resource_available":false,"data":null}},"time_used":192,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":192,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"teomnerxibaw222.net/api/currency/new_timeshar?from=1775829074\u0026to=1775832674\u0026symbol=XRP%2FUSDT\u0026period=1min\u0026lang=en","fqdn":"teomnerxibaw222.net","domain":"teomnerxibaw222.net","tld":"net"},"ip":{"addr":"182.16.26.42","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://teomnerxibaw222.net/h5/","date":"2026-04-10T14:51:16.790Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"teomnerxibaw222.net","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 10 Apr 2026 02:56:33 GMT","end":"Thu, 09 Jul 2026 02:56:32 GMT"},"fingerprint":{"sha1":"B5:7B:12:B8:78:63:E7:29:56:3A:F3:0B:5A:79:65:9F:D6:2C:29:A2","sha256":"37:61:C1:C1:64:C5:0D:92:BD:75:CA:9F:12:23:01:9B:8A:A4:E1:67:5F:49:7E:95:70:E2:F8:4E:6C:C2:C8:79"}}},"request":{"raw":"GET /api/currency/new_timeshar?from=1775829074\u0026to=1775832674\u0026symbol=XRP%2FUSDT\u0026period=1min\u0026lang=en HTTP/1.1\r\nHost: teomnerxibaw222.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAuthorization: \r\nContent-Type: application/x-www-form-urlencoded\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://teomnerxibaw222.net/h5/\r\nCookie: angela_session=eyJpdiI6IkhTUll4clJVaHdnZnhSeG90N0ZmalE9PSIsInZhbHVlIjoiSk9vWFl3blA0UXJEWm9cLzc3WnhTYU0zOXZDMnFWNVVqQ2doZ0tTRWVqakxrZmJZMjcxSHgzQTZnOHplS0ZPNWl4WDlFVjdKVURLWk5HWmducjFCeWFIR0FwWGZsbkEzcGJLR2tjVW1iTlVjRmI1eGxjSWJjUm9WWFZibE1wMCsrIiwibWFjIjoiN2JkNWE0MDQ4MWY2MDU3MzM0NmIzNTdhYTVmZTViMzliZDFlNzYwZTFjMDEyYWM5OGY5YjBkYzM0NzAxZWY3ZiJ9\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ncontent-type: application/json\r\nvary: Accept-Encoding\r\ncache-control: no-cache, private\r\ndate: Fri, 10 Apr 2026 14:51:16 GMT\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Origin, Content-Type, Cookie, X-CSRF-TOKEN, Accept, Authorization, X-XSRF-TOKEN\r\naccess-control-expose-headers: Authorization, authenticated\r\naccess-control-allow-methods: GET, POST, PATCH, PUT, OPTIONS\r\naccess-control-allow-credentials: false\r\nset-cookie: angela_session=eyJpdiI6ImxSbVRkczh3QWRIUVcyWm5IMVFha1E9PSIsInZhbHVlIjoiY3M2cnJzanBcL1YxRUNGRkNnRlprZ1NFUDE4dm5qMXp3Q0wzM2drTHRkRk1nTnVCM1pONDh2bldjQnBVOTJHeThVMlhsOThrK2Y2WUxDc3ZvNTk3d0swcW4zejhKV04zY0J6SnhYbUlMRlQzYkdnNkVyY1BFclBGSjBaNVBsTlQ1IiwibWFjIjoiYjY3MzU2YTU1ZmMwMzVmNzNhNmNhNWNiMzc4ODA5Mjk1Njk0OTIyN2VjODljYTk4OTljMGUyOTU4NjYyM2UwNSJ9; expires=Fri, 10-Apr-2026 16:51:16 GMT; Max-Age=7200; path=/; httponly\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":12136,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"ff2c970cb752317229a4acfafe253ce1","sha1":"a07ff76282f13dd6aec1e03aa76f4291b95a3039","sha256":"36c2cdbaf3a80a4f839b5b7baa1d060d50f5beaa8a3345851f8ff912fbc9b13e","sha512":"aa18d424cbb8a148bcddef77305ac3769f6c996f111033e5cfebb2babfe35aab35bf18bc7193d9b790b98d62116f5cfce90d4edd9d89fd1f7d3cb26fb9b036e6","ssdeep":"96:xM1wM1bM1BM1wM1vM14M11M1zM/zMVTQMVTQMF7M8fEMIFxE3MlxcMh4MhJMRQLN:gSfo5zNjzPbe","tlshash":"0a42ce445ae90266d07b21c47dc349acba6a2047f0c2cf197ebf48e55de56b9f102e3b","first_seen":"2026-04-10T14:51:41.440557Z","last_seen":"2026-04-10T14:51:41.440557Z","times_seen":1,"resource_available":false,"data":null}},"time_used":211,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":210,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"teomnerxibaw222.net/h5/static/image/icon/favicon.ico","fqdn":"teomnerxibaw222.net","domain":"teomnerxibaw222.net","tld":"net"},"ip":{"addr":"182.16.26.42","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://teomnerxibaw222.net/h5/","date":"2026-04-10T14:51:14.650Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"teomnerxibaw222.net","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 10 Apr 2026 02:56:33 GMT","end":"Thu, 09 Jul 2026 02:56:32 GMT"},"fingerprint":{"sha1":"B5:7B:12:B8:78:63:E7:29:56:3A:F3:0B:5A:79:65:9F:D6:2C:29:A2","sha256":"37:61:C1:C1:64:C5:0D:92:BD:75:CA:9F:12:23:01:9B:8A:A4:E1:67:5F:49:7E:95:70:E2:F8:4E:6C:C2:C8:79"}}},"request":{"raw":"GET /h5/static/image/icon/favicon.ico HTTP/1.1\r\nHost: teomnerxibaw222.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://teomnerxibaw222.net/h5/\r\nCookie: angela_session=eyJpdiI6Ik9wYks4Q3dGRDdiTTF6MnVCRVRaSFE9PSIsInZhbHVlIjoiUzBJOGUwVEtib2FIYXJoRSt0ZkRiZVkraWhOSG9Wa2VicEVxQ24wTU9LTjh4YStwT1NqZytuQlJsWmh3M0J6M1k1Q0ZGTHRsdzI3WmhmRU9VUklUYVwvM1FzOHNpd1BsVW9wNFpRNFlkNzNCTzI0OVMxaTVqWEhrK0gxNlVKdlJTIiwibWFjIjoiN2ViNzQyNTE5M2YwZWFjMzgwNWJhOGZiNGRmMWM3YWY1NWU2Y2YwYmZmMzU5OTg5N2YxMjE2YWQ2MTIyZDRkYyJ9\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 10 Apr 2026 14:51:14 GMT\r\ncontent-type: image/x-icon\r\ncontent-length: 9662\r\nlast-modified: Fri, 27 Feb 2026 17:11:24 GMT\r\netag: \"69a1d03c-25be\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":9662,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 48x48, 32 bits/pixel","md5":"1d18eaea8154e3ef15cfe35d0596d32b","sha1":"ab57d71c2968c1775d94292c4a48d2fba177dec8","sha256":"97a344e3adaf45e4f7c39b2f939b027ca111acf71310ff40e4f4a60ce18c444f","sha512":"5cd3514c58fbedcf83fa0e2af664f195a7310ee9d0c3b18ce0385261c3be1c3eba8dd1bc375c978494c0117f954ca625d17b5d0238649f1afeeb140f2375aa6e","ssdeep":"48:9Bq/O9srmUCTId/RZtdNqGOG2Oov+GGufcMZVJy0U2+VSL4gLpv:9Bq/O+KUEIh3tJOMWbvc4vU2DL4gLF","tlshash":"cd12299deb09c5d6f3e51fb51320eafda7ca7eb8a51b824554f0b99b32130830b60036","first_seen":"2025-10-09T04:17:48.418382Z","last_seen":"2026-04-10T14:51:41.441463Z","times_seen":5,"resource_available":false,"data":null}},"time_used":193,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":192,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"teomnerxibaw222.net/api/news/list","fqdn":"teomnerxibaw222.net","domain":"teomnerxibaw222.net","tld":"net"},"ip":{"addr":"182.16.26.42","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://teomnerxibaw222.net/h5/","date":"2026-04-10T14:51:14.863Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"teomnerxibaw222.net","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 10 Apr 2026 02:56:33 GMT","end":"Thu, 09 Jul 2026 02:56:32 GMT"},"fingerprint":{"sha1":"B5:7B:12:B8:78:63:E7:29:56:3A:F3:0B:5A:79:65:9F:D6:2C:29:A2","sha256":"37:61:C1:C1:64:C5:0D:92:BD:75:CA:9F:12:23:01:9B:8A:A4:E1:67:5F:49:7E:95:70:E2:F8:4E:6C:C2:C8:79"}}},"request":{"raw":"POST /api/news/list HTTP/1.1\r\nHost: teomnerxibaw222.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAuthorization: \r\nContent-Type: application/x-www-form-urlencoded\r\nContent-Length: 14\r\nOrigin: https://teomnerxibaw222.net\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://teomnerxibaw222.net/h5/\r\nCookie: angela_session=eyJpdiI6Ik9wYks4Q3dGRDdiTTF6MnVCRVRaSFE9PSIsInZhbHVlIjoiUzBJOGUwVEtib2FIYXJoRSt0ZkRiZVkraWhOSG9Wa2VicEVxQ24wTU9LTjh4YStwT1NqZytuQlJsWmh3M0J6M1k1Q0ZGTHRsdzI3WmhmRU9VUklUYVwvM1FzOHNpd1BsVW9wNFpRNFlkNzNCTzI0OVMxaTVqWEhrK0gxNlVKdlJTIiwibWFjIjoiN2ViNzQyNTE5M2YwZWFjMzgwNWJhOGZiNGRmMWM3YWY1NWU2Y2YwYmZmMzU5OTg5N2YxMjE2YWQ2MTIyZDRkYyJ9\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":14,"data":"c_id=4\u0026lang=en"}},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ncontent-type: application/json\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: POST,GET,OPTIONS,DELETE\r\naccess-control-allow-headers: x-requested-with,content-type,Authorization\r\ncache-control: no-cache, private\r\ndate: Fri, 10 Apr 2026 14:51:14 GMT\r\nset-cookie: angela_session=eyJpdiI6IkNyN0cxcHRBU1lNZkY2QkgrU0RlSnc9PSIsInZhbHVlIjoibStJNDVWVW5WU21iU2RpTitwWERrQU5PUDBKajdnR2lucWlpY0Y1REc2TExRVE9BbG1Eb2JGVzBmMWluV3dUS2ZucHZUVUFYbktWWklUcmU1SGZsSTlVNndsM3Vuam1xVjVvdXpNRGdma2UwdnNJTHcyeGlwaWhCTWZtR2Mza1IiLCJtYWMiOiJkY2U0ZWUyOGExM2RkNGZhYzMyOGQxZDZmYTljNDkyM2NjMTUzNjRjNTkyOWZiZjVjYTNlNjdlNzFhZjAyMmZkIn0%3D; expires=Fri, 10-Apr-2026 16:51:14 GMT; Max-Age=7200; path=/; httponly\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":799,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"581e2e0b6cc5524cac4f1e06695470d7","sha1":"03e9008f5bbbe2055da42402ce97d22faaff4996","sha256":"aba04d5b05484da35d53e0d9dbfcf1d29cb67922352d3d290c5dc9b756a4d8ea","sha512":"76b558948d475fbcfb2411fadc28c5446d094ad1ae9f4f99cca5124e9e4b39c485cbc3e5ac1a7a5f6757acb01a305b9e93a99fb802b0b37f127c5e0fdf5618ce","ssdeep":"","tlshash":"b30104a52e006fbf63c523cd68cbbb9aedde3013c604d65d448c98e982147b0202a077","first_seen":"2025-10-09T04:17:48.448999Z","last_seen":"2026-04-10T14:51:41.420963Z","times_seen":5,"resource_available":false,"data":null}},"time_used":199,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":199,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"teomnerxibaw222.net/h5/static/image/icon/home-nav-3.png","fqdn":"teomnerxibaw222.net","domain":"teomnerxibaw222.net","tld":"net"},"ip":{"addr":"182.16.26.42","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://teomnerxibaw222.net/h5/","date":"2026-04-10T14:51:15.263Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"teomnerxibaw222.net","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 10 Apr 2026 02:56:33 GMT","end":"Thu, 09 Jul 2026 02:56:32 GMT"},"fingerprint":{"sha1":"B5:7B:12:B8:78:63:E7:29:56:3A:F3:0B:5A:79:65:9F:D6:2C:29:A2","sha256":"37:61:C1:C1:64:C5:0D:92:BD:75:CA:9F:12:23:01:9B:8A:A4:E1:67:5F:49:7E:95:70:E2:F8:4E:6C:C2:C8:79"}}},"request":{"raw":"GET /h5/static/image/icon/home-nav-3.png HTTP/1.1\r\nHost: teomnerxibaw222.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://teomnerxibaw222.net/h5/\r\nCookie: angela_session=eyJpdiI6IlwvdXNZbDZrdjdrUDNOSE5VZG5wS2RBPT0iLCJ2YWx1ZSI6ImNLZ1BtMjNhM1pLVE5sbG9HeWVMV3RCVTNjcGpBa3NqNk1zelhLa1JwVlozbXNNaUc4anB3N2ZnMW5FQVlnR0NSRll3aGNxenJhWGpZZHhpczdJdXkwTUpJdVJuNlB5YVhTMnFaaENPQ0xxQTBIaDk5MURvdXZPSG51RWwzMHd0IiwibWFjIjoiNjgyYTExNzlmMzUzYTljODQ2ODFhMDg4Yjg1YTA2OTBhYWFkNjk5NWIyODQ2YTM3MGU0ZWNiOTEyY2RjMTQzZiJ9\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 10 Apr 2026 14:51:15 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 05 Feb 2026 17:37:52 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6984d570-f02\"\r\nexpires: Sun, 10 May 2026 14:51:15 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3842,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 46 x 46, 8-bit/color RGBA, non-interlaced","md5":"af1e80bff113a7687e542d4fca416239","sha1":"83ce6e6d1881f6fa0d2a64873cde529d2fc14055","sha256":"dc41ff7881c27712a7a16d402346b6af5d3de0eda8b78b07a5a537df095393a0","sha512":"cce7ce1bf1894630112a56ba27699ea9a63c436e552cd4b5f052b7d8f40370a6833a37a4ac2ac34e776cf941d3337c831929b7c41be9fa436a1329e2858b57e2","ssdeep":"","tlshash":"29814c89f1c2a81121469c84eae6d1b72b3757e086e0e4a5dcdbc42bd8745fcc8de9d3","first_seen":"2023-05-20T12:09:29Z","last_seen":"2026-04-17T07:53:43.621752Z","times_seen":112,"resource_available":false,"data":null}},"time_used":192,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":192,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"teomnerxibaw222.net/api/currency/new_timeshar?from=1775829074\u0026to=1775832674\u0026symbol=BCH%2FUSDT\u0026period=1min\u0026lang=en","fqdn":"teomnerxibaw222.net","domain":"teomnerxibaw222.net","tld":"net"},"ip":{"addr":"182.16.26.42","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://teomnerxibaw222.net/h5/","date":"2026-04-10T14:51:17.226Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"teomnerxibaw222.net","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 10 Apr 2026 02:56:33 GMT","end":"Thu, 09 Jul 2026 02:56:32 GMT"},"fingerprint":{"sha1":"B5:7B:12:B8:78:63:E7:29:56:3A:F3:0B:5A:79:65:9F:D6:2C:29:A2","sha256":"37:61:C1:C1:64:C5:0D:92:BD:75:CA:9F:12:23:01:9B:8A:A4:E1:67:5F:49:7E:95:70:E2:F8:4E:6C:C2:C8:79"}}},"request":{"raw":"GET /api/currency/new_timeshar?from=1775829074\u0026to=1775832674\u0026symbol=BCH%2FUSDT\u0026period=1min\u0026lang=en HTTP/1.1\r\nHost: teomnerxibaw222.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAuthorization: \r\nContent-Type: application/x-www-form-urlencoded\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://teomnerxibaw222.net/h5/\r\nCookie: angela_session=eyJpdiI6ImJjNnRcL1laUUlUZEVFNEZWWGVxOXdnPT0iLCJ2YWx1ZSI6IkNMVjZYdVFTQm4yVVYzMG41VTdHZ2NNMVVMczhHVlF0K3dHSVA3XC8yNHRqbGxXNkYxc0RENzdqNzIwZ0VhRFlraDIrWG9jUWlrXC84YXhxZlhIaHdjanhVUGF6alFZNGJSeGd5N2MxSCsxVVRrN0VVamJ6S2hPVXpCRUJoRW5hWjkiLCJtYWMiOiIzYmU5ODc4OGYzMmZkMGU2ZWU2M2Q4MDFlZTU4MjBjYzE4YmE4MTc3NTdlNDM2N2I0Yzg3OTU1MjA0NmU4MTYyIn0%3D\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ncontent-type: application/json\r\nvary: Accept-Encoding\r\ncache-control: no-cache, private\r\ndate: Fri, 10 Apr 2026 14:51:17 GMT\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Origin, Content-Type, Cookie, X-CSRF-TOKEN, Accept, Authorization, X-XSRF-TOKEN\r\naccess-control-expose-headers: Authorization, authenticated\r\naccess-control-allow-methods: GET, POST, PATCH, PUT, OPTIONS\r\naccess-control-allow-credentials: false\r\nset-cookie: angela_session=eyJpdiI6InY4UHpLMmVLM0VLOWtHRVhKSFhaMEE9PSIsInZhbHVlIjoialBBV2l0Z3ZlZ2VIYU90Z0luN2wyVDJKM0lSaGV5Skh5Y2FJZzI4bmRKdnF6clhiWXJLVlwvTGFyMmJUeGJVcEpkbmVkOGVyY21hMXRjNDFLTkFFWWVONU9qejVqZ1llcjN3NnVOSVEyaEpIOGtaRjZtTVF2V1M4bFwvNkVENzhmOCIsIm1hYyI6IjM4Yzk1MGRjY2ZlN2ExMTZlZjU4MTI2OTkwOGZlM2ZkYTk3ZTkxZDI0NDgzYzZmOWM2ODEwNzA5MDk5YjVmZGIifQ%3D%3D; expires=Fri, 10-Apr-2026 16:51:17 GMT; Max-Age=7200; path=/; httponly\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":12176,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"d54bf583bb98703d637ab15a22c5b14f","sha1":"798d04acae4b906f50c02c309e354b76738f7a40","sha256":"cc45e3f62a131b21aad562be3bf8c2d64246cc06c5cc0e83896b55e6e7f793c1","sha512":"96fe38e38db6a25602bc73498d6c160e0c172854a59ceb06e9b9f500096817f65aaff759c0ef17112fcc9f74c23eb57a61586ee718f2fe523edad586178ee5d0","ssdeep":"192:r90XHp4jTq+M0WlF/0W2c4UxpfrHZt8vpX0N:9T8x2iDWX0N","tlshash":"bf42254106bd0172d87a25c47ed25dfd865b334ba4c28f5986ff44e218e29b9f206a3f","first_seen":"2026-04-10T14:51:41.442508Z","last_seen":"2026-04-10T14:51:41.442508Z","times_seen":1,"resource_available":false,"data":null}},"time_used":205,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":205,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"teomnerxibaw222.net/","fqdn":"teomnerxibaw222.net","domain":"teomnerxibaw222.net","tld":"net"},"ip":{"addr":"182.16.26.42","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-04-10T14:51:11.470Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"teomnerxibaw222.net","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 10 Apr 2026 02:56:33 GMT","end":"Thu, 09 Jul 2026 02:56:32 GMT"},"fingerprint":{"sha1":"B5:7B:12:B8:78:63:E7:29:56:3A:F3:0B:5A:79:65:9F:D6:2C:29:A2","sha256":"37:61:C1:C1:64:C5:0D:92:BD:75:CA:9F:12:23:01:9B:8A:A4:E1:67:5F:49:7E:95:70:E2:F8:4E:6C:C2:C8:79"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: teomnerxibaw222.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\nserver: nginx\r\ncontent-type: text/html; charset=UTF-8\r\nlocation: https://teomnerxibaw222.net/h5\r\ncache-control: no-cache, private\r\ndate: Fri, 10 Apr 2026 14:51:11 GMT\r\nset-cookie: angela_session=eyJpdiI6Ikd0YUhFZng0S1pPSTA5bFhkcURCS0E9PSIsInZhbHVlIjoiSEFcL3hTZEJjRytIR25XQzVBbFNERTY4WFdubmJRVGRLRlJ2K1wvS1dXSEFaeUhJcmk1dEw1dERUWUkrSWJ0K2ZHckdGWExncjU4WXBFNzc4NnJJZFZIWE5DXC8yMmZkVUpjZTQxcFwvVUdnbUJWdHo2WVZBeUl6VEtEOEpiWDVON2taIiwibWFjIjoiOWUyNzJlZTcyN2YyYjBkMjU3YmRkMjhkZWI0NTAzODQ5ZWVkZjEwNDZjOTkzZWU3Zjk0ZmY0NGU3NGFiYzZkZCJ9; expires=Fri, 10-Apr-2026 16:51:11 GMT; Max-Age=7200; path=/; httponly\r\nstrict-transport-security: max-age=31536000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":995,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-01T17:39:27.62522Z","times_seen":14482959,"resource_available":true,"data":null}},"time_used":1056,"timings":{"blocked":429,"dns":40,"connect":192,"send":0,"wait":197,"receive":0,"ssl":195},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"teomnerxibaw222.net/h5/","fqdn":"teomnerxibaw222.net","domain":"teomnerxibaw222.net","tld":"net"},"ip":{"addr":"182.16.26.42","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-04-10T14:51:12.298Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"teomnerxibaw222.net","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 10 Apr 2026 02:56:33 GMT","end":"Thu, 09 Jul 2026 02:56:32 GMT"},"fingerprint":{"sha1":"B5:7B:12:B8:78:63:E7:29:56:3A:F3:0B:5A:79:65:9F:D6:2C:29:A2","sha256":"37:61:C1:C1:64:C5:0D:92:BD:75:CA:9F:12:23:01:9B:8A:A4:E1:67:5F:49:7E:95:70:E2:F8:4E:6C:C2:C8:79"}}},"request":{"raw":"GET /h5/ HTTP/1.1\r\nHost: teomnerxibaw222.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: angela_session=eyJpdiI6Ikd0YUhFZng0S1pPSTA5bFhkcURCS0E9PSIsInZhbHVlIjoiSEFcL3hTZEJjRytIR25XQzVBbFNERTY4WFdubmJRVGRLRlJ2K1wvS1dXSEFaeUhJcmk1dEw1dERUWUkrSWJ0K2ZHckdGWExncjU4WXBFNzc4NnJJZFZIWE5DXC8yMmZkVUpjZTQxcFwvVUdnbUJWdHo2WVZBeUl6VEtEOEpiWDVON2taIiwibWFjIjoiOWUyNzJlZTcyN2YyYjBkMjU3YmRkMjhkZWI0NTAzODQ5ZWVkZjEwNDZjOTkzZWU3Zjk0ZmY0NGU3NGFiYzZkZCJ9\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 10 Apr 2026 14:51:12 GMT\r\ncontent-type: text/html\r\ncontent-length: 995\r\nlast-modified: Fri, 27 Feb 2026 17:09:22 GMT\r\netag: \"69a1cfc2-3e3\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":995,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (445)","md5":"ad7f33ad08d3a81024367d4b33698d39","sha1":"047528c35faa97b57a2bd7169a80ca1cf5d94751","sha256":"b2d2cb87a4079ed70dad2f44700d87d38dd2968caed642c417de9420f66396f2","sha512":"68dd58d81bd5cdcbf7b783b256874f225880a15024ec768a37910ae34d2016a148c4476c1a2c8eef259660b5424fb0754c087c1d5ab8629fc04d6f4b0b9e1d4b","ssdeep":"","tlshash":"991144d75d10c6182721aa6d78bef35c84af86992c61e901b8cc1d9d4fd0fc84f38894","first_seen":"2026-04-10T14:26:53.561603Z","last_seen":"2026-04-10T14:51:41.443377Z","times_seen":2,"resource_available":true,"data":null}},"time_used":192,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":192,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"teomnerxibaw222.net/upload/1647793225468032.jpg","fqdn":"teomnerxibaw222.net","domain":"teomnerxibaw222.net","tld":"net"},"ip":{"addr":"182.16.26.42","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://teomnerxibaw222.net/h5/","date":"2026-04-10T14:51:15.110Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"teomnerxibaw222.net","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 10 Apr 2026 02:56:33 GMT","end":"Thu, 09 Jul 2026 02:56:32 GMT"},"fingerprint":{"sha1":"B5:7B:12:B8:78:63:E7:29:56:3A:F3:0B:5A:79:65:9F:D6:2C:29:A2","sha256":"37:61:C1:C1:64:C5:0D:92:BD:75:CA:9F:12:23:01:9B:8A:A4:E1:67:5F:49:7E:95:70:E2:F8:4E:6C:C2:C8:79"}}},"request":{"raw":"GET /upload/1647793225468032.jpg HTTP/1.1\r\nHost: teomnerxibaw222.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://teomnerxibaw222.net/h5/\r\nCookie: angela_session=eyJpdiI6Imw2STE2ZWl2OWVLWUtxYzZMcEZFaXc9PSIsInZhbHVlIjoiY3BvZkJmQW9EaUZEU1U3b1d5UEU0MnFEZHhpSjlnMloxS1Jma1lVOUtXcWJaMm45Sko1WXI1cHBlMGdkNWxHVFlYXC9CallHWll3cUJLOTBsblwvZUlpNUgwaEN5K3kxUVwvdytcLzJcLzh3Tkt2K1EwMlhubjl0ZVZzbkhhd2pBZ1BrUyIsIm1hYyI6ImQxZTJiNDIwZGExYTMyNzI0Y2Q4YTZlMGJkMzZlYmNjNWIwYThhMTMyOGYyZjA1YzNiZjlkYmJhMzE4NDI1ZmUifQ%3D%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 10 Apr 2026 14:51:15 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Mon, 25 Sep 2023 20:24:06 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6511ec66-5720\"\r\nexpires: Sun, 10 May 2026 14:51:15 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":22304,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 682x286, components 3","md5":"b42282a29c97937154332bbcdd25c1c5","sha1":"1becbfb0567adb86ed509ab2451eb18eb4107f7b","sha256":"33ffd8464edf5004d29bc68c728d67d4d890b3ce412f1fc33eed7161d9c108d2","sha512":"2df415d6f4afa374c06db042f4c8326dbe2390189c420394fc939dca03619d5c4ce04c458ae0bf5a2059cce1f52b3f88097d1b8a118d481f8a9c48586400a1cc","ssdeep":"384:sMhUIRkJhdLruFLJL6Cfb2/wYoOdLf688vg4SO59tEOlaCfsMll0MLvFP:sMhTK3d/ALQJId2Lx844Sy7tsMllnFP","tlshash":"8aa26c079a00dd41f77943a9fd237c6e139daa88ba0775fe401a0ecd7f24ca56c88129","first_seen":"2025-10-09T04:17:48.428443Z","last_seen":"2026-04-10T14:51:41.443952Z","times_seen":5,"resource_available":false,"data":null}},"time_used":193,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":193,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"teomnerxibaw222.net/upload/1647793244299223.jpg","fqdn":"teomnerxibaw222.net","domain":"teomnerxibaw222.net","tld":"net"},"ip":{"addr":"182.16.26.42","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://teomnerxibaw222.net/h5/","date":"2026-04-10T14:51:15.109Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"teomnerxibaw222.net","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 10 Apr 2026 02:56:33 GMT","end":"Thu, 09 Jul 2026 02:56:32 GMT"},"fingerprint":{"sha1":"B5:7B:12:B8:78:63:E7:29:56:3A:F3:0B:5A:79:65:9F:D6:2C:29:A2","sha256":"37:61:C1:C1:64:C5:0D:92:BD:75:CA:9F:12:23:01:9B:8A:A4:E1:67:5F:49:7E:95:70:E2:F8:4E:6C:C2:C8:79"}}},"request":{"raw":"GET /upload/1647793244299223.jpg HTTP/1.1\r\nHost: teomnerxibaw222.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://teomnerxibaw222.net/h5/\r\nCookie: angela_session=eyJpdiI6Imw2STE2ZWl2OWVLWUtxYzZMcEZFaXc9PSIsInZhbHVlIjoiY3BvZkJmQW9EaUZEU1U3b1d5UEU0MnFEZHhpSjlnMloxS1Jma1lVOUtXcWJaMm45Sko1WXI1cHBlMGdkNWxHVFlYXC9CallHWll3cUJLOTBsblwvZUlpNUgwaEN5K3kxUVwvdytcLzJcLzh3Tkt2K1EwMlhubjl0ZVZzbkhhd2pBZ1BrUyIsIm1hYyI6ImQxZTJiNDIwZGExYTMyNzI0Y2Q4YTZlMGJkMzZlYmNjNWIwYThhMTMyOGYyZjA1YzNiZjlkYmJhMzE4NDI1ZmUifQ%3D%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 10 Apr 2026 14:51:15 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Mon, 25 Sep 2023 18:41:16 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6511d44c-cd03\"\r\nexpires: Sun, 10 May 2026 14:51:15 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":52483,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 1024x432, components 3","md5":"a3d7810340266cc9c5cfe6a06ec29804","sha1":"cd1558c95779cea51d0715b28f8d2403f507329b","sha256":"2b4d966d0b41f79e6ad47eada92e65b458dbe5c1e0cc97b386d38445b2e838fe","sha512":"376d84a94a59305b1ab8995a01241d2a55e4fcd3fa145c4e5486098f1e76dd09d0bbe0a12d1079ebdd68e0ef13c963a8a9da4ad3d2b4ac3216e79956c166c65f","ssdeep":"1536:mGI1qPZtulVfEv/9wF64Wwc9F7J5oV3b1:TyqX9wF65/jHoV3b1","tlshash":"db33f255785a9007d9ea8718172d29dedbc94d8762e0fbb623376f2a6c40df82c1809e","first_seen":"2025-10-09T04:17:48.450021Z","last_seen":"2026-04-10T14:51:41.444495Z","times_seen":5,"resource_available":false,"data":null}},"time_used":192,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":192,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"teomnerxibaw222.net/h5/static/image/icon/home-nav-9.png","fqdn":"teomnerxibaw222.net","domain":"teomnerxibaw222.net","tld":"net"},"ip":{"addr":"182.16.26.42","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://teomnerxibaw222.net/h5/","date":"2026-04-10T14:51:15.267Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"teomnerxibaw222.net","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 10 Apr 2026 02:56:33 GMT","end":"Thu, 09 Jul 2026 02:56:32 GMT"},"fingerprint":{"sha1":"B5:7B:12:B8:78:63:E7:29:56:3A:F3:0B:5A:79:65:9F:D6:2C:29:A2","sha256":"37:61:C1:C1:64:C5:0D:92:BD:75:CA:9F:12:23:01:9B:8A:A4:E1:67:5F:49:7E:95:70:E2:F8:4E:6C:C2:C8:79"}}},"request":{"raw":"GET /h5/static/image/icon/home-nav-9.png HTTP/1.1\r\nHost: teomnerxibaw222.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://teomnerxibaw222.net/h5/\r\nCookie: angela_session=eyJpdiI6IlwvdXNZbDZrdjdrUDNOSE5VZG5wS2RBPT0iLCJ2YWx1ZSI6ImNLZ1BtMjNhM1pLVE5sbG9HeWVMV3RCVTNjcGpBa3NqNk1zelhLa1JwVlozbXNNaUc4anB3N2ZnMW5FQVlnR0NSRll3aGNxenJhWGpZZHhpczdJdXkwTUpJdVJuNlB5YVhTMnFaaENPQ0xxQTBIaDk5MURvdXZPSG51RWwzMHd0IiwibWFjIjoiNjgyYTExNzlmMzUzYTljODQ2ODFhMDg4Yjg1YTA2OTBhYWFkNjk5NWIyODQ2YTM3MGU0ZWNiOTEyY2RjMTQzZiJ9\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 10 Apr 2026 14:51:15 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 05 Feb 2026 17:37:52 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6984d570-1016\"\r\nexpires: Sun, 10 May 2026 14:51:15 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4118,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 46 x 46, 8-bit/color RGBA, non-interlaced","md5":"96c006351f3bb1ed5a7236df6973d412","sha1":"21e63fd42a6940bbdf4caa8c84080df20716e4dd","sha256":"964df4170b2a82ff0a89d2f8cbd51da5c5ec91058609cf4b067413e182a90ee7","sha512":"fbff1d8e41b9d90a5de270acc44574c0f71acebd75991fc227c10082f4aec543e9c6206d36f9083f0f07405d287685e0448b0e378a37c3601f9dd7c5fca9e3f2","ssdeep":"96:PSTknmWIrD/+NGdGDHCnH5o+U3PfNdIhD1xHQbJDY0bIIzFiEtNg:PSTkn5HinO+UffuDHQBY0bfzUMg","tlshash":"5a815ecee4722e0b4ad9e3865ad562b7a7128b419f949402fccc8c473820479cdcd6e3","first_seen":"2023-05-20T12:09:29Z","last_seen":"2026-04-17T07:53:43.583111Z","times_seen":83,"resource_available":false,"data":null}},"time_used":192,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":192,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"teomnerxibaw222.net/h5/static/image/icon/home-nav-4.png","fqdn":"teomnerxibaw222.net","domain":"teomnerxibaw222.net","tld":"net"},"ip":{"addr":"182.16.26.42","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://teomnerxibaw222.net/h5/","date":"2026-04-10T14:51:15.268Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"teomnerxibaw222.net","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 10 Apr 2026 02:56:33 GMT","end":"Thu, 09 Jul 2026 02:56:32 GMT"},"fingerprint":{"sha1":"B5:7B:12:B8:78:63:E7:29:56:3A:F3:0B:5A:79:65:9F:D6:2C:29:A2","sha256":"37:61:C1:C1:64:C5:0D:92:BD:75:CA:9F:12:23:01:9B:8A:A4:E1:67:5F:49:7E:95:70:E2:F8:4E:6C:C2:C8:79"}}},"request":{"raw":"GET /h5/static/image/icon/home-nav-4.png HTTP/1.1\r\nHost: teomnerxibaw222.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://teomnerxibaw222.net/h5/\r\nCookie: angela_session=eyJpdiI6IlwvdXNZbDZrdjdrUDNOSE5VZG5wS2RBPT0iLCJ2YWx1ZSI6ImNLZ1BtMjNhM1pLVE5sbG9HeWVMV3RCVTNjcGpBa3NqNk1zelhLa1JwVlozbXNNaUc4anB3N2ZnMW5FQVlnR0NSRll3aGNxenJhWGpZZHhpczdJdXkwTUpJdVJuNlB5YVhTMnFaaENPQ0xxQTBIaDk5MURvdXZPSG51RWwzMHd0IiwibWFjIjoiNjgyYTExNzlmMzUzYTljODQ2ODFhMDg4Yjg1YTA2OTBhYWFkNjk5NWIyODQ2YTM3MGU0ZWNiOTEyY2RjMTQzZiJ9\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 10 Apr 2026 14:51:15 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 05 Feb 2026 17:37:52 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6984d570-1c9e\"\r\nexpires: Sun, 10 May 2026 14:51:15 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7326,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 85 x 91, 8-bit/color RGBA, non-interlaced","md5":"51931449f7f1add2f1b23c1d3fb0c50d","sha1":"2472606e33ee28b6d1b24adaa15c2cc2e3f2e3a5","sha256":"115a31c73bb313b73626ce78e057499e508d55d8208315a1590c473dd47030a4","sha512":"2ee2fa2fdd8c200b57884f31fc1ef92115683646bec270d2736fde25ab5f1e5c952a66018efde827acffe759ae84198ccb39fb52a6b85047eecbd0947a7d30e2","ssdeep":"192:MknvFTRsSsJfpk4hEfHtdgcV73LJ6vRrhPnD:fnvFTRsSsBpfEfDlJe7nD","tlshash":"dee18e01ec61bc50a6258a85a4edd14b8f17d3d0ad9858ebbde5d55280d34f8576ccc3","first_seen":"2023-05-20T12:09:29Z","last_seen":"2026-04-17T07:53:43.576986Z","times_seen":109,"resource_available":false,"data":null}},"time_used":192,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":192,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}
