{"report_id":"9115ec69-8b39-469d-b40c-f568e8210c42","version":6,"status":"done","tags":[],"date":"2025-08-26T17:47:18Z","url":{"schema":"https","addr":"hallamnvip.com/","fqdn":"hallamnvip.com","domain":"hallamnvip.com","tld":"com"},"ip":{"addr":"52.69.10.162","port":0,"asn":16509,"as":"AMAZON-02","country":"Japan","country_code":"JP"},"final":{"url":{"schema":"https","addr":"hallamnvip.com/pc/","fqdn":"hallamnvip.com","domain":"hallamnvip.com","tld":"com"},"title":"hallamnvip.com/pc/"},"submit":{"url":{"schema":"https","addr":"hallamnvip.com/","fqdn":"hallamnvip.com","domain":"hallamnvip.com","tld":"com"},"ip":{"addr":"52.69.10.162","port":0,"asn":16509,"as":"AMAZON-02","country":"Japan","country_code":"JP"},"tags":null,"meta":null,"user":{"user_id":"akbkyowd9geqr98"}},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-09-30T17:47:18Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":null},"summary":[{"fqdn":"hallamnvip.com","ip":{"addr":"52.69.10.162","port":443,"asn":16509,"as":"AMAZON-02","country":"Japan","country_code":"JP"},"domain_registered":"2025-05-14","domain_rank":0,"first_seen":"2025-08-26T17:47:20.102789Z","last_seen":"2025-08-26T17:47:20.102789Z","alert_count":0,"request_count":18,"received_data":4399634,"sent_data":8279,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"api.182hallaht.com","ip":{"addr":"52.69.10.162","port":443,"asn":16509,"as":"AMAZON-02","country":"Japan","country_code":"JP"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":5,"received_data":5163,"sent_data":2498,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"cdn.dcloud.net.cn","ip":{"addr":"124.221.80.91","port":443,"asn":45090,"as":"Shenzhen Tencent Computer Systems Company Limited","country":"China","country_code":"CN"},"domain_registered":"2013-07-17","domain_rank":296858,"first_seen":"2018-09-15T09:18:08Z","last_seen":"2025-08-21T12:55:02.625037Z","alert_count":0,"request_count":1,"received_data":579,"sent_data":445,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":null}],"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"hallamnvip.com/static/js/index.47414168.js","fqdn":"hallamnvip.com","domain":"hallamnvip.com","tld":"com"},"ip":{"addr":"52.69.10.162","port":443,"asn":16509,"as":"AMAZON-02","country":"Japan","country_code":"JP"},"introduction_type":"scriptElement","is_inline":false,"md5":"c5b5fbeb2b08ff8899ba591eabc0a834","sha1":"6af10a534327974d7fbde32a2246380d34efd9a7","sha256":"1783d9a857568a67187718389e864178bac20c78c35d963d107411b3bfbea7fa","sha512":"86e9bc891685b5a650c3e12e7874dd856116a5f4c9477b77addbf0cf07879c4dc9f07ddb15cacfdc4d3b9d0f9a3abdd3934b13407c92c274cc909158bcc7dd37","ssdeep":"3072:8G1hB3CS09WCkiWpYTvmog1nspL1Xy378QSfHHskImP5KfEyGpn1ADsEVyyMowFH:8G1mh5ApYTvmPsxKSnN1AK","tlshash":"5b444b19b189b7fe16936068253f160521363facd059e801a7b6d2c94ff93de1337b28","size":275058,"data":"","first_seen":"2025-08-26T17:47:27.051216Z","last_seen":"2025-08-26T17:47:27.051216Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hallamnvip.com/static/js/chunk-vendors.4dfb5a2f.js","fqdn":"hallamnvip.com","domain":"hallamnvip.com","tld":"com"},"ip":{"addr":"52.69.10.162","port":443,"asn":16509,"as":"AMAZON-02","country":"Japan","country_code":"JP"},"introduction_type":"scriptElement","is_inline":false,"md5":"bc8da0c0a7f23aa1f2f6c6a092f45d23","sha1":"31e0a53c76be8f2efe410ce721afabd030cbcb2c","sha256":"b0de1b66695213640cd018707070ef030ed0357123e030f28ea17c3f2a67650e","sha512":"8bc49164c59d213ca9ca736c11b97e11547f684424f21a18e937b9b4b72ec1d216ae2ca2919ad93d5a0f27dcceaca8651197643f259f9e48d457feb521b2d002","ssdeep":"6144:M6pTV830Fq43Um9XtwTf3/Db3/HbvkNTMfYEvm/40+QhAV1vQz7eLe3WLZq:MkR939dwTfHHbkt1i0QvQzx3f","tlshash":"b005f78df281b0b60be760b5403f220ba2376959b40ac4d8f675e4d4ad7894e6237f7d","size":838601,"data":"","first_seen":"2025-08-04T11:20:02.394042Z","last_seen":"2026-01-03T18:33:36.821986Z","times_seen":12,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hallamnvip.com/pc/static/js/chunk-vendors.9f25e45a.js","fqdn":"hallamnvip.com","domain":"hallamnvip.com","tld":"com"},"ip":{"addr":"52.69.10.162","port":443,"asn":16509,"as":"AMAZON-02","country":"Japan","country_code":"JP"},"introduction_type":"scriptElement","is_inline":false,"md5":"0dbe51b26cb5849727f103646b725b3b","sha1":"2882753aadd36951d6e69d9a5d008eade294aa57","sha256":"0ae3437c6fa805892d6ffcab61ff96ee5ecfca8a3d25e79fd434268c00a98871","sha512":"fb6969414f6d06a00977787108d947ab76447de5dcd527bbef8b1d4f9329c99728cc5e440c1d9599f961269a3c22e00bdf86f4227124635c41da952e5c32992e","ssdeep":"6144:M6pTV830Fqw3UmwXtwTf3/Db3/HbvkNTMfYEvm/40+QhAV1vQz7eLe3WLZG:MkRV3wdwTfHHbkt1i0QvQzx31","tlshash":"d505f78df281b0b60be760b5403f220ba2376959b40ac4d8f675e4d4ad7894e6237f7d","size":840018,"data":"","first_seen":"2025-08-26T17:47:27.058438Z","last_seen":"2025-11-14T18:01:22.529238Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hallamnvip.com/pc/static/js/index.261fe9a8.js","fqdn":"hallamnvip.com","domain":"hallamnvip.com","tld":"com"},"ip":{"addr":"52.69.10.162","port":443,"asn":16509,"as":"AMAZON-02","country":"Japan","country_code":"JP"},"introduction_type":"scriptElement","is_inline":false,"md5":"a08ee543b993b888af4fe81c1663d0fb","sha1":"538b7e4c72440801ef2a8adebf877e634d5d5eaa","sha256":"2a0158e9ed9c448054402d50329ac294f632d16a0bb2de5d9a6512e565c1a011","sha512":"7120ceb407f1168c5662dbf4b8f117ca9cb79da1dcd547ac58ca96146b3782c6bffd373a97d8463d53e58f83e0c5cbb31cb3ce8362bad75abe088179dfe177a4","ssdeep":"6144:ivN1ABJ3ftMIj/bAcCQGWW/UxKGUCgXKyVsF1OYQhOEuIu1QsxKS9:0c1j/YHB4UjgQhOEo","tlshash":"b2e47c6d32c5a6fd02434216626b2548e1307fb9e157f820aabec2940f957dfc39b778","size":676033,"data":"","first_seen":"2025-08-26T17:47:27.053449Z","last_seen":"2025-08-26T17:47:27.053449Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hallamnvip.com/pc/static/js/pages-login-index~pages-register-index.bea784ce.js","fqdn":"hallamnvip.com","domain":"hallamnvip.com","tld":"com"},"ip":{"addr":"52.69.10.162","port":443,"asn":16509,"as":"AMAZON-02","country":"Japan","country_code":"JP"},"introduction_type":"scriptElement","is_inline":false,"md5":"36f0e6175c8746bbd752b6b55ca159e4","sha1":"022c25a71692c0de5241b5b9ce6df162826967b1","sha256":"923847fc0a1e655a970a94fb2e7115b3fdae891765edaa116f840448d7fbdeb4","sha512":"ac5609338e9cede111de2fd028cedb42c3c0e7a109c53d32b7c1ace15bb1ecc7c7681d02b656b4ef9948ff822fb6d955218ef8f4210fba840b89ea65355a2088","ssdeep":"768:4x55vq26uIRoKuu+Hf7tuWKWI+KB6WZK/D+3dWo/LaqcyCcZoI:AXvqju+Z+ZuWxKBEa3/LAyYI","tlshash":"874383096bc2f97f2573ac6125578d7aaa509c2eb058790ab2cd2c9fc253523713d33b","size":56364,"data":"","first_seen":"2025-08-26T17:47:27.04883Z","last_seen":"2025-08-26T17:47:27.04883Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hallamnvip.com/pc/static/js/pages-login-index.9a3d3be3.js","fqdn":"hallamnvip.com","domain":"hallamnvip.com","tld":"com"},"ip":{"addr":"52.69.10.162","port":443,"asn":16509,"as":"AMAZON-02","country":"Japan","country_code":"JP"},"introduction_type":"scriptElement","is_inline":false,"md5":"f37387eaa6fa04fba499af82a63b4565","sha1":"224aa31f26e4807647ca45bb7aff8be0777cc806","sha256":"6a82e8583aed4bb6d2ed9e649940ab0854a57bf9526e43a7813f0a2f05e68837","sha512":"96082dc85bf42da28053f65c1b2d7929d950ae99d578fd2b193de7995adff5703aed89b30b47ec429c51660fcc27813290a578630b1926b0b8f346262d517ff1","ssdeep":"192:t7QqRsh8p1h8x07LJaEHsHTQPKuf/83fL50oGjkKrPMp:DM8pkSLrHsS/DoGjkK4p","tlshash":"0042e960b08bb46e0773c4501027760af036d978d212d5c59bb2e9a85dfdacb2936ff9","size":12523,"data":"","first_seen":"2025-08-26T17:47:27.04628Z","last_seen":"2025-08-26T17:47:27.04628Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"hallamnvip.com/pc/static/index.css","fqdn":"hallamnvip.com","domain":"hallamnvip.com","tld":"com"},"ip":{"addr":"52.69.10.162","port":443,"asn":16509,"as":"AMAZON-02","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://hallamnvip.com/pc/","date":"2025-08-26T17:46:58.579Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hallamnvip.com","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Mon, 14 Jul 2025 00:39:48 GMT","end":"Sun, 12 Oct 2025 00:39:47 GMT"},"fingerprint":{"sha1":"CA:72:77:14:0A:53:4F:2D:61:2F:25:51:2D:2A:58:35:B0:44:CE:40","sha256":"92:F4:53:FC:47:62:08:B9:55:50:E5:BB:EF:39:E1:CE:2A:E6:9B:F0:A1:A3:DA:69:49:F1:6D:B8:53:F8:2D:DD"}}},"request":{"raw":"GET /pc/static/index.css HTTP/1.1\r\nHost: hallamnvip.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hallamnvip.com/pc/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 26 Aug 2025 17:46:58 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 12 Aug 2025 06:34:36 GMT\r\nvary: Accept-Encoding\r\netag: W/\"689ae07c-1793e\"\r\nexpires: Wed, 27 Aug 2025 05:46:58 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":96574,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"2de2f2d3943b4b382a28a439daff5939","sha1":"70d04e1c3567cb4f248b29046b98386f215a4d38","sha256":"8a35934d019c2b120a31ae6c51c75b2327f22637824b2a2c2faf4ce17ae9d4d8","sha512":"eba9271e30d6e4b21954078e3ccd839a55e1dcc8212fa375c18dce42104d19a92655c2f289401525b0c9565971a31573b928666515a3ca89b1801bbd48c1de95","ssdeep":"1536:OlIApuK7hmVmb2RS1Wu3xdynGJ7eh/nrhlvbc:VApuK7hmVrS1Wu3iG41nrPI","tlshash":"f393f73719012e39e52bcd26b6c1ab5a1e61c033e15307adfba47628cbcf9c9167b345","first_seen":"2025-07-20T12:48:29.443135Z","last_seen":"2026-08-02T17:24:39.797442Z","times_seen":5198,"resource_available":false,"data":null}},"time_used":259,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":259,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hallamnvip.com/pc/static/images/new/pwd.png","fqdn":"hallamnvip.com","domain":"hallamnvip.com","tld":"com"},"ip":{"addr":"52.69.10.162","port":443,"asn":16509,"as":"AMAZON-02","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hallamnvip.com/pc/","date":"2025-08-26T17:46:59.725Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hallamnvip.com","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Mon, 14 Jul 2025 00:39:48 GMT","end":"Sun, 12 Oct 2025 00:39:47 GMT"},"fingerprint":{"sha1":"CA:72:77:14:0A:53:4F:2D:61:2F:25:51:2D:2A:58:35:B0:44:CE:40","sha256":"92:F4:53:FC:47:62:08:B9:55:50:E5:BB:EF:39:E1:CE:2A:E6:9B:F0:A1:A3:DA:69:49:F1:6D:B8:53:F8:2D:DD"}}},"request":{"raw":"GET /pc/static/images/new/pwd.png HTTP/1.1\r\nHost: hallamnvip.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hallamnvip.com/pc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 26 Aug 2025 17:46:59 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 12 Aug 2025 06:34:38 GMT\r\nvary: Accept-Encoding\r\netag: W/\"689ae07e-450\"\r\nexpires: Thu, 25 Sep 2025 17:46:59 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1104,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 183 x 223, 4-bit colormap, non-interlaced","md5":"fa282418820080eb0ffaa9de869996e3","sha1":"574c8c80bd8ab3c839e96f37ca0191be8e57d45f","sha256":"26bf8e590043e18c27c8da07ffc9251320e2a38e7507011ccd6f19943a8630c7","sha512":"5f923802728e99fde7090f23cdd4b9e430097cb06cb2e79f488525a65480a7c1959ddc545b8110902085c20d2534773e2a34f79aabb1855035606bb38bc13878","ssdeep":"","tlshash":"2f1193a1c2c16464b1a49b813c7485092c471ce5512b1ee629d6343425b6cae047d1eb","first_seen":"2025-08-26T17:47:27.044777Z","last_seen":"2025-08-26T17:47:27.044777Z","times_seen":1,"resource_available":false,"data":null}},"time_used":493,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":493,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hallamnvip.com/static/js/pages-login-index.47db016e.js","fqdn":"hallamnvip.com","domain":"hallamnvip.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hallamnvip.com/","date":"2025-08-26T17:46:57.998Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hallamnvip.com","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Mon, 14 Jul 2025 00:39:48 GMT","end":"Sun, 12 Oct 2025 00:39:47 GMT"},"fingerprint":{"sha1":"CA:72:77:14:0A:53:4F:2D:61:2F:25:51:2D:2A:58:35:B0:44:CE:40","sha256":"92:F4:53:FC:47:62:08:B9:55:50:E5:BB:EF:39:E1:CE:2A:E6:9B:F0:A1:A3:DA:69:49:F1:6D:B8:53:F8:2D:DD"}}},"request":{"raw":"GET /static/js/pages-login-index.47db016e.js HTTP/1.1\r\nHost: hallamnvip.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hallamnvip.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-03T08:46:58.878565Z","times_seen":17687181,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hallamnvip.com/pc/static/js/pages-login-index.9a3d3be3.js","fqdn":"hallamnvip.com","domain":"hallamnvip.com","tld":"com"},"ip":{"addr":"52.69.10.162","port":443,"asn":16509,"as":"AMAZON-02","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hallamnvip.com/pc/","date":"2025-08-26T17:46:59.344Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hallamnvip.com","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Mon, 14 Jul 2025 00:39:48 GMT","end":"Sun, 12 Oct 2025 00:39:47 GMT"},"fingerprint":{"sha1":"CA:72:77:14:0A:53:4F:2D:61:2F:25:51:2D:2A:58:35:B0:44:CE:40","sha256":"92:F4:53:FC:47:62:08:B9:55:50:E5:BB:EF:39:E1:CE:2A:E6:9B:F0:A1:A3:DA:69:49:F1:6D:B8:53:F8:2D:DD"}}},"request":{"raw":"GET /pc/static/js/pages-login-index.9a3d3be3.js HTTP/1.1\r\nHost: hallamnvip.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hallamnvip.com/pc/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 26 Aug 2025 17:46:59 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 12 Aug 2025 06:34:36 GMT\r\nvary: Accept-Encoding\r\netag: W/\"689ae07c-30eb\"\r\nexpires: Wed, 27 Aug 2025 05:46:59 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":12523,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (11697), with no line terminators","md5":"f37387eaa6fa04fba499af82a63b4565","sha1":"224aa31f26e4807647ca45bb7aff8be0777cc806","sha256":"6a82e8583aed4bb6d2ed9e649940ab0854a57bf9526e43a7813f0a2f05e68837","sha512":"96082dc85bf42da28053f65c1b2d7929d950ae99d578fd2b193de7995adff5703aed89b30b47ec429c51660fcc27813290a578630b1926b0b8f346262d517ff1","ssdeep":"192:t7QqRsh8p1h8x07LJaEHsHTQPKuf/83fL50oGjkKrPMp:DM8pkSLrHsS/DoGjkK4p","tlshash":"0042e960b08bb46e0773c4501027760af036d978d212d5c59bb2e9a85dfdacb2936ff9","first_seen":"2025-08-26T17:47:27.04628Z","last_seen":"2025-08-26T17:47:27.04628Z","times_seen":1,"resource_available":true,"data":null}},"time_used":259,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":259,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hallamnvip.com/static/images/300x300.webp","fqdn":"hallamnvip.com","domain":"hallamnvip.com","tld":"com"},"ip":{"addr":"52.69.10.162","port":443,"asn":16509,"as":"AMAZON-02","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hallamnvip.com/pc/","date":"2025-08-26T17:46:59.578Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hallamnvip.com","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Mon, 14 Jul 2025 00:39:48 GMT","end":"Sun, 12 Oct 2025 00:39:47 GMT"},"fingerprint":{"sha1":"CA:72:77:14:0A:53:4F:2D:61:2F:25:51:2D:2A:58:35:B0:44:CE:40","sha256":"92:F4:53:FC:47:62:08:B9:55:50:E5:BB:EF:39:E1:CE:2A:E6:9B:F0:A1:A3:DA:69:49:F1:6D:B8:53:F8:2D:DD"}}},"request":{"raw":"GET /static/images/300x300.webp HTTP/1.1\r\nHost: hallamnvip.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hallamnvip.com/pc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 26 Aug 2025 17:46:59 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1012\r\nlast-modified: Tue, 12 Aug 2025 06:35:34 GMT\r\netag: \"689ae0b6-3f4\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1012,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"2941eb3a702fe6537aeee2fba650fe87","sha1":"ac6d6cb4a0d4c8a85efc28bf47edc3bf09c92837","sha256":"593819f91210e4857d8573c673cdcea01296766bf65a5f7b10a48f5d0163a477","sha512":"741be3f320512431178963f712274fd9e72e68d4081f319f91dff3c3d7b26bc71ec302d9bc407cedc4d0617685a03003f21e46504991643014e14b1ac176d983","ssdeep":"","tlshash":"ab119403de6a9d5c22405d3be4a1fbda49ee68332de3095288591dc977f0d42e3b05a4","first_seen":"2025-08-26T17:47:27.047105Z","last_seen":"2025-08-26T17:47:27.047105Z","times_seen":1,"resource_available":false,"data":null}},"time_used":263,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":258,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.182hallaht.com/admin","fqdn":"api.182hallaht.com","domain":"182hallaht.com","tld":"com"},"ip":{"addr":"52.69.10.162","port":443,"asn":16509,"as":"AMAZON-02","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hallamnvip.com/pc/","date":"2025-08-26T17:46:59.714Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.182hallaht.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 23 Aug 2025 12:51:42 GMT","end":"Fri, 21 Nov 2025 12:51:41 GMT"},"fingerprint":{"sha1":"BA:7B:23:6E:25:17:E2:1F:63:69:41:35:CD:06:BF:4C:44:69:C9:3F","sha256":"52:F4:C5:D6:58:41:F5:9A:D6:93:57:7C:53:93:D7:76:8B:4D:47:BC:C1:64:C4:82:3B:F3:5E:75:E3:84:92:2D"}}},"request":{"raw":"GET /admin HTTP/1.1\r\nHost: api.182hallaht.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hallamnvip.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 26 Aug 2025 17:47:00 GMT\r\ncontent-type: application/json;charset=utf-8\r\ncontent-length: 84\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-03T08:46:58.878565Z","times_seen":17687181,"resource_available":true,"data":null}},"time_used":1933,"timings":{"blocked":840,"dns":315,"connect":251,"send":0,"wait":252,"receive":0,"ssl":272},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hallamnvip.com/","fqdn":"hallamnvip.com","domain":"hallamnvip.com","tld":"com"},"ip":{"addr":"52.69.10.162","port":443,"asn":16509,"as":"AMAZON-02","country":"Japan","country_code":"JP"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-08-26T17:46:55.154Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hallamnvip.com","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Mon, 14 Jul 2025 00:39:48 GMT","end":"Sun, 12 Oct 2025 00:39:47 GMT"},"fingerprint":{"sha1":"CA:72:77:14:0A:53:4F:2D:61:2F:25:51:2D:2A:58:35:B0:44:CE:40","sha256":"92:F4:53:FC:47:62:08:B9:55:50:E5:BB:EF:39:E1:CE:2A:E6:9B:F0:A1:A3:DA:69:49:F1:6D:B8:53:F8:2D:DD"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: hallamnvip.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 26 Aug 2025 17:46:56 GMT\r\ncontent-type: text/html\r\nlast-modified: Tue, 12 Aug 2025 06:35:34 GMT\r\nvary: Accept-Encoding\r\netag: W/\"689ae0b6-4a7\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1191,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1177), with no line terminators","md5":"cf2635d171f7b11fbbcd49ca96363e90","sha1":"c93e13e7b90620095d6838acb30d4e4c1e1f19b3","sha256":"9d5054270e73b968822e47e3c286daacf9ee0881ad1ca533f82da89125019acd","sha512":"fe12566f503274a318301b32226d0e274e6a63ff8e2c28fd815941126721a879e3972cea5e2f2ec264f405b2e5b341063524d7c98196e29cf9283ac4ee60c0f3","ssdeep":"","tlshash":"ce215147fc20e54403664113bea6f60dcbadca4e41609cd1f9c091de48c0aecc7bba62","first_seen":"2025-08-26T17:47:27.048042Z","last_seen":"2025-08-26T17:47:27.048042Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1929,"timings":{"blocked":834,"dns":312,"connect":258,"send":0,"wait":259,"receive":0,"ssl":264},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hallamnvip.com/pc/static/js/pages-login-index~pages-register-index.bea784ce.js","fqdn":"hallamnvip.com","domain":"hallamnvip.com","tld":"com"},"ip":{"addr":"52.69.10.162","port":443,"asn":16509,"as":"AMAZON-02","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hallamnvip.com/pc/","date":"2025-08-26T17:46:59.342Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hallamnvip.com","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Mon, 14 Jul 2025 00:39:48 GMT","end":"Sun, 12 Oct 2025 00:39:47 GMT"},"fingerprint":{"sha1":"CA:72:77:14:0A:53:4F:2D:61:2F:25:51:2D:2A:58:35:B0:44:CE:40","sha256":"92:F4:53:FC:47:62:08:B9:55:50:E5:BB:EF:39:E1:CE:2A:E6:9B:F0:A1:A3:DA:69:49:F1:6D:B8:53:F8:2D:DD"}}},"request":{"raw":"GET /pc/static/js/pages-login-index~pages-register-index.bea784ce.js HTTP/1.1\r\nHost: hallamnvip.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hallamnvip.com/pc/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 26 Aug 2025 17:46:59 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 12 Aug 2025 06:34:36 GMT\r\nvary: Accept-Encoding\r\netag: W/\"689ae07c-dc2c\"\r\nexpires: Wed, 27 Aug 2025 05:46:59 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":56364,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (55068), with no line terminators","md5":"36f0e6175c8746bbd752b6b55ca159e4","sha1":"022c25a71692c0de5241b5b9ce6df162826967b1","sha256":"923847fc0a1e655a970a94fb2e7115b3fdae891765edaa116f840448d7fbdeb4","sha512":"ac5609338e9cede111de2fd028cedb42c3c0e7a109c53d32b7c1ace15bb1ecc7c7681d02b656b4ef9948ff822fb6d955218ef8f4210fba840b89ea65355a2088","ssdeep":"768:4x55vq26uIRoKuu+Hf7tuWKWI+KB6WZK/D+3dWo/LaqcyCcZoI:AXvqju+Z+ZuWxKBEa3/LAyYI","tlshash":"874383096bc2f97f2573ac6125578d7aaa509c2eb058790ab2cd2c9fc253523713d33b","first_seen":"2025-08-26T17:47:27.04883Z","last_seen":"2025-08-26T17:47:27.04883Z","times_seen":1,"resource_available":true,"data":null}},"time_used":259,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":259,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hallamnvip.com/pc/static/images/new/user.png","fqdn":"hallamnvip.com","domain":"hallamnvip.com","tld":"com"},"ip":{"addr":"52.69.10.162","port":443,"asn":16509,"as":"AMAZON-02","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hallamnvip.com/pc/","date":"2025-08-26T17:46:59.723Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hallamnvip.com","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Mon, 14 Jul 2025 00:39:48 GMT","end":"Sun, 12 Oct 2025 00:39:47 GMT"},"fingerprint":{"sha1":"CA:72:77:14:0A:53:4F:2D:61:2F:25:51:2D:2A:58:35:B0:44:CE:40","sha256":"92:F4:53:FC:47:62:08:B9:55:50:E5:BB:EF:39:E1:CE:2A:E6:9B:F0:A1:A3:DA:69:49:F1:6D:B8:53:F8:2D:DD"}}},"request":{"raw":"GET /pc/static/images/new/user.png HTTP/1.1\r\nHost: hallamnvip.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hallamnvip.com/pc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 26 Aug 2025 17:46:59 GMT\r\ncontent-type: image/png\r\ncontent-length: 939\r\nlast-modified: Tue, 12 Aug 2025 06:34:38 GMT\r\netag: \"689ae07e-3ab\"\r\nexpires: Thu, 25 Sep 2025 17:46:59 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":939,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 170 x 195, 8-bit colormap, non-interlaced","md5":"3bd0e8df356e157ddc3271fdf130679f","sha1":"a35e779575c8d1250faa482a5e2e86576c56defc","sha256":"7e332ceba0986654ac4570494fa4c69057f69c8dc85d5fc447931723580e169a","sha512":"c2a3703227690877a3e6627d82008a05c0bf2c2f96819403be6d6f07928676977c595d35bcb051cbc6ec0c2eb6e7237134a92cf38b089c0368f8b3955b53090c","ssdeep":"","tlshash":"3e1184dae324cfdf949422d0649936d5fd077c8c0a0812e5308f707e283ab6652b6042","first_seen":"2025-08-26T17:47:27.049654Z","last_seen":"2025-08-26T17:47:27.049654Z","times_seen":1,"resource_available":false,"data":null}},"time_used":495,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":494,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.182hallaht.com/font/config","fqdn":"api.182hallaht.com","domain":"182hallaht.com","tld":"com"},"ip":{"addr":"52.69.10.162","port":443,"asn":16509,"as":"AMAZON-02","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://hallamnvip.com/pc/","date":"2025-08-26T17:47:00.881Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.182hallaht.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 23 Aug 2025 12:51:42 GMT","end":"Fri, 21 Nov 2025 12:51:41 GMT"},"fingerprint":{"sha1":"BA:7B:23:6E:25:17:E2:1F:63:69:41:35:CD:06:BF:4C:44:69:C9:3F","sha256":"52:F4:C5:D6:58:41:F5:9A:D6:93:57:7C:53:93:D7:76:8B:4D:47:BC:C1:64:C4:82:3B:F3:5E:75:E3:84:92:2D"}}},"request":{"raw":"GET /font/config HTTP/1.1\r\nHost: api.182hallaht.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\ncontent-type: application/json\r\nForm-type: h5\r\nOrigin: https://hallamnvip.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hallamnvip.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 26 Aug 2025 17:47:00 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://hallamnvip.com\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1444,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"547c03fa22097e0ec1200a0887966d43","sha1":"bbff79cdcc7f28910fa9f1ccd1ec7325c231b112","sha256":"ec20ee2cb85edd09fa325d296cc76ca7733eef520ca821e729e056e79bbe7914","sha512":"aca7c2ba4d0ed90467bfc197d1942c524d7be61e7f718c364d30403d3f3cccb0a0b13462b5c03cd9ab11ee1ed601fe892d43b79a113b5c09495744be8fbe70bd","ssdeep":"","tlshash":"c631cd12793d00b2b7836fd265ef660495fda7f3258d0ea43d8f9f6068841e6a00de4e","first_seen":"2025-08-26T17:47:27.050443Z","last_seen":"2025-08-26T17:47:27.050443Z","times_seen":1,"resource_available":false,"data":null}},"time_used":256,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":256,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hallamnvip.com/static/js/index.47414168.js","fqdn":"hallamnvip.com","domain":"hallamnvip.com","tld":"com"},"ip":{"addr":"52.69.10.162","port":443,"asn":16509,"as":"AMAZON-02","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hallamnvip.com/","date":"2025-08-26T17:46:56.403Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hallamnvip.com","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Mon, 14 Jul 2025 00:39:48 GMT","end":"Sun, 12 Oct 2025 00:39:47 GMT"},"fingerprint":{"sha1":"CA:72:77:14:0A:53:4F:2D:61:2F:25:51:2D:2A:58:35:B0:44:CE:40","sha256":"92:F4:53:FC:47:62:08:B9:55:50:E5:BB:EF:39:E1:CE:2A:E6:9B:F0:A1:A3:DA:69:49:F1:6D:B8:53:F8:2D:DD"}}},"request":{"raw":"GET /static/js/index.47414168.js HTTP/1.1\r\nHost: hallamnvip.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hallamnvip.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 26 Aug 2025 17:46:56 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 12 Aug 2025 06:35:34 GMT\r\nvary: Accept-Encoding\r\netag: W/\"689ae0b6-43272\"\r\nexpires: Wed, 27 Aug 2025 05:46:56 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":275058,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (61878), with no line terminators","md5":"c5b5fbeb2b08ff8899ba591eabc0a834","sha1":"6af10a534327974d7fbde32a2246380d34efd9a7","sha256":"1783d9a857568a67187718389e864178bac20c78c35d963d107411b3bfbea7fa","sha512":"86e9bc891685b5a650c3e12e7874dd856116a5f4c9477b77addbf0cf07879c4dc9f07ddb15cacfdc4d3b9d0f9a3abdd3934b13407c92c274cc909158bcc7dd37","ssdeep":"3072:8G1hB3CS09WCkiWpYTvmog1nspL1Xy378QSfHHskImP5KfEyGpn1ADsEVyyMowFH:8G1mh5ApYTvmPsxKSnN1AK","tlshash":"5b444b19b189b7fe16936068253f160521363facd059e801a7b6d2c94ff93de1337b28","first_seen":"2025-08-26T17:47:27.051216Z","last_seen":"2025-08-26T17:47:27.051216Z","times_seen":1,"resource_available":true,"data":null}},"time_used":772,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":772,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hallamnvip.com/pc/assets/uniicons.2579c7da.ttf","fqdn":"hallamnvip.com","domain":"hallamnvip.com","tld":"com"},"ip":{"addr":"52.69.10.162","port":443,"asn":16509,"as":"AMAZON-02","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://hallamnvip.com/pc/","date":"2025-08-26T17:46:59.702Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hallamnvip.com","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Mon, 14 Jul 2025 00:39:48 GMT","end":"Sun, 12 Oct 2025 00:39:47 GMT"},"fingerprint":{"sha1":"CA:72:77:14:0A:53:4F:2D:61:2F:25:51:2D:2A:58:35:B0:44:CE:40","sha256":"92:F4:53:FC:47:62:08:B9:55:50:E5:BB:EF:39:E1:CE:2A:E6:9B:F0:A1:A3:DA:69:49:F1:6D:B8:53:F8:2D:DD"}}},"request":{"raw":"GET /pc/assets/uniicons.2579c7da.ttf HTTP/1.1\r\nHost: hallamnvip.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hallamnvip.com/pc/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 26 Aug 2025 17:46:59 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 35824\r\nlast-modified: Tue, 12 Aug 2025 06:34:36 GMT\r\netag: \"689ae07c-8bf0\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":35824,"size_decoded":0,"mime_type":"application/octet-stream","magic":"TrueType Font data, 11 tables, 1st \"GSUB\", 18 names, Macintosh, Created by iconfontuniiconsRegularuniiconsuniiconsVersion 1.0uniiconsGenerated by svg2ttf from F","md5":"2579c7da7e5cb4418f36e17c71125128","sha1":"de4aad75292f9386525b52ae801f9b2252ea07c4","sha256":"32e978a546182be7be788ebf4dbce57b8cc8b6f4d9da0c9d3a46a5e030bc1efc","sha512":"690b27e2d6c53eb6bff5ffba83b69cd03496c78c546aa79705639ea4526f89f85a1fb4ca0b7352d8c8a9428c07f14d5f61cbdc8c2c45156ee815095fd0504181","ssdeep":"768:NjUnym6cVBqac6riFK/d8PWenmP7p7+A9cbWL2eRGXSOu:ZUnym6mqB6WsdenmP97dqb4lSu","tlshash":"dff28d65176d4e6ada7e4abb188761130f7dff3060b2ea15ee8ebc4e84080f005d4b1e","first_seen":"2024-06-29T16:50:30Z","last_seen":"2026-08-01T12:08:28.038391Z","times_seen":2963,"resource_available":false,"data":null}},"time_used":517,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":516,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hallamnvip.com/pc/","fqdn":"hallamnvip.com","domain":"hallamnvip.com","tld":"com"},"ip":{"addr":"52.69.10.162","port":443,"asn":16509,"as":"AMAZON-02","country":"Japan","country_code":"JP"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-08-26T17:46:58.283Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hallamnvip.com","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Mon, 14 Jul 2025 00:39:48 GMT","end":"Sun, 12 Oct 2025 00:39:47 GMT"},"fingerprint":{"sha1":"CA:72:77:14:0A:53:4F:2D:61:2F:25:51:2D:2A:58:35:B0:44:CE:40","sha256":"92:F4:53:FC:47:62:08:B9:55:50:E5:BB:EF:39:E1:CE:2A:E6:9B:F0:A1:A3:DA:69:49:F1:6D:B8:53:F8:2D:DD"}}},"request":{"raw":"GET /pc/ HTTP/1.1\r\nHost: hallamnvip.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://hallamnvip.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 26 Aug 2025 17:46:58 GMT\r\ncontent-type: text/html\r\ncontent-length: 601\r\nlast-modified: Tue, 12 Aug 2025 06:34:36 GMT\r\netag: \"689ae07c-259\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":601,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (601), with no line terminators","md5":"4aa074b89f1c15fa349e5a19fdb1b57c","sha1":"277e9a263fe5ce04967c5c144803c69b2dbe895b","sha256":"82d0275b54ded21186d8f4b2191d905e760ef5d7ed83d018498b64408054669b","sha512":"33735d3acae2ddfe3e6639d931a4651fe8e3d13fd5d39d016656c6aa7ec7db1d25927b7dc482e54767370822bac95479a70ca072c019bf5a68bce3f625df0a6d","ssdeep":"","tlshash":"0bf042931c10e04e1b208691a5b5f53dc94fcfe81972885099d459fd4cd478d8e3e449","first_seen":"2025-08-26T17:47:27.052547Z","last_seen":"2025-08-26T17:47:27.052547Z","times_seen":1,"resource_available":false,"data":null}},"time_used":258,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":258,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hallamnvip.com/pc/static/js/index.261fe9a8.js","fqdn":"hallamnvip.com","domain":"hallamnvip.com","tld":"com"},"ip":{"addr":"52.69.10.162","port":443,"asn":16509,"as":"AMAZON-02","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hallamnvip.com/pc/","date":"2025-08-26T17:46:58.586Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hallamnvip.com","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Mon, 14 Jul 2025 00:39:48 GMT","end":"Sun, 12 Oct 2025 00:39:47 GMT"},"fingerprint":{"sha1":"CA:72:77:14:0A:53:4F:2D:61:2F:25:51:2D:2A:58:35:B0:44:CE:40","sha256":"92:F4:53:FC:47:62:08:B9:55:50:E5:BB:EF:39:E1:CE:2A:E6:9B:F0:A1:A3:DA:69:49:F1:6D:B8:53:F8:2D:DD"}}},"request":{"raw":"GET /pc/static/js/index.261fe9a8.js HTTP/1.1\r\nHost: hallamnvip.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hallamnvip.com/pc/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 26 Aug 2025 17:46:58 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 12 Aug 2025 06:34:36 GMT\r\nvary: Accept-Encoding\r\netag: W/\"689ae07c-a50c1\"\r\nexpires: Wed, 27 Aug 2025 05:46:58 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":676033,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (52164), with no line terminators","md5":"a08ee543b993b888af4fe81c1663d0fb","sha1":"538b7e4c72440801ef2a8adebf877e634d5d5eaa","sha256":"2a0158e9ed9c448054402d50329ac294f632d16a0bb2de5d9a6512e565c1a011","sha512":"7120ceb407f1168c5662dbf4b8f117ca9cb79da1dcd547ac58ca96146b3782c6bffd373a97d8463d53e58f83e0c5cbb31cb3ce8362bad75abe088179dfe177a4","ssdeep":"6144:ivN1ABJ3ftMIj/bAcCQGWW/UxKGUCgXKyVsF1OYQhOEuIu1QsxKS9:0c1j/YHB4UjgQhOEo","tlshash":"b2e47c6d32c5a6fd02434216626b2548e1307fb9e157f820aabec2940f957dfc39b778","first_seen":"2025-08-26T17:47:27.053449Z","last_seen":"2025-08-26T17:47:27.053449Z","times_seen":1,"resource_available":true,"data":null}},"time_used":517,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":517,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.182hallaht.com/font/config","fqdn":"api.182hallaht.com","domain":"182hallaht.com","tld":"com"},"ip":{"addr":"52.69.10.162","port":443,"asn":16509,"as":"AMAZON-02","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://hallamnvip.com/pc/","date":"2025-08-26T17:46:59.622Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.182hallaht.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 23 Aug 2025 12:51:42 GMT","end":"Fri, 21 Nov 2025 12:51:41 GMT"},"fingerprint":{"sha1":"BA:7B:23:6E:25:17:E2:1F:63:69:41:35:CD:06:BF:4C:44:69:C9:3F","sha256":"52:F4:C5:D6:58:41:F5:9A:D6:93:57:7C:53:93:D7:76:8B:4D:47:BC:C1:64:C4:82:3B:F3:5E:75:E3:84:92:2D"}}},"request":{"raw":"OPTIONS /font/config HTTP/1.1\r\nHost: api.182hallaht.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: content-type,form-type\r\nReferer: https://hallamnvip.com/\r\nOrigin: https://hallamnvip.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 26 Aug 2025 17:47:00 GMT\r\ncontent-length: 0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://hallamnvip.com\r\naccess-control-allow-methods: GET\r\naccess-control-allow-headers: content-type, form-type\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-03T08:46:58.878565Z","times_seen":17687181,"resource_available":true,"data":null}},"time_used":2053,"timings":{"blocked":951,"dns":303,"connect":253,"send":0,"wait":254,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hallamnvip.com/pc/static/images/new/bg.png","fqdn":"hallamnvip.com","domain":"hallamnvip.com","tld":"com"},"ip":{"addr":"52.69.10.162","port":443,"asn":16509,"as":"AMAZON-02","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hallamnvip.com/pc/","date":"2025-08-26T17:46:59.695Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hallamnvip.com","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Mon, 14 Jul 2025 00:39:48 GMT","end":"Sun, 12 Oct 2025 00:39:47 GMT"},"fingerprint":{"sha1":"CA:72:77:14:0A:53:4F:2D:61:2F:25:51:2D:2A:58:35:B0:44:CE:40","sha256":"92:F4:53:FC:47:62:08:B9:55:50:E5:BB:EF:39:E1:CE:2A:E6:9B:F0:A1:A3:DA:69:49:F1:6D:B8:53:F8:2D:DD"}}},"request":{"raw":"GET /pc/static/images/new/bg.png HTTP/1.1\r\nHost: hallamnvip.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hallamnvip.com/pc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 26 Aug 2025 17:46:59 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 12 Aug 2025 06:34:36 GMT\r\nvary: Accept-Encoding\r\netag: W/\"689ae07c-164203\"\r\nexpires: Thu, 25 Sep 2025 17:46:59 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1458691,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 8009 x 4430, 8-bit/color RGBA, non-interlaced","md5":"447af12d2fd6e694cd5e8be40e9f1e48","sha1":"f3c600d0438ff1a6b2eac89141226d310efb894b","sha256":"dcb684df8af31ea614d0137fd4080291d89dda9e5855d5a2bc73148731ede78d","sha512":"5bffa53f7790965cb7e9dee60203f7425d821e968bc6c68d1fc3e3d2be7d0968a4b23c87618ae0efe8388ae22f591e2ea5f46cfa06b726e9efa389058dbfb974","ssdeep":"24576:6EnyHGK0st5IzYsFKtZf/1zFLszatpcNruTZ3WiObB4TS10473CryTe3iA:82szI9FYZn1z1szatpcNrYZ3WiOb4S1g","tlshash":"e8252310ddd6e880cc651cbcb4b11fc42780b075c2692fdea37d95e47eed6443aaaac2","first_seen":"2025-08-26T17:47:27.054522Z","last_seen":"2025-08-26T17:47:27.054522Z","times_seen":1,"resource_available":false,"data":null}},"time_used":259,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":259,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hallamnvip.com/pc","fqdn":"hallamnvip.com","domain":"hallamnvip.com","tld":"com"},"ip":{"addr":"52.69.10.162","port":443,"asn":16509,"as":"AMAZON-02","country":"Japan","country_code":"JP"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-08-26T17:46:58.023Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hallamnvip.com","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Mon, 14 Jul 2025 00:39:48 GMT","end":"Sun, 12 Oct 2025 00:39:47 GMT"},"fingerprint":{"sha1":"CA:72:77:14:0A:53:4F:2D:61:2F:25:51:2D:2A:58:35:B0:44:CE:40","sha256":"92:F4:53:FC:47:62:08:B9:55:50:E5:BB:EF:39:E1:CE:2A:E6:9B:F0:A1:A3:DA:69:49:F1:6D:B8:53:F8:2D:DD"}}},"request":{"raw":"GET /pc HTTP/1.1\r\nHost: hallamnvip.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hallamnvip.com/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 Moved Permanently\r\nserver: nginx\r\ndate: Tue, 26 Aug 2025 17:46:58 GMT\r\ncontent-type: text/html\r\ncontent-length: 162\r\nlocation: https://hallamnvip.com/pc/\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":601,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-03T08:46:58.878565Z","times_seen":17687181,"resource_available":true,"data":null}},"time_used":258,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":258,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.182hallaht.com/font/config","fqdn":"api.182hallaht.com","domain":"182hallaht.com","tld":"com"},"ip":{"addr":"52.69.10.162","port":443,"asn":16509,"as":"AMAZON-02","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://hallamnvip.com/pc/","date":"2025-08-26T17:47:00.885Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.182hallaht.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 23 Aug 2025 12:51:42 GMT","end":"Fri, 21 Nov 2025 12:51:41 GMT"},"fingerprint":{"sha1":"BA:7B:23:6E:25:17:E2:1F:63:69:41:35:CD:06:BF:4C:44:69:C9:3F","sha256":"52:F4:C5:D6:58:41:F5:9A:D6:93:57:7C:53:93:D7:76:8B:4D:47:BC:C1:64:C4:82:3B:F3:5E:75:E3:84:92:2D"}}},"request":{"raw":"GET /font/config HTTP/1.1\r\nHost: api.182hallaht.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\ncontent-type: application/json\r\nForm-type: h5\r\nOrigin: https://hallamnvip.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hallamnvip.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 26 Aug 2025 17:47:00 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://hallamnvip.com\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1444,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"547c03fa22097e0ec1200a0887966d43","sha1":"bbff79cdcc7f28910fa9f1ccd1ec7325c231b112","sha256":"ec20ee2cb85edd09fa325d296cc76ca7733eef520ca821e729e056e79bbe7914","sha512":"aca7c2ba4d0ed90467bfc197d1942c524d7be61e7f718c364d30403d3f3cccb0a0b13462b5c03cd9ab11ee1ed601fe892d43b79a113b5c09495744be8fbe70bd","ssdeep":"","tlshash":"c631cd12793d00b2b7836fd265ef660495fda7f3258d0ea43d8f9f6068841e6a00de4e","first_seen":"2025-08-26T17:47:27.050443Z","last_seen":"2025-08-26T17:47:27.050443Z","times_seen":1,"resource_available":false,"data":null}},"time_used":255,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":255,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.dcloud.net.cn/img/shadow-grey.png","fqdn":"cdn.dcloud.net.cn","domain":"dcloud.net.cn","tld":"net.cn"},"ip":{"addr":"124.221.80.91","port":443,"asn":45090,"as":"Shenzhen Tencent Computer Systems Company Limited","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hallamnvip.com/pc/","date":"2025-08-26T17:47:01.896Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.dcloud.net.cn","organization":""},"issuer":{"commonName":"Certum Domain Validation CA SHA2","organization":"Unizeto Technologies S.A."},"validity":{"start":"Mon, 12 Aug 2024 08:33:13 GMT","end":"Thu, 11 Sep 2025 08:33:12 GMT"},"fingerprint":{"sha1":"9C:B4:91:1F:60:88:9E:80:73:F3:11:AF:51:62:A5:A0:E4:56:80:C6","sha256":"5E:C6:CA:FE:4E:22:EA:23:BF:7F:CC:7F:0F:60:5A:E8:65:18:C1:07:8E:78:86:0A:58:C0:5F:ED:B2:51:78:72"}}},"request":{"raw":"GET /img/shadow-grey.png HTTP/1.1\r\nHost: cdn.dcloud.net.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hallamnvip.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 26 Aug 2025 17:47:03 GMT\r\ncontent-type: image/png\r\ncontent-length: 136\r\nlast-modified: Thu, 06 Jun 2019 06:42:07 GMT\r\netag: \"5cf8b5bf-88\"\r\nexpires: Wed, 27 Aug 2025 15:47:03 GMT\r\ncache-control: max-age=79200\r\nset-cookie: __uni__uid=rBEQVWit8xdff/BRA48kAg==; expires=Thu, 31-Dec-37 23:55:55 GMT; domain=dcloud.net.cn; path=/; secure; httponly; samesite=none\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":136,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1 x 6, 4-bit colormap, non-interlaced","md5":"5a962adf74d92ae702467b3f47976547","sha1":"36f74049375584e3fa69b5ef87e9572336ff9e7a","sha256":"ad4ebea1c3496dd2924789ee009174a2c6289d1200e9811f458fd46f172d1d6f","sha512":"4ace23fe7ec6c7271710030fd423aace13eafac68ac3e76366ce4ce9bdc702caf71c9bdc2fb6a32c8e9791546098617cc0259decd8bb8489afdbce43e1b53a73","ssdeep":"","tlshash":"47c09bf3a615dc754a0d153b42e98271f429511e07046d0e5a13c216741e3448d56793","first_seen":"2023-04-15T10:50:30Z","last_seen":"2026-08-03T07:32:23.809438Z","times_seen":20133,"resource_available":false,"data":null}},"time_used":2312,"timings":{"blocked":1003,"dns":270,"connect":301,"send":0,"wait":300,"receive":6,"ssl":430},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hallamnvip.com/static/index.css","fqdn":"hallamnvip.com","domain":"hallamnvip.com","tld":"com"},"ip":{"addr":"52.69.10.162","port":443,"asn":16509,"as":"AMAZON-02","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://hallamnvip.com/","date":"2025-08-26T17:46:56.400Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hallamnvip.com","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Mon, 14 Jul 2025 00:39:48 GMT","end":"Sun, 12 Oct 2025 00:39:47 GMT"},"fingerprint":{"sha1":"CA:72:77:14:0A:53:4F:2D:61:2F:25:51:2D:2A:58:35:B0:44:CE:40","sha256":"92:F4:53:FC:47:62:08:B9:55:50:E5:BB:EF:39:E1:CE:2A:E6:9B:F0:A1:A3:DA:69:49:F1:6D:B8:53:F8:2D:DD"}}},"request":{"raw":"GET /static/index.css HTTP/1.1\r\nHost: hallamnvip.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hallamnvip.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 26 Aug 2025 17:46:56 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 12 Aug 2025 06:35:34 GMT\r\nvary: Accept-Encoding\r\netag: W/\"689ae0b6-1793e\"\r\nexpires: Wed, 27 Aug 2025 05:46:56 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":96574,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"2de2f2d3943b4b382a28a439daff5939","sha1":"70d04e1c3567cb4f248b29046b98386f215a4d38","sha256":"8a35934d019c2b120a31ae6c51c75b2327f22637824b2a2c2faf4ce17ae9d4d8","sha512":"eba9271e30d6e4b21954078e3ccd839a55e1dcc8212fa375c18dce42104d19a92655c2f289401525b0c9565971a31573b928666515a3ca89b1801bbd48c1de95","ssdeep":"1536:OlIApuK7hmVmb2RS1Wu3xdynGJ7eh/nrhlvbc:VApuK7hmVrS1Wu3iG41nrPI","tlshash":"f393f73719012e39e52bcd26b6c1ab5a1e61c033e15307adfba47628cbcf9c9167b345","first_seen":"2025-07-20T12:48:29.443135Z","last_seen":"2026-08-02T17:24:39.797442Z","times_seen":5198,"resource_available":false,"data":null}},"time_used":518,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":518,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hallamnvip.com/static/js/chunk-vendors.4dfb5a2f.js","fqdn":"hallamnvip.com","domain":"hallamnvip.com","tld":"com"},"ip":{"addr":"52.69.10.162","port":443,"asn":16509,"as":"AMAZON-02","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hallamnvip.com/","date":"2025-08-26T17:46:56.401Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hallamnvip.com","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Mon, 14 Jul 2025 00:39:48 GMT","end":"Sun, 12 Oct 2025 00:39:47 GMT"},"fingerprint":{"sha1":"CA:72:77:14:0A:53:4F:2D:61:2F:25:51:2D:2A:58:35:B0:44:CE:40","sha256":"92:F4:53:FC:47:62:08:B9:55:50:E5:BB:EF:39:E1:CE:2A:E6:9B:F0:A1:A3:DA:69:49:F1:6D:B8:53:F8:2D:DD"}}},"request":{"raw":"GET /static/js/chunk-vendors.4dfb5a2f.js HTTP/1.1\r\nHost: hallamnvip.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hallamnvip.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 26 Aug 2025 17:46:56 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 12 Aug 2025 06:35:34 GMT\r\nvary: Accept-Encoding\r\netag: W/\"689ae0b6-ccbc9\"\r\nexpires: Wed, 27 Aug 2025 05:46:56 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":838601,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (42931)","md5":"bc8da0c0a7f23aa1f2f6c6a092f45d23","sha1":"31e0a53c76be8f2efe410ce721afabd030cbcb2c","sha256":"b0de1b66695213640cd018707070ef030ed0357123e030f28ea17c3f2a67650e","sha512":"8bc49164c59d213ca9ca736c11b97e11547f684424f21a18e937b9b4b72ec1d216ae2ca2919ad93d5a0f27dcceaca8651197643f259f9e48d457feb521b2d002","ssdeep":"6144:M6pTV830Fq43Um9XtwTf3/Db3/HbvkNTMfYEvm/40+QhAV1vQz7eLe3WLZq:MkR939dwTfHHbkt1i0QvQzx3f","tlshash":"b005f78df281b0b60be760b5403f220ba2376959b40ac4d8f675e4d4ad7894e6237f7d","first_seen":"2025-08-04T11:20:02.394042Z","last_seen":"2026-01-03T18:33:36.821986Z","times_seen":12,"resource_available":true,"data":null}},"time_used":775,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":775,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hallamnvip.com/static/js/pages-login-index~pages-register-index.a6823919.js","fqdn":"hallamnvip.com","domain":"hallamnvip.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hallamnvip.com/","date":"2025-08-26T17:46:57.992Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hallamnvip.com","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Mon, 14 Jul 2025 00:39:48 GMT","end":"Sun, 12 Oct 2025 00:39:47 GMT"},"fingerprint":{"sha1":"CA:72:77:14:0A:53:4F:2D:61:2F:25:51:2D:2A:58:35:B0:44:CE:40","sha256":"92:F4:53:FC:47:62:08:B9:55:50:E5:BB:EF:39:E1:CE:2A:E6:9B:F0:A1:A3:DA:69:49:F1:6D:B8:53:F8:2D:DD"}}},"request":{"raw":"GET /static/js/pages-login-index~pages-register-index.a6823919.js HTTP/1.1\r\nHost: hallamnvip.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hallamnvip.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-03T08:46:58.878565Z","times_seen":17687181,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hallamnvip.com/pc/static/js/chunk-vendors.9f25e45a.js","fqdn":"hallamnvip.com","domain":"hallamnvip.com","tld":"com"},"ip":{"addr":"52.69.10.162","port":443,"asn":16509,"as":"AMAZON-02","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hallamnvip.com/pc/","date":"2025-08-26T17:46:58.582Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hallamnvip.com","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Mon, 14 Jul 2025 00:39:48 GMT","end":"Sun, 12 Oct 2025 00:39:47 GMT"},"fingerprint":{"sha1":"CA:72:77:14:0A:53:4F:2D:61:2F:25:51:2D:2A:58:35:B0:44:CE:40","sha256":"92:F4:53:FC:47:62:08:B9:55:50:E5:BB:EF:39:E1:CE:2A:E6:9B:F0:A1:A3:DA:69:49:F1:6D:B8:53:F8:2D:DD"}}},"request":{"raw":"GET /pc/static/js/chunk-vendors.9f25e45a.js HTTP/1.1\r\nHost: hallamnvip.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hallamnvip.com/pc/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 26 Aug 2025 17:46:58 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 12 Aug 2025 06:34:36 GMT\r\nvary: Accept-Encoding\r\netag: W/\"689ae07c-cd152\"\r\nexpires: Wed, 27 Aug 2025 05:46:58 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":840018,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (42931)","md5":"0dbe51b26cb5849727f103646b725b3b","sha1":"2882753aadd36951d6e69d9a5d008eade294aa57","sha256":"0ae3437c6fa805892d6ffcab61ff96ee5ecfca8a3d25e79fd434268c00a98871","sha512":"fb6969414f6d06a00977787108d947ab76447de5dcd527bbef8b1d4f9329c99728cc5e440c1d9599f961269a3c22e00bdf86f4227124635c41da952e5c32992e","ssdeep":"6144:M6pTV830Fqw3UmwXtwTf3/Db3/HbvkNTMfYEvm/40+QhAV1vQz7eLe3WLZG:MkRV3wdwTfHHbkt1i0QvQzx31","tlshash":"d505f78df281b0b60be760b5403f220ba2376959b40ac4d8f675e4d4ad7894e6237f7d","first_seen":"2025-08-26T17:47:27.058438Z","last_seen":"2025-11-14T18:01:22.529238Z","times_seen":3,"resource_available":true,"data":null}},"time_used":261,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":261,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.182hallaht.com/font/config","fqdn":"api.182hallaht.com","domain":"182hallaht.com","tld":"com"},"ip":{"addr":"52.69.10.162","port":443,"asn":16509,"as":"AMAZON-02","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://hallamnvip.com/pc/","date":"2025-08-26T17:46:59.726Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.182hallaht.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 23 Aug 2025 12:51:42 GMT","end":"Fri, 21 Nov 2025 12:51:41 GMT"},"fingerprint":{"sha1":"BA:7B:23:6E:25:17:E2:1F:63:69:41:35:CD:06:BF:4C:44:69:C9:3F","sha256":"52:F4:C5:D6:58:41:F5:9A:D6:93:57:7C:53:93:D7:76:8B:4D:47:BC:C1:64:C4:82:3B:F3:5E:75:E3:84:92:2D"}}},"request":{"raw":"OPTIONS /font/config HTTP/1.1\r\nHost: api.182hallaht.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: content-type,form-type\r\nReferer: https://hallamnvip.com/\r\nOrigin: https://hallamnvip.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 26 Aug 2025 17:47:00 GMT\r\ncontent-length: 0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://hallamnvip.com\r\naccess-control-allow-methods: GET\r\naccess-control-allow-headers: content-type, form-type\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-03T08:46:58.878565Z","times_seen":17687181,"resource_available":true,"data":null}},"time_used":2062,"timings":{"blocked":852,"dns":406,"connect":256,"send":0,"wait":253,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}